From: Victor Julien <victor@inliniac.net>
Date: Tue, 7 Nov 2017 10:28:01 +0000 (+0100)
Subject: detect: no tcp flags in mask for pseudo packets
X-Git-Tag: suricata-4.1.0-beta1~417
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=aac15854b41c7db199e6c88ded3b1029341c6b33;p=thirdparty%2Fsuricata.git

detect: no tcp flags in mask for pseudo packets
---

diff --git a/src/detect-engine-build.c b/src/detect-engine-build.c
index 29d6cd9a76..15f3c6fbd7 100644
--- a/src/detect-engine-build.c
+++ b/src/detect-engine-build.c
@@ -421,7 +421,7 @@ PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
         (*mask) |= SIG_MASK_REQUIRE_ENGINE_EVENT;
     }
 
-    if (PKT_IS_TCP(p)) {
+    if (!(PKT_IS_PSEUDOPKT(p)) && PKT_IS_TCP(p)) {
         if ((p->tcph->th_flags & MASK_TCP_INITDEINIT_FLAGS) != 0) {
             (*mask) |= SIG_MASK_REQUIRE_FLAGS_INITDEINIT;
         }