Fix crash in msc_rules_add_file() when using disruptive action in child rule inside of chain

Author: victorhora

CHANGES

@@ -1,6 +1,8 @@
 v3.0.3 - YYYY-MMM-DD (to be released)
 -------------------------------------
 
+ - Fix crash in msc_rules_add_file() when using disruptive action in chain
+   [Issue #1849 - @victorhora, @zimmerle, @rperper]
  - Fix memory leak in AuditLog::init()
    [Issue #1897 - @weliu]
  - Fix RulesProperties::appendRules()

src/parser/driver.cc

@@ -80,13 +80,13 @@ int Driver::addSecRule(Rule *rule) {
     if (lastRule && lastRule->m_chained) {
         if (lastRule->m_chainedRuleChild == NULL) {
             rule->m_phase = lastRule->m_phase;
-            lastRule->m_chainedRuleChild = rule;
-            rule->m_chainedRuleParent = lastRule;
             if (rule->m_theDisruptiveAction) {
                 m_parserError << "Disruptive actions can only be specified by";
                 m_parserError << " chain starter rules.";
                 return false;
             }
+            lastRule->m_chainedRuleChild = rule;
+            rule->m_chainedRuleParent = lastRule;
             return true;
         } else {
             Rule *a = lastRule->m_chainedRuleChild;