15907 Commits (1fd2c1a37950081200ae87f27aea59a4173a5947)

 

All Branches   

Search

Author	SHA1	Message	Date
Jason Ish	1fd2c1a379	rust/lua: remove lua_int8 feature ... Now that we're fixed to Lua 5.4, the integer size is always 8.	2 years ago
Jason Ish	bc011f2205	lua: use rust crate to vendor (bundle) lua ... Remove lua-dev(el) from all CI tests.	2 years ago
Jason Ish	afb705d278	lua: reset instruction counter before calling script	2 years ago
Jason Ish	1f05a17fb9	lua: misc cleanups in sandbox implementation ... Including: - rename guards - SCMalloc to SCCalloc - remove unused enum - rename public functions to our naming standard	2 years ago
Jo Johnson	ba6a976e06	doc: Initial doc for lua sandbox	2 years ago
Jo Johnson	04adb0c0f6	lua: Add config to allow sandbox bypass	2 years ago
Jo Johnson	e946b20e0f	lua: Add config override for lua sandbox limits	2 years ago
Jo Johnson	8428b0b9d7	lua: Add lua sandbox for detection rules	2 years ago
Jo Johnson	01c8af766c	lua: remove internal references to luajit	2 years ago
Jo Johnson	d5c6c3a21c	lua: build lua by default ... Ticket: #4776 [Edits by Jason Ish] - Add Lua in CI where needed - Disable Lua for builds that don't have Lua 5.4	2 years ago
Jo Johnson	712496bb3f	lua: Remove luajit support ... lua 5.4 support is not available in luajit Ticket: #4776	2 years ago
Jo Johnson	586c92d9d5	lua: require lua 5.4 ... github-ci: Disable lua on debian 10 as it doesn't have Lua 5.4. Ticket: #4776	2 years ago
Victor Julien	e0411878fc	github-actions: bump scan-build to Ubuntu 24.04 / clang 18	2 years ago
Jason Ish	6e2a1ec5d6	misc: move prototypes to correct header ... Move prototypes for functions that exist in util-port-interval-tree.c from detect-engine-port.h to util-port-interval-tree.h. Fix header guard names while there.	2 years ago
jason taylor	47d6c3a3ab	doc: add source verification docs ... Ticket: #6908 Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
Philippe Antoine	b91e7fe2ae	detect/http-server-body: clean up tests ... Ticket: 4083	2 years ago
Philippe Antoine	ce16a56a1f	detect: unify functions for multi-buffer ... Ticket: 6575 Multi buffers keywords now use a single registration function DetectAppLayerMultiRegister with a GetBuffer argument. This GetBuffer function pointer is similar to the ones used by single-buffer keyword, except that it takes an additional parameter which is the index of the buffer to get. Under the hood, an anonymous union between these 2 functions pointers types is used. In the end, this deduplicates code, especially the calls to DetectEngineContentInspection	2 years ago
Philippe Antoine	55bc5f2290	detect/template: make template use DetectEngineInspectBufferGeneric	2 years ago
Philippe Antoine	ce9bfba76a	ci: fix and test with Wunused-macros ... Ticket: 6937	2 years ago
Philippe Antoine	b3eb1c4f81	clean: remove unused struct definitions ... Found with git grep "typedef struct" src/ | awk '{print $3}' | sort | uniq | sed 's/_$//' | while read i; do echo -n $i; git grep $i | wc -l; done | awk '$2 < 3' Ticket: 4083	2 years ago
Richard McConnell	fc2e49f84a	app-layer: Set sc_errno upon error return ... Bug: https://redmine.openinfosecfoundation.org/issues/6782 Callers to these allocators often use ``sc_errno`` to provide context of the error. And in the case of the above bug, they return ``sc_errno``, but as it has not been set ``sc_errno = 0; == SC_OK``. This patch simply sets this variable to ensure there is context provided upon error.	2 years ago
Victor Julien	52a008e358	detect/http-host: clean up tests	2 years ago
Victor Julien	6c937a9243	pcap-log: use correct pkthdr size for limit enforcement ... The on-disk pcap pkthdr is 16 bytes. This was calculated using `sizeof(struct pcap_pkthdr)`, which is 24 bytes on 64 bit Linux. On Macos, it's even worse, as a comment field grows the struct to 280 bytes. Address this by hardcoding the value of 16. Bug: #7037.	2 years ago
Victor Julien	9b980b18a8	pcap-log: minor cleanups	2 years ago
Victor Julien	ea8c283dc7	pcap-log: minor cleanup ... Use same pointer to one location consistently.	2 years ago
