From: Victor Julien <vjulien@oisf.net>
Date: Tue, 3 Dec 2024 15:51:26 +0000 (+0100)
Subject: detect: fix decoder only events
X-Git-Tag: suricata-7.0.8~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a8f358066397b68dd4075d175157ee97f0bf7e11;p=thirdparty%2Fsuricata.git

detect: fix decoder only events

Add missing setup part of the decoder event sgh.

Bug: #7414.
(cherry picked from commit b23fa51e331141a2743ef7ded4ec01db951ec697)
---

diff --git a/src/detect-engine-build.c b/src/detect-engine-build.c
index c34a8adaad..30a57d2a42 100644
--- a/src/detect-engine-build.c
+++ b/src/detect-engine-build.c
@@ -2070,6 +2070,7 @@ int SigAddressPrepareStage4(DetectEngineCtx *de_ctx)
     if (de_ctx->decoder_event_sgh != NULL) {
         /* no need to set filestore count here as that would make a
          * signature not decode event only. */
+        SigGroupHeadBuildNonPrefilterArray(de_ctx, de_ctx->decoder_event_sgh);
     }
 
     int dump_grouping = 0;