nix icon indicating copy to clipboard operation
nix copied to clipboard

Support for PTRACE_GET_SYSCALL_INFO

Open ItsShadowCone opened this issue 3 years ago • 3 comments
trafficstars

Linux >= 5.3 supports ptrace(PTRACE_GET_SYSCALL_INFO, pid, sizeof(struct ptrace_syscall_info), &info) to obtain more information about a syscall stop. Do note that it apparently only works, if PTRACE_O_TRACESYSGOOD is set beforehand.

Happy to contribute too.

FreeBSD seems to support this too, but I don't have a system to test that on.

ItsShadowCone avatar Jun 30 '22 17:06 ItsShadowCone

Go ahead and submit a PR. CI will check it for FreeBSD, or I can.

asomers avatar Jul 10 '22 15:07 asomers

Any updates on this? I could spend some hours (at least for the Linux support) on this, as we need a CPU portable way to achieve syscall interception.

cvengler avatar Mar 27 '23 10:03 cvengler

See #2006

cvengler avatar Mar 27 '23 10:03 cvengler