fast_pattern: don't consider http_method, http_stat_code and http_stat_msg when automatically giving preference to a HTTP pattern over a stream pattern.

pull/117/merge
Victor Julien 13 years ago
parent 928ade1d04
commit 75cddabd8a

@ -1720,7 +1720,12 @@ static int PatternMatchPreparePopulateMpm(DetectEngineCtx *de_ctx,
DetectContentData *cd = (DetectContentData *)sm->ctx;
if (!(cd->flags & DETECT_CONTENT_NEGATED) &&
list_id != DETECT_SM_LIST_PMATCH) {
list_id != DETECT_SM_LIST_PMATCH &&
/* don't consider http_method, http_stat_msg, http_stat_code
* to automatically override longest stream match */
list_id != DETECT_SM_LIST_HMDMATCH &&
list_id != DETECT_SM_LIST_HSMDMATCH &&
list_id != DETECT_SM_LIST_HSCDMATCH) {
has_non_negated_non_stream_pattern[sig] = 1;
}

Loading…
Cancel
Save