23 Commits (1a2ad059a12910120cd997e76ea75e688747ff7d)

Author	SHA1	Message	Date
Sascha Steinbiss	e6044aaf1c	mpm/spm: check for SSSE3 and enable/disable HS ... The new Hyperscan 4.4 API provides a function to check for SSSE3 presence at runtime. This allows us to fall back to non-Hyperscan matchers on systems without SSSE3 even when the suricata executable is built with Hyperscan support. Addresses Redmine issue #2010. Signed-off-by: Sascha Steinbiss <sascha@steinbiss.name> Tested-by: Arturo Borrero Gonzalez <arturo@debian.org>	10 years ago
Justin Viiret	f77bc5195c	spm: handle null ptrs in destroy funcs gracefully ... This will handle minimal DetectEngineCtx structures (used in delayed detect mode) safely, since they don't get SPM global contexts allocated. Also added BUG_ON checks for valid spm_table entries.	10 years ago
Justin Viiret	91011b30a6	spm: add "spm-algo: auto" setting ... This will default to Hyperscan when Suricata is built with Hyperscan support. Otherwise, Boyer-Moore is used by default.	10 years ago
Justin Viiret	6a6d019245	spm: add Hyperscan implementation	10 years ago
Justin Viiret	cce2d114e8	spm: add and use new SPM API ... This new API allows for different SPM implementations, using a function pointer table like that used for MPM. This change also switches over the paths that make use of DetectContentData (which previously used BoyerMoore directly) to the new API.	10 years ago
Justin Viiret	ce408c4d10	spm: add SinglePatternMatchDefaultMatcher ... Allows selecting SPM algorithm with the 'spm-algo' value in the YAML config file.	10 years ago
Jason Ish	796dd5223b	tests: no longer necessary to provide successful return code ... 1 pass, 0 is fail.	10 years ago
Victor Julien	6e3514a444	spm: constify search args	11 years ago
Ken Steele	8f1d75039a	Enforce function coding standard ... Functions should be defined as: int foo(void) { } Rather than: int food(void) { } All functions where changed by a script to match this standard.	12 years ago
Ken Steele	ba1e2ed69d	Fix Boyer Moore Nocase bug where BoyerMooreCtxToNocase was missing. ... Whenever DETECT_CONTENT_NOCASE is set for a BoyerMoore matcher, the function BoyerMooreCtxToNocase() must be called. This call was missing in AppLayerProtoDetectPMRegisterPattern(). Also created BoyerMooreNocaseCtxInit() that calls BoyerMooreCtxToNocase() to make some code cleaner and safer.	12 years ago
Ken Steele	967f7aefde	Store Boyer Moore no case strings in lower case. ... Rather than converting the search string to lower case while searching, convert it to lowercase during initialization. Changes the Boyer Moore search API for take BmCtx Change the API for BoyerMoore to take a BmCtx rather than the two parts that are stored in the context. Which is how it is mostly used. This enforces always calling BoyerMooreCtxToNocase() to convert to no-case. Use CtxInit and CtxDeinit functions to create and destroy the context, even in unit tests.	12 years ago
Ken Steele	a2b502a30c	Formatting change for function call. ... Put open brace { for function on a new line to match coding standard. Changed: int foo(int x) { } to: int foo(int x) { }	13 years ago
Eric Leblond	e176be6fcc	Use unlikely for error treatment. ... When handling error case on SCMallog, SCCalloc or SCStrdup we are in an unlikely case. This patch adds the unlikely() expression to indicate this to gcc. This patch has been obtained via coccinelle. The transformation is the following: @istested@ identifier x; statement S1; identifier func =~ "(SCMalloc|SCStrdup|SCCalloc)"; @@ x = func(...) ... when != x - if (x == NULL) S1 + if (unlikely(x == NULL)) S1	14 years ago
Anoop Saldanha	4d192a6881	update all spm algos to use 16 bit pattern lengths. Should compress a lot of tables	15 years ago
Victor Julien	b73939bcef	Clean up & better check includes to allow Windows to build.	15 years ago
Gerardo Iglesias Galvan	9f4fae5b1a	Fix inconsistent use of dynamic memory allocation	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Pablo Rincon	a152623e11	Bug 130: detect-nocase was not recreating the BmCtx with nocase chars, so it was not working with patterns of capital letters as expected	16 years ago
Victor Julien	53656f0d5d	Remove inline's from spm to satisfy gnu99	16 years ago
Gurvinder Singh	cf2d254cc6	fixed the memory leaks and buffer overflows reported by parfait	17 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	17 years ago
Victor Julien	60685f8b3c	Make unittests run more quiet.	17 years ago
Pablo Rincon	705471e4ee	Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats	17 years ago