You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust
Jason Ish d31582843a nfs: keep partial FILE_SYNC write tx open until its data is done
A NFSv3 WRITE with stable set to FILE_SYNC is assumed to be the last chunk of
its file, and its file transaction was closed as soon as the record was seen.
If the record was only partially received, the continuation could no longer
find the transaction by its file handle. Its file data was then not consumed
but parsed as a new RPC record, which failed and disabled the parser for the
flow, and the file was truncated.

Like the READ reply path already does, only close the transaction right away
if the record holds all of its file data. Otherwise filetracker_update closes
it once the file tracker is done or, as a truncated tracker is never done,
once the data of the last chunk is complete. The latter also applies to a
partial READ reply with eof set.

The NFSv4 WRITE path makes the same FILE_SYNC assumption, but it only handles
complete records, so it is not affected.

This is also the root cause of Redmine #8009.

Ticket: #9196
1 day ago
..
.cargo rust: rename .cargo/config to .cargo/config.toml 2 years ago
derive rust: inherit common package metadata from workspace 6 days ago
ffi rust: keep the ffi logger out of the test binary 1 day ago
htp rust: hoist nom 8 dependency into workspace 6 days ago
src nfs: keep partial FILE_SYNC write tx open until its data is done 1 day ago
suricatactl rust: hoist regex dependency into workspace 6 days ago
suricatasc rust: hoist serde_json dependency into workspace 6 days ago
sys rust: inherit common package metadata from workspace 6 days ago
.gitignore rust: rename .cargo/config to .cargo/config.toml 2 years ago
Cargo.lock.in rust: update zstd 2 days ago
Cargo.toml.in rust: update zstd 2 days ago
Makefile.am rust/derive: add Makefile for Cargo.toml regeneration 6 days ago
cbindgen.toml http2: split transaction state machines 4 months ago
rustfmt.toml
…