mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
5d007ef25e
Extend the xor transform to accept a variable-position key using the 'extract <nbytes> <offset>' syntax. The engine reads <nbytes> bytes at buffer position <offset> at transform time. The optional 'offset' parameter specifies where XOR decoding starts in the buffer; bytes before that position are left unchanged. Syntax: xor:"<hex_key>" xor:extract <nbytes> <offset> xor:offset <N>,"<hex_key>" xor:offset <N>,extract <nbytes> <offset> Variable-key helpers (VariableKeyLocation, variable_key_bytes, parse_key_location, strip_keyword_prefix) are imported from the new varkey module. The variable key bytes are copied out of the inspection buffer before decoding, so an in-place transform cannot corrupt the key when the key region overlaps the decoded range. Issue: 8671 |
3 weeks ago | |
|---|---|---|
| .. | ||
| .cargo | ||
| derive | ||
| ffi | 1 month ago | |
| htp | ||
| src | 3 weeks ago | |
| suricatactl | ||
| suricatasc | ||
| sys | 1 month ago | |
| .gitignore | ||
| Cargo.lock.in | ||
| Cargo.toml.in | ||
| Makefile.am | ||
| cbindgen.toml | 1 month ago | |
| rustfmt.toml | ||