Title
#windows
h

himanshu

02/09/2021, 3:28 PM
hi, i am trying to use
character_frequencies
map specified here (https://github.com/osquery/osquery/blob/4.6.0/tools/deployment/osquery.example.conf) with osquery 4.5.0. but osquery reports error while parsing the config
"The character_frequencies configuration entity array is not valid. Entry #0 is not a double"
.. while looking at osquery code, it seems the value 0.0 in character_frequencies map json is stored as just 0 in character_frequencies_array for which
character_frequencies_array[i].IsDouble()
check is not working. while other values in character_frequencies map such as
0.00045
are stored and parsed correctly. please suggest / confirm in this regard. thanks in advance.
3:29 PM
osquery code snippet where the error is reported
s

seph

02/09/2021, 4:13 PM
I don’t think json differentiates between ints and floats. So
1.0
will be canonicalized to
1
. I think there’s an osquery bug, in that we this should accept ints as well as floats
h

himanshu

02/11/2021, 9:01 AM
should i report this on github as issue?
s

seph

02/11/2021, 2:31 PM
Yes please! Slack tends to be pretty ephemeral. I think it’s a real bug, that’s a better place to flag them
h

himanshu

02/13/2021, 6:45 AM
thanks