4 commits

Author	SHA1	Message	Date
Arne Welzel	f6e7ea43c3	http/smtp: Fix wrong character class usage ... A call to `extract_filename_from_content_disposition()` is only efficient if the string is guaranteed to contain the pattern that is removed by `sub()`. Due to missing brackets around the `[:blank:]` character class, an overly long string (756kb) ending in "Type:dtanameaa=" matched the wrong pattern causing `sub()` to exhibit quadratic runtime. Besides that, we may have potentially extracted wrong information from a crafted header value. (cherry picked from commit 6d385b1ca724a10444865e4ad38a58b31a2e2288)	2023-09-12 12:00:36 -07:00
Arne Welzel	8b04868de3	{http,smtp}/entities: Align header regexes with extract_filename_from_content_disposition()	2022-11-08 16:45:25 -07:00
Tim Wojtulewicz	a91d363e56	smtp: Prevent script errors when smtp$entity is not set ... This is the same issue presented in 38e226bf75 but for SMTP instead of HTTP.	2022-10-10 11:26:08 -07:00
Daniel Thayer	18bd74454b	Rename all scripts to have ".zeek" file extension	2019-04-11 21:12:40 -05:00

Renamed from scripts/base/protocols/smtp/entities.bro (Browse further)