]> git.ipfire.org Git - thirdparty/suricata.git/commit
output/email: use SCCalloc for OutputJsonEmailCtx 9647/head 9648/head
authorShivani Bhardwaj <shivani@oisf.net>
Wed, 4 Oct 2023 07:44:41 +0000 (13:14 +0530)
committerShivani Bhardwaj <shivanib134@gmail.com>
Wed, 18 Oct 2023 02:46:12 +0000 (08:16 +0530)
commitcc53447b3d2dbeeffc44a99eb33a5e151a30c549
tree14b4dae7df2636bf0bf15be16407612537551ddb
parent0ada1d561f319ac86f6acdcd9ce890fd646ab54f
output/email: use SCCalloc for OutputJsonEmailCtx

email_ctx->fields only gets populated when smtp.custom setting is on.
The fn EveEmailLogJSONCustom is called when either
1. smtp.extended setting is on or,
2. email_ctx->fields is populated which means smtp.custom setting is on

In case neither of these are set in suricata.yaml, no call should
ideally be made to the fn EveEmailLogJSONCustom.
However, it turns out that email_ctx->fields is unset and then set only
after the smtp config was found. This leads to email_ctx->fields
sometimes contain value even when no config was given to the smtp
section and can lead to unexpected output.

Fix this by using SCCalloc while initializing OutputJsonEmailCtx struct
instead of SCMalloc.

Bug 6380

(cherry picked from commit 7406ac0fa595658c70ed3f13cf79656f2b0d290a)
src/output-json-smtp.c