60 Commits

Author SHA1 Message Date
Felipe Zimmerle
48704c27a9 Removes some memory leaks 2015-10-30 18:59:08 -03:00
Felipe Zimmerle
b6ae0585cd Refactoring: Place m_variables inside Collections 2015-10-29 13:46:45 -03:00
Felipe Zimmerle
787be98122 Refactoring: Pass all the control over the variables to the Variables class 2015-10-28 20:53:19 -03:00
Felipe Zimmerle
7afc07914f Cosmetics: Fix static analysis warnings 2015-10-27 13:58:32 -03:00
Felipe Zimmerle
11a1045f47 Adds support to capture this fingerprint of the detectSQLi operator 2015-10-27 10:40:35 -03:00
Felipe Zimmerle
93031d93d0 Cosmetics: Fix coding style issues 2015-10-27 10:21:14 -03:00
Felipe Zimmerle
2a062b7fe2 Not using pcrecpp on verifycc anymore 2015-10-27 08:55:04 -03:00
Felipe Zimmerle
59af8ab842 Cosmetics: fixed the coding style 2015-10-20 16:05:50 -03:00
Felipe Zimmerle
90c74beca1 Fix the init method signature in some operators 2015-10-20 13:23:08 -03:00
Felipe Zimmerle
c800214e6d Fix pcre_exec matched string 2015-10-16 16:15:39 -03:00
Felipe Zimmerle
e54ef72051 Looks for external resources in the same path of the rule 2015-10-06 09:21:30 -03:00
Felipe Zimmerle
b497091017 Cosmetics: Fix coding style 2015-09-28 16:32:59 -03:00
Felipe Zimmerle
076a02951c Huge performance improvement: passing variables as pointers avoiding copies 2015-09-18 20:21:12 -03:00
Felipe Zimmerle
2451bf05d7 Using pcre (with JIT) instead of pcrecpp 2015-09-17 19:26:44 -03:00
Felipe Zimmerle
ed86c24df6 Adds checks for the NO_LOGS definition and improved the vars resolution time 2015-09-17 17:41:38 -03:00
Felipe Zimmerle
9d60dc6df8 Adds macro expansion for all operators 2015-09-16 11:25:07 -03:00
Felipe Zimmerle
7afd93196d Adds contains to the list of operators compatibles with the capture action 2015-09-03 09:38:19 -03:00
Felipe Zimmerle
1065e297b2 Fix several minor issues on the seclang grammar 2015-08-22 11:06:28 -03:00
Felipe Zimmerle
cff74e7cea Fix ValidateUrlEncoding corner case 2015-08-14 00:40:44 -03:00
Felipe Zimmerle
1de6d07dfd Adds support to the @detectSQLi operator 2015-08-14 00:30:28 -03:00
Felipe Zimmerle
4baee88eb3 Adds support to the @detectXSS operator 2015-08-13 23:38:57 -03:00
Felipe Zimmerle
ad65a1abea Adds @noMatch operator 2015-08-13 23:38:50 -03:00
Felipe Zimmerle
d5fe21ce3c Code cosmetics: reduce the amount of cppcheck warnings 2015-08-12 22:40:26 -03:00
Felipe Zimmerle
21400ba454 Adds support to the @verifyCC operator 2015-08-12 13:14:33 -03:00
Felipe Zimmerle
1b0a918330 Adds support to the @validateUrlEncoding operator 2015-08-11 18:01:39 -03:00
Felipe Zimmerle
a324ff9317 Fix validate byte range table initizliation 2015-08-11 15:34:14 -03:00
Felipe Zimmerle
187be64edf Fix operator instantiation/selection 2015-08-11 15:07:50 -03:00
Felipe Zimmerle
9a7506f9e9 Adds support to the beginsWith operator 2015-08-11 15:07:50 -03:00
Felipe Zimmerle
209a3db47f Adds support to the @endsWith operator 2015-08-11 15:07:45 -03:00
Felipe Zimmerle
fb161a69a9 Removes some warnings by adding missing returns 2015-08-11 13:13:16 -03:00
Felipe Zimmerle
c5a4355348 Fix geolookup operator instantiation 2015-08-10 17:59:09 -03:00
Felipe Zimmerle
64cbb15335 Adds support to the @containsWord operator 2015-08-10 17:42:03 -03:00
Felipe Zimmerle
2f81b62d17 Adds missing return to ValidateByteRange::init 2015-08-10 17:41:17 -03:00
Felipe Zimmerle
b883888c03 Adds support to the operator @within 2015-08-10 15:39:03 -03:00
Felipe Zimmerle
f231df16ad Adds support to the ValidateUtf8Encoding operator 2015-08-10 14:51:27 -03:00
Felipe Zimmerle
70c2621af3 Adds support to the strmatch operator 2015-08-10 14:03:15 -03:00
Felipe Zimmerle
f62e17c67c Adds support to the @eq operator 2015-08-10 13:37:39 -03:00
Felipe Zimmerle
4f47651a6f Adds variable TX and action "capture". 2015-08-05 10:07:47 -03:00
Felipe Zimmerle
0720fd4790 Adds operator @pmFromFile and @pmF 2015-08-04 14:27:14 -03:00
Felipe Zimmerle
d4dd9c86d4 Accepts Suricata format on @pm operator 2015-08-04 14:26:37 -03:00
Felipe Zimmerle
95efb99a8c Adds support to the @pm operator 2015-08-04 14:25:48 -03:00
Felipe Zimmerle
774d897351 Adds support to the operator @ipMatchFromFile and @ipMatchF 2015-08-03 17:21:41 -03:00
Felipe Zimmerle
6cd4c0492a Adds support to the Rx operator 2015-08-03 14:24:17 -03:00
Felipe Zimmerle
3a4cef6fb1 cosmetic: Fix ValidateByteRange coding style. 2015-08-03 13:45:13 -03:00
Felipe Zimmerle
8575c10781 unit-test: Fix the geoip debug code 2015-08-03 13:45:13 -03:00
Felipe Zimmerle
2f4d4691c9 Disables @containsWord operator to enable the libpcre migration 2015-08-02 22:15:13 -03:00
Felipe Zimmerle
7ff38e9018 Temporarily disable Geo Lookup logs to avoid crash on unit tests 2015-07-31 03:09:54 -03:00
Felipe Zimmerle
f811ec6518 Adds support to @ipMatch operator 2015-07-30 20:58:19 -03:00
Felipe Zimmerle
a05fa8287b Adds support to the validateByteRange operator 2015-07-27 22:44:42 -03:00
Felipe Zimmerle
c2d33823f5 Adds method init to Operator class 2015-07-27 22:44:34 -03:00