4
Windows: Detect when an extension has not started by ameily · Pull Request #7355...
source link: https://github.com/osquery/osquery/pull/7355
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Detect when a Windows extension has not started, which mirror how the Posix PlatformProcess operates. The problem was that GetExitCodeProcess() was being called with an invalid handle, which returns a value indicating that the process is still active. So, extensions were never executed.
The fix is to check if the handle is valid prior to checking if the process is alive.
fixes #7324
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK