[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.0.1-46-g27eb0f4

OISF Git noreply at openinfosecfoundation.org
Tue Jun 24 08:46:26 UTC 2014


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".

The branch, master has been updated
       via  27eb0f450ab6218a7c7061fa772426483cb24ba6 (commit)
       via  97ca02f0c5c90abe8bb2c0407090aef31d004c51 (commit)
       via  09fd7060ec32d2930196d18778b56a0c66edf60c (commit)
       via  a33d1e28e91c83dc505858aab3d249999b95e40d (commit)
       via  6ebc20f6d823fb0c2f349ba56b7784d9cf87b54a (commit)
       via  1f3fbbc9924a9510e204676ff4ad6a37aa12fcd0 (commit)
      from  896b61452c99b01cbcd7215d3732804431c93796 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 27eb0f450ab6218a7c7061fa772426483cb24ba6
Author: Victor Julien <victor at inliniac.net>
Date:   Mon Jun 16 14:21:11 2014 +0200

    defrag: fix timeout setting when config is missing
    
    When the config is missing, DefragPolicyGetHostTimeout will default
    to returning -1. This will effectively set no timeout at all, leading
    to defrag trackers being freed too early.

commit 97ca02f0c5c90abe8bb2c0407090aef31d004c51
Author: Eric Leblond <eric at regit.org>
Date:   Tue Jun 17 11:19:05 2014 +0200

    defrag: fix reconstruction
    
    This patch is fixing an issue in defragmentation code. The
    insertion of a fragment in the list of fragments is done with
    respect to the offset of the fragment. But the code was using
    the original offset of the fragment and not the one of the
    new reconstructed fragment (which can be different in the
    case of overlapping segment where the left part is trimmed).
    
    This case could lead to some evasion techniques by causing
    Suricata to analyse a different payload.

commit 09fd7060ec32d2930196d18778b56a0c66edf60c
Author: Eric Leblond <eric at regit.org>
Date:   Fri Jun 20 18:11:29 2014 +0200

    unix socket: fix valgrind issue
    
    This patch fixes the following issue reported by valgrind:
     31 errors in context 1 of 1:
     Conditional jump or move depends on uninitialised value(s)
        at 0x8AB2F8: UnixSocketPcapFilesCheck (runmode-unix-socket.c:279)
        by 0x97725D: UnixCommandBackgroundTasks (unix-manager.c:368)
        by 0x97BC52: UnixManagerThread (unix-manager.c:884)
        by 0x6155F6D: start_thread (pthread_create.c:311)
        by 0x6E3A9CC: clone (clone.S:113)
    
    The running field in PcapCommand was not initialized.

commit a33d1e28e91c83dc505858aab3d249999b95e40d
Author: Eric Leblond <eric at regit.org>
Date:   Fri Jun 20 17:46:47 2014 +0200

    unix-manager: fix crash when client disconnect
    
    This patch fixes an issue in unix socket handling. It is possible
    that a socket did disconnect when analysing a command and because
    the data treatment is done in a loop on clients this was leading
    to a update of the list of clients during the loop. So we need
    in fact to use TAILQ_FOREACH_SAFE instead of TAILQ_FOREACH.
    
    Reported-by: Luigi Sandon <luigi.sandon at gmail.com>
    Fix-suggested-by: Luigi Sandon <luigi.sandon at gmail.com>

commit 6ebc20f6d823fb0c2f349ba56b7784d9cf87b54a
Author: Ken Steele <ken at tilera.com>
Date:   Fri Jun 20 14:53:16 2014 -0400

    Rework Tile CPU affinity setting to handle non-contiguous sets of CPUs.
    
    It is possible to have a non-contiguous CPU set, which was not being
    handled correctly on the TILE architecture.
    
    Added a "rank" field in the ThreadVar to store the worker's rank separately
    from the cpu for this case.

commit 1f3fbbc9924a9510e204676ff4ad6a37aa12fcd0
Author: Mats Klepsland <mats.klepsland at gmail.com>
Date:   Mon Jun 23 09:14:16 2014 +0200

    Fix bug #1206
    
    PF_RING ZC uses clusters in the same way as PF_RING DNA. Therefore,
    this bug can be fixed as it was fixed for DNA (bug #598).

-----------------------------------------------------------------------

Summary of changes:
 src/defrag-config.c       |    3 ++-
 src/defrag.c              |    2 +-
 src/runmode-tile.c        |   16 ++++++++++++++--
 src/runmode-unix-socket.c |    1 +
 src/source-mpipe.c        |   12 ++----------
 src/source-pfring.c       |    2 ++
 src/threadvars.h          |    1 +
 src/unix-manager.c        |    3 ++-
 8 files changed, 25 insertions(+), 15 deletions(-)


hooks/post-receive
-- 
OISF


More information about the Oisf-devel mailing list