From b8f14c964afd584cf6e7adeb6fa77fe4a0d30375 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E9=80=9A=E6=B4=B2?= Date: Fri, 28 Oct 2022 01:02:00 +0800 Subject: [PATCH] Disk: detect Windows volumes on WSL --- src/detection/disk/disk_linux.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/detection/disk/disk_linux.c b/src/detection/disk/disk_linux.c index 5a9e7713f..93dee0f7d 100644 --- a/src/detection/disk/disk_linux.c +++ b/src/detection/disk/disk_linux.c @@ -20,8 +20,9 @@ void ffDetectDisksImpl(FFDiskResult* disks) //Format of the file: " ..." (Same as fstab) char* currentPos = line; - //Non pseudo filesystems have their device in /dev/, we only add those - if(strncasecmp(currentPos, "/dev/", 5) != 0) + //Non pseudo filesystems have their device in /dev/ + //DrvFs is a filesystem plugin to WSL that was designed to support interop between WSL and the Windows filesystem. + if(strncmp(currentPos, "/dev/", 5) != 0 && strncmp(currentPos, "drvfs", 5) != 0) continue; //Skip /dev/