Skip to content

Commit 960e8aa

Browse files
committed
pINT: Skip __queue_work() probe when called from any non-task context
Our task integrity checks assume that the current task is in consistent state, which was apparently not guaranteed here. Amends 863b28d Fixes #432
1 parent 9a002f3 commit 960e8aa

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/modules/exploit_detection/syscalls/pCFI/p___queue_work/p___queue_work.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ static int p_pcfi___queue_work_entry(struct kprobe *p_ri, struct pt_regs *p_regs
2626

2727
p_ed_pcfi_cpu(0);
2828

29-
if (!in_irq() && p_is_ed_task(current)) {
29+
if (in_task() && p_is_ed_task(current)) {
3030
/* Do not take ED lock */
3131
if ((p_tmp = ed_task_trylock_current())) {
3232
p_ed_validate_current(p_tmp);

0 commit comments

Comments
 (0)