Philippe Antoine
854201703e
util/var: add NULL check in VarNameStoreRegister
...
And check return value in entropy keyword setup
1 year ago
Philippe Antoine
6d703af505
detect: fix null deref with entropy keyword
...
Ticket: 7959
Usage of entropy with base64_data led to NULL dereference
1 year ago
Jeff Lucovsky
9f32550e18
detect/entropy: Ensure entropy matcher has flow
...
Make sure that the flow is available to the entropy matcher so it can
handle content that's not anchored to a sticky buffer.
Issue: 7838
1 year ago
Jeff Lucovsky
a292670443
detect/entropy: Add calculated entropy value to flowvars
...
When the entropy keyword is used, record the calculated entropy value to
a flow variable for logging use.
1 year ago
Philippe Antoine
a2b5225612
rust: bindgen SCSigMatchAppendSMToList
...
Ticket: 7667
1 year ago
Jeff Lucovsky
dc994effd6
detect/entropy: Correct slot for url initialization
...
Correct the sigmatch slot for url initialization.
1 year ago
Philippe Antoine
0024de5e9e
src: new file detect-engine-buffer.h
...
Taken from detect-engine.h so that we can bindgen this smaller
unit.
2 years ago
Jeff Lucovsky
fdc0ac590e
detect/entropy: Add entropy keyword
...
This commit adds keyword/build support for the entropy keyword. The
entropy keyword compares an entropy value with a value calculated
according to the Shannon entropy on the available content.
Issue: 4162
2 years ago