[Bug translator/5916] Exploit kretprobe entry_handler + data pouch?

[ananth at in dot ibm dot com]

------- Additional Comments From ananth at in dot ibm dot com  2008-03-12 04:27 -------
Subject: Re:  New: Exploit kretprobe entry_handler +
	data pouch?

On Tue, Mar 11, 2008 at 09:06:54PM -0000, jkenisto at us dot ibm dot com wrote:
> As of Linux 2.6.25-rc1, kretprobes contains the per-kretprobe_instance "data
> pouch" prototyped by Kevin Stafford years ago.  When a kretprobed function is
> entered, and a kretprobe_instance is available, rp->entry_handler (if any) is
> called to pouch data that can be retrieved upon function return.

The samples/kprobes/kretprobe_example.c in Linus' current tree has a
facility for users to specify a function name to retprobe and in
addition to the return value, this module will also print out the time
taken to execute the function.

Try 'modprobe kretprobe_example func=<foo>'

The timing feature was added by Abhishek Sagar. It was just enhanced to
take a function name using a module_parm.


-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=5916

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.