suricata
util-spm-bm.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2010 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Pablo Rincon Crespo <pablo.rincon.crespo@gmail.com>
22  *
23  */
24 
25 #ifndef __UTIL_SPM_BM__
26 #define __UTIL_SPM_BM__
27 
28 #include "suricata-common.h"
29 #include "suricata.h"
30 
31 #define ALPHABET_SIZE 256
32 
33 /* Context for booyer moore */
34 typedef struct BmCtx_ {
35  uint16_t bmBc[ALPHABET_SIZE];
36  uint16_t *bmGs; // = SCMalloc(sizeof(int32_t)*(needlelen + 1));
37 } BmCtx;
38 
39 /** Prepare and return a Boyer Moore context */
40 BmCtx *BoyerMooreCtxInit(const uint8_t *needle, uint16_t needle_len);
41 BmCtx *BoyerMooreNocaseCtxInit(uint8_t *needle, uint16_t needle_len);
42 
43 void BoyerMooreCtxToNocase(BmCtx *, uint8_t *, uint16_t);
44 uint8_t *BoyerMoore(const uint8_t *x, uint16_t m, const uint8_t *y, uint32_t n, BmCtx *bm_ctx);
45 uint8_t *BoyerMooreNocase(const uint8_t *x, uint16_t m, const uint8_t *y, uint32_t n, BmCtx *bm_ctx);
47 
48 void SpmBMRegister(void);
49 
50 #endif /* __UTIL_SPM_BM__ */
51 
uint16_t bmBc[ALPHABET_SIZE]
Definition: util-spm-bm.h:35
void SpmBMRegister(void)
Definition: util-spm-bm.c:509
void BoyerMooreCtxToNocase(BmCtx *, uint8_t *, uint16_t)
Given a BmCtx structure, recreate the pre/suffixes for nocase.
Definition: util-spm-bm.c:57
BmCtx * BoyerMooreNocaseCtxInit(uint8_t *needle, uint16_t needle_len)
Setup a Booyer Moore context for nocase search.
Definition: util-spm-bm.c:111
uint8_t * BoyerMoore(const uint8_t *x, uint16_t m, const uint8_t *y, uint32_t n, BmCtx *bm_ctx)
Boyer Moore search algorithm Is better as the pattern length increases and for big buffers to search ...
Definition: util-spm-bm.c:306
#define ALPHABET_SIZE
Definition: util-spm-bm.h:31
BmCtx * BoyerMooreCtxInit(const uint8_t *needle, uint16_t needle_len)
Setup a Booyer Moore context.
Definition: util-spm-bm.c:77
uint8_t * BoyerMooreNocase(const uint8_t *x, uint16_t m, const uint8_t *y, uint32_t n, BmCtx *bm_ctx)
Boyer Moore search algorithm Is better as the pattern length increases and for big buffers to search ...
Definition: util-spm-bm.c:357
void BoyerMooreCtxDeInit(BmCtx *)
Free the memory allocated to Booyer Moore context.
Definition: util-spm-bm.c:125
SCMutex m
Definition: flow-hash.h:105
uint16_t * bmGs
Definition: util-spm-bm.h:36
struct BmCtx_ BmCtx