]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect/transform: Clarify transformation validation 10067/head 10068/head
authorJeff Lucovsky <jlucovsky@oisf.net>
Tue, 14 Nov 2023 13:23:43 +0000 (08:23 -0500)
committerJeff Lucovsky <jlucovsky@oisf.net>
Sun, 17 Dec 2023 15:07:07 +0000 (10:07 -0500)
commit32160f4a12403f9a5ae098f12cefe0f9fc87735d
treeb4f1614b0441fb626743ee759a7183d088869d85
parent89d7ece05fc329274629c051cdc4ffdb35cf4c40
detect/transform: Clarify transformation validation

Issue: 6439

Clarify the transform validation step. When a transform indicates that
the content/byte-array is not compatible, validation will stop.

Content is incompatible is some cases -- e.g., following the
to_lowercase transform with content containing uppercase characters.
An alert is not possible since the content contains uppercase and the
transform has converted the buffer into all lowercase.

(cherry picked from commit a46779d866b1b121adc73164215ba6437f53c208)
src/detect-engine.c