Project

General

Profile

Actions

Bug #5706

closed

app-layer-htp: Condition depending on enabled IPS mode never true

Added by Lukas Sismis about 1 year ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

When setting up HTP app layer in function HTPConfigParseParameters(), the function checks for enabled IPS mode. However, the function is called too early in the configuration process and IPS mode is not evaluated at that time.
cfg_prec->http_body_inline then is always 0 when it should be equal to 1.

It is located in the file app-layer-htp.c at the line ~2864.


Related issues 1 (0 open1 closed)

Related to Suricata - Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport)ClosedLukas SismisActions
Actions #2

Updated by Victor Julien about 1 year ago

  • Priority changed from Normal to High
Actions #3

Updated by Victor Julien about 1 year ago

  • Status changed from New to In Review
Actions #4

Updated by Victor Julien about 1 year ago

  • Status changed from In Review to Closed
  • Priority changed from High to Normal
Actions #5

Updated by Victor Julien about 1 year ago

@Lukas Sismis is this an issue in 6 as well?

Actions #6

Updated by Lukas Sismis about 1 year ago

  • Label Needs backport to 6.0 added

@Victor Julien yes, this is also in 6. Adding a label "Needs backport to 6.0" and will start working on it.

Actions #7

Updated by Victor Julien 11 months ago

  • Status changed from Closed to Resolved
Actions #8

Updated by OISF Ticketbot 11 months ago

  • Subtask #5934 added
Actions #9

Updated by OISF Ticketbot 11 months ago

  • Label deleted (Needs backport to 6.0)
Actions #10

Updated by Victor Julien 11 months ago

  • Subtask deleted (#5934)
Actions #11

Updated by Victor Julien 11 months ago

  • Related to Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport) added
Actions #12

Updated by Victor Julien 11 months ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF