]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
eve/alert: use flow proto to avoid crash on ICMP
authorVictor Julien <vjulien@oisf.net>
Mon, 24 Oct 2022 12:28:50 +0000 (14:28 +0200)
committerVictor Julien <vjulien@oisf.net>
Tue, 25 Oct 2022 08:39:10 +0000 (10:39 +0200)
src/output-json-alert.c

index ab5d993659d5245d66019002a6fdc156fa5301ad..a4d792f141e9f424483224ee75008a694dfd798a 100644 (file)
@@ -584,7 +584,7 @@ static void AlertAddFiles(const Packet *p, JsonBuilder *jb, const uint64_t tx_id
             (p->flowflags & FLOW_PKT_TOSERVER) ? STREAM_TOSERVER : STREAM_TOCLIENT;
     FileContainer *ffc = NULL;
     if (p->flow->alstate != NULL) {
-        void *tx = AppLayerParserGetTx(p->proto, p->flow->alproto, p->flow->alstate, tx_id);
+        void *tx = AppLayerParserGetTx(p->flow->proto, p->flow->alproto, p->flow->alstate, tx_id);
         if (tx) {
             ffc = AppLayerParserGetTxFiles(p->flow, tx, direction);
         }