search

anakryiko / retsnoop

Investigate kernel error call stacks
BSD 2-Clause "Simplified" License
186 stars 32 forks source link

Fix arm64 build #8

Closed javierhonduco closed 2 years ago

javierhonduco commented 2 years ago

Currently retsnoop doesn't work in my arm64 machine as it reports uname -a as aarch64,

Also update the instruction pointer accessor to use some BTF goodness, as arm uses user_pt_regs instead of pt_regs.

BTW, thanks for this tool! It's incredibly useful and works great! ❤️ Will throw away all my custom bpftrace scripts to do half of what this tool does. Would send you a #thanks if I could :)

anakryiko commented 2 years ago

Thanks for the fix and glad you found retsnoop usable!

anakryiko commented 2 years ago

If you don't mind sharing, it would be interesting to hear some of the use cases that retsnoop was useful in.

javierhonduco commented 2 years ago

Sure thing, let me get back to you in some days