From 344802f6a5b43ac873fbd1eb8708077f6fbba70f Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Tue, 3 Dec 2024 16:51:26 +0100 Subject: [PATCH] detect: fix decoder only events Add missing setup part of the decoder event sgh. Bug: #7414. (cherry picked from commit b23fa51e331141a2743ef7ded4ec01db951ec697) --- src/detect-engine-build.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/detect-engine-build.c b/src/detect-engine-build.c index c34a8adaadfb..30a57d2a42c8 100644 --- a/src/detect-engine-build.c +++ b/src/detect-engine-build.c @@ -2070,6 +2070,7 @@ int SigAddressPrepareStage4(DetectEngineCtx *de_ctx) if (de_ctx->decoder_event_sgh != NULL) { /* no need to set filestore count here as that would make a * signature not decode event only. */ + SigGroupHeadBuildNonPrefilterArray(de_ctx, de_ctx->decoder_event_sgh); } int dump_grouping = 0;