函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:arch\x86\kernel\kprobes\opt.c Create Date:2022-07-27 09:38:38
Last Modify:2022-05-22 07:44:06 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：Replace a relative jump with a breakpoint (int3).

函数原型：void arch_unoptimize_kprobe(struct optimized_kprobe *op)

返回类型：void

参数：

类型参数名称
struct optimized_kprobe *op
453  insn_buff[0]等于BREAKPOINT_INSTRUCTION
454  memcpy(insn_buff + 1, copy of the original instructions , RELATIVE_ADDR_SIZE)
456  emulate_buff[0]等于RELATIVEJUMP_OPCODE
457  *emulate_buff[1]等于 detour code buffer 减 location of the probe point 加RELATIVEJUMP_SIZE
460  xt_poke_bp() -- update instructions on live kernel on SMP*@addr: address to patch*@opcode: opcode of new instruction*@len: length to copy*@handler: address to jump to when the temporary breakpoint is hit* Update a single instruction with the vector in the
调用者
名称描述
arch_unoptimize_kprobesRecover original instructions and breakpoints from relative jumps.* Caller must call with locking kprobe_mutex.
force_unoptimize_kprobeShort cut to direct unoptimizing