On Sun, Oct 22, 2023 at 07:40:17AM +0000, RVP wrote: > Ah, that attachment is still based on _my_ version which is plain wrong: You > can't do copyinstr(arg0) in the :entry action because the kernel may not have > paged in the memory containing the pathname (yet). > > Use your version (which is correct--it does copyinstr() in :return when the > kernel is sure to have the pathname already in memory):
Yes, then we're back at the start: dtrace: error on enabled probe ID 2 (ID 405: syscall::unlink:return): invalid address (0x77002a73f7ce) in action #1 at DIF offset 12 : No such file or directory Thomas
