fix POINTER_T parsing and printing

aquasecurity · Mar 26, 2020 · 67a3ac1 · 67a3ac1
1 parent c0b87ea
commit 67a3ac1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tracee/tracee.go b/tracee/tracee.go
@@ -595,11 +595,11 @@ func readArgFromBuff(dataBuff io.Reader) (interface{}, error) {
 		}
 		res = PrintMemProt(prot)
 	case POINTER_T:
-		ptr, err := readInt64FromBuff(dataBuff)
+		ptr, err := readUInt64FromBuff(dataBuff)
 		if err != nil {
 			return nil, err
 		}
-		res = fmt.Sprintf("%X", ptr)
+		res = fmt.Sprintf("0x%X", ptr)
 	case SOCKADDR_T:
 		sockaddr, err := readSockaddrFromBuff(dataBuff)
 		if err != nil {