Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
290 commits
Select commit Hold shift + click to select a range
e1f2555
detect/stream_size: fix prefiltering registration
regit Nov 18, 2023
98e72a7
userguide: remove old css files
jasonish Nov 30, 2023
55772c3
log/sguil: Issue deprecation notice if sguil mode
jlucovsky Jan 16, 2024
40234b2
htp/swf: Remove flash deprecation notice
jlucovsky Jan 16, 2024
ea78420
feature: provide a Rust binding to the feature API
jasonish Dec 15, 2023
09fc367
requires: add requires keyword
jasonish Nov 28, 2023
e683e76
requires: pre-scan rule for requires expressions
jasonish Nov 29, 2023
1a7e883
detect-parse: parse sid in pre-scan
jasonish Nov 29, 2023
6e9d790
stats: add rules skipped
jasonish Dec 19, 2023
ab57fb9
endace: Fix source-dag timestamps
sfd Dec 11, 2023
c024702
source/erf-dag: compiler warnings
sfd Jan 10, 2024
08dae40
detect: case-insensitive comparison for requires
catenacyber Jan 4, 2024
e6646c8
ipfw: close(2) instead shutdown(2) of the divert(4) socket
glebius Jan 11, 2024
4a7c6e0
flow-bypass: Set bypass thread to running state
vincentmli Aug 4, 2023
aeb5564
dpdk: rework hugepage hints to use per-numa information
Oct 30, 2023
203f80b
doc: remove references to prehistoric versions
Dec 11, 2023
8e2ab32
requirements: use libhtp 0.5.x
jasonish Jan 24, 2024
1225c73
detect/requires: reset sigerror flags for each rule
jasonish Jan 24, 2024
cc6319b
doc: note what version "requires" was added in
jasonish Jan 24, 2024
f19b3a8
detect: avoids case of useless detection on txs
catenacyber Sep 7, 2023
f4910de
detect: merge sorted lists instead of qsort
catenacyber Sep 18, 2023
3cdd500
mqtt: fix logic when setting event
catenacyber Oct 17, 2023
478a2a3
http2: handle reassembly for continuation frames
catenacyber Jan 25, 2024
9795399
http1: remove transactions from their list
catenacyber Apr 7, 2023
e7e2882
http1: configurable max number of live tx per flow
catenacyber Oct 17, 2023
f9de1cc
smtp: config limit maximum number of live transactions
catenacyber Nov 9, 2023
cd035d5
smtp: avoid creating empty transaction
catenacyber Nov 14, 2023
cd731fc
detect: fixes use-after-free with http.request_header
catenacyber Nov 7, 2023
61a3236
pgsql: parse auth message within its bound
catenacyber Oct 17, 2023
b0d762d
pgsql: parse only PDU when type is unknown
catenacyber Oct 17, 2023
ce9b903
http2: limit number of concurrent transactions
catenacyber Nov 9, 2023
be68bbc
release: 7.0.3; update changelog
inashivb Feb 8, 2024
6b0ff3e
version: start development towards 7.0.4
inashivb Feb 9, 2024
a0254bf
ci: authors check using OISF repo
catenacyber Feb 7, 2024
8df02ba
rust: fix clippy ptr_arg warnings
catenacyber Feb 8, 2024
a846ff7
detect-http: add superfluous alloc check for cocci
jasonish Feb 8, 2024
6d69ed9
detect/http_header: fix leak on realloc failure
catenacyber Feb 8, 2024
ae6d040
detect/http: report error on alloc failure
victorjulien Feb 9, 2024
07e0f0d
detect: errors on 65k filestore signatures
catenacyber Oct 9, 2023
e917baa
app-layer/template: use a max number of txs
catenacyber Feb 12, 2024
5b93de0
detect: respect directionality for filestore
catenacyber Jan 25, 2024
e41018a
util/mime: fix memory leak
jtstrs Feb 7, 2024
912b1bd
netmap: Release lock to avoid deadlock
jlucovsky Feb 8, 2024
cf31c43
threads/mutex: Ensure mutex held before signaling
