]> git.ipfire.org Git - thirdparty/snort3.git/commit
Pull request #3996: parser: add file_id rule syntax evaluation
authorAnna Norokh -X (anorokh - SOFTSERVE INC at Cisco) <anorokh@cisco.com>
Wed, 20 Sep 2023 13:01:26 +0000 (13:01 +0000)
committerOleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) <oshumeik@cisco.com>
Wed, 20 Sep 2023 13:01:26 +0000 (13:01 +0000)
commitbf2db2daa4013577e99f08220efb959182bbdd63
tree471ffdebaebf49de00892afc11806a08f19b4b15
parentb56197b9f4979e83fdbe6c128f508ebdd8c27fde
Pull request #3996: parser: add file_id rule syntax evaluation

Merge in SNORT/snort3 from ~ANOROKH/snort3:contentless_file_id to master

Squashed commit of the following:

commit 62f56f702475340468f31ab8a7f1a0fcbdc3c943
Author: Anna Norokh <anorokh@cisco.com>
Date:   Wed Sep 13 11:03:31 2023 +0300

    parser: add file_id rule syntax evaluation

      * drop ParseError in case of file_id rule without file_meta,
        fast-pattern(content,regex) or file_data option;
      * update file_id docs;
      * detection: replace rtn hard check with assert
doc/user/concepts.txt
doc/user/file_processing.txt
src/detection/fp_detect.cc
src/file_api/dev_notes.txt
src/parser/parse_rule.cc