wip

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
falcosecurity · Sep 20, 2024 · f9c647d · f9c647d
1 parent 4b760ef
commit f9c647d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/test/libsinsp_e2e/event_capture.cpp b/test/libsinsp_e2e/event_capture.cpp
@@ -116,7 +116,7 @@ void event_capture::capture() {
 			next_result = get_inspector()->next(&event);
 		}
 		if(next_result == SCAP_SUCCESS) {
-			if(event->get_type() == PPME_SYSCALL_KILL_E && event->get_param(1)->as<int8_t>() == -1) {
+			if((event->get_type() == PPME_SYSCALL_KILL_E || event->get_type() == PPME_SYSCALL_KILL_X) && event->get_param(1)->as<int8_t>() == -1) {
 				end_event = true;
 				if(m_capture_stopped) {
 					break;