83 Commits (33f6a1629092dd8120eb591d2644efec0e2e4ba9)

Author	SHA1	Message	Date
Victor Julien	b31ffde6f4	output: remove error codes from output	4 years ago
Victor Julien	39f5c7f56a	error: use SC_EINVAL for invalid input	4 years ago
Philippe Antoine	1f066cbbe8	unittest: fix unneeded includes as per cppclean ... Especially because there is conditional inclusion from a header	4 years ago
Victor Julien	e250ef6402	debug: remove empty header	4 years ago
Benjamin Wilkins	57ef80f5ec	lua: Expose byte extract to lua match scripts ... Allow lua match scripts to access variables defined in rule by byte_extract or byte_math Issue: 2871	4 years ago
Philippe Antoine	83a8cd80b2	detect: remove wrappers around DetectEngineInspectGenericList	4 years ago
Philippe Antoine	02f2602dde	src: rework includes as per cppclean	4 years ago
Philippe Antoine	b8524e70d9	detect: change InspectEngineFuncPtr2 to return uint8_t	4 years ago
Victor Julien	84448d3bae	tests: remove unnecessary flow locks ... Added once to satisfy debug validation, but we don't mix unittests and debug validation anymore. sed -i -E '/.*FLOWLOCK_.*LOCK/d' *.c	4 years ago
Victor Julien	a14854bce9	detect: keyword list to hash to improve perf ... Since the switch to pcre2 this was much more heavily used, which would lead to measurable time spent in list handling.	4 years ago
Benjamin Wilkins	e21a50fee6	lua: Fix SCRule functions for match scripts ... Save Signature structure to lua register so SCRule functions can work in match scripts, where no PacketAlert is present Resolves Feature #2450	5 years ago
Victor Julien	33c8fda795	detect/lua: use BIT_U32 for flags	5 years ago
Jeff Lucovsky	1eeb96696b	general: Cleanup bool usage	5 years ago
Philippe Antoine	707f027231	protos: renaming ALPROTO_HTTP* constants ... Having now ALPROTO_HTTP1, ALPROTO_HTTP2 and ALPROTO_HTTP Run with 3 sed commands git grep ALPROTO_HTTP | cut -d: -f1 | uniq | xargs sed -i -e 's/ALPROTO_HTTP/ALPROTO_HTTP1/g' git grep ALPROTO_HTTP12 | cut -d: -f1 | uniq | xargs sed -i -e 's/ALPROTO_HTTP12/ALPROTO_HTTP2/g' git grep ALPROTO_HTTP1_ANY | cut -d: -f1 | uniq | xargs sed -i -e 's/ALPROTO_HTTP1_ANY/ALPROTO_HTTP/g' and then running clang-format	6 years ago
Philippe Antoine	c8dbe24fb6	proto: introduce signature protocol, as extension to flow protocol ... AppProtoEquals function allows to check if a flow protocol matches a signature protocol	6 years ago
Jeff Lucovsky	1c68f4aed6	lua/test: Test cases using SC prefix ... This commit adds paired test cases to ensure that the SC variant of the entry points are tested.	6 years ago
Victor Julien	84385549fe	detect: remove unused arg from generic list inspect	6 years ago
Victor Julien	15c84bf3c6	detect/lua: convert to v2 inspect API	6 years ago
Victor Julien	6ab323d323	detect: hide RegisterTests behind ifdef UNITTESTS ... Update all callers to more aggressively use UNITTESTS guards as well.	6 years ago
Shivani Bhardwaj	4ed72addf3	src: remove multiple uses of atoi ... atoi() and related functions lack a mechanism for reporting errors for invalid values. Replace them with calls to the appropriate ByteExtractString* functions. Partially closes redmine ticket 3053.	6 years ago
Victor Julien	26bcc97515	detect/keywords: dynamic version part of doc URL	6 years ago
Jeff Lucovsky	e8ad67fa4f	detect/lua: Unregister object during free ... This commit removes the registration for the object being freed.	6 years ago
Jeff Lucovsky	d3a65fe156	detect: Provide `de_ctx` to free functions ... This commit makes sure that the `DetectEngineCtx *` is available to each detector's "free" function.	6 years ago
Shivani Bhardwaj	d801c3e588	detect: Make keyword description consistent ... Closes redmine ticket #3137.	7 years ago
Shivani Bhardwaj	b5b429c288	detect: Add missing keyword URLs and description ... Add missing keyword URLs and their description. Fix the ones that were incorrect. Partially closes redmine ticket #2974.	7 years ago
Victor Julien	579cc9f02b	const: constify decoder, app-layer, detect funcs	7 years ago
