mirror of https://github.com/OISF/suricata
detect/dataset: fix space condition in rule lang
If there is a space following a keyword that does not expect a value, the rule fails to load due to improper value evaluation. e.g. Space after "set" command alert http any any -> any any (http.user_agent; dataset:set ,ua-seen,type string,save datasets.csv; sid:1;) gives error [ERRCODE: SC_ERR_UNKNOWN_VALUE(129)] - dataset action "" is not supported. Fix this by handling values correctly for such cases.pull/7210/head
parent
7366396011
commit
6d2a2a0731
Loading…
Reference in New Issue