You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Leblond 10e2e2a8b6 app-layer-smtp: fix mem leak and add new alert ... If SMTP session is weird then we may reach a state where a field like MAIL FROM is seen as duplicated. Valgrind output is: 30 bytes in 1 blocks are definitely lost in loss record 96 of 399 at 0x4C29C0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) by 0x4A5803: SMTPParseCommandWithParam (app-layer-smtp.c:996) by 0x4A4DCE: SMTPParseCommandMAILFROM (app-layer-smtp.c:1016) by 0x4A3F55: SMTPProcessRequest (app-layer-smtp.c:1127) by 0x4A1F8C: SMTPParse (app-layer-smtp.c:1191) by 0x493AD7: SMTPParseClientRecord (app-layer-smtp.c:1214) by 0x4878A6: AppLayerParserParse (app-layer-parser.c:908) by 0x42384E: AppLayerHandleTCPData (app-layer.c:444) by 0x8D7EAD: DoReassemble (stream-tcp-reassemble.c:2635) by 0x8D795F: StreamTcpReassembleAppLayer (stream-tcp-reassemble.c:3028) by 0x8D8BE0: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:3404) by 0x8D8F6E: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:3432)		10 years ago
..
Makefile.am	rules: add app layer events rules	11 years ago
app-layer-events.rules	rules: add app layer events rules	11 years ago
decoder-events.rules	decode: add ERSPANv1 decoder	11 years ago
dns-events.rules	dns: fix message of decoder rule 2240008	12 years ago
files.rules	Duplicate rule ID.	11 years ago
http-events.rules	http: add event for leading spaces on request line	11 years ago
modbus-events.rules	App-layer: Add Modbus protocol parser	11 years ago
smtp-events.rules	app-layer-smtp: fix mem leak and add new alert	10 years ago
stream-events.rules	stream: detect and filter out bad window updates	12 years ago
tls-events.rules	tls: check SSL3/TLS version per record	12 years ago