mirror of https://github.com/OISF/suricata
				
				
				
			
			You cannot select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
	
	
		
			27 lines
		
	
	
		
			472 B
		
	
	
	
		
			Plaintext
		
	
			
		
		
	
	
			27 lines
		
	
	
		
			472 B
		
	
	
	
		
			Plaintext
		
	
@siginit@
 | 
						|
identifier func =~ "Detect.*Setup";
 | 
						|
expression E1;
 | 
						|
position p1;
 | 
						|
identifier de_ctx, s, str, error;
 | 
						|
type DetectEngineCtx, Signature;
 | 
						|
@@
 | 
						|
 | 
						|
func(DetectEngineCtx *de_ctx, Signature *s, char *str) {
 | 
						|
...
 | 
						|
SigMatchAppendSMToList(s, ...)@p1;
 | 
						|
...
 | 
						|
if (s->alproto != E1 && ...) {
 | 
						|
...
 | 
						|
goto error;
 | 
						|
}
 | 
						|
...
 | 
						|
}
 | 
						|
 | 
						|
 | 
						|
@script:python@
 | 
						|
p1 << siginit.p1;
 | 
						|
@@
 | 
						|
print "SigMatch added at %s:%s but error handling can cause it to be freed later." % (p1[0].file, p1[0].line)
 | 
						|
import sys
 | 
						|
sys.exit(1)
 |