Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rust/ldap: udp and frames support v4 #11582

Closed
wants to merge 3 commits into from
Closed

Conversation

glongo
Copy link
Contributor

@glongo glongo commented Jul 30, 2024

Make sure these boxes are signed before submitting your Pull Request -- thank you.

Link to ticket: https://redmine.openinfosecfoundation.org/issues/1199

Describe changes:

  • Rebase to get CI green

SV_BRANCH=OISF/suricata-verify#1984

This introduces a new parser registration function for LDAP/UDP, and update
ldap configuration in order to be able to enable/disable a single parser
independently (such as dns).
Also, GAPs are accepted only for TCP parser and not for UDP.
This adds a pdu frame for both request and response, and removes invalid
returns in SCLdapParseRequest and SCLdapParseResponse.
Following the same logic as for PGSQL, if there is a gap in an LDAP request or
response, the parser tries to sync up again by checking if the message can be
parsed and effectively parses it on the next call.
@glongo glongo requested review from jasonish, victorjulien and a team as code owners July 30, 2024 07:17
Copy link

codecov bot commented Jul 30, 2024

Codecov Report

Attention: Patch coverage is 71.14094% with 43 lines in your changes missing coverage. Please review.

Project coverage is 82.42%. Comparing base (da1645b) to head (ec637e6).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11582      +/-   ##
==========================================
- Coverage   82.50%   82.42%   -0.08%     
==========================================
  Files         923      923              
  Lines      248721   248846     +125     
==========================================
- Hits       205215   205120      -95     
- Misses      43506    43726     +220     
Flag Coverage Δ
fuzzcorpus 60.47% <58.38%> (-0.05%) ⬇️
livemode 18.64% <32.88%> (+0.01%) ⬆️
pcap 43.86% <64.42%> (-0.20%) ⬇️
suricata-verify 61.69% <71.14%> (-0.09%) ⬇️
unittests 59.05% <32.88%> (-0.02%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@victorjulien victorjulien added this to the 8.0 milestone Jul 30, 2024
@victorjulien
Copy link
Member

Still failing

suricata: app-layer-parser.c:1373: int AppLayerParserParse(ThreadVars *, AppLayerParserThreadCtx *, Flow *, AppProto, uint8_t, const uint8_t *, uint32_t): Assertion `!((f->proto != IPPROTO_TCP))' failed.
Error: suricata: stacktrace:sig 6:pthread_kill+0x0000012c;raise+0x00000016;abort+0x000000d3;__libc_freeres+0x000000d3;__assert_fail+0x00000046;AppLayerParserParse+0x000012e9;AppLayerHandleUdp+0x0000113c;FlowWorker+0x00000ff1;TmThreadsSlotVarRun+0x00000226;TmThreadsSlotVar+0x00000f56;pthread_condattr_setpshared+0x00000513;__xmknodat+0x00000230 [SignalHandlerUnexpected:suricata.c:327]

Did you check what is checked there and why this PR might hit the check?

@victorjulien victorjulien self-requested a review August 1, 2024 05:03
@victorjulien victorjulien removed this from the 8.0 milestone Aug 1, 2024
@glongo
Copy link
Contributor Author

glongo commented Aug 1, 2024

Replaced with #11597

@glongo glongo closed this Aug 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants