Thread (47 messages) 47 messages, 9 authors, 2025-01-17

Re: Crash when attaching uretprobes to processes running in Docker

From: Oleg Nesterov <oleg@redhat.com>
Date: 2025-01-17 01:58:15
Also in: bpf, linux-api, lkml

On 01/17, Masami Hiramatsu wrote:
On Tue, 14 Jan 2025 15:21:29 +0100
Jiri Olsa [off-list ref] wrote:
quoted
On Tue, Jan 14, 2025 at 12:21:07PM +0100, Oleg Nesterov wrote:
quoted
But please not that the uretprobed function can return any value
including -ENOSYS, and this is what sys_uretprobe() has to return.
right, uretprobe syscall returns value of the uretprobed function,
so we can't use any reserved value
We can make uretprobe (entry) fail if the return value is one of
errno or NULL, because it *knows* what the return value here.
I fail to understand... Could you spell please?

But whatever you meant, I don't think it is right, sorry.. please
correct me.

"it *knows*". Who it? How can it know??? I'd say "it" can't know,
but probably I missed your point.

Not to mention it doesn't really matter. It is not safe to even try
to do

	movq $__NR_uretprobe, %rax
	syscall

if the probed task has seccomp filters.

Oleg.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help