execsnoop: fix the prototype for kprobe__sys_execve

For sys_execve() the type of filename parameter should be "const char __user *" instead of "struct filename *". The fix doesn't imply any functional change.
GaoHuijian · Dec 9, 2017 · 3c399da · 3c399da
1 parent 34b3c10
commit 3c399da
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/tools/execsnoop.py b/tools/execsnoop.py
@@ -88,7 +88,8 @@
  return 0;
 }
 
-int kprobe__sys_execve(struct pt_regs *ctx, struct filename *filename,
+int kprobe__sys_execve(struct pt_regs *ctx,
+ const char __user *filename,
  const char __user *const __user *__argv,
  const char __user *const __user *__envp)
 {