diff options
| -rw-r--r-- | tapset/i386/nd_syscalls.stp | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/tapset/i386/nd_syscalls.stp b/tapset/i386/nd_syscalls.stp index 09b2e700..92befeb5 100644 --- a/tapset/i386/nd_syscalls.stp +++ b/tapset/i386/nd_syscalls.stp @@ -156,7 +156,8 @@ probe nd_syscall.sigaltstack = kprobe.function("sys_sigaltstack") name = "sigaltstack" // ussp = %( kernel_vr < "2.6.25" %? $ebx %: %( kernel_vr < "2.6.30" %? $bx %: $regs->bx %) %) // NB: no asmlinkage() - ussp = %( kernel_vr < "2.6.30" %? ulong_arg(1) %: @cast(ulong_arg(1), "pt_regs")->bx %) + ussp = %( kernel_vr < "2.6.30" %? ulong_arg(1) %: + @cast(ulong_arg(1), "pt_regs", "kernel<asm/ptrace.h>")->bx %) argstr = sprintf("%p", ussp) } probe nd_syscall.sigaltstack.return = kprobe.function("sys_sigaltstack").return |