diff --git a/cmake/modules/CompilerFlags.cmake b/cmake/modules/CompilerFlags.cmake index 291c70f3118..3ac77dd8ff9 100644 --- a/cmake/modules/CompilerFlags.cmake +++ b/cmake/modules/CompilerFlags.cmake @@ -59,6 +59,10 @@ if(NOT MSVC) if(USE_ASAN) set(FALCO_SECURITY_FLAGS "${FALCO_SECURITY_FLAGS} -fsanitize=address") endif() + # todo(leogr): this should be passed down to libs cmake modules RTLD_DEEPBIND flag is + # incompatible with sanitizer runtime (see https://github.com/google/sanitizers/issues/611 for + # details) + add_compile_definitions(DISABLE_RTLD_DEEPBIND=$,1,0>) if(USE_UBSAN) set(FALCO_SECURITY_FLAGS "${FALCO_SECURITY_FLAGS} -fsanitize=undefined") diff --git a/cmake/modules/driver.cmake b/cmake/modules/driver.cmake index 3ac70b3e591..c664d07b2ce 100644 --- a/cmake/modules/driver.cmake +++ b/cmake/modules/driver.cmake @@ -1,6 +1,6 @@ # SPDX-License-Identifier: Apache-2.0 # -# Copyright (C) 2023 The Falco Authors. +# Copyright (C) 2025 The Falco Authors. # # Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except # in compliance with the License. You may obtain a copy of the License at @@ -35,9 +35,9 @@ else() # FALCOSECURITY_LIBS_VERSION. In case you want to test against another driver version (or # branch, or commit) just pass the variable - ie., `cmake -DDRIVER_VERSION=dev ..` if(NOT DRIVER_VERSION) - set(DRIVER_VERSION "1393d43b0193707c2383f586896cc42cc7ab7cf7") + set(DRIVER_VERSION "1de61cd2b7abcfbb492b5da7fbeaef5b0a5c0f20") set(DRIVER_CHECKSUM - "SHA256=c7ab519a73dae10e140723458c735aa2a303e184e9a450c2f266c61ccb1d6beb" + "SHA256=fe98c0343954a7789c6cef692480905a60d943de657385d109b537e23689146e" ) endif() diff --git a/cmake/modules/falcosecurity-libs.cmake b/cmake/modules/falcosecurity-libs.cmake index 022551b29ef..b4b2cc5dd86 100644 --- a/cmake/modules/falcosecurity-libs.cmake +++ b/cmake/modules/falcosecurity-libs.cmake @@ -1,6 +1,6 @@ # SPDX-License-Identifier: Apache-2.0 # -# Copyright (C) 2023 The Falco Authors. +# Copyright (C) 2025 The Falco Authors. # # Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except # in compliance with the License. You may obtain a copy of the License at @@ -42,9 +42,9 @@ else() # version (or branch, or commit) just pass the variable - ie., `cmake # -DFALCOSECURITY_LIBS_VERSION=dev ..` if(NOT FALCOSECURITY_LIBS_VERSION) - set(FALCOSECURITY_LIBS_VERSION "1393d43b0193707c2383f586896cc42cc7ab7cf7") + set(FALCOSECURITY_LIBS_VERSION "1de61cd2b7abcfbb492b5da7fbeaef5b0a5c0f20") set(FALCOSECURITY_LIBS_CHECKSUM - "SHA256=c7ab519a73dae10e140723458c735aa2a303e184e9a450c2f266c61ccb1d6beb" + "SHA256=fe98c0343954a7789c6cef692480905a60d943de657385d109b537e23689146e" ) endif() diff --git a/userspace/engine/falco_engine_version.h b/userspace/engine/falco_engine_version.h index 305ef5612eb..578d91b0832 100644 --- a/userspace/engine/falco_engine_version.h +++ b/userspace/engine/falco_engine_version.h @@ -1,6 +1,6 @@ // SPDX-License-Identifier: Apache-2.0 /* -Copyright (C) 2023 The Falco Authors. +Copyright (C) 2025 The Falco Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. @@ -20,7 +20,7 @@ limitations under the License. // The version of this Falco engine #define FALCO_ENGINE_VERSION_MAJOR 0 -#define FALCO_ENGINE_VERSION_MINOR 56 +#define FALCO_ENGINE_VERSION_MINOR 57 #define FALCO_ENGINE_VERSION_PATCH 0 #define FALCO_ENGINE_VERSION \ @@ -36,4 +36,4 @@ limitations under the License. // It represents the fields supported by this version of Falco, // the event types, and the underlying driverevent schema. It's used to // detetect changes in engine version in our CI jobs. -#define FALCO_ENGINE_CHECKSUM "28070d03036a51744f657722418e46b9f15d337f338896c46d8d52de1c4e72c1" +#define FALCO_ENGINE_CHECKSUM "a9787fa5f87bfec984774540fa9c0282c06ea04696625c3a90898bb108c5cb16"