Comments (6)
Build the osquery with configurationType as Release and this works without any error. That concludes that there is no issue in config.
from osquery.
This looks like a parsing error in osquery; the assert is:
https://github.com/Tencent/rapidjson/blob/1a825d24fa322a5fe721624b2ed7a18b6de9b48a/include/rapidjson/document.h#L1169
from osquery.
@sreeroop I'm not able to trigger that assert here (I'm testing on macOS but it shouldn't matter).
Would you be able to attach a debugger to osquery and get a stack trace for that assert?
I'm a bit puzzled because if that's the assert, it seems like it's using the []
operator to get an element that doesn't exist, but in the code of the file_paths parsing there's only one use that I can see, and that looks fine, and especially it's not dependent on the format of the "file_paths" key.
from osquery.
I'm surprised that it's not occurring in your system. I have tried 2 different osquery versions and got it from both of them.
Anyways
I've attached the osquery process to VS debugger.
Attaching the SS below. Since I'm a beginner I don't have a clear picture what this means.(I hope attaching picture is okay.)
Can you please check these and let know, if this has what you are looking for?
If it's not there, please tell me how to get these.
PS: I've search for .pdb file. But couldn't find one.
TIA
from osquery.
It's also strange that you don't have a PDB file, or symbols in the stack trace if you did a debug build. You did display the right thing (the call stack), but I'm confused on why it's all addresses and not function names.
Can you give the CMake configuration parameters you used?
Also if you could just copy the whole content as text of the call stack tab at the bottom, it would be helpful in case we only get addresses.
from osquery.
cmake config
{
"configurations": [
{
"name": "x64-Debug",
"generator": "Ninja",
"configurationType": "Debug",
"inheritEnvironments": [ "msvc_x64_x64" ],
"buildRoot": "${projectDir}\\out\\build\\${name}",
"installRoot": "${projectDir}\\out\\install\\${name}",
"cmakeCommandArgs": "",
"cmakeExecutable": "C:\\Program Files\\CMake\\bin\\cmake.exe",
"buildCommandArgs": "",
"ctestCommandArgs": ""
}
]
}
call stack
> osqueryd.exe!00007ff680bbf0a5() Unknown
osqueryd.exe!00007ff680bbf243() Unknown
osqueryd.exe!00007ff680b690ed() Unknown
osqueryd.exe!00007ff680b60c25() Unknown
osqueryd.exe!00007ff680b604a7() Unknown
osqueryd.exe!00007ff680b5e578() Unknown
osqueryd.exe!00007ff680b60f1f() Unknown
osqueryd.exe!00007ff67e45ba2d() Unknown
osqueryd.exe!00007ff67e45ba97() Unknown
osqueryd.exe!00007ff67e45f601() Unknown
osqueryd.exe!00007ff67e57a67f() Unknown
osqueryd.exe!00007ff67e57e561() Unknown
osqueryd.exe!00007ff67e57bcd1() Unknown
osqueryd.exe!00007ff67e57ace6() Unknown
osqueryd.exe!00007ff67e6af175() Unknown
osqueryd.exe!00007ff67e698d9f() Unknown
osqueryd.exe!00007ff67e5798e1() Unknown
osqueryd.exe!00007ff6805bf5e1() Unknown
osqueryd.exe!00007ff67e6ca2a2() Unknown
osqueryd.exe!00007ff67e6d65d8() Unknown
osqueryd.exe!00007ff67f20bec8() Unknown
osqueryd.exe!00007ff680bfeab6() Unknown
osqueryd.exe!00007ff680bfe5ae() Unknown
osqueryd.exe!00007ff680bfd4f8() Unknown
osqueryd.exe!00007ff680ad16a9() Unknown
osqueryd.exe!00007ff680ad15fe() Unknown
osqueryd.exe!00007ff680ad14be() Unknown
osqueryd.exe!00007ff680ad171e() Unknown
kernel32.dll!BaseThreadInitThunk() Unknown
ntdll.dll!00007ffe2da4aa58() Unknown
from osquery.
Related Issues (20)
- Crash in ServiceArgumentParser via ServiceMain
- [email protected] aren't visible on the table authorized_keys
- There are changes in the build environment HOT 3
- Windows UBR missing in `os_version` table HOT 5
- Provide more information in the logs when distributed TLS requests fail
- Race condition when registering ATC tables HOT 3
- endpointsecurity_fim.cpp is not monitoring new files under defined path
- [Bug] [Posix] dns_resolvers returned same search domain when have multiple
- Multiple osquery services HOT 3
- Querying table `users` in Linux can cause load issues on LDAP directory servers HOT 1
- Table `curl` is not using `proxy_hostname` configuration
- autoexec table's 'path' column does not include filename when 'source' is services HOT 2
- AppArmor permissions Ubuntu 24.04 HOT 3
- Version 5.12.2 does not included changes as stated by the change log HOT 1
- CPack Error: Error when generating package: osquery
- alf Table broken on macOS 15
- Include `VSCode Insiders` extensions in `vscode_extensions`
- Potential memory leak in class ServiceArgumentParser's cleanArgs method
- When directories are monitored recursively symlink targets are considered directories.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from osquery.