Project

General

Profile

Actions

Bug #5706

closed

app-layer-htp: Condition depending on enabled IPS mode never true

Added by Lukas Sismis about 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

When setting up HTP app layer in function HTPConfigParseParameters(), the function checks for enabled IPS mode. However, the function is called too early in the configuration process and IPS mode is not evaluated at that time.
cfg_prec->http_body_inline then is always 0 when it should be equal to 1.

It is located in the file app-layer-htp.c at the line ~2864.


Related issues 1 (0 open1 closed)

Related to Suricata - Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport)ClosedLukas SismisActions
Actions #2

Updated by Victor Julien about 2 years ago

  • Priority changed from Normal to High
Actions #3

Updated by Victor Julien about 2 years ago

  • Status changed from New to In Review
Actions #4

Updated by Victor Julien almost 2 years ago

  • Status changed from In Review to Closed
  • Priority changed from High to Normal
Actions #5

Updated by Victor Julien almost 2 years ago

@Lukas Sismis is this an issue in 6 as well?

Actions #6

Updated by Lukas Sismis almost 2 years ago

  • Label Needs backport to 6.0 added

@Victor Julien yes, this is also in 6. Adding a label "Needs backport to 6.0" and will start working on it.

Actions #7

Updated by Victor Julien almost 2 years ago

  • Status changed from Closed to Resolved
Actions #8

Updated by OISF Ticketbot almost 2 years ago

  • Subtask #5934 added
Actions #9

Updated by OISF Ticketbot almost 2 years ago

  • Label deleted (Needs backport to 6.0)
Actions #10

Updated by Victor Julien almost 2 years ago

  • Subtask deleted (#5934)
Actions #11

Updated by Victor Julien almost 2 years ago

  • Related to Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport) added
Actions #12

Updated by Victor Julien almost 2 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF