From 6958efa2dc2cdac3a5dd2e8425fda661e3621f16 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 16 May 2024 11:43:17 +0200 Subject: [PATCH] detect/csum: remove pseudo packet checks --- src/detect-csum.c | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/src/detect-csum.c b/src/detect-csum.c index 03c2e964ce..3a2c372641 100644 --- a/src/detect-csum.c +++ b/src/detect-csum.c @@ -237,7 +237,7 @@ static int DetectIPV4CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv4(p) || PKT_IS_PSEUDOPKT(p)) + if (!PacketIsIPv4(p)) return 0; if (p->flags & PKT_IGNORE_CHECKSUM) { @@ -316,7 +316,7 @@ static int DetectTCPV4CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv4(p) || !PacketIsTCP(p) || p->proto != IPPROTO_TCP || PKT_IS_PSEUDOPKT(p)) + if (!PacketIsIPv4(p) || !PacketIsTCP(p) || p->proto != IPPROTO_TCP) return 0; if (p->flags & PKT_IGNORE_CHECKSUM) { @@ -396,7 +396,7 @@ static int DetectTCPV6CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv6(p) || !PacketIsTCP(p) || p->proto != IPPROTO_TCP || PKT_IS_PSEUDOPKT(p)) + if (!PacketIsIPv6(p) || !PacketIsTCP(p) || p->proto != IPPROTO_TCP) return 0; if (p->flags & PKT_IGNORE_CHECKSUM) { @@ -477,7 +477,7 @@ static int DetectUDPV4CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv4(p) || !PacketIsUDP(p) || p->proto != IPPROTO_UDP || PKT_IS_PSEUDOPKT(p)) + if (!PacketIsIPv4(p) || !PacketIsUDP(p) || p->proto != IPPROTO_UDP) return 0; const UDPHdr *udph = PacketGetUDP(p); @@ -560,7 +560,7 @@ static int DetectUDPV6CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv6(p) || !PacketIsUDP(p) || p->proto != IPPROTO_UDP || PKT_IS_PSEUDOPKT(p)) + if (!PacketIsIPv6(p) || !PacketIsUDP(p) || p->proto != IPPROTO_UDP) return 0; if (p->flags & PKT_IGNORE_CHECKSUM) { @@ -643,7 +643,7 @@ static int DetectICMPV4CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv4(p) || !PacketIsICMPv4(p) || p->proto != IPPROTO_ICMP || PKT_IS_PSEUDOPKT(p)) + if (!PacketIsIPv4(p) || !PacketIsICMPv4(p) || p->proto != IPPROTO_ICMP) return 0; if (p->flags & PKT_IGNORE_CHECKSUM) { @@ -723,8 +723,7 @@ static int DetectICMPV6CsumMatch(DetectEngineThreadCtx *det_ctx, { const DetectCsumData *cd = (const DetectCsumData *)ctx; - if (!PacketIsIPv6(p) || !PacketIsICMPv6(p) || p->proto != IPPROTO_ICMPV6 || - PKT_IS_PSEUDOPKT(p)) { + if (!PacketIsIPv6(p) || !PacketIsICMPv6(p) || p->proto != IPPROTO_ICMPV6) { return 0; } const ICMPV6Hdr *icmpv6h = PacketGetICMPv6(p);