c

aquasecurity · Oct 27, 2024 · 202e2cf · 202e2cf
1 parent ab6344f
commit 202e2cf
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/pkg/ebpf/c/tracee.bpf.c b/pkg/ebpf/c/tracee.bpf.c
@@ -1217,6 +1217,18 @@ int lkm_seeker_mod_tree_tail(struct pt_regs *ctx)
     if (!init_tailcall_program_data(&p, ctx))
         return -1;
 
+    struct module *m;
+    if (bpf_core_field_exists(m->mem)) {
+        struct bpf_iter_num it;
+        int *v;
+        bpf_iter_num_new(&it, 2, 5);
+        while ((v = bpf_iter_num_next(&it))) {
+            bpf_printk("aaa");
+        }
+        bpf_iter_num_destroy(&it);
+        bpf_printk("bbb");
+    }
+
     u32 flags = HISTORY_SCAN_FINISHED;
 
     // This method is efficient only when the kernel is compiled with

diff --git a/pkg/ebpf/c/vmlinux.h b/pkg/ebpf/c/vmlinux.h
@@ -399,6 +399,10 @@ typedef __kernel_loff_t loff_t;
 
 typedef unsigned short umode_t;
 
+struct bpf_iter_num {
+    __u64 __opaque[1];
+};
+
 struct kernfs_node {
     const char *name;
     u64 id;