From 2f8e83c539d111b10cb6d024b2734e3d60e37225 Mon Sep 17 00:00:00 2001 From: Anoop Saldanha Date: Wed, 3 Oct 2012 09:29:13 +0530 Subject: [PATCH] fix for #562. disable inspection bypass for stream mpm patterns. --- src/detect-engine-content-inspection.c | 9 --------- 1 file changed, 9 deletions(-) diff --git a/src/detect-engine-content-inspection.c b/src/detect-engine-content-inspection.c index f887b14140..9746ad7219 100644 --- a/src/detect-engine-content-inspection.c +++ b/src/detect-engine-content-inspection.c @@ -112,15 +112,6 @@ int DetectEngineContentInspection(DetectEngineCtx *de_ctx, DetectEngineThreadCtx DetectContentData *cd = (DetectContentData *)sm->ctx; SCLogDebug("inspecting content %"PRIu32" buffer_len %"PRIu32, cd->id, buffer_len); - /* we might have already have this content matched by the mpm. - * (if there is any other reason why we'd want to avoid checking - * it here, please fill it in) */ - if (inspection_mode == DETECT_ENGINE_CONTENT_INSPECTION_MODE_STREAM) { - if (cd->flags & DETECT_CONTENT_STREAM_MPM && !(cd->flags & DETECT_CONTENT_NEGATED)) { - goto match; - } - } - /* rule parsers should take care of this */ #ifdef DEBUG BUG_ON(cd->depth != 0 && cd->depth <= cd->offset); -- 2.47.3