detect/tag: improve time handling on windows

Bug: #5584.
3 years ago · 0977f40d1c
parent 410acf226f
commit 0977f40d1c
1 changed files with 3 additions and 1 deletions
--- a/src/detect-engine-tag.c
+++ b/src/detect-engine-tag.c
@ -555,7 +555,9 @@ int TagTimeoutCheck(Host *host, struct timeval *tv)

    prev = NULL;
    while (tmp != NULL) {
-        if ((tv->tv_sec - tmp->last_ts) <= TAG_MAX_LAST_TIME_SEEN) {
+        struct timeval last_ts = { .tv_sec = tmp->last_ts, 0 };
+        struct timeval timeout_at = TimevalWithSeconds(&last_ts, TAG_MAX_LAST_TIME_SEEN);
+        if (!TimevalEarlier(&timeout_at, tv)) {
            prev = tmp;
            tmp = tmp->next;
            retval = 0;