datasets: fix parsing "load" when preceded by a space.

Ticket: #6777

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a033b026c58fa82f6c54c777408d512a59d553fa..969d7da73f9e394b07539d038caf97894c43d93f 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Change Log
 
+## 1.3.1 - unreleased
+- Fix detecting dataset "load" when preceded by a space:
+  https://redmine.openinfosecfoundation.org/issues/6777
+
 ## 1.3.0 - 2023-07-07
 
 - Fix loading of configuration files specified in update.yaml:

diff --git a/suricata/update/main.py b/suricata/update/main.py
index 4a0e7a6dfa2b67e2f81e88bfa74269b7ae61173d..455a3d5ce34cf7dd864fb3026d3c63df39f6ca48 100644 (file)
--- a/suricata/update/main.py
+++ b/suricata/update/main.py
@@ -435,8 +435,7 @@ def manage_classification(suriconf, files):
 def handle_dataset_files(rule, dep_files):
     if not rule.enabled:
         return
-
-    dataset_load = [el.strip() for el in rule.dataset.split(",") if el.startswith("load")]
+    dataset_load = [el for el in (el.strip() for el in rule.dataset.split(",")) if el.startswith("load")]
     if not dataset_load:
         # No dataset load found.
         return