detect/frames: fix too strict debug check

Frame::len is -1 if it is still unknown. Handle that in the debug
check.

diff --git a/src/detect-engine-frame.c b/src/detect-engine-frame.c
index 647456e2709ec3fcb697435ca00af3ae591f8295..7b81108f806b4bc41c32ff7e094c19f11a38b011 100644 (file)
--- a/src/detect-engine-frame.c
+++ b/src/detect-engine-frame.c
@@ -89,7 +89,7 @@ static void PrefilterMpmFrame(DetectEngineThreadCtx *det_ctx, const void *pectx,
             det_ctx, ctx->transforms, p, frames, frame, ctx->list_id, idx, true);
     if (buffer == NULL)
         return;
-    DEBUG_VALIDATE_BUG_ON(buffer->orig_len > frame->len);
+    DEBUG_VALIDATE_BUG_ON(frame->len >= 0 && buffer->orig_len > frame->len);
 
     const uint32_t data_len = buffer->inspect_len;
     const uint8_t *data = buffer->inspect;