jlucovsky Feb 4, 2024
0cd1cd1
detect/tls.certs: fix direction handling
victorjulien Jan 27, 2024
a3eb58e
detect-engine-iponly: improve ip list performance
cccs-sadugas Dec 29, 2023
f8ec392
stats: Do not expand dots of tm_name
awelzel Feb 5, 2024
15bb1d4
stats: Add unittest for basic stats serialization
awelzel Feb 8, 2024
d93b21c
multi-tenant: fix loader dead lock
victorjulien Feb 11, 2024
1b474cd
tcp: do not assign TCP flags to pseudopackets
Feb 6, 2024
e5b006b
mqtt: Improve frame parsing w/mult. PDUs
jlucovsky Jan 3, 2024
ae6a663
detect/mpm: don't test for impossible condition
victorjulien Jan 5, 2024
554afa9
runmode/unix-socket: fix cppcheck warnings
victorjulien Feb 17, 2024
b225ac1
detect: fix memory leak in error handling
victorjulien Feb 20, 2024
0a93bf5
cppcheck/detect: Address cppcheck memory leak
jlucovsky Nov 25, 2023
56915b2
detect/address: avoid cppcheck false positive
victorjulien Feb 20, 2024
e34e9c9
cppcheck: Address cpcheck report of an FP
jlucovsky Nov 25, 2023
3c83397
pfring: fix leak of packet on exit
jasonish Feb 27, 2024
b6c609e
pfring: fix leak of configuration data and in single mode
jasonish Feb 27, 2024
5f6a424
errors: add SC_ENOENT error
Feb 10, 2024
36e23a7
hugepages: run hugepage check only on DPDK runmode and on Linux
Feb 10, 2024
98f965e
dpdk: sanitize integer overflow in the configuration
Feb 11, 2024
9aae9aa
dpdk: max cache size should be lower than one of the constraints
Feb 11, 2024
1814e81
doc: mention the limited number of RX/TX descriptors on Intel NICs
lukashino Feb 11, 2024
2efde5b
userguide: fix explanation about bsize ranges
jufajardini Jan 24, 2024
2c81fe1
output: log tx only when there is a fresh app update
catenacyber Feb 22, 2024
21ed3e3
output/filestore: remove duplicate snprintf
catenacyber Feb 26, 2024
e51b276
output/filestore: delay snprintf until needed
catenacyber Feb 27, 2024
38fec36
dpdk: add a user warning on the change of RX/TX descriptors
Mar 9, 2024
1291272
thread modules: separate initialization from registration
jasonish Feb 27, 2024
12ffd23
plugins: initialize plugins earlier
jasonish Feb 27, 2024
dc8e177
netmap: Avoid HW errors when using pipes
jlucovsky Mar 7, 2024
9437c6c
dpdk: output unknown NIC's NUMA node message only on multi-node systems
Mar 2, 2024
14d9691
decode/pppoe: pointer cast consistency
catenacyber Feb 19, 2024
8e8efd2
decode/pppoe: skip useless loop unless debug
catenacyber Mar 11, 2024
05640d8
napatech: emit HBA deprecation only once
perkinjo Jul 21, 2023
c8c7203
yaml: remove newline from error message
victorjulien Nov 20, 2023
14d4221
detect: update packet action on protocol change
catenacyber Oct 3, 2023
8b78f5e
detect: flush when setting no_inspection
catenacyber Nov 27, 2023
d4acd0f
ci: update ubuntu22.04 builds with clang14+asan
catenacyber Mar 14, 2024
f9ef96a
ssh: avoid quadratic complexity from long banner
catenacyber Feb 22, 2024
c0b9ddb
ssh: limit length for banner logs
catenacyber Feb 19, 2024
d8bad3b
release: 7.0.4; update changelog
inashivb Mar 19, 2024
acc898f
version: start development towards 7.0.5
inashivb Mar 20, 2024
58c61f1
rust: add MSRV as rust-version
victorjulien Mar 20, 2024
5a05e02
rust: fix clippy 1.77 warning
catenacyber Mar 21, 2024
fce01da
rust/smb: fix clippy nightly warning
catenacyber Mar 21, 2024
80d2c6e
rust/mqtt: fix clippy 1.77 warning
catenacyber Mar 21, 2024
