Adding a check for nil port

Signed-off-by: Amit Schendel <amitschendel@gmail.com>
kubescape · Aug 29, 2024 · 4284869 · 4284869
1 parent fe5e5b8
commit 4284869
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/pkg/ruleengine/v1/r1009_crypto_mining_port.go b/pkg/ruleengine/v1/r1009_crypto_mining_port.go
@@ -82,6 +82,10 @@ func (rule *R1009CryptoMiningRelatedPort) ProcessEvent(eventType utils.EventType
 	// Check if the port is in the egress list.
 	for _, nn := range nnContainer.Egress {
 		for _, port := range nn.Ports {
+			if port.Port == nil {
+				continue
+			}
+
 			if networkEvent.Port == uint16(*port.Port) {
 				return nil
 			}

diff --git a/pkg/ruleengine/v1/r1009_crypto_mining_port_test.go b/pkg/ruleengine/v1/r1009_crypto_mining_port_test.go
@@ -88,4 +88,12 @@ func TestR1009CryptoMiningRelatedPort(t *testing.T) {
 		t.Errorf("Expected nil, got %v", result)
 	}
 
+	// Test with nil port in the egress list
+	port = 0
+	objCache.nn.Spec.Containers[0].Egress[0].Ports[0].Port = &port
+	result = rule.ProcessEvent(eventType, event, &objCache)
+	if result == nil {
+		t.Errorf("Expected not nil, got %v", result)
+	}
+
 }