update(userspace/libsinsp): add factory method for sinsp_evt from a g…

…iven scap buffer Co-authored-by: Vadim Zyarko <[email protected]> Signed-off-by: Jason Dellaluce <[email protected]>
falcosecurity · Nov 20, 2023 · 011b081 · 011b081
1 parent 60e5b74
commit 011b081
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/userspace/libsinsp/event.h b/userspace/libsinsp/event.h
@@ -532,6 +532,17 @@ class SINSP_PUBLIC sinsp_evt : public gen_event
 		m_info = ppm_event;
 		m_errorcode = errorcode;
 	}
+
+	static std::unique_ptr<sinsp_evt> from_scap_evt(
+		std::unique_ptr<uint8_t, std::default_delete<uint8_t[]>> scap_event)
+	{
+		auto ret = std::make_unique<sinsp_evt>();
+		auto evdata = scap_event.release();
+		ret->init(evdata, 0);
+		ret->m_pevt_storage = (char*)evdata;
+		return ret;
+	}
+
 	inline void load_params()
 	{
 		uint32_t j;