rule-parser: detect duplicate rev keyword

pull/2926/head
Andreas Herz 9 years ago committed by Victor Julien
parent 7d037ae266
commit 4d2a6f5406

@ -69,6 +69,14 @@ static int DetectRevSetup (DetectEngineCtx *de_ctx, Signature *s, char *rawstr)
SCLogError(SC_ERR_INVALID_NUMERIC_VALUE, "rev value to high, max %u", UINT_MAX);
goto error;
}
if (rev == 0) {
SCLogError(SC_ERR_INVALID_NUMERIC_VALUE, "rev value 0 is invalid");
goto error;
}
if (s->rev > 0) {
SCLogError(SC_ERR_INVALID_RULE_ARGUMENT, "duplicated 'rev' keyword detected");
goto error;
}
s->rev = (uint32_t)rev;

Loading…
Cancel
Save