]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect/alert: ensure reject action is applied
authorJuliana Fajardini <jufajardini@oisf.net>
Thu, 28 Jul 2022 23:05:47 +0000 (20:05 -0300)
committerJuliana Fajardini <jufajardini@oisf.net>
Wed, 31 Aug 2022 16:19:41 +0000 (13:19 -0300)
commit32f90371d90977c3b0ed1bc96c35c7bcee2e35ca
treeeacc91ec263fa1f8b8edcdc6e2aa23cee6c93bf9
parent6742ecbc9e87a49b71f529dfd1cf35264400d916
detect/alert: ensure reject action is applied

Bug 5458 states that the reject action is no longer working. While SV
tests that use the reject action still pass, it indeed seems that a
regression has happened with commit aa93984, because while the
function that applies rule actions to the flow (RuleActionToFlow) does
check for the reject action, the newly added function PacketApply
SignatureActions only checks for ACTION_DROP or ACTION_PASS when
deciding to call RuleActionToFlow.

Bug #5458

(cherry picked from commit 1f54e8611ab39ce3509280574d137df23c325658)
src/detect-engine-alert.c
src/detect-engine-threshold.c