suricata

Commit Graph

Author	SHA1	Message	Date
Philippe Antoine	15649424a7	conf: avoid quadratic complexity Ticket: 4812 When adding many sequence nodes	5 years ago
Jason Ish	587c326d73	yaml: treat some unquoted values as null (per spec) Per the YAML spec, the following values when present unquoted should be equivalent to null: - ~ - NULL - Null - null	5 years ago
Shivani Bhardwaj	7eef4e83e5	confyaml: convert to FAIL/PASS API	6 years ago
Shivani Bhardwaj	6f7d8e50c8	src: use FatalError whenever possible Replaces all patterns of SCLogError() followed by exit() with FatalError(). Cocci script to do this: @@ constant C; constant char[] msg; @@ - SCLogError(C, + FatalError(SC_ERR_FATAL, msg); - exit(EXIT_FAILURE); Closes redmine ticket 3188.	6 years ago
Philippe Antoine	fe1d36ec7e	conf: returns instead of exiting in ConfYamlParse So that we can keep on fuzzing even on too much recursion	6 years ago
Victor Julien	61c9e01f87	conf/yaml: include yaml.h after suricata-common.h	6 years ago
Jason Ish	4dc80a6e6f	conf/yaml: limit recursion depth while paring YAML A deeply nested YAML file can cause a stack-overflow while reading in the configuration to do the recursive parser. Limit the recursion level to something sane (128) to prevent this from happening. The default Suricata configuration has a recursion level of 128 so there is still lots of room to grow (not that we should). Redmine ticket: https://redmine.openinfosecfoundation.org/issues/3630	6 years ago
Philippe Antoine	c1e41632c1	config: use logging instead of stderr	7 years ago
Victor Julien	9d54a8361d	yaml: fix potential memleak and suppress coverity issue	8 years ago
Jason Ish	7d5f8295bc	yaml-loader: fix memory leak on fail include Redmine issue: https://redmine.openinfosecfoundation.org/issues/1929 If an include failed to load, either by the file not existing or a parse error, the file pointer and yaml parser instance were leaked.	8 years ago
Jason Ish	8b74ac6ba0	conf/yaml: don't allow empty key values When loading an empty file, libyaml will fire a single scalar event causing us to create a key that contains an empty string. We're not interested in this, so skip an empty scalar value when expecting a key. Redmine issue: https://redmine.openinfosecfoundation.org/issues/2418	9 years ago
Victor Julien	ab1200fbd7	compiler: more strict compiler warnings Set flags by default: -Wmissing-prototypes -Wmissing-declarations -Wstrict-prototypes -Wwrite-strings -Wcast-align -Wbad-function-cast -Wformat-security -Wno-format-nonliteral -Wmissing-format-attribute -funsigned-char Fix minor compiler warnings for these new flags on gcc and clang.	9 years ago
Victor Julien	edcc8e7ec9	stat: suppress CID 1293508 and 1312013	10 years ago
Victor Julien	e13f956100	yaml: minor cleanup	10 years ago
Victor Julien	542492d6c2	yaml: initialize var to prevent uninitialized read	10 years ago
Jason Ish	796dd5223b	tests: no longer necessary to provide successful return code 1 pass, 0 is fail.	10 years ago
Jason Ish	9fdae82815	conf - process includes even if not at root node.	11 years ago
Victor Julien	97d77e3540	conf: add ConfYamlLoadFileWithPrefix Add function to load a yaml file and insert it into the conf tree at a specific prefix. Example YAML: somefile: myfile.txt If loaded using ConfYamlLoadFileWithPrefix with prefix "myprefix", it can be retrieved by the name of "myprefix.somefile".	12 years ago
Jason Ish	ee7e813256	Bug 1417 - Record sequence nodes as sequences. Nodes that are sequences weren't being recorded as such, causing rules to fail to load. Change sequence test name to reflect better what it tests, and test that the sequence node is detected as a sequence.	12 years ago
Jason Ish	33e4cc065f	Promote nodes set with --set to sequence nodes as needed. A node isn't known to be a sequence node until the YAML is parsed. If a node sequence node was set on the command line, promote it to a sequence node when it is discovered by YAML to be a sequence node. Fixes comment #18 in issue 921.	13 years ago
