Project

General

Profile

Actions

Bug #6095

closed
PM VJ

windows: lua script path truncated

Bug #6095: windows: lua script path truncated

Added by Peter Manev almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

As privately reported.
On windows only when lua scripts are used.
It seems that on Windows exclusively, Suricata removes the last letter of each lua file present in rule and that prevents the execution of the script:

For "luajit: myscript.lua;", suricata will search for the file "myscript.lu" without the last letter.

We need to add a random letter to bypass the problem, like this:

"luajit: myscript.luaa;" 

Subtasks 1 (0 open1 closed)

Bug #6227: windows: lua script path truncated (6.0.x backport)ClosedJeff LucovskyActions

VJ Updated by Victor Julien almost 3 years ago Actions #1

  • Subject changed from Windows: A letter is removed from the lua script name upon loading to windows: lua script path truncated
  • Target version changed from TBD to 7.0.1
  • Label Needs backport to 6.0 added

EL Updated by Eric Leblond almost 3 years ago Actions #2

This code should fix the problem but I can not test: https://github.com/regit/suricata/tree/windows-lua

OT Updated by OISF Ticketbot over 2 years ago Actions #3

  • Subtask #6227 added

OT Updated by OISF Ticketbot over 2 years ago Actions #4

  • Label deleted (Needs backport to 6.0)

VJ Updated by Victor Julien over 2 years ago Actions #5

  • Status changed from New to In Progress
  • Assignee changed from OISF Dev to Victor Julien

VJ Updated by Victor Julien over 2 years ago Actions #6

  • Status changed from In Progress to In Review

VJ Updated by Victor Julien over 2 years ago Actions #7

  • Status changed from In Review to Resolved

VJ Updated by Victor Julien over 2 years ago Actions #8

@Peter Manev can you test the current git master to see if things work still correctly after the above fixes? I've tested within mingw bash, but not from the regular windows command prompt which sometimes behaves differently I think.

VJ Updated by Victor Julien over 2 years ago Actions #9

  • Status changed from Resolved to Closed
Actions

Also available in: PDF Atom