https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022012-04-19T12:53:14ZOpen Information Security FoundationSuricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16612012-04-19T12:53:14ZAnoop Saldanhaanoopsaldanha@gmail.com
<ul><li><strong>Assignee</strong> set to <i>Anoop Saldanha</i></li></ul> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16622012-04-20T00:22:42ZAnoop Saldanhaanoopsaldanha@gmail.com
<ul><li><strong>File</strong> <a href="/attachments/727">0001-bug-452-fix-detection-bug-for-sigs-that-don-t-have-a.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/727/0001-bug-452-fix-detection-bug-for-sigs-that-don-t-have-a.patch">0001-bug-452-fix-detection-bug-for-sigs-that-don-t-have-a.patch</a> added</li><li><strong>File</strong> <a href="/attachments/728">0002-code-cleanup-indentation-fix.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/728/0002-code-cleanup-indentation-fix.patch">0002-code-cleanup-indentation-fix.patch</a> added</li></ul><p>patches attached. Fixes the fn for the first rule. The other 2 rules aren't related to the bug from the first one.</p> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16632012-04-20T04:15:27ZAnoop Saldanhaanoopsaldanha@gmail.com
<ul><li><strong>File</strong> <a href="/attachments/729">0003-bug-452-enable-http-extra-callbacks-for-configs-othe.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/729/0003-bug-452-enable-http-extra-callbacks-for-configs-othe.patch">0003-bug-452-enable-http-extra-callbacks-for-configs-othe.patch</a> added</li></ul><p>patch attached that fixes the client/server body rules FN.</p>
<p>All 3 rules should alert now.</p> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16772012-04-23T12:12:10ZAnoop Saldanhaanoopsaldanha@gmail.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Resolved</i></li></ul> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16822012-04-24T06:41:04ZVictor Julienvictor@inliniac.net
<ul></ul><p>Patches 1 and 2 remove a NULL pointer check AFAICS, is that safe?</p>
<p>Applied 3.</p> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16832012-04-24T06:45:29ZAnoop Saldanhaanoopsaldanha@gmail.com
<ul></ul><p>yeah, that's safe. We fix a bug actually. We would have been FN'ing previously</p> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16842012-04-24T06:53:22ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>Resolved</i> to <i>Closed</i></li><li><strong>Target version</strong> set to <i>1.3beta1</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>Cool. Applied 1 and 2 as well. Thanks.</p> Suricata - Bug #452: FN on http POST query suricata v1.2.1?https://redmine.openinfosecfoundation.org/issues/452?journal_id=16852012-04-24T06:53:37ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>1.3beta1</i> to <i>1.3beta2</i></li></ul>