suricata
util-spm-bm.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2010 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Pablo Rincon Crespo <pablo.rincon.crespo@gmail.com>
22  *
23  */
24 
25 #ifndef SURICATA_UTIL_SPM_BM
26 #define SURICATA_UTIL_SPM_BM
27 
28 #include "suricata-common.h"
29 
30 #define ALPHABET_SIZE 256
31 
32 /* Context for boyer moore */
33 typedef struct BmCtx_ {
34  uint16_t bmBc[ALPHABET_SIZE];
35  //C99 "flexible array member"
36  uint16_t bmGs[]; // = SCMalloc(sizeof(int16_t)*(needlelen + 1));
38 
39 /** Prepare and return a Boyer Moore context */
40 BmCtx *BoyerMooreCtxInit(const uint8_t *needle, uint16_t needle_len);
41 BmCtx *BoyerMooreNocaseCtxInit(uint8_t *needle, uint16_t needle_len);
42 
43 void BoyerMooreCtxToNocase(BmCtx *, uint8_t *, uint16_t);
44 uint8_t *BoyerMoore(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n,
45  const BmCtx *bm_ctx);
46 uint8_t *BoyerMooreNocase(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n,
47  const BmCtx *bm_ctx);
49 
50 void SpmBMRegister(void);
51 
52 #endif /* SURICATA_UTIL_SPM_BM */
BmCtx_::bmGs
uint16_t bmGs[]
Definition: util-spm-bm.h:36
BoyerMooreCtxToNocase
void BoyerMooreCtxToNocase(BmCtx *, uint8_t *, uint16_t)
Given a BmCtx structure, recreate the pre/suffixes for nocase.
Definition: util-spm-bm.c:58
BoyerMoore
uint8_t * BoyerMoore(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n, const BmCtx *bm_ctx)
Boyer Moore search algorithm Is better as the pattern length increases and for big buffers to search ...
Definition: util-spm-bm.c:300
BoyerMooreCtxDeInit
void BoyerMooreCtxDeInit(BmCtx *)
Free the memory allocated to Boyer Moore context.
Definition: util-spm-bm.c:119
m
SCMutex m
Definition: flow-hash.h:6
ALPHABET_SIZE
#define ALPHABET_SIZE
Definition: util-spm-bm.h:30
BmCtx_
Definition: util-spm-bm.h:33
BmCtx_::bmBc
uint16_t bmBc[ALPHABET_SIZE]
Definition: util-spm-bm.h:34
suricata-common.h
BoyerMooreCtxInit
BmCtx * BoyerMooreCtxInit(const uint8_t *needle, uint16_t needle_len)
Setup a Boyer Moore context.
Definition: util-spm-bm.c:78
BoyerMooreNocaseCtxInit
BmCtx * BoyerMooreNocaseCtxInit(uint8_t *needle, uint16_t needle_len)
Setup a Boyer Moore context for nocase search.
Definition: util-spm-bm.c:105
BmCtx
struct BmCtx_ BmCtx
BoyerMooreNocase
uint8_t * BoyerMooreNocase(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n, const BmCtx *bm_ctx)
Boyer Moore search algorithm Is better as the pattern length increases and for big buffers to search ...
Definition: util-spm-bm.c:338
SpmBMRegister
void SpmBMRegister(void)
Definition: util-spm-bm.c:475