7894 Commits (9e1470d81c79677b689a0fc4b570d20232953dad)

 

All Branches   

Search

Author	SHA1	Message	Date
Victor Julien	54604c7bf2	http_user_agent: dynamic buffer	8 years ago
Victor Julien	9262fa3dcf	http_response_line: dynamic buffer	8 years ago
Victor Julien	6346a074a7	http_uri: dynamic buffer ... Clean up tests	8 years ago
Victor Julien	e34102d67a	http_method: make list dynamic	8 years ago
Victor Julien	6bd37611ee	file_data: dynamic buffer	8 years ago
Victor Julien	7052f9b933	http_request_line: dynamic buffer	8 years ago
Victor Julien	779d40cedf	detect: remove hardcoded sm_list logic from setup ... Introduce utility functions to aid this.	8 years ago
Victor Julien	04592efb76	detect: buffer type API ... To replace the hardcoded SigMatch list id's, use this API to register and query lists by name. Also allow for registering descriptions and whether mpm is supported. Registration is only allowed at startup.	8 years ago
Victor Julien	58e1180efe	detect: inspect engine setup cleanup	8 years ago
Victor Julien	debc1a6334	detect: dce test fixes and improvements	8 years ago
Victor Julien	a2b521b7fa	detect-csum: redo tests	8 years ago
Victor Julien	f370e88135	detect: move init only Signature members to init_data	8 years ago
Victor Julien	0a5ae415b8	detect: shrink Signature::sm_arrays ... Signature::sm_arrays now only contains 'built-in' lists, and so is sized appropriately.	8 years ago
Victor Julien	4978a7a133	detect: reorganize id's in prep of dynamic lists	8 years ago
Victor Julien	59303d1fbb	threshold: fix and redo tests	8 years ago
Victor Julien	6f7e4adbe8	detect: improve memory handling & comments	8 years ago
Victor Julien	8edc954e82	detect: get rid of Signature::sm_lists ... Instead use the lists in init_data during setup and the SigMatchData arrays during runtime.	8 years ago
Victor Julien	f281481b67	detect: use detect list passed to generic funcs ... Until now the GenericList users used hardcoded list id's.	8 years ago
Victor Julien	bd456076a8	detect: pass SigMatchData to inspect functions	8 years ago
Victor Julien	a0fe67a3c0	detect: template list in engine	8 years ago
Victor Julien	da7c816c7c	detect: enip/cip list in engine	8 years ago
Victor Julien	e94a7bddb3	detect: modbus list in engine	8 years ago
Victor Julien	7f7d4296da	detect: file list in engine	8 years ago
Victor Julien	f5adccba1d	detect: app-event list in engine	8 years ago
Victor Julien	747dbf92ce	detect: dns & tls lists in engine	8 years ago
Victor Julien	5a2e568385	detect: http lists in engine	8 years ago
Victor Julien	1ee32da2ca	detect-engine: memory handling of sm_lists ... For lists that are registered multiple times, like http_header and http_cookie, making the engines owner of the lists is complicated. Multiple engines in a sig may be pointing to the same list. To address this the 'free' code needs to be extra careful about not double freeing, so it takes an approach to first fill an array of the to-free pointers before freeing them.	8 years ago
Victor Julien	f81b90dacd	detect: when freeing sig also see sm in inspect engine	8 years ago
Victor Julien	2f87c975d4	detect: add SigMatch arg to inspect functions	8 years ago
Victor Julien	cf42fbf51f	detect: use InspectEngineFuncPtr in inspect engines ... Replace explicit function pointer use by InspectEngineFuncPtr typedef	8 years ago
Victor Julien	5f7e096be4	detect: shrink inspect engine by using 'id' as state flag	8 years ago
Victor Julien	715ff60087	detect: remove unused SIG_FLAG_INIT_PAYLOAD init_flag	8 years ago
Victor Julien	859cb89c7e	detect alert/threshold/tag: sm_list -> sm_array	8 years ago
Victor Julien	99580487e5	detect: fix file_data / http_server_body tests	8 years ago
Victor Julien	faadec0d7f	detect file_data: improve error messages	8 years ago
Victor Julien	e2c6e1be33	detect-parse: set ipprotos earlier ... A high level proto like HTTP implies TCP. However this wasn't set until after all the parsing was complete which means that keywords couldn't test if the ipproto matched. This patch populates the ipprotos right when the higher level proto is parsed.	8 years ago
Victor Julien	5e0b0eea4b	detect: remove unused flags	8 years ago
Victor Julien	39613778cd	detect: make setup/free/match funcs static where possible	8 years ago
Victor Julien	bfd4bc8233	detect: constify Signature/SigMatch use at runtime	8 years ago
Victor Julien	a44da9f5cb	detect: simplify SIG_FLAG_STATE_MATCH set logic	8 years ago
Victor Julien	be3ee5330f	detect: remove alproto from keyword registration ... It was already marked as depricated and no longer in use anywhere.	8 years ago
Victor Julien	113a238e90	Open 4.0 development branch	8 years ago
Victor Julien	e072a10f64	changelog: update for 3.2.1 release	8 years ago
Victor Julien	71710f088e	dns: fix outputs with 0-len A/AAAA records	8 years ago
Victor Julien	20990f7a7e	dns: fix out of bounds read ... On a zero size A or AAAA record, 4 or 16 bytes would still be read. Found with AFL+ASAN.	8 years ago
Jason Ish	4a04f814b1	defrag - take protocol into account during re-assembly ... The IP protocol was not being used to match fragments with their packets allowing a carefully constructed packet with a different protocol to be matched, allowing re-assembly to complete, creating a packet that would not be re-assembled by the destination host.	8 years ago
Victor Julien	292baf0872	afl: add ethernet and erspan entry points	8 years ago
Victor Julien	49c41fc79e	afl: clean up commandline parsing	8 years ago
Victor Julien	b56b04f84c	afl: pass a packet queue to decoder calls	8 years ago
Jason Ish	35488eefda	afl: set the packet data so pktlen gets set	8 years ago