diff --git a/doc/scripts/DocSourcesList.cmake b/doc/scripts/DocSourcesList.cmake index 30b72fc3c2..f7eff580c6 100644 --- a/doc/scripts/DocSourcesList.cmake +++ b/doc/scripts/DocSourcesList.cmake @@ -102,7 +102,6 @@ rest_target(${psd} policy/integration/barnyard2/main.bro) rest_target(${psd} policy/integration/barnyard2/types.bro) rest_target(${psd} policy/misc/analysis-groups.bro) rest_target(${psd} policy/misc/loaded-scripts.bro) -rest_target(${psd} policy/misc/pf-ring-load-balancing.bro) rest_target(${psd} policy/misc/profiling.bro) rest_target(${psd} policy/misc/trim-trace-file.bro) rest_target(${psd} policy/protocols/conn/known-hosts.bro) @@ -115,7 +114,7 @@ rest_target(${psd} policy/protocols/http/detect-MHR.bro) rest_target(${psd} policy/protocols/http/detect-intel.bro) rest_target(${psd} policy/protocols/http/detect-sqli.bro) rest_target(${psd} policy/protocols/http/detect-webapps.bro) -rest_target(${psd} policy/protocols/http/headers.bro) +rest_target(${psd} policy/protocols/http/header-names.bro) rest_target(${psd} policy/protocols/http/software.bro) rest_target(${psd} policy/protocols/http/var-extraction-cookies.bro) rest_target(${psd} policy/protocols/http/var-extraction-uri.bro) diff --git a/scripts/base/frameworks/logging/main.bro b/scripts/base/frameworks/logging/main.bro index 44ece46735..8d51286f23 100644 --- a/scripts/base/frameworks/logging/main.bro +++ b/scripts/base/frameworks/logging/main.bro @@ -207,7 +207,8 @@ function default_path_func(id: ID, path: string, rec: any) : string else { # In case there is a logging stream in the global namespace. - return to_lower(id_str); + # TODO: same bug as above with split and lack of terminating \0 + return fmt("%s", to_lower(id_str)); } } @@ -241,8 +242,7 @@ function create_stream(id: ID, stream: Stream) : bool function disable_stream(id: ID) : bool { - if ( ! __disable_stream(id) ) - return F; + return __disable_stream(id); } function add_filter(id: ID, filter: Filter) : bool diff --git a/scripts/policy/protocols/http/header-names.bro b/scripts/policy/protocols/http/header-names.bro index 284db78351..bd0e55f02f 100644 --- a/scripts/policy/protocols/http/header-names.bro +++ b/scripts/policy/protocols/http/header-names.bro @@ -14,7 +14,7 @@ export { ## The vector of HTTP header names sent by the server. No header ## values are included here, just the header names. - server_headers_names: vector of string &log &optional; + server_header_names: vector of string &log &optional; }; ## A boolean value to determine if client header names are to be logged. diff --git a/scripts/policy/protocols/ssh/detect-bruteforcing.bro b/scripts/policy/protocols/ssh/detect-bruteforcing.bro index ba38f342d4..1bed741da2 100644 --- a/scripts/policy/protocols/ssh/detect-bruteforcing.bro +++ b/scripts/policy/protocols/ssh/detect-bruteforcing.bro @@ -1,4 +1,5 @@ +@load base/protocols/ssh @load base/frameworks/metrics @load base/frameworks/notice @load base/frameworks/intel @@ -72,4 +73,4 @@ event SSH::heuristic_failed_login(c: connection) if ( ! (id$orig_h in ignore_guessers && id$resp_h in ignore_guessers[id$orig_h]) ) Metrics::add_data(FAILED_LOGIN, [$host=id$orig_h], 1); - } \ No newline at end of file + } diff --git a/scripts/test-all-policy.bro b/scripts/test-all-policy.bro index 0cc92e7e29..3aa6a00ebd 100644 --- a/scripts/test-all-policy.bro +++ b/scripts/test-all-policy.bro @@ -25,6 +25,7 @@ @load integration/barnyard2/types.bro @load misc/analysis-groups.bro @load misc/loaded-scripts.bro +@load misc/profiling.bro @load misc/trim-trace-file.bro @load protocols/conn/known-hosts.bro @load protocols/conn/known-services.bro @@ -37,11 +38,16 @@ @load protocols/http/detect-MHR.bro @load protocols/http/detect-sqli.bro @load protocols/http/detect-webapps.bro +@load protocols/http/header-names.bro @load protocols/http/software.bro @load protocols/http/var-extraction-cookies.bro @load protocols/http/var-extraction-uri.bro +@load protocols/smtp/blocklists.bro @load protocols/smtp/detect-suspicious-orig.bro @load protocols/smtp/software.bro +@load protocols/ssh/detect-bruteforcing.bro +@load protocols/ssh/geo-data.bro +@load protocols/ssh/interesting-hostnames.bro @load protocols/ssh/software.bro @load protocols/ssl/known-certs.bro @load protocols/ssl/validate-certs.bro diff --git a/src/Func.cc b/src/Func.cc index 8f26ea27df..d73717ed50 100644 --- a/src/Func.cc +++ b/src/Func.cc @@ -334,7 +334,7 @@ Val* BroFunc::Call(val_list* args, Frame* parent) const (flow != FLOW_RETURN /* we fell off the end */ || ! result /* explicit return with no result */) && ! f->HasDelayed() ) - reporter->Warning("non-void function returns without a value:", id->Name()); + reporter->Warning("non-void function returns without a value: %s", id->Name()); if ( result && g_trace_state.DoTrace() ) { diff --git a/testing/btest/Baseline/doc.blacklist-reminder/.stderr b/testing/btest/Baseline/doc.blacklist-reminder/.stderr deleted file mode 100644 index e69de29bb2..0000000000 diff --git a/testing/btest/Baseline/scripts.policy.misc.bare-loaded-scripts/canonified_loaded_scripts.log b/testing/btest/Baseline/scripts.policy.misc.bare-loaded-scripts/canonified_loaded_scripts.log index 8386089200..8521a12f45 100644 --- a/testing/btest/Baseline/scripts.policy.misc.bare-loaded-scripts/canonified_loaded_scripts.log +++ b/testing/btest/Baseline/scripts.policy.misc.bare-loaded-scripts/canonified_loaded_scripts.log @@ -1,4 +1,7 @@ -# depth name +#separator \x09 +#path loaded_scripts +#fields depth name +#types count string 0 scripts/base/init-bare.bro 1 build/src/base/const.bif.bro 1 build/src/base/types.bif.bro diff --git a/testing/btest/Baseline/scripts.policy.misc.default-loaded-scripts/canonified_loaded_scripts.log b/testing/btest/Baseline/scripts.policy.misc.default-loaded-scripts/canonified_loaded_scripts.log index be836e1fee..be9aa3d62d 100644 --- a/testing/btest/Baseline/scripts.policy.misc.default-loaded-scripts/canonified_loaded_scripts.log +++ b/testing/btest/Baseline/scripts.policy.misc.default-loaded-scripts/canonified_loaded_scripts.log @@ -1,4 +1,7 @@ -# depth name +#separator \x09 +#path loaded_scripts +#fields depth name +#types count string 0 scripts/base/init-bare.bro 1 build/src/base/const.bif.bro 1 build/src/base/types.bif.bro diff --git a/testing/btest/doc/blacklist-reminder.test b/testing/btest/doc/blacklist-reminder.test deleted file mode 100644 index 8b79d8a28f..0000000000 --- a/testing/btest/doc/blacklist-reminder.test +++ /dev/null @@ -1,8 +0,0 @@ -# This test will fail if there are Bro scripts that have been temporarily -# blacklisted from the documentation generation process for some reason -# (e.g. they're a work-in-progress or otherwise fail to parse). It's meant -# to serve as a reminder that some future action may be needed to generate -# documentation for the blacklisted scripts. -# -# @TEST-EXEC: $DIST/doc/scripts/genDocSourcesList.sh -# @TEST-EXEC: btest-diff .stderr diff --git a/testing/btest/scripts/base/init-default-coverage.bro b/testing/btest/scripts/base/init-default-coverage.bro index d4336ce385..a2f6a0df1c 100644 --- a/testing/btest/scripts/base/init-default-coverage.bro +++ b/testing/btest/scripts/base/init-default-coverage.bro @@ -5,7 +5,7 @@ #@TEST-EXEC: test -e $DIST/scripts/base/init-default.bro #@TEST-EXEC: ( cd $DIST/scripts/base && find . -name '*.bro' ) | sort >"all scripts found" #@TEST-EXEC: bro misc/loaded-scripts -#@TEST-EXEC: cat loaded_scripts.log | egrep -v '/build/|/loaded-scripts.bro' | awk 'NR>1{print $2}' | sed 's#/./#/#g' >loaded_scripts.log.tmp +#@TEST-EXEC: cat loaded_scripts.log | egrep -v '/build/|/loaded-scripts.bro|#' | awk 'NR>1{print $2}' | sed 's#/./#/#g' >loaded_scripts.log.tmp #@TEST-EXEC: cat loaded_scripts.log.tmp | sed -e ':a' -e '$!N' -e 's/^\(.*\).*\n\1.*/\1/' -e 'ta' >prefix #@TEST-EXEC: cat loaded_scripts.log.tmp | sed "s#`cat prefix`#./#g" | sort >init-default.bro #@TEST-EXEC: diff -u "all scripts found" init-default.bro 1>&2 diff --git a/testing/btest/scripts/policy/misc/bare-loaded-scripts.test b/testing/btest/scripts/policy/misc/bare-loaded-scripts.test index fb7074f2c2..2f273386dc 100644 --- a/testing/btest/scripts/policy/misc/bare-loaded-scripts.test +++ b/testing/btest/scripts/policy/misc/bare-loaded-scripts.test @@ -7,6 +7,6 @@ # @TEST-EXEC: bro -b misc/loaded-scripts # @TEST-EXEC: test -e loaded_scripts.log -# @TEST-EXEC: cat loaded_scripts.log | awk 'NR>1{print $2}' | sed -e ':a' -e '$!N' -e 's/^\(.*\).*\n\1.*/\1/' -e 'ta' >prefix +# @TEST-EXEC: cat loaded_scripts.log | egrep -v '#' | awk 'NR>1{print $2}' | sed -e ':a' -e '$!N' -e 's/^\(.*\).*\n\1.*/\1/' -e 'ta' >prefix # @TEST-EXEC: cat loaded_scripts.log | sed "s#`cat prefix`##g" >canonified_loaded_scripts.log # @TEST-EXEC: btest-diff canonified_loaded_scripts.log diff --git a/testing/btest/scripts/policy/misc/default-loaded-scripts.test b/testing/btest/scripts/policy/misc/default-loaded-scripts.test index c7f0d12a23..147bdea685 100644 --- a/testing/btest/scripts/policy/misc/default-loaded-scripts.test +++ b/testing/btest/scripts/policy/misc/default-loaded-scripts.test @@ -7,6 +7,6 @@ # @TEST-EXEC: bro misc/loaded-scripts # @TEST-EXEC: test -e loaded_scripts.log -# @TEST-EXEC: cat loaded_scripts.log | awk 'NR>1{print $2}' | sed -e ':a' -e '$!N' -e 's/^\(.*\).*\n\1.*/\1/' -e 'ta' >prefix +# @TEST-EXEC: cat loaded_scripts.log | egrep -v '#' | awk 'NR>1{print $2}' | sed -e ':a' -e '$!N' -e 's/^\(.*\).*\n\1.*/\1/' -e 'ta' >prefix # @TEST-EXEC: cat loaded_scripts.log | sed "s#`cat prefix`##g" >canonified_loaded_scripts.log # @TEST-EXEC: btest-diff canonified_loaded_scripts.log