Skip to content

next/484/20240615/v1#11309

Merged
victorjulien merged 22 commits into
OISF:masterfrom
victorjulien:next/484/20240615/v1
Jun 16, 2024
Merged

next/484/20240615/v1#11309
victorjulien merged 22 commits into
OISF:masterfrom
victorjulien:next/484/20240615/v1

Conversation

victorjulien and others added 22 commits June 15, 2024 15:43
No need to init ptrs to NULL after SCCalloc.
Implement special "isset" and "isnotset" modes.

"isset" matches if an IP address is part of an iprep category with any
value.

It is internally implemented as ">=,0", which should always be true if
there is a value to evaluate, as valid reputation values are 0-127.

"isnotset" matches if an IP address is not part of an iprep category.

Internally it is implemented outside the uint support.

Ticket: OISF#6857.
Bring in line with new Rust code naming for FFI functions.
When replaying a pcap file, it is not possible to get rules
profiling because it has to be activated from the unix socket.
This patch adds a new option to be able to activate profiling
collection at start so a pcap run can get rules profiling
information.
This fixes the state handling and simplify the logic.
As the function SCEnipRegisterParsers is already marked as unsafe
detect: make number of keywords dynamic

Ticket: 4683
Ticket: 4863

On the way, convert unit test DetectSNMPCommunityTest to a SV test.

And also, make snmp.pdu_type use a generic uint32 for detection,
allowing operators, instead of just equality.
"default_features" is being deprecated in Rust 2024.
New warning from rustc.

The other option is to allow dead code, however this is more explicit,
and when they are read, its obvious they should be renamed.
@victorjulien victorjulien requested review from a team, jasonish and jufajardini as code owners June 15, 2024 17:39
@codecov
Copy link
Copy Markdown

codecov Bot commented Jun 15, 2024

Codecov Report

Attention: Patch coverage is 85.64103% with 252 lines in your changes missing coverage. Please review.

Project coverage is 82.47%. Comparing base (f0dbfe8) to head (49ecf37).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11309      +/-   ##
==========================================
+ Coverage   82.45%   82.47%   +0.01%     
==========================================
  Files         961      934      -27     
  Lines      251710   252270     +560     
==========================================
+ Hits       207552   208055     +503     
- Misses      44158    44215      +57     
Flag Coverage Δ
fuzzcorpus 60.26% <51.38%> (-0.05%) ⬇️
livemode 18.76% <36.70%> (+0.07%) ⬆️
pcap 43.77% <37.42%> (-0.02%) ⬇️
suricata-verify 61.31% <82.91%> (+0.13%) ⬆️
unittests 59.91% <44.72%> (-0.05%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link
Copy Markdown

WARNING:

ERROR: QA failed on SURI_TLPR1_suri_time.

field baseline test %
SURI_TLPW2_autofp_stats_chk
.flow.end.tcp_state.last_ack 0 1 -
SURI_TLPR1_stats_chk
.uptime 642 688 107.17%

Pipeline 21097

Copy link
Copy Markdown
Member

@jasonish jasonish left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Merge looks clean.

@suricata-qa
Copy link
Copy Markdown

Information: QA ran without warnings.

Pipeline 21100

@victorjulien victorjulien merged commit 49ecf37 into OISF:master Jun 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

5 participants