From 1598425a40a3717e39ee294e3b95b9b31de8e556 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Fri, 28 Sep 2012 19:49:34 +0200 Subject: [PATCH] detect: properly store a stateful match if it happens at the start of inspection --- src/detect-engine-state.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/detect-engine-state.c b/src/detect-engine-state.c index 3b24b02d57..77e3bab7a4 100644 --- a/src/detect-engine-state.c +++ b/src/detect-engine-state.c @@ -657,6 +657,7 @@ int DeStateDetectStartDetection(ThreadVars *tv, DetectEngineCtx *de_ctx, sm = NULL; /* set to NULL as we have a match */ if (inspect_flags == 0 || (inspect_flags == match_flags)) { + match_flags |= DE_STATE_FLAG_FULL_MATCH; r = 1; } break;