Project

General

Profile

Actions

Bug #6095

closed

windows: lua script path truncated

Added by Peter Manev 10 months ago. Updated 7 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

As privately reported.
On windows only when lua scripts are used.
It seems that on Windows exclusively, Suricata removes the last letter of each lua file present in rule and that prevents the execution of the script:

For "luajit: myscript.lua;", suricata will search for the file "myscript.lu" without the last letter.

We need to add a random letter to bypass the problem, like this:

"luajit: myscript.luaa;" 

Subtasks 1 (0 open1 closed)

Bug #6227: windows: lua script path truncated (6.0.x backport)ClosedJeff LucovskyActions
Actions #1

Updated by Victor Julien 10 months ago

  • Subject changed from Windows: A letter is removed from the lua script name upon loading to windows: lua script path truncated
  • Target version changed from TBD to 7.0.1
  • Label Needs backport to 6.0 added
Actions #2

Updated by Eric Leblond 10 months ago

This code should fix the problem but I can not test: https://github.com/regit/suricata/tree/windows-lua

Actions #3

Updated by OISF Ticketbot 8 months ago

  • Subtask #6227 added
Actions #4

Updated by OISF Ticketbot 8 months ago

  • Label deleted (Needs backport to 6.0)
Actions #5

Updated by Victor Julien 8 months ago

  • Status changed from New to In Progress
  • Assignee changed from OISF Dev to Victor Julien
Actions #6

Updated by Victor Julien 8 months ago

  • Status changed from In Progress to In Review
Actions #7

Updated by Victor Julien 8 months ago

  • Status changed from In Review to Resolved
Actions #8

Updated by Victor Julien 8 months ago

@Peter Manev can you test the current git master to see if things work still correctly after the above fixes? I've tested within mingw bash, but not from the regular windows command prompt which sometimes behaves differently I think.

Actions #9

Updated by Victor Julien 7 months ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF