Changeset 458

Timestamp:

04/01/06 17:37:12 (3 years ago)

Author:

common

Message:

shellcode-signatures
- fix one byte leak in sch_namespace_linkxor
- unregister and delete all shellcodehandlers loaded from signature file

Files:

• nepenthes/trunk/modules/shellcode-signatures/sch_namespace_linkxor.cpp (modified) (1 diff)
• nepenthes/trunk/modules/shellcode-signatures/shellcode-signatures.cpp (modified) (5 diffs)

nepenthes/trunk/modules/shellcode-signatures/sch_namespace_linkxor.cpp

@@ -124 +124 @@
-                        case sc_key:
-                                logSpam("sc_key %i\n",matchSize);
+                                keyMatch = match;
-                                byteKey = *(byte *)match;
-                                break;

nepenthes/trunk/modules/shellcode-signatures/shellcode-signatures.cpp

@@ -79 +79 @@
-        m_ModuleManager         = m_Nepenthes->getModuleMgr();
-
-
+       
-        return loadSignaturesFromFile(string("var/cache/nepenthes/signatures/shellcode-signatures.sc"));
-}
@@ -85 +85 @@
-bool SignatureShellcodeHandler::Exit()
-{
+        logPF();
-        list <ShellcodeHandler *>::iterator handler;
-        for (handler = m_ShellcodeHandlers.begin(); handler != m_ShellcodeHandlers.end(); handler++)
@@ -91 +92 @@
-                {
-                        logCrit("ERROR %s\n",__PRETTY_FUNCTION__);
-                        return false;
-                }
-                m_Nepenthes->getShellcodeMgr()->unregisterShellcodeHandler((*handler));
-
+
+
+
-        return true;
-}
@@ -183 +185 @@
-                        }else
-                        {
-g_Nepenthes->getShellcodeMgr()->registerShellcodeHandler
+m_ShellcodeHandlers.push_front
-                        }
-                }
@@ -193 +195 @@
-
-        logSpam("Free'd %i shellcodes\n",freed_shellcode); 
+
+
+        list <ShellcodeHandler *>::iterator it;
+
+        for (it = m_ShellcodeHandlers.begin(); it != m_ShellcodeHandlers.end(); it++)
+        {
+                g_Nepenthes->getShellcodeMgr()->registerShellcodeHandler(*it);
+        }
-
-        return load_success;