Project

General

Profile

Actions
Copy link

Optimization #5566

open

pgsql: add events

Added by Juliana Fajardini Reichow about 2 years ago. Updated about 1 year ago.

Status:
In Progress
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

The lack of protocol events makes it harder to handle/signalize recoverable parsing errors in PGSQL.

Expected:

If Suri sees a corrupted PGSQL message but is able to correctly find the next pgsql PDU, throw an event
move onto parse the new message.

Subtasks 1 (1 open — 0 closed)

Optimization #6510: pgsql: add events (7.0.x backport)AssignedJuliana Fajardini ReichowActions

Related issues 1 (1 open — 0 closed)

Related to Suricata - Bug #5524: pgsql: parser should not error on parsing error, so as to keep on parsing the next PDUsIn ProgressJuliana Fajardini ReichowActions
Actions
Copy link
 #1

Updated by Juliana Fajardini Reichow about 2 years ago

  • Related to Bug #5524: pgsql: parser should not error on parsing error, so as to keep on parsing the next PDUs added
Actions
Copy link
 #2

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions
Copy link
 #3

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-rc1 to 8.0.0-beta1
Actions
Copy link
 #4

Updated by Juliana Fajardini Reichow about 1 year ago

  • Status changed from New to In Progress

PR for review: https://github.com/OISF/suricata/pull/9404

(working on this as it seems to be the solution for #5524)

Actions
Copy link
 #5

Updated by Juliana Fajardini Reichow about 1 year ago

  • Label Needs backport to 7.0 added
Actions
Copy link
 #6

Updated by OISF Ticketbot about 1 year ago

  • Subtask #6510 added
Actions
Copy link
 #7

Updated by OISF Ticketbot about 1 year ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link

Also available in: Atom PDF