Fix thresholding code suppressing an alert if no threshold/suppress rules needed to be checked.

remotes/origin/master-1.1.x
Victor Julien 14 years ago
parent a7fa081ad2
commit e0d7f64a14

@ -59,12 +59,14 @@ PacketAlert *PacketAlertGetTag(void) {
* \param sig Signature pointer
* \param p Packet structure
*
* \retval 1 alert is not suppressed
* \retval 0 alert is suppressed
*/
static int PacketAlertHandle(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx,
Signature *s, Packet *p, uint16_t pos)
{
SCEnter();
int ret = 0;
int ret = 1;
DetectThresholdData *td = NULL;
SigMatch *sm = NULL;

Loading…
Cancel
Save