Debian Patches

Status for falcosecurity-libs/0.20.0-4.1

Patch Description Author Forwarded Bugs Origin Last update
fix-build-32bit.patch diff --git a/driver/syscall_compat.h b/driver/syscall_compat.h
index 485a875..951aab1 100644
Gianfranco Costamagna no https://github.com/falcosecurity/libs/issues/1203#issuecomment-1706496083
fixed-mips-build.patch diff --git a/driver/syscall_table.c b/driver/syscall_table.c
index 8f4e9de..3832655 100644
no
fix-build-duplicate-socket-definitions.patch diff --git a/driver/ppm_flag_helpers.h b/driver/ppm_flag_helpers.h
index d47ecc2..751a869 100644
no
test-suite-uses-32bit-friendly-types.patch diff --git a/test/drivers/test_suites/syscall_enter_suite/lseek_e.cpp b/test/drivers/test_suites/syscall_enter_suite/lseek_e.cpp
index be800c4..af868e4 100644
no
libsinsp-added-missing-libraries.patch =================================================================== no
added-missing-linkages-for-libsinsp-unittest.patch diff --git a/userspace/libsinsp/test/CMakeLists.txt b/userspace/libsinsp/test/CMakeLists.txt
index fb8c467..aee33d4 100644
no
kernel-module-builds-in-6.13.patch diff --git a/driver/Makefile.in b/driver/Makefile.in
index 7b1fdc2..6ae7578 100644
yes debian upstream
dkms.conf-updates.patch dkms.conf: declare BUILD_EXCLUSIVE_KERNEL_MIN="2.6.33" Andreas Beckmann <anbe@debian.org> no
PR-2337-0001-fix-userspace-libsinsp-fixed-flt_cast-impl-for-big-e.patch [PATCH 1/2] fix(userspace/libsinsp): fixed `flt_cast` impl for big endian systems.

For now, only s390x.
Federico Di Pierro <nierro92@gmail.com> yes upstream https://github.com/falcosecurity/libs/pull/2337 2025-04-09
PR-2337-0002-fix-userspace-libsinsp-avoid-copying-past-end-of-dat.patch [PATCH 2/2] fix(userspace/libsinsp): avoid copying past end of data bytes.

Another edge case of `evt.rawarg.*` fields.
Federico Di Pierro <nierro92@gmail.com> yes upstream https://github.com/falcosecurity/libs/pull/2337 2025-04-09
0001-fix-libsinsp-use-proper-INET6_ADDRSTRLEN-buffer-size.patch fix(libsinsp): use proper INET6_ADDRSTRLEN buffer size for inet_ntop
glibc-2.42 added __inet_ntop_chk fortification, which started to fail:

*** buffer overflow detected ***: terminated
Program received signal SIGABRT, Aborted.
0x00007ffff629b0dc in __pthread_kill_implementation () from /lib64/libc.so.6
(gdb) bt
#0 0x00007ffff629b0dc in __pthread_kill_implementation () from /lib64/libc.so.6
#1 0x00007ffff6242572 in raise () from /lib64/libc.so.6
#2 0x00007ffff6229f3b in abort () from /lib64/libc.so.6
#3 0x00007ffff622b148 in __libc_message_impl.cold () from /lib64/libc.so.6
#4 0x00007ffff6327337 in __fortify_fail () from /lib64/libc.so.6
#5 0x00007ffff6326c92 in __chk_fail () from /lib64/libc.so.6
#6 0x00007ffff6327a62 in __inet_ntop_chk () from /lib64/libc.so.6
#7 0x000055555569da3d in inet_ntop (__af=10, __src=0x555555ee0800, __dst=0x7fffffff4f90 "\260P\377\377\377\177", __dst_size=100) at /usr/include/bits/inet-fortified.h:36
#8 ipv6tuple_to_string[abi:cxx11](ipv6tuple*, bool) (tuple=0x555555ee0800, resolve=false) at /tmp/portage/dev-debug/sysdig-0.40.1/work/libs-0.20.0/userspace/libsinsp/utils.c

Use INET6_ADDRSTRLEN as destination buffer size.
Holger Hoffstätte <holger@applied-asynchrony.com> no 2025-08-03

All known versions for source package 'falcosecurity-libs'

Links