detect-engine-buffer.h File Reference

Go to the source code of this file.

Typedefs
typedef struct DetectEngineCtx_	DetectEngineCtx
typedef struct DetectEngineThreadCtx_	DetectEngineThreadCtx
typedef struct Signature_	Signature
typedef struct SigMatch_	SigMatch

Functions
int WARN_UNUSED	SCDetectBufferSetActiveList (DetectEngineCtx *de_ctx, Signature *s, const int list)
int	DetectBufferGetActiveList (DetectEngineCtx *de_ctx, Signature *s)
SigMatch *	DetectBufferGetFirstSigMatch (const Signature *s, const uint32_t buf_id)
SigMatch *	DetectBufferGetLastSigMatch (const Signature *s, const uint32_t buf_id)
int	SCDetectSignatureAddTransform (Signature *s, int transform, void *options)
int	SCDetectRegisterThreadCtxGlobalFuncs (const char *name, void *(*InitFunc)(void *), void *data, void(*FreeFunc)(void *))
	Register Thread keyword context Funcs (Global) More...
void *	SCDetectThreadCtxGetGlobalKeywordThreadCtx (DetectEngineThreadCtx *det_ctx, int id)
	Retrieve thread local keyword ctx by id. More...

Detailed Description

Author

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Definition in file detect-engine-buffer.h.

Typedef Documentation

DetectEngineCtx

typedef struct DetectEngineCtx_ DetectEngineCtx

Definition at line 1 of file detect-engine-buffer.h.

DetectEngineThreadCtx

typedef struct DetectEngineThreadCtx_ DetectEngineThreadCtx

Definition at line 1 of file detect-engine-buffer.h.

SigMatch

typedef struct SigMatch_ SigMatch

Definition at line 1 of file detect-engine-buffer.h.

Signature

typedef struct Signature_ Signature

Definition at line 1 of file detect-engine-buffer.h.

Function Documentation

DetectBufferGetActiveList()

int DetectBufferGetActiveList	(	DetectEngineCtx *	de_ctx,
		Signature *	s
	)

Definition at line 109 of file detect-engine-buffer.c.

References SignatureInitData_::buffer_index, SignatureInitData_::buffers, BUG_ON, DetectEngineTransforms::cnt, SignatureInitData_::curbuf, de_ctx, DEBUG_VALIDATE_BUG_ON, DETECT_SM_LIST_DYNAMIC_START, DETECT_SM_LIST_NOTSET, DetectEngineBufferTypeGetByIdTransforms(), DetectEngineBufferTypeSupportsMultiInstanceGetById(), SignatureInitDataBuffer_::head, SignatureInitDataBuffer_::id, Signature_::init_data, SignatureInitData_::list, SignatureInitData_::list_set, SignatureInitDataBuffer_::multi_capable, SCLogDebug, SCLogError, SCReturnInt, SignatureInitDataBufferCheckExpand(), DetectEngineTransforms::transforms, and SignatureInitData_::transforms.

Referenced by DetectContentSetup().

Here is the call graph for this function:

Here is the caller graph for this function:

DetectBufferGetFirstSigMatch()

SigMatch* DetectBufferGetFirstSigMatch	(	const Signature *	s,
		const uint32_t	buf_id
	)

Definition at line 157 of file detect-engine-buffer.c.

References SignatureInitData_::buffer_index, SignatureInitData_::buffers, SignatureInitDataBuffer_::head, SignatureInitDataBuffer_::id, and Signature_::init_data.

DetectBufferGetLastSigMatch()

SigMatch* DetectBufferGetLastSigMatch	(	const Signature *	s,
		const uint32_t	buf_id
	)

Definition at line 167 of file detect-engine-buffer.c.

References SignatureInitData_::buffer_index, SignatureInitData_::buffers, SignatureInitDataBuffer_::id, Signature_::init_data, and SignatureInitDataBuffer_::tail.

SCDetectBufferSetActiveList()

int WARN_UNUSED SCDetectBufferSetActiveList	(	DetectEngineCtx *	de_ctx,
		Signature *	s,
		const int	list
	)

Definition at line 29 of file detect-engine-buffer.c.

SCDetectRegisterThreadCtxGlobalFuncs()

int SCDetectRegisterThreadCtxGlobalFuncs	(	const char *	name,
		void *(*)(void *)	InitFunc,
		void *	data,
		void(*)(void *)	FreeFunc
	)

Register Thread keyword context Funcs (Global)

IDs stay static over reloads and between tenants

Parameters

name	keyword name for error printing
InitFunc	function ptr
FreeFunc	function ptr

Return values

id	for retrieval of ctx at runtime
-1	on error

Definition at line 4013 of file detect-engine.c.

References BUG_ON.

SCDetectSignatureAddTransform()

int SCDetectSignatureAddTransform	(	Signature *	s,
		int	transform,
		void *	options
	)

Definition at line 178 of file detect-engine-buffer.c.

References DetectEngineTransforms::cnt, DETECT_TRANSFORMS_MAX, Signature_::init_data, SignatureInitData_::list, SignatureInitData_::list_set, TransformData_::options, SCLogDebug, SCLogError, SCReturnInt, Signature_::sig_str, TransformData_::transform, DetectEngineTransforms::transforms, and SignatureInitData_::transforms.

SCDetectThreadCtxGetGlobalKeywordThreadCtx()

void* SCDetectThreadCtxGetGlobalKeywordThreadCtx	(	DetectEngineThreadCtx *	det_ctx,
		int	id
	)

Retrieve thread local keyword ctx by id.

Parameters

det_ctx	detection engine thread ctx to retrieve the ctx from
id	id of the ctx returned by DetectRegisterThreadCtxInitFunc at keyword init.

Return values

ctx	or NULL on error

Definition at line 4057 of file detect-engine.c.

References DetectEngineThreadCtx_::global_keyword_ctxs_array, and DetectEngineThreadCtx_::global_keyword_ctxs_size.

Referenced by HttpHeaderGetBufferSpace().

Here is the caller graph for this function: