[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.0rc1-25-gf9213d7

OISF Git noreply at openinfosecfoundation.org
Wed Feb 26 14:42:46 UTC 2014


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  f9213d7cc67cacef6b234fb105a08806f7f394ad (commit)
       via  7e38347d995c401a375c8f6160566784465b7873 (commit)
       via  9442dce451d2ffa1d1e87e6c4a10990b1e02d0fe (commit)
       via  9f2ce16ef369805f7ce03c4e33b2eb234220b681 (commit)
       via  e381af98dd2fd1699e6c88bdee4dea00367dbe96 (commit)
      from  3c9a135c0f2cab5df1942f0e52d206d4f7ed1e1f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f9213d7cc67cacef6b234fb105a08806f7f394ad
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Feb 26 15:18:26 2014 +0100

    stream-tcp: proper error if segment pool init fails
    
    Until now a PoolInit failure for the segment pools would result in
    an abort() through BUG_ON(). This patch adds a proper error message,
    then exits.
    
    Bug #1108.

commit 7e38347d995c401a375c8f6160566784465b7873
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Feb 26 15:14:14 2014 +0100

    stream-tcp: fix error handling in segment pool
    
    When TcpSegmentPoolInit fails (e.g. because of a too low memcap),
    it would free the segment. However, the segment memory is managed
    by the Pool API, which would also free the same memory location.
    This patch fixes that.
    
    Also, memset the structure before any checks are done, as the segment
    memory is passed to TcpSegmentPoolCleanup in case of error as well.
    
    Bug #1108

commit 9442dce451d2ffa1d1e87e6c4a10990b1e02d0fe
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Feb 26 12:41:15 2014 +0100

    commandline parsing: check optarg ptr before using it
    
    Fixes:
    ** CID 1075221:  Dereference after null check  (FORWARD_NULL)
    /src/suricata.c: 1344 in ParseCommandLine()
    
    The reason it gave this warning is that in other paths using optarg
    there was a check, so the checker assumed optarg can be NULL.

commit 9f2ce16ef369805f7ce03c4e33b2eb234220b681
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Feb 26 12:21:24 2014 +0100

    icmpv6: Fix Coverity warnings on ND_* types
    
    This patch fixes:
    ** CID 1187544:  Missing break in switch  (MISSING_BREAK)
    /src/decode-icmpv6.c: 268 in DecodeICMPV6()
    
    ** CID 1187545:  Missing break in switch  (MISSING_BREAK)
    /src/decode-icmpv6.c: 270 in DecodeICMPV6()
    
    ** CID 1187546:  Missing break in switch  (MISSING_BREAK)
    /src/decode-icmpv6.c: 272 in DecodeICMPV6()
    
    ** CID 1187547:  Missing break in switch  (MISSING_BREAK)
    /src/decode-icmpv6.c: 274 in DecodeICMPV6()
    
    It duplicates the logic instead of adding 'fall through' statements
    as the debug statements were wrong and confusing. For ND_REDIRECT
    all 5 ND_* types would have been printed.

commit e381af98dd2fd1699e6c88bdee4dea00367dbe96
Author: Ken Steele <ken at tilera.com>
Date:   Fri Feb 21 16:03:57 2014 -0500

    Only update mPipe stats occasionally around the packet loop.
    
    Check for termination or stats update only once every 10,000 times
    around the mPipe packet processing loop, to reduce locking.

-----------------------------------------------------------------------

Summary of changes:
 src/decode-icmpv6.c         |   18 ++++++++++++++++--
 src/source-mpipe.c          |   17 ++++++++++++-----
 src/stream-tcp-reassemble.c |   15 ++++++++++-----
 src/suricata.c              |   24 +++++++++++++-----------
 4 files changed, 51 insertions(+), 23 deletions(-)


hooks/post-receive
-- 
OISF


More information about the Oisf-devel mailing list