|
|
@@ -402,8 +402,13 @@ SEC("uprobe/javaaot_asmnop")
|
|
|
int javaaot_asmnop(struct pt_regs *ctx) {
|
|
|
bpf_printk("enter the ret javaaot_asmnop\n");
|
|
|
unsigned long jhttpdata_ptr;
|
|
|
- jhttpdata_ptr = (ctx)->regs[2];
|
|
|
+#if defined(__x86_64__)
|
|
|
+ jhttpdata_ptr = (ctx)->rsi;
|
|
|
+ unsigned long len_from_rbp_ptr = (ctx)->rsp-0x8;
|
|
|
+#elif defined(__aarch64__)
|
|
|
+ jhttpdata_ptr = (ctx)->regs[1];
|
|
|
unsigned long len_from_rbp_ptr = (ctx)->regs[16]-0x8;
|
|
|
+#endif
|
|
|
bpf_printk("[len_from_rbp_ptr] <0x%lx>", len_from_rbp_ptr);
|
|
|
|
|
|
// 捕获第六个参数 data_count
|