4331da4
flow/inject: Ensure initialized thread value used
jlucovsky Mar 11, 2024
158018f
flow: Swap thread_ids
jlucovsky Mar 11, 2024
ac67861
dpdk: add interrupt (power-saving) mode
Sep 27, 2023
3b8ddf3
docs/conf.py: fix python escape warning
jasonish Apr 1, 2024
e6dd68f
configure: don't check ./revision, it never exists
jasonish Apr 2, 2024
363ca13
docs/userguide: use a consistent date for reproducible builds
jasonish Apr 1, 2024
e0e6ad2
configure: export release date for documentation
jasonish Apr 1, 2024
41926c5
configure: .git can be a file as well
jasonish Apr 5, 2024
e024c7a
host-info: remove pcre2_substring_list_free use
victorjulien Apr 4, 2024
65e1c37
detect/http: fix compile warning in body tests
victorjulien Mar 28, 2024
b83d808
jsonbuilder: fix serialization of nan and inf
jasonish Apr 5, 2024
d4e64e3
base64_data: inform of use w fast_pattern
inashivb Apr 3, 2024
f0b8562
doc: add note about fast_pattern w base64_data
inashivb Apr 3, 2024
8404a7f
defrag: match up v4 and v6 packet setup
victorjulien Dec 3, 2023
6210b82
defrag: fix wrong datalink being logged
victorjulien Mar 23, 2024
b146068
pcap: support LINKTYPE_IPV6 (229)
victorjulien Apr 12, 2024
fc8a360
stats: Fix non-worker stats missing
awelzel Feb 17, 2024
ba46f2f
schema: Add stats.capture and in_iface properties
awelzel Feb 20, 2024
6be6d53
flow/inject: Select thread_id by flow flag
jlucovsky Apr 15, 2024
26a5357
conf: avoid quadratic complexity
catenacyber Mar 21, 2024
5267479
ci: clean some disk space to run CIFuzz again
catenacyber Apr 12, 2024
5980011
dataset: cleanup datasets that hit the memcap while loading
norg Apr 16, 2024
b59e1dc
detect/ipopt: Misc. cleanup
jlucovsky Mar 21, 2024
2100c34
detect/ipopts: Remove unneeded PCRE logic
jlucovsky Mar 21, 2024
f3a7b0f
detect/ipopts: Handle multiple ip options
jlucovsky Apr 16, 2024
438f855
dpdk: enlarge key length to 52 bytes
Mar 26, 2024
5c180d8
dpdk: support 52 byte long key on ice (E810) cards
Mar 26, 2024
93ac371
detect/http-server-body: avoid FP on toserver direction
catenacyber Apr 17, 2024
8b1dcbd
streaming/buffer: improve integer handling safety
victorjulien Mar 28, 2024
b8739ea
capture: improve IDS + IPS check
victorjulien Apr 16, 2024
04b8a7a
ips: check for livedev.use-for-tracking
victorjulien Apr 16, 2024
bcc7343
defrag: minor cleanups
jasonish Dec 8, 2023
54ffe12
defrag: make tests more readable
jasonish Nov 27, 2023
7137d5e
defrag: consistent unit test naming
jasonish Nov 27, 2023
6578f74
defrag: use uint8_t in unit tests
jasonish Jan 12, 2024
2f39ba7
defrag: check next fragment for overlap before stopping re-assembly
jasonish Nov 28, 2023
1e110d0
defrag: fix subsequent overlap of start of original (bsd)
jasonish Dec 7, 2023
e626775
defrag: fix check for complete packet
jasonish Jan 12, 2024
311002b
util/base64: fix buffer overflow
catenacyber Mar 28, 2024
e68ec4b
http2: use a reference counter for headers
catenacyber Mar 27, 2024
c0af922
http2: do not log duplicate headers
catenacyber Mar 28, 2024
bcc65a7
detect/parse: set limits for pcre2
catenacyber Mar 24, 2024
c4cf7b0
release: 7.0.5; update changelog
inashivb Apr 23, 2024
27fbb70
version: start development towards 7.0.6
inashivb Apr 23, 2024
f806fbe
tls/random: fix incorrect direction handling
inashivb Apr 26, 2024
358062b
github-ci/formatting: update to Ubuntu 22.04
jasonish Dec 6, 2023
