Skip to content

Instantly share code, notes, and snippets.

@BanzaiMan

BanzaiMan/gist:8d04780b58e463eb808506c8162451ba

Created December 18, 2016 14:28
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save BanzaiMan/8d04780b58e463eb808506c8162451ba to your computer and use it in GitHub Desktop.
Save BanzaiMan/8d04780b58e463eb808506c8162451ba to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
$ sudo dtrace -n 'syscall::open*:entry/execname == "path_helper"/{ trace(copyinstr(arg0)) }'
dtrace: description 'syscall::open*:entry' matched 7 probes
dtrace: error on enabled probe ID 7 (ID 160: syscall::open:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
dtrace: error on enabled probe ID 4 (ID 946: syscall::open_nocancel:entry): invalid user access in action #1 at DIF offset 24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment