-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Multipart mime 3487 v18 #9424
Multipart mime 3487 v18 #9424
Conversation
Accepts escaped quote in escaped string
as tested by suricata-verify
to be squashed in previous commit
to be squashed
ERROR: ERROR: QA failed on SURI_TLPW1_files_sha256. Pipeline 15791 |
@@ -0,0 +1,605 @@ | |||
/* Copyright (C) 2021 Open Information Security Foundation |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
2023? Or did you write this initially in 2021?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I wrote it in 2021 ...
escaping = true; | ||
} else { | ||
if input[i] == b'"' && !escaping { | ||
return Ok((&input[i + 1..], &input[..i])); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could unicode mess with this. I recently ran into this: jasonish/suricatax-rule-parser-rs@d77c4e3
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is a buffer &[u8]
not a string, so there is no need to worry about unicode, right ?
We should probably think about the name space in new code. The Also, since these Rust functions are part of the But maybe we should wait for some further discussion on this. |
Let me know if I need to do more renaming :-) |
Replaced by #9436 |
Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/3487
Describe changes:
Follows #9038 with rebase and squash
Still to do by me :
SV tests from unit tests in OISF/suricata-verify#1369