bcc/tools: Replace bpf_probe_read with bpf_probe_read_kernel
It is recommended to use bpf_probe_read_kernel_{str} in the bpf tools.
See kernel commit 0ebeea8ca8a4 ("bpf: Restrict bpf_probe_read{, str}()
only to archs where they work")
Signed-off-by: Sumanth Korikkar <sumanthk@linux.ibm.com>
Acked-by: Ilya Leoshkevich <iii@linux.ibm.com>
diff --git a/tools/fileslower.py b/tools/fileslower.py
index 31e3adf..21b0e1c 100755
--- a/tools/fileslower.py
+++ b/tools/fileslower.py
@@ -112,7 +112,7 @@
struct qstr d_name = de->d_name;
val.name_len = d_name.len;
- bpf_probe_read(&val.name, sizeof(val.name), d_name.name);
+ bpf_probe_read_kernel(&val.name, sizeof(val.name), d_name.name);
bpf_get_current_comm(&val.comm, sizeof(val.comm));
entryinfo.update(&pid, &val);
@@ -159,8 +159,8 @@
data.sz = valp->sz;
data.delta_us = delta_us;
data.name_len = valp->name_len;
- bpf_probe_read(&data.name, sizeof(data.name), valp->name);
- bpf_probe_read(&data.comm, sizeof(data.comm), valp->comm);
+ bpf_probe_read_kernel(&data.name, sizeof(data.name), valp->name);
+ bpf_probe_read_kernel(&data.comm, sizeof(data.comm), valp->comm);
events.perf_submit(ctx, &data, sizeof(data));
return 0;