Fix: off-by-one in sequence filter comparator
If we pass the following sequence as event input:
- field name "seqfield2"
- seq. len.: 4
- sequence array: "testA" (5 characters),
The following filters do not have the intended effect:
* 'seqfield2=="testA"'
- expected: no match.
- actual behavior: match.
* 'seqfield2=="test"'
- expected: match.
- actual behavior: no match.
This is caused by an off-by-one in the comparison with sequence length
in the filter bytecode interpreter.
Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
This page took 0.024975 seconds and 4 git commands to generate.