next/1463/80x/20260825/v1 - #16113
Merged
victorjulien merged 9 commits intoAug 26, 2026
Merged
Conversation
IPOnly Engine does not support parsing and recording IPv6 ranges. So, passing a range of ipv6 there just results in non-fatal errors in parsing the IP addresses which means they fail to be added to the radix tree struct. Re-classify the ipv6 ranges as like_ip_only so they fall out of the IPOnly engine and are processed per packet. Ticket: 8847 (cherry picked from commit 63daa73)
Add a minimal, non-intrusive config option firewall.policies.accept-arp to allow ARP packets to be accepted in firewall mode without requiring ARP detection rules. Default is false to preserve current behavior. Ticket: OISF#8314.
Ticket: 5204 ippair use_cnt increased by AppLayerExpectationCreate calling IPPairGetIPPairFromHash was never decreased (cherry picked from commit 425b9c6)
See RFC 9110 8.4.1 > All content codings are case-insensitive Ticket: 8760 (cherry picked from commit 4688098)
Ticket: 8750 (cherry picked from commit 7c66954)
A rule like `frame:http1.response; to_md5;` could have a buffer bigger than the frame Ticket: 8763 (cherry picked from commit c9434b3)
Ticket: 8768 (cherry picked from commit 7c394b9)
Fix the following lints: - clippy::box_default - clippy::byte_char_slices - clippy::collapsible_match - clippy::manual_clear - clippy::question_mark - clippy::to_string_in_format_args - clippy::useless_borrows_in_formatting - unused_imports (rustc)
The previous commit makes us clippy clean on 1.98.0.
victorjulien
requested review from
catenacyber,
jasonish and
jufajardini
as code owners
August 25, 2026 20:54
Member
|
Fedora CI error is external: warning: spurious network error (3 tries remaining): [7] Could not connect to server (Failed to connect to static.crates.io port 443 after 4002 ms: Could not connect to server) |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## main-8.0.x #16113 +/- ##
==============================================
+ Coverage 81.69% 81.71% +0.01%
==============================================
Files 1016 1016
Lines 277166 277201 +35
==============================================
+ Hits 226430 226509 +79
+ Misses 50736 50692 -44
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
|
Information: QA ran without warnings. Pipeline = 33343 |
This was referenced Aug 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Staging:
SV_BRANCH=OISF/suricata-verify#3318