From: Philippe Antoine <pantoine@oisf.net>
Date: Wed, 19 Jun 2024 11:42:32 +0000 (+0200)
Subject: detect: add to signature mask for decode events
X-Git-Tag: suricata-8.0.0-beta1~1125
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0a953fe1ce2a030916b094aac7618d039ecff485;p=thirdparty%2Fsuricata.git

detect: add to signature mask for decode events

Ticket: 6291
---

diff --git a/src/detect-engine-build.c b/src/detect-engine-build.c
index 8f292025a3..f69def1c7d 100644
--- a/src/detect-engine-build.c
+++ b/src/detect-engine-build.c
@@ -536,9 +536,12 @@ static int SignatureCreateMask(Signature *s)
                 }
                 break;
             }
+            case DETECT_DECODE_EVENT:
+                // fallthrough
+            case DETECT_STREAM_EVENT:
+                // fallthrough
             case DETECT_AL_APP_LAYER_EVENT:
-                s->mask |= SIG_MASK_REQUIRE_ENGINE_EVENT;
-                break;
+                // fallthrough
             case DETECT_ENGINE_EVENT:
                 s->mask |= SIG_MASK_REQUIRE_ENGINE_EVENT;
                 break;