Sysinternals / SysmonForLinux

MIT License
1.74k stars 184 forks source link

Add -fno-stack-protector to eBPF program compile line #42

Closed ckane closed 2 years ago

ckane commented 2 years ago

When compiling with this feature enabled for the project, we don't want it to be enabled on the stand-alone ebpf programs, because they don't have access to the C runtime bits needed to be linked in to support this (as, ostensibly, the kernel would implement its own facilities for this). Add -fno-stack-protector to the eBPF program compilation only so that it always turns the feature off when building the eBPF programlets.

Additionally, this PR contains a stylistic change to pre-initialize empty to zeroes in NetworkTrackerSeenAccept(...), which silences a compiler warning about potential use of a value prior to initialization.