Commit graph

13262 commits

Author SHA1 Message Date
Vern Paxson
bc3902fa79 classes for managing script profiles 2022-05-03 11:11:46 -07:00
Vern Paxson
ca32cab6cb address some holes in script coverage 2022-05-03 10:47:07 -07:00
Vern Paxson
2bb4e696e1 fix for script coverage missing on-exit activity 2022-05-03 10:44:30 -07:00
Vern Paxson
fbe33d4ee9 memory management fixes for loggers 2022-05-03 10:42:25 -07:00
Vern Paxson
41aee03c17 make curr_CPU_time() broadly available rather than just isolated to ZAM 2022-05-03 10:38:32 -07:00
Tim Wojtulewicz
e28d561f79 Fixes Coverity issues reported from DNS_Mgr merge
Reports fixed: 1488295, 1488292, 1488281, 1488279
2022-05-03 09:49:47 -07:00
Johanna Amann
ded4c521c6 Merge remote-tracking branch 'origin/topic/johanna/update-ssl-consts-yet-again'
* origin/topic/johanna/update-ssl-consts-yet-again:
  Update X.509 and CT trust anchors
2022-05-03 17:10:12 +01:00
Johanna Amann
42bc6db359 Merge remote-tracking branch 'origin/master' into topic/johanna/bloomfilter 2022-05-03 16:43:36 +01:00
Vern Paxson
7fd94f82a8 simpler public calling interface for computing footprint 2022-05-02 15:08:37 -07:00
Vern Paxson
15123b6768 use stack-based set to prevent infinite recursion rather than a static one 2022-05-02 14:16:20 -07:00
Vern Paxson
f7581437d9 fix for sets containing recursive records 2022-05-02 13:19:58 -07:00
Vern Paxson
7a9c6c476e ZAM maintenance for recent changes and some newly exercised corner cases 2022-05-01 14:33:58 -07:00
Vern Paxson
f43a9f9bab change value_footprint() to val_footprint() to be more similar to val_size() 2022-04-29 09:03:56 -07:00
Vern Paxson
edf276520a make including count of container elements non-optional 2022-04-29 09:03:35 -07:00
Vern Paxson
b670046a69 btest for mutually-recursive case 2022-04-29 08:44:58 -07:00
Vern Paxson
5a1c33ed4a fix for tracking footprints of mutually-recursive records 2022-04-29 08:44:34 -07:00
Vern Paxson
cbb18207dc when printing a description of a type, use its name if available 2022-04-28 18:23:02 -07:00
zeek-bot
aa5a5b2136 Update doc submodule [nomail] [skip ci] 2022-04-29 00:39:17 +00:00
Vern Paxson
16c37034de added value_footprint() and global_container_footprints() BiFs 2022-04-28 16:42:14 -07:00
Christian Kreibich
2cde69d9d1 Update doc submodule [nomail] [skip ci] 2022-04-28 14:10:26 -07:00
Tim Wojtulewicz
03bcc3523b Merge remote-tracking branch 'origin/topic/neverlord/alm'
* origin/topic/neverlord/alm:
  Fix build on CentOS 7
  Initialize OpenSSL on startup
  Increase memory for CI jobs
  Fix formatting
  Avoid double-initialization of OpenSSL
  Canonify intel.log in read-file-dist-cluster test
  Fix formatting
  Port Zeek to latest Broker API
2022-04-28 19:52:41 +00:00
Dominik Charousset
6182acd198 Fix build on CentOS 7 2022-04-28 19:37:11 +02:00
Johanna Amann
a26a915a63 Update X.509 and CT trust anchors 2022-04-28 13:58:29 +01:00
Dominik Charousset
8786f5ab1d Initialize OpenSSL on startup 2022-04-28 08:35:36 +02:00
zeek-bot
02771168f0 Update doc submodule [nomail] [skip ci] 2022-04-28 00:44:36 +00:00
Dominik Charousset
fa27f896d5 Increase memory for CI jobs 2022-04-27 23:02:27 +02:00
Dominik Charousset
a8196cf4fb Fix formatting 2022-04-27 23:02:27 +02:00
Dominik Charousset
bb5d3c682a Avoid double-initialization of OpenSSL 2022-04-27 23:02:27 +02:00
Dominik Charousset
02608df99c Canonify intel.log in read-file-dist-cluster test 2022-04-27 23:02:27 +02:00
Dominik Charousset
16b2c9a52a Fix formatting 2022-04-27 23:02:27 +02:00
Dominik Charousset
4ea1a593a9 Port Zeek to latest Broker API 2022-04-27 23:02:27 +02:00
Tim Wojtulewicz
013070d1a9 Merge remote-tracking branch 'origin/topic/johanna/openssl-initialisation'
* origin/topic/johanna/openssl-initialisation:
  Disable OpenSSL initialization starting with 1.1.0
2022-04-27 21:00:45 +00:00
Tim Wojtulewicz
cc9a166c8b Fix minor formatting bug that pre-commit missed 2022-04-27 17:44:34 +00:00
Tim Wojtulewicz
5a3dee2562 Merge remote-tracking branch 'origin/topic/timw/async-dns-crash'
* origin/topic/timw/async-dns-crash:
  Wrap call to doctest's MESSAGE() method in Reporter in try/catch block
  Pre-initialize c-ares channel object. Fixes Coverity 1488318
  Ask c-ares for the next timeout instead of passing a fixed value
  Remove obsolete DNS_Mgr::asyncs_timeouts
2022-04-27 17:43:03 +00:00
Tim Wojtulewicz
84ea086167 Wrap call to doctest's MESSAGE() method in Reporter in try/catch block
Also check whether doctest is even enabled before trying to use it.
2022-04-27 17:42:15 +00:00
Tim Wojtulewicz
6f2bedaa56 Pre-initialize c-ares channel object. Fixes Coverity 1488318 2022-04-27 17:42:15 +00:00
Tim Wojtulewicz
6e74ffd9b0 Ask c-ares for the next timeout instead of passing a fixed value 2022-04-27 17:42:15 +00:00
Tim Wojtulewicz
75d07c021e Remove obsolete DNS_Mgr::asyncs_timeouts 2022-04-27 17:42:15 +00:00
Christian Kreibich
aced9c3e56 Merge branch 'topic/christian/management-consistency-fixes'
* topic/christian/management-consistency-fixes:
  Management framework: consistency fixes around event() vs Broker::publish()
2022-04-27 09:43:39 -07:00
Christian Kreibich
b23d292410 Management framework: consistency fixes around event() vs Broker::publish()
Switch to using Broker::publish() for any event we only send to a peered entity,
and not to drive local processing.

