From 29b5cb9abd8eb201a8b8e8e0f5af186042f78052 Mon Sep 17 00:00:00 2001 From: Anoop Saldanha Date: Tue, 19 Oct 2010 11:32:17 +0530 Subject: [PATCH] respect content flags in hash compare function during staging. For example, we would end up ignoring a nocase version of a duplicate content from another sig in the same sgh --- src/detect-engine-mpm.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/detect-engine-mpm.c b/src/detect-engine-mpm.c index d907095943..f20a27ec5f 100644 --- a/src/detect-engine-mpm.c +++ b/src/detect-engine-mpm.c @@ -450,6 +450,7 @@ char ContentHashCompareFunc(void *data1, uint16_t len1, void *data2, uint16_t le DetectContentData *co2 = ch2->ptr; if (co1->content_len == co2->content_len && + co1->flags == co2->flags && SCMemcmp(co1->content, co2->content, co1->content_len) == 0) return 1;