aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix for bug 227. For negated contents that have been added to mpm we might have pmq.pattern_id_array_cnt as 0. We can't ignore inspecting sigs if this is 0, in case the content added is negated

Browse Source
remotes/origin/master-1.1.x
Anoop Saldanha 15 years ago committed by Victor Julien
parent 9ad1924dba
commit 0d741b9a55
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File

8
src/detect.c
Unescape Escape View File

@ -956,10 +956,10 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh
uint8_t pmq_idx = 0; uint8_t pmq_idx = 0;
StreamMsg *smsg_inspect = smsg; StreamMsg *smsg_inspect = smsg;
for ( ; smsg_inspect != NULL; smsg_inspect = smsg_inspect->next, pmq_idx++) { for ( ; smsg_inspect != NULL; smsg_inspect = smsg_inspect->next, pmq_idx++) {
if (det_ctx->smsg_pmq[pmq_idx].pattern_id_array_cnt == 0) { //if (det_ctx->smsg_pmq[pmq_idx].pattern_id_array_cnt == 0) {
SCLogDebug("no match in smsg_inspect %p (%u), idx %d", smsg_inspect, smsg_inspect->data.data_len, pmq_idx); // SCLogDebug("no match in smsg_inspect %p (%u), idx %d", smsg_inspect, smsg_inspect->data.data_len, pmq_idx);
continue; // continue;
} //}
if (det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray != NULL) { if (det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray != NULL) {
/* filter out sigs that want pattern matches, but /* filter out sigs that want pattern matches, but

Write Preview
Loading…
Cancel
Save