From: Ron Dempster (rdempste) <rdempste@cisco.com>
Date: Fri, 5 Aug 2022 14:38:01 +0000 (-0400)
Subject: managers: only publish the reloaded flow event for existing flows with an old policy
X-Git-Tag: 3.1.40.0~24
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ce54bf3653ad5a3e5bae39352b8df3d447413d69;p=thirdparty%2Fsnort3.git

managers: only publish the reloaded flow event for existing flows with an old policy
---

diff --git a/src/managers/inspector_manager.cc b/src/managers/inspector_manager.cc
index cc926718e..7562041b4 100644
--- a/src/managers/inspector_manager.cc
+++ b/src/managers/inspector_manager.cc
@@ -2096,7 +2096,7 @@ void InspectorManager::internal_execute(Packet* p)
     unsigned reload_id = SnortConfig::get_thread_reload_id();
     if ( p->flow )
     {
-        if ( p->flow->reload_id != reload_id )
+        if ( p->flow->reload_id && p->flow->reload_id != reload_id )
             DataBus::publish(FLOW_STATE_RELOADED_EVENT, p, p->flow);
     }
     else
diff --git a/src/network_inspectors/binder/binder.cc b/src/network_inspectors/binder/binder.cc
index 65359c6e7..f9e909010 100644
--- a/src/network_inspectors/binder/binder.cc
+++ b/src/network_inspectors/binder/binder.cc
@@ -578,8 +578,7 @@ public:
 
     void handle(DataEvent&, Flow* flow) override
     {
-        // If reload_id is zero, this is a new flow and is bound by FLOW_STATE_SETUP_EVENT
-        if (flow && flow->reload_id && Flow::FlowState::INSPECT == flow->flow_state)
+        if (flow && Flow::FlowState::INSPECT == flow->flow_state)
         {
             Binder* binder = InspectorManager::get_binder();
             if (binder)