Skip to content

Conversation

TimDiam0nd
Copy link
Contributor

Change the rule 933120 from the current method:

  1. pmf
  2. capture
  3. pmf the capture

to a single regex. This removes the need for an inefficient capture.

It gives us performance gaisns of between 42 and 109 times (99th percentile) for the Rust regex crate. It was causing latencies of between 15-35ms when running all the tests. The difference won't be as pronounced with PCRE2 but other regex engines may see similar benefits.

Copy link
Contributor

github-actions bot commented May 19, 2025

📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

TimDiam0nd and others added 3 commits May 30, 2025 15:50
Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>
…20.yaml

Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>
@TimDiam0nd
Copy link
Contributor Author

all done i hope @theseion , thanks

@theseion theseion added this pull request to the merge queue May 30, 2025
Merged via the queue into coreruleset:main with commit a1326e1 May 30, 2025
6 checks passed
@TimDiam0nd TimDiam0nd deleted the 933120_regex branch May 30, 2025 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants