From: Anoop Saldanha <poonaatsoc@gmail.com>
Date: Tue, 24 Apr 2012 07:33:09 +0000 (+0530)
Subject: bug 454 - Provide better error message when the user supplies a NULL address range
X-Git-Tag: suricata-1.3beta2~65
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0da93e84ca9b86bc0bb24fff6def78ded81eb1de;p=thirdparty%2Fsuricata.git

bug 454 - Provide better error message when the user supplies a NULL address range
---

diff --git a/src/detect-engine-address.c b/src/detect-engine-address.c
index c10d2cd20a..621d20592a 100644
--- a/src/detect-engine-address.c
+++ b/src/detect-engine-address.c
@@ -1100,7 +1100,9 @@ int DetectAddressMergeNot(DetectAddressHead *gh, DetectAddressHead *ghn)
     /* check if the negated list covers the entire ip space. If so
      * the user screwed up the rules/vars. */
     if (DetectAddressIsCompleteIPSpace(ghn) == 1) {
-        SCLogDebug("DetectAddressMergeNot: complete IP space negated");
+        SCLogError(SC_ERR_INVALID_SIGNATURE, "Complete IP space negated.  "
+                   "Rule address range is NIL.  Probably have a !any or "
+                   "a address range that supplies a NULL address range");
         goto error;
     }