19 Commits (b95d7efbd0b699248f633193acee71cf7289c92d)

Author	SHA1	Message	Date
Victor Julien	b31ffde6f4	output: remove error codes from output	4 years ago
Victor Julien	39f5c7f56a	error: use SC_EINVAL for invalid input	4 years ago
Victor Julien	e042cd785e	error: use SC_ENOMEM for alloc errors	4 years ago
Philippe Antoine	4daee8bae1	quic: do not use stack for inspection buffer ... Make the inspection buffer copy the content in one buffer it owns. Ticket: #5707	4 years ago
Philippe Antoine	7823653a30	clean: replace MD5_STRING_LENGTH with more used SC_MD5_HEX_LEN	4 years ago
Philippe Antoine	5a0d07b13f	clean: remove useless * sizeof(char)	4 years ago
Philippe Antoine	f75d18b077	quic: ja3 code deduplication ... As quic transactions are unidirectional, the same function is used to get ja3 from client or from server.	4 years ago
Victor Julien	1e13f72785	ja3: fix minor format string warning ... cppcheck: src/util-ja3.c:197:28: warning: %d in format string (no. 1) requires 'int' but the argument type is 'unsigned int'. [invalidPrintfArgType_sint] (*buffer)->used += snprintf((*buffer)->data, (*buffer)->size, "%d", ^ src/util-ja3.c:201:28: warning: %d in format string (no. 1) requires 'int' but the argument type is 'unsigned int'. [invalidPrintfArgType_sint] (*buffer)->used += snprintf((*buffer)->data + (*buffer)->used, ^ Bug: #5291.	4 years ago
Jason Ish	3a82153866	ja3: use SCMd5HashBufferToHex to print hash as hex ... Replace snprintf loop with new function that hashes a single buffer to an MD5 hex string.	6 years ago
Jason Ish	d5bf748c90	ja3: remove requirement on NSS	6 years ago
Jason Ish	e50ee7eb62	filestore: remove requirement of nss for filestore ... Required including NSS header in places that depended on util-file.h including it. All filestore suricata-verify tests now pass without libnss. Also enabled detect-file{md5,sha1,sha256} without NSS support.	6 years ago
Victor Julien	0771eb1e0e	detect/ja3: print error for one rule only ... Use 'silent error' logic for any other rules using ja3 as well.	7 years ago
Victor Julien	ca5226f0c7	tls/ja3: try to enable ja3 if rule keywords need it	7 years ago
Nick Price	d0a85b7550	ja3: Mention LibNSS dependency for JA3	7 years ago
Mats Klepsland	22d8fc802e	util-ja3: fix AddressSanitizer heap-buffer-overflow ... No resizing is done in Ja3BufferResizeIfFull() when the buffer is empty. This leads to a potential overflow when this happens, since a ',' is appended even when the buffer is empty. Bug #2762	8 years ago
Mats Klepsland	598ef96b7b	app-layer-ssl: really fix CID 1433623	8 years ago
Mats Klepsland	fc0e339467	app-layer-ssl: fix use-after-free (CID 14336229) ... Nullify JA3 buffer on free to avoid use-after-free vulnerability.	8 years ago
Mats Klepsland	d4af90032e	util-ja3: add function to check if JA3 is disabled	8 years ago
Mats Klepsland	0c16cd0120	app-layer-ssl: generate JA3 fingerprints ... Decode additional fields from the client hello packet and generate JA3 fingerprints.	8 years ago