aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

bug 452 - fix detection bug for sigs that don't have a content but need payload inspection

Browse Source
remotes/origin/master
Anoop Saldanha 14 years ago committed by Victor Julien
parent 608f4fe787
commit 046819e1b8
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File

8
src/detect.c
Unescape Escape View File

@ -1560,11 +1560,11 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh
// continue; // continue;
//} //}
if (det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray != NULL) { //if (det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray != NULL) {
/* filter out sigs that want pattern matches, but /* filter out sigs that want pattern matches, but
* have no matches */ * have no matches */
if (!(det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray[(s->mpm_pattern_id_div_8)] & s->mpm_pattern_id_mod_8) && if ((s->flags & SIG_FLAG_MPM_STREAM) && !(s->flags & SIG_FLAG_MPM_STREAM_NEG) &&
(s->flags & SIG_FLAG_MPM_STREAM) && !(s->flags & SIG_FLAG_MPM_STREAM_NEG)) { !(det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray[(s->mpm_pattern_id_div_8)] & s->mpm_pattern_id_mod_8)) {
SCLogDebug("no match in this smsg"); SCLogDebug("no match in this smsg");
continue; continue;
} }
@ -1585,7 +1585,7 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh
break; break;
} }
} //}
} }
} /* if (smsg != NULL) */ } /* if (smsg != NULL) */

Write Preview
Loading…
Cancel
Save