aquasecurity / aquasecurity/tracee
empty events in the file writes channel
Open
area/capture
area/ebpf
kind/bug
priority/backlog
- Dominant language
- Go
- Stars
- 4.6k
- Forks
- 507
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 9
Description
Not critical, just as reminder: https://github.com/aquasecurity/tracee/pull/696#issuecomment-818921704
> Note that this doesn't fix the root cause of the bug.
Why can there be events of 0 bytes in the file write channel?
The callback shouldn't have been called in that case...
Contributor guide
Research direction
Start with the discussion on PR #696 and trace the file-write channel callback that can emit a zero-byte event. Reproduce or instrument the path to identify why the callback runs, then verify that zero-byte events are no longer emitted and document or test the fix.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100