Commit Graph

56 Commits (743ed7626c182e30a9ed0b9cad467c20418cd473)

Author SHA1 Message Date
Victor Julien 743ed7626c Fix potential null deref (introduced a few commits ago) found by clang. 14 years ago
Victor Julien 16e4e3fe50 Fix request-body-limit option for libhtp config. 14 years ago
Victor Julien 39a5348d2b Remove dead pcre code. 14 years ago
Victor Julien 6ebe7b7cd3 Change the way the request body limit is enforced. 14 years ago
Anoop Saldanha 5c6a65dc58 support relative modifiers for http_client_body. Introduce body processing engine in detect-engine-hcbd.[ch] 14 years ago
Victor Julien bc55fb27dc Compiler warning fix for memory macro's. Small layout changes. 15 years ago
Pablo Rincon 06a65cb460 moving http_client_body logic to use it per transactions. Adding unittests 15 years ago
Victor Julien b8fec77f37 Fix tcp connections that are reset (RST packet) not always inspecting the reassembled stream. Update transaction id code to make sure both directions of a transaction are inspected before incrementing the inspect_id. 15 years ago
Pablo Rincon 8cc525c939 UDP support at AppLayer message handling 15 years ago
Gurvinder Singh a0fa924c15 fixed the memory leaks in htp and radix tree 15 years ago
Victor Julien 70b32f7380 First stab at creating a stateful detection engine.
Stateful detection for app layer detection keywords, except uricontent. Stores it's partial results in the flow structure. Other modifications:

- Generalize transaction tracking, logging and inspection.
- Adapt http and dcerpc to use the new transaction handling.
- Stream engine now always notifies app layer of a stream eof.

This commit fixes bug #124.
15 years ago
Gerardo Iglesias Galvan 9f4fae5b1a Fix inconsistent use of dynamic memory allocation 15 years ago
William Metcalf ce01927515 Import of GPLv2 Header 050410 15 years ago
Gurvinder Singh 5b802f6099 fixed type in htp (bug 138) 15 years ago
Victor Julien f81fccd66b Reintroduce usage of the SC_RADIX_NODE_USERDATA marco into the htp code. Rewrite the macro slightly, add unittests for the macro. 15 years ago
Gurvinder Singh 69a4fee757 fixed the API and logic error reported by clang tool 15 years ago
Victor Julien 78e15ea7fa Explicitly test for ipv6 in the htp personalities code. Update all affected unittests to set addr family to the flow. 15 years ago
Victor Julien 47a47e8ad4 Fix invalid free in HTP config deinit. 15 years ago
Victor Julien 44b6380a70 Improve http body chunk memory handling robustness. 15 years ago
Pablo Rincon fe7948a7ae Modifications on http body request handling 15 years ago
Pablo Rincon f862de2ee6 Fixing some code reviews (Thanks to Steve Grubb) 15 years ago
Victor Julien 4129146a71 Because the HTP personalities code changes how the htp state's connp is initialized, we need to check for it in more places. 15 years ago
Victor Julien ead13bda4a Small cleanup and comment update to htp code. 15 years ago
Brian Rectanus a9cdd2bbae Add htp personality configuration. 15 years ago
Victor Julien ffd85ac4a6 Use correct datatype in HTPCallbackResponse fixing possible endless looping issues. 15 years ago
Anoop Saldanha 97d49d8f5e support for http_client_body keyword 15 years ago
Gurvinder Singh 8e444f1772 stream and application layer improvements 15 years ago
Victor Julien 7a8cd61fdf Cleanups. 15 years ago
Pablo Rincon 25a3a5c6d8 Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks. 15 years ago
Gurvinder Singh 50f7d0a887 app layer htp logging and better htp request handling. removed recent_in_tx. 15 years ago
Victor Julien 4f3a04a410 Disable htp cleanup code as I'm not yet convinced it does what it should. 15 years ago
Gurvinder Singh bf236e4567 better htp memory handling & flow valgrind error fixed 15 years ago
Pablo Rincon 0165b3f0d8 pcre P modifier support (pcre match over http body requests) 15 years ago
Victor Julien 187949b9ad Make urilen inspect the normalized uri, cleanup uri (error) handling. 15 years ago
Pablo Rincon d0404d8447 Renaming errors with naming conventions 15 years ago
Pablo Rincon ad2c136e8f Renaming errors (naming conventions) 15 years ago
Victor Julien 148883cedf Work around for unsupported CONNECT support handling. 15 years ago
Victor Julien 6a53ab9c5a Stream engine memory handling update
The stream engine memory handling needed updating as it didn't scale. Changes:

- pools can now be initialized to size 0, meaning unlimited
- stream engine uses a memcap setting. Sessions, segments and aldata is part
  of this, app layer state isn't.
- memory is accounted using a global int that is spinlocked.
- a counter for sessions that have not been picked up because of memcap was
  added.
- all reassembly errors are converted to debug msgs.
15 years ago
Gurvinder Singh 356a8bf385 applayer uri match and modified http handling 15 years ago
Victor Julien c352bff6fb Remove unused conditional locking code from the app layer parsing code. 15 years ago
Pablo Rincon 705471e4ee Adding single pattern matcher algorithms. If you cannot store a context for the patterns, use SpmSearch() macro. Adding unittests and stats 15 years ago
Victor Julien c3269dbcb4 Fix compiler warning in http method code 15 years ago
Brian Rectanus c22d42693a Added http_method rule keyword. 15 years ago
Gurvinder Singh 6814ea1a0f some more stream fixes 15 years ago
Victor Julien 4824868766 Application layer detection improvements
- improve locking of application layer handling, making sure that the flow cannot be freed/cleared when the detection engine is still working with it.
- add a check to the app layer detection to make sure that a match function will only inspect an app layer state if it's of the right type.
15 years ago
Gurvinder Singh 0a85fd6787 htp error fixed 15 years ago
Victor Julien ecf86f9c23 Rename to Suricata. 15 years ago
Victor Julien 18fe3818dc Remove need_lock from app layer parsers. 15 years ago
Gurvinder Singh 7ce586bc77 updated htp error info 15 years ago
Victor Julien ba7e8012af Add some debugging and simplify locking for app layer slightly. 15 years ago