detect/files: fix inspection issues with 'alert ip'

Don't track the 'skipped' engines as matches.
pull/3457/head
Victor Julien 7 years ago
parent 6ffa0507d2
commit 28e74abcc5

@ -1211,9 +1211,7 @@ static bool DetectRunTxInspectRule(ThreadVars *tv,
/* special case: file_data on 'alert tcp' will have engines /* special case: file_data on 'alert tcp' will have engines
* in the list that are not for us. Bypass with assume match */ * in the list that are not for us. Bypass with assume match */
} else if (unlikely(engine->alproto != 0 && engine->alproto != f->alproto)) { } else if (unlikely(engine->alproto != 0 && engine->alproto != f->alproto)) {
inspect_flags |= BIT_U32(engine->id);
engine = engine->next; engine = engine->next;
total_matches++;
continue; continue;
} else { } else {
KEYWORD_PROFILING_SET_LIST(det_ctx, engine->sm_list); KEYWORD_PROFILING_SET_LIST(det_ctx, engine->sm_list);

Loading…
Cancel
Save