Task #5638: SWF decompression: Do not depend on libhtp - Suricata - Open Information Security Foundation

Actions

Copy link

Task #5638

closed

SWF decompression: Do not depend on libhtp

Added by Todd Mortimer about 2 years ago. Updated almost 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Todd Mortimer

Target version:

7.0.0-rc1

Effort:

Difficulty:

Label:

C, Rust

Description

SWF decompression uses the lzma decompression interface exposed by libhtp. While working on libhtp-rs it was identified that this is not right, and suricata could just use lzma-rs for lzma decompression directly instead of having libhtp expose a lzma interface.

https://github.com/OISF/suricata/pull/7438#discussion_r887130753