secDetector/Backport-fix-report-api-function.patch
hurricane618 dfcd39671f update patch code
update patch0001

Signed-off-by: hurricane618 <hurricane618@hotmail.com>
2023-11-29 23:35:52 +08:00

42 lines
1.6 KiB
Diff

From d9313a0248bcff9d5655d070ada674972d0c6ff8 Mon Sep 17 00:00:00 2001
From: hurricane618 <hurricane618@hotmail.com>
Date: Sun, 19 Nov 2023 14:21:12 +0800
Subject: [PATCH] fix report api function and memory leak
1. proc_report function change to report
2. free pi struct
Signed-off-by: hurricane618 <hurricane618@hotmail.com>
---
.../cases/program_action/secDetector_program_action.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/kerneldriver/cases/program_action/secDetector_program_action.c b/kerneldriver/cases/program_action/secDetector_program_action.c
index 4421e43..4f8a555 100644
--- a/kerneldriver/cases/program_action/secDetector_program_action.c
+++ b/kerneldriver/cases/program_action/secDetector_program_action.c
@@ -307,8 +307,9 @@ static int ptrace_attach_pre_handler(struct secDetector_workflow *wf,
timestamp, pi->uid, pi->exe, pi->pid, pi->comm, pi->tgid, pi->ppid, pi->pcomm, pi->pgid, pi->sid, pi->nodename, pi->pns, pi->root_pns,
"ptrace_attach", attach_task->pid, current->pid, request, addr, flags);
- secDetector_proc_report(&log);
+ secDetector_report(&log);
kfree(log.report_data.text);
+ put_common_process_info(pi);
return 0;
}
@@ -335,8 +336,9 @@ static int do_pipe2_pre_handler(struct secDetector_workflow *wf,
timestamp, pi->uid, pi->exe, pi->pid, pi->comm, pi->tgid, pi->ppid, pi->pcomm, pi->pgid, pi->sid, pi->nodename, pi->pns, pi->root_pns,
"");
- secDetector_proc_report(&log);
+ secDetector_report(&log);
kfree(log.report_data.text);
+ put_common_process_info(pi);
return 0;
}
--
2.33.0