mirror of https://github.com/OISF/suricata
detect: fail properly on invalid transform pcrexform
parent
57d0f4bb6f
commit
ac76ff9e47
@ -0,0 +1,67 @@
|
||||
/* Copyright (C) 2020 Open Information Security Foundation
|
||||
*
|
||||
* You can copy, redistribute or modify this Program under the terms of
|
||||
* the GNU General Public License version 2 as published by the Free
|
||||
* Software Foundation.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* version 2 along with this program; if not, write to the Free Software
|
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
||||
* 02110-1301, USA.
|
||||
*/
|
||||
|
||||
#include "../suricata-common.h"
|
||||
|
||||
#include "../detect-engine.h"
|
||||
|
||||
#include "../detect-transform-pcrexform.h"
|
||||
|
||||
#include "../util-unittest.h"
|
||||
|
||||
/**
|
||||
* \test signature with an invalid pcrexform value.
|
||||
*/
|
||||
|
||||
static int DetectTransformPcrexformParseTest01 (void)
|
||||
{
|
||||
DetectEngineCtx *de_ctx = DetectEngineCtxInit();
|
||||
FAIL_IF_NULL(de_ctx);
|
||||
|
||||
Signature *sig = DetectEngineAppendSig(de_ctx,
|
||||
"alert tcp any any <> any 1 pcrexform:\"[\";");
|
||||
FAIL_IF_NOT_NULL(sig);
|
||||
|
||||
DetectEngineCtxFree(de_ctx);
|
||||
PASS;
|
||||
}
|
||||
|
||||
/**
|
||||
* \test signature with a valid pcrexform value.
|
||||
*/
|
||||
|
||||
static int DetectTransformPcrexformParseTest02 (void)
|
||||
{
|
||||
DetectEngineCtx *de_ctx = DetectEngineCtxInit();
|
||||
FAIL_IF_NULL(de_ctx);
|
||||
|
||||
Signature *sig = DetectEngineAppendSig(de_ctx,
|
||||
"alert http any any -> any any (msg:\"HTTP with pcrexform\"; http.request_line; pcrexform:\"[a-zA-Z]+\\s+(.*)\\s+HTTP\"; content:\"/z4d4kWk.jpg\"; sid:1;)");
|
||||
FAIL_IF_NULL(sig);
|
||||
|
||||
DetectEngineCtxFree(de_ctx);
|
||||
PASS;
|
||||
}
|
||||
|
||||
/**
|
||||
* \brief this function registers unit tests for DetectTransformPcrexform
|
||||
*/
|
||||
void DetectTransformPcrexformRegisterTests(void)
|
||||
{
|
||||
UtRegisterTest("DetectTransformPcrexformParseTest01", DetectTransformPcrexformParseTest01);
|
||||
UtRegisterTest("DetectTransformPcrexformParseTest02", DetectTransformPcrexformParseTest02);
|
||||
}
|
Loading…
Reference in New Issue