Make sure we don't try to 'verdict' the fake PKT_PSEUDO_STREAM_END packets.

src/source-ipfw.c

@@ -539,6 +539,11 @@ TmEcode VerdictIPFW(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq, Pack
 
     SCEnter();
 
+    /* can't verdict a "fake" packet */
+    if (p->flags & PKT_PSEUDO_STREAM_END) {
+        SCReturnInt(TM_ECODE_OK);
+    }
+
     /* This came from NFQ.
      *  if this is a tunnel packet we check if we are ready to verdict
      * already. */

src/source-nfq.c

@@ -588,6 +588,11 @@ TmEcode VerdictNFQ(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq, Packe
 
     NFQThreadVars *ntv = (NFQThreadVars *)data;
 
+    /* can't verdict a "fake" packet */
+    if (p->flags & PKT_PSEUDO_STREAM_END) {
+        SCReturnInt(TM_ECODE_OK);
+    }
+
     /* if this is a tunnel packet we check if we are ready to verdict
      * already. */
     if (IS_TUNNEL_PKT(p)) {