Changeset 591 for trunk/src/sh_log_evalrule.c

Timestamp:

Oct 31, 2025, 2:49:53 PM (15 hours ago)

Author:

katerina

Message:

Fix for ticket #479 (check for start of a pcre2 match later than its end).

File:

• trunk/src/sh_log_evalrule.c (modified) (1 diff)

trunk/src/sh_log_evalrule.c

@@ -1051 +1051 @@
                                                 sh_string_len(message));
 
-  if (ovecnum > 1)
+  if (ovecnum > 1 && (ovector[0] < ovector[1])) /* guard against patterns using \K */
     {
       retval = sh_string_replace(retval, &(ovector[2]), (ovecnum-1), "___", 3);