Fixup ip_proto keyword.

src/detect-engine-proto.c

@@ -73,6 +73,7 @@ int DetectProtoParse(DetectProto *dp, char *str) {
     } else if (strcasecmp(str,"ip") == 0) {
         /* Proto "ip" is treated as an "any" */
         dp->flags |= DETECT_PROTO_ANY;
+        memset(dp->proto, 0xff, sizeof(dp->proto));
     } else {
         uint8_t proto_u8; /* Used to avoid sign extension */
 

src/detect-ipproto.c

@@ -166,7 +166,10 @@ int DetectIPProtoSetup(DetectEngineCtx *de_ctx, Signature *s,
     data = DetectIPProtoParse((const char *)optstr);
     if (data == NULL) goto error;
 
+    /* reset our "any" (or "ip") state */
     s->proto.flags &= ~DETECT_PROTO_ANY;
+    memset(s->proto.proto, 0x00, sizeof(s->proto.proto));
+
     switch (data->op) {
         case DETECT_IPPROTO_OP_EQ:
             s->proto.proto[data->proto/8] |= 1 << (data->proto%8);