17 Commits (05e87bf32ecb047b6da09cfb04771b5992f3d63b)

Author	SHA1	Message	Date
Philippe Antoine	ad713246a9	src: remove double includes ... Keep the unconditional include to be sure it works git grep '#include "' src/*.c | sort | uniq -c | awk '$1 > 1'	4 years ago
Philippe Antoine	4706083929	detect: avoids memory leak on ja3 signature parsing ... If a later keyword enforces a protocol incompatible with ja3	4 years ago
Philippe Antoine	c09ca7d171	clean: use SC_MD5_HEX_LEN instead of magic number 32	4 years ago
Philippe Antoine	f75d18b077	quic: ja3 code deduplication ... As quic transactions are unidirectional, the same function is used to get ja3 from client or from server.	4 years ago
Philippe Antoine	7cb40a1dfc	quic: allow ja3.hash keyword ... Ticket: #5624	4 years ago
Victor Julien	214e466b29	tls: remove incomplete tests ... These tests are incompatible with the incomplete API usage and should have been pcap based tests in the first place.	4 years ago
Victor Julien	e250ef6402	debug: remove empty header	4 years ago
Eric Leblond	debdff0375	detect/tls: fix descriptions ... Most keywords were presented as content modifiers when they were in fact sticky buffers.	4 years ago
Philippe Antoine	eb189e805a	src: use u8_tolower everywhere ... Ticket: 4516 Instead of basic to_lower to get the cast to avoid warning about integer Sames goes for u8_toupper	4 years ago
Jeff Lucovsky	1eeb96696b	general: Cleanup bool usage	5 years ago
Victor Julien	13cebb1857	detect: fix heap overflow issue with buffer setup ... In some cases, the InspectionBufferGet function would be followed by a failure to set the buffer up, for example due to a HTTP body limit not yet being reached. Yet each call to InspectionBufferGet would lead to the matching list_id to be added to the DetectEngineThreadCtx::inspect.to_clear_queue. This array is sized to add each list only once, but in this case the same id could be added multiple times, potentially overflowing the array.	6 years ago
Victor Julien	26bcc97515	detect/keywords: dynamic version part of doc URL	6 years ago
Jeff Lucovsky	be4c6b85de	general: Convert _Bool to bool ... This commit addresses task 3167 and changes usages of '_Bool` to `bool`. The latter is included from `suricata-common.h`	7 years ago
Victor Julien	0771eb1e0e	detect/ja3: print error for one rule only ... Use 'silent error' logic for any other rules using ja3 as well.	7 years ago
Victor Julien	ca5226f0c7	tls/ja3: try to enable ja3 if rule keywords need it	7 years ago
Mats Klepsland	736d35f36e	ja3s-hash: move unittests to tests/	7 years ago
Mats Klepsland	80cee50916	detect: add (mpm) keyword ja3s.hash ... Match on JA3S hash using ja3s.hash keyword, e.g: alert tls any any -> any any (msg:"ja3s.hash test"; ja3s.hash; content:"b26c652e0a402a24b5ca2a660e84f9d5"; sid:1;)	7 years ago