From: Victor Julien <victor@inliniac.net>
Date: Fri, 7 Nov 2014 22:43:45 +0000 (+0100)
Subject: Start rule inspect with mask check
X-Git-Tag: suricata-3.1RC1~381
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=18dd54dfa77eddecc8a94da0a1e30041abfccddf;p=thirdparty%2Fsuricata.git

Start rule inspect with mask check
---

diff --git a/src/detect.c b/src/detect.c
index 2c44c8fd56..34ae91b49f 100644
--- a/src/detect.c
+++ b/src/detect.c
@@ -1514,6 +1514,9 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh
 
         SCLogDebug("inspecting signature id %"PRIu32"", s->id);
 
+        if ((s->mask & mask) != s->mask)
+            goto next;
+
         /* if the sig has alproto and the session as well they should match */
         if (likely(sflags & SIG_FLAG_APPLAYER)) {
             if (s->alproto != ALPROTO_UNKNOWN && s->alproto != alproto) {