Adrian Hunter <adrian.hunter@xxxxxxxxx> writes: >> >> I'm still not fully sure how it exactly finds the code on the host, >> how is the code transferred? > > I don't know. From a quick look at the code in > tools/testing/selftests/kvm/lib/kvm_util.c it seems to be using > KVM_SET_USER_MEMORY_REGION IOCTL. Okay so it assumes that the pages with code on the guest are still intact: that is you cannot quit the traced program, or at least not do something that would fill it with other data?. Is that correct? It sounds like with that restriction it's more useful for kernel traces. -Andi
