Upstream pr/opens gadget procfs - #84
Closed
entlein wants to merge 15 commits into
Closed
Conversation
entlein
force-pushed
the
upstream-pr/opens-gadget-procfs
branch
4 times, most recently
from
August 17, 2026 09:19
c7862e0 to
95ef8c9
Compare
Signed-off-by: entlein <einentlein@gmail.com>
The 5-byte proc/ prepend decremented buf_off unguarded; a dentry chain longer than the half-buffer could wrap the offset and corrupt the emitted path (masked writes keep it memory-safe). Unreachable for PATH_MAX-bounded paths - defense in depth. On insufficient space the prepend is skipped. Signed-off-by: entlein <einentlein@gmail.com>
…metic Proves the u32 wrap below buf_off=5 and pins the shipped header (guard present, buffer constants unchanged) so the analysis breaks loudly on drift. Signed-off-by: entlein <einentlein@gmail.com>
…kload recorded_profile_absolute_paths gains the scrambled-path check (a resolved path never begins with a numeric segment) and a second learned workload, bitnami/redis: its container init opens procfs through detached fsopen/fsmount handles on runc >= 1.2, the natural reproducer for prefix-stripped /proc paths that plain nginx never exercises. A positive control requires at least one /proc/-rooted open in the bitnami profile so a silently event-less gadget cannot pass the negative checks vacuously. Signed-off-by: entlein <einentlein@gmail.com>
…ro-demo redis manifest Replace the hand-written fixture with the verbatim helm render of the redis distro deployment (bitnamicharts/redis 27.0.18, digest-pinned image - the tag was removed from the registries, which is what timed the previous leg out). The test applies every rendered document and waits on the statefulset pod and the learned profile completion directly. Signed-off-by: entlein <einentlein@gmail.com>
the patch didnt delete, just add Signed-off-by: entlein <einentlein@gmail.com>
add null guard that got lost in the conflict resolv Signed-off-by: entlein <einentlein@gmail.com>
Signed-off-by: entlein <einentlein@gmail.com>
Signed-off-by: entlein <einentlein@gmail.com>
entlein
force-pushed
the
upstream-pr/opens-gadget-procfs
branch
from
August 17, 2026 09:20
95ef8c9 to
7e7fa12
Compare
Readme should not show up with a diff in this PR
Signed-off-by: entlein <einentlein@gmail.com>
Author
|
has been merged upstream |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview