From: Victor Julien Date: Wed, 1 Mar 2017 22:23:04 +0000 (+0100) Subject: file-store: fix force store X-Git-Tag: suricata-4.0.0-beta1~260 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=15d26f14e16150f3dcc3d238c76eb1eb490e1faa;p=thirdparty%2Fsuricata.git file-store: fix force store --- diff --git a/src/detect.c b/src/detect.c index 657f831aed..7b0881ee95 100644 --- a/src/detect.c +++ b/src/detect.c @@ -895,7 +895,9 @@ static inline void DetectPostInspectFileFlagsUpdate(Flow *pflow, const SigGroupHead *sgh, uint8_t direction) { /* see if this sgh requires us to consider file storing */ - if (sgh == NULL || sgh->filestore_cnt == 0) { + if (!FileForceFilestore() && (sgh == NULL || + sgh->filestore_cnt == 0)) + { FileDisableStoring(pflow, direction); } #ifdef HAVE_MAGIC