Commit graph

9059 commits

Author SHA1 Message Date
Zeke Medley
f0798c4b49 Allow serialization of closures over Broker.
anonymous-functions, their closures, can now be sent over broker.
In order to send an anonymous function the receiver must have parsed
a definition of the functon, but it need not to have been evaluated.
See testing/btest/language/closure-sending.zeek for an example of how
this can be done.

This also sends their closures as well as the closures of regular
functions.
2019-07-12 10:31:40 -07:00
Johanna Amann
a26bb85ed5 Merge remote-tracking branch 'origin/topic/jsiwek/fix-uncaught-val-cloning-exceptions'
* origin/topic/jsiwek/fix-uncaught-val-cloning-exceptions:
  Fix uncaught exceptions from Val cloning failures
2019-07-12 08:56:51 -07:00
Jon Siwek
e5e84041b7 Fix uncaught exceptions from Val cloning failures 2019-07-11 16:55:39 -07:00
Tim Wojtulewicz
ec4913ac18 GH-157: Mark some attributes as not allowed for global variables 2019-07-11 13:34:39 -07:00
Johanna Amann
418ab0e33a Merge remote-tracking branch 'origin/topic/jsiwek/zeekenv-static-local-fix'
* origin/topic/jsiwek/zeekenv-static-local-fix:
  Fix potential thread safety issue with zeekenv util function
2019-07-11 13:30:50 -07:00
Jon Siwek
a2c7ed5ff6 Merge branch 'topic/hui/dnp3-fix' of https://github.com/hugolin615/zeek
* 'topic/hui/dnp3-fix' of https://github.com/hugolin615/zeek:
  fixed some bugs on dnp3 analyzer

Adjusted some inconsistent whitespace.

