github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-01 09:02:18 +00:00
Code Issues Projects Releases Wiki Activity

fix(app_actions): base_syscalls check for empty string

Browse Source 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
This commit is contained in:
Melissa Kilby 2023-02-23 23:14:56 +00:00 committed by poiana
parent 58dc60e58d
commit 0de9af9ed0
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
userspace/falco/app/actions/helpers_interesting_sets.cpp
View File

@ -23,7 +23,9 @@ void extract_base_syscalls_names(const std::unordered_set<std::string>& base_sys
{
for (const std::string &ev : base_syscalls_names)
{
if(ev.at(0) == '!')
if (!ev.empty())
{
if (ev.at(0) == '!')
{
negative_names.insert(ev.substr(1, ev.size()));
}
@ -32,6 +34,7 @@ void extract_base_syscalls_names(const std::unordered_set<std::string>& base_sys
positive_names.insert(ev);
}
}
}
}
static libsinsp::events::set<ppm_event_code> extract_rules_event_set(falco::app::state& s)