Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 00:58:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add test case for binpac flowbuffer frame length parsing bug

Browse source
This commit is contained in:
Jon Siwek 2020-03-19 22:09:23 -07:00
parent e2aeb70efc
commit 7e57f0788c
13 changed files with 265 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

37
testing/btest/plugins/binpac-flowbuffer-frame-length-plugin/src/FOO.h Normal file
View file

@ -0,0 +1,37 @@
#ifndef ANALYZER_PROTOCOL_FOO_FOO_H
#define ANALYZER_PROTOCOL_FOO_FOO_H
#include "foo.bif.h"
#include "analyzer/protocol/tcp/TCP.h"
#include "foo_pac.h"
namespace analyzer { namespace FOO {
class FOO_Analyzer : public tcp::TCP_ApplicationAnalyzer {
public:
FOO_Analyzer(Connection* conn);
virtual ~FOO_Analyzer();
// Overriden from Analyzer.
virtual void Done();
virtual void DeliverStream(int len, const u_char* data, bool orig);
virtual void Undelivered(uint64_t seq, int len, bool orig);
// Overriden from tcp::TCP_ApplicationAnalyzer.
virtual void EndpointEOF(bool is_orig);
static analyzer::Analyzer* InstantiateAnalyzer(Connection* conn)
{ return new FOO_Analyzer(conn); }
protected:
binpac::FOO::FOO_Conn* interp;
bool had_gap;
};
} } // namespace analyzer::FOO
#endif