No description
Find a file
Jon Siwek 392b99b2fa Fix construction of ip6_ah (Authentication Header) record values.
Authentication Headers with a Payload Len field set to zero would cause
a crash due to invalid memory allocation because the previous code
assumed Payload Len would always be great enough to contain all
mandatory fields of the header.  This changes it so the length of
the header is explicitly checked before attempting to extract fields
located past the minimum length (8 bytes) of an Authentication Header.

Crashes due to this are only possible when handling script-layer events
ipv6_ext_headers, new_packet, esp_packet, or teredo_*.  Or also when
implementing one of the discarder_check_* family of functions.
Otherwise, Bro correctly parses past such a header.
2012-09-18 16:52:12 -05:00
aux Updating submodule(s). 2012-08-24 15:12:09 -07:00
cmake@2a72c5e08e Merging in latest changes from Bro master. 2012-06-15 10:48:22 -04:00
doc Update compile/dependency docs for OS X. 2012-09-14 10:28:23 -05:00
pkg Adjusting Mac binary packaging script. 2012-09-13 16:47:40 -05:00
scripts Fix construction of ip6_ah (Authentication Header) record values. 2012-09-18 16:52:12 -05:00
src Fix construction of ip6_ah (Authentication Header) record values. 2012-09-18 16:52:12 -05:00
testing Fix construction of ip6_ah (Authentication Header) record values. 2012-09-18 16:52:12 -05:00
.gitignore Ignore tmp dir. 2011-10-25 19:59:25 -07:00
.gitmodules Update to use cmake submodule 2011-09-20 10:15:09 -05:00
bro-path-dev.in Fixes for script auto-documentation. 2011-08-08 19:50:45 -05:00
CHANGES Merge remote-tracking branch 'origin/fastpath' 2012-09-06 23:24:13 -07:00
CMakeLists.txt Remove automatic use of gperftools on non-Linux systems. 2012-08-28 13:11:12 -05:00
config.h.in Merge remote-tracking branch 'origin/master' into topic/seth/elasticsearch 2012-07-06 12:01:16 -04:00
configure Remove automatic use of gperftools on non-Linux systems. 2012-08-28 13:11:12 -05:00
COPYING A set of script-reference polishing. 2012-01-09 18:04:34 -08:00
DocSourcesList.cmake Adding target update-doc-sources to top-level Makefile that runs 2012-05-17 12:41:10 -07:00
INSTALL Fix typos and improve INSTALL document 2012-05-14 18:34:25 -05:00
Makefile Moving make target update-doc-sources from top-level Makefile to btest 2012-07-02 16:14:24 -07:00
NEWS Starting 2.2 release notes. 2012-09-06 23:05:57 -07:00
README corrected some minor typos 2012-01-11 13:02:12 -06:00
VERSION Merge remote-tracking branch 'origin/fastpath' 2012-09-06 23:24:13 -07:00

============================
Bro Network Security Monitor
============================

Bro is a powerful framework for network analysis and security
monitoring. Please see the INSTALL file for installation instructions
and pointers for getting started. NEWS contains release notes for the
current version, and CHANGES has the complete history of changes.
Please see COPYING for licensing information.

For more documentation, research publications, and community contact
information, please see Bro's home page:

    http://www.bro-ids.org

On behalf of the Bro Development Team,

Vern Paxson & Robin Sommer,
International Computer Science Institute &
Lawrence Berkeley National Laboratory
vern@icir.org / robin@icir.org