WIP Draft

OISF · Apr 17, 2024 · 738edda · 738edda
1 parent c305ed1
commit 738edda
Showing 1 changed file with 14 additions and 5 deletions.
diff --git a/src/detect-content.c b/src/detect-content.c
@@ -436,11 +436,20 @@ void SigParseRequiredContentSize(
                 continue;
             }
         }
-        SCLogDebug("content_len %d; distance: %d, offset: %d, depth: %d", cd->content_len,
-                cd->distance, cd->offset, cd->depth);
-        total_len += cd->content_len + cd->distance;
-        max_offset = MAX(max_offset, cd->offset);
-        first = false;
+        if (!(cd->flags & DETECT_CONTENT_NEGATED)) {
+            SCLogDebug("content_len %d; distance: %d, offset: %d, depth: %d", cd->content_len,
+                    cd->distance, cd->offset, cd->depth);
+            total_len += cd->content_len + cd->distance;
+            max_offset = MAX(max_offset, cd->offset);
+            first = false;
+        }
+#if 0
+        else {
+            if (max_size < cd->content_len) {
+                SCLogNotice("Useless content section \"%s\" [length %d]", cd->content, cd->content_len);
+            }
+        }
+#endif
     }
 
     *len = total_len;