summaryrefslogtreecommitdiffstats
path: root/tapset/syscalls2.stp
diff options
context:
space:
mode:
authorPrzemyslaw Pawelczyk <przemyslaw@pawelczyk.it>2009-10-10 12:14:54 +0200
committerJosh Stone <jistone@redhat.com>2009-10-12 17:41:45 -0700
commit9a59aed914fbe25e159b2a60a97693f14b24ddf3 (patch)
tree68339248af2b75effca3eda0c6e4f6e59810c893 /tapset/syscalls2.stp
parent0670efc6debceea57084547976c229335cc0e2fd (diff)
downloadsystemtap-steved-9a59aed914fbe25e159b2a60a97693f14b24ddf3.tar.gz
systemtap-steved-9a59aed914fbe25e159b2a60a97693f14b24ddf3.tar.xz
systemtap-steved-9a59aed914fbe25e159b2a60a97693f14b24ddf3.zip
Add the .call modifier to syscall entry probes.
Inline functions do not have an indentifiable return point and require kernel built using VTA-enabled gcc to get tracking of variables. OTOH syscall functions are very rarely inlined (depending on the compiler mood), therefore filtering probes to include only non-inlined functions ensures consistent behavior between different kernels. This removes the problem of inaccessible variables in inlined syscalls that is described in comments #6-9 to PR5890 and gives us the status quo w.r.t. syscall probing, because before the commit solving PR10572 (b7478964) inline instances were masked anyway by non-inline ones. You can check whether you have inlined syscalls using following command: $ stap -l 'kernel.function("sys_*"),kernel.function("compat_sys_*")' \ 2>&1 -vvv | awk '/^selected inline/{print $5}' * tapset/syscalls.stp: Add .call to all entry probes. * tapset/syscalls2.stp: Ditto.
Diffstat (limited to 'tapset/syscalls2.stp')
-rw-r--r--tapset/syscalls2.stp710
1 files changed, 355 insertions, 355 deletions
diff --git a/tapset/syscalls2.stp b/tapset/syscalls2.stp
index e2be10fc..5e97aef5 100644
--- a/tapset/syscalls2.stp
+++ b/tapset/syscalls2.stp
@@ -28,8 +28,8 @@
# long compat_sys_nanosleep(struct compat_timespec __user *rqtp,
# struct compat_timespec __user *rmtp)
#
-probe syscall.nanosleep = kernel.function("SyS_nanosleep") !,
- kernel.function("sys_nanosleep")
+probe syscall.nanosleep = kernel.function("SyS_nanosleep").call !,
+ kernel.function("sys_nanosleep").call
{
name = "nanosleep"
req_uaddr = $rqtp
@@ -42,7 +42,7 @@ probe syscall.nanosleep.return = kernel.function("SyS_nanosleep").return !,
name = "nanosleep"
retstr = returnstr(1)
}
-probe syscall.compat_nanosleep = kernel.function("compat_sys_nanosleep") ?
+probe syscall.compat_nanosleep = kernel.function("compat_sys_nanosleep").call ?
{
name = "nanosleep"
req_uaddr = $rqtp
@@ -61,8 +61,8 @@ probe syscall.compat_nanosleep.return = kernel.function("compat_sys_nanosleep").
# long compat_sys_nfsservctl(int cmd, struct compat_nfsctl_arg __user *arg,
# union compat_nfsctl_res __user *res)
#
-probe syscall.nfsservctl = kernel.function("sys_nfsservctl") ?,
- kernel.function("compat_sys_nfsservctl") ?
+probe syscall.nfsservctl = kernel.function("sys_nfsservctl").call ?,
+ kernel.function("compat_sys_nfsservctl").call ?
{
name = "nfsservctl"
cmd = $cmd
@@ -80,8 +80,8 @@ probe syscall.nfsservctl.return = kernel.function("sys_nfsservctl").return ?,
# nice _______________________________________________________
# long sys_nice(int increment)
#
-probe syscall.nice = kernel.function("SyS_nice") !,
- kernel.function("sys_nice") ?
+probe syscall.nice = kernel.function("SyS_nice").call !,
+ kernel.function("sys_nice").call ?
{
name = "nice"
inc = $increment
@@ -98,7 +98,7 @@ probe syscall.nice.return = kernel.function("SyS_nice").return !,
#
# long sys_ni_syscall(void)
#
-probe syscall.ni_syscall = kernel.function("sys_ni_syscall")
+probe syscall.ni_syscall = kernel.function("sys_ni_syscall").call
{
name = "ni_syscall"
argstr = ""
@@ -113,10 +113,10 @@ probe syscall.ni_syscall.return = kernel.function("sys_ni_syscall").return
# long sys_open(const char __user * filename, int flags, int mode)
# (obsolete) long sys32_open(const char * filename, int flags, int mode)
#
-probe syscall.open = kernel.function("compat_sys_open") ?,
- kernel.function("sys32_open") ?,
- kernel.function("SyS_open") !,
- kernel.function("sys_open") ?
+probe syscall.open = kernel.function("compat_sys_open").call ?,
+ kernel.function("sys32_open").call ?,
+ kernel.function("SyS_open").call !,
+ kernel.function("sys_open").call ?
{
name = "open"
filename = user_string($filename)
@@ -142,9 +142,9 @@ probe syscall.open.return = kernel.function("compat_sys_open").return ?,
# long sys_openat(int dfd, const char __user *filename, int flags, int mode)
# long compat_sys_openat(unsigned int dfd, const char __user *filename, int flags, int mode)
#
-probe syscall.openat = kernel.function("compat_sys_openat") ?,
- kernel.function("SyS_openat") !,
- kernel.function("sys_openat") ?
+probe syscall.openat = kernel.function("compat_sys_openat").call ?,
+ kernel.function("SyS_openat").call !,
+ kernel.function("sys_openat").call ?
{
name = "openat"
filename = user_string($filename)
@@ -171,9 +171,9 @@ probe syscall.openat.return = kernel.function("compat_sys_openat").return ?,
#
# sys_pause(void)
#
-probe syscall.pause = kernel.function("sys_pause") ?,
- kernel.function("sys32_pause") ?,
- kernel.function("compat_sys_pause") ?
+probe syscall.pause = kernel.function("sys_pause").call ?,
+ kernel.function("sys32_pause").call ?,
+ kernel.function("compat_sys_pause").call ?
{
name = "pause"
argstr = ""
@@ -194,7 +194,7 @@ probe syscall.pause.return = kernel.function("sys_pause").return ?,
# unsigned long dfn)
#
#
-#probe syscall.pciconfig_iobase = kernel.function("sys_pciconfig_iobase")
+#probe syscall.pciconfig_iobase = kernel.function("sys_pciconfig_iobase").call
#{
# name = "pciconfig_iobase"
# which = $which
@@ -218,7 +218,7 @@ probe syscall.pause.return = kernel.function("sys_pause").return ?,
# { return 0; }
#
#
-#probe syscall.pciconfig_read = kernel.function("sys_pciconfig_read")
+#probe syscall.pciconfig_read = kernel.function("sys_pciconfig_read").call
#{
# name = "pciconfig_read"
# bus = $bus
@@ -244,7 +244,7 @@ probe syscall.pause.return = kernel.function("sys_pause").return ?,
# unsigned char *buf)
#
#
-#probe syscall.pciconfig_write = kernel.function("sys_pciconfig_write")
+#probe syscall.pciconfig_write = kernel.function("sys_pciconfig_write").call
#{
# name = "pciconfig_write"
# bus = $bus
@@ -265,8 +265,8 @@ probe syscall.pause.return = kernel.function("sys_pause").return ?,
# asmlinkage long
# sys_personality(u_long personality)
#
-probe syscall.personality = kernel.function("SyS_personality") !,
- kernel.function("sys_personality")
+probe syscall.personality = kernel.function("SyS_personality").call !,
+ kernel.function("sys_personality").call
{
name = "personality"
persona = $personality
@@ -285,15 +285,15 @@ probe syscall.personality.return = kernel.function("SyS_personality").return !,
#
%(arch == "x86_64" %?
# x86_64 gcc 4.1 problem
-probe syscall.pipe = kernel.function("SyS_pipe") !,
- kernel.function("sys_pipe")
+probe syscall.pipe = kernel.function("SyS_pipe").call !,
+ kernel.function("sys_pipe").call
{
name = "pipe"
argstr = ""
}
%:
-probe syscall.pipe = kernel.function("SyS_pipe") !,
- kernel.function("sys_pipe")
+probe syscall.pipe = kernel.function("SyS_pipe").call !,
+ kernel.function("sys_pipe").call
{
name = "pipe"
%( arch == "ia64" %?
@@ -316,8 +316,8 @@ probe syscall.pipe.return = kernel.function("SyS_pipe").return !,
#
# long sys_pivot_root(const char __user *new_root, const char __user *put_old)
#
-probe syscall.pivot_root = kernel.function("SyS_pivot_root") !,
- kernel.function("sys_pivot_root")
+probe syscall.pivot_root = kernel.function("SyS_pivot_root").call !,
+ kernel.function("sys_pivot_root").call
{
name = "pivot_root"
new_root_str = user_string($new_root)
@@ -336,8 +336,8 @@ probe syscall.pivot_root.return = kernel.function("SyS_pivot_root").return !,
#
# long sys_poll(struct pollfd __user * ufds, unsigned int nfds, long timeout)
#
-probe syscall.poll = kernel.function("SyS_poll") !,
- kernel.function("sys_poll")
+probe syscall.poll = kernel.function("SyS_poll").call !,
+ kernel.function("sys_poll").call
{
name = "poll"
ufds_uaddr = $ufds
@@ -362,8 +362,8 @@ probe syscall.poll.return = kernel.function("SyS_poll").return !,
# struct timespec __user *tsp, const sigset_t __user *sigmask,
# size_t sigsetsize)
#
-probe syscall.ppoll = kernel.function("SyS_ppoll") !,
- kernel.function("sys_ppoll") ?
+probe syscall.ppoll = kernel.function("SyS_ppoll").call !,
+ kernel.function("sys_ppoll").call ?
{
name = "ppoll"
argstr = sprintf("%p, %d, %s, %p, %d",
@@ -383,7 +383,7 @@ probe syscall.ppoll.return = kernel.function("SyS_ppoll").return !,
# unsigned int nfds, struct compat_timespec __user *tsp,
# const compat_sigset_t __user *sigmask, compat_size_t sigsetsize)
#
-probe syscall.compat_ppoll = kernel.function("compat_sys_ppoll") ?
+probe syscall.compat_ppoll = kernel.function("compat_sys_ppoll").call ?
{
name = "ppoll"
argstr = sprintf("%p, %d, %s, %p, %d",
@@ -408,8 +408,8 @@ probe syscall.compat_ppoll.return = kernel.function("compat_sys_ppoll").return ?
# unsigned long arg4,
# unsigned long arg5)
#
-probe syscall.prctl = kernel.function("SyS_prctl") !,
- kernel.function("sys_prctl")
+probe syscall.prctl = kernel.function("SyS_prctl").call !,
+ kernel.function("sys_prctl").call
{
name = "prctl"
option = $option
@@ -433,8 +433,8 @@ probe syscall.prctl.return = kernel.function("SyS_prctl").return !,
# size_t count,
# loff_t pos)
#
-probe syscall.pread = kernel.function("SyS_pread64") !,
- kernel.function("sys_pread64")
+probe syscall.pread = kernel.function("SyS_pread64").call !,
+ kernel.function("sys_pread64").call
{
name = "pread"
fd = $fd
@@ -455,8 +455,8 @@ probe syscall.pread.return = kernel.function("SyS_pread64").return !,
# long sys_pselect6(int n, fd_set __user *inp, fd_set __user *outp,
# fd_set __user *exp, struct timespec __user *tsp, void __user *sig)
#
-probe syscall.pselect6 = kernel.function("SyS_pselect6") !,
- kernel.function("sys_pselect6") ?
