6314 Commits (3c788a8c176fd2980cdb51db7d5c23fc1749280a)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	3c788a8c17	flowbits: remove unused debugging code	10 years ago
Victor Julien	53af48f021	flowbits: fix memory leak ... Flowbits removed from a flow by 'toggle' or 'unset' were not actually freed, leading a small memory leak.	10 years ago
Victor Julien	0dbbe016d6	flowbits: optimize set and remove	10 years ago
Andreas Herz	c467c39b61	build-info: workaround special _FORTIFY_SOURCE defines ... On systems like Gentoo where _FORTIFY_SOURCE is already defined like FORTIFY_SOURCE=((defined __OPTIMIZE && OPTIMIZE > 0) ? 2 : 0) the use within the printf function (%d) won't result in the correct value and we end up with 'defined' undeclared compile error. This workaround makes sure that just the resolved value is checked and then printed.	10 years ago
Victor Julien	154891cf26	pcre: work around harmless coverity warnings	10 years ago
Victor Julien	893b01ed0d	bpf: fix memleak on unusual error (CID 1197757)	10 years ago
Victor Julien	6228f5f689	lua: if pkg-config fails, try -llua	10 years ago
Victor Julien	9858ae41be	configure: OS X fixes ... Remove unnecessary -lpthread from tests. Make linker warnings non-fatal with -Werror.	10 years ago
Victor Julien	b25bd2e180	http: fix NULL deref on certain out of memory conditions	10 years ago
Victor Julien	45812c32ad	runmode: fix memleak on live modes setup (CID 1197760)	10 years ago
Victor Julien	b9ee86fdb4	detect-engine: free memory in error conditions (CID 1351210)	10 years ago
Victor Julien	0dd81b85d4	multi-tenants: improve error handling (CID 1312702)	10 years ago
Victor Julien	fb90358e17	conf: explicitly ignore retval (CID 1353490)	10 years ago
Victor Julien	f5ce7549be	unix-manager: fix memleak in error case (CID 1353491)	10 years ago
Victor Julien	e51707be90	pcre: blacklist 8.35 for JIT use (issue #1693)	10 years ago
Victor Julien	3f3ed71fe7	jansson: cleanup JSON_ESCAPE_SLASH use	10 years ago
Victor Julien	654829f969	unix-socket: optimize response sends ... Instead of sending responses to clients in small chunks, send it in one big chunk. For this the JSON message is first serialized into a MemBuffer before sending.	10 years ago
Victor Julien	40cf1f8ef7	json: make membuffer helper public ... Make json_t to MemBuffer helper public so it can reused.	10 years ago
Victor Julien	acaf8a84e8	stats: fix dump-counters when no loggers are active	10 years ago
Victor Julien	14030239f8	unix-socket: restore dump-counters functionality ... Create a eve.stats like output for dump-counters.	10 years ago
Victor Julien	310e8fcbf8	stats: export StatsToJSON	10 years ago
Victor Julien	ffdfb6a8f0	json-stats: split out json generation ... Split out JSON generation logic so the code becomes reusable.	10 years ago
Victor Julien	c446abeb47	jansson: include in suricata-common.h	10 years ago
Andreas Herz	8c0e575063	configure: warn if libpcre 8.35 is used	10 years ago
Travis Green	72c9debbd6	yaml: disable rules by default ... Change to "disable by default" rulefiles	10 years ago
Tom DeCanio	8f059b2841	output-json-dns: add logging of NS answer record content.	10 years ago
Andreas Herz	09fe1c62d8	detect-tls-version: fix small resource leak	10 years ago
Jason Ish	3d2834a232	json: use top-level sensor-name if provided. ... Currently the default configuration file contains a "sensor-name" at the root of the configuration file, however, eve-log will only use it if its specified under eve-log. Now we will look for it at the eve-log, if present we'll use it but log a deprecation warning, if its not present we'll look for sensor-name at the root of the configuration.	10 years ago
Victor Julien	5f39728509	ssh: fix string handling in unittest	10 years ago
Victor Julien	9015fb5a7f	travis: set CFLAGS to error on cc warnings	10 years ago
Victor Julien	8bb1cf08ef	eve: fix mishandling of big messages ... When the string representation of a JSON message grew bigger than 64k, the JSON record would just be truncated. This lead to errors in the parser(s) of the JSON stream. This patch changes the buffer logic to grow the buffer on demand.	10 years ago
Victor Julien	6c30f7bdbb	counters: fix thread stats delta logging ... Just like with the global stats, store prev values. Fixes delta logging.	10 years ago
Victor Julien	0138bf5605	qa: add leak sanitzer suppression	10 years ago
Victor Julien	1c3a0434ca	wirefuzz: exit with error code on more issues	10 years ago
Victor Julien	9d49b828a6	wirefuzz: logdir handling improvement	10 years ago
Victor Julien	8626eccf58	wirefuzz: remove obsolete stream mem check	10 years ago
Victor Julien	048e538828	wirefuzz: add -N option to count complete passes	10 years ago
Victor Julien	7299388d05	wirefuzz: improve logfile cleanup	10 years ago
Victor Julien	3d0542405d	wirefuzz: enforce -n option per run	10 years ago
Victor Julien	0d77c4d560	wirefuzz: add -S option for exclusive rule load	10 years ago
Victor Julien	0a22ba7e23	http: fix multipart body tracking slowdown ... Optimize HTTP multipart body parsing. Big records that were not files could slow down Suricata. The reason was that the body tracker was not moved forward. This lead to growing body buffers, which were expensive wrt memory and inspection. This patch add logic to move the tracker forward in this case.	10 years ago
Victor Julien	4ee20f2649	asan: fix reputation code include	10 years ago
Victor Julien	ee5fd4613b	tls-sni: fix uninitialized memory use ... On bad traffic the parser could allocated memory that was not intialized. This was later used in the JSON output logging as a valid null terminated string.	10 years ago
Victor Julien	4086938f1e	pool: fix memory leak ... Due to pointer size mishandling, the pool code could consider a block of memory inside the 'preallocated' block. It would then not free the block.	10 years ago
Victor Julien	b93a302a5b	stream: improve StreamTcpSegmentForEach for IPS ... StreamTcpSegmentForEach would only return ACK'd segments. This lead to missing stream data in alerts when running in IPS mode. This patch changes the behavior for IPS. All segments are iterated now, also the non-ACK'd ones. For IDS mode the behavior is unchanged.	10 years ago
Victor Julien	3a9bcd6a53	qa: add --simulate-ips option ... This option forces the engine in 'IPS' mode. This is useful for testing some IPS code paths based on pcaps.	10 years ago
Victor Julien	6152d1abca	eve: fix stream payload logging wrong direction ... In the EVE stream payload logging the IPS path logged the wrong dir. Both IDS and IPS can take the same path as the detection engine inspects in the same direction in both cases, so the alert is also generated in the same direction. Bug #1684	10 years ago
Maxtors	4b8bd9dfc9	Added checking of negated "totals" and "threads" config values for stats.	10 years ago
Mats Klepsland	6f79137971	lua: expose TLS certificate chain to lua ... Expose TLS certificate chain to lua through TlsGetCertChain().	10 years ago
Tom DeCanio	559747e325	file-store: add force-filestore configuration option to enable writing all ... extracted files to filesystem.	10 years ago