Fixes GH-421
2019-07-11 13:18:58 -07:00
Jon Siwek
cb292af84d Fix a sign-compare compiler warning 2019-07-11 12:14:27 -07:00
Jon Siwek
9a72a7117d Fix potential thread safety issue with zeekenv util function
Observed segfault accessing the local static std::map of zeekenv() from
a logging thread, but only in non-debug builds using Apple/Clang
compiler, not in a debug build or GCC.  Don't quite get this behavior
since static local variable initialization is supposed to be thread-safe
since C++11, but moving to a global static works and is "more efficient"
anyway since there's no longer any run-time overhead.
2019-07-11 11:41:50 -07:00
Johanna Amann
1f329ad541 Merge remote-tracking branch 'origin/topic/timw/150-to-json'
* origin/topic/timw/150-to-json:
  Update submodules for JSON work
  Update unit tests for JSON logger to match new output
  Modify JSON log writer to use the external JSON library
  Update unit test output to match json.zeek being deprecated and slight format changes to JSON output
  Add proper JSON serialization via C++, deprecate json.zeek
  Add new method for escaping UTF8 strings for JSON output
  Move do_sub method from zeek.bif to StringVal class method
  Move record_fields method from zeek.bif to Val class method
  Add ToStdString method for StringVal
2019-07-11 11:17:32 -07:00
hugo
7fecf9d667 fixed some bugs on dnp3 analyzer 2019-07-10 20:17:35 -07:00
Jon Siwek
31772b1b96 Remove unused option: chunked_io_buffer_soft_cap
Used to be a part of old serialization/communication system.
2019-07-10 18:41:16 -07:00
Jon Siwek
0d34a1c646 Merge remote-tracking branch 'origin/topic/timw/coverity-fixes'
* origin/topic/timw/coverity-fixes:
  Avoid a null dereference (Coverity-1402816)
  Avoid resource leaks (Coverity-1402818, Coverity-1402812)
  Avoid null dereference in broker (Coverity-1402824, Coverity-1402814)
  Remove unused variable from RecordVal (Coverity-1402820)
2019-07-09 18:28:35 -07:00
Jon Siwek
3ef5d522a2 Updating submodule(s).
[nomail]
2019-07-09 17:42:30 -07:00
Zeke Medley
e9bab80c2a Remove development paragraph. 2019-07-09 11:24:49 -07:00
Tim Wojtulewicz
1af2640f4b Avoid a null dereference (Coverity-1402816) 2019-07-08 16:22:50 -07:00
Tim Wojtulewicz
69023a0c75 Avoid resource leaks (Coverity-1402818, Coverity-1402812) 2019-07-08 16:22:50 -07:00
Tim Wojtulewicz
4db6d00372 Avoid null dereference in broker (Coverity-1402824, Coverity-1402814) 2019-07-08 16:22:50 -07:00
Tim Wojtulewicz
e390244442 Remove unused variable from RecordVal (Coverity-1402820) 2019-07-08 15:18:13 -07:00
Jon Siwek
002109973d Improve stability of a unit test 2019-07-03 13:04:57 -07:00
Zeke Medley
aa25a97f36 Update README. 2019-07-03 12:05:22 -07:00
Jon Siwek
723793aa9e Merge remote-tracking branch 'origin/topic/timw/clang-tidy'
* origin/topic/timw/clang-tidy:
  Add clang-tidy rule to CMake including a base configuration
2019-07-03 11:51:10 -07:00
Jon Siwek
c03ef308c9 Improve Zeekygen output for long attribute expressions
Long inline-literals often don't wrap pleasantly in HTML renders and
we had a few &default or &deprecated attributes whose expressions
evaluate to a value long enough to warrant different formatting or
even truncation.
2019-07-03 11:09:10 -07:00
Jon Siwek
c5c688054c Merge remote-tracking branch 'origin/topic/johanna/gh-446-rfb'
* origin/topic/johanna/gh-446-rfb:
  Deprecate rfb_event.
2019-07-03 09:36:12 -07:00
Johanna Amann
c0e3b8c66f Deprecate rfb_event.
Fixes GH-446
2019-07-03 02:15:34 -07:00
Johanna Amann
e382369091 Merge branch 'master' of https://github.com/sfinlon/zeek
* 'master' of https://github.com/sfinlon/zeek:
  Fix CIF integration and add logging options to intel.log and added comments to code
2019-07-03 01:58:04 -07:00
Robin Sommer
57ee6ecf48 Updating submodule. 2019-07-03 02:53:30 +00:00
Tim Wojtulewicz
ba02b03f7e Update submodules for JSON work 2019-07-02 13:16:23 -07:00
Tim Wojtulewicz
d732fb4d4b Update unit tests for JSON logger to match new output 2019-07-02 13:14:52 -07:00
Tim Wojtulewicz
9b76e8faf4 Modify JSON log writer to use the external JSON library 2019-07-02 13:14:52 -07:00
Tim Wojtulewicz
d27c846ec5 Update unit test output to match json.zeek being deprecated and slight format changes to JSON output 2019-07-02 13:14:52 -07:00
Tim Wojtulewicz
33a7927704 Add proper JSON serialization via C++, deprecate json.zeek 2019-07-02 12:52:26 -07:00
Tim Wojtulewicz
385de9b0e7 Add new method for escaping UTF8 strings for JSON output 2019-07-02 12:52:26 -07:00
Tim Wojtulewicz
2cb87c3309 Move do_sub method from zeek.bif to StringVal class method 2019-07-02 12:52:26 -07:00
Tim Wojtulewicz
528bad72de Move record_fields method from zeek.bif to Val class method 2019-07-02 12:52:25 -07:00
Tim Wojtulewicz
dffefe0683 Add ToStdString method for StringVal 2019-07-02 12:52:25 -07:00
sfinlon
fe46035366 Fix CIF integration and add logging options to intel.log and added comments to code 2019-07-01 23:54:24 -04:00
Zeke Medley
f18464f1f8 remove some leftover debug output 2019-07-01 14:26:02 -07:00
Zeke Medley
6e84a5eb8e Merge branch 'master' of https://github.com/zeek/zeek into topic/zeke/closures 2019-07-01 13:43:48 -07:00
Zeke Medley
409f27955b Call parent constructor from LambdaExpr. 2019-07-01 13:36:28 -07:00
Jon Siwek
23a1815e29 Updating submodule(s).
[nomail]
2019-07-01 12:17:53 -07:00
Tim Wojtulewicz
20c320d62b Add clang-tidy rule to CMake including a base configuration 2019-07-01 12:09:55 -07:00
Jon Siwek
962988e0b4 Updating submodule(s).
[nomail]
2019-07-01 10:40:48 -07:00
Johanna Amann
3cdda7647f Merge remote-tracking branch 'origin/topic/jsiwek/gh-443-fix-timestamp-0-logs'
* origin/topic/jsiwek/gh-443-fix-timestamp-0-logs:
  GH-443: fix uses of timestamp 0 in cluster diagnostic logs
2019-07-01 01:29:41 -07:00
Johanna Amann
1ebd3adf20 Merge remote-tracking branch 'origin/topic/jsiwek/gh-243-wrap-up-deprecation-removal'
* origin/topic/jsiwek/gh-243-wrap-up-deprecation-removal:
  Improve deprecation warning messages
  Remove deprecated DNS events
  Remove BackDoor analyzer
  Remove InterConn analyzer
  Remove deprecated/unused irc_servers option
  Remove deprecated print_hook event
  Remove dead code: dump_used_event_handlers
  Remove unused software_version_found events
  Remove deprecated open_log_file and log_file_name functions
  Remove deprecated/unused "packet" type
  Un-deprecate anonymizer BIFs
  Un-deprecate file rotation functions
2019-07-01 01:14:29 -07:00
Johanna Amann
8d5b7007ec Merge remote-tracking branch 'origin/topic/jsiwek/gh-380-bypass-caf-spinlock-problems'
* origin/topic/jsiwek/gh-380-bypass-caf-spinlock-problems:
  Switch default CAF scheduler policy to work sharing
2019-07-01 00:53:07 -07:00
Johanna Amann
85cd38a3e1 Update 3rdparty submodule.
This updates sqlite to 3.28.0.

Fixes GH-448

 [nomail]
2019-07-01 00:47:08 -07:00
Jon Siwek
5b64c35185 Switch default CAF scheduler policy to work sharing
It may generally be better for our default use-case, as workers may
save a few percent cpu utilization as this policy does not have to
use any polling like the stealing policy does.

This also helps avoid a potential issue with the implementation of
spinlocks used in the work-stealing policy in current CAF versions,
where there's some conditions where lock contention causes a thread
to spin for long periods without relinquishing the cpu to others.
2019-06-28 16:34:33 -07:00
Zeke Medley
f47390f66a Merge branch 'master' of https://github.com/zeek/zeek into topic/zeke/closures 2019-06-28 16:22:18 -07:00
Seth Hall
9795782ecb
Merge pull request #324 from zeek/topic/jsiwek/gh-320
Improve RFB (VNC) protocol parsing
2019-06-28 17:27:16 -04:00
Jon Siwek
b6c4aa7d2e Merge branch 'master' of https://github.com/spacepatcher/zeek
* 'master' of https://github.com/spacepatcher/zeek:
  Add Windows Minidump file signature
2019-06-28 12:11:17 -07:00