]> git.ipfire.org Git - thirdparty/suricata.git/commit
Fix address parsing issues 823/head
authorVictor Julien <victor@inliniac.net>
Thu, 6 Feb 2014 08:38:58 +0000 (09:38 +0100)
committerVictor Julien <victor@inliniac.net>
Thu, 6 Feb 2014 09:08:48 +0000 (10:08 +0100)
commit1ac805f1b3018dad46e87eeb77fb8ee4116048fa
tree78bb5bd8ec1025a576b547428701a6449d184b76
parent55f8672a0469d87445591b93ad955e492c586943
Fix address parsing issues

Fix issue where negating a range containing a negation would fail.

E.g. HOME_NET: [192.168.0.0/16,!192.168.10.0], can be used in a rule
     as !$HOME_NET.

Also, fix another parsing issue:

If the negation range would be bigger than the 'positive' range, parsing
wouldn't be correct. Now this case is rejected.

E.g. [192.168.1.3,!192.168.0.0/16] is now explicitly rejected

Ticket 1079.
src/detect-engine-address.c
src/detect-parse.c
src/util-rule-vars.c