disallow file_data with flow:to_server/from_client

diff --git a/src/detect-file-data.c b/src/detect-file-data.c
index f4e2842a7a2b3f8dd6c02c1dd5b1e4129e5c8692..d302c8bfcf287009c16e6fcfb6b7824893234fe5 100644 (file)
--- a/src/detect-file-data.c
+++ b/src/detect-file-data.c
@@ -72,7 +72,10 @@ void DetectFiledataRegister(void) {
 static int DetectFiledataSetup (DetectEngineCtx *de_ctx, Signature *s, char *str)
 {
     SCEnter();
-
+    if (s->init_flags & SIG_FLAG_INIT_FLOW && s->flags & SIG_FLAG_TOSERVER && !(s->flags & SIG_FLAG_TOCLIENT)) {
+        SCLogError(SC_ERR_INVALID_SIGNATURE, "Can't use file_data with flow:to_server or from_client with http.");
+        return -1;
+    }
     s->init_flags |= SIG_FLAG_INIT_FILE_DATA;
 
     return 0;