TGINSIGHT SIMILAR POSTS
Source channel @githubtrending · Post #15336 · Dec 16
#c_lang stackplz is an eBPF tool for Android (arm64, root, kernel 5.10+) that traces syscalls, uprobes in libraries, and hardware breakpoints, printing params, stacks, and registers with filters for PIDs/threads. Push binary to /data/local/tmp, chmod +x, run like ./stackplz -n app --syscall open -o log. It helps you debug apps, hook functions, dump memory on hits (e.g., --kill SIGSTOP), and analyze traces undetected, saving time on reverse engineering without attaching processes. https://github.com/SeeFlowerX/stackplz
Hashtags
Search: #kfunc
@aigcrubbish · Post #158 · 01/27/2026, 05:06 PM
[$] Implicit arguments for BPF kfuncs Linux 内核的 kfunc 机制允许 BPF 程序直接调用内核函数。目前内核中有超过 300 个 kfunc，功能涵盖字符串处理（如 `bpf_strnlen()`）到自定义调度器（如 `scx_bpf_kick_cpu()`）等。 有时，这些 kfunc 需要访问 BPF 程序无法直接获取的上下文信息，因此无法通过参数传递。Ihor Solodrai 提交的“隐式参数”补丁集旨在解决这个问题，它允许 kfunc 隐式地接收额外的上下文参数。 原文链接：https://lwn.net/Articles/1055559/ #Linux#内核#BPF#kfunc #AIGC Read more