From aac15854b41c7db199e6c88ded3b1029341c6b33 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Tue, 7 Nov 2017 11:28:01 +0100 Subject: [PATCH] detect: no tcp flags in mask for pseudo packets --- src/detect-engine-build.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detect-engine-build.c b/src/detect-engine-build.c index 29d6cd9a76..15f3c6fbd7 100644 --- a/src/detect-engine-build.c +++ b/src/detect-engine-build.c @@ -421,7 +421,7 @@ PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto, (*mask) |= SIG_MASK_REQUIRE_ENGINE_EVENT; } - if (PKT_IS_TCP(p)) { + if (!(PKT_IS_PSEUDOPKT(p)) && PKT_IS_TCP(p)) { if ((p->tcph->th_flags & MASK_TCP_INITDEINIT_FLAGS) != 0) { (*mask) |= SIG_MASK_REQUIRE_FLAGS_INITDEINIT; }