From: Victor Julien <vjulien@oisf.net>
Date: Mon, 24 Oct 2022 12:28:50 +0000 (+0200)
Subject: eve/alert: use flow proto to avoid crash on ICMP
X-Git-Tag: suricata-7.0.0-beta1~16
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dba7103a968a9ebd1c139cc32c9b5299a70e7527;p=thirdparty%2Fsuricata.git

eve/alert: use flow proto to avoid crash on ICMP
---

diff --git a/src/output-json-alert.c b/src/output-json-alert.c
index ab5d993659..a4d792f141 100644
--- a/src/output-json-alert.c
+++ b/src/output-json-alert.c
@@ -584,7 +584,7 @@ static void AlertAddFiles(const Packet *p, JsonBuilder *jb, const uint64_t tx_id
             (p->flowflags & FLOW_PKT_TOSERVER) ? STREAM_TOSERVER : STREAM_TOCLIENT;
     FileContainer *ffc = NULL;
     if (p->flow->alstate != NULL) {
-        void *tx = AppLayerParserGetTx(p->proto, p->flow->alproto, p->flow->alstate, tx_id);
+        void *tx = AppLayerParserGetTx(p->flow->proto, p->flow->alproto, p->flow->alstate, tx_id);
         if (tx) {
             ffc = AppLayerParserGetTxFiles(p->flow, tx, direction);
         }