microsoft / microsoft/ebpf-for-windows
Need for a bpf_tolower() utility function
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 311
- Avg merge
- 6d 10h
- Merged PRs (30d)
- 21
Description
### Describe the feature you'd like supported
Windows filesystems are case insensitive for paths and hence lookups for maps containing paths could fail because same path may be looked up with different cases.
For example a bpf_map containing `C:\Windows\System32\notepad.exe` will not be able to find `c:\windows\system32\notepad.exe` , even though they represent the same binary on disk.
There should be an easy way to convert paths/strings in hooks to lowercase.
### Proposed solution
To facilitate case insensitivity, bpf programs should have a `bpf_tolower` function (or somthing similar) so that bpf developers do not have to write one and embattle the verifier.
### Additional context
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.