https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/ Issue: net-analyzer/suricata-7.0.5 fails tests. Discovered on: amd64 (internal ref: gcc14_tinderbox) System: GCC-14-SYSTEM (https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#GCC-14) Info about the issue: https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#CF0015
Created attachment 895728 [details] build.log build log and emerge --info
Error(s) that match a know pattern: ERROR: GenericVarFree unknown type 0 Error: detect-parse: Duplicate signature "alert tcp any any -> any any (msg:"boo"; sid:1; rev:4;)" Error: detect-parse: Duplicate signature "alert tcp any any -> any any (msg:"boo"; sid:2; rev:1;)" Error: detect-parse: Signature missing required value "sid". Error: detect-priority: Invalid Priority in Signature - -1 Error: detect-priority: Invalid Priority in Signature - 10boo Error: detect-priority: Invalid Priority in Signature - b10oo Error: detect-priority: Invalid Priority in Signature - boo10 FAILED: 0 Test DetectAppLayerProtocolTest06 : Error: detect-app-layer-protocol: Either we already have the rule match on an app layer protocol set through other keywords that match on this protocol, or have already seen a non-negated app-layer-protocol. Test DetectAppLayerProtocolTest07 : Error: detect-app-layer-protocol: Either we already have the rule match on an app layer protocol set through other keywords that match on this protocol, or have already seen a non-negated app-layer-protocol. Test DetectAppLayerProtocolTest08 : Error: detect-app-layer-protocol: can't mix positive app-layer-protocol match with negated match or match for 'failed'. Test DetectAppLayerProtocolTest09 : Error: detect-app-layer-protocol: can't mix positive app-layer-protocol match with negated match or match for 'failed'. Test DetectAppLayerProtocolTest10 : Error: detect-app-layer-protocol: can't mix positive app-layer-protocol match with negated match or match for 'failed'. Test DetectFragOffsetParseTest03 : Error: detect-fragoffset: Parse error badc Test DetectITypeParseTest08 : thread '<unnamed>' panicked at library/core/src/panicking.rs:156:5: Test DetectParseTestNoOpt : Error: detect-parse: unexpected option to endswith keyword: 'endswith' Test DetectPriorityTest02 : Error: detect-priority: Invalid Priority in Signature - boo Test DetectTosTest04 : Error: detect-tos: Invalid tos argument - 256. The tos option value must be in the range 0 - 255 Test DetectTosTest05 : Error: detect-tos: invalid tos option - boom. The tos option value must be in the range 0 - 255 Test DetectTosTest08 : Error: detect-tos: invalid tos option - x121. The tos option value must be in the range 0 - 255 Test DetectWindowTestParse03 : Error: detect-tcp-window: pcre_exec parse error, ret -1, string Test FlagsTestParse02 : Error: detect-tcp-flags: pcre match failed Test FlagsTestParse13 : Error: detect-tcp-flags: "flags" supports only one modifier at a time Test FragBitsTestParse02 : Error: detect-fragbits: pcre_exec parse error, ret -1, string G Test IpOptsTestParse02 : Error: detect-ipopts: unknown IP option specified "invalidopt" Test SidTestParse02 : Error: detect-sid: invalid character as arg to sid keyword Test SidTestParse03 : Error: detect-parse: quotes on sid keyword that doesn't support them: 'sid' Test SidTestParse04 : Error: detect-sid: sid value 0 is invalid Test SigParseBidirecTest06 : Error: detect-parse: "-" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseBidirecTest07 : Error: detect-parse: "<-" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseBidirecTest08 : Error: detect-parse: "<" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseBidirecTest09 : Error: detect-parse: ">" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseBidirecTest10 : Error: detect-parse: "-<" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseBidirecTest11 : Error: detect-parse: ">-" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseBidirecTest12 : Error: detect-parse: "><" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseTest03 : Error: detect-parse: "<-" is not a valid direction modifier, "->" and "<>" are supported. Test SigParseTest05 : Error: detect: failed to parse port "1024:65536" Test SigParseTest07 : Error: detect-parse: Duplicate signature "alert tcp any any -> any any (msg:"boo"; sid:1; rev:1;)" Test SigParseTest12 : Error: detect-rawbytes: "rawbytes" cannot be combined with the "file_data" sticky buffer Test SigParseTest18 : Error: detect-sid: sid value too high, max 4294967295 Test SigParseTest19 : Error: detect-gid: gid value to high, max 4294967295 Test SigParseTest20 : Error: detect-rev: rev value to high, max 4294967295 Test SigParseTestAppLayerTLS03 : Error: detect-tls-version: Invalid value Test SigParseTestContentGtDsize01 : Error: detect-content: signature can't match as required content length 24 exceeds dsize value 21 Test SigParseTestContentGtDsize02 : Error: detect-content: signature can't match as required content length 22 exceeds dsize value 21 Test SigParseTestNegation01 : Error: detect: Complete IP space negated. Rule address range is NIL. Probably have a !any or an address range that supplies a NULL address range Test SigParseTestNegation02 : Error: detect: Complete port space is negated Test SigParseTestNegation03 : Error: detect: Can't have a negated value in a range. Test SigParseTestNegation04 : Error: detect: no ports left after merging ports with negated ports Test SigParseTestNegation05 : Error: detect: no addresses left after merging addresses and negated addresses Test SigParseTestNegation06 : Error: detect: no ports left after merging ports with negated ports Test SigParseTestNegation07 : Error: detect: no addresses left after merging addresses and negated addresses Test SigParseTestUnbalancedQuotes01 : Error: detect-parse: bad option value formatting (possible missing semicolon) for keyword pcre: '"/\/[a-z]+\.php\?[a-z]+?=\d{7}&[a-z]+?=\d{7,8}$/U" flowbits:set,et.exploitkitlanding'
Created attachment 901951 [details] emerge --info with working tests I think it has something to do with gcc-14 as for me (gcc-13) the tests pass.
