#include "suricata-common.h"
#include "util-mpm.h"
#include "util-debug.h"
#include "util-mpm-ac.h"
#include "util-mpm-ac-ks.h"
#include "util-mpm-hs.h"
#include "util-hashlist.h"
#include "detect-engine.h"
#include "util-misc.h"
#include "conf.h"
#include "conf-yaml-loader.h"
#include "queue.h"
#include "util-unittest.h"
#include "util-memcpy.h"

Include dependency graph for util-mpm.c:

Macros
#define	DEFAULT_MPM MPM_AC

Functions
int32_t	MpmFactoryRegisterMpmCtxProfile (DetectEngineCtx de_ctx, const char name, const int sm_list, const AppProto alproto)
	Register a new Mpm Context. More...

int32_t	MpmFactoryIsMpmCtxAvailable (const DetectEngineCtx de_ctx, const MpmCtx mpm_ctx)

MpmCtx *	MpmFactoryGetMpmCtxForProfile (const DetectEngineCtx *de_ctx, int32_t id, int direction)

void	MpmFactoryReClaimMpmCtx (const DetectEngineCtx de_ctx, MpmCtx mpm_ctx)

void	MpmFactoryDeRegisterAllMpmCtxProfiles (DetectEngineCtx *de_ctx)

void	MpmInitThreadCtx (MpmThreadCtx *mpm_thread_ctx, uint16_t matcher)

void	MpmDestroyThreadCtx (MpmThreadCtx *mpm_thread_ctx, const uint16_t matcher)

void	MpmInitCtx (MpmCtx *mpm_ctx, uint8_t matcher)

void	MpmTableSetup (void)

int	MpmAddPatternCS (struct MpmCtx_ mpm_ctx, uint8_t pat, uint16_t patlen, uint16_t offset, uint16_t depth, uint32_t pid, SigIntId sid, uint8_t flags)

int	MpmAddPatternCI (struct MpmCtx_ mpm_ctx, uint8_t pat, uint16_t patlen, uint16_t offset, uint16_t depth, uint32_t pid, SigIntId sid, uint8_t flags)

void	MpmFreePattern (MpmCtx mpm_ctx, MpmPattern p)

int	MpmAddPattern (MpmCtx mpm_ctx, uint8_t pat, uint16_t patlen, uint16_t offset, uint16_t depth, uint32_t pid, SigIntId sid, uint8_t flags)

void	MpmRegisterTests (void)

Variables
MpmTableElmt	mpm_table [MPM_TABLE_SIZE]

uint8_t	mpm_default_matcher

Detailed Description

Author: Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Pattern matcher utility Functions

Definition in file util-mpm.c.

Macro Definition Documentation

◆ DEFAULT_MPM

#define DEFAULT_MPM MPM_AC

Definition at line 223 of file util-mpm.c.

Function Documentation

◆ MpmAddPattern()

int MpmAddPattern	(	MpmCtx *	mpm_ctx,
		uint8_t *	pat,
		uint16_t	patlen,
		uint16_t	offset,
		uint16_t	depth,
		uint32_t	pid,
		SigIntId	sid,
		uint8_t	flags
	)

Definition at line 439 of file util-mpm.c.

References flags, MPM_PATTERN_CTX_OWNS_ID, SCLogDebug, and SCLogWarning.

Referenced by SCACAddPatternCI(), SCACAddPatternCS(), SCACTileAddPatternCI(), and SCACTileAddPatternCS().

Here is the caller graph for this function:

◆ MpmAddPatternCI()

int MpmAddPatternCI	(	struct MpmCtx_ *	mpm_ctx,
		uint8_t *	pat,
		uint16_t	patlen,
		uint16_t	offset,
		uint16_t	depth,
		uint32_t	pid,
		SigIntId	sid,
		uint8_t	flags
	)

Definition at line 259 of file util-mpm.c.

References MpmTableElmt_::AddPatternNocase, flags, mpm_table, MpmCtx_::mpm_type, and offset.

