[Oisf-devel] [COMMIT] OISF branch, master-1.4.x, updated. suricata-1.4.5-32-g3cf65fe

[noreply at openinfosecfoundation.org]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master-1.4.x has been updated
       via  3cf65fe72aa522a4d504b057523e82d6049b3385 (commit)
       via  ad819ce118044f222fbb7148b8a751c1c916a2b0 (commit)
       via  b458d8a0bf1603b6d56fdde33ee3d5248cb93753 (commit)
       via  52201c8de137cc2e2f883f4ededcdef5338e6b6e (commit)
      from  c2f5868d53efd93162e6ba17998831cc3c74d435 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 3cf65fe72aa522a4d504b057523e82d6049b3385
Author: Anoop Saldanha <anoopsaldanha at gmail.com>
Date:   Tue Sep 24 13:29:20 2013 +0530

    fix for bug #970(ac-gfbs).
    
    Content strings that are a duplicate of a pattern from another sig, but
    have a fast_pattern chop being applied, would end up being assigned the
    same pattern id as the duplicate string.  But the string supplied to the
    mpm would be the chopped string, which might result in the state_table
    output_state content entry being over-riden by the the fuller string at
    the final state of the smaller content length, because of which during a
    match we might end up inspecting the search buffer against the fuller
    content pattern, instead of the chopped pattern, which would end up being
    an inspection beyond the buffer bounds.

commit ad819ce118044f222fbb7148b8a751c1c916a2b0
Author: Anoop Saldanha <anoopsaldanha at gmail.com>
Date:   Tue Sep 24 13:23:36 2013 +0530

    Unittest to display bug #970(ac-gfbs).

commit b458d8a0bf1603b6d56fdde33ee3d5248cb93753
Author: Anoop Saldanha <anoopsaldanha at gmail.com>
Date:   Tue Sep 24 13:26:45 2013 +0530

    fix for bug #970(ac-bs).
    
    Content strings that are a duplicate of a pattern from another sig, but
    have a fast_pattern chop being applied, would end up being assigned the
    same pattern id as the duplicate string.  But the string supplied to the
    mpm would be the chopped string, which might result in the state_table
    output_state content entry being over-riden by the the fuller string at
    the final state of the smaller content length, because of which during a
    match we might end up inspecting the search buffer against the fuller
    content pattern, instead of the chopped pattern, which would end up being
    an inspection beyond the buffer bounds.

commit 52201c8de137cc2e2f883f4ededcdef5338e6b6e
Author: Anoop Saldanha <anoopsaldanha at gmail.com>
Date:   Tue Sep 24 13:13:11 2013 +0530

    Unittest to display bug #970(ac-bs).

-----------------------------------------------------------------------

Summary of changes:
 src/util-mpm-ac-bs.c   |   63 ++++++++++++++++++++++++++++++++++++++++++++++++
 src/util-mpm-ac-gfbs.c |   63 ++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 126 insertions(+), 0 deletions(-)


hooks/post-receive
-- 
OISF