Stefano Bonicatti

Results 44 issues of Stefano Bonicatti

``` 83: FAIL: test_json_pretty_output (__main__.OsqueryiTest) 83: Test that the output of --json_pretty is valid json 83: ---------------------------------------------------------------------- 83: Traceback (most recent call last): 83: File "/Users/runner/work/osquery/osquery/workspace/build/tools/tests/test_osqueryi.py", line 204, in test_json_pretty_output...

flaky test

The logic parsing the Audit message header was a bit too lenient towards a malformed prefix and so it was possible to cause a crash. Improve the checks done to...

bug
Linux
ready for review
events
performance

This is followup/cleanup work for PR https://github.com/osquery/osquery/pull/7561, which when it will be merged, the python tests will report in the logs that several flags cannot be set, because they are...

configuration
test

Under Apple Silicon there's no SMBIOS, so all the tables based on that spec are not working. The tables are: `memory_devices` `memory_array_mapped_addresses` `memory_arrays` `memory_device_mapped_addresses` `memory_error_info` `smbios_tables` `oem_strings`

bug
virtual tables
apple_silicon

Everytime the `OptionsConfigParserPlugin` receives the JSON from the `options` key to parse, takes it and merges it with the previous JSON state, it saves the new JSON document resulting from...

performance
configuration
oss-fuzz

Implement a simple fuzzer for the audit message header parsing. Also improve our CMake APIs so that we can better select which libraries we need to link, so to create...

oss-fuzz

# Bug report ### What operating system and version are you using? Windows 10 ### What version of osquery are you using? osquery master ### What steps did you take...

bug
virtual tables
Windows

# Blueprint ## Goal Deprecate and then remove the foreign table logic ## Reason In the past, while attempting to reduce the size of test binaries and their linking time,...

build
virtual tables
blueprint
deprecation

WORK IN PROGRESS A simple extension to allow locking and unlocking of linux local user accounts. Uses "usermod --lock --expiredate 1 " and "usermod --unlock --expiredate '' " to lock...

osquery-extensions

Bring in the change that permits ebpf-common LLVM libraries to link against a custom zlib library.