suricata icon indicating copy to clipboard operation
suricata copied to clipboard

Applayer plugin 5053 v2.3

Open catenacyber opened this issue 1 week ago • 0 comments

Link to ticket: https://redmine.openinfosecfoundation.org/issues/ Preliminary work for https://redmine.openinfosecfoundation.org/issues/5053

Describe changes:

  • detect: helper function for multibuffer
  • get ready to use dynamic number of app-layer protos (also work with static constant) in some places

Small PR good in itself.

#11363 with greener CI hopefully

Still more work to do : I guess stack allocated arrays are fine, but the global variables cf git grep '\[ALPROTO_MAX' like src/runmodes.c:static LoggerId logger_bits[ALPROTO_MAX]; need to be allocated and freed, and the app-layer init needs to be taken care of, so that we know ALPROTO_MAX final value...

catenacyber avatar Jun 27 '24 08:06 catenacyber