update(pkg/kernelrelease): update kernelrelease regex to match more k…

…ernels.

Signed-off-by: Federico Di Pierro <[email protected]>

pkg/kernelrelease/kernelrelease.go

@@ -25,7 +25,7 @@ import (
 )
 
 var (
- kernelVersionPattern = regexp.MustCompile(`(?P<fullversion>^(?P<version>0|[1-9]\d*)\.(?P<patchlevel>0|[1-9]\d*)[.+]?(?P<sublevel>0|[1-9]\d*)?)(?P<fullextraversion>[-.+](?P<extraversion>0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)([\.+~](0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-_]*))*)?(\+[0-9a-zA-Z-]+(\.[0-9a-zA-Z-]+)*)?$`)
+ kernelVersionPattern = regexp.MustCompile(`(?P<fullversion>^(?P<version>0|[1-9]\d*)\.(?P<patchlevel>0|[1-9]\d*)[.+]?(?P<sublevel>0|[1-9]\d*)?)(?P<fullextraversion>[-.+](?P<extraversion>\d+|\d*[a-zA-Z-][0-9a-zA-Z-]*)([\.+~](\d+|\d*[a-zA-Z-][0-9a-zA-Z-_]*))*)?(\+[0-9a-zA-Z-]+(\.[0-9a-zA-Z-]+)*)?$`)
 )
 
 const (

pkg/kernelrelease/kernelrelease_test.go

@@ -234,6 +234,20 @@ func TestFromString(t *testing.T) {
  FullExtraversion: "+deb10u4~bpo9+1",
  },
  },
+ // See https://github.com/falcosecurity/falco/issues/3172
+ "strange tencentos version": {
+ kernelVersionStr: "5.4.119-19.0009.28",
+ want: KernelRelease{
+ Fullversion: "5.4.119",
+ Version: semver.Version{
+ Major: 5,
+ Minor: 4,
+ Patch: 119,
+ },
+ Extraversion: "19",
+ FullExtraversion: "-19.0009.28",
+ },
+ },
  }
  for name, tt := range tests {
  t.Run(name, func(t *testing.T) {