Project

General

Profile

Actions

Optimization #4907

closed

smtp: use AppLayerResult instead of buffering wherever possible

Added by Shivani Bhardwaj over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Use AppLayerResult https://github.com/OISF/suricata/blob/master/src/app-layer-parser.h#L84-L98 instead of buffering the data.
If the length of the required incomplete data is not known, return 1 from AppLayerResult::incomplete to indicate that at least one more byte is required by the parser if it's available.


Related issues 2 (1 open1 closed)

Related to Suricata - Optimization #4908: ftp: use AppLayerResult instead of buffering wherever possibleClosedShivani BhardwajActions
Blocks Suricata - Feature #4905: smtp: add stream app-layer frame support In ProgressVictor JulienActions
Actions

Also available in: Atom PDF