Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Null bytes in process binary names #1083

Closed
2 tasks done
willfindlay opened this issue Jun 15, 2023 · 0 comments · Fixed by #1090
Closed
2 tasks done

Null bytes in process binary names #1083

willfindlay opened this issue Jun 15, 2023 · 0 comments · Fixed by #1090
Assignees
Labels
kind/bug Something isn't working

Comments

@willfindlay
Copy link
Contributor

willfindlay commented Jun 15, 2023

Is there an existing issue for this?

  • I have searched the existing issues

What happened?

We noticed some null bytes in process binary names where there shouldn't be any. Reproducible by letting Tetragon run for a while under a simple test workload and watching the metrics. You end up with binary names like the following when viewing the mtrics in vim:

tetragon_events_total{binary="^@^@^@^@^@^@^@^@^@^@^@^@^@",namespace="",pod="",type="PROCESS_EXEC"} 1
tetragon_events_total{binary="^@^@^@^@^@^@^@^@^@^@^@^@^@",namespace="",pod="",type="PROCESS_EXIT"} 1
tetragon_events_total{binary="^@^@^@^@^@^@^@^@^@^@^@^@^@^@",namespace="",pod="",type="PROCESS_EXIT"} 1

Tetragon Version

Main at tag eb69bdc

Kernel Version

Linux 5.15.0-69-generic x86_64

Kubernetes Version

No response

Bugtool

No response

Relevant log output

No response

Anything else?

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
@willfindlay willfindlay added the kind/bug Something isn't working label Jun 15, 2023
@willfindlay willfindlay changed the title Control characters in process binary names Null bytes in process binary names Jun 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants