cleanup(driver/bpf): use _READ_USER helper

Signed-off-by: Roberto Scolaro <[email protected]>
falcosecurity · Mar 27, 2024 · 2528afa · 2528afa
1 parent a5546b6
commit 2528afa
Showing 1 changed file with 3 additions and 6 deletions.
diff --git a/driver/bpf/fillers.h b/driver/bpf/fillers.h
@@ -4019,8 +4019,7 @@ FILLER(sys_getresuid_and_gid_x, true)
 	 * ruid
 	 */
 	idp = (uint32_t *)bpf_syscall_get_argument(data, 0);
-	if (bpf_probe_read_user(&id, sizeof(idp), (void *)idp))
-		return PPM_FAILURE_INVALID_USER_MEMORY;
+	id = _READ_USER(*idp);
 
 	res = bpf_push_u32_to_ring(data, id);
 	CHECK_RES(res);
@@ -4029,8 +4028,7 @@ FILLER(sys_getresuid_and_gid_x, true)
 	 * euid
 	 */
 	idp = (uint32_t *)bpf_syscall_get_argument(data, 1);
-	if (bpf_probe_read_user(&id, sizeof(idp), (void *)idp))
-		return PPM_FAILURE_INVALID_USER_MEMORY;
+	id = _READ_USER(*idp);
 
 	res = bpf_push_u32_to_ring(data, id);
 	CHECK_RES(res);
@@ -4039,8 +4037,7 @@ FILLER(sys_getresuid_and_gid_x, true)
 	 * suid
 	 */
 	idp = (uint32_t *)bpf_syscall_get_argument(data, 2);
-	if (bpf_probe_read_user(&id, sizeof(idp), (void *)idp))
-		return PPM_FAILURE_INVALID_USER_MEMORY;
+	id = _READ_USER(*idp);
 
 	return bpf_push_u32_to_ring(data, id);
 }