Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dynamic alprotos : make SNMP totally dynamic v10 #12671

Open
wants to merge 8 commits into
base: master
Choose a base branch
from

Conversation

catenacyber
Copy link
Contributor

Link to ticket: https://redmine.openinfosecfoundation.org/issues/
https://redmine.openinfosecfoundation.org/issues/5053

Describe changes:

  • detect: fix overflow for files protocol as reported by coverity
  • snmp: register protocol dynamically, to do so :
    • make some arrays even more dynamic
    • add an helper function AppProtoNewProtoFromString
    • have plugins be able to log flow or packet direction (update SC_PLUGIN_API_VERSION)

#12599 with needed rebase

CID 1640392

Would happen only if we reached 15 protocols handling files
Ticket: 5053

Do not asume that we know the number of alprotos at the end
of AppLayerNamesSetup, but make arrays allocated by later
AppLayerProtoDetectSetup dynamic so that it can be reallocated
from AppLayerParserRegisterProtocolParsers

This helps have a single entry point for a protocol like SNMP
So that we do not have to know g_alproto_max to register
dynamically a new protocol from its name
Ticket: 5053

Move enum OutputJsonLogDirection and struct
EveJsonTxLoggerRegistrationData from C to rust
and cast

and also remove unneeded mut

and rustfmt
@catenacyber catenacyber force-pushed the applayer-plugin-5053-v4.10 branch from f57b7f4 to ab1bcc5 Compare February 25, 2025 12:53
Copy link

codecov bot commented Feb 25, 2025

Codecov Report

Attention: Patch coverage is 84.52381% with 13 lines in your changes missing coverage. Please review.

Project coverage is 80.92%. Comparing base (3bc2a14) to head (45943a0).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #12671      +/-   ##
==========================================
+ Coverage   80.77%   80.92%   +0.14%     
==========================================
  Files         932      932              
  Lines      259517   259555      +38     
==========================================
+ Hits       209629   210039     +410     
+ Misses      49888    49516     -372     
Flag Coverage Δ
fuzzcorpus 57.39% <79.51%> (+0.39%) ⬆️
livemode 19.43% <56.62%> (+0.05%) ⬆️
pcap 44.19% <75.90%> (+0.03%) ⬆️
suricata-verify 63.53% <85.36%> (+0.02%) ⬆️
unittests 58.34% <56.62%> (+0.02%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 24888

@catenacyber catenacyber force-pushed the applayer-plugin-5053-v4.10 branch from ab1bcc5 to 45943a0 Compare February 25, 2025 20:03
@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 24896

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants