mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 08:38:20 +00:00
Reformat Zeek in Spicy style
This largely copies over Spicy's `.clang-format` configuration file. The one place where we deviate is header include order since Zeek depends on headers being included in a certain order.
This commit is contained in:
Benjamin Bannier
parent
7b8e7ed72c
commit
f5a76c1aed
786 changed files with 131714 additions and 153609 deletions
|
|
@ -13,120 +13,89 @@
|
|||
|
||||
using std::string;
|
||||
|
||||
namespace zeek::detail
|
||||
{
|
||||
namespace zeek::detail {
|
||||
|
||||
RuleActionEvent::RuleActionEvent(const char* arg_msg)
|
||||
{
|
||||
msg = util::copy_string(arg_msg);
|
||||
}
|
||||
RuleActionEvent::RuleActionEvent(const char* arg_msg) { msg = util::copy_string(arg_msg); }
|
||||
|
||||
void RuleActionEvent::DoAction(const Rule* parent, RuleEndpointState* state, const u_char* data,
|
||||
int len)
|
||||
{
|
||||
if ( signature_match )
|
||||
event_mgr.Enqueue(
|
||||
signature_match,
|
||||
IntrusivePtr{AdoptRef{}, rule_matcher->BuildRuleStateValue(parent, state)},
|
||||
make_intrusive<StringVal>(msg),
|
||||
data ? make_intrusive<StringVal>(len, (const char*)data) : val_mgr->EmptyString());
|
||||
}
|
||||
void RuleActionEvent::DoAction(const Rule* parent, RuleEndpointState* state, const u_char* data, int len) {
|
||||
if ( signature_match )
|
||||
event_mgr.Enqueue(signature_match, IntrusivePtr{AdoptRef{}, rule_matcher->BuildRuleStateValue(parent, state)},
|
||||
make_intrusive<StringVal>(msg),
|
||||
data ? make_intrusive<StringVal>(len, (const char*)data) : val_mgr->EmptyString());
|
||||
}
|
||||
|
||||
void RuleActionEvent::PrintDebug()
|
||||
{
|
||||
fprintf(stderr, " RuleActionEvent: |%s|\n", msg);
|
||||
}
|
||||
void RuleActionEvent::PrintDebug() { fprintf(stderr, " RuleActionEvent: |%s|\n", msg); }
|
||||
|
||||
RuleActionMIME::RuleActionMIME(const char* arg_mime, int arg_strength)
|
||||
{
|
||||
mime = util::copy_string(arg_mime);
|
||||
strength = arg_strength;
|
||||
}
|
||||
RuleActionMIME::RuleActionMIME(const char* arg_mime, int arg_strength) {
|
||||
mime = util::copy_string(arg_mime);
|
||||
strength = arg_strength;
|
||||
}
|
||||
|
||||
void RuleActionMIME::PrintDebug()
|
||||
{
|
||||
fprintf(stderr, " RuleActionMIME: |%s|\n", mime);
|
||||
}
|
||||
void RuleActionMIME::PrintDebug() { fprintf(stderr, " RuleActionMIME: |%s|\n", mime); }
|
||||
|
||||
RuleActionAnalyzer::RuleActionAnalyzer(const char* arg_analyzer)
|
||||
{
|
||||
string str(arg_analyzer);
|
||||
string::size_type pos = str.find(':');
|
||||
string arg = str.substr(0, pos);
|
||||
analyzer = analyzer_mgr->GetComponentTag(arg.c_str());
|
||||
RuleActionAnalyzer::RuleActionAnalyzer(const char* arg_analyzer) {
|
||||
string str(arg_analyzer);
|
||||
string::size_type pos = str.find(':');
|
||||
string arg = str.substr(0, pos);
|
||||
analyzer = analyzer_mgr->GetComponentTag(arg.c_str());
|
||||
|
||||
if ( ! analyzer )
|
||||
reporter->Warning("unknown analyzer '%s' specified in rule", arg.c_str());
|
||||
if ( ! analyzer )
|
||||
reporter->Warning("unknown analyzer '%s' specified in rule", arg.c_str());
|
||||
|
||||
if ( pos != string::npos )
|
||||
{
|
||||
arg = str.substr(pos + 1);
|
||||
child_analyzer = analyzer_mgr->GetComponentTag(arg.c_str());
|
||||
if ( pos != string::npos ) {
|
||||
arg = str.substr(pos + 1);
|
||||
child_analyzer = analyzer_mgr->GetComponentTag(arg.c_str());
|
||||
|
||||
if ( ! child_analyzer )
|
||||
reporter->Warning("unknown analyzer '%s' specified in rule", arg.c_str());
|
||||
}
|
||||
else
|
||||
child_analyzer = zeek::Tag();
|
||||
}
|
||||
if ( ! child_analyzer )
|
||||
reporter->Warning("unknown analyzer '%s' specified in rule", arg.c_str());
|
||||
}
|
||||
else
|
||||
child_analyzer = zeek::Tag();
|
||||
}
|
||||
|
||||
void RuleActionAnalyzer::PrintDebug()
|
||||
{
|
||||
if ( ! child_analyzer )
|
||||
fprintf(stderr, "|%s|\n", analyzer_mgr->GetComponentName(analyzer).c_str());
|
||||
else
|
||||
fprintf(stderr, "|%s:%s|\n", analyzer_mgr->GetComponentName(analyzer).c_str(),
|
||||
analyzer_mgr->GetComponentName(child_analyzer).c_str());
|
||||
}
|
||||
void RuleActionAnalyzer::PrintDebug() {
|
||||
if ( ! child_analyzer )
|
||||
fprintf(stderr, "|%s|\n", analyzer_mgr->GetComponentName(analyzer).c_str());
|
||||
else
|
||||
fprintf(stderr, "|%s:%s|\n", analyzer_mgr->GetComponentName(analyzer).c_str(),
|
||||
analyzer_mgr->GetComponentName(child_analyzer).c_str());
|
||||
}
|
||||
|
||||
void RuleActionEnable::DoAction(const Rule* parent, RuleEndpointState* state, const u_char* data,
|
||||
int len)
|
||||
{
|
||||
if ( ! ChildAnalyzer() )
|
||||
{
|
||||
if ( ! analyzer_mgr->IsEnabled(Analyzer()) )
|
||||
return;
|
||||
void RuleActionEnable::DoAction(const Rule* parent, RuleEndpointState* state, const u_char* data, int len) {
|
||||
if ( ! ChildAnalyzer() ) {
|
||||
if ( ! analyzer_mgr->IsEnabled(Analyzer()) )
|
||||
return;
|
||||
|
||||
if ( state->PIA() )
|
||||
state->PIA()->ActivateAnalyzer(Analyzer(), parent);
|
||||
}
|
||||
else
|
||||
{
|
||||
if ( ! analyzer_mgr->IsEnabled(ChildAnalyzer()) )
|
||||
return;
|
||||
if ( state->PIA() )
|
||||
state->PIA()->ActivateAnalyzer(Analyzer(), parent);
|
||||
}
|
||||
else {
|
||||
if ( ! analyzer_mgr->IsEnabled(ChildAnalyzer()) )
|
||||
return;
|
||||
|
||||
// This is ugly and works only if there exists only one
|
||||
// analyzer of each type.
|
||||
state->PIA()
|
||||
->AsAnalyzer()
|
||||
->Conn()
|
||||
->FindAnalyzer(Analyzer())
|
||||
->AddChildAnalyzer(ChildAnalyzer());
|
||||
}
|
||||
}
|
||||
// This is ugly and works only if there exists only one
|
||||
// analyzer of each type.
|
||||
state->PIA()->AsAnalyzer()->Conn()->FindAnalyzer(Analyzer())->AddChildAnalyzer(ChildAnalyzer());
|
||||
}
|
||||
}
|
||||
|
||||
void RuleActionEnable::PrintDebug()
|
||||
{
|
||||
fprintf(stderr, " RuleActionEnable: ");
|
||||
RuleActionAnalyzer::PrintDebug();
|
||||
}
|
||||
void RuleActionEnable::PrintDebug() {
|
||||
fprintf(stderr, " RuleActionEnable: ");
|
||||
RuleActionAnalyzer::PrintDebug();
|
||||
}
|
||||
|
||||
void RuleActionDisable::DoAction(const Rule* parent, RuleEndpointState* state, const u_char* data,
|
||||
int len)
|
||||
{
|
||||
if ( ! ChildAnalyzer() )
|
||||
{
|
||||
if ( state->PIA() )
|
||||
state->PIA()->DeactivateAnalyzer(Analyzer());
|
||||
}
|
||||
else
|
||||
state->GetAnalyzer()->AddChildAnalyzer(state->GetAnalyzer()->FindChild(ChildAnalyzer()));
|
||||
}
|
||||
void RuleActionDisable::DoAction(const Rule* parent, RuleEndpointState* state, const u_char* data, int len) {
|
||||
if ( ! ChildAnalyzer() ) {
|
||||
if ( state->PIA() )
|
||||
state->PIA()->DeactivateAnalyzer(Analyzer());
|
||||
}
|
||||
else
|
||||
state->GetAnalyzer()->AddChildAnalyzer(state->GetAnalyzer()->FindChild(ChildAnalyzer()));
|
||||
}
|
||||
|
||||
void RuleActionDisable::PrintDebug()
|
||||
{
|
||||
fprintf(stderr, " RuleActionDisable: ");
|
||||
RuleActionAnalyzer::PrintDebug();
|
||||
}
|
||||
void RuleActionDisable::PrintDebug() {
|
||||
fprintf(stderr, " RuleActionDisable: ");
|
||||
RuleActionAnalyzer::PrintDebug();
|
||||
}
|
||||
|
||||
} // namespace zeek::detail
|
||||
} // namespace zeek::detail
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue