On Wed, Mar 23, 2022 at 08:41:19PM +0900, Masami Hiramatsu wrote: > > Also, what's rethook for anyway? > > Rethook is a feature which hooks the function return. Most of the > logic came from the kretprobe. Simply to say, 'kretprobe - kprobe' is > the rethook :) I got that far, but why did you take the bother to do these patches? Why wasn't 'use kretprobe' a good enough option?