tools/opensnoop: Use bpf_probe_read_user explicitly
diff --git a/tools/opensnoop.py b/tools/opensnoop.py
index 3b50887..0b48c81 100755
--- a/tools/opensnoop.py
+++ b/tools/opensnoop.py
@@ -215,8 +215,11 @@
{
int dfd = PT_REGS_PARM1(regs);
const char __user *filename = (char *)PT_REGS_PARM2(regs);
- struct open_how __user *how = (struct open_how *)PT_REGS_PARM3(regs);
- int flags = how->flags;
+ struct open_how __user how;
+ int flags;
+
+ bpf_probe_read_user(&how, sizeof(struct open_how), (struct open_how*)PT_REGS_PARM3(regs));
+ flags = how.flags;
#else
KRETFUNC_PROBE(FNNAME, int dfd, const char __user *filename, struct open_how __user *how, int ret)
{
