Skip to content

Conversation

@thouravi
Copy link

Description

When a new process start event was received for an existing Process ID (PID), the existing ProcessInfo handle (mHandle) was not closed, leading to handle leaks and potential resource exhaustion.

Solution

Closed the existing process handle in ProcessProcessEvent before reinitializing ProcessInfo for reused PIDs and Added checks to safely close mHandle when a process start event overlaps with a previously tracked PID.

@thouravi thouravi closed this by deleting the head repository Aug 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant