Hi Andrew, On Tue, 2007-07-31 at 11:30 -0400, Andrew Cagney wrote: > You mentioned an off-by-one error in the syscall code. Is that now > being tested? If you ftrace FryskGui as in the bug report (or any other non-trivial program) yes. There have also been guards added to the code to test that this cannot be happening again. Subsyscalls are IA32 specific and aren't explicitly covered by the auditlibs tests as far as I can see (except for the major syscall numbers of course). If you want you can try to add them explicitly to TestSyscallsWithAudit given auditlib code to detect them (I don't know if auditlib can provide that info yet though). If not, let me know and I add it to my list to investigate. Cheers, Mark