zeek/testing/btest/scripts/base
Arne Welzel 5659cf18f8 MIME: Cap nested MIME analysis depth to 100
OSS-Fuzz managed to produce a MIME multipart message construction with
thousands of nested entities (or that's what Zeek makes out of it anyhow).
Prevent such deep analysis by capping at a nesting depth of 100,
preventing unnecessary resource usage. A new weird named exceeded_mime_max_depth
is reported when this limit is reached.

This change reduces the runtime of the OSS-Fuzz reproducer from ~45 seconds
to ~2.5 seconds.

The test PCAP was produced from a Python script using the email package
and sending the rendered version via POST to a HTTP server.

Closes #208

(cherry picked from commit 4e5849fe82c6097df5d25cd1a74d69ab4fa50f46)
2024-01-19 08:22:19 -07:00
..
files Add extract_limit_includes_missing option for file extraction 2023-09-12 09:41:03 -07:00
frameworks Merge remote-tracking branch 'origin/topic/awelzel/mmdb-fix-and-tests' 2023-10-24 13:49:25 -07:00
misc Add scripts.base.misc.installation btest 2022-05-23 14:16:59 -07:00
protocols MIME: Cap nested MIME analysis depth to 100 2024-01-19 08:22:19 -07:00
utils Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00