detect/dcerpc: convert to v2 inspect API

pull/5635/head
Victor Julien 5 years ago
parent db0665bccc
commit 9f8a8f368a

@ -63,11 +63,9 @@ static void DetectDceIfaceRegisterTests(void);
#endif #endif
static int g_dce_generic_list_id = 0; static int g_dce_generic_list_id = 0;
static int InspectDceGeneric(ThreadVars *tv, static int InspectDceGeneric(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx,
DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const Signature *s, Flow *f,
const Signature *s, const SigMatchData *smd, uint8_t flags, void *alstate, void *txv, uint64_t tx_id);
Flow *f, uint8_t flags, void *alstate,
void *txv, uint64_t tx_id);
/** /**
* \brief Registers the keyword handlers for the "dce_iface" keyword. * \brief Registers the keyword handlers for the "dce_iface" keyword.
@ -86,25 +84,23 @@ void DetectDceIfaceRegister(void)
g_dce_generic_list_id = DetectBufferTypeRegister("dce_generic"); g_dce_generic_list_id = DetectBufferTypeRegister("dce_generic");
DetectAppLayerInspectEngineRegister("dce_generic", DetectAppLayerInspectEngineRegister2(
ALPROTO_DCERPC, SIG_FLAG_TOSERVER, 0, InspectDceGeneric); "dce_generic", ALPROTO_DCERPC, SIG_FLAG_TOSERVER, 0, InspectDceGeneric, NULL);
DetectAppLayerInspectEngineRegister("dce_generic", DetectAppLayerInspectEngineRegister2(
ALPROTO_SMB, SIG_FLAG_TOSERVER, 0, InspectDceGeneric); "dce_generic", ALPROTO_SMB, SIG_FLAG_TOSERVER, 0, InspectDceGeneric, NULL);
DetectAppLayerInspectEngineRegister("dce_generic", DetectAppLayerInspectEngineRegister2(
ALPROTO_DCERPC, SIG_FLAG_TOCLIENT, 0, InspectDceGeneric); "dce_generic", ALPROTO_DCERPC, SIG_FLAG_TOCLIENT, 0, InspectDceGeneric, NULL);
DetectAppLayerInspectEngineRegister("dce_generic", DetectAppLayerInspectEngineRegister2(
ALPROTO_SMB, SIG_FLAG_TOCLIENT, 0, InspectDceGeneric); "dce_generic", ALPROTO_SMB, SIG_FLAG_TOCLIENT, 0, InspectDceGeneric, NULL);
} }
static int InspectDceGeneric(ThreadVars *tv, static int InspectDceGeneric(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx,
DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const Signature *s, Flow *f,
const Signature *s, const SigMatchData *smd, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
Flow *f, uint8_t flags, void *alstate,
void *txv, uint64_t tx_id)
{ {
return DetectEngineInspectGenericList(tv, de_ctx, det_ctx, s, smd, return DetectEngineInspectGenericList(
f, flags, alstate, txv, tx_id); NULL, de_ctx, det_ctx, s, engine->smd, f, flags, alstate, txv, tx_id);
} }
/** /**

Loading…
Cancel
Save