decoder events: fix bug causing some rules not to be inspected if the decoder completed with warnings

12 years ago · 538a941486
parent f5cd7c6a92
commit 538a941486
1 changed files with 4 additions and 2 deletions
--- a/src/detect.c
+++ b/src/detect.c
@ -3116,14 +3116,16 @@ int SigAddressPrepareStage2(DetectEngineCtx *de_ctx) {
        SCLogDebug("tmp_s->id %"PRIu32, tmp_s->id);
        if (tmp_s->flags & SIG_FLAG_IPONLY) {
            IPOnlyAddSignature(de_ctx, &de_ctx->io_ctx, tmp_s);
-        } else if (tmp_s->init_flags & SIG_FLAG_INIT_DEONLY) {
-            DetectEngineAddDecoderEventSig(de_ctx, tmp_s);
        } else {
            DetectEngineLookupFlowAddSig(de_ctx, tmp_s, AF_INET);
            DetectEngineLookupFlowAddSig(de_ctx, tmp_s, AF_INET6);
            DetectEngineLookupFlowAddSig(de_ctx, tmp_s, AF_UNSPEC);
        }

+        if (tmp_s->init_flags & SIG_FLAG_INIT_DEONLY) {
+            DetectEngineAddDecoderEventSig(de_ctx, tmp_s);
+        }
+
        sigs++;
    }