◆ MpmAddPatternCS()

int MpmAddPatternCS	(	struct MpmCtx_ *	mpm_ctx,
		uint8_t *	pat,
		uint16_t	patlen,
		uint16_t	offset,
		uint16_t	depth,
		uint32_t	pid,
		SigIntId	sid,
		uint8_t	flags
	)

Definition at line 250 of file util-mpm.c.

References MpmTableElmt_::AddPattern, flags, mpm_table, MpmCtx_::mpm_type, and offset.

◆ MpmDestroyThreadCtx()

void MpmDestroyThreadCtx	(	MpmThreadCtx *	mpm_thread_ctx,
		const uint16_t	matcher
	)

Definition at line 203 of file util-mpm.c.

References MpmTableElmt_::DestroyThreadCtx, and mpm_table.

Referenced by PatternMatchThreadDestroy().

Here is the caller graph for this function:

◆ MpmFactoryDeRegisterAllMpmCtxProfiles()

void MpmFactoryDeRegisterAllMpmCtxProfiles ( DetectEngineCtx * de_ctx )

Definition at line 169 of file util-mpm.c.

References de_ctx, MpmTableElmt_::DestroyCtx, MpmCtxFactoryContainer_::items, DetectEngineCtx_::mpm_ctx_factory_container, MpmCtxFactoryItem::mpm_ctx_tc, MpmCtxFactoryItem::mpm_ctx_ts, MPM_NOTSET, mpm_table, MpmCtx_::mpm_type, next, MpmCtxFactoryItem::next, and SCFree.

Referenced by DetectEngineCtxFree().

Here is the caller graph for this function:

◆ MpmFactoryGetMpmCtxForProfile()

MpmCtx* MpmFactoryGetMpmCtxForProfile	(	const DetectEngineCtx *	de_ctx,
		int32_t	id,
		int	direction
	)

Definition at line 132 of file util-mpm.c.

References de_ctx, FatalError, MpmCtxFactoryContainer_::items, MpmCtxFactoryContainer_::max_id, DetectEngineCtx_::mpm_ctx_factory_container, MPM_CTX_FACTORY_UNIQUE_CONTEXT, MpmCtxFactoryItem::next, SCCalloc, SCLogError, and unlikely.

Referenced by DetectMpmPrepareAppMpms(), DetectMpmPrepareBuiltinMpms(), DetectMpmPrepareFrameMpms(), and DetectMpmPreparePktMpms().

Here is the caller graph for this function:

◆ MpmFactoryIsMpmCtxAvailable()

int32_t MpmFactoryIsMpmCtxAvailable	(	const DetectEngineCtx *	de_ctx,
		const MpmCtx *	mpm_ctx
	)

Definition at line 115 of file util-mpm.c.

References de_ctx, MpmCtxFactoryContainer_::items, DetectEngineCtx_::mpm_ctx_factory_container, and MpmCtxFactoryItem::next.

Referenced by MpmFactoryReClaimMpmCtx().

Here is the caller graph for this function:

◆ MpmFactoryReClaimMpmCtx()

void MpmFactoryReClaimMpmCtx	(	const DetectEngineCtx *	de_ctx,
		MpmCtx *	mpm_ctx
	)

Definition at line 157 of file util-mpm.c.

References de_ctx, MpmTableElmt_::DestroyCtx, MPM_NOTSET, mpm_table, MpmCtx_::mpm_type, MpmFactoryIsMpmCtxAvailable(), and SCFree.

Here is the call graph for this function:

◆ MpmFactoryRegisterMpmCtxProfile()

int32_t MpmFactoryRegisterMpmCtxProfile	(	DetectEngineCtx *	de_ctx,
		const char *	name,
		const int	sm_list,
		const AppProto	alproto
	)

Register a new Mpm Context.

Parameters

name	A new profile to be registered to store this MpmCtx.
sm_list	sm_list for this name (might be variable with xforms)
alproto	app proto or ALPROTO_UNKNOWN if not for app-layer

Return values