Project

General

Profile

Actions

Bug #8237

closed
JL SS

detect/filemagic: indeterminate results if thread initialization fails

Bug #8237: detect/filemagic: indeterminate results if thread initialization fails

Added by Jeff Lucovsky 7 months ago. Updated 26 days ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

When using filemagic and the thread-initialization function fails (DetectFilemagicThreadInit), suricata will continue but may produce indeterminate results as
- DetectEngineThreadCtxInitKeywords stops processing keyword contexts
- ThreadCtxDoInit ignores the return value from @DetectEngineThreadCtxInit@erdnaxe

Actions

Also available in: PDF Atom