smtp: fix file_data inspection

Continue tracking data if API is used with detect. Detection engine
then manages the tracking.

Bug #2395.

diff --git a/src/util-file.c b/src/util-file.c
index 677938e0bd3bc4483a49c37dc2933b25e57dcbdb..4c93a32b6fd2ea23e7a8020f1d1e43618ef2876d 100644 (file)
--- a/src/util-file.c
+++ b/src/util-file.c
@@ -600,7 +600,8 @@ static int FileAppendDataDo(File *ff, const uint8_t *data, uint32_t data_len)
         SCReturnInt(-1);
     }
 
-    if (FileStoreNoStoreCheck(ff) == 1) {
+    if ((ff->flags & FILE_USE_DETECT) == 0 &&
+            FileStoreNoStoreCheck(ff) == 1) {
 #ifdef HAVE_NSS
         int hash_done = 0;
         /* no storage but forced hashing */