+probe syscall.pselect6 = kernel.function("SyS_pselect6").call !,
+ kernel.function("sys_pselect6").call ?
{
name = "pselect6"
argstr = sprintf("%d, %p, %p, %p, %s, %p", $n, $inp, $outp, $exp,
@@ -468,7 +468,7 @@ probe syscall.pselect6.return = kernel.function("SyS_pselect6").return !,
name = "pselect6"
retstr = returnstr(1)
}
-probe syscall.compat_pselect6 = kernel.function("compat_sys_pselect6") ?
+probe syscall.compat_pselect6 = kernel.function("compat_sys_pselect6").call ?
{
name = "pselect6"
argstr = sprintf("%d, %p, %p, %p, %s, %p", $n, $inp, $outp, $exp,
@@ -486,7 +486,7 @@ probe syscall.compat_pselect6.return = kernel.function("compat_sys_pselect6").re
# fd_set __user *exp, struct timespec __user *tsp,
# const sigset_t __user *sigmask, size_t sigsetsize)
#
-probe syscall.pselect7 = kernel.function("sys_pselect7") ?
+probe syscall.pselect7 = kernel.function("sys_pselect7").call ?
{
name = "pselect7"
argstr = sprintf("%d, %p, %p, %p, %s, %p, %d", $n, $inp, $outp, $exp,
@@ -497,7 +497,7 @@ probe syscall.pselect7.return = kernel.function("sys_pselect7").return ?
name = "pselect7"
retstr = returnstr(1)
}
-probe syscall.compat_pselect7a = kernel.function("compat_sys_pselect7") ?
+probe syscall.compat_pselect7a = kernel.function("compat_sys_pselect7").call ?
{
name = "pselect7"
argstr = sprintf("%d, %p, %p, %p, %s, %p, %d", $n, $inp, $outp, $exp,
@@ -516,8 +516,8 @@ probe syscall.compat_pselect7.return = kernel.function("compat_sys_pselect7").re
# long addr,
# long data)
#
-probe syscall.ptrace = kernel.function("SyS_ptrace") !,
- kernel.function("sys_ptrace") ?
+probe syscall.ptrace = kernel.function("SyS_ptrace").call !,
+ kernel.function("sys_ptrace").call ?
{
name = "ptrace"
request = $request
@@ -540,8 +540,8 @@ probe syscall.ptrace.return = kernel.function("SyS_ptrace").return !,
# size_t count,
# loff_t pos)
#
-probe syscall.pwrite = kernel.function("SyS_pwrite64") !,
- kernel.function("sys_pwrite64")
+probe syscall.pwrite = kernel.function("SyS_pwrite64").call !,
+ kernel.function("sys_pwrite64").call
{
name = "pwrite"
fd = $fd
@@ -560,7 +560,7 @@ probe syscall.pwrite.return = kernel.function("SyS_pwrite64").return !,
}
# long sys32_pwrite64(unsigned int fd, const char __user *ubuf,
# size_t count, u32 poshi, u32 poslo)
-probe syscall.pwrite32 = kernel.function("sys32_pwrite64") ?
+probe syscall.pwrite32 = kernel.function("sys32_pwrite64").call ?
{
name = "pwrite"
fd = $fd
@@ -592,8 +592,8 @@ probe syscall.pwrite32.return = kernel.function("sys32_pwrite64").return ?
# qid_t id,
# void __user *addr)
#
-probe syscall.quotactl = kernel.function("SyS_quotactl") !,
- kernel.function("sys_quotactl") ?
+probe syscall.quotactl = kernel.function("SyS_quotactl").call !,
+ kernel.function("sys_quotactl").call ?
{
name = "quotactl"
cmd = $cmd
@@ -614,8 +614,8 @@ probe syscall.quotactl.return = kernel.function("SyS_quotactl").return !,
# read _______________________________________________________
# ssize_t sys_read(unsigned int fd, char __user * buf, size_t count)
-probe syscall.read = kernel.function("SyS_read") !,
- kernel.function("sys_read")
+probe syscall.read = kernel.function("SyS_read").call !,
+ kernel.function("sys_read").call
{
name = "read"
fd = $fd
@@ -637,8 +637,8 @@ probe syscall.read.return = kernel.function("SyS_read").return !,
# loff_t offset,
# size_t count)
#
-probe syscall.readahead = kernel.function("SyS_readahead") !,
- kernel.function("sys_readahead")
+probe syscall.readahead = kernel.function("SyS_readahead").call !,
+ kernel.function("sys_readahead").call
{
name = "readahead"
fd = $fd
@@ -658,8 +658,8 @@ probe syscall.readahead.return = kernel.function("SyS_readahead").return !,
# long compat_sys_old_readdir(unsigned int fd, struct compat_old_linux_dirent __user *dirent, unsigned int count)
# int old32_readdir(unsigned int fd, struct old_linux_dirent32 *dirent, unsigned int count)
#
-probe syscall.readdir = kernel.function("compat_sys_old_readdir") ?,
- kernel.function("old32_readdir") ?
+probe syscall.readdir = kernel.function("compat_sys_old_readdir").call ?,
+ kernel.function("old32_readdir").call ?
{
name = "readdir"
argstr = sprintf("%d, %p, %d", $fd, $dirent, $count)
@@ -677,8 +677,8 @@ probe syscall.readdir.return = kernel.function("compat_sys_old_readdir").return
# char __user * buf,
# int bufsiz)
#
-probe syscall.readlink = kernel.function("SyS_readlink") !,
- kernel.function("sys_readlink")
+probe syscall.readlink = kernel.function("SyS_readlink").call !,
+ kernel.function("sys_readlink").call
{
name = "readlink"
path = user_string($path)
@@ -700,8 +700,8 @@ probe syscall.readlink.return = kernel.function("SyS_readlink").return !,
# char __user * buf,
# int bufsiz)
#
-probe syscall.readlinkat = kernel.function("SyS_readlinkat") !,
- kernel.function("sys_readlinkat") ?
+probe syscall.readlinkat = kernel.function("SyS_readlinkat").call !,
+ kernel.function("sys_readlinkat").call ?
{
name = "readlinkat"
dfd = $dfd
@@ -732,9 +732,9 @@ probe syscall.readlinkat.return = kernel.function("SyS_readlinkat").return !,
# const struct compat_iovec __user *vec,
# unsigned long vlen)
#
-probe syscall.readv = kernel.function("compat_sys_readv") ?,
- kernel.function("SyS_readv") !,
- kernel.function("sys_readv")
+probe syscall.readv = kernel.function("compat_sys_readv").call ?,
+ kernel.function("SyS_readv").call !,
+ kernel.function("sys_readv").call
{
name = "readv"
vector_uaddr = $vec
@@ -762,8 +762,8 @@ probe syscall.readv.return = kernel.function("compat_sys_readv").return ?,
# unsigned int cmd,
# void __user * arg)
#
-probe syscall.reboot = kernel.function("SyS_reboot") !,
- kernel.function("sys_reboot")
+probe syscall.reboot = kernel.function("SyS_reboot").call !,
+ kernel.function("sys_reboot").call
{
name = "reboot"
magic = $magic1
@@ -787,7 +787,7 @@ probe syscall.reboot.return = kernel.function("SyS_reboot").return !,
#
# long sys_recv(int fd, void __user *ubuf, size_t size, unsigned flags)
#
-probe syscall.recv = kernel.function("sys_recv") ?
+probe syscall.recv = kernel.function("sys_recv").call ?
{
name = "recv"
s = $fd
@@ -812,8 +812,8 @@ probe syscall.recv.return = kernel.function("sys_recv").return ?
# struct sockaddr __user *addr,
# int __user *addr_len)
#
-probe syscall.recvfrom = kernel.function("SyS_recvfrom") !,
- kernel.function("sys_recvfrom") ?
+probe syscall.recvfrom = kernel.function("SyS_recvfrom").call !,
+ kernel.function("sys_recvfrom").call ?
{
name = "recvfrom"
s = $fd
@@ -839,8 +839,8 @@ probe syscall.recvfrom.return = kernel.function("SyS_recvfrom").return !,
# struct msghdr __user *msg,
# unsigned int flags)
#
-probe syscall.recvmsg = kernel.function("SyS_recvmsg") !,
- kernel.function("sys_recvmsg") ?
+probe syscall.recvmsg = kernel.function("SyS_recvmsg").call !,
+ kernel.function("sys_recvmsg").call ?
{
name = "recvmsg"
s = $fd
@@ -861,7 +861,7 @@ probe syscall.recvmsg.return = kernel.function("SyS_recvmsg").return !,
# struct compat_msghdr __user *msg,
# unsigned int flags)
#
-probe syscall.compat_sys_recvmsg = kernel.function("compat_sys_recvmsg") ?
+probe syscall.compat_sys_recvmsg = kernel.function("compat_sys_recvmsg").call ?
{
name = "compat_sys_recvmsg"
s = $fd
@@ -883,8 +883,8 @@ probe syscall.compat_sys_recvmsg.return = kernel.function("compat_sys_recvmsg").
# unsigned long pgoff,
# unsigned long flags)
#
-probe syscall.remap_file_pages = kernel.function("SyS_remap_file_pages") !,
- kernel.function("sys_remap_file_pages") ?
+probe syscall.remap_file_pages = kernel.function("SyS_remap_file_pages").call !,
+ kernel.function("sys_remap_file_pages").call ?
{
name = "remap_file_pages"
start = $start
@@ -912,8 +912,8 @@ probe syscall.remap_file_pages.return = kernel.function("SyS_remap_file_pages").
# sys_removexattr(char __user *path,
# char __user *name)
#
-probe syscall.removexattr = kernel.function("SyS_removexattr") !,
- kernel.function("sys_removexattr")
+probe syscall.removexattr = kernel.function("SyS_removexattr").call !,
+ kernel.function("sys_removexattr").call
{
name = "removexattr"
name_str = user_string($name)
@@ -940,8 +940,8 @@ probe syscall.removexattr.return = kernel.function("SyS_removexattr").return !,
# sys_rename(const char __user * oldname,
# const char __user * newname)
#
-probe syscall.rename = kernel.function("SyS_rename") !,
- kernel.function("sys_rename")
+probe syscall.rename = kernel.function("SyS_rename").call !,
+ kernel.function("sys_rename").call
{
name = "rename"
oldpath = user_string($oldname)
@@ -960,8 +960,8 @@ probe syscall.rename.return = kernel.function("SyS_rename").return !,
# new function with 2.6.16
# long sys_renameat(int olddfd, const char __user *oldname,
# int newdfd, const char __user *newname)
-probe syscall.renameat = kernel.function("SyS_renameat") !,
- kernel.function("sys_renameat") ?
+probe syscall.renameat = kernel.function("SyS_renameat").call !,
+ kernel.function("sys_renameat").call ?
{
name = "renameat"
olddfd = $olddfd
@@ -991,8 +991,8 @@ probe syscall.renameat.return = kernel.function("SyS_renameat").return !,
# key_serial_t destringid)
# compat_sys_request_key() calls sys_request_key, so don't need probe there.
#
-probe syscall.request_key = kernel.function("SyS_request_key") !,
- kernel.function("sys_request_key") ?
+probe syscall.request_key = kernel.function("SyS_request_key").call !,
+ kernel.function("sys_request_key").call ?
{
name = "request_key"
type_uaddr = $_type
@@ -1013,7 +1013,7 @@ probe syscall.request_key.return = kernel.function("SyS_request_key").return !,
# asmlinkage long
# sys_restart_syscall(void)
#
-probe syscall.restart_syscall = kernel.function("sys_restart_syscall")
+probe syscall.restart_syscall = kernel.function("sys_restart_syscall").call
{
name = "restart_syscall"
argstr = ""
@@ -1028,8 +1028,8 @@ probe syscall.restart_syscall.return = kernel.function("sys_restart_syscall").re
# asmlinkage long
# sys_rmdir(const char __user * pathname)
#
-probe syscall.rmdir = kernel.function("SyS_rmdir") !,
- kernel.function("sys_rmdir")
+probe syscall.rmdir = kernel.function("SyS_rmdir").call !,
+ kernel.function("sys_rmdir").call
{
name = "rmdir"
pathname = user_string($pathname)
@@ -1049,8 +1049,8 @@ probe syscall.rmdir.return = kernel.function("SyS_rmdir").return !,
# struct sigaction __user *oact,
# size_t sigsetsize)
#
-probe syscall.rt_sigaction = kernel.function("SyS_rt_sigaction") !,
- kernel.function("sys_rt_sigaction") ?
+probe syscall.rt_sigaction = kernel.function("SyS_rt_sigaction").call !,
+ kernel.function("sys_rt_sigaction").call ?
{
name = "rt_sigaction"
sig = $sig
@@ -1078,8 +1078,8 @@ probe syscall.rt_sigaction.return = kernel.function("SyS_rt_sigaction").return !
# struct sigaction32 __user *oact,
# size_t sigsetsize)
-probe syscall.rt_sigaction32 = kernel.function("sys32_rt_sigaction") ?,
- kernel.function("compat_sys_rt_sigaction") ?
+probe syscall.rt_sigaction32 = kernel.function("sys32_rt_sigaction").call ?,
+ kernel.function("compat_sys_rt_sigaction").call ?
{
name = "rt_sigaction"
sig = $sig
@@ -1100,8 +1100,8 @@ probe syscall.rt_sigaction32.return = kernel.function("sys32_rt_sigaction").retu
#
# long sys_rt_sigpending(sigset_t __user *set, size_t sigsetsize)
#
-probe syscall.rt_sigpending = kernel.function("SyS_rt_sigpending") !,
- kernel.function("sys_rt_sigpending") ?
+probe syscall.rt_sigpending = kernel.function("SyS_rt_sigpending").call !,
+ kernel.function("sys_rt_sigpending").call ?
{
name = "rt_sigpending"
set_uaddr = $set
@@ -1120,10 +1120,10 @@ probe syscall.rt_sigpending.return = kernel.function("SyS_rt_sigpending").return
# long compat_sys_rt_sigprocmask(int how, compat_sigset_t __user *set, compat_sigset_t __user *oset, compat_size_t sigsetsize)
# long sys_rt_sigprocmask(int how, sigset_t __user *set, sigset_t __user *oset, size_t sigsetsize)
#
-probe syscall.rt_sigprocmask = kernel.function("sys32_rt_sigprocmask") ?,
- kernel.function("compat_sys_rt_sigprocmask") ?,
- kernel.function("SyS_rt_sigprocmask") !,
- kernel.function("sys_rt_sigprocmask") ?
+probe syscall.rt_sigprocmask = kernel.function("sys32_rt_sigprocmask").call ?,
+ kernel.function("compat_sys_rt_sigprocmask").call ?,
+ kernel.function("SyS_rt_sigprocmask").call !,
+ kernel.function("sys_rt_sigprocmask").call ?
{
name = "rt_sigprocmask"
how = $how
@@ -1146,8 +1146,8 @@ probe syscall.rt_sigprocmask.return = kernel.function("sys32_rt_sigprocmask").re
#
# long sys_rt_sigqueueinfo(int pid, int sig, siginfo_t __user *uinfo)
#
-probe syscall.rt_sigqueueinfo = kernel.function("SyS_rt_sigqueueinfo") !,
- kernel.function("sys_rt_sigqueueinfo")
+probe syscall.rt_sigqueueinfo = kernel.function("SyS_rt_sigqueueinfo").call !,
+ kernel.function("sys_rt_sigqueueinfo").call
{
name = "rt_sigqueueinfo"
pid = $pid
@@ -1165,8 +1165,8 @@ probe syscall.rt_sigqueueinfo.return = kernel.function("SyS_rt_sigqueueinfo").re
# rt_sigreturn _______________________________________________
# int sys_rt_sigreturn(unsigned long __unused)
#
-probe syscall.rt_sigreturn = kernel.function("sys_rt_sigreturn") ?,
- kernel.function("sys32_rt_sigreturn") ?
+probe syscall.rt_sigreturn = kernel.function("sys_rt_sigreturn").call ?,
+ kernel.function("sys32_rt_sigreturn").call ?
{
name = "rt_sigreturn"
argstr = ""
@@ -1182,10 +1182,10 @@ probe syscall.rt_sigreturn.return = kernel.function("sys_rt_sigreturn").return ?
#
# sys_rt_sigsuspend(struct pt_regs regs)
#
-probe syscall.rt_sigsuspend = kernel.function("compat_sys_rt_sigsuspend") ?,
- kernel.function("ia64_rt_sigsuspend") ?,
- kernel.function("SyS_rt_sigsuspend") !,
- kernel.function("sys_rt_sigsuspend") ?
+probe syscall.rt_sigsuspend = kernel.function("compat_sys_rt_sigsuspend").call ?,
+ kernel.function("ia64_rt_sigsuspend").call ?,
+ kernel.function("SyS_rt_sigsuspend").call !,
+ kernel.function("sys_rt_sigsuspend").call ?
{
name = "rt_sigsuspend"
argstr = ""
@@ -1209,9 +1209,9 @@ probe syscall.rt_sigsuspend.return = kernel.function("compat_sys_rt_sigsuspend")
# struct compat_siginfo __user *uinfo,
# struct compat_timespec __user *uts, compat_size_t sigsetsize)
#
-probe syscall.rt_sigtimedwait = kernel.function("compat_sys_rt_sigtimedwait") ?,
- kernel.function("SyS_rt_sigtimedwait") !,
- kernel.function("sys_rt_sigtimedwait")
+probe syscall.rt_sigtimedwait = kernel.function("compat_sys_rt_sigtimedwait").call ?,
+ kernel.function("SyS_rt_sigtimedwait").call !,
+ kernel.function("sys_rt_sigtimedwait").call
{
name = "rt_sigtimedwait"
uthese_uaddr = $uthese
@@ -1235,8 +1235,8 @@ probe syscall.rt_sigtimedwait.return = kernel.function("compat_sys_rt_sigtimedwa
# unsigned int len,
# unsigned long __user *user_mask_ptr)
#
-probe syscall.sched_getaffinity = kernel.function("SyS_sched_getaffinity") !,
- kernel.function("sys_sched_getaffinity")
+probe syscall.sched_getaffinity = kernel.function("SyS_sched_getaffinity").call !,
+ kernel.function("sys_sched_getaffinity").call
{
name = "sched_getaffinity"
pid = $pid
@@ -1256,8 +1256,8 @@ probe syscall.sched_getaffinity.return = kernel.function("SyS_sched_getaffinity"
# sys_sched_getparam(pid_t pid,
# struct sched_param __user *param)
#
-probe syscall.sched_getparam = kernel.function("SyS_sched_getparam") !,
- kernel.function("sys_sched_getparam")
+probe syscall.sched_getparam = kernel.function("SyS_sched_getparam").call !,
+ kernel.function("sys_sched_getparam").call
{
name = "sched_getparam"
pid = $pid
@@ -1275,8 +1275,8 @@ probe syscall.sched_getparam.return = kernel.function("SyS_sched_getparam").retu
# asmlinkage long
# sys_sched_get_priority_max(int policy)
#
-probe syscall.sched_get_priority_max = kernel.function("SyS_sched_get_priority_max") !,
- kernel.function("sys_sched_get_priority_max")
+probe syscall.sched_get_priority_max = kernel.function("SyS_sched_get_priority_max").call !,
+ kernel.function("sys_sched_get_priority_max").call
{
name = "sched_get_priority_max"
policy = $policy
@@ -1293,8 +1293,8 @@ probe syscall.sched_get_priority_max.return = kernel.function("SyS_sched_get_pri
# asmlinkage long
# sys_sched_get_priority_min(int policy)
#
-probe syscall.sched_get_priority_min = kernel.function("SyS_sched_get_priority_min") !,
- kernel.function("sys_sched_get_priority_min")
+probe syscall.sched_get_priority_min = kernel.function("SyS_sched_get_priority_min").call !,
+ kernel.function("sys_sched_get_priority_min").call
{
name = "sched_get_priority_min"
policy = $policy
@@ -1310,8 +1310,8 @@ probe syscall.sched_get_priority_min.return = kernel.function("SyS_sched_get_pri
#
# long sys_sched_getscheduler(pid_t pid)
#
-probe syscall.sched_getscheduler = kernel.function("SyS_sched_getscheduler") !,
- kernel.function("sys_sched_getscheduler")
+probe syscall.sched_getscheduler = kernel.function("SyS_sched_getscheduler").call !,
+ kernel.function("sys_sched_getscheduler").call
{
name = "sched_getscheduler"
pid = $pid
@@ -1327,8 +1327,8 @@ probe syscall.sched_getscheduler.return = kernel.function("SyS_sched_getschedule
#
# long sys_sched_rr_get_interval(pid_t pid, struct timespec __user *interval)
#
-probe syscall.sched_rr_get_interval = kernel.function("SyS_sched_rr_get_interval") !,
- kernel.function("sys_sched_rr_get_interval")
+probe syscall.sched_rr_get_interval = kernel.function("SyS_sched_rr_get_interval").call !,
+ kernel.function("sys_sched_rr_get_interval").call
{
name = "sched_rr_get_interval"
pid = $pid
@@ -1349,8 +1349,8 @@ probe syscall.sched_rr_get_interval.return = kernel.function("SyS_sched_rr_get_i
# FIXME: why the problem with x86_64?
#
%( arch != "x86_64" %?
-probe syscall.sched_setaffinity = kernel.function("SyS_sched_setaffinity") !,
- kernel.function("sys_sched_setaffinity")
+probe syscall.sched_setaffinity = kernel.function("SyS_sched_setaffinity").call !,
+ kernel.function("sys_sched_setaffinity").call
{
name = "sched_setaffinity"
pid = $pid
@@ -1359,8 +1359,8 @@ probe syscall.sched_setaffinity = kernel.function("SyS_sched_setaffinity") !,
argstr = sprintf("%d, %d, %p", $pid, $len, $user_mask_ptr)
}
%:
-probe syscall.sched_setaffinity = kernel.function("SyS_sched_setaffinity") !,
- kernel.function("sys_sched_setaffinity")
+probe syscall.sched_setaffinity = kernel.function("SyS_sched_setaffinity").call !,
+ kernel.function("sys_sched_setaffinity").call
{
name = "sched_setaffinity"
pid = $pid
@@ -1380,8 +1380,8 @@ probe syscall.sched_setaffinity.return = kernel.function("SyS_sched_setaffinity"
#
# long sys_sched_setparam(pid_t pid, struct sched_param __user *param)
#
-probe syscall.sched_setparam = kernel.function("SyS_sched_setparam") !,
- kernel.function("sys_sched_setparam") ?
+probe syscall.sched_setparam = kernel.function("SyS_sched_setparam").call !,
+ kernel.function("sys_sched_setparam").call ?
