Re: [RFC 0/1] BPF tracing for arm64 using fprobe

From: Google
Date: Mon Nov 21 2022 - 09:48:39 EST


On Mon, 21 Nov 2022 11:09:21 +0100
Peter Zijlstra <peterz@xxxxxxxxxxxxx> wrote:

> On Fri, Nov 18, 2022 at 01:06:08PM -0500, Steven Rostedt wrote:
> > How do I know that a function return was modified by BPF? If I'm debugging
> > something, is it obvious to the developer that is debugging an issue
> > (perhaps unaware of what BPF programs are loaded on the users machine),
> > that the return of a function was tweaked by BPF and that could be the
> > source of the bug?
>
> Have it taint the kernel if something is overridden ;-) Then we can all
> ignore the report until it comes back without taint.

Hmm, indeed. BTW, error injection should set that too.

Thanks,

--
Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>