aboutsummaryrefslogtreecommitdiff
path: root/analyzer/parser/parser.c
diff options
context:
space:
mode:
Diffstat (limited to 'analyzer/parser/parser.c')
-rw-r--r--analyzer/parser/parser.c17
1 files changed, 13 insertions, 4 deletions
diff --git a/analyzer/parser/parser.c b/analyzer/parser/parser.c
index 9265153..48f26bb 100644
--- a/analyzer/parser/parser.c
+++ b/analyzer/parser/parser.c
@@ -14,7 +14,12 @@ void cleanup_parsed_data(void *parsed_data) {
}
// find earliest data to parse in stream
-byte_t *find_earliest_data(TCPStream *stream, size_t stream_offset, int *earliest_length, parse_function_t **earliest_parse_fun) {
+byte_t *find_earliest_data(
+ TCPStream *stream,
+ size_t stream_offset,
+ int *earliest_length,
+ parse_function_t **earliest_parse_fun
+) {
byte_t *earliest_data = NULL;
for (size_t i = 0; i < ARR_LEN(all_find_parse_functions); i++) {
// ignore if not correct stream
@@ -22,7 +27,9 @@ byte_t *find_earliest_data(TCPStream *stream, size_t stream_offset, int *earlies
continue;
int length;
- byte_t *data = all_find_parse_functions[i].find_fn(stream->bytes.data + stream_offset, stream->bytes.count - stream_offset, &length);
+ byte_t *data = all_find_parse_functions[i].find_fn(
+ stream->bytes.data + stream_offset, stream->bytes.count - stream_offset, &length
+ );
// if it's the first found or earlier than earliest - save it
if (data && (!earliest_data || data < earliest_data)) {
earliest_data = data;
@@ -34,7 +41,8 @@ byte_t *find_earliest_data(TCPStream *stream, size_t stream_offset, int *earlies
}
DynArray parse_stream(TCPStream *stream, size_t *parsed_len) {
- DynArray parsed_data = array_new(sizeof(ParsedData), INIT_PARSED_DATA_CAPACITY, cleanup_parsed_data);
+ DynArray parsed_data =
+ array_new(sizeof(ParsedData), INIT_PARSED_DATA_CAPACITY, cleanup_parsed_data);
size_t stream_offset = 0;
byte_t *earliest_data;
@@ -42,7 +50,8 @@ DynArray parse_stream(TCPStream *stream, size_t *parsed_len) {
// find earliest data to parse
int earliest_length;
parse_function_t *earliest_parse_fun;
- earliest_data = find_earliest_data(stream, stream_offset, &earliest_length, &earliest_parse_fun);
+ earliest_data =
+ find_earliest_data(stream, stream_offset, &earliest_length, &earliest_parse_fun);
// if start of data to parse was found, but not the end, then finish here
// set parsed_len, so that the beginning of that data is at the beginning of the stream