]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
detect: no tcp flags in mask for pseudo packets
authorVictor Julien <victor@inliniac.net>
Tue, 7 Nov 2017 10:28:01 +0000 (11:28 +0100)
committerVictor Julien <victor@inliniac.net>
Wed, 20 Dec 2017 09:50:51 +0000 (10:50 +0100)
src/detect-engine-build.c

index 29d6cd9a7668ebe1642c5cf6f1087dd988e07d7c..15f3c6fbd7ecec09e0d23b34946a2d09c3c76189 100644 (file)
@@ -421,7 +421,7 @@ PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
         (*mask) |= SIG_MASK_REQUIRE_ENGINE_EVENT;
     }
 
-    if (PKT_IS_TCP(p)) {
+    if (!(PKT_IS_PSEUDOPKT(p)) && PKT_IS_TCP(p)) {
         if ((p->tcph->th_flags & MASK_TCP_INITDEINIT_FLAGS) != 0) {
             (*mask) |= SIG_MASK_REQUIRE_FLAGS_INITDEINIT;
         }