Skip to content

Comments

next/321/20240228/v1#10522

Merged
victorjulien merged 10 commits intoOISF:masterfrom
victorjulien:next/321/20240228/v1
Feb 28, 2024
Merged

next/321/20240228/v1#10522
victorjulien merged 10 commits intoOISF:masterfrom
victorjulien:next/321/20240228/v1

Conversation

catenacyber and others added 10 commits February 26, 2024 11:16
Accepts valid characters as defined in RFC3261.
The `is_version_char` function incorrectly allowed characters that are not
part of the valid SIP version "SIP/2.0".

For instance, 'HTTP/1.1' was mistakenly accepted as a valid SIP version,
although it's not.

This commit fixes the issue by updating the condition to strictly
check for the correct version string.
This patch lets the parser to work over tcp protocol, taking care of handling
data before calling the request/response parsers.

Ticket OISF#3351.
This patch permits to set a direction when a new transaction is created in order
to avoid 'signature shadowing' as reported by Eric Leblond in commit
5aaf507
This permits to detect the SIP protocol using pattern matching instead of
probing parser.

Since it is no longer used, the respective probing functions have been removed.
@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 18788

Copy link
Contributor

@jufajardini jufajardini left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

5 participants