From: Jeff Lucovsky <jlucovsky@oisf.net>
Date: Thu, 18 May 2023 12:53:59 +0000 (-0400)
Subject: detect/byte-math: Support multiplication operator
X-Git-Tag: suricata-6.0.13~16
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e027080a4e3fab50b4c794ce488d91396963c909;p=thirdparty%2Fsuricata.git

detect/byte-math: Support multiplication operator

Issue: 6070

This commit adds support for the multiplication operator to byte-math.
The regex for parsing the keyword options was missing the `*` character.
---

diff --git a/src/detect-bytemath.c b/src/detect-bytemath.c
index 5acd354c13..164384a0ea 100644
--- a/src/detect-bytemath.c
+++ b/src/detect-bytemath.c
@@ -76,7 +76,7 @@
     "^"                                                                                            \
     "\\s*(bytes)\\s*(\\d+)\\s*"                                                                    \
     ",\\s*(offset)\\s*([-]?\\d+)\\s*"                                                              \
-    ",\\s*(oper)\\s*([-+\\/]{1}|<<|>>)\\s*"                                                        \
+    ",\\s*(oper)\\s*([-+\\/\\*]{1}|<<|>>)\\s*"                                                     \
     ",\\s*(rvalue)\\s*(\\w+)\\s*"                                                                  \
     ",\\s*(result)\\s*(\\w+)\\s*"                                                                  \
     "(?:,\\s*(relative)\\s*)?"                                                                     \