You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Juliana Fajardini fe939e8da7 pgsql: better boundaries to row_description/data_row ... parse_row_description and parse_consolidated_data_row read a field_count from the message body and use that to iterate a slice, without checking whether the count actually fits the body. A backend-controlled attack could lead to fewer fields logged, or stalling of the parser to-client direction for the duration of the flow. A malformed_response event is set for pgsql, if either of those message's inner parsers has a field_count that can't be reconciled with the body slice. A new pgsql.response log field is added to indicate this, too: pgsql.response.row_description_malformed, a boolean. This wasn't added to the consolidated data row message, per its summarization nature. The row_description unit test buffer declared a length one byte longer than its three fields occupy. The old code silently discarded that surplus byte; the new one reports it, so the buffer was corrected. Ticket: #8885		2 months ago
..
.cargo	rust: rename .cargo/config to .cargo/config.toml	2 years ago
derive	rust/ffi: move AppLayerEvent to ffi	6 months ago
ffi	rust/ffi: add flow accessors to flow wrapper	2 months ago
htp	http: warn once for chunk extension	2 months ago
src	pgsql: better boundaries to row_description/data_row	2 months ago
suricatactl	rust: limit clap verson to 4.5.57	7 months ago
suricatasc	rust: clippy fixups for 1.97	4 months ago
sys	rust/ffi: bindgen flow storage	2 months ago
.gitignore	rust: rename .cargo/config to .cargo/config.toml	2 years ago
Cargo.lock.in	psl: update to 2.1.228	2 months ago
Cargo.toml.in	rust: set minimum rust version to 1.85	2 months ago
Makefile.am	rust: set CARGO_ENV when generating ffi bindings	2 months ago
cbindgen.toml	http2: split transaction state machines	4 months ago
rustfmt.toml	rustfmt: replace deprecated fn_args_layout with fn_params_layout	3 years ago