Kenta Tada d084df3b7a libbpf: Fix the incorrect register read for syscalls on x86_64 ...

Currently, rcx is read as the fourth parameter of syscall on x86_64.
But x86_64 Linux System Call convention uses r10 actually.
This commit adds the wrapper for users who want to access to
syscall params to analyze the user space.

Signed-off-by: Kenta Tada <Kenta.Tada@sony.com>
Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Link: https://lore.kernel.org/bpf/20220124141622.4378-3-Kenta.Tada@sony.com

2022-01-24 21:04:10 -08:00

16 KiB

Raw Blame History

View Raw