Hi -

On Tue, Sep 19, 2006 at 08:11:40AM -0700, Martin J. Bligh wrote:

> [...]  Why don't we just copy the whole damned function somewhere
> else, and make an instrumented copy (as a kernel module)? Then
> reroute all the function calls through it [...]

Interesting idea.  Are you imagining this instrumented copy being
built at kernel compile time (something like building a "-g -O0"
parallel)?  Or compiled anew from original sources after deployment?
Or on-the-fly binary-level rewriting a la SPIN?

> OK, it's not completely trivial to do, but simpler than kprobes [...]

None of the three above are that easy.  Do you have an implementation
idea?


- FChE