Skip to content

Comments

Detect dynamic register keywords 4683 v2#10992

Closed
catenacyber wants to merge 4 commits intoOISF:masterfrom
catenacyber:detect-dynamic-register-keywords-4683-v2
Closed

Detect dynamic register keywords 4683 v2#10992
catenacyber wants to merge 4 commits intoOISF:masterfrom
catenacyber:detect-dynamic-register-keywords-4683-v2

Conversation

@catenacyber
Copy link
Contributor

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/4683

Describe changes:

  • detect: helper to have pure rust keywords
  • make keywords registration dynamic
  • detect/snmp: move keywords to rust
  • convert unit test DetectSNMPCommunityTest to a SV test.
  • snmp.pdu_type use a generic uint32 for detection, allowing >2 and such

SV_BRANCH=OISF/suricata-verify#1804

Continuation of #9871 after merge of #10819

After the merge of loggers, pure rust plugins will need pure rust keywords.
The plan is to do this for all rust app-layers, now only done for SNMP, which has both integers and buffers as keywords.

#10966 new version

Still draft to get clean CI for fuzz targets and MacOS

detect: make number of keywords dynamic

Ticket: 4683
Ticket: 4863

On the way, convert unit test DetectSNMPCommunityTest to a SV test.

And also, make snmp.pdu_type use a generic uint32 for detection,
allowing operators, instead of just equality.
@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 20418

@catenacyber catenacyber force-pushed the detect-dynamic-register-keywords-4683-v2 branch from 2bb05ca to 9ee2dac Compare April 30, 2024 20:19
@codecov
Copy link

codecov bot commented Apr 30, 2024

Codecov Report

Attention: Patch coverage is 78.29457% with 56 lines in your changes are missing coverage. Please review.

Project coverage is 82.99%. Comparing base (df8568e) to head (9ee2dac).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #10992      +/-   ##
==========================================
- Coverage   83.03%   82.99%   -0.04%     
==========================================
  Files         917      912       -5     
  Lines      248684   248658      -26     
==========================================
- Hits       206489   206376     -113     
- Misses      42195    42282      +87     
Flag Coverage Δ
fuzzcorpus 64.27% <67.44%> (-0.10%) ⬇️
suricata-verify 62.75% <73.64%> (+0.06%) ⬆️
unittests 62.27% <47.67%> (-0.06%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 20463

@catenacyber
Copy link
Contributor Author

Continued in #11035

@catenacyber catenacyber closed this May 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants