On 30. nov. 2014 20.53.19 John Hardin <jhar...@impsec.org> wrote:
On Sun, 30 Nov 2014, Benny Pedersen wrote:
> Ruleupdates should have being if version before if perl_version, so this the
> test of perl was only done on svn version of sa, it have nothing to do with
> update or change dependice of perl installed
Sadly that doesn't work. The else branch of a conditional still gets
partially parsed, so the perl_version type warning is still emitted even
if it is inside a conditional that evaluates to false.
Try this:
if 0 > 0
Psudo if trunc
if fnord > 0
Psudo fnord would exists in trunc
meta SYN_ERROR
endif
endif
SA won't generate a warning about the syntax of the SYN_ERROR rule, but it
will emit a warning about fnord not being numeric.
Not if trunc installed, hopefully, is it a svn tag check in sa ?
Hopefully it would be resolved in future sa verions to not break any admin
legs :)
