]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
http2: http.uri.raw keyword now works for HTTP2
authorPhilippe Antoine <contact@catenacyber.fr>
Thu, 17 Dec 2020 13:19:25 +0000 (14:19 +0100)
committerVictor Julien <victor@inliniac.net>
Mon, 14 Jun 2021 19:05:19 +0000 (21:05 +0200)
(cherry picked from commit 5d676c5998aeb33c529e8ee8efcaa2fdf10324ef)

src/detect-http-uri.c

index d2bccf2bdf5244eaf9a2c9a43abe221e8f48e694..ec26c109056f24a3cc40c195d365a2831f34d9bb 100644 (file)
@@ -157,6 +157,13 @@ void DetectHttpUriRegister (void)
             PrefilterGenericMpmRegister, GetRawData, ALPROTO_HTTP,
             HTP_REQUEST_LINE);
 
+    // no difference between raw and decoded uri for HTTP2
+    DetectAppLayerInspectEngineRegister2("http_raw_uri", ALPROTO_HTTP2, SIG_FLAG_TOSERVER,
+            HTTP2StateDataClient, DetectEngineInspectBufferGeneric, GetData2);
+
+    DetectAppLayerMpmRegister2("http_raw_uri", SIG_FLAG_TOSERVER, 2, PrefilterGenericMpmRegister,
+            GetData2, ALPROTO_HTTP2, HTTP2StateDataClient);
+
     DetectBufferTypeSetDescriptionByName("http_raw_uri",
             "raw http uri");