Snort mailing list archives
BUG in fpdetect.c (2.1.0)?
From: Stephen Reed <sdreed () verizon net>
Date: Fri, 9 Jan 2004 15:44:17 -0500
All-
Can anyone verify?
I apologize if this bug has already been posted... I can't seem to get access to the archives...
I was running some tests between 2.0.5 and 2.1.0 and was getting different output results for the same rules.
I think I have tracked a bug down to fpdetect.c on or about line 303. iMatchIndex is not initialized appropriately.
Corrected function is (one line added):
static INLINE void InitMatchInfo(OTNX_MATCH_DATA *o)
{
int i = 0;
for(i = 0; i < o->iMatchInfoArraySize; i++)
{
o->matchInfo[i].iMatchCount = 0;
o->matchInfo[i].iMatchMaxLen = 0;
o->matchInfo[i].iMatchIndex = 0; /* new */
}
}
Things seem to be working better now for me with this line added.
Comments welcomed & appreciated. Thanks.
-Stephen
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- BUG in fpdetect.c (2.1.0)? Stephen Reed (Jan 12)
- Re: BUG in fpdetect.c (2.1.0)? Andreas Östling (Jan 12)