Also minor indentation cleanup.
2022-04-26 23:23:58 -07:00
Tim Wojtulewicz
4d24b9d9b8 Merge remote-tracking branch 'origin/topic/timw/cares-cmake-hates-me'
* origin/topic/timw/cares-cmake-hates-me:
  Rework FindCAres.cmake to not use ExternalProject, fixing OBS builds
2022-04-26 09:52:47 -07:00
Tim Wojtulewicz
c18d20fda1 Rework FindCAres.cmake to not use ExternalProject, fixing OBS builds 2022-04-25 15:21:48 -07:00
Tim Wojtulewicz
309c8e2f22 Forgot to merge cmake changes for c-ares 2022-04-25 11:55:23 -07:00
Johanna Amann
521539d4f9 Disable OpenSSL initialization starting with 1.1.0
Starting with OpenSSL 1.1.0, library initialization is no longer
required - and might even be harmful.

See https://wiki.openssl.org/index.php/Library_Initialization for
details.
2022-04-25 10:18:27 +01:00
Tim Wojtulewicz
66624d6840 Merge remote-tracking branch 'origin/topic/timw/1635-c-ares'
* origin/topic/timw/1635-c-ares:
  Add DNS fuzzing corpus from c-ares
  Update NEWS with information about DNS_Mgr changes
  Set larger UDP buffer to avoid TCP fallback if possible
  Add new features to IOSource::Manager, used by DNS_Mgr
  Add out_ptr, use for c-ares interface calls
  Use shared_ptrs for DNS_Mapping objects
  Similar map changes for async requests
  Store all mappings in a single map instead of split by type
  Don't split ipv4/ipv6 mappings into separate pointers
  Handle cancelled/destruction statuses in callback methods
  Pass dns_mgr down into the DNS_Request objects
  Move PTR request handling to ares_create_query()
  Add merging to DNS_Mgr::AddResult() to support both ipv4 and ipv6 responses simultaneously
  Rework DNS_Mgr API to be more consistent and to support more request types
  Replace nb_dns library with C-Ares
  Add unit testing for DNS_Mgr and related classes
  Update doc gen VM to ubuntu-latest, output cmake version during configure
  Use doctest macro to tie Reporter output to test cases
  Add const versions of dereference operators for DictEntry
  Add DNS fuzzer
2022-04-22 13:11:50 -07:00
Tim Wojtulewicz
f601878003 Add DNS fuzzing corpus from c-ares 2022-04-22 13:10:37 -07:00
Tim Wojtulewicz
53579a9383 Update NEWS with information about DNS_Mgr changes 2022-04-22 13:10:37 -07:00
Tim Wojtulewicz
ea7cea12c4 Set larger UDP buffer to avoid TCP fallback if possible
This commit sets the UDP buffer to a larger size, as well as adds
an EDNS block to the DNS request passing this size. This allows
DNS servers to return larger responses, and in turn allow c-ares
to avoid TCP fallback due to requests failing because of the lack
of buffer size.
2022-04-22 13:10:37 -07:00
Tim Wojtulewicz
f9f37b11c6 Add new features to IOSource::Manager, used by DNS_Mgr
- iosource_mgr can now track write events to file descriptors as well
  as read events. This adds an argument to both RegisterFd() and
  UnregisterFd() for setting the mode, defaulting to read.
- IOSources can now implement a ProcessFd() method that allows them to
  handle events to single file descriptors instead of of having to
  loop through/track sets of them at processing time.
2022-04-22 13:10:37 -07:00
Tim Wojtulewicz
c2bf602d94 Add out_ptr, use for c-ares interface calls 2022-04-22 13:10:37 -07:00