detect: fix stateful drops for rate_filter

(cherry picked from commit 418cc1fe947dd96a6cadb13fa1fbb5c9d5fb7ce0)

diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c
index 04c5f3e5679364c66aae8bcaf5d4c6d6b421cd6b..a40f992ced1de748842a6849d08d3f70b7543a7e 100644 (file)
--- a/src/detect-engine-alert.c
+++ b/src/detect-engine-alert.c
@@ -322,7 +322,7 @@ static inline void FlowApplySignatureActions(
      * - sig is IP or PD only
      * - match is in applayer
      * - match is in stream */
-    if (s->action & (ACTION_DROP | ACTION_PASS)) {
+    if (pa->action & (ACTION_DROP | ACTION_PASS)) {
         if ((pa->flags & (PACKET_ALERT_FLAG_STATE_MATCH | PACKET_ALERT_FLAG_STREAM_MATCH)) ||
                 (s->flags & (SIG_FLAG_IPONLY | SIG_FLAG_LIKE_IPONLY | SIG_FLAG_PDONLY |
                                     SIG_FLAG_APPLAYER))) {