Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix hidden_kernel_module history scan for kernels >6.2 #4378

Merged
merged 1 commit into from
Dec 10, 2024

Conversation

OriGlassman
Copy link
Collaborator

@OriGlassman OriGlassman commented Nov 10, 2024

1. Explain what the PR does

fix(events): fix hidden_kernel_module history scan for kernels >6.2

- also address potential slice out of bounds for name argument in
  hidden_kernel_module.go

2. Explain how to test it

./tracee -e=hidden_kernel_module

3. Other comments

@CLAassistant
Copy link

CLAassistant commented Nov 10, 2024

CLA assistant check
All committers have signed the CLA.

@yanivagman
Copy link
Collaborator

@OriGlassman is this WIP or something to review?
If only a test - please mark as draft or close this PR

@OriGlassman OriGlassman marked this pull request as draft November 18, 2024 08:45
@OriGlassman OriGlassman force-pushed the test_bpf_loop branch 5 times, most recently from 8d78b54 to 30f9723 Compare November 25, 2024 14:16
@OriGlassman OriGlassman marked this pull request as ready for review November 25, 2024 14:30
@OriGlassman OriGlassman changed the title (WIP) test bpf loop fix hidden_kernel_module history scan for kernels >6.2 Nov 25, 2024
pkg/ebpf/c/tracee.bpf.c Outdated Show resolved Hide resolved
pkg/ebpf/c/tracee.bpf.c Outdated Show resolved Hide resolved
@OriGlassman OriGlassman force-pushed the test_bpf_loop branch 3 times, most recently from 657a250 to 7a83d94 Compare December 2, 2024 10:01
@OriGlassman OriGlassman force-pushed the test_bpf_loop branch 2 times, most recently from f017778 to 9cbf034 Compare December 9, 2024 10:30
pkg/ebpf/c/tracee.bpf.c Show resolved Hide resolved
pkg/ebpf/c/tracee.bpf.c Outdated Show resolved Hide resolved
pkg/ebpf/c/tracee.bpf.c Outdated Show resolved Hide resolved
pkg/ebpf/c/tracee.bpf.c Show resolved Hide resolved
pkg/ebpf/c/tracee.bpf.c Outdated Show resolved Hide resolved
@OriGlassman OriGlassman force-pushed the test_bpf_loop branch 2 times, most recently from 118a1c3 to c8cb4a7 Compare December 10, 2024 10:45
- also address potential slice out of bounds for name argument in
  hidden_kernel_module.go
Copy link
Collaborator

@yanivagman yanivagman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@geyslan geyslan added candidate/v0.22.5 Candidate to be cherry-picked or backported into v0.22.5 release milestone/v0.23.0 labels Dec 10, 2024
@yanivagman yanivagman merged commit a970156 into aquasecurity:main Dec 10, 2024
31 checks passed
@geyslan geyslan added backported/v0.22.5 and removed candidate/v0.22.5 Candidate to be cherry-picked or backported into v0.22.5 release labels Dec 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants