I was searching to find a way to add UNICODE support to my osquery extension. I know that osquery supports Unicode from (v4.5.0) but does it support Unicode for extensions too? if yes, then how can I configure it to support Unicode?
09/28/2021, 9:16 PM
Did you try it? How does it not work?
09/28/2021, 9:36 PM
No, I mean my current extension is working with ASCII and it's fine. However, I don't know what extra thing I need to do, so my extension supports Unicode as well.
09/28/2021, 9:37 PM
I would expect it to just work.
09/28/2021, 10:43 PM
osquery handles unicode? This is news to me, I thought that was a longstanding todo
09/28/2021, 10:47 PM
IIRC -- sorta. Osquery handles it. But in some cases some of the bytes gets munched. It's recoverable, but kinda gross. But whether Sinaei encounters that or not 🤷
10/02/2021, 10:16 AM
Thanks for the answer. But I didn't get it. I mean what do you mean by "I would expect it to just work.". Everything is defined as std:😒tring in extensions. What should I change in my OSQuery extension?