CVE-2026-31431-Copy-Fail/bpftrace-scripts/bpftrace-authencesn-decrypt.bt
2026-05-18 14:31:05 +08:00

6 lines
211 B
Text

kprobe:crypto_authenc_esn_decrypt /comm == "copyfail_poc"/
{
$req = (struct aead_request *)arg0;
printf("authencesn_decrypt: assoclen=0x%x cryptlen=0x%x\n",
$req->assoclen, $req->cryptlen);
}