I am trying to modify the behaviour of a function from a shared library during runtime using eBPF uprobes. Is there any way to change a const char* parameter of the function when the function is called?
Is it possible to modify const parameters of a function using ebpf uprobes?
104 Views Asked by imawful At
1
There are 1 best solutions below
Related Questions in LINUX
- How do I recursively find and replace only in files named index.php on Linux webserver?
- passing text with \n as one argument in shell
- kernel module does not print packet info
- How to send ESC/POS commands to thermal printer in Linux
- (x64 Nasm) Writeline function on Linux
- How do I set the Hive user to something different than the Spark user from within a Spark program?
- Default priority of thread with SCHED_FIFO
- Calling a python function with options from shell script
- How to split a directory into parts without compressing or archiving?
- Cross compile simple standard C program on Linux for Mac
- How to offload NAPI poll function to workqueue
- python netifaces - How to get currently used network interface
- Unexpected output from function
- mingw-64 conflicting declarations when cross-compiling
- Different behavior of async with Visual Studio 2013(Windows8.1) and GCC 4.9(Ubuntu14.10)
Related Questions in KERNEL
- Are Berkeley Packet Filter opcode values implementation defined?
- Raspberry PI Compute Module - SPI1
- Is there any way to get a lru list in Linux kernel?
- Android Studio - HAX kernel Module not installed
- How to determine system value for _POSIX_PATH_MAX
- Different privileges in kernel module execution
- Buildroot custom kernel under 1MB
- Add/remove process from kernel runqueue
- Is it possible to limit data traffic in kernel USB drivers?
- "Segmentation fault" when `rmmod` or `modprobe -r`
- Intercept ELF loader in linux kernel: fs/binfmt_elf.c file via loadable kernel module
- Best way to handle ERESTARTSYS in kthread?
- Purpose and usage of firmware packages on Linux
- In linux every process is given a 4GB of virtual address space considering a 32-bit architecture
- How to make a scanf() type function in a 32bit os in c?
Related Questions in TRACE
- Java agent not forwarding traces to appneta tracelytics/traceview
- Avoid Access Denied when writing to file
- Cannot get ActionScript 3 to work
- Awk Script to process data from a trace file
- Tracing out the motion of a double pendulum in gnuplot (and gif conversion)?
- How to create a listener/Tracer for my web services
- Debugging slow download with curl
- Using Trace in Prolog
- Losing control of execution trace upon method return
- Tracing prolog code
- Application logging best practices - How to manage logging statements strewn all over your code?
- Android app cpu usage jump to 50-100% and trace show only JDWP
- Root cause of deadlock?
- Adobe illustrator tracing in js script
- How to find out the rows affected in SQL Profiler or trace?
Related Questions in EBPF
- How to build Linux kernel to support SO_ATTACH_BPF socket option?
- Tc bpf packet forward to other device by updating the Checksum
- What causes `bpf_perf_event_output` to return -22?
- How to cross compile bpf targets for linux arm on Mac M-series laptop?
- Tracing with eBPF tracepoint "netif_receive_skb" for multiple NICs
- Extracting UDP packet payload with eBPF tracepoints using libbpf
- XDP get packet payload
- How to get request/response body with uprobe?
- EBPF Route Table Addition or Modification
- How to access user space function argument (struct pointer) in bpf?
- How to unload bpd program using bpftool?
- How to design eBPF map for large data structures without exceeding jump complexity?
- What is the recommended way to unit test eBPF/XDP program?
- libbpf: failed to guess program from ELF section 'filter'
- I was unble to load my compiled bpf source code in to the kernel
Related Questions in UPROBE
- maximum number of uprobe /kprobe that can be attached using libbpf
- Get sizeof internal go struct
- Is it possible to modify const parameters of a function using ebpf uprobes?
- Is it possible to use bpf_override_return in uprobes/uretprobes?
- Can `bpf_probe_write_user` cause segmentation fault?
- How to obtain connection information in a uprobe to SSL_write?
- bpf_override_return not working with uretprobes
- Pid filter is working for uprobes but not uretprobes
- adding code to bpf _kernel.c file for uprobe SEC routines (libbpf +c)
- Why is uprobe unaffected by ASLR?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
The
constqualifier is for the compiler; it doesn't impact how you can instrument the code at runtime.You can write such parameters with the
bpf_probe_write_userBPF helper. Seesamples/bpf/test_probe_write_user.bpf.cfor a usage example of that helper (with kprobes but the principle should be the same for uprobes).