-
This repo helped me a lot , I'm very grateful.
But when I try to hook some system call , something weird happened.
I had tried using this function declaration.
```
static asmlinkage long (*r…
-
For example:
- VirtualProtect, NtProtectVirtualMemory
- memcpy
-
For https://bugzilla.mozilla.org/show_bug.cgi?id=1322559 I was trying to record a --disable-profiling build of Firefox with the (new) Gecko Profiler enabled ( https://raw.githubusercontent.com/mstange…
-
As requested on the community call, this issue is for discussions around the relative performance of the eBPF and Kernel Module drivers. The attached document details some of my initial findings and t…
-
@wangbj - which make job was it that had 4X "count tool" slowdown currently?
Let's focus on that job for the moment and build up a couple CSV datasets representing:
1) aggregate information per…
-
This will bring the design closer to how the in-progress `wrap_func` tool is working. Should also rename things so that there is an explicit `wrap_syscall` tool/client. This move would mean getting ri…
-
We want to know if anything else on a normal mac makes syscalls outside of libsystem_kernel.dylib
## Steps
1. With the `vmmap` command dump the address of lib system
1. Write a dtrace script th…
-
## Problem
The heap profiler does not track `mmap` calls, even if environment variable `HEAP_PROFILE_MMAP` is set.
### Environment
| Key | Value |
|------|------|
| OS | macOS Monterey 12.6.9…
-
It would be nice to be able to breakpoint/catch on a syscall. The specific short-term case rn is how to catch a process before it's main thread exits and cause it to stay alive so Stalker can catch up…
-
# Goal
With the recent fractureiser situation, there have been many suggestions among figures in the wider Minecraft community as well as in our own to introduce sandboxing into the launcher itself…