chriskaliX/Hades

[BUG] kretprobe_udp_recvmsg dns_data no data

rockingl opened this issue · 1 comments

Describe the bug
hi, i try to run hades. when i operate commands:

sudo ./driver

and, other window : curl www.baidu.com

if it correct, it will appear, dns_data: www.baidu.com

but, the bug happened, it is no data.

image

so, i hope , the question will solved soon.thanks !

Thanks for reporting. It's a BUG due to wrong usage of READ_KERN macro. Since iov_iter is a struct rather than a pointer, we should read this as traditional bpf_probe_read way. I think it's fixed now
image