From abe3f6e6ef13fef4f8b1cadeeea2274b32f33642 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Fri, 10 Jul 2020 10:38:14 +0200 Subject: [PATCH] rfb: set app proto for signature keyword rfb.secresult --- src/detect-rfb-secresult.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/detect-rfb-secresult.c b/src/detect-rfb-secresult.c index 1f4dd00952..fcf2857427 100644 --- a/src/detect-rfb-secresult.c +++ b/src/detect-rfb-secresult.c @@ -223,6 +223,9 @@ static int DetectRfbSecresultSetup (DetectEngineCtx *de_ctx, Signature *s, const DetectRfbSecresultData *de = NULL; SigMatch *sm = NULL; + if (DetectSignatureSetAppProto(s, ALPROTO_RFB) < 0) + return -1; + de = DetectRfbSecresultParse(rawstr); if (de == NULL) goto error; -- 2.47.2