isdataat: add test for leading space

pull/2687/head
Victor Julien 9 years ago
parent 6142e88ed5
commit ea99099c64

@ -484,46 +484,42 @@ static int DetectIsdataatTestParse05(void)
static int DetectIsdataatTestParse06(void) static int DetectIsdataatTestParse06(void)
{ {
DetectEngineCtx *de_ctx = NULL; DetectEngineCtx *de_ctx = DetectEngineCtxInit();
int result = 0; FAIL_IF(de_ctx == NULL);
Signature *s = NULL;
DetectIsdataatData *data = NULL;
de_ctx = DetectEngineCtxInit();
if (de_ctx == NULL)
goto end;
de_ctx->flags |= DE_QUIET; de_ctx->flags |= DE_QUIET;
de_ctx->sig_list = SigInit(de_ctx, "alert tcp any any -> any any "
Signature *s = DetectEngineAppendSig(de_ctx, "alert tcp any any -> any any "
"(msg:\"Testing bytejump_body\"; " "(msg:\"Testing bytejump_body\"; "
"content:\"one\"; " "content:\"one\"; "
"isdataat:!4,relative; sid:1;)"); "isdataat:!4,relative; sid:1;)");
if (de_ctx->sig_list == NULL) { FAIL_IF(s == NULL);
goto end;
}
s = de_ctx->sig_list; FAIL_IF(s->sm_lists_tail[DETECT_SM_LIST_PMATCH] == NULL);
if (s->sm_lists_tail[DETECT_SM_LIST_PMATCH] == NULL) {
goto end; FAIL_IF_NOT(s->sm_lists_tail[DETECT_SM_LIST_PMATCH]->type == DETECT_ISDATAAT);
} DetectIsdataatData *data = (DetectIsdataatData *)s->sm_lists_tail[DETECT_SM_LIST_PMATCH]->ctx;
FAIL_IF_NOT(data->flags & ISDATAAT_RELATIVE);
FAIL_IF(data->flags & ISDATAAT_RAWBYTES);
FAIL_IF_NOT(data->flags & ISDATAAT_NEGATED);
result = 1; s = DetectEngineAppendSig(de_ctx, "alert tcp any any -> any any "
"(msg:\"Testing bytejump_body\"; "
"content:\"one\"; "
"isdataat: !4,relative; sid:2;)");
FAIL_IF(s == NULL);
result &= (s->sm_lists_tail[DETECT_SM_LIST_PMATCH]->type == DETECT_ISDATAAT); FAIL_IF(s->sm_lists_tail[DETECT_SM_LIST_PMATCH] == NULL);
FAIL_IF_NOT(s->sm_lists_tail[DETECT_SM_LIST_PMATCH]->type == DETECT_ISDATAAT);
data = (DetectIsdataatData *)s->sm_lists_tail[DETECT_SM_LIST_PMATCH]->ctx; data = (DetectIsdataatData *)s->sm_lists_tail[DETECT_SM_LIST_PMATCH]->ctx;
if ( !(data->flags & ISDATAAT_RELATIVE) ||
(data->flags & ISDATAAT_RAWBYTES) ||
!(data->flags & ISDATAAT_NEGATED) ) {
result = 0;
goto end;
}
end: FAIL_IF_NOT(data->flags & ISDATAAT_RELATIVE);
SigGroupCleanup(de_ctx); FAIL_IF(data->flags & ISDATAAT_RAWBYTES);
SigCleanSignatures(de_ctx); FAIL_IF_NOT(data->flags & ISDATAAT_NEGATED);
DetectEngineCtxFree(de_ctx); DetectEngineCtxFree(de_ctx);
return result; PASS;
} }
/** /**

Loading…
Cancel
Save