microsoft / microsoft/ebpf-for-windows

Need for a bpf_tolower() utility function

Open
#4,710 4 comments 0 reactions 1 assignee Claimed by @ExceptionalHandler View on GitHub
enhancement P2 triaged
Dominant language
C
Stars
3.6k
Forks
311
Avg merge
6d 10h
Merged PRs (30d)
21

Description

### Describe the feature you'd like supported

Windows filesystems are case insensitive for paths and hence lookups for maps containing paths could fail because same path may be looked up with different cases.
For example a bpf_map containing `C:\Windows\System32\notepad.exe` will not be able to find `c:\windows\system32\notepad.exe` , even though they represent the same binary on disk.

There should be an easy way to convert paths/strings in hooks to lowercase.

### Proposed solution

To facilitate case insensitivity, bpf programs should have a `bpf_tolower` function (or somthing similar) so that bpf developers do not have to write one and embattle the verifier.

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.