Added by Philippe Antoine almost 6 years ago. Updated almost 6 years ago.
Description
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23274
Sample reproducer isalert tcp any any <> any 1 pcrexform:"[";
PR in gitlab
The issue also applies to 4.x.y
I do not think this needs backporting as pcrexform is new
The underlying issue --
FatalError-- is in the codebase and has been for ~4 years. A malformed PCRE from a rule could trigger the issue.
A malformed PCRE from a rule could trigger the issue.
I think not sinceDetectPcreSetup does not call DetectSetupParseRegexes
Could you show me an example where it fails ?
The use of FatalError seems to me to have been on purpose, for better debugging during development as the pcres used up until pcrexform are hardcoded