mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
0e297d26ff
DetectEngineInspectGenericList returned NO_MATCH for every keyword miss, also when the tx had moved past the phase the engine is registered at. Unlike the buffer engines it never produced a terminal no match, so a firewall LTE rule using such a keyword (tls.version on a hook) stayed provisional and was accepted for the rest of the session. Make a miss terminal at P + 1. This engine also backs the lua on-request/on-response hooks and the tls_cert_*, dnp3/dnp3_ind and ftpdata/ftp mode keywords, so a plain IDS rule using them keeps its verdict once the tx has moved past the registered phase. Export the parser's end state computation as AppLayerParserGetTxEndState() here, so the version keyword can use it; the remaining call sites are converted later. Ticket: #8944. |
3 weeks ago | |
|---|---|---|
| .. | ||
| src | 3 weeks ago | |
| Cargo.toml.in | ||
| Makefile.am | ||