vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-02 18:49:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add ebpf check for failed kernel functions

Browse source
This commit is contained in:
Vladimir Stoilov 2023-06-14 17:56:01 +03:00
parent cecce3ffcb
commit 2b65e8efe1
3 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
firewall/interception/ebpf/bpf_bpfeb.o
View file

Binary file not shown.

BIN
firewall/interception/ebpf/bpf_bpfel.o
View file

Binary file not shown.

10
firewall/interception/ebpf/program/monitor.c
View file

@ -90,6 +90,11 @@ int BPF_PROG(udp_v4_connect, struct sock *sk) {
return 0; return 0;
} }
// ip4_datagram_connect return error
if (sk->__sk_common.skc_dport == 0) {
return 0;
}
// Allocate space for the event. // Allocate space for the event.
struct Event *udp_info; struct Event *udp_info;
udp_info = bpf_ringbuf_reserve(&events, sizeof(struct Event), 0); udp_info = bpf_ringbuf_reserve(&events, sizeof(struct Event), 0);
@ -128,6 +133,11 @@ int BPF_PROG(udp_v6_connect, struct sock *sk) {
return 0; return 0;
} }
// ip6_datagram_connect return error
if (sk->__sk_common.skc_dport == 0) {
return 0;
}
// Make sure its udp6 socket // Make sure its udp6 socket
struct udp6_sock *us = bpf_skc_to_udp6_sock(sk); struct udp6_sock *us = bpf_skc_to_udp6_sock(sk);
if (!us) { if (!us) {