eve2pcap: fix segfaults when calling into libpcap

jasonish · Nov 16, 2017 · a524e69 · a524e69
1 parent c843c35
commit a524e69
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/README.rst b/README.rst
@@ -126,6 +126,10 @@ Further documentation is located at http://idstools.readthedocs.org.
 Changelog
 ---------
 
+unreleased
+~~~~~~~~~~
+- eve2pcap: fix segfault when calling libpcap functions.
+
 0.6.2 - 2017-08-09
 ~~~~~~~~~~~~~~~~~~
 - rulecat: ignore *deleted.rules by default. Provide --no-ignore

diff --git a/idstools/scripts/eve2pcap.py b/idstools/scripts/eve2pcap.py
@@ -69,6 +69,8 @@
     has_libpcap = True
     libpcap = ctypes.cdll.LoadLibrary(libpcap_filename)
     libpcap.pcap_geterr.restype = ctypes.c_char_p
+    libpcap.pcap_open_dead.restype = ctypes.POINTER(ctypes.c_void_p)
+    libpcap.pcap_dump_open.restype = ctypes.POINTER(ctypes.c_void_p)
     pcap_errbuf = ctypes.create_string_buffer(PCAP_ERRBUF_SIZE)
     libc = ctypes.cdll.LoadLibrary(ctypes.util.find_library("c"))