You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Juliana Fajardini fe939e8da7 pgsql: better boundaries to row_description/data_row ... parse_row_description and parse_consolidated_data_row read a field_count from the message body and use that to iterate a slice, without checking whether the count actually fits the body. A backend-controlled attack could lead to fewer fields logged, or stalling of the parser to-client direction for the duration of the flow. A malformed_response event is set for pgsql, if either of those message's inner parsers has a field_count that can't be reconciled with the body slice. A new pgsql.response log field is added to indicate this, too: pgsql.response.row_description_malformed, a boolean. This wasn't added to the consolidated data row message, per its summarization nature. The row_description unit test buffer declared a length one byte longer than its three fields occupy. The old code silently discarded that surplus byte; the new one reports it, so the buffer was corrected. Ticket: #8885		2 months ago
..
Makefile.am	doc/userguide: generate eve documentation	2 years ago
classification.config	classification: sync and update	6 years ago
reference.config	config: Update reference keys	2 years ago
schema.json	pgsql: better boundaries to row_description/data_row	2 months ago
suricata.logrotate.in	logrotate: reindent to 4 spaces	6 years ago
suricata.service.in	Sample systemd unit file for Suricata.	9 years ago