eBPF `bpf_core_read` returns incorrect value
My eBPF program as follows.
How to uniquely identify uprobes when targeting multi threaded applications
I have an eBPF application that hooks malloc and mmap (via uprobes). The application targets a specific target application and as a result I do PID filtering using bpf_get_ns_current_pid_tgid (container aware).