Project

General

Profile

Actions

Bug #2004

closed

Invalid file hash computation when force-hash is used

Added by Eric Leblond almost 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The hash computed is not correct in Suricata 3.2 when the 'force-hash' keyword is used. This results in false negative (and possibly false positive) when file[hash] keyword is used in a signature.

Actions

Also available in: Atom PDF