Project

General

Profile

Bug #2853

filestore (v1 and v2): dropping of "unwanted" files

Added by magen bluten 25 days ago.

Status:
New
Priority:
High
Assignee:
Target version:
-
Affected Versions:
Effort:
low
Difficulty:
low
Label:

Description

when using the filestore option in combination with e.g. magic filter some files whose magic do not match are dropped as well.

the reason for this is a small bug or typo in FileStoreFileById (util-file.c) and DetectFilestoreMatch (detect-filestore.c).

instead of using the file_track_id the file_store_id is used. file_store_id however is always 0 and only incremented if a file gets dropped. thus
all files of a FileContainer get dropped even if only one file was selected for dropping according to the rules.

Also available in: Atom PDF