Re: intercepting syscalls

Terje Malmedal
2005-04-19T08:32:22Z

[Arjan van de Ven]
>> What do I do the next time I need to do something like this?

> use kprobes or so to actually replace the faulty lower level function..
> you don't know from how many different angles the lower level function
> is called, so you're really best of by replacing it at the lowest
> possible level, eg closest to the bug. That *very* seldomly is the
> actual syscall function.

This is exactly what I want to do, but how do I do the replacing part?

I understand how I create pre_ and post_handlers with kprobes, but not
how I can stop a function from being executed.

--
- Terje
tm@basefarm.no