Patch from: https://github.com/falcosecurity/libs/commit/de3f4cac9233682eae63c63377c82efb649679f5 From de3f4cac9233682eae63c63377c82efb649679f5 Mon Sep 17 00:00:00 2001 From: Shane Lawrence Date: Thu, 20 Feb 2025 14:55:41 +0000 Subject: [PATCH] Fix buffer overrun reading sockets from procfs. Signed-off-by: Shane Lawrence --- userspace/libscap/linux/scap_fds.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/userspace/libscap/linux/scap_fds.c b/userspace/libscap/linux/scap_fds.c index f98ac3f32f..73e99ca428 100644 --- a/userspace/libscap/linux/scap_fds.c +++ b/userspace/libscap/linux/scap_fds.c @@ -766,7 +766,7 @@ int32_t scap_fd_read_ipv4_sockets_from_proc_fs(const char *dir, break; } - while(*scan_pos == ' ' && scan_pos < scan_end) { + while(scan_pos < scan_end && *scan_pos == ' ') { scan_pos++; } @@ -974,7 +974,7 @@ int32_t scap_fd_read_ipv6_sockets_from_proc_fs(char *dir, break; } - while(*scan_pos == ' ' && scan_pos < scan_end) { + while(scan_pos < scan_end && *scan_pos == ' ') { scan_pos++; }