elastic / elastic/quark

SHM_SHMEM_OPEN probes are buggy

Open
#256 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
C
Stars
22
Forks
9
Avg merge
1d 2h
Merged PRs (30d)
13

Description

```
if ((fd = shm_open("/shm_open-ohmyohmy", O_CREAT | O_RDWR, 0600)) == -1)
err(1, "shm_open");
```

This should be a SHM_OPEN event, but it shows up as a FILE event because of `O_CREAT`.
We only get a SHM_OPEN event when we `shm_open(2)` an existing thing.

I've worked around it in quark-test but it should be fixed.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the SHM_SHMEM_OPEN probes and reproduce the behavior described in the issue using the shown shm_open call. Compare the emitted event with the quark-test workaround; done means creation with O_CREAT is reported as SHM_OPEN rather than FILE, while existing-object opens retain their expected behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, linux
Domain
operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.