Re: intercepting syscalls

[Terje Malmedal <tm@basefarm.com>]

[Arjan van de Ven]
>> What do I do the next time I need to do something like this? 

> use kprobes or so to actually replace the faulty lower level function..
> you don't know from how many different angles the lower level function
> is called, so you're really best of by replacing it at the lowest
> possible level, eg closest to the bug. That *very* seldomly is the
> actual syscall function.

This is exactly what I want to do, but how do I do the replacing part?

I understand how I create pre_ and post_handlers with kprobes, but not
how I can stop a function from being executed.

-- 
 - Terje
tm@basefarm.no