fix: failed byte off relocation for iov_iter.iov (#176)

fix: failed byte off relocation (iov_iter.iov)
elastic · Oct 10, 2023 · 84e2581 · 84e2581
1 parent f2581d8
commit 84e2581
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/GPL/Events/Process/Probe.bpf.c b/GPL/Events/Process/Probe.bpf.c
@@ -372,11 +372,12 @@ static int tty_write__enter(struct kiocb *iocb, struct iov_iter *from)
     }
 
     const struct iovec *iov;
-    if (FIELD_OFFSET(iov_iter, __iov)) {
+    if (FIELD_OFFSET(iov_iter, __iov))
         iov = (const struct iovec *)((char *)from + FIELD_OFFSET(iov_iter, __iov));
-    } else {
+    else if (bpf_core_field_exists(from->iov))
         iov = BPF_CORE_READ(from, iov);
-    }
+    else
+        goto out;
 
     u64 nr_segs = BPF_CORE_READ(from, nr_segs);
     nr_segs     = nr_segs > MAX_NR_SEGS ? MAX_NR_SEGS : nr_segs;