Re: CONFIG_RETHUNK int3 filling prevents kprobes in function body

From: Steven Rostedt
Date: Mon Sep 05 2022 - 10:57:30 EST


On Sun, 4 Sep 2022 23:07:13 +0900
Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx> wrote:

> Can we use another instruction for padding instead of INT3? (e.g. NOP or UD2)
>
> Or, can I expect the instruction length in __return_sites[] are always 5?
> If so, I can just skip 5 bytes if the address is in __return_sites[].

Perhaps another option is to have a table of where the padding is placed
(tagged), and that kprobes could check to see if the int3 is due to this
padding or not?

-- Steve