-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
next/698/20250123/v1 #12462
next/698/20250123/v1 #12462
Conversation
In preparation of flowbit prefilter work that needs this info earlier. Track potential prefilter sm's to avoid unnecessary looping during setup.
Instead of C files requiring it. In preparation of libhtp rust, to minimize the final commit.
In preparation of libhtp rust This occurence was missed in 23050d7
For request and response headers In preparation of libhtp rust
In preparation of libhtp rust
ldap.request.operation matches on Lightweight Directory Access Protocol request operations This keyword maps to the eve field ldap.request.operation It is an unsigned 8-bit integer Doesn't support prefiltering Ticket: OISF#7453
ldap.responses.operation matches on Lightweight Directory Access Protocol response operations This keyword maps to the eve field ldap.responses[].operation It is an unsigned 8-bit integer Doesn't support prefiltering Ticket: OISF#7453
ldap.responses.count matches on the number of LDAP responses This keyword maps to the eve field len(ldap.responses[]) It is an unsigned 32-bit integer Doesn't support prefiltering Ticket: OISF#7453
make should rerun cbindgen if cbindgen.toml is modified
Just use a regular compile time rust export, instead of having a runtime definition through the SuricataContext structure
when compiling without unit tests detect-transform-base64.c:47:9: warning: macro is not used [-Wunused-macros] 47 | #define DETECT_TRANSFORM_FROM_BASE64_MODE_DEFAULT (uint8_t) Base64ModeRFC4648
Make all the hasher's have the same variants: - add hex digest for sha256 - add finalize to hex for sha1 - add hex digest for sha1
Expose md5, sha1, and sha256 to Lua scripts with `require("suricata.hashing")`. Ticket: 7073
Use a single array of built-ins and provide 2 functions for registering them: - SCLuaLoadBuiltIn: for loading built-in modules in sandboxed environments. - SCLuaRequirefBuiltIns: registers built-in modules with the standard package tool, allows built-ins to be loaded by output scripts that are not restricted I hope to refactor the sandbox so they can use SCLuaRequirefBuiltIns as well.
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## master #12462 +/- ##
==========================================
- Coverage 80.63% 80.52% -0.12%
==========================================
Files 920 923 +3
Lines 258739 259176 +437
==========================================
+ Hits 208643 208708 +65
- Misses 50096 50468 +372
Flags with carried forward coverage won't be shown. Click here to find out more. |
WARNING:
Pipeline 24338 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks consistent with the approved PRs, with green CI, including a good SV branch with all the tests for each approved PR...
Information: QA ran without warnings. Pipeline 24344 |
Staging:
SV_BRANCH=OISF/suricata-verify#2253