suricata
util-file-swf-decompression.h File Reference
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Macros

#define MIN_SWF_LEN   2920
 
#define MAX_SWF_DECOMPRESSED_LEN   50000000
 
#define SWF_DECOMPRESS_INITIAL_BUFFER_LEN   4096
 

Functions

uint8_t FileGetSwfVersion (const uint8_t *buffer, const uint32_t buffer_len)
 
int FileSwfZlibDecompression (DetectEngineThreadCtx *det_ctx, const uint8_t *compressed_data, uint32_t compressed_data_len, InspectionBuffer *out_buffer, uint32_t decompressed_data_limit, uint32_t *decompressed_data_produced)
 
int FileSwfLzmaDecompression (DetectEngineThreadCtx *det_ctx, const uint8_t *compressed_data, uint32_t compressed_data_len, InspectionBuffer *out_buffer, uint32_t decompressed_data_limit, uint32_t *decompressed_data_produced)
 

Detailed Description

Macro Definition Documentation

◆ MAX_SWF_DECOMPRESSED_LEN

#define MAX_SWF_DECOMPRESSED_LEN   50000000

Definition at line 34 of file util-file-swf-decompression.h.

◆ MIN_SWF_LEN

#define MIN_SWF_LEN   2920

Definition at line 32 of file util-file-swf-decompression.h.

◆ SWF_DECOMPRESS_INITIAL_BUFFER_LEN

#define SWF_DECOMPRESS_INITIAL_BUFFER_LEN   4096

Definition at line 36 of file util-file-swf-decompression.h.

Function Documentation

◆ FileGetSwfVersion()

uint8_t FileGetSwfVersion ( const uint8_t *  buffer,
const uint32_t  buffer_len 
)

Definition at line 40 of file util-file-swf-decompression.c.

Referenced by FileSwfDecompression().

Here is the caller graph for this function:

◆ FileSwfLzmaDecompression()

int FileSwfLzmaDecompression ( DetectEngineThreadCtx det_ctx,
const uint8_t *  compressed_data,
uint32_t  compressed_data_len,
InspectionBuffer out_buffer,
uint32_t  decompressed_data_limit,
uint32_t *  decompressed_data_produced 
)

Definition at line 159 of file util-file-swf-decompression.c.

References SWF_HEADER_LEN.

Referenced by FileSwfDecompression().

Here is the caller graph for this function:

◆ FileSwfZlibDecompression()

int FileSwfZlibDecompression ( DetectEngineThreadCtx det_ctx,
const uint8_t *  compressed_data,
uint32_t  compressed_data_len,
InspectionBuffer out_buffer,
uint32_t  decompressed_data_limit,
uint32_t *  decompressed_data_produced 
)

Definition at line 85 of file util-file-swf-decompression.c.

References DetectEngineSetEvent(), and FILE_DECODER_EVENT_Z_UNKNOWN_ERROR.

Referenced by FileSwfDecompression().

Here is the call graph for this function:
Here is the caller graph for this function: