From: Victor Julien <victor@inliniac.net>
Date: Sat, 19 Sep 2015 17:33:14 +0000 (+0200)
Subject: detect: improve comments on mpm
X-Git-Tag: suricata-3.0RC1~142
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=df95d375bbe5c7ddfb1316baf8f2f025d22beb3d;p=thirdparty%2Fsuricata.git

detect: improve comments on mpm
---

diff --git a/src/detect.h b/src/detect.h
index 4b7b89c7d0..e35a07761c 100644
--- a/src/detect.h
+++ b/src/detect.h
@@ -449,10 +449,13 @@ typedef struct Signature_ {
     SigMatch *dsize_sm;
     /* the fast pattern added from this signature */
     SigMatch *mpm_sm;
-    /* helper for init phase */
+
+    /* track max length for content. Indirectly used in grouping:
+     * used to set SigGroupHead::mpm_content_maxlen */
     uint16_t mpm_content_maxlen;
     uint16_t mpm_uricontent_maxlen;
 
+    /* SigMatch list used for adding content and friends. E.g. file_data; */
     int list;
 
     /* Be careful, this pointer is only valid while parsing the sig,
@@ -986,6 +989,7 @@ typedef struct SigGroupHead_ {
     /* number of sigs in this head */
     SigIntId sig_cnt;
 
+    /* track max length for content. Used in grouping */
     uint16_t mpm_content_maxlen;
 
     /** array of masks, used to check multiple masks against