From 34e3484dad3af5be0ad916fa9130fc93b430b056 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Thu, 25 Aug 2016 13:04:25 +0200
Subject: [PATCH] detect-flags: prefilter extra match support

---
 src/detect-flags.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/detect-flags.c b/src/detect-flags.c
index b1524671c3..28e01d1bfa 100644
--- a/src/detect-flags.c
+++ b/src/detect-flags.c
@@ -560,8 +560,10 @@ PrefilterPacketFlagsMatch(DetectEngineThreadCtx *det_ctx, Packet *p, const void
     }
 
     const PrefilterPacketHeaderCtx *ctx = pectx;
-    const uint8_t flags = p->tcph->th_flags;
+    if (PrefilterPacketHeaderExtraMatch(ctx, p) == FALSE)
+        return;
 
+    const uint8_t flags = p->tcph->th_flags;
     if (FlagsMatch(flags, ctx->v1.u8[0], ctx->v1.u8[1], ctx->v1.u8[2]))
     {
         SCLogDebug("packet matches TCP flags %02x", ctx->v1.u8[1]);