From 791fc2f6ea9902c0283434eb2b01937511039237 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Wed, 11 Jan 2012 15:31:14 +0100
Subject: [PATCH] Adapt signature ordering to new flowbits post-match handling.

---
 src/detect-engine-sigorder.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/detect-engine-sigorder.c b/src/detect-engine-sigorder.c
index a44c3e2cc9..3c668c8631 100644
--- a/src/detect-engine-sigorder.c
+++ b/src/detect-engine-sigorder.c
@@ -129,6 +129,17 @@ static inline int SCSigGetFlowbitsType(Signature *sig)
         sm = sm->next;
     }
 
+    sm = sig->sm_lists[DETECT_SM_LIST_POSTMATCH];
+    while (sm != NULL) {
+        if (sm->type == DETECT_FLOWBITS) {
+            fb = (DetectFlowbitsData *)sm->ctx;
+            if (flowbits > fb->cmd)
+                flowbits = fb->cmd;
+        }
+
+        sm = sm->next;
+    }
+
     if (flowbits == DETECT_FLOWBITS_CMD_SET ||
         flowbits == DETECT_FLOWBITS_CMD_UNSET ||
         flowbits == DETECT_FLOWBITS_CMD_TOGGLE) {