Arne Welzel 3724c14ad2 http/smtp: Fix wrong character class usage ... A call to `extract_filename_from_content_disposition()` is only efficient if the string is guaranteed to contain the pattern that is removed by `sub()`. Due to missing brackets around the `[:blank:]` character class, an overly long string (756kb) ending in "Type:dtanameaa=" matched the wrong pattern causing `sub()` to exhibit quadratic runtime. Besides that, we may have potentially extracted wrong information from a crafted header value. (cherry picked from commit 6d385b1ca724a10444865e4ad38a58b31a2e2288)		2023-09-12 09:40:38 -07:00
..
base	http/smtp: Fix wrong character class usage	2023-09-12 09:40:38 -07:00
policy	Merge remote-tracking branch 'origin/topic/jazoff/gh-3268t '	2023-09-08 11:09:56 -07:00
site	Merge remote-tracking branch 'origin/topic/awelzel/no-metrics-centralization'	2023-06-21 15:42:10 -07:00
spicy	Simplify code generated for Spicy analyzer port ranges.	2023-05-29 12:20:44 +02:00
zeekygen	Merge remote-tracking branch 'origin/topic/awelzel/cluster-at-if-removal'	2023-06-12 11:23:01 -07:00
CMakeLists.txt	Use the same rules as cmake submodule to reformat Zeek	2023-05-09 08:31:43 -07:00
test-all-policy.zeek	Merge remote-tracking branch 'origin/topic/awelzel/no-metrics-centralization'	2023-06-21 15:42:10 -07:00