From e027080a4e3fab50b4c794ce488d91396963c909 Mon Sep 17 00:00:00 2001 From: Jeff Lucovsky Date: Thu, 18 May 2023 08:53:59 -0400 Subject: [PATCH] detect/byte-math: Support multiplication operator Issue: 6070 This commit adds support for the multiplication operator to byte-math. The regex for parsing the keyword options was missing the `*` character. --- src/detect-bytemath.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detect-bytemath.c b/src/detect-bytemath.c index 5acd354c13..164384a0ea 100644 --- a/src/detect-bytemath.c +++ b/src/detect-bytemath.c @@ -76,7 +76,7 @@ "^" \ "\\s*(bytes)\\s*(\\d+)\\s*" \ ",\\s*(offset)\\s*([-]?\\d+)\\s*" \ - ",\\s*(oper)\\s*([-+\\/]{1}|<<|>>)\\s*" \ + ",\\s*(oper)\\s*([-+\\/\\*]{1}|<<|>>)\\s*" \ ",\\s*(rvalue)\\s*(\\w+)\\s*" \ ",\\s*(result)\\s*(\\w+)\\s*" \ "(?:,\\s*(relative)\\s*)?" \ -- 2.47.2