wip

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>
falcosecurity · Sep 21, 2024 · 0e58535 · 0e58535
1 parent 63a5575
commit 0e58535
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/test/libsinsp_e2e/event_capture.cpp b/test/libsinsp_e2e/event_capture.cpp
@@ -116,7 +116,7 @@ void event_capture::capture() {
 			next_result = get_inspector()->next(&event);
 		}
 		if(next_result == SCAP_SUCCESS) {
-			if(event->get_type() == PPME_SYSCALL_KILL_E && event->get_param(1)->as<int8_t>() == -1) {
+			if(event->get_type() == PPME_SYSCALL_LSEEK_E && event->get_param(0)->as<int64_t>() == -1) {
 				end_event = true;
 				if(m_capture_stopped) {
 					break;

diff --git a/test/libsinsp_e2e/event_capture.h b/test/libsinsp_e2e/event_capture.h
@@ -158,9 +158,9 @@ class event_capture {
 
 		if(!capturing.m_start_failed.load()) {
 			run_function(capturing.get_inspector_handle());
-			// This kill is just used to be sure that all the events
+			// This lseek is just used to be sure that all the events
 			// created in the run_function were consumed.
-			kill(-1,-1);
+			lseek(-1,-1,-1);
 			capturing.wait_for_capture_stop();
 		} else {
 			std::unique_lock<std::mutex> error_lookup_lock(capturing.m_object_state_mutex);