Open Information Security Foundation

06/26/2020

09:54 AM Suricata Task #3195: tracking: rustify all input

Another example of what to do :
https://github.com/OISF/suricata/pull/5095#discussion_r444300697
Rustify structu... Philippe Antoine

06/23/2020

06:42 AM Suricata Task #3195: tracking: rustify all input

Useful as well for signature parsing cf https://github.com/OISF/suricata/pull/5081/files#r442105437 Philippe Antoine

06/19/2020

12:25 PM Suricata Bug #3779: Exit on signature with invalid transform pcrexform

> A malformed PCRE from a rule could trigger the issue.
I think not since
@DetectPcreSetup@ does not call @Detect... Philippe Antoine

11:38 AM Suricata Bug #3779: Exit on signature with invalid transform pcrexform

I do not think this needs backporting as @pcrexform@ is new Philippe Antoine

09:40 AM Suricata Bug #3779 (In Review): Exit on signature with invalid transform pcrexform

PR in gitlab Philippe Antoine

07:36 AM Suricata Bug #3779 (Closed): Exit on signature with invalid transform pcrexform

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23274
Sample reproducer is
@alert tcp any any <> any 1 pcre... Philippe Antoine

09:57 AM Suricata Bug #3772 (In Review): DNP3 probing parser does not detect the proper direction in midstream

https://github.com/OISF/suricata/pull/5084 Philippe Antoine

09:57 AM Suricata Optimization #3773 (In Review): DNP3 CRC disabled when fuzzing

https://github.com/OISF/suricata/pull/5084 Philippe Antoine

06/16/2020

06:58 PM Suricata Bug #3687: Null dereference in DetectEngineSignatureIsDuplicate

And yet another variant as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22487
And yet yet another with https... Philippe Antoine

06:53 PM Suricata Optimization #3773 (Assigned): DNP3 CRC disabled when fuzzing

Philippe Antoine