fix: memory issues for file monitoring

Author: siddh34

CHANGELOG.json

@@ -1,4 +1,7 @@
-[   
+[   {
+		"version": "0.3.1",
+		"changes": ["Fix memory leak in file event handling"]
+	},
     {
         "version": "0.3.0",
         "changes": [

VERSION.txt

@@ -1 +1 @@
-0.3.0
+0.3.1

helpers/delete.h

@@ -52,7 +52,6 @@ static __always_inline int trace_file_delete(struct pt_regs *ctx, struct dentry
     bpf_core_read(&d_parent_flags, sizeof(d_parent_flags), &parent_de->d_flags);
     bpf_core_read(&d_flags, sizeof(d_flags), &de->d_flags);
     if ((d_parent_flags & DCACHE_NEGATIVE_DENTRY) || (d_flags & DCACHE_NEGATIVE_DENTRY)) {
-        bpf_trace_printk("Negative dentry detected: parent flags: %u, dentry flags: %u\n", d_parent_flags, d_flags);
         DISCARD_AND_RETURN(data);
     }
 

helpers/read_write.h

@@ -23,44 +23,39 @@ static __always_inline int trace_file_operation(struct pt_regs *ctx, struct file
     bpf_core_read(&de, sizeof(de), &file->f_path.dentry);
     if (!de)
     {
-        bpf_ringbuf_discard(data, 0);
-        return 0;
+        DISCARD_AND_RETURN(data);
     }
 
     // Get filename
     struct qstr d_name = {};
     bpf_core_read(&d_name, sizeof(d_name), &de->d_name);
     if (d_name.len == 0)
     {
-        bpf_ringbuf_discard(data, 0);
-        return 0;
+        DISCARD_AND_RETURN(data);
     }
 
     // Get parent dentry
     struct dentry *parent_de = NULL;
     bpf_core_read(&parent_de, sizeof(parent_de), &de->d_parent);
     if (!parent_de)
     {
-        bpf_ringbuf_discard(data, 0);
-        return 0;
+        DISCARD_AND_RETURN(data);
     }
 
     // Get parent filename
     struct qstr parent_d_name = {};
     bpf_core_read(&parent_d_name, sizeof(parent_d_name), &parent_de->d_name);
     if (parent_d_name.len == 0)
     {
-        bpf_ringbuf_discard(data, 0);
-        return 0;
+        DISCARD_AND_RETURN(data);
     }
 
     // Get Inode from file structure
     struct inode *inode_ptr = NULL;
     bpf_core_read(&inode_ptr, sizeof(inode_ptr), &file->f_inode);
     if (!inode_ptr)
     {
-        bpf_ringbuf_discard(data, 0);
-        return 0;
+        DISCARD_AND_RETURN(data);
     }
 
     // Get the current cgroup ID

helpers/rename.h

@@ -58,7 +58,6 @@ static __always_inline int trace_file_rename(
     bpf_core_read(&new_parent_flags, sizeof(new_parent_flags), &new_parent_de->d_flags);
     bpf_core_read(&old_parent_flags, sizeof(old_parent_flags), &old_parent_de->d_flags);
     if ((old_parent_flags & DCACHE_NEGATIVE_DENTRY) || (new_parent_flags & DCACHE_NEGATIVE_DENTRY)) {
-        bpf_trace_printk("Negative dentry detected: old parent flags: %u, new parent flags: %u\n", old_parent_flags, new_parent_flags);
         DISCARD_AND_RETURN(data);
     }