fix bug: missing original function call of php probe

bytedance · Dec 1, 2022 · 03f9838 · 03f9838
1 parent 8ebe56d
commit 03f9838
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/.github/workflows/Elkeid.yml b/.github/workflows/Elkeid.yml
@@ -29,4 +29,12 @@ jobs:
       run: cd agent && go build -o elkeid-agent
 
     - name: Build Server
-      run: cd server/build && ./build.sh
+      run: cd server/build && ./build.sh
+
+    - name: Upload RASP
+      uses: actions/upload-artifact@v3
+      with:
+        name: rasp
+        path: |
+          rasp/rasp_*.tar.gz
+          rasp/debug.tar.gz
diff --git a/rasp/php/php/api.h b/rasp/php/php/api.h
@@ -254,8 +254,10 @@ class APIEntry {
         }
 
         if constexpr (!Ret) {
-            if (!gAPIConfig->surplus(ClassID, MethodID))
+            if (!gAPIConfig->surplus(ClassID, MethodID)) {
+                origin(INTERNAL_FUNCTION_PARAM_PASSTHRU);
                 return;
+            }
 
             gAPITrace->enqueue(trace);
             origin(INTERNAL_FUNCTION_PARAM_PASSTHRU);