suricata
util-file-decompression.h
Go to the documentation of this file.
1/* Copyright (C) 2017 Open Information Security Foundation
2 *
3 * You can copy, redistribute or modify this Program under the terms of
4 * the GNU General Public License version 2 as published by the Free
5 * Software Foundation.
6 *
7 * This program is distributed in the hope that it will be useful,
8 * but WITHOUT ANY WARRANTY; without even the implied warranty of
9 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10 * GNU General Public License for more details.
11 *
12 * You should have received a copy of the GNU General Public License
13 * version 2 along with this program; if not, write to the Free Software
14 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15 * 02110-1301, USA.
16 */
17
18/** \file
19 *
20 * \author Giuseppe Longo <giuseppe@glongo.it>
21 *
22 *
23 */
24
25#ifndef SURICATA_UTIL_FILE_DECOMPRESSION_H
26#define SURICATA_UTIL_FILE_DECOMPRESSION_H
27
28#include "detect.h"
29
30enum {
35};
36
37int FileIsSwfFile(const uint8_t *buffer, uint32_t buffer_len);
38int FileSwfDecompression(const uint8_t *buffer, uint32_t buffer_len,
39 DetectEngineThreadCtx *det_ctx,
40 InspectionBuffer *out_buffer,
41 int swf_type,
42 uint32_t decompress_depth, uint32_t compress_depth);
43
44#endif /* SURICATA_UTIL_FILE_DECOMPRESSION_H */
int FileSwfDecompression(const uint8_t *buffer, uint32_t buffer_len, DetectEngineThreadCtx *det_ctx, InspectionBuffer *out_buffer, int swf_type, uint32_t decompress_depth, uint32_t compress_depth)
This function decompresses a buffer with zlib/lzma algorithm.
int FileIsSwfFile(const uint8_t *buffer, uint32_t buffer_len)
@ FILE_SWF_ZLIB_COMPRESSION
@ FILE_SWF_LZMA_COMPRESSION
@ FILE_SWF_NO_COMPRESSION