Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-03 15:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
10798 commits 386 branches 195 tags 257 MiB
Commit graph

498 commits

Author SHA1 Message Date
Jon Siwek
0db5c920f2 Deprecate names in BifConst, replace with zeek::BifConst 
Some Val* types are also replaced with IntrusivePtr at the new location
 2020-05-14 17:26:00 -07:00
Jon Siwek
eedeb07550 Deprecate all BroType* in BifType:: namespace 
Replaced with equivalently named IntrusivePtr in zeek::BifType::
 2020-05-14 17:25:35 -07:00
Jon Siwek
8f95a2a0bb Deprecate Scope::Lookup(), replace with Scope::Find() 2020-05-14 17:24:21 -07:00
Jon Siwek
a5762c12cc Move various elements into ID.h and zeek::id namespace 
* A handful of generic/useful/common global type pointers that used
  to be in NetVar.h

* Lookup functions that used to be Var.h
 2020-05-14 17:24:20 -07:00
Jon Siwek
9210d443d3 Trim the list of "global type pointers" from NetVar.h further 
Most of them are deprecated now, with usage sites now doing the lookup
themselves.
 2020-05-14 17:23:20 -07:00
Jon Siwek
c0986f0739 Deprecate global type pointers in NetVar.h 
There's analogous IntrusivePtrs in zeek::vars
 2020-05-14 17:23:20 -07:00
Jon Siwek
1eb723fc9d Deprecate Val::Type(), replace with GetType() 2020-05-14 17:23:20 -07:00
Jon Siwek
447b052d11 Deprecate opt_internal_val() 2020-05-14 17:23:20 -07:00
Jon Siwek
26f6fe01c8 Deprecate internal_func(), replace with zeek::lookup_func() 2020-05-14 17:23:20 -07:00
Jon Siwek
a83941d64d Deprecate internal_val() and internal_const_val() 
Replaced with zeek::lookup_val() and zeek::lookup_const()
 2020-05-14 17:23:19 -07:00
Jon Siwek
ac06259eec Deprecate internal_type(), replace with zeek::lookup_type() 2020-05-14 17:22:26 -07:00
Jon Siwek
32b895f4ba Deprecate ID::ID_Val(), replace with ID::GetVal() 2020-05-14 17:18:00 -07:00
Jon Siwek
3f07c57523 Deprecate ID::Type(), replace with GetType() 2020-05-14 17:18:00 -07:00
Jon Siwek
6e647416d5 Deprecate ID::AsType(), add ID::IsType() and ID::GetType() 2020-05-14 17:18:00 -07:00
Jon Siwek
f26904e031 Deprecate BroType::YieldType(), replace with Yield() 2020-05-14 17:18:00 -07:00
Jon Siwek
2aa84eb86e Deprecate BroType::GetField() and BroType::HasField() 2020-05-14 17:18:00 -07:00
Jon Siwek
103fed9f01 Deprecate RecordType::FieldType(), replace with GetFieldType() 2020-05-14 17:18:00 -07:00
Jon Siwek
455fc29b1a Migrate TypeList to store IntrusivePtrs 
This changes return types of TypeList::Types() and
IndexType::IndexTypes() to return std::vector instead of type_list*
 2020-05-14 17:18:00 -07:00
Jon Siwek
a60e5e9582 Migrate SMB analyzer to use IntrusivePtr 
Deprecates the utf16_bytestring_to_utf8_val() function with replacement
being utf16_to_utf8_val().
 2020-05-14 17:18:00 -07:00
Jon Siwek
1abed4fd4c Migrate Tag classes to use IntrusivePtr 
Deprecates various methods that previously took raw pointers
 2020-05-14 17:18:00 -07:00
Jon Siwek
61649d5da7 Deprecate various IP/packet header Val-building methods 
And supply new alternatives that use IntrusivePtr
 2020-05-14 17:18:00 -07:00
Jon Siwek
156686b237 Correct spelling of DCE/RPC operation string NetrLogonSameLogonWithFlags 
Fixes GH-952
 2020-05-04 18:03:14 -07:00
Jon Siwek
fda9498276 Merge remote-tracking branch 'origin/topic/seth/more-file-type-ident' 
* origin/topic/seth/more-file-type-ident:
  Adds a note in NEWS about the signature addition and restructuring
  Fixes a small bug in one signature with a duplicate name.
  Organized and added to the shipped file identification signatures.
 2020-04-29 16:32:41 -07:00
Seth Hall
43661a2b0b Adds a note in NEWS about the signature addition and restructuring 2020-04-29 11:34:00 -04:00
Tim Wojtulewicz
cb40dbd58b Merge remote-tracking branch 'origin/topic/jsiwek/intrusive-ptr-chipping' 
* origin/topic/jsiwek/intrusive-ptr-chipping:
  Deprecate returning Val* from BIFs
  Deprecate binpac::string_to_val
  Deprecate binpac::bytestring_to_val, replace with binpac::to_stringval
  Update deprecated BifEvent::generate_* usages
  Deprecate Connection::Event and Analyzer::Event methods
  Deprecate BuildConnVal() methods and update usages to ConnVal()
  Update all BIFs to return IntrusivePtr instead of Val*
  Update deprecated ValManager::GetPort usages
  Update deprecated ValManager::GetEmptyString usages
  Update deprecated ValManager::GetCount usages
  Update deprecated ValManager::GetInt usages
  Update deprecated ValManager::GetBool usages
  Update deprecated ValManager GetTrue/GetFalse usages
  Deprecate all ValManager "Get" methods
  Change BIFs to return a wrapper object
 2020-04-24 16:20:08 -07:00
Johanna Amann
e3de46ba9b Remove connection_external 
This event was forgotten in our broccoli cleanup. It cannot be
raised by anything anymore.
 2020-04-21 09:00:05 -07:00
Jon Siwek
80d3918b13 Deprecate returning Val* from BIFs 2020-04-20 15:20:42 -07:00
Jon Siwek
6c0a9b0d8f Deprecate binpac::string_to_val 2020-04-20 14:43:06 -07:00
Jon Siwek
743303950b Deprecate binpac::bytestring_to_val, replace with binpac::to_stringval 2020-04-20 14:30:49 -07:00
Jon Siwek
81517bd703 Update deprecated BifEvent::generate_* usages 2020-04-17 18:42:58 -07:00
Jon Siwek
9b2fb29aca Deprecate Connection::Event and Analyzer::Event methods 
And update usages to the "EnqueueEvent" methods.
 2020-04-16 19:45:30 -07:00
Jon Siwek
2a63e4a4a2 Deprecate BuildConnVal() methods and update usages to ConnVal() 
The later being a new method that returns IntrusivePtr
 2020-04-16 17:00:01 -07:00
Jon Siwek
202b3f877d Deprecate all ValManager "Get" methods 
Alternate methods that return IntrusivePtr are available in similarly
named methods that omit the "Get" prefix.
 2020-04-16 16:40:57 -07:00
Johanna Amann
876c803d75 Merge remote-tracking branch 'origin/topic/timw/776-using-statements' 
* origin/topic/timw/776-using-statements:
  Remove 'using namespace std' from SerialTypes.h
  Remove other using statements from headers
  GH-776: Remove using statements added by PR 770

Includes small fixes in files that changed since the merge request was
made.

Also includes a few small indentation fixes.
 2020-04-09 13:31:07 -07:00
Jon Siwek
1210257af9 Update submodule(s) 
[nomail]
 2020-04-08 14:06:56 -07:00
Johanna Amann
4ee84b69f2 Merge remote-tracking branch 'origin/topic/jsiwek/udp_content_delivery_ports_use_resp' 
* origin/topic/jsiwek/udp_content_delivery_ports_use_resp:
  Add "udp_content_ports" option
  Add new "udp_content_delivery_ports_use_resp" option
 2020-04-07 14:28:49 -07:00
Jon Siwek
e66148a13a Merge branch 'topic/ak/rdpeudp' 
- Squashed the original commit set
- Cleaned up formatting
- Fixed register_for_ports() for right RDPEUDP analyzer

* topic/ak/rdpeudp:
  Add RDP over UDP analyzer
 2020-04-02 18:31:40 -07:00
Robin Sommer
033fdcca74 Merge branch 'topic/timw/the-great-embooleanating' 
(Squashed this one before merge).

* topic/timw/the-great-embooleanating:
  The Great Embooleanating
 2020-03-31 06:57:39 +00:00
Tim Wojtulewicz
fd5e15b116 The Great Embooleanating 
A large number of functions had return values and/or arguments changed
to use ``bool`` types instead of ``int``.
 2020-03-31 06:41:54 +00:00
Johanna Amann
5453c6004e Merge remote-tracking branch 'origin/topic/jsiwek/rocksdb-opt-in' 
* origin/topic/jsiwek/rocksdb-opt-in:
  GH-878: Make RocksDB usage opt-in and add --enable-rocksdb configure flag

Fixes GH-878
 2020-03-30 13:23:09 -07:00
Jon Siwek
3c1ad8b962 GH-878: Make RocksDB usage opt-in and add --enable-rocksdb configure flag 2020-03-26 12:18:42 -07:00
Jon Siwek
5e496e43b7 Deprecate Analyzer::ConnectionEvent() 
And update usages to Analyzer::EnqueueConnEvent()
 2020-03-25 18:40:49 -07:00
Jon Siwek
e394ea38bc Deprecate file_analysis::File::FileEvent methods using val_list args 
And update usages to the overload that takes a zeek::Args instead.
 2020-03-25 18:40:49 -07:00
Jon Siwek
de47a50dde Deprecate Connection::ConnectionEvent methods 
And update usages to Connection::EnqueueEvent
 2020-03-25 18:39:56 -07:00
Jon Siwek
0db484cc7a Deprecate EventMgr::QueueEvent() and update usages to Enqueue() 2020-03-25 16:09:33 -07:00
Jon Siwek
b667c637df Deprecate Func::Call(val_list*, ...) 
The version taking a vector of intrusive pointers should be used
instead.  A variadic version is also added that forwards all arguments.
 2020-03-24 20:48:32 -07:00
Jon Siwek
4e1ac4e124 Use vector<IntrusivePtr<Val>> for Func::Call and Event queuing args 
This change may break BIFs that use @ARGS@, @ARG@, or @ARGC@ since their
types have changed.
 2020-03-24 16:50:18 -07:00
Johanna Amann
da5fca7163 Merge branch 'topic/johanna/gh-744-cache-the-heck-out-of-these-certs' 
* topic/johanna/gh-744-cache-the-heck-out-of-these-certs:
  X509 caching API change: callback gets entry directly
  Address feedback
  Small default updates & external baselines.
  X509 caching: small API changes, tests & test updates
  Certificate caching - now working in principle.
  First (sadly not completely working) approach at caching X509 certificates
 2020-03-12 13:44:07 -07:00
Tim Wojtulewicz
822567b3f9 Merge remote-tracking branch 'origin/topic/jsiwek/32bit-compat' 
* origin/topic/jsiwek/32bit-compat:
  Improve formatting of doubles that are close to integers
  Improve HTTP version number comparisons
  Add a 32-bit task to Cirrus CI config
  Replace va_list fmt() overload with vfmt()
  Format tables indexed by patterns consistently across 32-bit/64-bit
  Format interval values consistently across 32-bit/64-bit platforms
 2020-02-24 18:49:33 -07:00
Max Kellermann
55398ed5d8 OpaqueVal: use class IntrusivePtr 2020-02-21 20:50:11 +01:00