f303779
clang-format.sh: prefer clang-format-14
jasonish Dec 6, 2023
ed8258c
defrag: apply clang formatting
inashivb Apr 29, 2024
7d26045
ci: fix macos build
catenacyber Apr 23, 2024
2f42d89
detect/iprep: minor code cleanups
victorjulien Apr 25, 2024
514f3c5
detect/iprep: allow 0 as a reputation value
victorjulien Apr 25, 2024
84fc3be
detect/iprep: update doc about 0 value
victorjulien Apr 25, 2024
5a5fe36
tests: do not bother to free a null pointer
catenacyber May 7, 2024
e797836
rust: return empty slice without using from_raw_parts
catenacyber May 7, 2024
b556619
rust/probing: safety check for null input
catenacyber May 7, 2024
2bd3bd0
http: fix nul deref on memcap reached
catenacyber May 17, 2024
aa034a6
profiling/rules: Improve dynamic rule handling
jlucovsky Mar 16, 2024
151b528
time: only consider packet threads
victorjulien May 20, 2024
87be155
pcap-log: use correct pkthdr size for limit enforcement
victorjulien May 21, 2024
e87fe32
app-layer: Set sc_errno upon error return
rmcconnell-r7 May 16, 2024
043efd4
device: don't crash on unix command 'iface-bypassed-stat'
victorjulien May 14, 2024
9a74eaa
hostbits: release use_cnt for unix (add|remove)-hostbit
victorjulien May 14, 2024
701468d
decode/ppp: support different header formats
victorjulien Apr 12, 2024
4f0709e
decode/ppp: remove ppph check in favor of flag
victorjulien Apr 12, 2024
c064537
decode/ppp: clean up ppph pointer use
victorjulien Apr 12, 2024
59f922a
decode/ppp: add missing types definitions
victorjulien Apr 15, 2024
8eb461a
decode/ppp: fix iplen check int handling
victorjulien Apr 16, 2024
582014b
output: do not use tx id 0 when there is no tx
catenacyber Mar 11, 2024
a07a0c3
output/alert: check flag before logging app-layer
catenacyber Mar 13, 2024
d910924
detect: use direction-based tx for app-layer logging
catenacyber Apr 18, 2024
930eadd
detect: log relevant frames app-layer metadata
catenacyber Apr 19, 2024
40d3e1e
detect/engine: fix whitelisting check
victorjulien Jan 12, 2024
0d05dcb
interval-tree: add base data structure
inashivb Feb 16, 2024
c6b7cb9
interval-tree: remove splay tree implementation
inashivb Feb 16, 2024
e399485
interval-tree: add augmentation fns to the tree
inashivb Jan 29, 2024
98ecc34
detect/port: make DetectPortInit non static
inashivb Feb 14, 2024
d533a2c
util/interval-tree: add utility fns
inashivb Feb 16, 2024
d20564a
util/interval-tree: suppress cppcheck warnings
inashivb Mar 4, 2024
42e6188
detect/port: find unique port points
inashivb Feb 16, 2024
4b66992
detect/port: create a tree of given ports
inashivb Feb 16, 2024
09da908
detect/port: create list of small port ranges
inashivb Feb 20, 2024
9b11fef
detect/port: remove the port cut/insertion stage
inashivb Feb 20, 2024
83eb0a0
detect/port: merge port ranges for same signatures
inashivb Feb 21, 2024
fb8c3c8
detect/port: use qsort instead of insert sort
victorjulien Feb 26, 2024
14e8c55
detect: prepare for SIMD optimizations
victorjulien Feb 26, 2024
56790e9
detect: optimize group head bitarray handling
victorjulien Mar 5, 2024
7b3783d
detect: optimize sig_cnt setting
victorjulien Mar 5, 2024
c284b4c
util/interval-tree: fix coverity warning
inashivb Mar 8, 2024
e9d9db6
detect/port: handle single port that is range too
inashivb Mar 9, 2024
528d1f1
detect/port: fix grouping of ports w gaps
inashivb Mar 21, 2024
3850992
detect/port: handle range and upper boundary ports
inashivb Mar 25, 2024
e1ed0be
detect/port: clang fmt changes
inashivb Mar 29, 2024
ee3485e
detect/port: remove SigGroupHead* ops
inashivb Feb 28, 2024
183a6f2
threads: optimize start up check
victorjulien May 27, 2024
f3b2e96
threads: give threads more time to get ready
victorjulien May 29, 2024
e58f318
eve: revert ethernet addresses when needed
regit Oct 15, 2023
b6520aa
github-action: remove end of life CentOS 8 stream
victorjulien Jun 3, 2024
b5e5258
output/streaming: suppress noisy start up message
victorjulien Jun 1, 2024
3a7f083
output/lua: handle registration error
victorjulien Jun 1, 2024
0d929a4
util/radix-tree: fix potential dereference of nullptr
jtstrs May 28, 2024
e64ef02
detect/tls.store: fix direction check
victorjulien May 25, 2024
9dc9fbe
github-actions: bump scan-build to Ubuntu 24.04 / clang 18
victorjulien May 25, 2024
00c7473
doc: add source verification docs
jmtaylor90 May 22, 2024
d2436eb
suricata: initialize feature tracking earlier
satta Feb 24, 2024
f48b48d
ja3: make feature compile time configurable
satta Apr 12, 2024
93fd349
ja4: implement for TLS and QUIC
satta Feb 24, 2024
247fc2b
tests/ja4: config message when ja4 auto enabled
jlucovsky May 8, 2024
1f5e10a
output/ja4: Restrict ja4 hashes to alerts
jlucovsky Jun 1, 2024
ffca765
output/ja4: Log ja4 hashes iff configured
jlucovsky Jun 5, 2024
7f0a53d
smtp: exit data mode if data command was rejected
catenacyber Mar 30, 2024
b9cd802
eve/schema: complete and reorder smtp fields
catenacyber May 23, 2024
897fc4c
smtp: respect quotes for to and cc logging
catenacyber Jun 4, 2024
8baa505
profiling: add option to active rules profiling at start
regit Nov 8, 2023
5d8ac12
profiling: check packet flag first
regit Nov 8, 2023
d88eb34
rust: simply matches with unwrap_or_default
jasonish Jun 20, 2024
9c9181e
cargo: use default-features instead of default_features
jasonish Jun 20, 2024
97409fe
rust: rename .cargo/config to .cargo/config.toml
jasonish May 16, 2024
192ef5b
rust: fix clippy lint for legacy_numeric_constants
jasonish Jun 20, 2024
82b502e
rust/ike: prefix never read field names with _
jasonish Jun 20, 2024
7799794
doc: update eBPF compilation instructions
Jan 16, 2024
8216b5b
github-ci: remove gosu from installed packages
Apr 11, 2024
2101573
github-ci: add minimal build for Ubuntu and AlmaLinux
Apr 11, 2024
7cc8693
doc: port user install and build instruction from master-6.0.x
Jan 16, 2024
0ed4d29
detect: fix check for app_layer events
catenacyber Jun 19, 2024
b47c351
detect: add to signature mask for decode events
catenacyber Jun 19, 2024
aab7f35
defrag: don't use completed tracker
victorjulien Jun 4, 2024
a753cdb
modbus: abort flow parsing on flood
catenacyber Apr 25, 2024
c82fa5c
http2: do not expand duplicate headers
catenacyber Jun 17, 2024
9db8668
release: 7.0.6; update changelog
inashivb Jun 26, 2024
561d2d3
version: start development towards 7.0.7
inashivb Jun 27, 2024
270e49d
changelog: update 7.0.6 CVEs and titles
inashivb Jun 28, 2024
c016843
detect/noalert: minor cleanup
victorjulien Jan 12, 2024
6fbcab4
detect/alert: minor loop cleanup
victorjulien Jan 12, 2024
1f69d6c
detect/flowbits: remove DETECT_FLOWBITS_CMD_NOALERT
inashivb Dec 9, 2023
5bcbbf3
detect: set ACTION_ALERT for rules that should alert
victorjulien Jan 12, 2024
b3fa19f
