Project

General

Profile

Actions

Bug #5706

closed

app-layer-htp: Condition depending on enabled IPS mode never true

Added by Lukas Sismis over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

When setting up HTP app layer in function HTPConfigParseParameters(), the function checks for enabled IPS mode. However, the function is called too early in the configuration process and IPS mode is not evaluated at that time.
cfg_prec->http_body_inline then is always 0 when it should be equal to 1.

It is located in the file app-layer-htp.c at the line ~2864.


Related issues 1 (0 open1 closed)

Related to Suricata - Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport)ClosedLukas SismisActions
Actions #2

Updated by Victor Julien over 1 year ago

  • Priority changed from Normal to High
Actions #3

Updated by Victor Julien over 1 year ago

  • Status changed from New to In Review
Actions #4

Updated by Victor Julien about 1 year ago

  • Status changed from In Review to Closed
  • Priority changed from High to Normal
Actions #5

Updated by Victor Julien about 1 year ago

@Lukas Sismis is this an issue in 6 as well?

Actions #6

Updated by Lukas Sismis about 1 year ago

  • Label Needs backport to 6.0 added

@Victor Julien yes, this is also in 6. Adding a label "Needs backport to 6.0" and will start working on it.

Actions #7

Updated by Victor Julien about 1 year ago

  • Status changed from Closed to Resolved
Actions #8

Updated by OISF Ticketbot about 1 year ago

  • Subtask #5934 added
Actions #9

Updated by OISF Ticketbot about 1 year ago

  • Label deleted (Needs backport to 6.0)
Actions #10

Updated by Victor Julien about 1 year ago

  • Subtask deleted (#5934)
Actions #11

Updated by Victor Julien about 1 year ago

  • Related to Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport) added
Actions #12

Updated by Victor Julien about 1 year ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF