[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    Re: [Snort-devel] Regarding otn_tmp
From:       Steven Sturges <steve.sturges () sourcefire ! com>
Date:       2008-03-25 13:03:25
Message-ID: 47E8F81D.4070802 () sourcefire ! com
[Download RAW message or body]

Suggest you upgrade to a more recent version...  2.3 is about 4 years 
old at this point.  :)

otn_tmp is a global that refers to the most recent rule that was
being evaluated.  So as to avoid data leak in later calls to Detect(),
either from within the preprocessors or in the normal path, otn_tmp
is set to NULL.

Cheers.

snort user wrote:
> Greetings.
> 
> I am working with an older version of snort - 2.3 version.
> 
> I see that there are certain places where Detect() is called from
> within preprocessors.
> Right after the call to Detect() otn_tmp is set to NULL.
> 
> Can someone please enlighten me as to what is being done by setting
> otn_tmp to NULL.
> 
> Thanks a lot !
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Snort-devel mailing list
> Snort-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel
[prev in list] [next in list] [prev in thread] [next in thread]