On Tue, Jan 17, 2012 at 6:22 PM, Andi Kleen <andi@xxxxxxxxxxxxxx> wrote: >> I'm pretty sure this isn't about changing cs or far jumps > > He's assuming that code can only run on two code segments and > not arbitarily switch between them which is a completely incorrect > assumption. I think all he needs is to figure out which type of syscall was just intercepted. (Obviously arguments in memory are a problem.) -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html