Staging/70x/v4#11609

Closed

jasonish wants to merge 290 commits intoOISF:masterfrom

jasonish:staging/70x/v4

This pull request is big! We're only showing the most recent 250 commits

Commits on Jan 18, 2024

detect/stream_size: fix prefiltering registration

regit
authored and
victorjulien
committed
userguide: remove old css files

jasonish
authored and
victorjulien
committed

Commits on Jan 20, 2024

log/sguil: Issue deprecation notice if sguil mode

jlucovsky
authored and
victorjulien
committed
htp/swf: Remove flash deprecation notice

jlucovsky
authored and
victorjulien
committed
feature: provide a Rust binding to the feature API

jasonish
authored and
victorjulien
committed
requires: add requires keyword

authored and
victorjulien
committed
requires: pre-scan rule for requires expressions

jasonish
authored and
victorjulien
committed
detect-parse: parse sid in pre-scan

jasonish
authored and
victorjulien
committed
stats: add rules skipped

jasonish
authored and
victorjulien
committed

Commits on Jan 25, 2024

endace: Fix source-dag timestamps

sfd
authored and
victorjulien
committed
source/erf-dag: compiler warnings

sfd
authored and
victorjulien
committed
detect: case-insensitive comparison for requires

catenacyber
authored and
victorjulien
committed
ipfw: close(2) instead shutdown(2) of the divert(4) socket

glebius
authored and
victorjulien
committed
flow-bypass: Set bypass thread to running state

vincentmli
authored and
victorjulien
committed
dpdk: rework hugepage hints to use per-numa information

Lukas Sismis
authored and
victorjulien
committed
doc: remove references to prehistoric versions

Lukas Sismis
authored and
victorjulien
committed
requirements: use libhtp 0.5.x

jasonish
authored and
victorjulien
committed
detect/requires: reset sigerror flags for each rule

jasonish
authored and
victorjulien
committed
doc: note what version "requires" was added in

jasonish
authored and
victorjulien
committed

Commits on Jan 30, 2024

detect: avoids case of useless detection on txs

catenacyber
authored and
victorjulien
committed
detect: merge sorted lists instead of qsort

catenacyber
authored and
victorjulien
committed
mqtt: fix logic when setting event

catenacyber
authored and
victorjulien
committed

Commits on Feb 6, 2024

http2: handle reassembly for continuation frames

catenacyber
authored and
victorjulien
committed
http1: remove transactions from their list

catenacyber
authored and
victorjulien
committed
http1: configurable max number of live tx per flow

authored and
victorjulien
committed
smtp: config limit maximum number of live transactions

catenacyber
authored and
victorjulien
committed
smtp: avoid creating empty transaction

catenacyber
authored and
victorjulien
committed
detect: fixes use-after-free with http.request_header

catenacyber
authored and
victorjulien
committed
pgsql: parse auth message within its bound

catenacyber
authored and
victorjulien
committed
pgsql: parse only PDU when type is unknown

catenacyber
authored and
victorjulien
committed
http2: limit number of concurrent transactions

catenacyber
authored and
victorjulien
committed

Commits on Feb 8, 2024

release: 7.0.3; update changelog
inashivb
committed

Commits on Feb 9, 2024

version: start development towards 7.0.4
inashivb
committed
ci: authors check using OISF repo

catenacyber
authored and
inashivb
committed
rust: fix clippy ptr_arg warnings

catenacyber
authored and
inashivb
committed
detect-http: add superfluous alloc check for cocci

jasonish
authored and
inashivb
committed
detect/http_header: fix leak on realloc failure

catenacyber
authored and
inashivb
committed
detect/http: report error on alloc failure

victorjulien
authored and
inashivb
committed

Commits on Feb 10, 2024

detect: errors on 65k filestore signatures

catenacyber
authored and
victorjulien
committed

Commits on Feb 14, 2024

app-layer/template: use a max number of txs
catenacyber
committed

Commits on Feb 15, 2024

detect: respect directionality for filestore

catenacyber
authored and
victorjulien
committed
util/mime: fix memory leak

jtstrs
authored and
victorjulien
committed
netmap: Release lock to avoid deadlock

jlucovsky
authored and
victorjulien
committed
threads/mutex: Ensure mutex held before signaling

jlucovsky
authored and
victorjulien
committed
detect/tls.certs: fix direction handling
victorjulien
committed
detect-engine-iponly: improve ip list performance

cccs-sadugas
authored and
victorjulien
committed
stats: Do not expand dots of tm_name

awelzel
authored and
victorjulien
committed
stats: Add unittest for basic stats serialization

awelzel
authored and
victorjulien
committed
multi-tenant: fix loader dead lock

victorjulien
and
inashivb
committed

Commits on Feb 21, 2024

tcp: do not assign TCP flags to pseudopackets

Lukas Sismis
authored and
lukashino
committed

Commits on Feb 22, 2024

mqtt: Improve frame parsing w/mult. PDUs

jlucovsky
authored and
catenacyber
committed

Commits on Feb 29, 2024

detect/mpm: don't test for impossible condition
victorjulien
committed
runmode/unix-socket: fix cppcheck warnings
victorjulien
committed
detect: fix memory leak in error handling
victorjulien
committed
cppcheck/detect: Address cppcheck memory leak

jlucovsky
authored and
victorjulien
committed
detect/address: avoid cppcheck false positive
victorjulien
committed
cppcheck: Address cpcheck report of an FP

jlucovsky
authored and
victorjulien
committed
pfring: fix leak of packet on exit

jasonish
authored and
victorjulien
committed
pfring: fix leak of configuration data and in single mode

jasonish
authored and
victorjulien
committed

Commits on Mar 2, 2024

errors: add SC_ENOENT error

Lukas Sismis
authored and
lukashino
committed
hugepages: run hugepage check only on DPDK runmode and on Linux

Lukas Sismis
authored and
lukashino
committed

Commits on Mar 4, 2024

dpdk: sanitize integer overflow in the configuration

Lukas Sismis
authored and
victorjulien
committed
dpdk: max cache size should be lower than one of the constraints

Lukas Sismis
authored and
victorjulien
committed

Commits on Mar 7, 2024

doc: mention the limited number of RX/TX descriptors on Intel NICs

lukashino
authored and
victorjulien
committed
userguide: fix explanation about bsize ranges

jufajardini
authored and
victorjulien
committed

Commits on Mar 9, 2024

output: log tx only when there is a fresh app update

catenacyber
authored and
victorjulien
committed
output/filestore: remove duplicate snprintf

catenacyber
authored and
victorjulien
committed
output/filestore: delay snprintf until needed

catenacyber
authored and
victorjulien
committed
dpdk: add a user warning on the change of RX/TX descriptors

Lukas Sismis
authored and
victorjulien
committed

Commits on Mar 11, 2024

thread modules: separate initialization from registration

jasonish
authored and
victorjulien
committed
plugins: initialize plugins earlier

jasonish
authored and
victorjulien
committed
netmap: Avoid HW errors when using pipes

jlucovsky
authored and
victorjulien
committed

Commits on Mar 13, 2024

dpdk: output unknown NIC's NUMA node message only on multi-node systems

Lukas Sismis
authored and
victorjulien
committed
decode/pppoe: pointer cast consistency

catenacyber
authored and
victorjulien
committed
decode/pppoe: skip useless loop unless debug

catenacyber
authored and
victorjulien
committed
napatech: emit HBA deprecation only once
perkinjo
committed

Commits on Mar 18, 2024

yaml: remove newline from error message
victorjulien
committed
detect: update packet action on protocol change

catenacyber
authored and
victorjulien
committed
detect: flush when setting no_inspection

catenacyber
authored and
victorjulien
committed
ci: update ubuntu22.04 builds with clang14+asan

catenacyber
authored and
victorjulien
committed
ssh: avoid quadratic complexity from long banner

catenacyber
authored and
victorjulien
committed
ssh: limit length for banner logs

catenacyber
authored and
victorjulien
committed

Commits on Mar 19, 2024

release: 7.0.4; update changelog
inashivb
committed

Commits on Mar 20, 2024

Commits on Mar 21, 2024

Commits on Mar 25, 2024

rust/mqtt: fix clippy 1.77 warning
catenacyber
committed

Commits on Mar 30, 2024

Commits on Apr 9, 2024

dpdk: add interrupt (power-saving) mode

Lukas Sismis
authored and
victorjulien
committed
docs/conf.py: fix python escape warning

jasonish
authored and
victorjulien
committed
configure: don't check ./revision, it never exists

jasonish
authored and
victorjulien
committed
docs/userguide: use a consistent date for reproducible builds

jasonish
authored and
victorjulien
committed
configure: export release date for documentation

jasonish
authored and
victorjulien
committed
configure: .git can be a file as well

jasonish
authored and
victorjulien
committed
host-info: remove pcre2_substring_list_free use
victorjulien
committed
detect/http: fix compile warning in body tests
victorjulien
committed

Commits on Apr 10, 2024

jsonbuilder: fix serialization of nan and inf

jasonish
authored and
victorjulien
committed

Commits on Apr 15, 2024

base64_data: inform of use w fast_pattern

inashivb
authored and
victorjulien
committed
doc: add note about fast_pattern w base64_data

inashivb
authored and
victorjulien
committed

Commits on Apr 16, 2024

Commits on Apr 17, 2024

conf: avoid quadratic complexity
catenacyber
committed
ci: clean some disk space to run CIFuzz again

catenacyber
authored and
victorjulien
committed

Commits on Apr 18, 2024

dataset: cleanup datasets that hit the memcap while loading

norg
authored and
catenacyber
committed

Commits on Apr 19, 2024

detect/ipopt: Misc. cleanup

jlucovsky
authored and
victorjulien
committed
detect/ipopts: Remove unneeded PCRE logic

jlucovsky
authored and
victorjulien
committed
detect/ipopts: Handle multiple ip options

jlucovsky
authored and
victorjulien
committed
dpdk: enlarge key length to 52 bytes

Lukas Sismis
authored and
victorjulien
committed
dpdk: support 52 byte long key on ice (E810) cards

Lukas Sismis
authored and
victorjulien
committed

Commits on Apr 22, 2024

defrag: minor cleanups

jasonish
authored and
victorjulien
committed
defrag: make tests more readable

jasonish
authored and
victorjulien
committed
defrag: consistent unit test naming

jasonish
authored and
victorjulien
committed
defrag: use uint8_t in unit tests

jasonish
authored and
victorjulien
committed
defrag: check next fragment for overlap before stopping re-assembly

jasonish
authored and
victorjulien
committed
defrag: fix subsequent overlap of start of original (bsd)

jasonish
authored and
victorjulien
committed
defrag: fix check for complete packet

jasonish
authored and
victorjulien
committed
util/base64: fix buffer overflow

catenacyber
authored and
victorjulien
committed
http2: use a reference counter for headers

catenacyber
authored and
victorjulien
committed
http2: do not log duplicate headers

catenacyber
authored and
victorjulien
committed
detect/parse: set limits for pcre2

catenacyber
authored and
victorjulien
committed

Commits on Apr 23, 2024

Commits on Apr 29, 2024

Commits on May 2, 2024

Commits on May 17, 2024

Commits on May 22, 2024

http: fix nul deref on memcap reached

catenacyber
authored and
victorjulien
committed

Commits on May 23, 2024

Commits on May 24, 2024

detect/engine: fix whitelisting check
victorjulien
committed
interval-tree: add base data structure

inashivb
authored and
victorjulien
committed
interval-tree: remove splay tree implementation

inashivb
authored and
victorjulien
committed
interval-tree: add augmentation fns to the tree

inashivb
authored and
victorjulien
committed
detect/port: make DetectPortInit non static

inashivb
authored and
victorjulien
committed
util/interval-tree: add utility fns

inashivb
and
victorjulien
committed
util/interval-tree: suppress cppcheck warnings

inashivb
authored and
victorjulien
committed
detect/port: find unique port points

inashivb
authored and
victorjulien
committed
detect/port: create a tree of given ports

inashivb
authored and
victorjulien
committed
detect/port: create list of small port ranges

inashivb
authored and
victorjulien
committed
detect/port: remove the port cut/insertion stage

inashivb
authored and
victorjulien
committed
detect/port: merge port ranges for same signatures

inashivb
authored and
victorjulien
committed
detect/port: use qsort instead of insert sort
victorjulien
committed
detect: prepare for SIMD optimizations
victorjulien
committed
detect: optimize group head bitarray handling
victorjulien
committed
detect: optimize sig_cnt setting
victorjulien
committed
util/interval-tree: fix coverity warning

inashivb
authored and
victorjulien
committed
detect/port: handle single port that is range too

inashivb
authored and
victorjulien
committed
detect/port: fix grouping of ports w gaps

inashivb
authored and
victorjulien
committed
detect/port: handle range and upper boundary ports

inashivb
authored and
victorjulien
committed
detect/port: clang fmt changes

inashivb
authored and
victorjulien
committed
detect/port: remove SigGroupHead* ops

inashivb
authored and
victorjulien
committed

Commits on May 30, 2024

Commits on Jun 2, 2024

eve: revert ethernet addresses when needed

regit
authored and
catenacyber
committed

Commits on Jun 6, 2024

Commits on Jun 8, 2024

Commits on Jun 21, 2024

smtp: exit data mode if data command was rejected

catenacyber
authored and
victorjulien
committed
eve/schema: complete and reorder smtp fields

catenacyber
authored and
victorjulien
committed
smtp: respect quotes for to and cc logging

catenacyber
authored and
victorjulien
committed
profiling: add option to active rules profiling at start

regit
authored and
victorjulien
committed
profiling: check packet flag first

regit
authored and
victorjulien
committed
rust: simply matches with unwrap_or_default

jasonish
authored and
victorjulien
committed
cargo: use default-features instead of default_features

jasonish
authored and
victorjulien
committed
rust: rename .cargo/config to .cargo/config.toml

jasonish
authored and
victorjulien
committed
rust: fix clippy lint for legacy_numeric_constants

jasonish
authored and
victorjulien
committed
rust/ike: prefix never read field names with _

jasonish
authored and
victorjulien
committed

Commits on Jun 22, 2024

doc: update eBPF compilation instructions

Lukas Sismis
authored and
lukashino
committed
github-ci: remove gosu from installed packages

Lukas Sismis
authored and
lukashino
committed
github-ci: add minimal build for Ubuntu and AlmaLinux

Lukas Sismis
authored and
lukashino
committed
doc: port user install and build instruction from master-6.0.x

Lukas Sismis
authored and
lukashino
committed

Commits on Jun 24, 2024

detect: fix check for app_layer events

catenacyber
authored and
victorjulien
committed
detect: add to signature mask for decode events

catenacyber
authored and
victorjulien
committed

Commits on Jun 25, 2024

defrag: don't use completed tracker
victorjulien
committed
modbus: abort flow parsing on flood

catenacyber
authored and
victorjulien
committed
http2: do not expand duplicate headers

catenacyber
authored and
victorjulien
committed

Commits on Jun 26, 2024

release: 7.0.6; update changelog
inashivb
committed

Commits on Jun 27, 2024

version: start development towards 7.0.7
inashivb
committed

Commits on Jun 28, 2024

changelog: update 7.0.6 CVEs and titles

inashivb
authored and
victorjulien
committed

Commits on Jul 2, 2024

Commits on Jul 4, 2024

detect/snmp: do not bother to free a null pointer
catenacyber
committed

Commits on Jul 7, 2024

Commits on Jul 8, 2024

util/thash: decrease memuse if array was allocated

catenacyber
authored and
victorjulien
committed

Commits on Jul 9, 2024

smb/ntlmssp: improve version check
victorjulien
committed

Commits on Jul 11, 2024

dns: allow triggering raw stream reassembly

jufajardini
authored and
victorjulien
committed

Commits on Jul 14, 2024

dpdk: replace TSC clock with GetTime (gettimeofday) function

Lukas Sismis
authored and
lukashino
committed

Commits on Aug 6, 2024