10973 Commits (beb45c564ec3ed8891189c15ec93195b3e3d87d8)

 

All Branches   

Search

Author	SHA1	Message	Date
Shivani Bhardwaj	cf4e4e4ac3	flowbits: Allow support for flowbit ORing ... This patch allows to OR multiple flowbits on isset and isnotset flowbit actions. e.g. Earlier in order to check if either fb1 or fb2 was set, it was required to write two rules, ``` alert ip any any -> any any (msg:\"Flowbit fb1 isset\"; flowbits:isset,fb1; sid:1;) alert ip any any -> any any (msg:\"Flowbit fb2 isset\"; flowbits:isset,fb2; sid:2;) ``` now, the same can be achieved with ``` alert ip any any -> any any (msg:\"Flowbit fb2 isset\"; flowbits:isset,fb1|fb2; sid:23;) ``` This operator can be used to check if one of the many flowbits is set and also if one of the many flowbits is not set.	5 years ago
Victor Julien	a611ae2102	doc/perf: minor improvements	5 years ago
Andreas Herz	1d9db2b5f9	doc: add performance analysis section	5 years ago
Philippe Antoine	fef124b92d	ftp: use switch for ftp commands for style	5 years ago
Philippe Antoine	6f36403219	ftp: FTPGetAlstateProgress for done port commands ... For a done transaction with command PORT, we expect FTP_STATE_FINISHED and we got FTP_STATE_PORT_DONE instead which prevented logging of these transactions We change the order of the evaluations to get the right result	5 years ago
Philippe Antoine	699d6682da	ftp: indent FTPParseResponse again	5 years ago
Philippe Antoine	a6294d6ec2	ftp: FTPParseResponse bufferizes lines ... Protects against evasion by TCP packet splitting The problem arised if the FTP response is split on multiple packets The fix is to bufferize the content, until we get a complete line	5 years ago
Philippe Antoine	cd26fc139e	detect: fix insertion in linked list for fast pattern ... Make sure we do not add the same list_id twice by checking at least all the lists with the current priority	5 years ago
Victor Julien	0ce489bcc9	conf/datadir: fix possible out of bounds array access	5 years ago
Victor Julien	1d8d03184d	datasets: remove useless variables	5 years ago
Victor Julien	7a6269798b	datasets: add 'dataset-remove' unix command	5 years ago
Victor Julien	af06883f65	datasets: add 'remove' support	5 years ago
Victor Julien	51726e0a0f	thash: add 'remove' support	5 years ago
Victor Julien	b80ab56d10	datasets: improve 'dataset-add' error checking	5 years ago
Victor Julien	ff55a444d4	datasets: fix return values for 'add's	5 years ago
Victor Julien	381bc2dd64	datasets: fix ref cnt handling ... Each 'add' and 'lookup' would increment the use_cnt, without anything bringing it back down. Since there is no removal yet, nothing is actually affected by it yet.	5 years ago
Victor Julien	03dc5d1d74	datasets: silence noisy 'dataset-add' log	5 years ago
Victor Julien	f8159bd372	build: default to c11 standard ... Rearrange pcap includes to fix builds on MinGW	5 years ago
Victor Julien	1893e40e79	build: don't limit C std to c99 (gnu99) ... Now that C11 atomics and thread local storage are supported, the compiler can figure out what version to use.	5 years ago
Victor Julien	7691fc4f9e	configure: check for u_int and friends	5 years ago
Victor Julien	cb4b5296da	fuzz: include pcap headers through suricata-common.h	5 years ago
Victor Julien	d4f86e3709	threads: remove u_long usage	5 years ago
Victor Julien	3ba4afd40b	threads: make thread local storage manadatory ... Support either the __thread GNUism or the C11 _Thread_local. Use 'thread_local' to point to the one that is used. Convert existing __thread user to 'thread_local'. Remove non-thread-local code from the packet pool code.	5 years ago
Victor Julien	32cfd71f1a	atomics: stdatomics.h version of SC_ATOMIC_* wrappers	5 years ago
Victor Julien	7553937a22	detect-engine/tags: avoid confusion over data type	5 years ago
Victor Julien	5b9d17b485	atomics: remove unused macros	5 years ago
Victor Julien	c83a607b6a	atomics: add SC_ATOMIC_INITPTR macro ... Until now both atomic ints and pointers were initialized by SC_ATOMIC_INIT by setting them to 0. However, C11's atomic pointer type cannot be initialized this way w/o causing compiler warnings. As a preparation to supporting C11's atomics, this patch introduces a new macro to initialize atomic pointers and updates the relevant callers to use it.	5 years ago
Victor Julien	531ff3ddec	atomics: change SC_ATOMIC_ADD to 'fetch_add' ... Until this point the SC_ATOMIC_ADD macro pointed to a 'add_fetch' intrinsic. This patch changes it to a 'fetch_add'. There are 2 reasons for this: 1. C11 stdatomics.h has only 'atomic_fetch_add' and no 'add_fetch' So this patch prepares for adding support for C11 atomics. 2. It was not consistent with SC_ATOMIC_SUB, which did use 'fetch_sub' and not 'sub_fetch'. Most callers are not using the return value, so these are unaffected. The callers that do use the return value are updated.	5 years ago
Victor Julien	109b2ae551	atomics: avoid unnecessary (direct) CAS use	5 years ago
Victor Julien	c660757153	atomics: remove useless SC_ATOMIC_DESTROY	5 years ago
Victor Julien	1cb7eec52d	atomics: remove spinlocked fallback	5 years ago
Victor Julien	967340e901	fuzz: fix applayer eof check segv	5 years ago
Philippe Antoine	4fda7ed4bd	fuzz: stop app layer target as Suricata ... Before being overwhelmed by successive errors	5 years ago
Philippe Antoine	fe1d36ec7e	conf: returns instead of exiting in ConfYamlParse ... So that we can keep on fuzzing even on too much recursion	5 years ago
Victor Julien	dfdf2eb050	fuzz: add missing debug validation to configure	5 years ago
Victor Julien	c76f98073e	fuzz: add configure wrapper for oss-fuzz	5 years ago
Victor Julien	5e13816380	includes: don't include sys/types.h twice	5 years ago
Victor Julien	df79613fb5	privs: include headers in suricata-common.h	5 years ago
Victor Julien	61c9e01f87	conf/yaml: include yaml.h after suricata-common.h	5 years ago
Sascha Steinbiss	5598ff5bb3	doc/install: refer to buster as Debian stable	5 years ago
Victor Julien	f6bf86f136	fuzz/sigpcap: enable all of eve	5 years ago
Victor Julien	4d50eb1647	detect/iponly: fix parsing of '0' valued netmask	5 years ago
Victor Julien	d4613e5c70	util/mem: reduce scope of win32 specific include	5 years ago
Victor Julien	415c992909	util/mem: cleanup by moving atomic from mem hdr	5 years ago
Victor Julien	3b877929e3	util/mem: move most logic to functions ... Reduce macro use and simplify code. Also reduces compiled code size.	5 years ago
Victor Julien	48bb26abe7	util/mem: remove old debug code for counting allocs	5 years ago
Victor Julien	481a1923b4	logging: turn SCLog and SCLogErr into funcs ... Reduces compiled code size.	5 years ago
Victor Julien	64e307936e	common: add ATTR_FMT_PRINTF wrapper ... Wraps around __attribute__((format(printf, (x), (y))))	5 years ago
Victor Julien	a8c8e2d5c9	common: use suricata-common.h in more places	5 years ago
Victor Julien	b856caad94	common: use WARN_UNUSED macro	5 years ago