Tim Wojtulewicz
dea44003a1
Avoid some string copies in IRC analyzer
2025-07-23 15:17:53 -07:00
Tim Wojtulewicz
a1d121e5aa
Use std::string/string_view versions of starts_with/ends_with where appropriate
...
The util:: versions of these methods remain as a thin wrapper around them so
they can be used with const char* arguments. Otherwise callers have to manually
make string_view objects from the input.
s Please enter the commit message for your changes. Lines starting
2025-07-17 09:08:54 -07:00
Tim Wojtulewicz
f3588657bf
Fix clang-tidy modernize-loop-convert findings
2025-06-06 11:43:06 -07:00
Tim Wojtulewicz
c609d5c90a
Fix clang-tidy performance-inefficient-string-concatenation warnings
2025-05-30 08:12:29 -07:00
Tim Wojtulewicz
dbecfb5a2a
Fix clang-tidy bugprone-branch-clone warnings
2025-05-27 11:58:27 -07:00
Tim Wojtulewicz
79301c4691
Remove unnecessary #includes in analyzer/packet analyzer/file analyzer source files
2025-05-19 10:25:05 -07:00
Tim Wojtulewicz
34ee136a3c
More std::move changes based on Coverity findings
2025-04-08 11:01:21 -07:00
Johanna Amann
e411153f0d
IRC analyzer - make protocol confirmation more robust.
...
I noticed that the IRC analyzer always confirms connections, pretty much
without regard what happened in it. This commit changes the logic of the
IRC analyzer to check for valid commands before confirming.
2025-01-30 16:59:40 +00:00
Arne Welzel
9619cd0f17
Add missing copyright line to headers and cc files
2024-12-06 12:50:58 +01:00
Benjamin Bannier
f5a76c1aed
Reformat Zeek in Spicy style
...
This largely copies over Spicy's `.clang-format` configuration file. The
one place where we deviate is header include order since Zeek depends on
headers being included in a certain order.
2023-10-30 09:40:55 +01:00
Arne Welzel
7a043e5e8f
all: Fix typos identified by typos pre-commit hook
2023-06-13 17:57:32 +02:00
Arne Welzel
1b69b4d26f
Merge branch 'topic/amazingpp/irc-fuid-missing' of github.com:AmazingPP/zeek
...
* 'topic/amazingpp/irc-fuid-missing' of github.com:AmazingPP/zeek:
Add irc_dcc_send_ack event and fix missing fields
I've moved IRC_Data back into the zeek::analyzer::file namespace, but
we did move the declaration from protocol/file/File.h to protocol/irc/IRC.h.
But, if someone actually customized IRC_Data and didn't include protocol/irc/IRC.h
for other reasons, I'll be surprised (and also just suggest to update the include).
2023-04-24 18:22:50 +02:00
Fupeng Zhao
161ffb4192
Add irc_dcc_send_ack event and fix missing fields
2023-04-24 07:29:51 +00:00
Tim Wojtulewicz
5bfd84a903
Fix/simplify some if statement comparisons
2023-01-27 13:03:19 -07:00
Arne Welzel
6b6bd7e9f6
irc: Check parts.size() before removing the nick
...
...also, don't remove the nick twice.
2022-09-19 12:41:24 -07:00
Tim Wojtulewicz
612212568a
Add analyzer_confirmation and analyzer_violation events
2021-11-23 19:36:50 -07:00
Tim Wojtulewicz
4423574d26
clang-format: Set IndentCaseBlocks to false
2021-09-27 10:49:48 -07:00
Tim Wojtulewicz
30aa4621c5
Minor fixes for build problems after reformatting
2021-09-16 15:36:09 -07:00
Tim Wojtulewicz
b2f171ec69
Reformat the world
2021-09-16 15:35:39 -07:00
Vern Paxson
62bab66114
migration to using new differentiated methods for setting record fields
2021-02-25 16:59:26 -08:00
Jon Siwek
c44cbe1feb
Prefix #includes of .bif.h files with zeek/
...
This enables locating the headers within the install-tree using the
dirs provided by `zeek-config --include_dir`.
To enable locating these headers within the build-tree, this change also
creates a 'build/src/include/zeek -> ..' symlink.
2021-02-02 19:15:05 -08:00
Tim Wojtulewicz
5589484f26
Fix includes of bif.h and _pac.h files to use full paths inside build directory
2020-11-12 12:15:26 -07:00
Tim Wojtulewicz
96d9115360
GH-1079: Use full paths starting with zeek/ when including files
2020-11-12 12:15:26 -07:00
Tim Wojtulewicz
70c2397f69
Plugins: Clean up explicit uses of namespaces in places where they're not necessary.
...
This commit covers all of the plugin classes.
2020-08-24 12:07:03 -07:00
Tim Wojtulewicz
715ca6549b
Move the remainder of the analyzers to zeek namespaces
2020-08-20 15:55:17 -07:00
Tim Wojtulewicz
914ffcadae
Move arp, tcp, udp, pia, and stepping stone analyzers
2020-08-20 15:55:17 -07:00
Tim Wojtulewicz
7fefdd97af
Move Conn and related types to zeek namespace
2020-07-31 16:25:54 -04:00
Tim Wojtulewicz
9400b863ea
Move all base analyzer classes to zeek::analyzer namespace
2020-07-31 16:21:46 -04:00
Tim Wojtulewicz
1248411a2f
Use properly-sized loop variables or convert to ranged-for (bugprone-too-small-loop-variable)
2020-07-28 12:36:40 -07:00
Tim Wojtulewicz
86fdf0eaa9
Mark global val_mgr as deprecated and fix uses of it to use namespaced version
2020-07-02 16:15:00 -07:00
Tim Wojtulewicz
64332ca22c
Move all Val classes to the zeek namespaces
2020-06-30 20:48:09 -07:00
Tim Wojtulewicz
9364e6a5b7
Move IntrusivePtr and utility methods to the zeek namespace
2020-06-30 20:19:12 -07:00
Tim Wojtulewicz
ed13972924
Move Type types to zeek namespace
2020-06-09 17:20:45 -07:00
Jon Siwek
7e89c8f0df
Deprecate TableVal::Assign methods with Val*, add IntrusivePtr overloads
2020-05-20 12:46:51 -07:00
Jon Siwek
4debad8caf
Switch zeek: 🆔 :lookup to zeek: 🆔 :find
...
For parity with Scope since it now uses Find instead of Lookup
2020-05-14 18:00:18 -07:00
Jon Siwek
a5762c12cc
Move various elements into ID.h and zeek::id namespace
...
* A handful of generic/useful/common global type pointers that used
to be in NetVar.h
* Lookup functions that used to be Var.h
2020-05-14 17:24:20 -07:00
Jon Siwek
9210d443d3
Trim the list of "global type pointers" from NetVar.h further
...
Most of them are deprecated now, with usage sites now doing the lookup
themselves.
2020-05-14 17:23:20 -07:00
Jon Siwek
c0986f0739
Deprecate global type pointers in NetVar.h
...
There's analogous IntrusivePtrs in zeek::vars
2020-05-14 17:23:20 -07:00
Jon Siwek
2a63e4a4a2
Deprecate BuildConnVal() methods and update usages to ConnVal()
...
The later being a new method that returns IntrusivePtr
2020-04-16 17:00:01 -07:00
Jon Siwek
de8761f761
Update deprecated ValManager::GetEmptyString usages
2020-04-16 16:46:38 -07:00
Jon Siwek
93f4c5871b
Update deprecated ValManager::GetCount usages
2020-04-16 16:46:36 -07:00
Jon Siwek
0ddac4abcf
Update deprecated ValManager::GetInt usages
2020-04-16 16:44:35 -07:00
Jon Siwek
d9edd855da
Update deprecated ValManager::GetBool usages
2020-04-16 16:44:33 -07:00
Johanna Amann
876c803d75
Merge remote-tracking branch 'origin/topic/timw/776-using-statements'
...
* origin/topic/timw/776-using-statements:
Remove 'using namespace std' from SerialTypes.h
Remove other using statements from headers
GH-776: Remove using statements added by PR 770
Includes small fixes in files that changed since the merge request was
made.
Also includes a few small indentation fixes.
2020-04-09 13:31:07 -07:00
Tim Wojtulewicz
6897912909
analyzer: Replace nulls with nullptr
2020-04-07 16:08:34 -07:00
Tim Wojtulewicz
d53c1454c0
Remove 'using namespace std' from SerialTypes.h
...
This unfortunately cuases a ton of flow-down changes because a lot of other
code was depending on that definition existing. This has a fairly large chance
to break builds of external plugins, considering how many internal ones it broke.
2020-04-07 15:59:59 -07:00
Jon Siwek
5e496e43b7
Deprecate Analyzer::ConnectionEvent()
...
And update usages to Analyzer::EnqueueConnEvent()
2020-03-25 18:40:49 -07:00
Max Kellermann
674e141a15
Val: use class IntrusivePtr in class TableVal
2020-03-06 09:06:38 +01:00
Max Kellermann
0a6ddfb6b5
Val: add TableVal::Assign() overload with IntrusivePtr
...
Prepare the transition to IntrusivePtr for various callers.
2020-03-06 09:06:38 +01:00
Tim Wojtulewicz
5a237d3a3f
Use const-references in lots of places (preformance-unnecessary-value-param)
2020-02-11 14:11:18 -08:00