{
name = "sched_setparam"
pid = $pid
@@ -1399,8 +1399,8 @@ probe syscall.sched_setparam.return = kernel.function("SyS_sched_setparam").retu
#
# long sys_sched_setscheduler(pid_t pid, int policy, struct sched_param __user *param)
#
-probe syscall.sched_setscheduler = kernel.function("SyS_sched_setscheduler") !,
- kernel.function("sys_sched_setscheduler") ?
+probe syscall.sched_setscheduler = kernel.function("SyS_sched_setscheduler").call !,
+ kernel.function("sys_sched_setscheduler").call ?
{
name = "sched_setscheduler"
pid = $pid
@@ -1419,7 +1419,7 @@ probe syscall.sched_setscheduler.return = kernel.function("SyS_sched_setschedule
# sched_yield ________________________________________________
# long sys_sched_yield(void)
#
-probe syscall.sched_yield = kernel.function("sys_sched_yield")
+probe syscall.sched_yield = kernel.function("sys_sched_yield").call
{
name = "sched_yield"
argstr = ""
@@ -1437,8 +1437,8 @@ probe syscall.sched_yield.return = kernel.function("sys_sched_yield").return
# fd_set __user *exp,
# struct timeval __user *tvp)
#
-probe syscall.select = kernel.function("SyS_select") !,
- kernel.function("sys_select")
+probe syscall.select = kernel.function("SyS_select").call !,
+ kernel.function("sys_select").call
{
name = "select"
n = $n
@@ -1461,7 +1461,7 @@ probe syscall.select.return = kernel.function("SyS_select").return !,
# compat_ulong_t __user *exp,
# struct compat_timeval __user *tvp)
#
-probe syscall.compat_select = kernel.function("compat_sys_select") ?
+probe syscall.compat_select = kernel.function("compat_sys_select").call ?
{
name = "select"
n = $n
@@ -1484,8 +1484,8 @@ probe syscall.compat_select.return = kernel.function("compat_sys_select").return
# int cmd,
# union semun arg)
#
-probe syscall.semctl = kernel.function("SyS_semctl") !,
- kernel.function("sys_semctl") ?
+probe syscall.semctl = kernel.function("SyS_semctl").call !,
+ kernel.function("sys_semctl").call ?
{
name = "semctl"
semid = $semid
@@ -1507,7 +1507,7 @@ probe syscall.semctl.return = kernel.function("SyS_semctl").return !,
#
# long compat_sys_semctl(int first, int second, int third, void __user *uptr)
#
-probe syscall.compat_sys_semctl = kernel.function("compat_sys_semctl") ?
+probe syscall.compat_sys_semctl = kernel.function("compat_sys_semctl").call ?
{
name = "compat_sys_semctl"
argstr = sprintf("%d, %d, %d, %p", $first, $second, $third, $uptr)
@@ -1521,8 +1521,8 @@ probe syscall.compat_sys_semctl.return = kernel.function("compat_sys_semctl").re
# semget _____________________________________________________
# long sys_semget (key_t key, int nsems, int semflg)
#
-probe syscall.semget = kernel.function("SyS_semget") !,
- kernel.function("sys_semget") ?
+probe syscall.semget = kernel.function("SyS_semget").call !,
+ kernel.function("sys_semget").call ?
{
name = "semget"
key = $key
@@ -1543,8 +1543,8 @@ probe syscall.semget.return = kernel.function("SyS_semget").return !,
# struct sembuf __user *tsops,
# unsigned nsops)
#
-probe syscall.semop = kernel.function("SyS_semtimedop") !,
- kernel.function("sys_semtimedop") ?
+probe syscall.semop = kernel.function("SyS_semtimedop").call !,
+ kernel.function("sys_semtimedop").call ?
{
name = "semop"
semid = $semid
@@ -1566,8 +1566,8 @@ probe syscall.semop.return = kernel.function("SyS_semtimedop").return !,
# unsigned nsops,
# const struct timespec __user *timeout)
#
-probe syscall.semtimedop = kernel.function("SyS_semtimedop") !,
- kernel.function("sys_semtimedop") ?
+probe syscall.semtimedop = kernel.function("SyS_semtimedop").call !,
+ kernel.function("sys_semtimedop").call ?
{
name = "semtimedop"
semid = $semid
@@ -1588,7 +1588,7 @@ probe syscall.semtimedop.return = kernel.function("SyS_semtimedop").return !,
# long compat_sys_semtimedop(int semid, struct sembuf __user *tsems,
# unsigned nsops, const struct compat_timespec __user *timeout)
#
-probe syscall.compat_sys_semtimedop = kernel.function("compat_sys_semtimedop") ?
+probe syscall.compat_sys_semtimedop = kernel.function("compat_sys_semtimedop").call ?
{
name = "compat_sys_semtimedop"
semid = $semid
@@ -1611,8 +1611,8 @@ probe syscall.compat_sys_semtimedop.return = kernel.function("compat_sys_semtime
# size_t len,
# unsigned flags)
#
-probe syscall.send = kernel.function("SyS_send") !,
- kernel.function("sys_send") ?
+probe syscall.send = kernel.function("SyS_send").call !,
+ kernel.function("sys_send").call ?
{
name = "send"
s = $fd
@@ -1636,10 +1636,10 @@ probe syscall.send.return = kernel.function("SyS_send").return !,
# off_t __user *offset,
# size_t count)
#
-probe syscall.sendfile = kernel.function("SyS_sendfile") ?,
- kernel.function("sys_sendfile") ?,
- kernel.function("SyS_sendfile64") ?,
- kernel.function("sys_sendfile64") ?
+probe syscall.sendfile = kernel.function("SyS_sendfile").call ?,
+ kernel.function("sys_sendfile").call ?,
+ kernel.function("SyS_sendfile64").call ?,
+ kernel.function("sys_sendfile64").call ?
{
name = "sendfile"
out_fd = $out_fd
@@ -1662,8 +1662,8 @@ probe syscall.sendfile.return = kernel.function("SyS_sendfile").return ?,
#
# long sys_sendmsg(int fd, struct msghdr __user *msg, unsigned flags)
#
-probe syscall.sendmsg = kernel.function("SyS_sendmsg") !,
- kernel.function("sys_sendmsg") ?
+probe syscall.sendmsg = kernel.function("SyS_sendmsg").call !,
+ kernel.function("sys_sendmsg").call ?
{
name = "sendmsg"
s = $fd
@@ -1682,7 +1682,7 @@ probe syscall.sendmsg.return = kernel.function("SyS_sendmsg").return !,
#
# long compat_sys_sendmsg(int fd, struct compat_msghdr __user *msg, unsigned flags)
#
-probe syscall.compat_sys_sendmsg = kernel.function("compat_sys_sendmsg") ?
+probe syscall.compat_sys_sendmsg = kernel.function("compat_sys_sendmsg").call ?
{
name = "compat_sys_sendmsg"
s = $fd
@@ -1705,8 +1705,8 @@ probe syscall.compat_sys_sendmsg.return = kernel.function("compat_sys_sendmsg").
# struct sockaddr __user *addr,
# int addr_len)
#
-probe syscall.sendto = kernel.function("SyS_sendto") !,
- kernel.function("sys_sendto") ?
+probe syscall.sendto = kernel.function("SyS_sendto").call !,
+ kernel.function("sys_sendto").call ?
{
name = "sendto"
s = $fd
@@ -1732,8 +1732,8 @@ probe syscall.sendto.return = kernel.function("SyS_sendto").return !,
# sys_setdomainname(char __user *name,
# int len)
#
-probe syscall.setdomainname = kernel.function("SyS_setdomainname") !,
- kernel.function("sys_setdomainname")
+probe syscall.setdomainname = kernel.function("SyS_setdomainname").call !,
+ kernel.function("sys_setdomainname").call
{
name = "setdomainname"
hostname_uaddr = $name
@@ -1751,9 +1751,9 @@ probe syscall.setdomainname.return = kernel.function("SyS_setdomainname").return
# long sys_setfsgid(gid_t gid)
# long sys_setfsgid16(old_gid_t gid)
#
-probe syscall.setfsgid = kernel.function("sys_setfsgid16") ?,
- kernel.function("SyS_setfsgid") !,
- kernel.function("sys_setfsgid") ?
+probe syscall.setfsgid = kernel.function("sys_setfsgid16").call ?,
+ kernel.function("SyS_setfsgid").call !,
+ kernel.function("sys_setfsgid").call ?
{
name = "setfsgid"
fsgid = $gid
@@ -1771,9 +1771,9 @@ probe syscall.setfsgid.return = kernel.function("sys_setfsgid16").return ?,
# long sys_setfsuid(uid_t uid)
# long sys_setfsuid16(old_uid_t uid)
#
-probe syscall.setfsuid = kernel.function("sys_setfsuid16") ?,
- kernel.function("SyS_setfsuid") !,
- kernel.function("sys_setfsuid") ?
+probe syscall.setfsuid = kernel.function("sys_setfsuid16").call ?,
+ kernel.function("SyS_setfsuid").call !,
+ kernel.function("sys_setfsuid").call ?
{
name = "setfsuid"
fsuid = $uid
@@ -1792,9 +1792,9 @@ probe syscall.setfsuid.return = kernel.function("sys_setfsuid16").return ?,
# long sys_setgid(gid_t gid)
# long sys_setgid16(old_gid_t gid)
#
-probe syscall.setgid = kernel.function("sys_setgid16") ?,
- kernel.function("SyS_setgid") !,
- kernel.function("sys_setgid") ?
+probe syscall.setgid = kernel.function("sys_setgid16").call ?,
+ kernel.function("SyS_setgid").call !,
+ kernel.function("sys_setgid").call ?
{
name = "setgid"
gid = $gid
@@ -1814,10 +1814,10 @@ probe syscall.setgid.return = kernel.function("sys_setgid16").return ?,
# long sys_setgroups16(int gidsetsize, old_gid_t __user *grouplist)
# long sys32_setgroups16(int gidsetsize, u16 __user *grouplist)
#
-probe syscall.setgroups = kernel.function("sys_setgroups16") ?,
- kernel.function("sys32_setgroups16") ?,
- kernel.function("SyS_setgroups") !,
- kernel.function("sys_setgroups") ?
+probe syscall.setgroups = kernel.function("sys_setgroups16").call ?,
+ kernel.function("sys32_setgroups16").call ?,
+ kernel.function("SyS_setgroups").call !,
+ kernel.function("sys_setgroups").call ?
{
name = "setgroups"
size = $gidsetsize
@@ -1839,8 +1839,8 @@ probe syscall.setgroups.return = kernel.function("sys_setgroups16").return ?,
# sys_sethostname(char __user *name,
# int len)
#
-probe syscall.sethostname = kernel.function("SyS_sethostname") !,
- kernel.function("sys_sethostname")
+probe syscall.sethostname = kernel.function("SyS_sethostname").call !,
+ kernel.function("sys_sethostname").call
{
name = "sethostname"
hostname_uaddr = $name
@@ -1860,8 +1860,8 @@ probe syscall.sethostname.return = kernel.function("SyS_sethostname").return !,
# struct itimerval __user *value,
# struct itimerval __user *ovalue)
#
-probe syscall.setitimer = kernel.function("SyS_setitimer") !,
- kernel.function("sys_setitimer")
+probe syscall.setitimer = kernel.function("SyS_setitimer").call !,
+ kernel.function("sys_setitimer").call
{
name = "setitimer"
which = $which
@@ -1881,7 +1881,7 @@ probe syscall.setitimer.return = kernel.function("SyS_setitimer").return !,
# struct compat_itimerval __user *in,
# struct compat_itimerval __user *out)
#
-probe syscall.compat_setitimer = kernel.function("compat_sys_setitimer") ?
+probe syscall.compat_setitimer = kernel.function("compat_sys_setitimer").call ?
{
name = "setitimer"
which = $which
@@ -1901,9 +1901,9 @@ probe syscall.compat_setitimer.return = kernel.function("compat_sys_setitimer").
# unsigned long __user *nmask,
# unsigned long maxnode)
#
-probe syscall.set_mempolicy = kernel.function("compat_sys_set_mempolicy") ?,
- kernel.function("SyS_set_mempolicy") !,
- kernel.function("sys_set_mempolicy") ?
+probe syscall.set_mempolicy = kernel.function("compat_sys_set_mempolicy").call ?,
+ kernel.function("SyS_set_mempolicy").call !,
+ kernel.function("sys_set_mempolicy").call ?
{
name = "set_mempolicy"
mode = $mode
@@ -1925,8 +1925,8 @@ probe syscall.set_mempolicy.return = kernel.function("compat_sys_set_mempolicy")
# sys_setpgid(pid_t pid,
# pid_t pgid)
#
-probe syscall.setpgid = kernel.function("SyS_setpgid") !,
- kernel.function("sys_setpgid")
+probe syscall.setpgid = kernel.function("SyS_setpgid").call !,
+ kernel.function("sys_setpgid").call
{
name = "setpgid"
pid = $pid
@@ -1946,8 +1946,8 @@ probe syscall.setpgid.return = kernel.function("SyS_setpgid").return !,
# int who,
# int niceval)
#
-probe syscall.setpriority = kernel.function("SyS_setpriority") !,
- kernel.function("sys_setpriority")
+probe syscall.setpriority = kernel.function("SyS_setpriority").call !,
+ kernel.function("sys_setpriority").call
{
name = "setpriority"
which = $which
@@ -1966,8 +1966,8 @@ probe syscall.setpriority.return = kernel.function("SyS_setpriority").return !,
# setregid ___________________________________________________
# long sys_setregid(gid_t rgid, gid_t egid)
#
-probe syscall.setregid = kernel.function("SyS_setregid") !,
- kernel.function("sys_setregid")
+probe syscall.setregid = kernel.function("SyS_setregid").call !,
+ kernel.function("sys_setregid").call
{
name = "setregid"
rgid = __int32($rgid)
@@ -1983,7 +1983,7 @@ probe syscall.setregid.return = kernel.function("SyS_setregid").return !,
# setregid16 _________________________________________________
# long sys_setregid16(old_gid_t rgid, old_gid_t egid)
#
-probe syscall.setregid16 = kernel.function("sys_setregid16") ?
+probe syscall.setregid16 = kernel.function("sys_setregid16").call ?
{
name = "setregid"
rgid = __short($rgid)
@@ -1998,8 +1998,8 @@ probe syscall.setregid16.return = kernel.function("sys_setregid16").return ?
# setresgid __________________________________________________
# long sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid)
#
-probe syscall.setresgid = kernel.function("SyS_setresgid") !,
- kernel.function("sys_setresgid")
+probe syscall.setresgid = kernel.function("SyS_setresgid").call !,
+ kernel.function("sys_setresgid").call
{
name = "setresgid"
rgid = __int32($rgid)
@@ -2019,7 +2019,7 @@ probe syscall.setresgid.return = kernel.function("SyS_setresgid").return !,
# old_gid_t egid,
# old_gid_t sgid)
#
-probe syscall.setresgid16 = kernel.function("sys_setresgid16") ?
+probe syscall.setresgid16 = kernel.function("sys_setresgid16").call ?
{
name = "setresgid"
rgid = __short($rgid)
@@ -2037,8 +2037,8 @@ probe syscall.setresgid16.return = kernel.function("sys_setresgid16").return ?
#
# long sys_setresuid(uid_t ruid, uid_t euid, uid_t suid)
#
-probe syscall.setresuid = kernel.function("SyS_setresuid") !,
- kernel.function("sys_setresuid")
+probe syscall.setresuid = kernel.function("SyS_setresuid").call !,
+ kernel.function("sys_setresuid").call
{
name = "setresuid"
ruid = __int32($ruid)
@@ -2057,7 +2057,7 @@ probe syscall.setresuid.return = kernel.function("SyS_setresuid").return !,
#
# long sys_setresuid16(old_uid_t ruid, old_uid_t euid, old_uid_t suid)
#
-probe syscall.setresuid16 = kernel.function("sys_setresuid16") ?
+probe syscall.setresuid16 = kernel.function("sys_setresuid16").call ?
{
name = "setresuid"
ruid = __short($ruid)
@@ -2074,8 +2074,8 @@ probe syscall.setresuid16.return = kernel.function("sys_setresuid16").return ?
# setreuid ___________________________________________________
# long sys_setreuid(uid_t ruid, uid_t euid)
#
-probe syscall.setreuid = kernel.function("SyS_setreuid") !,
- kernel.function("sys_setreuid")
+probe syscall.setreuid = kernel.function("SyS_setreuid").call !,
+ kernel.function("sys_setreuid").call
{
name = "setreuid"
ruid = __int32($ruid)
@@ -2091,7 +2091,7 @@ probe syscall.setreuid.return = kernel.function("SyS_setreuid").return !,
# setreuid16 _________________________________________________
# long sys_setreuid16(old_uid_t ruid, old_uid_t euid)
#
-probe syscall.setreuid16 = kernel.function("sys_setreuid16") ?
+probe syscall.setreuid16 = kernel.function("sys_setreuid16").call ?
{
name = "setreuid"
ruid = __short($ruid)
@@ -2109,8 +2109,8 @@ probe syscall.setreuid16.return = kernel.function("sys_setreuid16").return ?
# sys_setrlimit(unsigned int resource,
# struct rlimit __user *rlim)
#
-probe syscall.setrlimit = kernel.function("SyS_setrlimit") !,
- kernel.function("sys_setrlimit")
+probe syscall.setrlimit = kernel.function("SyS_setrlimit").call !,
+ kernel.function("sys_setrlimit").call
{
name = "setrlimit"
resource = $resource
@@ -2128,7 +2128,7 @@ probe syscall.setrlimit.return = kernel.function("SyS_setrlimit").return !,
#
# long sys_setsid(void)
#
-probe syscall.setsid = kernel.function("sys_setsid")
+probe syscall.setsid = kernel.function("sys_setsid").call
{
name = "setsid"
argstr = ""
@@ -2147,9 +2147,9 @@ probe syscall.setsid.return = kernel.function("sys_setsid").return
# char __user *optval,
# int optlen)
#
-probe syscall.setsockopt = kernel.function("compat_sys_setsockopt") ?,
- kernel.function("SyS_setsockopt") !,
- kernel.function("sys_setsockopt") ?
+probe syscall.setsockopt = kernel.function("compat_sys_setsockopt").call ?,
+ kernel.function("SyS_setsockopt").call !,
+ kernel.function("sys_setsockopt").call ?
{
name = "setsockopt"
fd = $fd
@@ -2175,8 +2175,8 @@ probe syscall.setsockopt.return = kernel.function("compat_sys_setsockopt").retur
# asmlinkage long
# sys_set_tid_address(int __user *tidptr)
#
-probe syscall.set_tid_address = kernel.function("SyS_set_tid_address") !,
- kernel.function("sys_set_tid_address")
+probe syscall.set_tid_address = kernel.function("SyS_set_tid_address").call !,
+ kernel.function("sys_set_tid_address").call
{
name = "set_tid_address"
tidptr_uaddr = $tidptr
@@ -2193,8 +2193,8 @@ probe syscall.set_tid_address.return = kernel.function("SyS_set_tid_address").re
# long sys_settimeofday(struct timeval __user *tv,
# struct timezone __user *tz)
#
-probe syscall.settimeofday = kernel.function("SyS_settimeofday") !,
- kernel.function("sys_settimeofday")
+probe syscall.settimeofday = kernel.function("SyS_settimeofday").call !,
+ kernel.function("sys_settimeofday").call
{
name = "settimeofday"
tv_uaddr = $tv
@@ -2211,8 +2211,8 @@ probe syscall.settimeofday.return = kernel.function("SyS_settimeofday").return !
# long sys32_settimeofday(struct compat_timeval __user *tv, struct timezone __user *tz)
# long compat_sys_settimeofday(struct compat_timeval __user *tv, struct timezone __user *tz)
#
-probe syscall.settimeofday32 = kernel.function("sys32_settimeofday") ?,
- kernel.function("compat_sys_settimeofday") ?
+probe syscall.settimeofday32 = kernel.function("sys32_settimeofday").call ?,
+ kernel.function("compat_sys_settimeofday").call ?
{
name = "settimeofday"
tv_uaddr = $tv
@@ -2231,9 +2231,9 @@ probe syscall.settimeofday32.return = kernel.function("sys32_settimeofday").retu
# long sys_setuid(uid_t uid)
# long sys_setuid16(old_uid_t uid)
#
-probe syscall.setuid = kernel.function("sys_setuid16") ?,
- kernel.function("SyS_setuid") !,
- kernel.function("sys_setuid")
+probe syscall.setuid = kernel.function("sys_setuid16").call ?,
+ kernel.function("SyS_setuid").call !,
+ kernel.function("sys_setuid").call
{
name = "setuid"
uid = $uid
@@ -2254,8 +2254,8 @@ probe syscall.setuid.return = kernel.function("sys_setuid16").return ?,
# size_t size,
# int flags)
#
-probe syscall.setxattr = kernel.function("SyS_setxattr") !,
- kernel.function("sys_setxattr")
+probe syscall.setxattr = kernel.function("SyS_setxattr").call !,
+ kernel.function("sys_setxattr").call
{
name = "setxattr"
%( kernel_v >= "2.6.27" %?
@@ -2289,7 +2289,7 @@ probe syscall.setxattr.return = kernel.function("SyS_setxattr").return !,
#
# sys_sgetmask(void)
#
-probe syscall.sgetmask = kernel.function("sys_sgetmask") ?
+probe syscall.sgetmask = kernel.function("sys_sgetmask").call ?
{
name = "sgetmask"
argstr = ""
@@ -2304,8 +2304,8 @@ probe syscall.sgetmask.return = kernel.function("sys_sgetmask").return ?
#
# long sys_shmat(int shmid, char __user *shmaddr, int shmflg)
#
-probe syscall.shmat = kernel.function("SyS_shmat") !,
- kernel.function("sys_shmat") ?
+probe syscall.shmat = kernel.function("SyS_shmat").call !,
+ kernel.function("sys_shmat").call ?
{
name = "shmat"
shmid = $shmid
@@ -2324,7 +2324,7 @@ probe syscall.shmat.return = kernel.function("SyS_shmat").return !,
# long compat_sys_shmat(int first, int second, compat_uptr_t third,
# int version, void __user *uptr)
#
-probe syscall.compat_sys_shmat = kernel.function("compat_sys_shmat") ?
+probe syscall.compat_sys_shmat = kernel.function("compat_sys_shmat").call ?
{
name = "compat_sys_shmat"
first = $first
@@ -2345,8 +2345,8 @@ probe syscall.compat_sys_shmat.return = kernel.function("compat_sys_shmat").retu
# int cmd,
# struct shmid_ds __user *buf)
#
-probe syscall.shmctl = kernel.function("SyS_shmctl") !,
- kernel.function("sys_shmctl") ?
+probe syscall.shmctl = kernel.function("SyS_shmctl").call !,
+ kernel.function("sys_shmctl").call ?
{
name = "shmctl"
shmid = $shmid
@@ -2364,7 +2364,7 @@ probe syscall.shmctl.return = kernel.function("SyS_shmctl").return !,
#
# long compat_sys_shmctl(int first, int second, void __user *uptr)
#
-probe syscall.compat_sys_shmctl = kernel.function("compat_sys_shmctl") ?
+probe syscall.compat_sys_shmctl = kernel.function("compat_sys_shmctl").call ?
{
name = "compat_sys_shmctl"
first = $first
@@ -2382,8 +2382,8 @@ probe syscall.compat_sys_shmctl.return = kernel.function("compat_sys_shmctl").re
#
# long sys_shmdt(char __user *shmaddr)
#
-probe syscall.shmdt = kernel.function("SyS_shmdt") !,
- kernel.function("sys_shmdt") ?
+probe syscall.shmdt = kernel.function("SyS_shmdt").call !,
+ kernel.function("sys_shmdt").call ?
{
name = "shmdt"
shmaddr_uaddr = $shmaddr
@@ -2402,8 +2402,8 @@ probe syscall.shmdt.return = kernel.function("SyS_shmdt").return !,
# size_t size,
# int shmflg)
#
-probe syscall.shmget = kernel.function("SyS_shmget") !,
- kernel.function("sys_shmget") ?
+probe syscall.shmget = kernel.function("SyS_shmget").call !,
+ kernel.function("sys_shmget").call ?
{
name = "shmget"
key = $key
@@ -2422,8 +2422,8 @@ probe syscall.shmget.return = kernel.function("SyS_shmget").return !,
#
# long sys_shutdown(int fd, int how)
#
-probe syscall.shutdown = kernel.function("SyS_shutdown") !,
- kernel.function("sys_shutdown") ?
+probe syscall.shutdown = kernel.function("SyS_shutdown").call !,
+ kernel.function("sys_shutdown").call ?
{
name = "shutdown"
s = $fd
@@ -2442,7 +2442,7 @@ probe syscall.shutdown.return = kernel.function("SyS_shutdown").return !,
# sys_sigaction(int sig, const struct old_sigaction __user *act, struct old_sigaction __user *oact)
# sys32_sigaction(int sig, struct old_sigaction32 __user *act, struct old_sigaction32 __user *oact)
#
-probe syscall.sigaction = kernel.function("sys_sigaction") ?
+probe syscall.sigaction = kernel.function("sys_sigaction").call ?
{
name = "sigaction"
sig = $sig
@@ -2455,7 +2455,7 @@ probe syscall.sigaction.return = kernel.function("sys_sigaction").return ?
name = "sigaction"
retstr = returnstr(1)
}
-probe syscall.sigaction32 = kernel.function("sys32_sigaction") ?
+probe syscall.sigaction32 = kernel.function("sys32_sigaction").call ?
{
name = "sigaction"
sig = $sig
@@ -2472,8 +2472,8 @@ probe syscall.sigaction32.return = kernel.function("sys32_sigaction").return ?
# signal _____________________________________________________
# unsigned long sys_signal(int sig, __sighandler_t handler)
#
-probe syscall.signal = kernel.function("SyS_signal") !,
- kernel.function("sys_signal") ?
+probe syscall.signal = kernel.function("SyS_signal").call !,
+ kernel.function("sys_signal").call ?
{
name = "signal"
sig = $sig
@@ -2493,8 +2493,8 @@ probe syscall.signal.return = kernel.function("SyS_signal").return !,
# long compat_sys_signalfd(int ufd, const compat_sigset_t __user *sigmask,
# compat_size_t sigsetsize)
#
-probe syscall.signalfd = kernel.function("SyS_signalfd") !,
- kernel.function("sys_signalfd") ?
+probe syscall.signalfd = kernel.function("SyS_signalfd").call !,
+ kernel.function("sys_signalfd").call ?
{
name = "signalfd"
argstr = sprintf("%d, %p, %d", $ufd, $user_mask, $sizemask)
@@ -2505,7 +2505,7 @@ probe syscall.signalfd.return = kernel.function("SyS_signalfd").return !,
name = "signalfd"
retstr = returnstr(1)
}
-probe syscall.compat_signalfd = kernel.function("compat_sys_signalfd") ?
+probe syscall.compat_signalfd = kernel.function("compat_sys_signalfd").call ?
{
name = "compat_signalfd"
argstr = sprintf("%d, %p, %d", $ufd, $sigmask, $sigsetsize)
@@ -2519,8 +2519,8 @@ probe syscall.compat_signalfd.return = kernel.function("compat_sys_signalfd").re
# sigpending _________________________________________________
# long sys_sigpending(old_sigset_t __user *set)
#
-probe syscall.sigpending = kernel.function("SyS_sigpending") !,
- kernel.function("sys_sigpending") ?
+probe syscall.sigpending = kernel.function("SyS_sigpending").call !,
+ kernel.function("sys_sigpending").call ?
{
name = "sigpending"
argstr = sprintf("%p", $set)
@@ -2535,8 +2535,8 @@ probe syscall.sigpending.return = kernel.function("SyS_sigpending").return !,
# sigprocmask ________________________________________________
# long sys_sigprocmask(int how, old_sigset_t __user *set, old_sigset_t __user *oset)
#
-probe syscall.sigprocmask = kernel.function("SyS_sigprocmask") !,
- kernel.function("sys_sigprocmask") ?
+probe syscall.sigprocmask = kernel.function("SyS_sigprocmask").call !,
+ kernel.function("sys_sigprocmask").call ?
{
name = "sigprocmask"
how = $how
@@ -2555,8 +2555,8 @@ probe syscall.sigprocmask.return = kernel.function("SyS_sigprocmask").return !,
# sigreturn __________________________________________________
# int sys_sigreturn(unsigned long __unused)
#
-probe syscall.sigreturn = kernel.function("sys_sigreturn") ?,
- kernel.function("sys32_sigreturn") ?
+probe syscall.sigreturn = kernel.function("sys_sigreturn").call ?,
+ kernel.function("sys32_sigreturn").call ?
{
name = "sigreturn"
argstr = ""
@@ -2570,8 +2570,8 @@ probe syscall.sigreturn.return = kernel.function("sys_sigreturn").return ?,
# sigsuspend _________________________________________________
#
-probe syscall.sigsuspend = kernel.function("sys_sigsuspend") ?,
- kernel.function("sys32_sigsuspend") ?
+probe syscall.sigsuspend = kernel.function("sys_sigsuspend").call ?,
+ kernel.function("sys32_sigsuspend").call ?
{
name = "sigsuspend"
argstr = ""
@@ -2586,8 +2586,8 @@ probe syscall.sigsuspend.return = kernel.function("sys_sigsuspend").return ?,
# socket _____________________________________________________
# long sys_socket(int family, int type, int protocol)
#
-probe syscall.socket = kernel.function("SyS_socket") !,
- kernel.function("sys_socket") ?
+probe syscall.socket = kernel.function("SyS_socket").call !,
+ kernel.function("sys_socket").call ?
{
name = "socket"
family = $family
@@ -2609,7 +2609,7 @@ probe syscall.socket.return = kernel.function("SyS_socket").return !,
#
# long sys_socketcall(int call, unsigned long __user *args)
#
-#probe syscall.socketcall = kernel.function("sys_socketcall") ?
+#probe syscall.socketcall = kernel.function("sys_socketcall").call ?
#{
# name = "socketcall"
# call = $call
@@ -2628,8 +2628,8 @@ probe syscall.socket.return = kernel.function("SyS_socket").return !,
# int protocol,
# int __user *usockvec)
#
-probe syscall.socketpair = kernel.function("SyS_socketpair") !,
- kernel.function("sys_socketpair") ?
+probe syscall.socketpair = kernel.function("SyS_socketpair").call !,
+ kernel.function("sys_socketpair").call ?
{
name = "socketpair"
family = $family
@@ -2654,8 +2654,8 @@ probe syscall.socketpair.return = kernel.function("SyS_socketpair").return !,
# int fd_out, loff_t __user *off_out,
# size_t len, unsigned int flags)
#
-probe syscall.splice = kernel.function("SyS_splice") !,
- kernel.function("sys_splice") ?
+probe syscall.splice = kernel.function("SyS_splice").call !,
+ kernel.function("sys_splice").call ?
{
name = "splice"
argstr = sprintf("%d, %p, %d, %p, %d, 0x%x",
@@ -2672,8 +2672,8 @@ probe syscall.splice.return = kernel.function("SyS_splice").return !,
#
# long sys_ssetmask(int newmask)
#
-probe syscall.ssetmask = kernel.function("SyS_ssetmask") !,
- kernel.function("sys_ssetmask") ?
+probe syscall.ssetmask = kernel.function("SyS_ssetmask").call !,
+ kernel.function("sys_ssetmask").call ?
{
name = "ssetmask"
newmask = $newmask
@@ -2692,14 +2692,14 @@ probe syscall.ssetmask.return = kernel.function("SyS_ssetmask").return !,
# long sys_stat64(char __user * filename, struct stat64 __user * statbuf)
# long sys_oabi_stat64(char __user * filename, struct oldabi_stat64 __user * statbuf)
# long compat_sys_newstat(char __user * filename, struct compat_stat __user *statbuf)
-probe syscall.stat = kernel.function("sys_stat") ?,
- kernel.function("SyS_newstat") ?,
- kernel.function("sys_newstat") ?,
- kernel.function("sys32_stat64") ?,
- kernel.function("SyS_stat64") ?,
- kernel.function("sys_stat64") ?,
- kernel.function("sys_oabi_stat64") ?,
- kernel.function("compat_sys_newstat") ?
+probe syscall.stat = kernel.function("sys_stat").call ?,
+ kernel.function("SyS_newstat").call ?,
+ kernel.function("sys_newstat").call ?,
+ kernel.function("sys32_stat64").call ?,
+ kernel.function("SyS_stat64").call ?,
+ kernel.function("sys_stat64").call ?,
+ kernel.function("sys_oabi_stat64").call ?,
+ kernel.function("compat_sys_newstat").call ?
{
name = "stat"
filename_uaddr = $filename
@@ -2724,9 +2724,9 @@ probe syscall.stat.return = kernel.function("sys_stat").return ?,
# long sys_statfs(const char __user * path, struct statfs __user * buf)
# long compat_sys_statfs(const char __user *path, struct compat_statfs __user *buf)
#
-probe syscall.statfs = kernel.function("compat_sys_statfs") ?,
- kernel.function("SyS_statfs") !,
- kernel.function("sys_statfs") ?
+probe syscall.statfs = kernel.function("compat_sys_statfs").call ?,
+ kernel.function("SyS_statfs").call !,
+ kernel.function("sys_statfs").call ?
{
name = "statfs"
buf_uaddr = $buf
@@ -2752,9 +2752,9 @@ probe syscall.statfs.return = kernel.function("compat_sys_statfs").return ?,
# long sys_statfs64(const char __user *path, size_t sz, struct statfs64 __user *buf)
# long compat_sys_statfs64(const char __user *path, compat_size_t sz, struct compat_statfs64 __user *buf)
#
-probe syscall.statfs64 = kernel.function("compat_sys_statfs64") ?,
- kernel.function("SyS_statfs64") !,
- kernel.function("sys_statfs64") ?
+probe syscall.statfs64 = kernel.function("compat_sys_statfs64").call ?,
+ kernel.function("SyS_statfs64").call !,
+ kernel.function("sys_statfs64").call ?
{
name = "statfs"
sz = $sz
@@ -2781,9 +2781,9 @@ probe syscall.statfs64.return = kernel.function("compat_sys_statfs64").return ?,
# long sys_stime(time_t __user *tptr)
# long compat_sys_stime(compat_time_t __user *tptr)
#
-probe syscall.stime = kernel.function("compat_sys_stime") ?,
- kernel.function("SyS_stime") !,
- kernel.function("sys_stime") ?
+probe syscall.stime = kernel.function("compat_sys_stime").call ?,
+ kernel.function("SyS_stime").call !,
+ kernel.function("sys_stime").call ?
{
name = "stime"
t_uaddr = $tptr
@@ -2803,8 +2803,8 @@ probe syscall.stime.return = kernel.function("compat_sys_stime").return ?,
# asmlinkage long
# sys_swapoff(const char __user * specialfile)
#
-probe syscall.swapoff = kernel.function("SyS_swapoff") !,
- kernel.function("sys_swapoff") ?
+probe syscall.swapoff = kernel.function("SyS_swapoff").call !,
+ kernel.function("sys_swapoff").call ?
{
name = "swapoff"
path = user_string($specialfile)
@@ -2822,8 +2822,8 @@ probe syscall.swapoff.return = kernel.function("SyS_swapoff").return !,
# sys_swapon(const char __user * specialfile,
# int swap_flags)
#
-probe syscall.swapon = kernel.function("SyS_swapon") !,
- kernel.function("sys_swapon") ?
+probe syscall.swapon = kernel.function("SyS_swapon").call !,
+ kernel.function("sys_swapon").call ?
{
name = "swapon"
path = user_string($specialfile)
@@ -2840,8 +2840,8 @@ probe syscall.swapon.return = kernel.function("SyS_swapon").return !,
# symlink ____________________________________________________
# long sys_symlink(const char __user * oldname,
# const char __user * newname)
-probe syscall.symlink = kernel.function("SyS_symlink") !,
- kernel.function("sys_symlink")
+probe syscall.symlink = kernel.function("SyS_symlink").call !,
+ kernel.function("sys_symlink").call
{
name = "symlink"
oldpath = user_string($oldname)
@@ -2860,8 +2860,8 @@ probe syscall.symlink.return = kernel.function("SyS_symlink").return !,
# new function with 2.6.16
# long sys_symlinkat(const char __user *oldname, int newdfd,
# const char __user *newname)
-probe syscall.symlinkat = kernel.function("SyS_symlinkat") !,
- kernel.function("sys_symlinkat") ?
+probe syscall.symlinkat = kernel.function("SyS_symlinkat").call !,
+ kernel.function("sys_symlinkat").call ?
{
name = "symlinkat"
oldname = $oldname
@@ -2884,7 +2884,7 @@ probe syscall.symlinkat.return = kernel.function("SyS_symlinkat").return !,
#
# sys_sync(void)
#
-probe syscall.sync = kernel.function("sys_sync")
+probe syscall.sync = kernel.function("sys_sync").call
{
name = "sync"
argstr = ""
@@ -2899,9 +2899,9 @@ probe syscall.sync.return = kernel.function("sys_sync").return
#
# long sys_sysctl(struct __sysctl_args __user *args)
#
-probe syscall.sysctl = kernel.function("compat_sys_sysctl") ?,
- kernel.function("SyS_sysctl") !,
- kernel.function("sys_sysctl") ?
+probe syscall.sysctl = kernel.function("compat_sys_sysctl").call ?,
+ kernel.function("SyS_sysctl").call !,
+ kernel.function("sys_sysctl").call ?
{
name = "sysctl"
argstr = sprintf("%p", $args)
@@ -2921,8 +2921,8 @@ probe syscall.sysctl.return = kernel.function("compat_sys_sysctl").return ?,
# unsigned long arg1,
# unsigned long arg2)
#
-probe syscall.sysfs = kernel.function("SyS_sysfs") !,
- kernel.function("sys_sysfs")
+probe syscall.sysfs = kernel.function("SyS_sysfs").call !,
+ kernel.function("sys_sysfs").call
{
name = "sysfs"
option = $option
@@ -2947,9 +2947,9 @@ probe syscall.sysfs.return = kernel.function("SyS_sysfs").return !,
#
# long sys_sysinfo(struct sysinfo __user *info)
# long compat_sys_sysinfo(struct compat_sysinfo __user *info)
-probe syscall.sysinfo = kernel.function("compat_sys_sysinfo") ?,
- kernel.function("SyS_sysinfo") !,
- kernel.function("sys_sysinfo")
+probe syscall.sysinfo = kernel.function("compat_sys_sysinfo").call ?,
+ kernel.function("SyS_sysinfo").call !,
+ kernel.function("sys_sysinfo").call
{
name = "sysinfo"
info_uaddr = $info
@@ -2967,8 +2967,8 @@ probe syscall.sysinfo.return = kernel.function("compat_sys_sysinfo").return ?,
#
# long sys_syslog(int type, char __user * buf, int len)
#
-probe syscall.syslog = kernel.function("SyS_syslog") !,
- kernel.function("sys_syslog")
+probe syscall.syslog = kernel.function("SyS_syslog").call !,
+ kernel.function("sys_syslog").call
{
name = "syslog"
type = $type
@@ -2987,8 +2987,8 @@ probe syscall.syslog.return = kernel.function("SyS_syslog").return !,
#
# long sys_tee(int fdin, int fdout, size_t len, unsigned int flags)
#
-probe syscall.tee = kernel.function("SyS_tee") !,
- kernel.function("sys_tee") ?
+probe syscall.tee = kernel.function("SyS_tee").call !,
+ kernel.function("sys_tee").call ?
{
name = "tee"
argstr = sprintf("%d, %d, %d, 0x%x", $fdin, $fdout, $len, $flags)
@@ -3007,8 +3007,8 @@ probe syscall.tee.return = kernel.function("SyS_tee").return !,
# int pid,
# int sig)
#
-probe syscall.tgkill = kernel.function("SyS_tgkill") !,
- kernel.function("sys_tgkill")
+probe syscall.tgkill = kernel.function("SyS_tgkill").call !,
+ kernel.function("sys_tgkill").call
{
name = "tgkill"
tgid = $tgid
@@ -3029,11 +3029,11 @@ probe syscall.tgkill.return = kernel.function("SyS_tgkill").return !,
# long sys32_time(compat_time_t __user * tloc)
# long compat_sys_time(compat_time_t __user * tloc)
#
-probe syscall.time = kernel.function("sys32_time") ?,
- kernel.function("sys_time64") ?,
- kernel.function("compat_sys_time") ?,
- kernel.function("SyS_time") !,
- kernel.function("sys_time") ?
+probe syscall.time = kernel.function("sys32_time").call ?,
+ kernel.function("sys_time64").call ?,
+ kernel.function("compat_sys_time").call ?,
+ kernel.function("SyS_time").call !,
+ kernel.function("sys_time").call ?
{
name = "time"
t_uaddr = $tloc
@@ -3055,8 +3055,8 @@ probe syscall.time.return = kernel.function("sys32_time").return ?,
# struct sigevent __user *timer_event_spec,
# timer_t __user * created_timer_id)
#
-probe syscall.timer_create = kernel.function("SyS_timer_create") !,
- kernel.function("sys_timer_create")
+probe syscall.timer_create = kernel.function("SyS_timer_create").call !,
+ kernel.function("sys_timer_create").call
{
name = "timer_create"
clockid = $which_clock
@@ -3076,8 +3076,8 @@ probe syscall.timer_create.return = kernel.function("SyS_timer_create").return !
#
# long sys_timer_delete(timer_t timer_id)
#
-probe syscall.timer_delete = kernel.function("SyS_timer_delete") !,
- kernel.function("sys_timer_delete")
+probe syscall.timer_delete = kernel.function("SyS_timer_delete").call !,
+ kernel.function("sys_timer_delete").call
{
name = "timer_delete"
timerid = $timer_id
@@ -3094,8 +3094,8 @@ probe syscall.timer_delete.return = kernel.function("SyS_timer_delete").return !
#
# long sys_timer_getoverrun(timer_t timer_id)
#
-probe syscall.timer_getoverrun = kernel.function("SyS_timer_getoverrun") !,
- kernel.function("sys_timer_getoverrun")
+probe syscall.timer_getoverrun = kernel.function("SyS_timer_getoverrun").call !,
+ kernel.function("sys_timer_getoverrun").call
{
name = "timer_getoverrun"
timerid = $timer_id
@@ -3113,8 +3113,8 @@ probe syscall.timer_getoverrun.return = kernel.function("SyS_timer_getoverrun").
# long sys_timer_gettime(timer_t timer_id,
# struct itimerspec __user *setting)
#
-probe syscall.timer_gettime = kernel.function("SyS_timer_gettime") !,
- kernel.function("sys_timer_gettime")
+probe syscall.timer_gettime = kernel.function("SyS_timer_gettime").call !,
+ kernel.function("sys_timer_gettime").call
{
name = "timer_gettime"
timerid = $timer_id
@@ -3135,8 +3135,8 @@ probe syscall.timer_gettime.return = kernel.function("SyS_timer_gettime").return
# const struct itimerspec __user *new_setting,
# struct itimerspec __user *old_setting)
#
-probe syscall.timer_settime = kernel.function("SyS_timer_settime") !,
- kernel.function("sys_timer_settime")
+probe syscall.timer_settime = kernel.function("SyS_timer_settime").call !,
+ kernel.function("sys_timer_settime").call
{
name = "timer_settime"
timerid = $timer_id
@@ -3161,8 +3161,8 @@ probe syscall.timer_settime.return = kernel.function("SyS_timer_settime").return
# long compat_sys_timerfd(int ufd, int clockid, int flags,
# const struct compat_itimerspec __user *utmr)
#
-probe syscall.timerfd = kernel.function("sys_timerfd") ?,
- kernel.function("compat_sys_timerfd") ?
+probe syscall.timerfd = kernel.function("sys_timerfd").call ?,
+ kernel.function("compat_sys_timerfd").call ?
{
name = "timerfd"
argstr = sprintf("%d, %d, 0x%x", $ufd, $clockid, $flags)
@@ -3178,9 +3178,9 @@ probe syscall.timerfd.return = kernel.function("sys_timerfd").return ?,
#
# long sys_times(struct tms __user * tbuf)
# long compat_sys_times(struct compat_tms __user *tbuf)
-probe syscall.times = kernel.function("compat_sys_times") ?,
- kernel.function("SyS_times") !,
- kernel.function("sys_times") ?
+probe syscall.times = kernel.function("compat_sys_times").call ?,
+ kernel.function("SyS_times").call !,
+ kernel.function("sys_times").call ?
{
name = "times"
argstr = sprintf("%p", $tbuf)
@@ -3199,8 +3199,8 @@ probe syscall.times.return = kernel.function("compat_sys_times").return ?,
# sys_tkill(int pid,
# int sig)
#
-probe syscall.tkill = kernel.function("SyS_tkill") !,
- kernel.function("sys_tkill")
+probe syscall.tkill = kernel.function("SyS_tkill").call !,
+ kernel.function("sys_tkill").call
{
name = "tkill"
pid = $pid
@@ -3219,9 +3219,9 @@ probe syscall.tkill.return = kernel.function("SyS_tkill").return !,
# sys_truncate(const char __user * path, unsigned long length)
# sys_truncate64(const char __user * path, loff_t length)
#
-probe syscall.truncate = kernel.function("SyS_truncate") !,
- kernel.function("sys_truncate") ?,
- kernel.function("sys_truncate64") ?
+probe syscall.truncate = kernel.function("SyS_truncate").call !,
+ kernel.function("sys_truncate").call ?,
+ kernel.function("sys_truncate64").call ?
{
name = "truncate"
path_uaddr = $path
@@ -3240,7 +3240,7 @@ probe syscall.truncate.return = kernel.function("SyS_truncate").return !,
# tux ________________________________________________________
# long sys_tux (unsigned int action, user_req_t *u_info)
#
-probe syscall.tux = kernel.function("sys_tux") ?
+probe syscall.tux = kernel.function("sys_tux").call ?
{
name = "tux"
action = $action
@@ -3256,8 +3256,8 @@ probe syscall.tux.return = kernel.function("sys_tux").return ?
