|
* This probe runs immediately after the function "do_sys_open()" completes. |
In this line it is mentioned that handler is called post do_sys_open. But as per kernel documentation, it is mentioned that post handler is called immediately after the instruction replaced by breakpoint instruction is executed. This needs to be corrected.
Pls check
https://docs.kernel.org/trace/kprobes.html
After the instruction is single-stepped, Kprobes executes the "post_handler," if any, that is associated with the kprobe. Execution then continues with the instruction following the probepoint.
Linux-Kernel-Debugging/ch4/kprobes/1_kprobe/1_kprobe.c
Line 61 in 1e93d28
In this line it is mentioned that handler is called post do_sys_open. But as per kernel documentation, it is mentioned that post handler is called immediately after the instruction replaced by breakpoint instruction is executed. This needs to be corrected.
Pls check
https://docs.kernel.org/trace/kprobes.html
After the instruction is single-stepped, Kprobes executes the "post_handler," if any, that is associated with the kprobe. Execution then continues with the instruction following the probepoint.