Skip to content

LDAP protocol parser v6#11513

Closed
glongo wants to merge 4 commits intoOISF:masterfrom
glongo:dev-1199-ldap-proto-v6
Closed

LDAP protocol parser v6#11513
glongo wants to merge 4 commits intoOISF:masterfrom
glongo:dev-1199-ldap-proto-v6

Conversation

@glongo
Copy link
Contributor

@glongo glongo commented Jul 16, 2024

Make sure these boxes are signed before submitting your Pull Request -- thank you.

Link to ticket: https://redmine.openinfosecfoundation.org/issues/1199

Describe changes:

  • Rebase
  • Set event for invalid data
  • Mark a tx complete when a request is not found, and set an event

SV_BRANCH=OISF/suricata-verify#1860

glongo added 4 commits July 16, 2024 15:09
This implementation adds types and filters specified in the LDAP RFC to
work with the ldap_parser.
Although using the parser directly would be
best, strange behavior has been observed during transaction logging.
It appears that C pointers are being overwritten, leading to incorrect
output when LDAP fields are logged.
@codecov
Copy link

codecov bot commented Jul 16, 2024

Codecov Report

Attention: Patch coverage is 69.01408% with 286 lines in your changes missing coverage. Please review.

Project coverage is 82.54%. Comparing base (bce8f4b) to head (a8b0395).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11513      +/-   ##
==========================================
- Coverage   82.66%   82.54%   -0.13%     
==========================================
  Files         918      922       +4     
  Lines      247447   248370     +923     
==========================================
+ Hits       204543   205005     +462     
- Misses      42904    43365     +461     
Flag Coverage Δ
fuzzcorpus 60.49% <12.35%> (-0.46%) ⬇️
livemode 18.63% <5.09%> (-0.09%) ⬇️
pcap 43.95% <66.52%> (+0.13%) ⬆️
suricata-verify 61.70% <67.93%> (+0.06%) ⬆️
unittests 59.11% <5.09%> (-0.20%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

WARNING:

field baseline test %
SURI_TLPW1_stats_chk
.app_layer.flow.failed_tcp 10174 9035 88.8%

Pipeline 21577

@victorjulien victorjulien added the needs baseline update QA will need a new base line label Jul 17, 2024
@victorjulien victorjulien added this to the 8.0 milestone Jul 17, 2024
@victorjulien
Copy link
Member

Merged in #11515, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs baseline update QA will need a new base line

Development

Successfully merging this pull request may close these issues.

3 participants