From: Victor Julien <vjulien@oisf.net>
Date: Thu, 1 Jun 2023 06:00:54 +0000 (+0200)
Subject: detect: fix stateful drops for rate_filter
X-Git-Tag: suricata-6.0.13~38
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=644a231e9ac2860abce0a1e3961aea0a78666256;p=thirdparty%2Fsuricata.git

detect: fix stateful drops for rate_filter

(cherry picked from commit 418cc1fe947dd96a6cadb13fa1fbb5c9d5fb7ce0)
---

diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c
index 04c5f3e567..a40f992ced 100644
--- a/src/detect-engine-alert.c
+++ b/src/detect-engine-alert.c
@@ -322,7 +322,7 @@ static inline void FlowApplySignatureActions(
      * - sig is IP or PD only
      * - match is in applayer
      * - match is in stream */
-    if (s->action & (ACTION_DROP | ACTION_PASS)) {
+    if (pa->action & (ACTION_DROP | ACTION_PASS)) {
         if ((pa->flags & (PACKET_ALERT_FLAG_STATE_MATCH | PACKET_ALERT_FLAG_STREAM_MATCH)) ||
                 (s->flags & (SIG_FLAG_IPONLY | SIG_FLAG_LIKE_IPONLY | SIG_FLAG_PDONLY |
                                     SIG_FLAG_APPLAYER))) {