update(libsinsp): handle buflen as int64 and not pointer in filterchecks

Signed-off-by: Luca Guerra <[email protected]>
falcosecurity · Nov 3, 2023 · b2f5c20 · b2f5c20
1 parent 210ab62
commit b2f5c20
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/userspace/libsinsp/sinsp_filtercheck_event.cpp b/userspace/libsinsp/sinsp_filtercheck_event.cpp
@@ -612,17 +612,14 @@ inline uint8_t* sinsp_filter_check_event::extract_buflen(sinsp_evt *evt, OUT uin
 {
 	if(evt->get_direction() == SCAP_ED_OUT)
 	{
-		sinsp_evt_param *parinfo;
-		int64_t retval;
-
 		//
 		// Extract the return value
 		//
-		retval = evt->get_param<int64_t>(0);
+		m_s64val = evt->get_param<int64_t>(0);
 
-		if(retval >= 0)
+		if(m_s64val >= 0)
 		{
-			RETURN_EXTRACT_PTR(parinfo->m_val);
+			RETURN_EXTRACT_VAR(m_s64val);
 		}
 	}
 

diff --git a/userspace/libsinsp/sinsp_filtercheck_event.h b/userspace/libsinsp/sinsp_filtercheck_event.h
@@ -98,6 +98,7 @@ class sinsp_filter_check_event : public sinsp_filter_check
 	bool compare(sinsp_evt *evt);
 
 	uint64_t m_u64val;
+	int64_t m_s64val;
 	uint64_t m_tsdelta;
 	uint32_t m_u32val;
 	std::string m_strstorage;