diff --git a/src/security/security.bpf.c b/src/security/security.bpf.c index 1abeb91de82ba8b423fbbe8f94f46954704c10d0..52a28823341040f94d318d19444834cc006bdc5f 100644 --- a/src/security/security.bpf.c +++ b/src/security/security.bpf.c @@ -1013,11 +1013,7 @@ int filter_prog(struct pt_regs *ctx) { int pass = 1; int filter_num = filters->filter_count; #pragma unroll - for (; i < MAX_FILTER_FOR_PER_CALLNAME; i ++) { - // Early break if we've processed all actual filters - if (i >= filter_num) { - break; - } + for (; i < MAX_FILTER_FOR_PER_CALLNAME && i < filter_num; i ++) { int idx = i; struct selector_filter filter = filters->filters[idx]; // if (filter.filter_type != FILTER_TYPE_UNKNOWN) {