-
Notifications
You must be signed in to change notification settings - Fork 65
Open
Description
| * This probe runs immediately after the function "do_sys_open()" completes. |
In this line it is mentioned that handler is called post do_sys_open. But as per kernel documentation, it is mentioned that post handler is called immediately after the instruction replaced by breakpoint instruction is executed. This needs to be corrected.
Pls check
https://docs.kernel.org/trace/kprobes.html
After the instruction is single-stepped, Kprobes executes the "post_handler," if any, that is associated with the kprobe. Execution then continues with the instruction following the probepoint.
Metadata
Metadata
Assignees
Labels
No labels