Project

General

Profile

Actions
Copy link

Feature #470

closed
VJ AS

Feature #775: libhtp 0.5 support

gzip extension support incomplete

Feature #470: gzip extension support incomplete

Added by Victor Julien almost 14 years ago. Updated over 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
2.0beta1
Effort:
Difficulty:
Label:

Description

The current git master supports FNAME and FCOMMENT gzip extensions. Support for FEXTRA and FHCRC is missing: http://www.gzip.org/zlib/rfc-gzip.html

If a gzip stream is encountered that contains an unsupported flag, the "http.gzip_decompression_failed" app layer event is set.

Support needs to be added to libhtp, not Suricata itself.

When complete, patches need to be submitted to upstream libhtp.

VJ Updated by Victor Julien over 13 years ago Actions
Copy link
 #1

  • Target version changed from 1.4 to 1.4beta2

VJ Updated by Victor Julien over 13 years ago Actions
Copy link
 #2

  • Target version changed from 1.4beta2 to 2.0rc2

Working with libhtp upstream on this.

VJ Updated by Victor Julien about 13 years ago Actions
Copy link
 #3

  • Parent task set to #775

VJ Updated by Victor Julien over 12 years ago Actions
Copy link
 #4

  • Assignee changed from Victor Julien to Anoop Saldanha
  • Target version changed from 2.0rc2 to 2.0beta1

Part of libhtp 0.5.x upgrade work.

VJ Updated by Victor Julien over 12 years ago Actions
Copy link
 #5

  • Status changed from Assigned to Closed
Actions
Copy link

Also available in: PDF Atom