instrumentation/syscalls/headers/syscalls_pointers_override.h

   1 #define OVERRIDE_32_sys_execve
   2 #define OVERRIDE_64_sys_execve
   3
   4 #ifndef CREATE_SYSCALL_TABLE
   5
   6 SC_TRACE_EVENT(sys_execve,
   7         TP_PROTO(const char *filename, char *const *argv, char *const *envp),
   8         TP_ARGS(filename, argv, envp),
   9         TP_STRUCT__entry(__string_from_user(filename, filename)
  10                 __field_hex(char *const *, argv)
  11                 __field_hex(char *const *, envp)),
  12         TP_fast_assign(tp_copy_string_from_user(filename, filename)
  13                 tp_assign(argv, argv)
  14                 tp_assign(envp, envp)),
  15         TP_printk()
  16 )
  17
  18 SC_TRACE_EVENT(sys_clone,
  19         TP_PROTO(unsigned long clone_flags, unsigned long newsp,
  20                 void __user *parent_tid,
  21                 void __user *child_tid,
  22                 struct pt_regs *regs),
  23         TP_ARGS(clone_flags, newsp, parent_tid, child_tid, regs),
  24         TP_STRUCT__entry(
  25                 __field_hex(unsigned long, clone_flags)
  26                 __field_hex(unsigned long, newsp)
  27                 __field_hex(void *, parent_tid)
  28                 __field_hex(void *, child_tid)),
  29         TP_fast_assign(
  30                 tp_assign(clone_flags, clone_flags)
  31                 tp_assign(newsp, newsp)
  32                 tp_assign(parent_tid, parent_tid)
  33                 tp_assign(child_tid, child_tid)),
  34         TP_printk()
  35 )
  36
  37 #endif /* CREATE_SYSCALL_TABLE */