From 6299fbfb0fc082f4905db7ad4b07e2583aaa41ac Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 28 Jul 2010 21:59:28 +0200 Subject: [PATCH] Fix stream msg content inspection not inspecting the correct id. --- src/detect.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detect.c b/src/detect.c index 9ca11dd70a..d7686157b9 100644 --- a/src/detect.c +++ b/src/detect.c @@ -931,7 +931,7 @@ int SigMatchSignatures(ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineTh if (det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray != NULL) { /* filter out sigs that want pattern matches, but * have no matches */ - if (!(det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray[(s->mpm_pattern_id / 8)] & (1<<(s->mpm_pattern_id % 8))) && + if (!(det_ctx->smsg_pmq[pmq_idx].pattern_id_bitarray[(s->mpm_stream_pattern_id / 8)] & (1<<(s->mpm_stream_pattern_id % 8))) && (s->flags & SIG_FLAG_MPM) && !(s->flags & SIG_FLAG_MPM_NEGCONTENT)) { SCLogDebug("no match in this smsg"); continue;