Improve threshold hash table handling.

src/detect-engine-threshold.c

@@ -148,15 +148,23 @@ void ThresholdTimeoutRemove(DetectEngineCtx *de_ctx)
     next = HashListTableGetListHead(de_ctx->ths_ctx.threshold_hash_table_src);
 
     while (next != NULL) {
-
         tsh = HashListTableGetListData(next);
 
         if (tsh && ((tv.tv_sec - tsh->tv_sec1) > tsh->seconds))   {
+            if (tsh->ipv == 4) {
+                if (tsh->type == TRACK_SRC) {
                     HashListTableRemove(de_ctx->ths_ctx.threshold_hash_table_src, tsh, sizeof(DetectThresholdData));
+                } else if (tsh->type == TRACK_DST) {
                     HashListTableRemove(de_ctx->ths_ctx.threshold_hash_table_dst, tsh, sizeof(DetectThresholdData));
+                }
+            } else if (tsh->ipv == 6) {
+                if (tsh->type == TRACK_SRC) {
                     HashListTableRemove(de_ctx->ths_ctx.threshold_hash_table_src_ipv6, tsh, sizeof(DetectThresholdData));
+                } else if (tsh->type == TRACK_DST) {
                     HashListTableRemove(de_ctx->ths_ctx.threshold_hash_table_dst_ipv6, tsh, sizeof(DetectThresholdData));
                 }
+            }
+        }
 
         next = HashListTableGetListNext(next);
     }
@@ -191,8 +199,8 @@ void ThresholdHashAdd(DetectEngineCtx *de_ctx, DetectThresholdData *tsh_ptr, Pac
     }
 
     if(ret == -1)   {
-        SCLogError(SC_ERR_MEM_ALLOC,
-                "Threshold: Failed to Add element into the hash table.");
+        SCLogError(SC_ERR_THRESHOLD_HASH_ADD,
+                "failed to add element into the hash table");
     }
 
     return;

src/detect.h

@@ -229,8 +229,8 @@ typedef struct ThresholdCtx_    {
     HashListTable *threshold_hash_table_src;        /**< Ipv4 src hash table */
     HashListTable *threshold_hash_table_dst_ipv6;   /**< Ipv6 dst hash table */
     HashListTable *threshold_hash_table_src_ipv6;   /**< Ipv6 src hash table */
-    pthread_mutex_t threshold_table_lock;   /**< Mutex for hash table */
-}ThresholdCtx;
+    SCMutex threshold_table_lock;                   /**< Mutex for hash table */
+} ThresholdCtx;
 
 /** \brief main detection engine ctx */
 typedef struct DetectEngineCtx_ {

src/util-error.c

@@ -61,6 +61,7 @@ const char * SCErrorToString(SCError err)
         CASE_CODE (SC_ERR_UNIFIED2_ALERT_GENERIC_ERROR);
         CASE_CODE (SC_ERR_FWRITE);
         CASE_CODE (SC_ERR_FOPEN);
+        CASE_CODE (SC_ERR_THRESHOLD_HASH_ADD);
         default:
             return "UNKNOWN_ERROR";
     }

src/util-error.h

@@ -73,6 +73,7 @@ typedef enum {
     SC_ERR_UNIFIED_ALERT_GENERIC_ERROR,
     SC_ERR_UNIFIED2_ALERT_GENERIC_ERROR,
     SC_ERR_FWRITE,
+    SC_ERR_THRESHOLD_HASH_ADD,
 } SCError;
 
 const char *SCErrorToString(SCError);