https://github.com/osquery/osquery logo
#general
Title
# general
s

Slackbot

01/27/2022, 7:16 PM
This message was deleted.
g

Gavin

01/27/2022, 7:16 PM
s

seph

01/27/2022, 9:10 PM
Meant for #fleet?
g

Gavin

01/27/2022, 9:11 PM
Very much so , sorry wrong Chan
Cleaned up as best as possible
s

seph

01/27/2022, 9:13 PM
No worries about cleaning these things up. Mostly I try to flag them so that future searchers can trace things, and so people can get the right replies.
n

Noah Talerman

01/28/2022, 3:38 PM
@Gavin at first glance, this looks like a bug in Fleet. When you get the chance, can you please file a bug report issue here? https://github.com/fleetdm/fleet/issues/new?assignees=&labels=bug%2C%3Areproduce&template=bug-report.md&title=
g

Gavin

01/28/2022, 4:37 PM
It’s not.
It’s a windows / Osquery UTF bug I need to do some more investigation and raise a least effort test case.
👍 1
s

seph

01/28/2022, 4:38 PM
UTF? Oh, that might be windows
Over the years, there’s been a variety of weird behaviors around UTF handling. https://github.com/osquery/osquery/issues/5288 is a pointer to some. There’s also a bunch that have been fixed in the windows side.
g

Gavin

01/28/2022, 4:40 PM
Yup, I confirmed that osqueryi on the host returns the same mangle of information the UI renders okay , but other tools just dump the hex equivelant of the unicode.
s

seph

01/28/2022, 4:40 PM
So I guess… if you can narrow this down
g

Gavin

01/28/2022, 4:42 PM
Yes I intend to. This is what I get back from the installed apps using a ruby fact on puppet
Copy code
'\xc5\xe4\xc5\xe4\xba\xea\xb6\xf3\xbf\xec\xc0\xfa3 (3.1.4.2)'
It makes me cry to see emoji’s and rockets in app names
2 Views