nsproxy | Linux namespaces tcp proxy | Proxy library

I have resolved this issue:

Instead of using net = task->nsproxy->net_ns; I used net = task->nsproxy->net_ns->ns.inum; which is unsigned int and we can directly retrieve namespace from it.

This structure can be found in header file.

The bcc tool mountsnoop.py seems to do what you are trying to achieve. They redefine some of the struct, with the following comment:

An better approach might be to invalidate the display link in viewWill/DidDisappear, see also

• Correct handling / cleanup / etc of CADisplayLink in Swift custom animation?

for useful information.

If that is not an option: Make the proxy object inherit from NSObject instead of NSProxy. An Objective-C solution is for example given here

• CADisplayLink at iOS 6.0 not retaining target

and that can easily be translated to Swift 3:

The issue is that you are using strcmp. BPF programs cannot use functions from the libc.

Your second example probably works because the compiler is able to optimize it and remove the call to strcmp. Since both arguments are known at compile-time, there's no need to use strcmp to know if they are equal.

As pointed out by @Qeole in comments, you can use __builtin_memcmp() instead, since you know the size of one of your strings and are only trying to know if they are equal.

struct rq is actually not part of the kernel headers, as you can see on Bootlin.

You can either:

• retrieve the offset to rq->cpu from the rq pointer and hardcode it in your BPF program, but I wouldn't recommend it;
• or find some other way to retrieve the cpu number, maybe through prev or the current task (e.g., prev->cpu).

You need to tell the build system that your system call requires 2 arguments and that they are of type int. This is so that the scripts that are part of the build system will generate appropriate wrappers for casting the arguments into the type you require. Instead of defining the actual handler like you did, you should use -

Kernel memory is mapped non-accessible for userspace or not mapped at all.

If you want to access kernel memory, you can do so over /dev/kmem (available when kernel was configured with CONFIG_DEVKMEM). Another option is to read a kernel core dump from /proc/kcore (available when kernel was configured with CONFIG_PROC_KCORE). Yet another option is to extend your kernel module, so it offers a /dev/kmem like device (or just an ioctl).

If you want to communicate between today extension and your app. you can use nsuserdefaults.

There is good tutorial for this. app-extension-programming-today

First on of all the get method you are using is a deprecated one (I assume you have newest AFNetworking version). Please use the new one this way: