]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect-parse: parse sid in pre-scan
authorJason Ish <jason.ish@oisf.net>
Wed, 29 Nov 2023 18:57:23 +0000 (12:57 -0600)
committerVictor Julien <victor@inliniac.net>
Tue, 19 Dec 2023 08:51:22 +0000 (09:51 +0100)
commit71bbba9248e696f0fd2e912ad9631052b3788775
treef5907c7ea6bdcf6ca9f132d6d3030735c06b0a6d
parent435c03172ed7ebaa117765760e75bdfd38c7fca0
detect-parse: parse sid in pre-scan

During the pre-scan for "requires", also parse the SID if possible. If
the rule fails high level parsing (syntax), the SID will not be
parsed.

But every keyword other than "sid" and "requires" should expect to be
provided with a parsed sid.
src/detect-parse.c