suricata
util-spm-bm.h
Go to the documentation of this file.
1/* Copyright (C) 2007-2010 Open Information Security Foundation
2 *
3 * You can copy, redistribute or modify this Program under the terms of
4 * the GNU General Public License version 2 as published by the Free
5 * Software Foundation.
6 *
7 * This program is distributed in the hope that it will be useful,
8 * but WITHOUT ANY WARRANTY; without even the implied warranty of
9 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10 * GNU General Public License for more details.
11 *
12 * You should have received a copy of the GNU General Public License
13 * version 2 along with this program; if not, write to the Free Software
14 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15 * 02110-1301, USA.
16 */
17
18/**
19 * \file
20 *
21 * \author Pablo Rincon Crespo <pablo.rincon.crespo@gmail.com>
22 *
23 */
24
25#ifndef SURICATA_UTIL_SPM_BM
26#define SURICATA_UTIL_SPM_BM
27
28#include "suricata-common.h"
29
30#define ALPHABET_SIZE 256
31
32/* Context for boyer moore */
33typedef struct BmCtx_ {
35 //C99 "flexible array member"
36 uint16_t bmGs[]; // = SCMalloc(sizeof(int16_t)*(needlelen + 1));
38
39/** Prepare and return a Boyer Moore context */
40BmCtx *BoyerMooreCtxInit(const uint8_t *needle, uint16_t needle_len);
41BmCtx *BoyerMooreNocaseCtxInit(uint8_t *needle, uint16_t needle_len);
42
43void BoyerMooreCtxToNocase(BmCtx *, uint8_t *, uint16_t);
44uint8_t *BoyerMoore(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n,
45 const BmCtx *bm_ctx);
46uint8_t *BoyerMooreNocase(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n,
47 const BmCtx *bm_ctx);
49
50void SpmBMRegister(void);
51
52#endif /* SURICATA_UTIL_SPM_BM */
SCMutex m
Definition flow-hash.h:6
uint16_t bmGs[]
Definition util-spm-bm.h:36
uint16_t bmBc[ALPHABET_SIZE]
Definition util-spm-bm.h:34
BmCtx * BoyerMooreNocaseCtxInit(uint8_t *needle, uint16_t needle_len)
Setup a Boyer Moore context for nocase search.
uint8_t * BoyerMoore(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n, const BmCtx *bm_ctx)
Boyer Moore search algorithm Is better as the pattern length increases and for big buffers to search ...
struct BmCtx_ BmCtx
void BoyerMooreCtxToNocase(BmCtx *, uint8_t *, uint16_t)
Given a BmCtx structure, recreate the pre/suffixes for nocase.
Definition util-spm-bm.c:58
#define ALPHABET_SIZE
Definition util-spm-bm.h:30
void BoyerMooreCtxDeInit(BmCtx *)
Free the memory allocated to Boyer Moore context.
uint8_t * BoyerMooreNocase(const uint8_t *x, const uint16_t m, const uint8_t *y, const uint32_t n, const BmCtx *bm_ctx)
Boyer Moore search algorithm Is better as the pattern length increases and for big buffers to search ...
BmCtx * BoyerMooreCtxInit(const uint8_t *needle, uint16_t needle_len)
Setup a Boyer Moore context.
Definition util-spm-bm.c:78
void SpmBMRegister(void)