detect/alert: flag packets with PASS action

If packet->action is never set to 'pass', we won't know if a packet had a 'pass' verdict. Related to Bug #5464
OISF · Jul 12, 2023 · 40d30ed · 40d30ed
1 parent 5825647
commit 40d30ed
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/detect-engine-alert.c b/src/detect-engine-alert.c
@@ -416,6 +416,7 @@ void PacketAlertFinalize(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx
 
             /* pass "alert" found, we're done */
             if (pa->action & ACTION_PASS) {
+                p->action |= ACTION_PASS;
                 break;
             }
             p->alerts.cnt++;