From 0da93e84ca9b86bc0bb24fff6def78ded81eb1de Mon Sep 17 00:00:00 2001
From: Anoop Saldanha <poonaatsoc@gmail.com>
Date: Tue, 24 Apr 2012 13:03:09 +0530
Subject: [PATCH] bug 454 - Provide better error message when the user supplies
 a NULL address range

---
 src/detect-engine-address.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/detect-engine-address.c b/src/detect-engine-address.c
index c10d2cd20a..621d20592a 100644
--- a/src/detect-engine-address.c
+++ b/src/detect-engine-address.c
@@ -1100,7 +1100,9 @@ int DetectAddressMergeNot(DetectAddressHead *gh, DetectAddressHead *ghn)
     /* check if the negated list covers the entire ip space. If so
      * the user screwed up the rules/vars. */
     if (DetectAddressIsCompleteIPSpace(ghn) == 1) {
-        SCLogDebug("DetectAddressMergeNot: complete IP space negated");
+        SCLogError(SC_ERR_INVALID_SIGNATURE, "Complete IP space negated.  "
+                   "Rule address range is NIL.  Probably have a !any or "
+                   "a address range that supplies a NULL address range");
         goto error;
     }