Fix PR16096 by fixing nd_syscall.execve on i686.

* tapset/linux/nd_syscalls.stp (nd_syscall.execve): Add 'asmlinkage()'
  call to get first argument right.

diff --git a/tapset/linux/nd_syscalls.stp b/tapset/linux/nd_syscalls.stp
index 8917a4b6a2b362a82f0fe61b6822b9a28c524b6f..5cb7ac26f8415c6398e394118acbcdeb8868b793 100644 (file)
--- a/tapset/linux/nd_syscalls.stp
+++ b/tapset/linux/nd_syscalls.stp
@@ -973,6 +973,7 @@ probe nd_syscall.execve = kprobe.function("sys_execve")
        // filename = user_string($filename)
        // args = __get_argv($argv, 0)
        // argstr = sprintf("%s %s", filename, __get_argv($argv, 1))
+       asmlinkage()
        filename = user_string(pointer_arg(1))
        args = __get_argv(pointer_arg(2), 0)
        argstr = sprintf("%s %s", filename, __get_argv(pointer_arg(2), 1))