detect: properly store a stateful match if it happens at the start of inspection

pull/105/merge
Victor Julien 13 years ago
parent c3f4f8d46a
commit 1598425a40

@ -657,6 +657,7 @@ int DeStateDetectStartDetection(ThreadVars *tv, DetectEngineCtx *de_ctx,
sm = NULL; /* set to NULL as we have a match */ sm = NULL; /* set to NULL as we have a match */
if (inspect_flags == 0 || (inspect_flags == match_flags)) { if (inspect_flags == 0 || (inspect_flags == match_flags)) {
match_flags |= DE_STATE_FLAG_FULL_MATCH;
r = 1; r = 1;
} }
break; break;

Loading…
Cancel
Save