Actions
Task #7061
opencontent-inspect: expand accepted range of depth/offset/distance & related
Effort:
Difficulty:
Label:
Description
Refactor and cleanup
- Offset
- Depth
- Distance
and similar values throughout the keywords/transforms that support them.
65535 is a bounding value for many offset/depth usages but in other places, a signed 32 bit value is used.
The values supported should be examined for
- Consistency throughout the Suricata keyword set
- Relevance to the data blocks that they are applied to
We should be careful to document all changes
- Changes that result in more restrictive value ranges should be carefully considered and ample warning provided if existing usages won't be accepted
- Changes that relax value ranges should be called out in upgrade and documention.
Actions