You could look at the maps of a process instead of the environ. That would show it. Unless the ld_preload patches the process you are using to read the maps fi

You could look at the maps of a process instead of the environ. That would show it. Unless the ld_preload patches the process you are using to read the maps file, and gives you a false maps file.