Osquerybeat: Fix host_processes missing cmdline arguments

aleksmaus · aleksmaus · commit 060468aacacb · 2021-10-25T10:14:46.000-04:00
diff --git a/x-pack/osquerybeat/ext/osquery-extension/internal/proc/cmdline.go b/x-pack/osquerybeat/ext/osquery-extension/internal/proc/cmdline.go
@@ -5,6 +5,7 @@
 package proc
 
 import (
+	"bytes"
 	"io/ioutil"
 	"strings"
 )
@@ -17,5 +18,7 @@ func ReadCmdLine(root string, pid string) (string, error) {
 		return "", err
 	}
 
+	b = bytes.ReplaceAll(b, []byte{0}, []byte{' '})
+
 	return strings.TrimSpace(string(b)), nil
 }

Original file line number	Diff line number	Diff line change
`@@ -5,6 +5,7 @@`
`5`	`5`	`package proc`
`6`	`6`
`7`	`7`	`import (`
	`8`	`+ "bytes"`
`8`	`9`	`"io/ioutil"`
`9`	`10`	`"strings"`
`10`	`11`	`)`
`@@ -17,5 +18,7 @@ func ReadCmdLine(root string, pid string) (string, error) {`
`17`	`18`	`return "", err`
`18`	`19`	`}`
`19`	`20`
	`21`	`+ b = bytes.ReplaceAll(b, []byte{0}, []byte{' '})`
	`22`	`+`
`20`	`23`	`return strings.TrimSpace(string(b)), nil`
`21`	`24`	`}`