bcc/tools: Replace bpf_probe_read with bpf_probe_read_kernel
It is recommended to use bpf_probe_read_kernel_{str} in the bpf tools.
See kernel commit 0ebeea8ca8a4 ("bpf: Restrict bpf_probe_read{, str}()
only to archs where they work")
Signed-off-by: Sumanth Korikkar <sumanthk@linux.ibm.com>
Acked-by: Ilya Leoshkevich <iii@linux.ibm.com>
diff --git a/tools/ttysnoop.py b/tools/ttysnoop.py
index 24c1180..b576b7a 100755
--- a/tools/ttysnoop.py
+++ b/tools/ttysnoop.py
@@ -77,7 +77,7 @@
if (file->f_inode->i_ino != PTS)
return 0;
- // bpf_probe_read() can only use a fixed size, so truncate to count
+ // bpf_probe_read_user() can only use a fixed size, so truncate to count
// in user space:
struct data_t data = {};
bpf_probe_read_user(&data.buf, BUFSIZE, (void *)buf);