signatures: Add data_end_offset to signature_match() and custom events

This change tracks the current offset (number of bytes fed into matchers)
on the top-level RuleEndpointState such that we can compute the relative ending
for matched texts individually.

Additionally, it adds the data_end_offset as a new optional parameter to
signature_match().
This commit is contained in:
Arne Welzel 2024-10-28 18:59:58 +01:00
parent 5859e23198
commit 04872d4e78
19 changed files with 219 additions and 24 deletions

View file

@ -43,6 +43,7 @@ public:
private:
StringValPtr msg;
EventHandlerPtr handler;
bool want_end_of_match; // Whether handler accepts end_of_match parameter.
};
class RuleActionMIME : public RuleAction {