# umask ______________________________________________________
# long sys_umask(int mask)
#
-probe syscall.umask = kernel.function("SyS_umask") !,
- kernel.function("sys_umask")
+probe syscall.umask = kernel.function("SyS_umask").call !,
+ kernel.function("sys_umask").call
{
name = "umask"
mask = $mask
@@ -3273,8 +3273,8 @@ probe syscall.umask.return = kernel.function("SyS_umask").return !,
# umount _____________________________________________________
# long sys_umount(char __user * name, int flags)
#
-probe syscall.umount = kernel.function("SyS_umount") !,
- kernel.function("sys_umount")
+probe syscall.umount = kernel.function("SyS_umount").call !,
+ kernel.function("sys_umount").call
{
name = "umount"
target = user_string($name)
@@ -3296,12 +3296,12 @@ probe syscall.umount.return = kernel.function("SyS_umount").return !,
# int sys32_olduname(struct oldold_utsname __user * name)
# long sys32_uname(struct old_utsname __user * name)
#
-probe syscall.uname = kernel.function("sys_uname") ?,
- kernel.function("sys_olduname") ?,
- kernel.function("sys32_olduname") ?,
- kernel.function("sys32_uname") ?,
- kernel.function("SyS_newuname") !,
- kernel.function("sys_newuname") ?
+probe syscall.uname = kernel.function("sys_uname").call ?,
+ kernel.function("sys_olduname").call ?,
+ kernel.function("sys32_olduname").call ?,
+ kernel.function("sys32_uname").call ?,
+ kernel.function("SyS_newuname").call !,
+ kernel.function("sys_newuname").call ?
{
name = "uname"
argstr = sprintf("%p", $name)
@@ -3321,8 +3321,8 @@ probe syscall.uname.return = kernel.function("sys_uname").return ?,
# unlink _____________________________________________________
# long sys_unlink(const char __user * pathname)
#
-probe syscall.unlink = kernel.function("SyS_unlink") !,
- kernel.function("sys_unlink")
+probe syscall.unlink = kernel.function("SyS_unlink").call !,
+ kernel.function("sys_unlink").call
{
name = "unlink"
pathname_uaddr = $pathname
@@ -3340,8 +3340,8 @@ probe syscall.unlink.return = kernel.function("SyS_unlink").return !,
# new function with 2.6.16
# long sys_unlinkat(int dfd, const char __user *pathname,
# int flag)
-probe syscall.unlinkat = kernel.function("SyS_unlinkat") !,
- kernel.function("sys_unlinkat") ?
+probe syscall.unlinkat = kernel.function("SyS_unlinkat").call !,
+ kernel.function("sys_unlinkat").call ?
{
name = "unlinkat"
dfd = $dfd
@@ -3362,8 +3362,8 @@ probe syscall.unlinkat.return = kernel.function("SyS_unlinkat").return !,
# unshare ____________________________________________________
# new function with 2.6.16
# long sys_unshare(unsigned long unshare_flags)
-probe syscall.unshare = kernel.function("SyS_unshare") !,
- kernel.function("sys_unshare") ?
+probe syscall.unshare = kernel.function("SyS_unshare").call !,
+ kernel.function("sys_unshare").call ?
{
name = "unshare"
unshare_flags = $unshare_flags
@@ -3381,8 +3381,8 @@ probe syscall.unshare.return = kernel.function("SyS_unshare").return !,
# asmlinkage long
# sys_uselib(const char __user * library)
#
-probe syscall.uselib = kernel.function("SyS_uselib") !,
- kernel.function("sys_uselib")
+probe syscall.uselib = kernel.function("SyS_uselib").call !,
+ kernel.function("sys_uselib").call
{
name = "uselib"
library_uaddr = $library
@@ -3398,8 +3398,8 @@ probe syscall.uselib.return = kernel.function("SyS_uselib").return !,
# ustat ______________________________________________________
# long sys_ustat(unsigned dev, struct ustat __user * ubuf)
#
-probe syscall.ustat = kernel.function("SyS_ustat") !,
- kernel.function("sys_ustat")
+probe syscall.ustat = kernel.function("SyS_ustat").call !,
+ kernel.function("sys_ustat").call
{
name = "ustat"
dev = $dev
@@ -3408,7 +3408,7 @@ probe syscall.ustat = kernel.function("SyS_ustat") !,
}
#long sys32_ustat(unsigned dev, struct ustat32 __user *u32p)
-probe syscall.ustat32 = kernel.function("sys32_ustat") ?
+probe syscall.ustat32 = kernel.function("sys32_ustat").call ?
{
name = "ustat"
dev = $dev
@@ -3417,7 +3417,7 @@ probe syscall.ustat32 = kernel.function("sys32_ustat") ?
# Since 2.6.30 sys32_ustat is compat_sys_ustat
# Note that last argument changed name.
#long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u)
-probe syscall.ustat32 = kernel.function("compat_sys_ustat") ?
+probe syscall.ustat32 = kernel.function("compat_sys_ustat").call ?
{
name = "ustat"
dev = $dev
@@ -3435,8 +3435,8 @@ probe syscall.ustat.return = kernel.function("SyS_ustat").return ?,
# utime ______________________________________________________
# long sys_utime(char __user * filename, struct utimbuf __user * times)
-probe syscall.utime = kernel.function("SyS_utime") !,
- kernel.function("sys_utime") ?
+probe syscall.utime = kernel.function("SyS_utime").call !,
+ kernel.function("sys_utime").call ?
{
name = "utime"
filename_uaddr = $filename
@@ -3455,7 +3455,7 @@ probe syscall.utime.return = kernel.function("SyS_utime").return !,
}
# long compat_sys_utime(char __user *filename, struct compat_utimbuf __user *t)
-probe syscall.compat_utime = kernel.function("compat_sys_utime") ?
+probe syscall.compat_utime = kernel.function("compat_sys_utime").call ?
{
name = "utime"
filename_uaddr = $filename
@@ -3476,8 +3476,8 @@ probe syscall.compat_utime.return = kernel.function("compat_sys_utime").return ?
#
# long sys_utimes(char __user * filename, struct timeval __user * utimes)
#
-probe syscall.utimes = kernel.function("SyS_utimes") !,
- kernel.function("sys_utimes")
+probe syscall.utimes = kernel.function("SyS_utimes").call !,
+ kernel.function("sys_utimes").call
{
name = "utimes"
filename_uaddr = $filename
@@ -3496,7 +3496,7 @@ probe syscall.utimes.return = kernel.function("SyS_utimes").return !,
#
# long compat_sys_utimes(char __user *filename, struct compat_timeval __user *t)
#
-probe syscall.compat_sys_utimes = kernel.function("compat_sys_utimes") ?
+probe syscall.compat_sys_utimes = kernel.function("compat_sys_utimes").call ?
{
name = "utimes"
filename = user_string($filename)
@@ -3513,14 +3513,14 @@ probe syscall.compat_sys_utimes.return = kernel.function("compat_sys_utimes").re
# long sys_utimensat(int dfd, char __user *filename, struct timespec __user *utimes, int flags)
# long compat_sys_utimensat(unsigned int dfd, char __user *filename, struct compat_timespec __user *t, int flags)
#
-probe syscall.utimensat = kernel.function("SyS_utimensat") !,
- kernel.function("sys_utimensat") ?
+probe syscall.utimensat = kernel.function("SyS_utimensat").call !,
+ kernel.function("sys_utimensat").call ?
{
name = "utimensat"
argstr = sprintf("%s, %s, %s, %s", _dfd_str($dfd), user_string_quoted($filename), _struct_timespec_u($utimes, 2),
_at_flag_str($flags))
}
-probe syscall.compat_utimensat = kernel.function("compat_sys_utimensat") ?
+probe syscall.compat_utimensat = kernel.function("compat_sys_utimensat").call ?
{
name = "utimensat"
argstr = sprintf("%s, %s, %s, %s", _dfd_str($dfd), user_string_quoted($filename), _struct_compat_timespec_u($t, 2),
@@ -3543,7 +3543,7 @@ probe syscall.compat_utimensat.return = kernel.function("compat_sys_utimensat")
# asmlinkage long
# sys_vhangup(void)
#
-probe syscall.vhangup = kernel.function("sys_vhangup")
+probe syscall.vhangup = kernel.function("sys_vhangup").call
{
name = "vhangup"
argstr = ""
@@ -3561,13 +3561,13 @@ probe syscall.vhangup.return = kernel.function("sys_vhangup").return
# long compat_sys_vmsplice(int fd, const struct compat_iovec __user *iov32,
# unsigned int nr_segs, unsigned int flags)
#
-probe syscall.vmsplice = kernel.function("SyS_vmsplice") !,
- kernel.function("sys_vmsplice") ?
+probe syscall.vmsplice = kernel.function("SyS_vmsplice").call !,
+ kernel.function("sys_vmsplice").call ?
{
name = "vmsplice"
argstr = sprintf("%d, %p, %d, 0x%x", $fd, $iov, $nr_segs, $flags)
}
-probe syscall.compat_vmsplice = kernel.function("compat_sys_vmsplice") ?
+probe syscall.compat_vmsplice = kernel.function("compat_sys_vmsplice").call ?
{
name = "vmsplice"
argstr = sprintf("%d, %p, %d, 0x%x", $fd, $iov32, $nr_segs, $flags)
@@ -3591,8 +3591,8 @@ probe syscall.compat_vmsplice.return = kernel.function("compat_sys_vmsplice").re
# int options,
# struct rusage __user *ru)
#
-probe syscall.wait4 = kernel.function("SyS_wait4") !,
- kernel.function("sys_wait4")
+probe syscall.wait4 = kernel.function("SyS_wait4").call !,
+ kernel.function("sys_wait4").call
{
name = "wait4"
pid = %( kernel_vr >= "2.6.25" %? $upid %: $pid%)
@@ -3618,8 +3618,8 @@ probe syscall.wait4.return = kernel.function("SyS_wait4").return !,
# int options,
# struct rusage __user *ru)
#
-probe syscall.waitid = kernel.function("SyS_waitid") !,
- kernel.function("sys_waitid")
+probe syscall.waitid = kernel.function("SyS_waitid").call !,
+ kernel.function("sys_waitid").call
{
name = "waitid"
pid = %( kernel_vr >= "2.6.25" %? $upid %: $pid%)
@@ -3647,8 +3647,8 @@ probe syscall.waitid.return = kernel.function("SyS_waitid").return !,
# int options,
# struct rusage __user *ru)
#
-probe syscall.waitpid = kernel.function("SyS_wait4") !,
- kernel.function("sys_wait4")
+probe syscall.waitpid = kernel.function("SyS_wait4").call !,
+ kernel.function("sys_wait4").call
{
name = "waitpid"
pid = $pid
@@ -3673,8 +3673,8 @@ probe syscall.waitpid.return = kernel.function("SyS_wait4").return !,
# const char __user * buf,
# size_t count)
#
-probe syscall.write = kernel.function("SyS_write") !,
- kernel.function("sys_write")
+probe syscall.write = kernel.function("SyS_write").call !,
+ kernel.function("sys_write").call
{
name = "write"
fd = $fd
@@ -3698,9 +3698,9 @@ probe syscall.write.return = kernel.function("SyS_write").return !,
# const struct compat_iovec __user *vec,
# unsigned long vlen)
#
-probe syscall.writev = kernel.function("compat_sys_writev") ?,
- kernel.function("SyS_writev") !,
- kernel.function("sys_writev")
+probe syscall.writev = kernel.function("compat_sys_writev").call ?,
+ kernel.function("SyS_writev").call !,
+ kernel.function("sys_writev").call
{
name = "writev"
vector_uaddr = $vec