Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tests/transform: from_base64 test #1670

Closed
wants to merge 1 commit into from
Closed

Conversation

jlucovsky
Copy link
Contributor

@jlucovsky jlucovsky commented Feb 27, 2024

from_base64 transform test

Ticket

If your pull request is related to a Suricata ticket, please provide
the full URL to the ticket here so this pull request can monitor
changes to the ticket status:

Redmine ticket: 6487

Updates

  • Mode specific tests

@jlucovsky
Copy link
Contributor Author

jlucovsky commented Feb 27, 2024

Continued in #10512

Oops -- erroneously closed.

@jlucovsky jlucovsky closed this Feb 27, 2024
@jlucovsky jlucovsky reopened this Feb 27, 2024
@victorjulien
Copy link
Member

Can you also add a test that depends on the mode? Ideally we'd have one per option, that would only pass with that specific "mode" setting.

@victorjulien
Copy link
Member

Additional request: add some tests that force the pattern after from_base64 to be the fast pattern.

@jlucovsky
Copy link
Contributor Author

Additional request: add some tests that force the pattern after from_base64 to be the fast pattern.

Will do.

@jlucovsky
Copy link
Contributor Author

Can you also add a test that depends on the mode? Ideally we'd have one per option, that would only pass with that specific "mode" setting.

Yes; done.

Issue: 6487

Test cases for the from_base64 transform
- Case 01 tests RFC4648 (default) with various offsets
- Case 02 tests RFC2045 and verifies success and failure case
  (with other modes)
- Case 03 -- case 01 with fast_pattern associated with the
  post transform content.
@victorjulien
Copy link
Member

Merged in #1937, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
requires suricata pr Depends on a PR in Suricata
Development

Successfully merging this pull request may close these issues.

3 participants