Override some problematic field types

aquasecurity · Jul 18, 2024 · 5217cc5 · 5217cc5
1 parent 384a0a8
commit 5217cc5
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/plugins/epan/tracee-event/packet-tracee.c b/plugins/epan/tracee-event/packet-tracee.c
@@ -704,6 +704,10 @@ static hf_register_info *get_arg_hf(const gchar *event_name, gchar *json_data, j
         if (strcmp(arg_name, "prot") == 0 || strcmp(arg_name, "prev_prot") == 0)
             arg_type = "string";
     }
+    else if (strcmp(event_name, "do_mmap") == 0 && strcmp(arg_name, "prot") == 0)
+        arg_type = "string";
+    else if (strcmp(event_name, "security_socket_create") == 0 && strcmp(arg_name, "family") == 0)
+        arg_type = "string";
 
     // create the hf and add it to the array
     hf = g_new0(hf_register_info, 1);