zeek/testing/btest/scripts
Arne Welzel cf9fe91705 pop3: Prevent unbounded state growth
The cmds list may grow unbounded due to the POP3 analyzer being in
multiLine mode after seeing `AUTH` in a Redis connection, but never
a `.` terminator. This can easily be provoked by the Redis ping
command.

This adds two heuristics: 1) Forcefully process the oldest commands in
the cmds list and cap it at max_pending_commands. 2) Start raising
analyzer violations if the client has been using more than
max_unknown_client_commands commands (default 10).

Closes #3936
2024-09-18 19:05:39 +02:00
..
base pop3: Prevent unbounded state growth 2024-09-18 19:05:39 +02:00
policy Spicy SSL analyzer - address feedback 2024-09-11 11:30:16 +02:00
site Remove deprecated policy/tuning/default package 2024-08-07 11:58:21 -07:00
check-test-all-policy.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00