13820 Commits (6da066cc534a58ed0f35eb18864247ffae81a29e)

 

All Branches   

Search

Author	SHA1	Message	Date
Jason Ish	6da066cc53	github-ci/macos: don't force cbindgen ... We want to use binary from the cache if available.	2 years ago
Jason Ish	0dddfbc8e6	github-ci: cache RPMs on dnf distros	2 years ago
Jason Ish	814a76a217	github-ci: better .cargo caching	2 years ago
Philippe Antoine	086b28da3d	http2: fix decompression buffering ... It was not enough to set Cursor position to 0, also its inner Vec should be cleared. This way, a new input gets written at the beginning of the Cursor and its inner Vec... Ticket: #5691	2 years ago
Philippe Antoine	c6349d3cfc	http2: support padded data frames ... Ticket: #5691	2 years ago
Victor Julien	2edfff7a0c	src: unify how warnings specify ticket id's	2 years ago
Jason Ish	0c00f28ebc	afpacket/netmap: warn about mixed ips, ids/tap deprecation ... Suricata already logs if AF_PACKET or Netmap are running in a mixed IPS and IDS/TAP mode. As the behavior is undefined when these modes are mixed, it is best to deprecate and to not allow this behavior. For now warn that it will be unsupported and fail in Suricata 8. Ticket: 5587	2 years ago
Philippe Antoine	222f2ac1c5	ci: remove unnecessary write permission to github workflow	2 years ago
Philippe Antoine	7fd3aaa81c	ci: build with -Werror for -Wimplicit-int-conversion ... So that CI gets red	2 years ago
Philippe Antoine	3e4f58e375	detect: fix memory leak when parsing signature ... Ticket: #5529	2 years ago
Victor Julien	1e653cc36d	profiling: fix includes	2 years ago
Todd Mortimer	15c77be937	swf-decompression: Disable by default. ... Add an entry to the upgrade guide noting the change. Ticket: #5632	2 years ago
Victor Julien	50b858aa49	ipfw: fix missing include	2 years ago
Victor Julien	f3f2807202	netmap: fix missing include	2 years ago
Jason Ish	dcd9dabc70	classification: continue processing on parse error ... Instead of returning on the first line that fails to parse, log the error and continue instead of returning. The fail fast makes sense in test mode, but not in a normal run mode where you don't want one bad line to abort processing the whole file. This will still fail out in test mode. Related issue: 4554	2 years ago
Philippe Antoine	ad713246a9	src: remove double includes ... Keep the unconditional include to be sure it works git grep '#include "' src/*.c | sort | uniq -c | awk '$1 > 1'	2 years ago
Philippe Antoine	9af0dafbad	src: fix some include orders ... So as to be able to get include removal right	2 years ago
Philippe Antoine	cc23923de1	src: remove obsolete comment ... Should have been removed along by commit 82dba07579	2 years ago
Philippe Antoine	62352ad030	src: fix remaining cppclean warnings	2 years ago
Philippe Antoine	1f066cbbe8	unittest: fix unneeded includes as per cppclean ... Especially because there is conditional inclusion from a header	2 years ago
Philippe Antoine	662f0ce503	util: fix includes for util-memcmp ... u8_tolower is now in suricata-common.h Fixes commit 19e94e93fa	2 years ago
Philippe Antoine	7cfc45a6f8	ci: adds one build with hyperscan	2 years ago
Philippe Antoine	fbccd74f89	ci: adds build with luajit	2 years ago
Philippe Antoine	e85f3916e3	src: fix integer warnings ... and adds defrag debug validations	2 years ago
Philippe Antoine	b5147189ae	tls: fix off by one in supported versions extension ... Ticket: #5663	2 years ago
Jeff Lucovsky	a4239d433a	detect/bsize: Validate bsize values after parsing ... Issue: 2982 This commit moves bsize validation with respect to content matches to the post-parse validation stage. This allows bsize to consider all content-related values, including those that follow the bsize keyword.	2 years ago
Jeff Lucovsky	9d73777a46	bsize/general: Remove unnecessary includes ... This commit removes unused/commented out #include lines.	2 years ago
Jeff Lucovsky	8b41754acd	add to general: Typo fixup	2 years ago
Jeff Lucovsky	8df6701186	netmap: Fix include file issues	2 years ago
Jeff Lucovsky	197ad51138	doc: Update bsize documentation ... This commit updates the bsize documentation 1. Describe what happens when "content" immediately precedes "bsize" 2. Include the operators and 3. Include examples using the operators.	2 years ago
Jeff Lucovsky	ecfdc24e08	detect/bsize: Semantic validation of bsize values ... This commit adds validation of the bsize value(s) with the available buffer size. Signatures are flagged if the bsize and buffer size are incompatible. Issue: 3682	2 years ago
Jeff Lucovsky	25c0a6ea7c	tests/bsize: Test cases with preceding content ... This commit adds test cases that validate behavior when "content" immediately precedes "bsize".	2 years ago
Jeff Lucovsky	c91b987732	general: Typo fixup	2 years ago
Jeff Lucovsky	115297c016	detect/content: Use SCCalloc instead of malloc/memset ... This commit replaces a SCMalloc/memset with SCCalloc	2 years ago
Jeff Lucovsky	7eb5fb1826	detect/content: Consider distance in validation ... Ticket: 2982 This commit validates that the content usage in a rule will not exceed the dsize value. Values of distance that cause the right edge to be exceeded are considered an error and the signature will be rejected.	2 years ago
Shivani Bhardwaj	58e5033a44	util/base64: use padding var for calculations	2 years ago
jason taylor	9dc8fffe05	userguide: update tos keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	1d9b91a987	userguide: update fragoffset keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	7c73144988	userguide: update fragbits information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	4be9793e36	userguide: update geoip information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	e8eba6e4a1	userguide: update id keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	cfd0da133e	userguide: update ipv6.hdr keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	150a04b597	userguide: update ipv4.hdr keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	298f59c2ba	userguide: update ip_proto keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	6226492976	userguide: update sameip keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	f97ba44339	userguide: update ipopts keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
jason taylor	9b4e6e5802	userguide: update ttl keyword information ... Signed-off-by: jason taylor <jtfas90@gmail.com>	2 years ago
Philippe Antoine	ce710181f6	doc: update doc for HTTP file.data to server ... Ticket: #4144 Completes e587f6792a	2 years ago
Philippe Antoine	e1ee401a12	quic: use VecDeque ... Ticket: #5637	2 years ago
Victor Julien	ca6ce935b5	security: disable setrlimit with asan ... Various parts of ASAN will require creation of threads. At least LSAN reporting and ASAN stack traces require this. Detect if we run with ASAN and bypass the noproc setting with a warning. Bug: #5661.	2 years ago