On Fri, 22 Feb 2019 11:34:58 -0800 Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx> wrote: > so you're saying you will break existing kprobe scripts? Yes we may. > I don't think it's a good idea. > It's not acceptable to break bpf_probe_read uapi. Then you may need to add more code to determine if the address is user space or not in the kernel, and then go the appropriate route, before calling probe_kernel_read(). -- Steve