1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
| /* SPDX-License-Identifier: GPL-2.0 */
| #undef TRACE_SYSTEM
| #define TRACE_SYSTEM raw_syscalls
| #undef TRACE_INCLUDE_FILE
| #define TRACE_INCLUDE_FILE syscalls
|
| #if !defined(_TRACE_EVENTS_SYSCALLS_H) || defined(TRACE_HEADER_MULTI_READ)
| #define _TRACE_EVENTS_SYSCALLS_H
|
| #include <linux/tracepoint.h>
|
| #include <asm/ptrace.h>
| #include <asm/syscall.h>
|
|
| #ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS
|
| TRACE_EVENT_FN(sys_enter,
|
| TP_PROTO(struct pt_regs *regs, long id),
|
| TP_ARGS(regs, id),
|
| TP_STRUCT__entry(
| __field( long, id )
| __array( unsigned long, args, 6 )
| ),
|
| TP_fast_assign(
| __entry->id = id;
| syscall_get_arguments(current, regs, __entry->args);
| ),
|
| TP_printk("NR %ld (%lx, %lx, %lx, %lx, %lx, %lx)",
| __entry->id,
| __entry->args[0], __entry->args[1], __entry->args[2],
| __entry->args[3], __entry->args[4], __entry->args[5]),
|
| syscall_regfunc, syscall_unregfunc
| );
|
| TRACE_EVENT_FLAGS(sys_enter, TRACE_EVENT_FL_CAP_ANY)
|
| TRACE_EVENT_FN(sys_exit,
|
| TP_PROTO(struct pt_regs *regs, long ret),
|
| TP_ARGS(regs, ret),
|
| TP_STRUCT__entry(
| __field( long, id )
| __field( long, ret )
| ),
|
| TP_fast_assign(
| __entry->id = syscall_get_nr(current, regs);
| __entry->ret = ret;
| ),
|
| TP_printk("NR %ld = %ld",
| __entry->id, __entry->ret),
|
| syscall_regfunc, syscall_unregfunc
| );
|
| TRACE_EVENT_FLAGS(sys_exit, TRACE_EVENT_FL_CAP_ANY)
|
| #endif /* CONFIG_HAVE_SYSCALL_TRACEPOINTS */
|
| #endif /* _TRACE_EVENTS_SYSCALLS_H */
|
| /* This part must be outside protection */
| #include <trace/define_trace.h>
|
|
