Skip to content

next/625/20241105/v1#12088

Merged
victorjulien merged 12 commits intoOISF:masterfrom
victorjulien:next/625/20241105/v1
Nov 5, 2024
Merged

next/625/20241105/v1#12088
victorjulien merged 12 commits intoOISF:masterfrom
victorjulien:next/625/20241105/v1

Conversation

satta and others added 12 commits November 5, 2024 11:39
Ticket: 7326

Having a lower progress than one where we actually can get
occurences of the multibuffer made prefilter
bail out too early, not having found a buffer in the multi-buffer
that matiched the prefilter.

For example, we registered http_request_header with progress 0
instad of progress HTP_REQUEST_HEADERS==2, and if the first
packet had only the request line, we would consider
that signatures with http_request_header as prefilter/fast_pattern
could not match for this transaction, even if they in fact
could have a later packet with matching headers.

Hence, we got false negatives, if http.request_header or
http.response_header was used as fast pattern, and if the request
or response came in multiple packets, and the first of these packets
did not have enough data (like only http request line),
and the next packets did have the matching data.
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@eef6144...11bd719)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.13 to 3.27.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.26.13...v3.27.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
- not_a_request to not_request
- not_a_response to not_reponse

Ticket: OISF#7361
- weak_crypto_nodh -> weak_crypto_no_dh
- weak_crypto_noauth -> weak_crypto_no_auth

Ticket: OISF#7361
The event "modbus.invalid_unit_identifier" no longer exists.

Ticket: OISF#7361
Rename InvalidHTTP1Settings to InvalidHttp1Settings so it gets the
expected name transformation of "invalid_http1_settings".

Ticket: OISF#7361
@victorjulien victorjulien requested review from a team, catenacyber and jasonish as code owners November 5, 2024 13:17
@codecov
Copy link

codecov bot commented Nov 5, 2024

Codecov Report

Attention: Patch coverage is 90.00000% with 4 lines in your changes missing coverage. Please review.

Project coverage is 83.25%. Comparing base (b1e7917) to head (dd71ef0).
Report is 12 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #12088      +/-   ##
==========================================
- Coverage   83.37%   83.25%   -0.13%     
==========================================
  Files         910      910              
  Lines      257556   257571      +15     
==========================================
- Hits       214748   214450     -298     
- Misses      42808    43121     +313     
Flag Coverage Δ
fuzzcorpus 61.16% <72.50%> (-0.38%) ⬇️
livemode 19.41% <37.50%> (-0.01%) ⬇️
pcap 44.47% <37.50%> (-0.04%) ⬇️
suricata-verify 62.78% <87.50%> (+0.02%) ⬆️
unittests 59.34% <37.50%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 23252

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

6 participants