From 2cfe2c292d37404d05ac5d83d060b6a5af871ec0 Mon Sep 17 00:00:00 2001 From: Seth Hall Date: Sun, 28 Aug 2016 21:30:42 -0400 Subject: [PATCH] Fix an event from the file extraction analyzer. The "file_extraction_limit" event was passing a Files::AnalyzerArgs record as an "any" type. This is not right at the least and may have been causing a crash for a user at worst. --- src/file_analysis/analyzer/extract/events.bif | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/file_analysis/analyzer/extract/events.bif b/src/file_analysis/analyzer/extract/events.bif index f5ebb6816b..d1dfe0c654 100644 --- a/src/file_analysis/analyzer/extract/events.bif +++ b/src/file_analysis/analyzer/extract/events.bif @@ -14,4 +14,4 @@ ## len: The length of the file chunk about to be written. ## ## .. bro:see:: Files::add_analyzer Files::ANALYZER_EXTRACT -event file_extraction_limit%(f: fa_file, args: any, limit: count, len: count%); +event file_extraction_limit%(f: fa_file, args: Files::AnalyzerArgs, limit: count, len: count%);