Content-Length: 262477 | pFad | http://github.com/OISF/suricata/pull/12422/commits/0ccc28cffe1f5e597600c54de05e5e03f277c522

76 Detect rule hook/v7 by victorjulien · Pull Request #12422 · OISF/suricata · GitHub
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Detect rule hook/v7 #12422

Closed
wants to merge 17 commits into from
Closed

Detect rule hook/v7 #12422

Changes from 1 commit
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
220894b
detect/profile: convert rule grouping dump to json builder
victorjulien Feb 15, 2025
e938ad8
smtp/events: set direction on rules
victorjulien Feb 15, 2025
d94ee5b
detect: don't register duplicate app inspect engines
victorjulien Jan 27, 2025
bc12994
detect/nfs: don't double register nfq_request generic list
victorjulien Jan 27, 2025
187cd91
detect/tls: don't double register tls_validity generic list
victorjulien Feb 13, 2025
9db5e02
detect: move non-pf rules into special prefilter engines
victorjulien Dec 28, 2023
6ebe289
app-layer: constify AppLayerGetProtoByName
victorjulien Jan 13, 2025
a686ab2
detect: allow longer buffer names
victorjulien Jan 20, 2025
0ccc28c
tls: fix handshake handling being too strict
victorjulien Jan 17, 2025
e391ce5
tls: introduce per direction progress tracking
victorjulien Jan 16, 2025
c12cc12
app-layer: API for mapping progress name vs id
victorjulien Jan 17, 2025
6862257
tls: expose progress by name
victorjulien Jan 17, 2025
66da9fb
http1: register progress state names
victorjulien Jan 23, 2025
11c1dc6
WIP detect: introduce explicit hooks
victorjulien Jan 14, 2025
a2249fc
detect/lua: use rule hook instead of init() 'needs' table
victorjulien Jan 19, 2025
f4874cd
detect: reuse hook based generic lists
victorjulien Jan 20, 2025
ef1291b
WIP start of pkt hook
victorjulien Jan 23, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
tls: fix handshake handling being too strict 
e.g. server hello done has no data
  • Loading branch information
@victorjulien
victorjulien committed Feb 16, 2025
commit 0ccc28cffe1f5e597600c54de05e5e03f277c522
4 changes: 1 addition & 3 deletions src/app-layer-ssl.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1664,6 +1664,7 @@ static int SupportedHandshakeType(const uint8_t type)
}

/**
* \param input_len length of bytes after record header. Can be 0 (e.g. for server hello done).
* \retval parsed number of consumed bytes
* \retval < 0 error
*/
Expand All @@ -1673,9 +1674,6 @@ static int SSLv3ParseHandshakeType(SSLState *ssl_state, const uint8_t *input,
const uint8_t *initial_input = input;
int rc;

if (input_len == 0) {
return 0;
}
DEBUG_VALIDATE_BUG_ON(RecordAlreadyProcessed(ssl_state->curr_connp));

switch (ssl_state->curr_connp->handshake_type) {
Expand Down








ApplySandwichStrip

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier!      Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

Fetched URL: http://github.com/OISF/suricata/pull/12422/commits/0ccc28cffe1f5e597600c54de05e5e03f277c522

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy