Arne Welzel
345c4ca28a
logging: Avoid repeated writer name lookups for plugin hooks
...
If a plugin provides a write hook, the invocation for HookLogWrite() would
redo looking up the writer's name from the enum value and instantiating
a new std::string instance for every write. Avoid doing this.
2025-01-14 10:45:34 +01:00
Arne Welzel
927a06b9ab
logging: Fix HookLogInit() and HookLogWrite() info usage
...
There's two instances of WriterBackend::WriterInfo for a given
writer. One in Manager::WriterInfo that's accessible via
stream.writers and a copy within WriterFrontend.
Commit 78999d147d
switched to use the
address of the frontend's info instance for HookLogWrite() invocations,
breaking users using the address for identification purposes.
2025-01-14 10:44:50 +01:00
Benjamin Bannier
300b3788e2
Merge branch 'topic/bbannier/coverity'
2025-01-14 08:44:22 +01:00
Benjamin Bannier
3f5fd5c414
Bump auxil/spicy to latest development snapshot
2025-01-13 23:03:27 +01:00
Benjamin Bannier
2fd20f71ad
Prevent copies in various places
2025-01-13 22:19:16 +01:00
Tim Wojtulewicz
8931c352ef
Merge remote-tracking branch 'origin/topic/bbannier/fix-spicy-ssl-includes'
...
* origin/topic/bbannier/fix-spicy-ssl-includes:
Fix incomplete includes in Spicy SSL analyer C++ code
2025-01-13 08:31:04 -07:00
Tim Wojtulewicz
3ae6904b7c
Merge branch 'topic/timw/add-security-md'
...
* topic/timw/add-security-md:
Add SECURITY.md, pointing at the website
2025-01-13 08:22:13 -07:00
Tim Wojtulewicz
1ff5569762
Add SECURITY.md, pointing at the website
2025-01-13 08:21:28 -07:00
Tim Wojtulewicz
36737657ea
Merge remote-tracking branch 'origin/topic/timw/non-routeable-subnets'
...
* origin/topic/timw/non-routeable-subnets:
Update zeekctl submodule [nomail]
2025-01-13 08:20:09 -07:00
Tim Wojtulewicz
16809435a7
Update zeekctl submodule [nomail]
2025-01-13 08:18:47 -07:00
Benjamin Bannier
097088085e
Fix incomplete includes in Spicy SSL analyer C++ code
...
This appears to have been broken by
feec451bce
.
2025-01-12 14:00:51 +01:00
zeek-bot
436d23204e
Update doc submodule [nomail] [skip ci]
2025-01-12 00:22:54 +00:00
Benjamin Bannier
8910415659
Merge branch 'topic/bbannier/bump-spicy'
2025-01-11 17:36:54 +01:00
zeek-bot
7b3126689f
Update doc submodule [nomail] [skip ci]
2025-01-11 00:13:58 +00:00
Christian Kreibich
f2d54db694
Merge remote-tracking branch 'origin/topic/etyp/harden-flaky-test'
...
* origin/topic/etyp/harden-flaky-test:
Harden flaky test based on creating a file
2025-01-10 11:15:45 -08:00
Benjamin Bannier
a17ca4f870
Mark swap
specialization noexcept
2025-01-10 11:42:27 +01:00
Benjamin Bannier
feec451bce
Clean up some includes
2025-01-10 11:42:27 +01:00
Benjamin Bannier
3ea2d2760a
Prevent exception in noexcept
function.
2025-01-10 11:42:26 +01:00
Benjamin Bannier
85ad6084e8
Prevent exception escape.
2025-01-10 11:42:26 +01:00
Benjamin Bannier
a4ab0af70d
Prevent unnecessary copies in Spicy bindings
2025-01-10 11:42:26 +01:00
Benjamin Bannier
7f1d3ae559
Bump auxil/spicy to latest development snapshot
2025-01-10 11:42:26 +01:00
Tim Wojtulewicz
c10b18253a
Merge remote-tracking branch 'origin/topic/timw/non-routeable-subnets'
...
* origin/topic/timw/non-routeable-subnets:
Update btests for new local-only subnets
Add recommended non-routable subnets
2025-01-09 22:18:03 -07:00
Tim Wojtulewicz
0fcbc8546e
Update btests for new local-only subnets
2025-01-09 22:16:42 -07:00
JW-Corelight
05e3de9b81
Add recommended non-routable subnets
...
224.0.0.0/24 (and 6to4 conversion 2002:e000::/40) from RFC5771 "Multicast Local Network Control Block" defined as non-routable.
239.0.0.0/8 (and 6to4 conversion 2002:ef00::/24) from RFC2365 "Administratively Scoped IP Multicast"
fec0::/10 from RFC3879 "Deprecated Site Local Addresses"
(cherry picked from commit 821ab2dbed
)
2025-01-09 22:15:45 -07:00
Tim Wojtulewicz
5fbbbe9548
Fix another typo in the Coverity workflow script
2025-01-09 18:45:56 -07:00
zeek-bot
a4d9067327
Update doc submodule [nomail] [skip ci]
2025-01-10 00:14:49 +00:00
Tim Wojtulewicz
a919226b24
Merge remote-tracking branch 'origin/topic/vern/macro-descriptions'
...
* origin/topic/vern/macro-descriptions:
Add missing include for <vector>
Extended ZAM validation to include macros
2025-01-09 13:47:57 -07:00
Tim Wojtulewicz
c30af24aee
Add missing include for <vector>
2025-01-09 12:28:24 -07:00
Tim Wojtulewicz
7df5298fcd
Merge remote-tracking branch 'origin/topic/vern/zam-header-factoring'
...
* origin/topic/vern/zam-header-factoring:
factoring of some ZAM header files for better modularity
2025-01-09 12:09:16 -07:00
Tim Wojtulewicz
f57e650242
Merge remote-tracking branch 'origin/topic/vern/CPP-standalone-fixes'
...
* origin/topic/vern/CPP-standalone-fixes:
fixes for initializing globals when using -O gen-standalone-C++
2025-01-09 12:02:55 -07:00
Evan Typanski
34f13e7291
Harden flaky test based on creating a file
...
Closes #4102
Surely it won't take over 10 seconds to create the file
2025-01-09 11:06:04 -05:00
Arne Welzel
0fc7a8ca4b
Merge remote-tracking branch 'origin/topic/etyp/copying-2025'
...
* origin/topic/etyp/copying-2025:
Update COPYING date to now and fix some [skip CI]
2025-01-09 16:34:28 +01:00
Evan Typanski
fe44022ee7
Update COPYING date to now and fix some [skip CI]
2025-01-09 08:38:45 -05:00
Christian Kreibich
597e137b46
Merge remote-tracking branch 'origin/topic/etyp/help-stdout'
...
* origin/topic/etyp/help-stdout:
Try to be more careful with `--help` printing
2025-01-08 21:44:49 -08:00
zeek-bot
b76cc88f3a
Update doc submodule [nomail] [skip ci]
2025-01-09 00:12:41 +00:00
Johanna Amann
ac1c55c02a
Merge remote-tracking branch 'origin/topic/johanna/yet-another-curve-for-ssl'
...
* origin/topic/johanna/yet-another-curve-for-ssl:
Add CECPQ2 curve number to SSL consts
2025-01-08 16:22:28 +00:00
Tim Wojtulewicz
e0961da7b9
Merge remote-tracking branch 'origin/topic/timw/fix-coverity-request'
...
* origin/topic/timw/fix-coverity-request:
CI: Fix escaping in coverity workflow
2025-01-08 08:38:39 -07:00
Tim Wojtulewicz
5d55d40764
CI: Fix escaping in coverity workflow
2025-01-08 08:37:59 -07:00
Evan Typanski
0b2f843db9
Try to be more careful with --help
printing
...
Namely, this will:
- print --help to stdout rather than stderr
- not print full usage when errors happen
- add a prompt to use --help for more info on error
This should make it more greppable, clearer, and less spammy.
2025-01-08 07:54:18 -05:00
Johanna Amann
8b85acfc05
Add CECPQ2 curve number to SSL consts
...
This one was hard to find, as it never was officially specified
anywhere.
Source: https://boringssl.googlesource.com/boringssl/+/4ae4fb76c809bfc48a5ab100670395ce404244ce%5E%21/#F4
2025-01-08 09:36:48 +00:00
zeek-bot
adf02b487f
Update doc submodule [nomail] [skip ci]
2025-01-08 00:15:06 +00:00
Tim Wojtulewicz
f1c054f8f3
Merge remote-tracking branch 'origin/topic/christian/news-7-1-contribs'
...
* origin/topic/christian/news-7-1-contribs:
Add 7.1 contributors to NEWS file [skip ci]
2025-01-07 11:41:44 -07:00
Christian Kreibich
0ff3fbb7ce
Add 7.1 contributors to NEWS file [skip ci]
2025-01-07 10:38:51 -08:00
Tim Wojtulewicz
2ce71a75a7
Merge remote-tracking branch 'origin/topic/johanna/even-more-tls-const-updates'
...
* origin/topic/johanna/even-more-tls-const-updates:
More updates to the SSL consts from recent protocol additions
2025-01-07 10:05:26 -07:00
Johanna Amann
87d9ecb743
More updates to the SSL consts from recent protocol additions
2025-01-07 16:08:18 +00:00
zeek-bot
a819d7cf8a
Update doc submodule [nomail] [skip ci]
2025-01-07 00:12:57 +00:00
Tim Wojtulewicz
7f4a620db6
Merge remote-tracking branch 'origin/topic/johanna/more-post-quantum-curves'
...
* origin/topic/johanna/more-post-quantum-curves:
Update ssl consts with more post-quantum curves
2025-01-06 15:51:40 -07:00
Tim Wojtulewicz
c892594703
Merge remote-tracking branch 'origin/topic/timw/coverity-upload-large-builds'
...
* origin/topic/timw/coverity-upload-large-builds:
CI: Fix coverity workflow to support large uploads
CI: Remove use of wget from coverity workflow
CI: Upgrade coverity workflow to ubuntu24, add jq
2025-01-06 10:37:50 -07:00
Johanna Amann
c99f544e1c
Update ssl consts with more post-quantum curves
2025-01-06 16:54:29 +00:00
zeek-bot
01e6c2c53b
Update doc submodule [nomail] [skip ci]
2025-01-06 00:14:25 +00:00