Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Always use BIGINT macro for 'long long' data #6986

Merged

Conversation

mike-myers-tob
Copy link
Member

Following up on #6897 this is basically the same deal: always use the BIGINT macro rather than the INTEGER macro when dealing with long long values, or they might generate warnings and not report data, the same as explained in the last PR.

@theopolis
Copy link
Member

You can enforce the schema with a small heuristic similar to https://github.com/osquery/osquery/blob/master/tools/codegen/gentable.py#L415

My thought was to look for columns named *_time or named time and enforce they are type BIGINT.

@mike-myers-tob
Copy link
Member Author

You can enforce the schema with a small heuristic similar to https://github.com/osquery/osquery/blob/master/tools/codegen/gentable.py#L415

My thought was to look for columns named *_time or named time and enforce they are type BIGINT.

Table gen spec file is a bit of internal magic I am not familiar with, but that looks like a relatively simple change, someone just has to generalize that check already being done currently for _events tables?

@theopolis theopolis merged commit 552b2d4 into osquery:master Mar 11, 2021
@mike-myers-tob mike-myers-tob deleted the mike/fix-more-timestamp-conversions branch March 11, 2021 21:58
aikuchin pushed a commit to aikuchin/osquery that referenced this pull request Jul 11, 2023
…0 to master

* commit '943935789dbfb03b55db1471ed1595e1fd4ffe23': (119 commits)
  seccomp migrations
  Add 4.7.0 CHANGELOG (osquery#6985)
  ATC fails because journal_mode pragma is blocked by sqlite authorizer (osquery#6999)
  Always use BIGINT macro for 'long long' data (osquery#6986)
  chrome_extensions: Refactor the table, add tests (osquery#6780)
  Remove extraneous lenses directory for augues on macOS (osquery#6998)
  Update the info about macOS CI (osquery#6988)
  Make Group ID columns consistent across Windows tables (osquery#6987)
  Fix mem leak regression with Windows' sids API (osquery#6984)
  Fix error in process_open_files around stoi vs stoul (osquery#6983)
  Remove hash and yara table from fuzz harnesses (osquery#6972)
  Augeas Table: Don't autoload system lenses (osquery#6980)
  Augeas Table: Fix output bug (osquery#6981)
  Add concat and concat_ws functions (osquery#6927)
  Copy JSON objects to avoid MemoryPool buildup (osquery#6957)
  Fix CODEOWNERS syntax to allow committers and TSC (osquery#6975)
  augeas: Clear aug pointer on error (osquery#6973)
  Adds support for the computer field in Windows Eventlogs (osquery#6952)
  Add Shellbags table (osquery#6949)
  Implementation of VM metadata table for Yandex.Cloud (osquery#6961)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants