hi_client_norm.c File Reference

HTTP client normalization routines. More...

#include <stdlib.h>
#include <stdio.h>
#include <sys/types.h>
#include <ctype.h>
#include "hi_norm.h"
#include "hi_return_codes.h"

Go to the source code of this file.

Defines
#define	MAX_URI   4096
Functions
static int	UriNorm (HI_SESSION *Session)
int	hi_client_norm (HI_SESSION *Session)

---

Detailed Description

HTTP client normalization routines.

Author:

Daniel Roelker <droelker@sourcefire.com>

We deal with the normalization of HTTP client requests headers and URI.

In this file, we handle all the different HTTP request URI evasions. The list is:

• ASCII decoding
• UTF-8 decoding
• IIS Unicode decoding
• Directory traversals (self-referential and traversal)
• Multiple Slashes
• Double decoding
• U decoding
• Bare Byte Unicode decoding
• Base36 decoding

NOTES:

• Initial development. DJR

Definition in file hi_client_norm.c.

---

Define Documentation

#define MAX_URI   4096

Definition at line 34 of file hi_client_norm.c. Referenced by UriNorm().

---

Function Documentation

int hi_client_norm (  HI_SESSION *  Session  )

Definition at line 86 of file hi_client_norm.c. References s_HI_SESSION::client, HI_INVALID_ARG, HI_SUCCESS, s_HI_CLIENT::request, s_HI_SESSION::server_conf, s_HI_CLIENT_REQ::uri_norm, and UriNorm(). Referenced by hi_normalization().

static int UriNorm (  HI_SESSION *  Session  )  [static]

Definition at line 36 of file hi_client_norm.c. References s_HI_SESSION::client, hi_norm_uri(), HI_SUCCESS, MAX_URI, NULL, s_HI_CLIENT::request, s_HI_CLIENT_REQ::uri, s_HI_CLIENT_REQ::uri_norm, s_HI_CLIENT_REQ::uri_norm_size, and s_HI_CLIENT_REQ::uri_size. Referenced by hi_client_norm().

---