From 3f9f52fd2932be7529f0eb8f678df640a3a591ef Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 25 Oct 2021 12:47:30 +0200
Subject: [PATCH] Linux: ignore mapped /dev/zero

Virtualbox maps /dev/zero for memory allocation. That results in
false positive, so ignore.
---
 linux/LinuxProcessList.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/linux/LinuxProcessList.c b/linux/LinuxProcessList.c
index dbbc57d1..d99cc00e 100644
--- a/linux/LinuxProcessList.c
+++ b/linux/LinuxProcessList.c
@@ -654,6 +654,11 @@ static void LinuxProcessList_readMaps(LinuxProcess* process, openat_arg_t procFd
          if (String_startsWith(readptr, "/memfd:"))
             continue;
 
+         /* Virtualbox maps /dev/zero for memory allocation. That results in
+          * false positive, so ignore. */
+         if (String_eq(readptr, "/dev/zero (deleted)\n"))
+            continue;
+
          if (strstr(readptr, " (deleted)\n")) {
             proc->usesDeletedLib = true;
             if (!calcSize)