[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.0beta2-110-gef40fe1

Mon Jan 27 12:31:56 UTC 2014

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  ef40fe1f31a0e7644ffe9f0154df07ff027f37f8 (commit)
       via  ad7eff555de898e7abcdbf89fdbe9a4806bb72b6 (commit)
       via  347c0df9c4e821f33938628855e3ceed115fd9d0 (commit)
       via  4ce53753bced3ab4aa5c412e55b7ebaeb53dc27b (commit)
       via  bf6ab333ff9275cc0f24fb273c6e7bf3e28ccf3c (commit)
       via  5206928702012e0d1541a145266d0bf01e05200f (commit)
       via  7a0649f9c453c10e85cf1d04851cfe94772db03c (commit)
       via  ee83809d8e4d5a04137cc6be717ee27f798b7cd5 (commit)
       via  228d1d39800cd29792da8d6449c85b81d121208a (commit)
       via  4c9f9db7706afa76424693795fe95f2d1f03fbb7 (commit)
       via  3c7f6ed87664ffa463a5a57b6a311248778e80c7 (commit)
       via  feedb4577030f0b4a8bec2edaadc22e728590082 (commit)
      from  a77b9b36e5ae20ee5354baf3a5991bdbcb18cba1 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit ef40fe1f31a0e7644ffe9f0154df07ff027f37f8
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Jan 24 18:09:46 2014 +0100

    flow-timeout: change error logic

    If FlowForceReassemblyForFlowV2 can't get packets to inject into the
    engine, until now it would bail and retry later. In case of resource
    starvation issues, this would cause a lot of lock contention, as the
    flow manager would try over and over again.

    This patch limits FlowForceReassemblyForFlowV2 to one try per flow,
    if it fails... bad luck. It will only fail in serious conditions,
    which means we must prefer the health of the engine over the proper
    inspection of the flow in question.

commit ad7eff555de898e7abcdbf89fdbe9a4806bb72b6
Author: Victor Julien <victor at inliniac.net>
Date:   Fri Jan 24 11:40:06 2014 +0100

    app-layer-proto: speed up

    AppLayer Proto detection code uses a mix of pattern search and
    "probing parsers". The pattern search validates potential matches
    using a single pattern search algo. The code was using SpmSearch
    for this, but this made it inefficient as it builds a BoyerMoore
    context for each search. This lead to significant memory pressure,
    especially on high speed/bandwidth boxes.

    This patch switches the search calls to BoyerMoore and BoyerMoore-
    Nocase directly. This can be done as the ctx' were available already.

commit 347c0df9c4e821f33938628855e3ceed115fd9d0
Author: Victor Julien <victor at inliniac.net>
Date:   Thu Jan 23 09:55:09 2014 +0100

    app-layer-event: refactor

    Move app layer event handling into app-layer-event.[ch].
    Convert 'Set' macro's to functions.
    Get rid of duplication in Set and SetRaw. Set now calls SetRaw.
    Fix potentential int overflow condition in the event storage.
    Update callers.

commit 4ce53753bced3ab4aa5c412e55b7ebaeb53dc27b
Author: Victor Julien <victor at inliniac.net>
Date:   Thu Jan 23 09:31:56 2014 +0100

    app-layer: shrink AppLayerParserState

    Change layout to be more efficient, shrinks structure with 8 bytes.

commit bf6ab333ff9275cc0f24fb273c6e7bf3e28ccf3c
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 21:15:43 2014 +0100

    stream: use reassembly.memcap for stream chunks

    Use the stream.reassembly.memcap for stream chunks (StreaMsg) as well.

commit 5206928702012e0d1541a145266d0bf01e05200f
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 19:14:19 2014 +0100

    stream: in SACK, always decrease memcap on free

    We should always decrease the stream memcap on freeing SACK records.

commit 7a0649f9c453c10e85cf1d04851cfe94772db03c
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 16:43:38 2014 +0100

    pool: rename data structure fields to stack

    Rename the following fields:
     -    uint32_t alloc_list_size;
     +    uint32_t alloc_stack_size;

     -    PoolBucket *alloc_list;
     +    PoolBucket *alloc_stack;

     -    PoolBucket *empty_list;
     -    uint32_t empty_list_size;
     +    PoolBucket *empty_stack;
     +    uint32_t empty_stack_size;

    To reflect that these are in fact, stacks.

commit ee83809d8e4d5a04137cc6be717ee27f798b7cd5
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 16:30:50 2014 +0100

    pool: remove tail tracking in alloc list

    The list fully acts like a stack now.

commit 228d1d39800cd29792da8d6449c85b81d121208a
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 16:24:02 2014 +0100

    pool: document some of the Pool:: fields.

commit 4c9f9db7706afa76424693795fe95f2d1f03fbb7
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 15:32:18 2014 +0100

    pool: update internal counters at the proper time

    Only update Pool::outstanding and Pool::allocated in PoolGet when
    we are sure both Alloc and Init were successful.

commit 3c7f6ed87664ffa463a5a57b6a311248778e80c7
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 10:59:31 2014 +0100

    stream: improve memcap checking

    Only the TcpSegment structure would be checked for fitting in the
    memcap, not the actual data.

commit feedb4577030f0b4a8bec2edaadc22e728590082
Author: Victor Julien <victor at inliniac.net>
Date:   Wed Jan 22 09:36:28 2014 +0100

    stream: cast memcap checks to uint64_t

-----------------------------------------------------------------------

Summary of changes:
 src/Makefile.am              |    1 +
 src/app-layer-detect-proto.c |    4 +-
 src/app-layer-dns-common.c   |    4 +-
 src/app-layer-events.c       |  137 ++++++++++++++++++++++++++++++++++++++++++
 src/app-layer-events.h       |   83 +++++++++++++++++++++++++
 src/app-layer-parser.c       |    6 +-
 src/app-layer-parser.h       |    2 +-
 src/app-layer.c              |    6 +-
 src/decode-events.c          |   26 +--------
 src/decode-events.h          |  137 ------------------------------------------
 src/decode.h                 |   11 +++-
 src/flow-timeout.c           |   28 +++++----
 src/stream-tcp-reassemble.c  |   43 ++++++++------
 src/stream-tcp-reassemble.h  |    3 +
 src/stream-tcp-sack.c        |    4 +-
 src/stream.c                 |   52 ++++++++++++----
 src/util-pool.c              |  133 +++++++++++++++++++----------------------
 src/util-pool.h              |   17 +++---
 18 files changed, 394 insertions(+), 303 deletions(-)
 create mode 100644 src/app-layer-events.c
 create mode 100644 src/app-layer-events.h

hooks/post-receive
-- 
OISF