]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect/pcre: avoid infinite loop after negated pcre
authorPhilippe Antoine <pantoine@oisf.net>
Tue, 28 Jan 2025 14:02:45 +0000 (15:02 +0100)
committerVictor Julien <vjulien@oisf.net>
Mon, 17 Mar 2025 09:05:14 +0000 (10:05 +0100)
commitb14c67cbdf25fa6c7ffe0d04ddf3ebe67b12b50b
treee72bffe1e6490e35368bbf40d48c4e939f9aa378
parent66e47a1983bee06fb85418d8ca053d0d9a372474
detect/pcre: avoid infinite loop after negated pcre

Ticket: 7526

The usage of negated pcre, followed by other relative payload
content keywords could lead to an infinite loop.

This is because regular (not negated) pcre can test multiple
occurences, but negated pcre should be tried only once.
src/detect-engine-content-inspection.c