[Bro] Regular expression behavior

[Fahad Ali Arshad]

Hi,
I am testing some regular expression in bro and Bro2.0 is giving me weird behavior. For example, the following regular expression puts Bro in an infinite loop.

/(merge.*?using\s*?\()|execute\s*?immediate\s*[\"\'`´\x2018\x2019])|(\W+\d*?\s*?having\s*?[^\s\-])|(match\s*?[\w(),\+\-]+\s*?against\s*?\()/

Note that the \x2018 and \x2019 are ASCII codes for LEFT SINGLE QUOTATION MARK and RIGHT SINGLE QUOTATION MARK.

If I plug in the actual single quotation marks then I get a segmentation fault. 

Any idea what is going on?

Best,
Fahad Arshad



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120804/0eb42865/attachment.html