Victor Julien	8c4b96129f	pcap-log: always pass 'comp' to PcapWrite ... The variable is always available.	2 years ago
Victor Julien	5aa00aae0a	pcap-log: rename connp to comp ... Matches other variable names for the compression settings.	2 years ago
Victor Julien	3eb74c9992	pcap-log: don't check variable that is never set ... `rotate` was never modified.	2 years ago
Victor Julien	5455799795	time: only consider packet threads ... In offline mode, a timestamp is kept per thread, and the lowest timestamp of the active threads is used. This was also considering the non-packet threads, which could lead to the used timestamp being further behind that needed. This would happen at the start of the program, as the non-packet threads were set up the same way as the packet threads. This patch both no longer sets up the timestamp for non-packet threads as well as not considering non-packet threads during timestamp retrieval. Fixes: 6f560144c1 ("time: improve offline time handling") Bug: #7034.	2 years ago
Shivani Bhardwaj	0aaec69303	flow: use debug validate macro	2 years ago
Shivani Bhardwaj	d6b63b38ca	flow: add defensive check on memuse	2 years ago
Shivani Bhardwaj	7144b9421d	tcp: use bool wherever possible	2 years ago
Shivani Bhardwaj	f4b8f706fa	flow: use bool wherever possible	2 years ago
Shivani Bhardwaj	2c751dba73	flow: remove unneeded else	2 years ago
Shivani Bhardwaj	7bd9f88ecd	flow: minor loop cleanups	2 years ago
Philippe Antoine	fd262df457	http: fix nul deref on memcap reached ... HttpRangeOpenFileAux may return NULL in different cases, including when memcap is reached. But is only caller did not check it before calling HttpRangeAppendData which would dereference the NULL value. Ticket: 7029	2 years ago
Shivani Bhardwaj	f073cf2350	eve/schema: add tls.subjectaltname fields ... Feature 5234	2 years ago
Shivani Bhardwaj	232c44eb4a	output/json: log tls subjectaltname ... Feature 5234	2 years ago
Shivani Bhardwaj	719fda3967	doc: add description about tls.subjectaltname ... Feature 5234	2 years ago
Shivani Bhardwaj	83af42cc03	detect/tls-subjectaltname: add sticky buffer ... Add TLS SubjectAltName sticky buffer. It is implemented as multi-buffer. Feature 5234	2 years ago
Shivani Bhardwaj	3a1c12414a	tls: store list of subject alternative names ... So far, the SANs were available as a part of IssuerDN via x509_parser crate but SANs were not available to the SSLState* to be directly used to setup and match against a sticky buffer. Expose it to SSLStateConnp. Feature 5234	2 years ago
Jason Ish	8560564657	rust: rename .cargo/config to .cargo/config.toml ... Addresses this warning from the Rust compiler: warning: `../rust/.cargo/config` is deprecated in favor of `config.toml` note: if you need to support cargo 1.38 or earlier, you can symlink `config` to `config.toml`	2 years ago
Jason Ish	6d2d8c26d3	detect-lua: small cleanups ... - remove unused headers - cleanup/rename flags	2 years ago
Jason Ish	224f55ba21	detect/lua: don't treat a crashed script as no match ... If a rule script crashed, the return value was treated as a no match. This would make a negation of the rule match and alert. Instead cleanup and exit early if the rule script crashed and don't run negation logic. A stat, detect.lua.errors has been added to count how many times a script crashes. Also consolidates the running of the Lua script and return value handling to a common function. Bug: #6940	2 years ago
Philippe Antoine	f2c39fc87b	ftp: protocol detection avoiding FP on POP3	2 years ago
Philippe Antoine	2c305ba37e	pop3: protocol detection ... Ticket: #6366	2 years ago
Philippe Antoine	ed895c04ff	smtp: exit data mode if data command was rejected ... And the server was advertising pipelining. Ticket: 6906	2 years ago
Philippe Antoine	dfdf2e2d1a	detect: checks for space in http.protcol keyword	2 years ago
Philippe Antoine	7582b18a9f	http: configures libhtp to allow spaces in uri ... Ticket: #2881	2 years ago
Giuseppe Longo	b728916ca6	decode/gre: decode arp packets	2 years ago