Merge pull request #2719 in SNORT/snort3 from ~DIPANDIT/snort3:handle_stop_verdict...

Squashed commit of the following:

commit 7d259f788d761da3eacb91122e54d52c3e0ac4e3
Author: Dipto Pandit <dipandit@cisco.com>
Date:   Mon Jan 25 04:29:18 2021 -0500

    file_api: stop processing signature when type verdict is 'FILE_VERDICT_STOP'

diff --git a/src/file_api/file_lib.cc b/src/file_api/file_lib.cc
index 40b16011a1ca61373e5bd5bd8553d6d92fd09d1c..cad96ce7317a073cd3dc03cb1f750b4c5de0784a 100644 (file)
--- a/src/file_api/file_lib.cc
+++ b/src/file_api/file_lib.cc
@@ -454,6 +454,8 @@ bool FileContext::process(Packet* p, const uint8_t* file_data, int data_size,
             FileVerdict v = policy->type_lookup(p, this);
             if ( v != FILE_VERDICT_UNKNOWN )
             {
+                if (v == FILE_VERDICT_STOP)
+                    config_file_signature(false);
                 FileCache* file_cache = FileService::get_file_cache();
                 if (file_cache)
                     file_cache->apply_verdict(p, this, v, false, policy);