]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
detect/files: fix inspection issues with 'alert ip'
authorVictor Julien <victor@inliniac.net>
Tue, 14 Aug 2018 09:12:37 +0000 (11:12 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 20 Aug 2018 09:03:00 +0000 (11:03 +0200)
Don't track the 'skipped' engines as matches.

src/detect.c

index 39b395728fca12a33c13f3e9c10cf8b2653075e5..6aaa6996adb4bd65d0a62f208a35cb741965b261 100644 (file)
@@ -1211,9 +1211,7 @@ static bool DetectRunTxInspectRule(ThreadVars *tv,
             /* special case: file_data on 'alert tcp' will have engines
              * in the list that are not for us. Bypass with assume match */
             } else if (unlikely(engine->alproto != 0 && engine->alproto != f->alproto)) {
-                inspect_flags |= BIT_U32(engine->id);
                 engine = engine->next;
-                total_matches++;
                 continue;
             } else {
                 KEYWORD_PROFILING_SET_LIST(det_ctx, engine->sm_list);