diff --git a/src/detect-isdataat.c b/src/detect-isdataat.c index 4f596dceba..d0bc274ef5 100755 --- a/src/detect-isdataat.c +++ b/src/detect-isdataat.c @@ -96,12 +96,13 @@ int DetectIsdataatMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet * printf("detect-isdataat: Nothing now, this is checked in detect-content.c!\n"); #endif } - else if( !(idad->flags & ISDATAAT_RELATIVE) && p->payload_len >= idad->dataat) { - ret=1; /* its not relative and we have more data in the packet than the offset of isdataat */ - #ifdef DEBUG - printf("detect-isdataat: matched with payload len : %u , dataat? %u ; relative? %u ...\n", p->payload_len,idad->dataat,idad->flags &ISDATAAT_RELATIVE); - #endif - } + else + if( !(idad->flags & ISDATAAT_RELATIVE) && p->payload_len >= idad->dataat) { + ret=1; /* its not relative and we have more data in the packet than the offset of isdataat */ + #ifdef DEBUG + printf("detect-isdataat: matched with payload len : %u , dataat? %u ; relative? %u ...\n", p->payload_len,idad->dataat,idad->flags &ISDATAAT_RELATIVE); + #endif + } return ret; } diff --git a/src/detect-window.h b/src/detect-window.h index 53c29835f7..a5f985976c 100644 --- a/src/detect-window.h +++ b/src/detect-window.h @@ -5,7 +5,7 @@ #define MAX_WINDOW_VALUE 65535 typedef struct DetectWindowData_ { - uint8_t negated; /** negated? 1=True : 0=False */ + uint8_t negated; /** negated? 1=True : 0=False */ uint32_t size; /** window size to match */ } DetectWindowData;