auparse_new_buffer - replace the buffer in the parser

auparse_new_buffer replaces the data that the parser works on. auparse_init() must have been called with a source type of AUSOURCE_BUFFER.

auparse_new_buffer - replace the buffer in the parser

Returns 1 if an error occurs; otherwise, 0 for success.

auparse_init(3) Red Hat Feb 2021 AUPARSE_NEW_BUFFER(3)

#include<auparse.h> int auparse_new_buffer(auparse_state_t *au, const char *data, size_t data_len); au The audit parse state data a buffer of data to give to the parser, it is data_len bytes long. The data is copied in the parser, upon return the caller may free or reuse the data buffer. data_len number of bytes in data