corelight / corelight/CVE-2022-24491
warning: handler for non-existing event cannot be invoked
- Dominant language
- Zeek
- Stars
- 3
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
I was playing around with this package and get these warnings when it's run:
```
warning in /opt/zeek/share/zeek/site/packages/CVE-2022-24491/main.zeek, line 9: handler for non-existing event cannot be invoked (CVE202224491::to_workers_set)
warning in /opt/zeek/share/zeek/site/packages/CVE-2022-24491/main.zeek, line 14: handler for non-existing event cannot be invoked (set_endpoint)
```
Zeek v7.0.3
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by running the CVE-2022-24491 package with Zeek v7.0.3 and inspect main.zeek at lines 9 and 14, where the warnings identify to_workers_set and set_endpoint. Determine the intended behavior for these non-existing event handlers; done means the package no longer emits the reported warnings without losing detector functionality.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100