diff --git a/bpf/lib/process.h b/bpf/lib/process.h index 91bade42e61..164262163df 100644 --- a/bpf/lib/process.h +++ b/bpf/lib/process.h @@ -104,6 +104,7 @@ #define __ASM_ARGSBUFFER 976 #define ARGSBUFFERMASK (ARGSBUFFER - 1) #define MAXARGMASK (MAXARG - 1) +#define PATHNAME_SIZE 256 /* Task flags */ #ifndef PF_KTHREAD @@ -316,7 +317,7 @@ struct { struct execve_heap { union { - char pathname[256]; + char pathname[PATHNAME_SIZE]; char maxpath[4096]; }; }; diff --git a/bpf/process/bpf_execve_event.c b/bpf/process/bpf_execve_event.c index 3d279264abb..7d5f40f7778 100644 --- a/bpf/process/bpf_execve_event.c +++ b/bpf/process/bpf_execve_event.c @@ -138,7 +138,7 @@ event_filename_builder(void *ctx, struct msg_process *curr, __u32 curr_pid, __u3 if (!heap) return 0; - memset(heap->pathname, 0, 256); + memset(heap->pathname, 0, PATHNAME_SIZE); probe_read_str(heap->pathname, size, filename); value = map_lookup_elem(&names_map, heap->pathname); if (value)