diff --git a/pkg/security/ebpf/c/include/hooks/network/dns.h b/pkg/security/ebpf/c/include/hooks/network/dns.h index 7776ab195f0f03..e2fb8fdeff6e3f 100644 --- a/pkg/security/ebpf/c/include/hooks/network/dns.h +++ b/pkg/security/ebpf/c/include/hooks/network/dns.h @@ -160,7 +160,15 @@ int classifier_dns_response(struct __sk_buff *skb) { int remaining_bytes = len - sizeof(struct dnshdr); - if (remaining_bytes <= 0 || pkt->offset <= 0 || remaining_bytes >= DNS_RECEIVE_MAX_LENGTH) { + if (remaining_bytes <= 0) { + return ACT_OK; + } + + if(pkt->offset <= 0) { + return ACT_OK; + } + + if (remaining_bytes >= DNS_RECEIVE_MAX_LENGTH) { return ACT_OK; }