From f02864875068e58609e4c9738a874ea32cebcfe8 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Tue, 5 Mar 2024 10:03:15 +0100 Subject: [PATCH] detect/content: fix wrong value for depth check Limits propegation checked for DETECT_DEPTH as a content flag, which appears to have worked by chance. After reshuffling the keyword id's it no longer worked. This patch uses the proper flag DETECT_CONTENT_DEPTH. --- src/detect-content.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detect-content.c b/src/detect-content.c index 2f98840005..6d3852ecc5 100644 --- a/src/detect-content.c +++ b/src/detect-content.c @@ -556,7 +556,7 @@ static void PropagateLimits(Signature *s, SigMatch *sm_head) SCLogDebug("stored: offset %u depth %u offset_plus_pat %u", offset, depth, offset_plus_pat); - if ((cd->flags & (DETECT_DEPTH | DETECT_CONTENT_WITHIN)) == 0) { + if ((cd->flags & (DETECT_CONTENT_DEPTH | DETECT_CONTENT_WITHIN)) == 0) { if (depth) SCLogDebug("no within, reset depth"); depth = 0; -- 2.47.3