From 88a3ba52d62020d023a4fe0084d340c20a63b6e1 Mon Sep 17 00:00:00 2001
From: Andreas Herz <andi@geekosphere.org>
Date: Sun, 30 Jul 2017 00:14:50 +0200
Subject: [PATCH] rule-parser: ignore duplicated msg keyword

---
 src/detect-msg.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/detect-msg.c b/src/detect-msg.c
index 6195f00a47..5d5a9ad503 100644
--- a/src/detect-msg.c
+++ b/src/detect-msg.c
@@ -103,6 +103,10 @@ static int DetectMsgSetup (DetectEngineCtx *de_ctx, Signature *s, const char *ms
         }
     }
 
+    if (s->msg != NULL) {
+        SCLogError(SC_ERR_INVALID_RULE_ARGUMENT, "Duplicated 'msg:' keyword detected!");
+        goto error;
+    }
     s->msg = SCStrdup(str);
     if (s->msg == NULL)
         goto error;
-- 
2.47.2