From df95d375bbe5c7ddfb1316baf8f2f025d22beb3d Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Sat, 19 Sep 2015 19:33:14 +0200 Subject: [PATCH] detect: improve comments on mpm --- src/detect.h | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/detect.h b/src/detect.h index 4b7b89c7d0..e35a07761c 100644 --- a/src/detect.h +++ b/src/detect.h @@ -449,10 +449,13 @@ typedef struct Signature_ { SigMatch *dsize_sm; /* the fast pattern added from this signature */ SigMatch *mpm_sm; - /* helper for init phase */ + + /* track max length for content. Indirectly used in grouping: + * used to set SigGroupHead::mpm_content_maxlen */ uint16_t mpm_content_maxlen; uint16_t mpm_uricontent_maxlen; + /* SigMatch list used for adding content and friends. E.g. file_data; */ int list; /* Be careful, this pointer is only valid while parsing the sig, @@ -986,6 +989,7 @@ typedef struct SigGroupHead_ { /* number of sigs in this head */ SigIntId sig_cnt; + /* track max length for content. Used in grouping */ uint16_t mpm_content_maxlen; /** array of masks, used to check multiple masks against -- 2.47.2