From: Bhargava Jandhyala (bjandhya) <bjandhya@cisco.com>
Date: Wed, 27 Jan 2021 07:51:28 +0000 (+0000)
Subject: Merge pull request #2719 in SNORT/snort3 from ~DIPANDIT/snort3:handle_stop_verdict... 
X-Git-Tag: 3.1.1.0~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=aa051b141304065f6ca8d5de0bab7f813a2eff6b;p=thirdparty%2Fsnort3.git

Merge pull request #2719 in SNORT/snort3 from ~DIPANDIT/snort3:handle_stop_verdict to master

Squashed commit of the following:

commit 7d259f788d761da3eacb91122e54d52c3e0ac4e3
Author: Dipto Pandit <dipandit@cisco.com>
Date:   Mon Jan 25 04:29:18 2021 -0500

    file_api: stop processing signature when type verdict is 'FILE_VERDICT_STOP'
---

diff --git a/src/file_api/file_lib.cc b/src/file_api/file_lib.cc
index 40b16011a..cad96ce73 100644
--- a/src/file_api/file_lib.cc
+++ b/src/file_api/file_lib.cc
@@ -454,6 +454,8 @@ bool FileContext::process(Packet* p, const uint8_t* file_data, int data_size,
             FileVerdict v = policy->type_lookup(p, this);
             if ( v != FILE_VERDICT_UNKNOWN )
             {
+                if (v == FILE_VERDICT_STOP)
+                    config_file_signature(false);
                 FileCache* file_cache = FileService::get_file_cache();
                 if (file_cache)
                     file_cache->apply_verdict(p, this, v, false, policy);