You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rules
Philippe Antoine df2cbd6517 http2: event for variable-length integer overflow
http2_parse_var_uint can overflow the variable-length
integer it is decoding. In this case, it now returns an error
of kind LengthValue.

The new function http2_parse_headers_blocks, which factorizes
the code loop for headers, push promise, and continuation, will
check for this specific error, and instead of erroring itself,
will return the list of so far parsed headers, plus another one
with HTTP2HeaderDecodeStatus::HTTP2HeaderDecodeIntegerOverflow

This status is then checked by process_headers to create an
app-layer event.
4 years ago
..
Makefile.am rules: add newer rule files to makefile for release tarball 4 years ago
app-layer-events.rules
decoder-events.rules doc: fix typo lenght/length 4 years ago
dhcp-events.rules dhcp: add dhcp app-layer rules file 7 years ago
dnp3-events.rules rules: add missing classtypes for event.rules 8 years ago
dns-events.rules dns: cleanup: remove unused events 6 years ago
files.rules rules: fix files.rules typo 6 years ago
http-events.rules http: : fix int warnings 4 years ago
http2-events.rules http2: event for variable-length integer overflow 4 years ago
ipsec-events.rules ike: set event for multiple server proposals 4 years ago
kerberos-events.rules Kerberos 5: rename weak crypto to weak encryption, and log it 7 years ago
modbus-events.rules rules: add missing classtypes for event.rules 8 years ago
mqtt-events.rules rules/mqtt: renumber mqtt events to avoid conflict with ssh 5 years ago
nfs-events.rules rust/nfs: implement events 8 years ago
ntp-events.rules Add event rules for NTP events 8 years ago
smb-events.rules smb: adds file overlap event against evasions 5 years ago
smtp-events.rules smtp/mime: Set event when name exceeds limit 6 years ago
ssh-events.rules rules: add SSH decoder events rules 5 years ago
stream-events.rules tcp: rejects FIN+SYN packets as invalid 4 years ago
tls-events.rules rules/tls: sync with changes to the TLS events 5 years ago