You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust/src/smb
Philippe Antoine 233ab11148 smb: handles records with trailing nbss data
If a file (read/write) SMB record has padding/trailing data
after the buffer being read or written, and that Suricata falls
in one case where it skips the data, it should skip until
the very end of the NBSS record, meaning it should also skip the
padding/trailing data.

Otherwise, an attacker may smuggle some NBSS/SMB record in this
trailing data, that will be interpreted by Suricata, but not
by the SMB client/server, leading to evasions.

Ticket: #5786
4 years ago
..
auth.rs smb: set event for ntlmssp unusual order 4 years ago
dcerpc.rs rust: remove explicit lifetimes where not needed 4 years ago
dcerpc_records.rs rust: fix clippy lints for clippy::derive_partial_eq_without_eq 4 years ago
debug.rs smb: convert transaction list to vecdeque 4 years ago
detect.rs rust/clippy: fix lint: single_match 4 years ago
error.rs rust/smb: convert parser to nom7 functions (SMB1) 5 years ago
events.rs smb: configurable max number of transactions per flow 4 years ago
files.rs files: move FileContainer into FileTransferTracker 4 years ago
funcs.rs smb2: map ioctl funcs to names 9 years ago
log.rs smb: fix duplicate interface logging 4 years ago
mod.rs rust/smb: import NT status code for Microsoft doc 4 years ago
nbss_records.rs rust: fix clippy lints for clippy::needless_bool 4 years ago
ntlmssp_records.rs smb: set event for ntlmssp unusual order 4 years ago
session.rs smb: convert transaction list to vecdeque 4 years ago
smb.rs smb: handles records with trailing nbss data 4 years ago
smb1.rs smb: handles records with trailing nbss data 4 years ago
smb1_records.rs rust: remove explicit lifetimes where not needed 4 years ago
smb1_session.rs smb: set event for ntlmssp unusual order 4 years ago
smb2.rs smb: handles records with trailing nbss data 4 years ago
smb2_ioctl.rs rust: remove explicit lifetimes where not needed 4 years ago
smb2_records.rs rust/clippy: fix lint: explicit_counter_loop 4 years ago
smb2_session.rs smb: set event for ntlmssp unusual order 4 years ago
smb3.rs rust: fix clippy lints for clippy::derive_partial_eq_without_eq 4 years ago
smb_records.rs rust: fix clippy lints for clippy::len_zero 4 years ago
smb_status.rs rust/smb: avoid allocation in smb status function 4 years ago