detect/tag: improve time handling on windows

Bug: #5584. (cherry picked from commit 0977f40d1c)
3 years ago · a5bc56cecb
parent 985b93e80f
commit a5bc56cecb
1 changed files with 3 additions and 1 deletions
--- a/src/detect-engine-tag.c
+++ b/src/detect-engine-tag.c
@ -553,7 +553,9 @@ int TagTimeoutCheck(Host *host, struct timeval *tv)

    prev = NULL;
    while (tmp != NULL) {
-        if ((tv->tv_sec - tmp->last_ts) <= TAG_MAX_LAST_TIME_SEEN) {
+        struct timeval last_ts = { .tv_sec = tmp->last_ts, 0 };
+        struct timeval timeout_at = TimevalWithSeconds(&last_ts, TAG_MAX_LAST_TIME_SEEN);
+        if (!TimevalEarlier(&timeout_at, tv)) {
            prev = tmp;
            tmp = tmp->next;
            retval = 0;