detect: implement 'alert' keyword as a companion to 'noalert'
victorjulien Jan 12, 2024
8fdbb0b
doc/userguide: give pcre1 to pcre2 proper heading
victorjulien Jun 6, 2024
e04d8f3
doc/userguide: add noalert/alert keyword docs
victorjulien Jun 6, 2024
104ec01
detect/noalert: point noalert/alert to new doc
victorjulien Jun 7, 2024
27deff0
github-actions: remove build for EOL centos:7
victorjulien Jul 2, 2024
4f91c62
detect/snmp: do not bother to free a null pointer
catenacyber Jul 2, 2024
ea21590
filestore: do not try to store a file set to nostore
catenacyber Dec 7, 2023
f653a4e
bypass: really bypass udp flow from first packet
catenacyber May 30, 2024
b4acd71
detect/iprep: update keyword parser for extendibility
victorjulien May 13, 2024
524ee70
reputation: minor cleanup
victorjulien May 13, 2024
d2ee5a1
detect/iprep: implement isset and isnotset
victorjulien May 13, 2024
b014b1e
doc/userguide: add more operators to iprep
victorjulien Jun 6, 2024
6824a4b
doc/userguide: document iprep isset/isnotset
victorjulien Jun 6, 2024
c9dbc56
util/thash: decrease memuse if array was allocated
catenacyber Jul 4, 2024
ff8d9ca
smb/ntlmssp: improve version check
victorjulien Jun 25, 2024
f74fa89
dns: allow triggering raw stream reassembly
jufajardini May 21, 2024
ee9aad2
dpdk: replace TSC clock with GetTime (gettimeofday) function
Jul 14, 2024
002f525
detect/integers: harmonize parser return handling
catenacyber Jul 15, 2024
5a5364e
output/json: Close jb object on error
jlucovsky Jul 31, 2024
a343422
fuzz: make confyaml.c an explicit source
catenacyber Jul 29, 2024
9fb9287
rust: fix clippy warnings for match as if statements
jasonish Aug 6, 2024
d4f187c
rust/ssh: fix clippy warning, reference can be used
jasonish Aug 6, 2024
a1e8224
rust/dcerpc: clippy fix for match
jasonish Aug 6, 2024
2d08848
rust/http2: remove redundant pattern match
jasonish Aug 6, 2024
fe2ad03
rust/conf: collapse match pattern into if
jasonish Aug 6, 2024
eecadab
rust/dcerpc: fix rustdoc indentation
jasonish Aug 6, 2024
d6fb942
configure: require cbindgen version of 0.16.0 or newer
jasonish Aug 6, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 7 additions & 11 deletions .github/workflows/authors.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,20 +8,16 @@ jobs:
name: New Author Check
runs-on: ubuntu-latest
steps:
- name: Checkout PR code
uses: actions/checkout@v3
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- run: sudo apt -y install git
- run: git clone https://github.com/${{ github.repository }}
- run: git remote add author ${{ github.event.pull_request.head.repo.html_url }}
working-directory: suricata
- run: git fetch author
working-directory: suricata
- run: git checkout author/${{ github.event.pull_request.head.ref }}
working-directory: suricata
- name: Export known authors from master branch
run: git log --format="%an <%ae>" origin/master | sort | uniq > ../authors.txt
working-directory: suricata
run: git log --format="%an <%ae>" origin/master | sort | uniq > authors.txt
- name: Export authors from new commits
run: git log --format="%an <%ae>" origin/${GITHUB_BASE_REF}... | sort | uniq > ../commit-authors.txt
working-directory: suricata
run: git log --format="%an <%ae>" origin/${GITHUB_BASE_REF}... | sort | uniq > commit-authors.txt
- name: Check new authors
run: |
touch new-authors.txt
Expand Down
Loading