detect/urilen: fix applying urilen as depth

If urilen induced depth was set, later DetectContentPropagateLimits()
would apply a wrong depth setting, leading to a false negative in
some cases.

Bug: #5929.
pull/8624/head
Victor Julien 3 years ago
parent 50dba4665d
commit ba7db2583b

@ -202,6 +202,7 @@ void DetectUrilenApplyToContent(Signature *s, int list)
if (cd->depth == 0 || cd->depth > high) {
cd->depth = high;
cd->flags |= DETECT_CONTENT_DEPTH;
SCLogDebug("updated %u, content %u to have depth %u "
"because of urilen.", s->id, cd->id, cd->depth);
}

Loading…
Cancel
Save