decoder events: fix bug causing some rules not to be inspected if the decoder complet...

diff --git a/src/detect.c b/src/detect.c
index c9224d678d05a3b95ba7d97d1665b35807d05caa..4aafca342730343d9f2640e25fc8e023c615e1e0 100644 (file)
--- a/src/detect.c
+++ b/src/detect.c
@@ -3116,14 +3116,16 @@ int SigAddressPrepareStage2(DetectEngineCtx *de_ctx) {
         SCLogDebug("tmp_s->id %"PRIu32, tmp_s->id);
         if (tmp_s->flags & SIG_FLAG_IPONLY) {
             IPOnlyAddSignature(de_ctx, &de_ctx->io_ctx, tmp_s);
-        } else if (tmp_s->init_flags & SIG_FLAG_INIT_DEONLY) {
-            DetectEngineAddDecoderEventSig(de_ctx, tmp_s);
         } else {
             DetectEngineLookupFlowAddSig(de_ctx, tmp_s, AF_INET);
             DetectEngineLookupFlowAddSig(de_ctx, tmp_s, AF_INET6);
             DetectEngineLookupFlowAddSig(de_ctx, tmp_s, AF_UNSPEC);
         }
 
+        if (tmp_s->init_flags & SIG_FLAG_INIT_DEONLY) {
+            DetectEngineAddDecoderEventSig(de_ctx, tmp_s);
+        }
+
         sigs++;
     }