Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Victor Julien 4cd736fcc9 flowvar: fix deadlock with http buffers
Bug #802

Flowvars are set from pcre, and lock the flow when being set. However
when HTTP buffers were inspected, flow was already locked: deadlock.

This patch introduces a post-match list in the detection engine thread
ctx, where store candidates are kept. Then a post-match function is used
to finalize the storing if the rule matches.

Solves the deadlock and brings the handling of flowvars more in line
with flowbits and flowints.
14 years ago
benches
…
contrib Add contrib dir and it's content to the dist. Bug 567 14 years ago
doc Update docs from wiki 14 years ago
libhtp Update version number of bundled htp to 0.2.12, so it matches the non-bundled version. 14 years ago
m4
…
qa coccinelle: add tcp flag check 14 years ago
rules ipv6: add event for ipv6 packet with icmpv4 header 14 years ago
scripts suricatasc: fix make distcheck. 14 years ago
src flowvar: fix deadlock with http buffers 14 years ago
.gitignore add configure summary to build-info output 14 years ago
COPYING
…
ChangeLog Update changelog for 1.4 14 years ago
LICENSE
…
Makefile.am unix-manager: add unix command socket and associated script 14 years ago
Makefile.cvs
…
acsite.m4
…
autogen.sh
…
classification.config
…
configure.ac configure: use correct syntax for help string 14 years ago
doxygen.cfg
…
mkinstalldirs
…
reference.config
…
suricata.yaml.in Update comment in yaml to indicate size limit for the following vars - 14 years ago
threshold.config
…