Skip to content

Conversation

thouravi
Copy link

Description

When a new process start event was received for an existing Process ID (PID), the existing ProcessInfo handle (mHandle) was not closed, leading to handle leaks and potential resource exhaustion.

Solution

Closed the existing process handle in ProcessProcessEvent before reinitializing ProcessInfo for reused PIDs and Added checks to safely close mHandle when a process start event overlaps with a previously tracked PID.

@thouravi thouravi closed this by deleting the head repository Aug 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant