iovisor / iovisor/bcc

bpf_probe_read_user returns error (-14) on Android 11, Kernel 4.14, ARM64

Open
#3,175 23 comments 0 reactions 1 assignee Claimed by @davemarchevsky View on GitHub
Dominant language
C
Stars
22.7k
Forks
4.1k
Avg merge
10d 4h
Merged PRs (30d)
3

Description

Hi folks,

I'm running BCC on Android 11, Kernel 4.14, ARM64 and `bpf_probe_read_user` returns an error (-14). As a result *opensnoop* returns an empty filename string.

I'm aware of #2253 and implemented the solution that supposedly should fix the issue (https://lkml.org/lkml/2019/5/2/1100) to no avail.

#3094 is somewhat related and the solution there looks to be similar to the above (i.e. adding `bpf_probe_read_user` from the later version).

Has anyone encountered something like that or knows how can I get more information about the issue?

Cheers,
Vadim

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.