fix for bug #574.

More of a temporary solution to prevent any possible FPs. Disable content inspection bypass for mpm patterns.
13 years ago · fd977601b6
parent 51c9955c79
commit fd977601b6
1 changed files with 3 additions and 3 deletions
--- a/src/detect-engine-content-inspection.c
+++ b/src/detect-engine-content-inspection.c
@ -116,9 +116,9 @@ int DetectEngineContentInspection(DetectEngineCtx *de_ctx, DetectEngineThreadCtx
        /* we might have already have this content matched by the mpm.
         * (if there is any other reason why we'd want to avoid checking
         *  it here, please fill it in) */
-        if (cd->flags & DETECT_CONTENT_NO_DOUBLE_INSPECTION_REQUIRED) {
-            goto match;
-        }
+        //if (cd->flags & DETECT_CONTENT_NO_DOUBLE_INSPECTION_REQUIRED) {
+        //    goto match;
+        //}

        /* rule parsers should take care of this */
 #ifdef DEBUG