Skip to content

Commit 9edf9e0

Browse files
committed
Add (failing) test data for BPF, URINGOP records
Numeric fields get mis-parsed as encoded strings
1 parent 6a15844 commit 9edf9e0

File tree

3 files changed

+26
-0
lines changed

3 files changed

+26
-0
lines changed

src/test.rs

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -516,3 +516,27 @@ fn serde_message() {
516516
],
517517
);
518518
}
519+
520+
#[test]
521+
#[should_panic]
522+
fn parse_uringop() {
523+
let msg = parse(include_bytes!("testdata/line-uringop.txt"), false).unwrap();
524+
println!("{msg:?}");
525+
let v = msg
526+
.body
527+
.get("uring_op")
528+
.unwrap_or_else(|| panic!("{}: uring_op not found", msg.id));
529+
assert_eq!(*v, Value::Number(Number::Dec(18)));
530+
}
531+
532+
#[test]
533+
#[should_panic]
534+
fn parse_bpf() {
535+
let msg = parse(include_bytes!("testdata/line-bpf.txt"), false).unwrap();
536+
println!("{msg:?}");
537+
let v = msg
538+
.body
539+
.get("prog-id")
540+
.unwrap_or_else(|| panic!("{}: prog-id not found", msg.id));
541+
assert_eq!(*v, Value::Number(Number::Dec(75)));
542+
}

src/testdata/line-bpf.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
type=BPF msg=audit(1737533267.765:12263987): prog-id=75 op=LOAD

src/testdata/line-uringop.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
type=URINGOP msg=audit(1737533617.373:12266329): uring_op=18 success=yes exit=0 items=0 ppid=140504 pid=3178806 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 subj=unconfined key=(null)

0 commit comments

Comments
 (0)