Victor Julien	14896365ef	detect: remove Threadvars argument from API calls ... Remove it as it's (almost) never used. If it is really needed it can be accessed through DetectEngineThreadCtx::tv as well.	7 years ago
Eric Leblond	63f2032ed6	doc: fix way to build URL	7 years ago
Eric Leblond	f48ac1860a	detect-lua: implement sticky buffer ... This patch implement an option named 'buffer' that can be used in the init function of a lua signature: function init (args) local needs = {} needs["buffer"] = tostring(true) return needs end With this, the lua script will get access to the sticky buffer content.	7 years ago
Eric Leblond	62a11dd3ed	detect-lua: fix DNP3 value	7 years ago
Victor Julien	9c2c258f2b	uricontent: move debug func into unittests ... Cleanup header, which lead to the app-layer-htp.h header needing to be added in a few other places.	8 years ago
Andreas Herz	2e8678a5ff	docs: replace redmine links and enforce https on oisf urls	9 years ago
Victor Julien	5c01b40931	tests: update tests for app-layer changes	9 years ago
Victor Julien	ab1200fbd7	compiler: more strict compiler warnings ... Set flags by default: -Wmissing-prototypes -Wmissing-declarations -Wstrict-prototypes -Wwrite-strings -Wcast-align -Wbad-function-cast -Wformat-security -Wno-format-nonliteral -Wmissing-format-attribute -funsigned-char Fix minor compiler warnings for these new flags on gcc and clang.	9 years ago
Victor Julien	d304be5bc3	detect: register progress in inspect engines ... Register required progress so we can stop inspecting as soon as the progress isn't far enough yet.	9 years ago
Victor Julien	2f30adb08a	detect-lua: setup cleanup, fixing a potential int issue	10 years ago
Victor Julien	22f3205664	var-names: expose outside of detect engine ... Until now variable names, such as flowbit names, were local to a detect engine. This made sense as they were only ever used in that context. For the purpose of logging these names, this needs a different approach. The loggers live outside of the detect engine. Also, in the case of reloads and multi-tenancy, there are even multiple detect engines, so it would be even more tricky to access them from the outside. This patch brings a new approach. A any time, there is a single active hash table mapping the variable names and their id's. For multiple tenants the table is shared between tenants. The table is set up in a 'staging' area, where locking makes sure that multiple loading threads don't mess things up. Then when the preparing of a detection engine is ready, but before the detect threads are made aware of the new detect engine, the active varname hash is swapped with the staging instance. For this to work, all the mappings from the 'current' or active mapping are added to the staging table. After the threads have reloaded and the new detection engine is active, the old table can be freed. For multi tenancy things are similar. The staging area is used for setting up until the new detection engines / tenants are applied to the system. This patch also changes the variable 'id'/'idx' field to uint32_t. Due to data structure padding and alignment, this should have no practical drawback while allowing for a lot more vars.	10 years ago
Victor Julien	775e182531	detect: remove AppLayerMatch API call	10 years ago
Victor Julien	d9a300cd8c	detect: move lua smtp support to dynamic list	10 years ago
Victor Julien	a10b2fdecf	detect: make ssh detection use dynamic list	10 years ago
Victor Julien	4ae4fd0802	lua: use tls_generic list for ssl/tls	10 years ago
Victor Julien	cfdd934aba	dnp3: dynamic buffers/lists	10 years ago
Victor Julien	d9b3ae6cd6	dns: use dynamic buffers	10 years ago
Victor Julien	6f867c3c73	http_raw_uri: dynamic buffer	10 years ago
Victor Julien	ee55aefa1c	http_client_body: dynamic buffer	10 years ago
Victor Julien	e7d5e845c7	http_header / http_raw_header: dynamic buffers	10 years ago
Victor Julien	67b7d9734e	http_cookie: dynamic buffer	10 years ago
Victor Julien	54604c7bf2	http_user_agent: dynamic buffer	10 years ago
Victor Julien	6346a074a7	http_uri: dynamic buffer ... Clean up tests	10 years ago
Victor Julien	6bd37611ee	file_data: dynamic buffer	10 years ago