~oisf/suricata-daily-git-libhtp-0.5.x/libhtp : changes

~oisf/suricata-daily-git-libhtp-0.5.x/libhtp » Changes from revision 1348

From Revision 1284 to 1265

Rev	Summary	Authors	Tags	Date
1284	http: avoids quadratic complexity in data_probe_chunk_length http: avoids quadratic complexity in data_probe_chunk_length Checks that the new character brings some information	Philippe Antoine		3 years ago
1283	Update for 0.5.34 Update for 0.5.34	Victor Julien		3 years ago
1282	htp.pc.in: add -lz to Libs.private htp.pc.in: add -lz to Libs.private zlib is a mandatory dependency so add it to Libs.private otherwise static linking of packages linking with htp (e.g. suricata) will fail. [Retrieved from: https://git.buildroot.net/buildroot/tree/package/libhtp/0002-htp.pc.in-add-lz-to-Libs.private.patch] Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>	Fabrice Fontaine		3 years ago
1281	http: limit log of unexpected request body http: limit log of unexpected request body to once per transaction	Philippe Antoine		3 years ago
1280	http: handles expect 100-continue header http: handles expect 100-continue header	Philippe Antoine		3 years ago
1279	decompression: configurable limit for lzma layers decompression: configurable limit for lzma layers Default value is one. Log an error if there are more lzma layers.	Philippe Antoine		3 years ago
1278	gaps: fix debug printing against null dereference gaps: fix debug printing against null dereference	Philippe Antoine		3 years ago
1277	libhtp: end connection without anything in request line libhtp: end connection without anything in request line	Philippe Antoine		3 years ago
1276	travis: verbose output when tests fail travis: verbose output when tests fail	Philippe Antoine		3 years ago
1275	gaps: handle gaps and pass them to callbacks when possible gaps: handle gaps and pass them to callbacks when possible That is when we handle body with known size or until end of connection	Philippe Antoine		3 years ago
1274	Update for 0.5.33 Update for 0.5.33	Victor Julien	0.5.33	4 years ago
1273	transaction: do not call request code on response path transaction: do not call request code on response path Bug happens when : - we have a first normal request/response (so `htp_connp_req_data` sets a dangling pointer to `in_current_data`) - we have a response without request and `htp_tx_state_response_start` calls `htp_connp_REQ_LINE_complete` which calls `htp_connp_req_consolidate_data` which uses dangling pointer The patch fixes this by removing the call from `htp_tx_state_response_start` to `htp_connp_REQ_LINE_complete` In order to maintain the good behavior with an incomplete request during the request line, `htp_connp_REQ_LINE` is modified to make the state progress when `connp->in_status == HTP_STREAM_CLOSED`	Philippe Antoine		4 years ago
1272	headers: right terminator check according to next data headers: right terminator check according to next data Bug happens when : - we have a first normal request/response (so `htp_connp_res_data` sets a dangling pointer to `out_current_data`) - we have a new request (without response yet) and `htp_connp_REQ_LINE_complete` calls `htp_connp_is_line_terminator` which uses dangling pointer htp_connp_is_line_terminator handles both inbound and outbound data. So, it cannot access directly out_current_data. But its caller can specify another argument, especially htp_connp_RES_HEADERS.	Philippe Antoine		4 years ago
1271	deadcode: removes it to clean uri decoding deadcode: removes it to clean uri decoding	Philippe Antoine		4 years ago
1270	fix build without GNU libiconv fix build without GNU libiconv iconvctl is only defined in GNU libiconv so check for the availability of this function before using it Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>	Fabrice Fontaine		4 years ago
1269	request: treats extra whitespace line as body request: treats extra whitespace line as body	Philippe Antoine		4 years ago
1268	time: Adds time limit for pure decompression time: Adds time limit for pure decompression To avoid DOS by small repeated zip bombs	Philippe Antoine		4 years ago
1267	Update for 0.5.32 Update for 0.5.32	Victor Julien	0.5.32	4 years ago
1266	request: allow request side to close the connp request: allow request side to close the connp Allow request side to wrap up indepently of the response side. Response should still use htp_connp_close, which wraps up both.	Victor Julien		4 years ago
1265	finalize: fix unread to unconsume as well finalize: fix unread to unconsume as well Found by fuzzing	Philippe Antoine		4 years ago