get_field_str() and interpret_field() bug with multi-word fields

[Steve Grubb]

On Tuesday 12 August 2008 18:11:48 John Dennis wrote:
> > With backwards compatibility you don't have to worry about having tools
> > of that era.
> >  
>
> This does not address the problem of matching a log file to a kernel
> version 

The kernel version is recorded in the daemon startup event.


> nor unanticipated user space provided audit records. 

The onus is with the developers to test their work. I did that for all the 
audit records I added throughout user space.

-Steve