output: do not log empty arrays for sid

Ticket: #5167

diff --git a/src/output-json.c b/src/output-json.c
index de322104c519811bdf67b5d5ca7a500d8b424d30..4590fe244d837bbe22fb5266fb291b7a0285fd99 100644 (file)
--- a/src/output-json.c
+++ b/src/output-json.c
@@ -132,11 +132,13 @@ void EveFileInfo(JsonBuilder *jb, const File *ff, const bool stored)
 {
     jb_set_string_from_bytes(jb, "filename", ff->name, ff->name_len);
 
-    jb_open_array(jb, "sid");
-    for (uint32_t i = 0; ff->sid != NULL && i < ff->sid_cnt; i++) {
-        jb_append_uint(jb, ff->sid[i]);
+    if (ff->sid_cnt > 0) {
+        jb_open_array(jb, "sid");
+        for (uint32_t i = 0; ff->sid != NULL && i < ff->sid_cnt; i++) {
+            jb_append_uint(jb, ff->sid[i]);
+        }
+        jb_close(jb);
     }
-    jb_close(jb);
 
 #ifdef HAVE_MAGIC
     if (ff->magic)