From: Anoop Saldanha <anoopsaldanha@gmail.com>
Date: Thu, 4 Oct 2012 07:29:58 +0000 (+0530)
Subject: fix for bug #574.
X-Git-Tag: suricata-1.4beta2~11
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F118%2Fhead;p=thirdparty%2Fsuricata.git

fix for bug #574.

More of a temporary solution to prevent any possible FPs.  Disable content
inspection bypass for mpm patterns.
---

diff --git a/src/detect-engine-content-inspection.c b/src/detect-engine-content-inspection.c
index 6956052f14..2546f7daeb 100644
--- a/src/detect-engine-content-inspection.c
+++ b/src/detect-engine-content-inspection.c
@@ -116,9 +116,9 @@ int DetectEngineContentInspection(DetectEngineCtx *de_ctx, DetectEngineThreadCtx
         /* we might have already have this content matched by the mpm.
          * (if there is any other reason why we'd want to avoid checking
          *  it here, please fill it in) */
-        if (cd->flags & DETECT_CONTENT_NO_DOUBLE_INSPECTION_REQUIRED) {
-            goto match;
-        }
+        //if (cd->flags & DETECT_CONTENT_NO_DOUBLE_INSPECTION_REQUIRED) {
+        //    goto match;
+        //}
 
         /* rule parsers should take care of this */
 #ifdef DEBUG