Arne Welzel b57a854633 MIME: Cap nested MIME analysis depth to 100 ... OSS-Fuzz managed to produce a MIME multipart message construction with thousands of nested entities (or that's what Zeek makes out of it anyhow). Prevent such deep analysis by capping at a nesting depth of 100, preventing unnecessary resource usage. A new weird named exceeded_mime_max_depth is reported when this limit is reached. This change reduces the runtime of the OSS-Fuzz reproducer from ~45 seconds to ~2.5 seconds. The test PCAP was produced from a Python script using the email package and sending the rendered version via POST to a HTTP server. (cherry picked from commit 997c017df937ea47d999d9724e247c3d0e38e509)		2024-01-19 08:22:50 -07:00
..
base	MIME: Cap nested MIME analysis depth to 100	2024-01-19 08:22:50 -07:00
policy	btest/dump-events: Run in bare mode, load conn and smtp scripts only	2023-10-09 12:20:10 +02:00
site	Start of 6.1.0 development	2023-05-31 12:10:35 +02:00
check-test-all-policy.zeek	GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.	2019-05-01 21:43:45 +00:00