Project

General

Profile

Actions
Copy link

Bug #2004

closed

Invalid file hash computation when force-hash is used

Added by Eric Leblond over 7 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
Eric Leblond
Target version:
3.2.1
Affected Versions:
Effort:
Difficulty:
Label:

Description

The hash computed is not correct in Suricata 3.2 when the 'force-hash' keyword is used. This results in false negative (and possibly false positive) when file[hash] keyword is used in a signature.

Actions
Copy link

Also available in: Atom PDF