Project

General

Profile

Actions
Copy link

Bug #5706

closed
LS LS

app-layer-htp: Condition depending on enabled IPS mode never true

Bug #5706: app-layer-htp: Condition depending on enabled IPS mode never true

Added by Lukas Sismis over 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Sismis
Target version:
7.0.0-rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

When setting up HTP app layer in function HTPConfigParseParameters(), the function checks for enabled IPS mode. However, the function is called too early in the configuration process and IPS mode is not evaluated at that time.
cfg_prec->http_body_inline then is always 0 when it should be equal to 1.

It is located in the file app-layer-htp.c at the line ~2864.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport)ClosedLukas SismisActions

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #2

  • Priority changed from Normal to High

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #3

  • Status changed from New to In Review

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #4

  • Status changed from In Review to Closed
  • Priority changed from High to Normal

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #5

@Lukas Sismis is this an issue in 6 as well?

LS Updated by Lukas Sismis about 3 years ago Actions
Copy link
 #6

  • Label Needs backport to 6.0 added

@Victor Julien yes, this is also in 6. Adding a label "Needs backport to 6.0" and will start working on it.

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #7

  • Status changed from Closed to Resolved

OT Updated by OISF Ticketbot about 3 years ago Actions
Copy link
 #8

  • Subtask #5934 added

OT Updated by OISF Ticketbot about 3 years ago Actions
Copy link
 #9

  • Label deleted (Needs backport to 6.0)

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #10

  • Subtask deleted (#5934)

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #11

  • Related to Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport) added

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #12

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom