Commit f13107a3 authored by Nathan Scott's avatar Nathan Scott

Ensure execsnoop.py replace result is not misplaced

Found by yonghong-song while reviewing PR #1570.
Signed-off-by: default avatarNathan Scott <nathans@redhat.com>
parent cf0792f3
......@@ -130,7 +130,7 @@ int kretprobe__sys_execve(struct pt_regs *ctx)
}
"""
bpf_text.replace("MAXARG", args.max_args)
bpf_text = bpf_text.replace("MAXARG", args.max_args)
if args.ebpf:
print(bpf_text)
exit()
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment