auparse_new_buffer - Man Page
replace the buffer in the parser
Synopsis
#include <auparse.h>
int auparse_new_buffer(auparse_state_t *au,constchar*"data,size_t"data_len);"
- au
The audit parse state
- data
A buffer of data to give to the parser, it is data_len bytes long. The data is copied into the parser without modifying the original. Upon return the caller may free or reuse the data buffer.
- data_len
The number of bytes in data
Description
auparse_new_buffer replaces the data that the parser works on. auparse_init() must have been called with a source type of AUSOURCE_BUFFER.
Return Value
Returns 1 if an error occurs; otherwise, 0 for success.
See Also
Info
June 2025 Red Hat Linux Audit API