On Aug 29, 2016 11:30 AM, "Marcin Nowakowski"
[off-list ref] wrote:
Syscall metadata makes an assumption that only a single syscall number
corresponds to a given method. This is true for most archs, but
can break tracing otherwise.
For MIPS platforms, depending on the choice of supported ABIs, up to 3
system call numbers can correspond to the same call - depending on which
ABI the userspace app uses.
MIPS isn't special here. x86 does the same thing. Why isn't this a
problem on x86?
Also, you seem to be partially reinventing AUDIT_ARCH here. Can you
use that and integrate with syscall_get_arch()?
--Andy