Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Http2 frames 5743 v3 #11717

Closed
wants to merge 2 commits into from
Closed

Conversation

catenacyber
Copy link
Contributor

Link to ticket: https://redmine.openinfosecfoundation.org/issues/
https://redmine.openinfosecfoundation.org/issues/5743
https://redmine.openinfosecfoundation.org/issues/7213

Describe changes:

  • http2: support frames
  • frames: fix use of stream frame (only when enabled)

SV_BRANCH=OISF/suricata-verify#2011

#11707 with better commit message and earlier frames creation followed by set_tx

Ticket: 5743

Why ? To add detection capabilities
As it is not always the first frame to be created :
if it is not enabled, it does not get created, and other enabled
frames may be created first. see use of FrameConfigTypeIsEnabled

This resulted that this other frame got its length updated
on stream end, which led to false positives.

Resorting on FRAME_STREAM_TYPE is more consistent.

Ticket: 7213
Copy link

codecov bot commented Sep 4, 2024

Codecov Report

Attention: Patch coverage is 95.83333% with 2 lines in your changes missing coverage. Please review.

Project coverage is 82.63%. Comparing base (685baa9) to head (ec69ad0).
Report is 12 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11717      +/-   ##
==========================================
- Coverage   82.63%   82.63%   -0.01%     
==========================================
  Files         919      919              
  Lines      248925   248959      +34     
==========================================
+ Hits       205703   205725      +22     
- Misses      43222    43234      +12     
Flag Coverage Δ
fuzzcorpus 60.89% <85.41%> (+<0.01%) ⬆️
livemode 18.71% <4.16%> (-0.01%) ⬇️
pcap 44.11% <91.66%> (-0.04%) ⬇️
suricata-verify 61.87% <95.83%> (-0.01%) ⬇️
unittests 59.00% <8.33%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

@suricata-qa
Copy link

ERROR:

ERROR: QA failed on SURI_TLPR1_alerts_cmp.

Pipeline 22387

@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 22429

@victorjulien victorjulien added this to the 8.0 milestone Sep 11, 2024
@victorjulien
Copy link
Member

Merged in #11755, thanks!

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants