On Sun, 30 Nov 2014, Benny Pedersen wrote:

Ruleupdates should have being if version before if perl_version, so this the test of perl was only done on svn version of sa, it have nothing to do with update or change dependice of perl installed

Sadly that doesn't work. The else branch of a conditional still gets partially parsed, so the perl_version type warning is still emitted even if it is inside a conditional that evaluates to false.

Try this:

if 0 > 0
  if fnord > 0
    meta SYN_ERROR
  endif
endif

SA won't generate a warning about the syntax of the SYN_ERROR rule, but it will emit a warning about fnord not being numeric.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  We have to realize that people who run the government can and do
  change. Our society and laws must assume that bad people -
  criminals even - will run the government, at least part of the
  time.                                               -- John Gilmore
-----------------------------------------------------------------------
 15 days until Bill of Rights day

Reply via email to