From 966c7349d3aa6a42f49cc8c5de6f0acfdbe1496e Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 18 Nov 2010 12:02:02 +0100 Subject: [PATCH] Make sure we have a response message before inspecting it in http_stat_msg. --- src/detect-http-stat-msg.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/detect-http-stat-msg.c b/src/detect-http-stat-msg.c index 53cbe551e1..720baccdb0 100644 --- a/src/detect-http-stat-msg.c +++ b/src/detect-http-stat-msg.c @@ -131,6 +131,9 @@ int DetectHttpStatMsgMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, if (tx == NULL) continue; + if (tx->response_message == NULL) + continue; + SCLogDebug("we have a response message"); /* call the case insensitive version if nocase has been specified in the sig */