corelight / corelight/CVE-2022-24491

warning: handler for non-existing event cannot be invoked

Open
#2 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Zeek
Stars
3
Forks
0
PR merge metrics
No merged PRs in 30d

Description

I was playing around with this package and get these warnings when it's run:

```
warning in /opt/zeek/share/zeek/site/packages/CVE-2022-24491/main.zeek, line 9: handler for non-existing event cannot be invoked (CVE202224491::to_workers_set)
warning in /opt/zeek/share/zeek/site/packages/CVE-2022-24491/main.zeek, line 14: handler for non-existing event cannot be invoked (set_endpoint)
```

Zeek v7.0.3

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by running the CVE-2022-24491 package with Zeek v7.0.3 and inspect main.zeek at lines 9 and 14, where the warnings identify to_workers_set and set_endpoint. Determine the intended behavior for these non-existing event handlers; done means the package no longer emits the reported warnings without losing detector functionality.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.