CVE-2026-31431-Copy-Fail/bpftrace-scripts/bpftrace-filemap-splice.bt
2026-05-18 14:31:05 +08:00

12 lines
312 B
Text

kprobe:filemap_splice_read /comm == "copyfail_poc"/
{
$in = (struct file *)arg0;
$ppos = (loff_t *)arg1;
printf("filemap_splice_read: pos=0x%llx ino=%lu\n",
*$ppos, $in->f_inode->i_ino);
}
kprobe:splice_folio_into_pipe /comm == "copyfail_poc"/
{
printf("splice_folio_into_pipe\n");
}