Skip to content

_ebpf_pe_get_map_definitions is fragile #4168

Open
@Alan-Jowett

Description

@Alan-Jowett

The function _ebpf_pe_get_map_definitions is fragile in how it parses map data from PE images and handles long map names. It should use the offset of the first long string to determine the end of the maps section instead of relying on an unreliable heuristic.

For now, it appears to work, but if map_entry_t format changes it may break again.

Metadata

Metadata

Assignees

No one assigned

    Labels

    P3cleanupAffects API usability or code maintainability but not correctness or applicabilityhelp wantedExtra attention is neededtriagedDiscussed in a triage meeting

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions