]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
detect/parse: try to set flow direction for sigs w/o explict app proto as well
authorVictor Julien <victor@inliniac.net>
Wed, 15 Aug 2018 10:15:26 +0000 (12:15 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 20 Aug 2018 09:03:00 +0000 (11:03 +0200)
src/detect-parse.c

index 34a3f75881525a8b711d6d21825d0a1bebd01739..437e4dfecd4b48dabb02fe234aac04b0480977e2 100644 (file)
@@ -1564,7 +1564,7 @@ static int SigValidate(DetectEngineCtx *de_ctx, Signature *s)
         if (s->init_data->smlists[x]) {
             const DetectEngineAppInspectionEngine *app = de_ctx->app_inspect_engines;
             for ( ; app != NULL; app = app->next) {
-                if (app->sm_list == x && s->alproto == app->alproto) {
+                if (app->sm_list == x && ((s->alproto == app->alproto) || s->alproto == 0)) {
                     SCLogDebug("engine %s dir %d alproto %d",
                             DetectBufferTypeGetNameById(de_ctx, app->sm_list),
                             app->dir, app->alproto);