Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

next/484/20240615/v1 #11309

Merged
merged 22 commits into from
Jun 16, 2024
Merged

Conversation

victorjulien and others added 22 commits June 15, 2024 15:43
No need to init ptrs to NULL after SCCalloc.
Implement special "isset" and "isnotset" modes.

"isset" matches if an IP address is part of an iprep category with any
value.

It is internally implemented as ">=,0", which should always be true if
there is a value to evaluate, as valid reputation values are 0-127.

"isnotset" matches if an IP address is not part of an iprep category.

Internally it is implemented outside the uint support.

Ticket: OISF#6857.
Bring in line with new Rust code naming for FFI functions.
When replaying a pcap file, it is not possible to get rules
profiling because it has to be activated from the unix socket.
This patch adds a new option to be able to activate profiling
collection at start so a pcap run can get rules profiling
information.
This fixes the state handling and simplify the logic.
As the function SCEnipRegisterParsers is already marked as unsafe
detect: make number of keywords dynamic

Ticket: 4683
Ticket: 4863

On the way, convert unit test DetectSNMPCommunityTest to a SV test.

And also, make snmp.pdu_type use a generic uint32 for detection,
allowing operators, instead of just equality.
"default_features" is being deprecated in Rust 2024.
New warning from rustc.

The other option is to allow dead code, however this is more explicit,
and when they are read, its obvious they should be renamed.
@victorjulien victorjulien requested review from jasonish, jufajardini and a team as code owners June 15, 2024 17:39
Copy link

codecov bot commented Jun 15, 2024

Codecov Report

Attention: Patch coverage is 85.64103% with 252 lines in your changes missing coverage. Please review.

Project coverage is 82.47%. Comparing base (f0dbfe8) to head (49ecf37).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11309      +/-   ##
==========================================
+ Coverage   82.45%   82.47%   +0.01%     
==========================================
  Files         961      934      -27     
  Lines      251710   252270     +560     
==========================================
+ Hits       207552   208055     +503     
- Misses      44158    44215      +57     
Flag Coverage Δ
fuzzcorpus 60.26% <51.38%> (-0.05%) ⬇️
livemode 18.76% <36.70%> (+0.07%) ⬆️
pcap 43.77% <37.42%> (-0.02%) ⬇️
suricata-verify 61.31% <82.91%> (+0.13%) ⬆️
unittests 59.91% <44.72%> (-0.05%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

WARNING:

ERROR: QA failed on SURI_TLPR1_suri_time.

field baseline test %
SURI_TLPW2_autofp_stats_chk
.flow.end.tcp_state.last_ack 0 1 -
SURI_TLPR1_stats_chk
.uptime 642 688 107.17%

Pipeline 21097

Copy link
Member

@jasonish jasonish left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Merge looks clean.

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 21100

@victorjulien victorjulien merged commit 49ecf37 into OISF:master Jun 16, 2024
53 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

5 participants