From: Victor Julien <vjulien@oisf.net>
Date: Tue, 5 Mar 2024 09:03:15 +0000 (+0100)
Subject: detect/content: fix wrong value for depth check
X-Git-Tag: suricata-8.0.0-beta1~1099
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f02864875068e58609e4c9738a874ea32cebcfe8;p=thirdparty%2Fsuricata.git

detect/content: fix wrong value for depth check

Limits propegation checked for DETECT_DEPTH as a content flag,
which appears to have worked by chance. After reshuffling the
keyword id's it no longer worked. This patch uses the proper
flag DETECT_CONTENT_DEPTH.
---

diff --git a/src/detect-content.c b/src/detect-content.c
index 2f98840005..6d3852ecc5 100644
--- a/src/detect-content.c
+++ b/src/detect-content.c
@@ -556,7 +556,7 @@ static void PropagateLimits(Signature *s, SigMatch *sm_head)
                 SCLogDebug("stored: offset %u depth %u offset_plus_pat %u", offset, depth,
                         offset_plus_pat);
 
-                if ((cd->flags & (DETECT_DEPTH | DETECT_CONTENT_WITHIN)) == 0) {
+                if ((cd->flags & (DETECT_CONTENT_DEPTH | DETECT_CONTENT_WITHIN)) == 0) {
                     if (depth)
                         SCLogDebug("no within, reset depth");
                     depth = 0;