Re: [PATCH] tracing: eprobe: read the complete FILTER_PTR_STRING pointer
From: Martin Kaiser
Date: Fri Jun 26 2026 - 06:20:53 EST
Thus wrote Steven Rostedt (rostedt@xxxxxxxxxxx):
> On Mon, 22 Jun 2026 12:58:15 +0900
> Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx> wrote:
> > The problem is that the event does not provide the information that
> > the string is in user space or not. But actually, for syscall events
> > all data pointed by syscall parameter should be in the user space.
> I think we should make this work then:
> echo 'e:open syscalls.sys_enter_openat file=+u0($filename):ustring' > dynamic_events
> That is, to have +u0() say "this is going to be dereferencing user space".
> I'll add Martin's patch and see if it makes the above work.
I've just tried your command with my patch. It works for me, filenames are
logged correctly.
Martin
> -- Steve