pwru icon indicating copy to clipboard operation
pwru copied to clipboard

Func name resolution is broken on 5.18

Open brb opened this issue 2 years ago • 0 comments

On 5.18, both PT_REGS_IP(ctx) and bpf_get_func_ip(ctx) return addrs which are +4 compared to 5.17. This breaks IP => func name resolution via /proc/kallsyms.

@YutaroHayakawa found this commit https://github.com/torvalds/linux/commit/7f0059b58f0257d895fafd2f2e3afe3bbdf21e64 which might explain the +4.

To apply the same fix we might need to teach https://github.com/cilium/ebpf how to load the kernel config.

brb avatar Jul 01 '22 14:07 brb