Project

General

Profile

Actions
Copy link

Feature #4855

open

rules: refactor rule parsing into multi-stage parser

Added by Victor Julien over 3 years ago. Updated 2 months ago.

Status:
New
Priority:
Normal
Assignee:
Jason Ish
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

A number of open issues are around how modifiers are applied based on whether they directly follow a content statement.

Subtasks 4 (4 open — 0 closed)

Bug #1826: Rule validation bug with fast_pattern:only and specified buffersNewOISF DevActions
Bug #1926: rule parsing: wrong content checked for fast_pattern (snort compatibility)NewOISF DevActions
Bug #2205: detect: error on content relative to fast_pattern:onlyNewOISF DevActions
Feature #3317: rules: use rust for tokenizing rulesFeedbackJason IshActions
Actions
Copy link
 #1

Updated by Philippe Antoine almost 2 years ago

  • Assignee set to Jason Ish

Jason, is this part of what you are already doing ?

Actions
Copy link
 #2

Updated by Jason Ish almost 2 years ago

Philippe Antoine wrote in #note-1:

Jason, is this part of what you are already doing ?

Yes, forgot about this issue specifically. But using the parser I'm working on, would force us into a multi-stage loader.

Actions
Copy link
 #3

Updated by Victor Julien 2 months ago

  • Target version changed from 8.0.0-beta1 to 9.0.0-beta1
Actions
Copy link

Also available in: Atom PDF