doc/byte_math: Add divide by 0 discussion.

Issue: 5945
pull/8723/head
Jeff Lucovsky 3 years ago committed by Victor Julien
parent 38c5e89e29
commit fd46c93a8f

@ -276,6 +276,8 @@ See :doc:`http-keywords` for all HTTP keywords.
uint32 value. Snort rejects ``rvalue`` values of ``0`` and requires
values to be between ``[1..max-uint32 value]``.
- Suricata will never match if there's a zero divisor. Division by 0 is undefined.
``isdataat`` Keyword
--------------------

@ -441,6 +441,8 @@ an existing variable or a specified value.
When ``relative`` is included, there must be a previous ``content`` or ``pcre`` match.
Note: if ``oper`` is ``/`` and the divisor is 0, there will never be a match on the ``byte_math`` keyword.
The result can be stored in a result variable and referenced by
other rule options later in the rule.

Loading…
Cancel
Save