Re: [PATCH] tracing: eprobe: read the complete FILTER_PTR_STRING pointer

From: Martin Kaiser

Date: Fri Jun 26 2026 - 06:20:53 EST


Thus wrote Steven Rostedt (rostedt@xxxxxxxxxxx):

> On Mon, 22 Jun 2026 12:58:15 +0900
> Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx> wrote:

> > The problem is that the event does not provide the information that
> > the string is in user space or not. But actually, for syscall events
> > all data pointed by syscall parameter should be in the user space.

> I think we should make this work then:

> echo 'e:open syscalls.sys_enter_openat file=+u0($filename):ustring' > dynamic_events

> That is, to have +u0() say "this is going to be dereferencing user space".

> I'll add Martin's patch and see if it makes the above work.

I've just tried your command with my patch. It works for me, filenames are
logged correctly.

Martin

> -- Steve