]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 51d4e0d) | patch
radix: improve address range handling
authorVictor Julien <vjulien@oisf.net>
Thu, 17 Feb 2022 12:32:17 +0000 (13:32 +0100)
committerVictor Julien <vjulien@oisf.net>
Thu, 17 Feb 2022 16:00:26 +0000 (17:00 +0100)
commit7fd6fe732b360d4f1de4483b539af2eda813b966
tree63189a2a9ea5afc1a6d166454fdbd8e192e52785tree | snapshot
parent51d4e0dced9cac7463ee924b00bc8666c68b20c3commit | diff
radix: improve address range handling

Handle non-exact address ranges from string. This can come directly
from user input, so here it is accepted but the address is converted
to the address range start. A warning will be issued.

Debug validation checks are added to catch this.

This issue could lead to bad input from iprep (with cidr), defrag config
and htp server personalities to produce a bad radix tree.

Bug: #5084.
Bug: #5085.
Bug: #5086.
src/util-radix-tree.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git