diff options
| author | Paul Buetow <paul@buetow.org> | 2025-03-20 17:40:47 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2025-03-20 17:40:47 +0200 |
| commit | cb25b2133965e80caa345494677801438247b104 (patch) | |
| tree | ead52e8453ebfa17579b962275f6bb2b7a0b724f | |
| parent | 564bd412b253a89709c7b099918fe4c21540dbe5 (diff) | |
pre-set mismatch to false
| -rw-r--r-- | go.mod | 2 | ||||
| -rw-r--r-- | internal/event/event.go | 1 | ||||
| -rw-r--r-- | internal/eventloop.go | 4 |
3 files changed, 6 insertions, 1 deletions
@@ -1,5 +1,5 @@ module ior -go 1.23 +go 1.24 require github.com/aquasecurity/libbpfgo v0.6.0-libbpf-1.3.0.20240111220235-90dbffffbdab diff --git a/internal/event/event.go b/internal/event/event.go index 45b5c9d..7db6128 100644 --- a/internal/event/event.go +++ b/internal/event/event.go @@ -93,6 +93,7 @@ func (e *Pair) Recycle() { e.EnterEv.Recycle() e.ExitEv.Recycle() e.PrevPair = nil + e.TracepointMismatch = false poolOfEventPairs.Put(e) } diff --git a/internal/eventloop.go b/internal/eventloop.go index 321b83f..139db9d 100644 --- a/internal/eventloop.go +++ b/internal/eventloop.go @@ -150,6 +150,7 @@ func (e *eventLoop) processRawEvent(raw []byte, ch chan<- *event.Pair) { } func (e *eventLoop) syscallEnter(enterEv event.Event) { + // fmt.Println("DEBUG enterEv", enterEv) tid := enterEv.GetTid() if !e.filter.commFilterEnable { e.enterEvs[tid] = event.NewPair(enterEv) @@ -176,11 +177,14 @@ func (e *eventLoop) syscallExit(exitEv event.Event, ch chan<- *event.Pair) { } delete(e.enterEvs, exitEv.GetTid()) ev.ExitEv = exitEv + // fmt.Println("DEBUG exitEv", exitEv) // Expect ID one lower, otherwise, enter and exit tracepoints // don't match up. E.g.: // enterEv:SYS_ENTER_OPEN => exitEv:SYS_EXIT_OPEN if ev.EnterEv.GetTraceId()-1 != ev.ExitEv.GetTraceId() { + // fmt.Println("Mismatch DEBUG", ev.EnterEv, "<!>", ev.ExitEv) + // os.Exit(2) ev.TracepointMismatch = true e.numTracepointMismatches++ } else { |