Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Schedule probe "failed to read argv" error #14

Closed
dstruck opened this issue Dec 6, 2023 · 2 comments
Closed

Schedule probe "failed to read argv" error #14

dstruck opened this issue Dec 6, 2023 · 2 comments
Labels
duplicate This issue or pull request already exists

Comments

@dstruck
Copy link

dstruck commented Dec 6, 2023

Hello,

Getting the following errors:

[2023-12-05T19:36:26Z ERROR kunai_ebpf::probes::schedule] failed to read argv
[2023-12-05T19:36:26Z ERROR kunai_ebpf::probes::schedule] failed to read argv
[2023-12-05T19:36:26Z ERROR kunai_ebpf::probes::schedule] failed to read argv

Using the latest binary (v0.1.0).

What might be the reason?

@qjerome
Copy link
Member

qjerome commented Dec 6, 2023

This is a known issue, which occurs only when argv is empty string.
This is due to a bug in one of the Aya helper function I am using and it should be solved when I upgrade Aya.
However Aya upgrade was blocking on my side and some of the latest fix in Aya were made to fix my issues.
Aya upgrade is definitely something I have to address soon.

Please note that, in spite of this error, there should be no impact on the events generated by Kunai because it is not a blocking error. Additionally when argv fails at being read, it is by default empty, so no issue in that case.

@qjerome
Copy link
Member

qjerome commented Dec 6, 2023

Should be fixed when #7 is resolved

@qjerome qjerome added the duplicate This issue or pull request already exists label Dec 6, 2023
@qjerome qjerome changed the title "failed to read argv" error Schedule probe "failed to read argv" error Dec 6, 2023
qjerome added a commit that referenced this issue Jan 16, 2024
Signed-off-by: qjerome <qjerome@rawsec.lu>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
duplicate This issue or pull request already exists
Projects
None yet
Development

No branches or pull requests

2 participants