函数逻辑报告 |
Source Code:arch\x86\kernel\kprobes\core.c |
Create Date:2022-07-27 09:37:44 |
| Last Modify:2020-03-12 14:18:49 | Copyright©Brick |
| 首页 | 函数Tree |
| 注解内核,赢得工具 | 下载SCCT | English |
函数名称：Recover the probed instruction at addr for further analysis.* Caller must lock kprobes by kprobe_mutex, or disable preemption* for preventing to release referencing kprobes.* Returns zero if the instruction can not get recovered (or access failed).
函数原型：unsigned long recover_probed_instruction(kprobe_opcode_t *buf, unsigned long addr)
返回类型：unsigned long
参数：
| 类型 | 参数 | 名称 |
|---|---|---|
| kprobe_opcode_t * | buf | |
| unsigned long | addr |
| 266 | __addr等于__recover_optprobed_insn(buf, addr) |
| 270 | 返回:__recover_probed_insn(buf, addr) |
| 名称 | 描述 |
|---|---|
| can_probe | Check if paddr is at an instruction boundary |
| __copy_instruction | Copy an instruction with recovering modified instruction by kprobes* and adjust the displacement if the instruction uses the %rip-relative* addressing mode. Note that since @real will be the final place of copied |
| can_optimize | Decode whole function to ensure any instructions don't jump into target |
| 源代码转换工具 开放的插件接口 | X |
|---|---|
| 支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告 代码生成和批量转换代码 |