I am starting to wonder... can anybody at all do a syscall::NtCreateFile:entry probe in dtrace that print the filename attempted opened without getting "dtrace: processing aborted: Illegal byte sequence" within the first minute. If you can- i would love to see how
-
Show this thread
-
If first print printf("%c%c...",((struct ustr*)this->fname)->buffer[0],((struct ustr*)this->fname)->buffer[1]...) sometimes it starts working untill next reboot. It just seems so arbitrary and non deterministic. Either there is something I dont know or dtrace is buggy
1 reply 0 retweets 4 likesShow this thread
when it fails it because the printf statement will always continue to the first 0x0000 when printing wide strings, and if meets invalid char it fails- even if not going to print it.
12:49 PM - 25 Jan 2021
0 replies
0 retweets
2 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.