address review requests

Signed-off-by: rohith-raju <rohithraju488@gmail.com>
falcosecurity · Jun 27, 2023 · 2bc2c4f · 2bc2c4f
1 parent b54e827
commit 2bc2c4f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/userspace/libsinsp/parsers.cpp b/userspace/libsinsp/parsers.cpp
@@ -6055,6 +6055,10 @@ void sinsp_parser::parse_memfd_create_exit(sinsp_evt *evt, scap_fd_type type)
 	fd = *(int64_t *)parinfo->m_val;
 
 	/* name */
+	/*
+	Suppose you create a memfd named libstest resulting in a fd.name libstest while on disk 
+	(e.g. ls -l /proc/$PID/fd/$FD_NUM) it may look like /memfd:libstest (deleted)
+	*/
 	parinfo = evt->get_param(1);
 	name = parinfo->m_val;