Project

General

Profile

Actions
Copy link

Bug #24

closed
PR OD

Match fails with 2 content, the second of length = 1

Bug #24: Match fails with 2 content, the second of length = 1

Added by Pablo Rincon over 16 years ago. Updated over 16 years ago.

Status:
Closed
Priority:
Normal
Assignee:
OISF Dev
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

The match of two contents in the same rule fail if the second has a length of 1.

Example:
alert tcp any any -> any any (msg:\"Test 32 sig1\"; content:\"0\"; content:\"a\"; sid:1;)
payload: 0123abcde...

Files

0001-Match-content-fail-when-two-contents-are-specified-i.patch (2.03 KB) 0001-Match-content-fail-when-two-contents-are-specified-i.patch Better test it with this unittest Pablo Rincon, 12/27/2009 07:36 PM
Actions
Copy link

Also available in: PDF Atom