Jason Ish	e8626509cc	When setting a sequence value, check for an existing node. This makes --set af-packet.0.threads=X do what you expect by looking for the sequence node before setting.	13 years ago
Eric Leblond	28c5c68192	error checking: add missing alloc error treatment The return of some malloc like functions was not treated in some places of the code.	13 years ago
Jason Ish	b033acfb0c	Subsequent configuration keys now override previous ones instead of merging. The exception is final values, for example, values like default-log-dir that may be set on the command line.	13 years ago
Jason Ish	b8e13d4bd6	More concise API for setting config values that can be overrided or not (final values).	13 years ago
Jason Ish	06f4fe8e0c	Remove the single line if statements.	13 years ago
Jason Ish	8625c9eba8	Support for configuration include files.	13 years ago
Victor Julien	164d60e8cd	Yaml: give a more detailed error if the user supplies a directory instead of a yaml file. Bug #803 .	13 years ago
Victor Julien	4b2d94a841	Add line number to warning about mangled yaml parameters. Limit number of warnings to 10.	15 years ago
Nikolay Denev	32e898f2e3	Convert config entries using underscores to dashes and emit deprecation warnings.	15 years ago
Victor Julien	47abd0ef19	Fix compiler warning.	15 years ago
Victor Julien	55da9787a4	Win32 compile fixes.	15 years ago
Gerardo Iglesias Galvan	9f4fae5b1a	Fix inconsistent use of dynamic memory allocation	16 years ago
William Metcalf	ce01927515	Import of GPLv2 Header 050410	16 years ago
Victor Julien	fe55d996c1	Improve yaml loaded debug output formatting.	17 years ago
Jason Ish	acaee78b1c	Fix bug 125. - Always bail on parse errors. - Exit if loading the config file fails. - Display the line number where the parsing failed.	17 years ago
Pablo Rincon	25a3a5c6d8	Adding mem wrapper to debug runtime alloc()/free() functions. Fixing some memory leaks.	17 years ago
Jason Ish	7537013e16	Fix bug 99. - Handle the case where the parent node already exists in ConfSet. - Deal with allow_override properly when a node has already been set with ConfSet.	17 years ago
Jason Ish	ea277a0b36	Cleanup of configuration internals. Use an n-ary type tree for everything instead of a first level hash branching off into n-ary type trees. Reduces the code and uses a uniform internal data structure.	17 years ago
Jason Ish	8570976ee0	Fix for lists that are children of another list. Fix memory leak by only setting the sequence index value to the first item found.	17 years ago
Victor Julien	0d34990d7f	Add OpenBSD's strlcpy and strlcat and replace all strcat/strcpy/strncat/strncpy by those calls.	17 years ago
Jason Ish	4e1acf5fd2	Require that the configuration file begins with a valid YAML version. At this time this means the configuration file must begin with %YAML 1.1	17 years ago
Jason Ish	5e318aa342	Fix issue 55. Don't process any key/value pairs until we've hitting a mapping.	17 years ago
Jason Ish	844c444af1	Use the configuration file to setup alert logging (and http logging). Only setup for the live pcap modes at the moment.	17 years ago
Jason Ish	6520d42b4c	Allow nested sequences.	17 years ago
Jason Ish	668b86cba4	Fix issue 36. Give each unit test a fresh configuration context - helps tests pass when a config file is passed in, which can mess up the "expected" output, as this is testing loading values into the configuration system.	17 years ago
Jason Ish	59ec05645f	Index sequence items - allows us to store sequences of mappings in the configuration database.	17 years ago
Victor Julien	ecf86f9c23	Rename to Suricata.	17 years ago
Victor Julien	241db64dd7	Fix a few memory issues.	17 years ago
Anoop Saldanha	dc44700ce5	Support vars lookup from conf file. Current patch support address and port group vars lookup	17 years ago
Jason Ish	ec9fa7b0a7	Files missed in last commit. Update Conf API to allow direct access to nodes. A configuration node is now a tailq head and a tailq entry. This allows us to build n-ary type trees to build something DOM like. Properly process lists so a list of rule files (for example) can be loaded.	17 years ago

1 2

55 Commits (a85340b1ab2aa9490a4d4d937ad0f8808b052dfe)