From dd36d089d2e953b703f169a74baa5f3e786f1ef3 Mon Sep 17 00:00:00 2001
From: Philippe Antoine <pantoine@oisf.net>
Date: Thu, 6 Mar 2025 07:24:25 +0100
Subject: [PATCH] detect: backport tests for file.data to 7

Ticket: 7577
---
 tests/file-match-crossed/test.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/tests/file-match-crossed/test.yaml b/tests/file-match-crossed/test.yaml
index 95d4dfe0c..744f682d0 100644
--- a/tests/file-match-crossed/test.yaml
+++ b/tests/file-match-crossed/test.yaml
@@ -1,5 +1,5 @@
 requires:
-  min-version: 8
+  min-version: 7
 
 args:
   - -k none
@@ -16,26 +16,32 @@ checks:
         event_type: alert
         alert.signature_id: 2
   - filter:
+      # Suricata 7 does not manage to decode the second file (its size is 0)
+      min-version: 8
       count: 1
       match:
         event_type: alert
         alert.signature_id: 3
   - filter:
+      min-version: 8
       count: 1
       match:
         event_type: alert
         alert.signature_id: 4
   - filter:
+      min-version: 8
       count: 1
       match:
         event_type: alert
         alert.signature_id: 5
   - filter:
+      min-version: 8
       count: 1
       match:
         event_type: alert
         alert.signature_id: 6
   - filter:
+      min-version: 8
       count: 1
       match:
         event_type: alert
-- 
2.47.2