News for hackers. Stuff that matters.
Re:Show HN: Credentials dumper for Linux using eBPF by evgpbfhnr on Sunday July 10, 2022 @07:03PM (#32050098)
Thanks! This happens to work for me, but the root of the problem is the same: there's no guarantee that the handle will still be in that register when the function returns; my compiler just happens to not be clobbering that register.

Anyway, this is probably good enough as a bpf demonstration and it definitely has made its impact looking at other comments here. That's probably all that matters.

There are no comments on this comment yet.