Project

General

Profile

Actions

Bug #6390

closed
PA PA

detect/filestore: do not store if "both,flow" is triggered after the file was set to "nostore"

Bug #6390: detect/filestore: do not store if "both,flow" is triggered after the file was set to "nostore"

Added by Philippe Antoine over 2 years ago. Updated 12 months ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Subtasks 4 (0 open4 closed)

Bug #6607: file: do not store if filestore:both,flow is triggered after the file was set to nostore (6.0.x backport)RejectedActions
Bug #6608: file: do not store if filestore:both,flow is triggered after the file was set to nostore (7.0.x backport)ClosedPhilippe AntoineActions
Bug #6609: file: do not store if filestore:both,flow is triggered after the file was set to nostore (6.0.x backport)RejectedPhilippe AntoineActions
Bug #6610: file: do not store if filestore:both,flow is triggered after the file was set to nostore (7.0.x backport)RejectedPhilippe AntoineActions

PA Updated by Philippe Antoine over 2 years ago Actions #1

  • Assignee changed from OISF Dev to Philippe Antoine

PA Updated by Philippe Antoine over 2 years ago Actions #2

  • Status changed from New to In Review

VJ Updated by Victor Julien over 2 years ago Actions #3

  • Target version changed from 6.0.15 to 6.0.16

PA Updated by Philippe Antoine over 2 years ago Actions #4

Well, in master, a débit assertion gets triggered within FileApplyTxFlags

PA Updated by Philippe Antoine over 2 years ago Actions #5

  • Target version changed from 6.0.16 to 8.0.0-beta1
  • Affected Versions 7.0.2, git main added

PA Updated by Philippe Antoine over 2 years ago Actions #6

  • Label Needs backport to 6.0, Needs backport to 7.0 added

OT Updated by OISF Ticketbot over 2 years ago Actions #7

  • Subtask #6607 added

OT Updated by OISF Ticketbot over 2 years ago Actions #8

  • Label deleted (Needs backport to 6.0)

OT Updated by OISF Ticketbot over 2 years ago Actions #9

  • Subtask #6608 added

OT Updated by OISF Ticketbot over 2 years ago Actions #10

  • Label deleted (Needs backport to 7.0)

PA Updated by Philippe Antoine over 2 years ago Actions #11

  • Label Needs backport to 6.0, Needs backport to 7.0 added

https://github.com/OISF/suricata/pull/9996 is the PR to fix this in master as a debug assertion got reached by the SV test

OT Updated by OISF Ticketbot over 2 years ago Actions #12

  • Subtask #6609 added

OT Updated by OISF Ticketbot over 2 years ago Actions #13

  • Label deleted (Needs backport to 6.0)

OT Updated by OISF Ticketbot over 2 years ago Actions #14

  • Subtask #6610 added

OT Updated by OISF Ticketbot over 2 years ago Actions #15

  • Label deleted (Needs backport to 7.0)

VJ Updated by Victor Julien about 2 years ago Actions #16

  • Parent task deleted (#6388)

PA Updated by Philippe Antoine almost 2 years ago Actions #18

  • Status changed from In Review to Resolved

PA Updated by Philippe Antoine over 1 year ago Actions #19

  • Status changed from Resolved to Closed

VJ Updated by Victor Julien 12 months ago Actions #20

  • Subject changed from file: do not store if filestore:both,flow is triggered after the file was set to nostore to detect/filestore: do not store if "both,flow" is triggered after the file was set to "nostore"
Actions

Also available in: PDF Atom