Comments (1)
The issue here is the use of zeek::confirm_protocol
in a file analyzer. This is not supported and triggers and exception which we swallow silently (this is e.g., the reason callign zeek::confirm_protocol
leads to any code following being skipped). This can be reproduced even with e.g., the ZIP
file analyzer in zeek/spicy-analyzers: adding the following code to analyzer/zip/zip.spicy
causes all zip tests to fail:
on DirectoryHeader::%done {
zeek::confirm_protocol();
}
This is diagnosed in weird.log
with lines like:
1619104896.294432 - - - - - file_error FL4lmy3f7owPUUoQ8l: no current connection available F zeek -
One could argue that swallowing the exception instead of triggering an assertion error is surprising, but that is the current approach, so I am closing this issue.
from spicy-plugin.
Related Issues (20)
- Unsupported passing of user-defined types in event handler declaration not rejected HOT 2
- Automatically generate Zeek-side types for Spicy types passed in event declarations HOT 1
- ZEEKPATH contains /spicy
- Remove support for Zeek 4.x.
- Remove JIT mode
- Document required lifecycle management of handles created with `file_begin` and `protocol_begin` HOT 2
- Treat integer overflows as analyzer violations (question/proposal)
- Consider making it possible passing error message in EVT hook mapping
- Provide an easier way to use a certain Spicy branch in CI HOT 1
- Automatic Zeek type creation clashes with using common base libraries HOT 1
- Unhandled exception in searchModules (was: Crash on startup on FreeBSD 12.4-RELEASE) HOT 4
- Move plugin over into Zeek proper HOT 1
- Unexpected behavior when mixing zeek::protocol_begin and/or zeek::protocol_end across different analyzers HOT 5
- Enable getting spicy version from script land. HOT 2
- "data is missing" messages HOT 4
- protocol_* should have semantics similar to file_* APIs
- File Analysis Framework Filename Function HOT 1
- Allow users to inject additional spicyz options in `spicy_add_analyzer` HOT 1
- Provide access to Zeek script-land configuration options HOT 1
- The installation of spicy-plugin always reports an error HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spicy-plugin.