Add x86 32/64 execve syscall instrumentation override

[lttng-modules.git] / instrumentation / syscalls / headers / syscalls_pointers_override.h

diff --git a/instrumentation/syscalls/headers/syscalls_pointers_override.h b/instrumentation/syscalls/headers/syscalls_pointers_override.h
index e464a4ee4e7a9d8f1c8ec3e584196c8ea7576dba..b52b00bceaa7383bd29a2263c633a61bcadfd1f5 100644 (file)
--- a/instrumentation/syscalls/headers/syscalls_pointers_override.h
+++ b/instrumentation/syscalls/headers/syscalls_pointers_override.h
@@ -1,4 +1,18 @@
-/*
- * This is a place-holder for override defines for system calls with
- * pointers (all architectures).
- */
+#define OVERRIDE_32_sys_execve
+#define OVERRIDE_64_sys_execve
+
+#ifndef CREATE_SYSCALL_TABLE
+
+SC_TRACE_EVENT(sys_execve,
+       TP_PROTO(const char *filename, char *const *argv, char *const *envp),
+       TP_ARGS(filename, argv, envp),
+       TP_STRUCT__entry(__string_from_user(filename, filename)
+               __field_hex(char *const *, argv)
+               __field_hex(char *const *, envp)),
+       TP_fast_assign(tp_copy_string_from_user(filename, filename)
+               tp_assign(argv, argv)
+               tp_assign(envp, envp)),
+       TP_printk()
+)
+
+#endif /* CREATE_SYSCALL_TABLE */