file inspection: unset new file available flag when appropriate, prevents duplicate alerts.

13 years ago · 4eda31df4d
parent 2aa04add54
commit 4eda31df4d
1 changed files with 5 additions and 2 deletions
--- a/src/detect-engine-state.c
+++ b/src/detect-engine-state.c
@ -1112,10 +1112,13 @@ static void DeStateResetFileInspection(Flow *f, uint16_t alproto, void *alstate)
    SCMutexLock(&f->m);
    HtpState *htp_state = (HtpState *)alstate;

-    if (htp_state->flags & HTP_FLAG_NEW_FILE_TX_TC)
+    if (htp_state->flags & HTP_FLAG_NEW_FILE_TX_TC) {
+        htp_state->flags &= ~HTP_FLAG_NEW_FILE_TX_TC;
        f->de_state->flags |= DE_STATE_FILE_TC_NEW;
-    else if (htp_state->flags & HTP_FLAG_NEW_FILE_TX_TS)
+    } else if (htp_state->flags & HTP_FLAG_NEW_FILE_TX_TS) {
+        htp_state->flags &= ~HTP_FLAG_NEW_FILE_TX_TS;
        f->de_state->flags |= DE_STATE_FILE_TS_NEW;
+    }

    SCMutexUnlock(&f->m);
 }