bpf_override_return error from kprobe #666
Answered
by
cheneytianx
panzhenyu12
asked this question in
Q&A
-
I add bpf_override_return code this,and doesn't work with error 2022/05/09 16:37:47 opening kprobe: setting perf event bpf program: invalid argument. What I want todo ? I want use eBFP to inject hook to terminating some operation, May I use bpf_override_return to do this ? Can u help me ? Looking forward to your reply |
Beta Was this translation helpful? Give feedback.
Answered by
cheneytianx
Aug 18, 2022
Replies: 1 comment
-
Two prerequisites to use 1.The kernel was compiled with the following two configurations
2.The hooked function was whitelisted to allow error injections. Please refer to iovisor/bcc#2485 (comment) |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
lmb
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Two prerequisites to use
bpf_override_return
:1.The kernel was compiled with the following two configurations
2.The hooked function was whitelisted to allow error injections. Please refer to iovisor/bcc#2485 (comment)