]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect/transform: Clarify transformation validation
authorJeff Lucovsky <jlucovsky@oisf.net>
Tue, 14 Nov 2023 13:23:43 +0000 (08:23 -0500)
committerVictor Julien <victor@inliniac.net>
Thu, 16 Nov 2023 20:36:34 +0000 (21:36 +0100)
commita46779d866b1b121adc73164215ba6437f53c208
tree78310e266fd0167c8d3d0178e6f78d973dddebec
parent1110a86cb9bc3815aec2db1b5cc3253d63db53f5
detect/transform: Clarify transformation validation

Issue: 6439

Clarify the transform validation step. When a transform indicates that
the content/byte-array is not compatible, validation will stop.

Content is incompatible is some cases -- e.g., following the
to_lowercase transform with content containing uppercase characters.
An alert is not possible since the content contains uppercase and the
transform has converted the buffer into all lowercase.
src/detect-engine.c