Project

General

Profile

Actions

Optimization #8466

open
JL

detect/base64: determine behavior if buf size > buf length

Optimization #8466: detect/base64: determine behavior if buf size > buf length

Added by Jeff Lucovsky 16 days ago. Updated 9 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
Effort:
low
Difficulty:
low
Label:

Description

Determine, document, and test behavior when buffer size > buffer length.

from_base64: bytes 25

with buffer @VGhpcyBpcyBTdXJpY2F0YQ==@erdnaxe

Currently, the transform returns silently and leaves the buffer unchanged.

Options are
- Convert up to nbytes treating nbytes as an upper bound
- Keep current behavior and leave buffer unmodified
- Set the error flag, treating the condition as an error and use absent to detect


Related issues 1 (1 open0 closed)

Related to Suricata - Feature #7114: from_base64: allow matching on decode errorIn ReviewJeff LucovskyActions

JL Updated by Jeff Lucovsky 16 days ago Actions #1

  • Related to Feature #7114: from_base64: allow matching on decode error added

PA Updated by Philippe Antoine 9 days ago Actions #2

  • Tracker changed from Bug to Optimization
  • Affected Versions deleted (8.0.0)
Actions

Also available in: PDF Atom