FUNCTION::KERNEL_STRING(3stap)

💖 function::kernel_string 💖

okay so bestie, welcome to the 3stap manual — this is the SystemTap Tapset Reference, and today's main character is a little function called kernel_string. she grabs strings out of kernel memory. that's it. that's the vibe. ✨

---

🌸 NAME 🌸

function::kernel_string — retrieves a string from kernel memory 🧚

---

✨ SYNOPSIS ✨

1) kernel_string:string(addr:long)

2) kernel_string:string(addr:long,err_msg:string)

like, two whole flavours. pick your fighter. 💅

---

🎀 ARGUMENTS 🎀

• addr — the kernel address you're pulling the string from. that's the spot. that's where the tea is. 🫖
• err_msg — the error message it hands back when the data just isn't there. lowkey the emotional support string. 😭

---

💜 DESCRIPTION 💜

1) this version returns the null terminated C string from a given kernel memory address. if the string copy faults? it reports an error. no cap, it will tell you. 💀

2) this version returns the null terminated C string from a given kernel memory address too — same energy — but when there's a string copy fault, it reports the error message you gave it instead. custom error message era. iconic. 👑

heads up bestie: both versions are about string copy faults — that's the failure mode, and both of them report on it. version 2 just lets you pick what gets said. 🎀

---

🦋 SEE ALSO 🦋

• tapset::conversions(3stap) — go read this one too, fr fr 🫶

---

and that's the whole page, bestie!! SystemTap Tapset Reference, September 2026 — mwah, go copy some kernel strings responsibly 💖✨🌸