Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752488AbbKJCbN (ORCPT ); Mon, 9 Nov 2015 21:31:13 -0500 Received: from smtprelay0004.hostedemail.com ([216.40.44.4]:40583 "EHLO smtprelay.hostedemail.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1752245AbbKJCbM (ORCPT ); Mon, 9 Nov 2015 21:31:12 -0500 X-Session-Marker: 726F737465647440676F6F646D69732E6F7267 X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,rostedt@goodmis.org,:::::::::::::,RULES_HIT:41:355:379:541:599:800:960:973:988:989:1260:1277:1311:1313:1314:1345:1359:1437:1515:1516:1518:1534:1538:1568:1593:1594:1711:1714:1730:1747:1777:1792:2393:2553:2559:2562:2693:3138:3139:3140:3141:3142:3622:3865:3867:3868:3873:3874:5007:6261:7875:8660:10004:10400:10848:10967:11026:11232:11473:11658:11914:12438:12517:12519:12740:13069:13148:13230:13311:13357:14659:21080:21212:30045:30054:30090:30091,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:fn,MSBL:0,DNSBL:none,Custom_rules:0:0:0,LFtime:1,LUA_SUMMARY:none X-HE-Tag: verse82_618a088a0e12d X-Filterd-Recvd-Size: 1912 Date: Mon, 9 Nov 2015 21:31:09 -0500 From: Steven Rostedt To: Andy Lutomirski Cc: Andy Lutomirski , Mathieu Desnoyers , Thomas Gleixner , "Anvin, H. Peter" , lttng-dev , LKML Subject: Re: Compat syscall instrumentation and return from execve issue Message-ID: <20151109213109.639071d7@gandalf.local.home> In-Reply-To: References: <2095400880.57684.1447011457513.JavaMail.zimbra@efficios.com> <20151109110536.7bce67e8@gandalf.local.home> <5640F406.3020207@kernel.org> <20151109144309.361ab4e5@gandalf.local.home> <20151109161216.2af12ffd@gandalf.local.home> X-Mailer: Claws Mail 3.13.0 (GTK+ 2.24.28; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 780 Lines: 20 On Mon, 9 Nov 2015 17:51:25 -0800 Andy Lutomirski wrote: > do_syscall_32_irqs_on would call syscall_return_slowpath(regs, > AUDIT_ARCH_I386). do_syscall_64 (which doesn't exist yet) would call > syscall_return_slowpath(regs, AUDIT_ARCH_X86_64). > OK, so you are saying that a execve that switches the current state into ia32 will return from the do_syscall_64 regardless? Then we would have to add tracepoints that would be for both ia32 and x86_64. But that would solve the current issue at hand. -- Steve -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/