From dba7103a968a9ebd1c139cc32c9b5299a70e7527 Mon Sep 17 00:00:00 2001
From: Victor Julien <vjulien@oisf.net>
Date: Mon, 24 Oct 2022 14:28:50 +0200
Subject: [PATCH] eve/alert: use flow proto to avoid crash on ICMP

---
 src/output-json-alert.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/output-json-alert.c b/src/output-json-alert.c
index ab5d993659..a4d792f141 100644
--- a/src/output-json-alert.c
+++ b/src/output-json-alert.c
@@ -584,7 +584,7 @@ static void AlertAddFiles(const Packet *p, JsonBuilder *jb, const uint64_t tx_id
             (p->flowflags & FLOW_PKT_TOSERVER) ? STREAM_TOSERVER : STREAM_TOCLIENT;
     FileContainer *ffc = NULL;
     if (p->flow->alstate != NULL) {
-        void *tx = AppLayerParserGetTx(p->proto, p->flow->alproto, p->flow->alstate, tx_id);
+        void *tx = AppLayerParserGetTx(p->flow->proto, p->flow->alproto, p->flow->alstate, tx_id);
         if (tx) {
             ffc = AppLayerParserGetTxFiles(p->flow, tx, direction);
         }