Skip to content

Commit

Permalink
detect/engine/flowint: apply clang format changes
Browse files Browse the repository at this point in the history
Related to
Task #7426
  • Loading branch information
jufajardini authored and victorjulien committed Dec 5, 2024
1 parent 6e4a501 commit a9b36d8
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 13 deletions.
13 changes: 5 additions & 8 deletions src/detect-engine-sigorder.c
Original file line number Diff line number Diff line change
Expand Up @@ -229,14 +229,11 @@ static inline int SCSigGetFlowintType(Signature *sig)
while (sm != NULL) {
if (sm->type == DETECT_FLOWINT) {
fi = (DetectFlowintData *)sm->ctx;
if (fi->modifier == FLOWINT_MODIFIER_LT ||
fi->modifier == FLOWINT_MODIFIER_LE ||
fi->modifier == FLOWINT_MODIFIER_EQ ||
fi->modifier == FLOWINT_MODIFIER_NE ||
fi->modifier == FLOWINT_MODIFIER_GE ||
fi->modifier == FLOWINT_MODIFIER_GT ||
fi->modifier == FLOWINT_MODIFIER_ISNOTSET ||
fi->modifier == FLOWINT_MODIFIER_ISSET) {
if (fi->modifier == FLOWINT_MODIFIER_LT || fi->modifier == FLOWINT_MODIFIER_LE ||
fi->modifier == FLOWINT_MODIFIER_EQ || fi->modifier == FLOWINT_MODIFIER_NE ||
fi->modifier == FLOWINT_MODIFIER_GE || fi->modifier == FLOWINT_MODIFIER_GT ||
fi->modifier == FLOWINT_MODIFIER_ISNOTSET ||
fi->modifier == FLOWINT_MODIFIER_ISSET) {
read++;
} else {
#ifdef DEBUG
Expand Down
14 changes: 9 additions & 5 deletions src/detect-flowint.c
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,10 @@
#include "util-profiling.h"

/* name modifiers value */
#define PARSE_REGEX "^\\s*([a-zA-Z][\\w\\d_./]+)\\s*,\\s*([+=-]{1}|==|!=|<|<=|>|>=|isset|notset|isnotset)\\s*,?\\s*([a-zA-Z][\\w\\d]+|[\\d]{1,10})?\\s*$"
#define PARSE_REGEX \
"^\\s*([a-zA-Z][\\w\\d_./" \
"]+)\\s*,\\s*([+=-]{1}|==|!=|<|<=|>|>=|isset|notset|isnotset)\\s*,?\\s*([a-zA-Z][\\w\\d]+|[" \
"\\d]{1,10})?\\s*$"
/* Varnames must begin with a letter */

static DetectParseRegex parse_regex;
Expand Down Expand Up @@ -998,9 +1001,8 @@ static int DetectFlowintTestParseIsset10(void)
if (sfd) DetectFlowintFree(NULL, sfd);
sfd = DetectFlowintParse(de_ctx, "myvar, notset");
DetectFlowintPrintData(sfd);
if (sfd != NULL && !strcmp(sfd->name, "myvar")
&& sfd->targettype == FLOWINT_TARGET_SELF
&& sfd->modifier == FLOWINT_MODIFIER_ISNOTSET) {
if (sfd != NULL && !strcmp(sfd->name, "myvar") && sfd->targettype == FLOWINT_TARGET_SELF &&
sfd->modifier == FLOWINT_MODIFIER_ISNOTSET) {

result &= 1;
} else {
Expand Down Expand Up @@ -1189,7 +1191,9 @@ static int DetectFlowintTestPacket02Real(void)
de_ctx->flags |= DE_QUIET;

const char *sigs[5];
sigs[0] = "alert tcp any any -> any any (msg:\"Setting a flowint counter\"; content:\"GET\"; flowint:myvar,notset; flowint:maxvar,isnotset; flowint: myvar,=,1; flowint: maxvar,=,6; sid:101;)";
sigs[0] = "alert tcp any any -> any any (msg:\"Setting a flowint counter\"; content:\"GET\"; "
"flowint:myvar,notset; flowint:maxvar,isnotset; flowint: myvar,=,1; flowint: "
"maxvar,=,6; sid:101;)";
sigs[1] = "alert tcp any any -> any any (msg:\"Adding to flowint counter\"; content:\"Unauthorized\"; flowint:myvar,isset; flowint: myvar,+,2; sid:102;)";
sigs[2] = "alert tcp any any -> any any (msg:\"if the flowint counter is 3 create a new counter\"; content:\"Unauthorized\"; flowint: myvar, isset; flowint: myvar,==,3; flowint:cntpackets,notset; flowint: cntpackets, =, 0; sid:103;)";
sigs[3] = "alert tcp any any -> any any (msg:\"and count the rest of the packets received without generating alerts!!!\"; flowint: cntpackets,isset; flowint: cntpackets, +, 1; noalert;sid:104;)";
Expand Down

0 comments on commit a9b36d8

Please sign in to comment.