userspace/libsinsp/memmem: change code