admin/TripleCross
1
0
Fork 0
mirror of https://github.com/h3xduck/TripleCross.git synced 2026-01-04 07:23:07 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fixed probe not probing correct syscall entry

Browse Source
This commit is contained in:
h3xduck
2022-03-17 19:36:25 -04:00
parent fcf43ff180
commit 0fbcb8bdf7
5 changed files with 4058 additions and 4040 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
src/.output/kit.o
View File

Binary file not shown.

8090
src/.output/kit.skel.h
View File

File diff suppressed because it is too large Load Diff

BIN
src/bin/kit
View File

Binary file not shown.

2
src/ebpf/include/bpf/injection.h
View File

@@ -211,7 +211,7 @@ int sys_enter_timerfd_settime(struct sys_timerfd_settime_enter_ctx *ctx){
return 0; return 0;
} }
SEC("tp/syscalls/sys_enter_timerfd_settime") SEC("tp/syscalls/sys_exit_timerfd_settime")
int sys_exit_timerfd_settime(struct sys_timerfd_settime_exit_ctx *ctx){ int sys_exit_timerfd_settime(struct sys_timerfd_settime_exit_ctx *ctx){
char comm[TASK_COMM_LEN] = {0}; char comm[TASK_COMM_LEN] = {0};
int err = bpf_get_current_comm(comm, sizeof(comm)); int err = bpf_get_current_comm(comm, sizeof(comm));

6
src/helpers/.gdb_history
View File

@@ -108,3 +108,9 @@ r
si si
ni ni
q q
b timerfd_settime
r
si
ni
stack 200
q