On Sat, Dec 31, 2011 at 05:20:16PM +0000, David Holland wrote: > The other obvious approach is to add one or more new ptrace operations > to provide proper/adequate/better support for intercepting system > calls. This is probably a more useful facility in the long run, and it > *can* be made leakproof, but it'll be more work.
The missing piece is being able to modify the mapping of the debuggee. Adding that is actually useful for a number of cases for a "normal" debugger as well. Consider conditional break points. It would speed up the processing a lot if a debugger could use JIT compilation and map the conditional handling into the target process. Joerg