1 files changed, 475 insertions, 0 deletions
diff --git a/tapset/i686/syscalls.stp b/tapset/i686/syscalls.stp
new file mode 100644
index 00000000..8b19a58e
--- /dev/null
+++ b/tapset/i686/syscalls.stp
@@ -0,0 +1,475 @@
+# fcntl64 ____________________________________________________
+/*
+ * asmlinkage long
+ * sys_fcntl64(unsigned int fd,
+ *             unsigned int cmd,
+ *             unsigned long arg)
+ */
+probe kernel.syscall.fcntl64 =
+   kernel.function("sys_fcntl64") {
+      name = "fcntl64"
+      fd = $fd
+      cmd = $cmd
+      cmd_str = _fcntl_cmd_str($cmd)
+      arg = $arg
+   }
+probe kernel.syscall.fcntl64.return =
+   kernel.function("sys_fcntl64").return {
+      name = "fcntl64.return"
+   }
+# fstat64 ____________________________________________________
+/*
+ * asmlinkage long
+ * sys_fstat64(unsigned long fd,
+ *             struct stat64 __user * statbuf)
+ */
+probe kernel.syscall.fstat64 =
+   kernel.function("sys_fstat64") {
+      name = "fstat64"
+      fd = $fd
+      buf_uaddr = $statbuf
+   }
+probe kernel.syscall.fstat64.return =
+   kernel.function("sys_fstat64").return {
+      name = "fstat64.return"
+   }
+# get_thread_area ____________________________________________
+/*
+ * asmlinkage int
+ * sys_get_thread_area(struct user_desc __user *u_info)
+ */
+probe kernel.syscall.get_thread_area =
+   kernel.function("sys_get_thread_area") {
+      name = "get_thread_area"
+      u_info_uaddr = $u_info
+   }
+probe kernel.syscall.get_thread_area.return =
+   kernel.function("sys_get_thread_area").return {
+      name = "get_thread_area.return"
+   }
+# inotify_add_watch __________________________________________
+/*
+ * asmlinkage long
+ * sys_inotify_add_watch(int fd,
+ *                       const char __user *path,
+ *                       u32 mask)
+ */
+probe kernel.syscall.inotify_add_watch =
+   kernel.function("sys_inotify_add_watch") {
+      name = "inotify_add_watch"
+      fd = $fd
+      path_uaddr = $path
+      mask = $mask
+   }
+probe kernel.syscall.inotify_add_watch.return =
+   kernel.function("sys_inotify_add_watch").return {
+      name = "inotify_add_watch.return"
+   }
+# inotify_init _______________________________________________
+/*
+ * asmlinkage long
+ * sys_inotify_init(void)
+ *
+ */
+probe kernel.syscall.inotify_init =
+   kernel.function("sys_inotify_init") {
+      name = "inotify_init"
+   }
+probe kernel.syscall.inotify_init.return =
+   kernel.function("sys_inotify_init").return {
+      name = "inotify_init.return"
+   }
+# inotify_rm_watch ___________________________________________
+/*
+ * asmlinkage long
+ * sys_inotify_rm_watch(int fd,
+ *                      u32 wd)
+ */
+probe kernel.syscall.inotify_rm_watch =
+   kernel.function("sys_inotify_rm_watch") {
+      name = "inotify_rm_watch"
+      fd = $fd
+      wd = $wd
+   }
+probe kernel.syscall.inotify_rm_watch.return =
+   kernel.function("sys_inotify_rm_watch").return {
+      name = "inotify_rm_watch.return"
+   }
+# iopl _______________________________________________________
+/*
+ * asmlinkage long
+ * sys_iopl(unsigned long unused)
+ */
+probe kernel.syscall.iopl =
+   kernel.function("sys_iopl") {
+      name = "iopl"
+      level = $unused
+   }
+probe kernel.syscall.iopl.return =
+   kernel.function("sys_iopl").return {
+      name = "iopl.return"
+   }
+# ioprio_get _________________________________________________
+/*
+ * asmlinkage long
+ * sys_ioprio_get(int which,
+ *                int who)
+ */
+probe kernel.syscall.ioprio_get =
+   kernel.function("sys_ioprio_get") {
+      name = "ioprio_get"
+      which = $which
+      who = $who
+   }
+probe kernel.syscall.ioprio_get.return =
+   kernel.function("sys_ioprio_get").return {
+      name = "ioprio_get.return"
+   }
+# ioprio_set _________________________________________________
+/*
+ * asmlinkage long
+ * sys_ioprio_set(int which,
+ *                int who,
+ *                int ioprio)
+ */
+probe kernel.syscall.ioprio_set =
+   kernel.function("sys_ioprio_set") {
+      name = "ioprio_set"
+      which = $which
+      who = $who
+      ioprio = $ioprio
+   }
+probe kernel.syscall.ioprio_set.return =
+   kernel.function("sys_ioprio_set").return {
+      name = "ioprio_set.return"
+   }
+# ipc ________________________________________________________
+/*
+ * asmlinkage int
+ * sys_ipc(uint call,
+ *         int first,
+ *         int second,
+ *         int third,
+ *         void __user *ptr,
+ *         long fifth)
+ */
+probe kernel.syscall.ipc =
+   kernel.function("sys_ipc") {
+      name = "ipc"
+      call = $call
+      first = $first
+      second = $second
+      third = $third
+      ptr_uaddr = $ptr
+      fifth = $fifth
+   }
+probe kernel.syscall.ipc.return =
+   kernel.function("sys_ipc").return {
+      name = "ipc.return"
+   }
+# lstat64 ____________________________________________________
+/*
+ * asmlinkage long
+ * sys_lstat64(char __user * filename,
+ *             struct stat64 __user * statbuf)
+ */
+probe kernel.syscall.lstat64 =
+   kernel.function("sys_lstat64") {
+      name = "lstat64"
+      filename_uaddr = $filename
+      buf_uaddr = $statbuf
+   }
+probe kernel.syscall.lstat64.return =
+   kernel.function("sys_lstat64").return {
+      name = "lstat64.return"
+   }
+# mmap2 ______________________________________________________
+/*
+ * unsigned long
+ * sys_mmap2(unsigned long addr,
+ *           size_t len,
+ *           unsigned long prot,
+ *           unsigned long flags,
+ *           unsigned long fd,
+ *           unsigned long pgoff)
+ */
+probe kernel.syscall.mmap2 =
+   kernel.function("sys_mmap2") {
+      name = "mmap2"
+      addr = $addr
+      len = $len
+      prot = $prot
+      flags = $flags
+      fd = $fd
+      pgoff = $pgoff
+   }
+probe kernel.syscall.mmap2.return =
+   kernel.function("sys_mmap2").return {
+      name = "mmap2.return"
+   }
+# olduname ___________________________________________________
+/*
+ * asmlinkage long
+ * sys_olduname(struct new_utsname __user * name)
+ */
+probe kernel.syscall.olduname =
+   kernel.function("sys_olduname") {
+      name = "olduname"
+      name_uaddr = $name
+   }
+probe kernel.syscall.olduname.return =
+   kernel.function("sys_olduname").return {
+      name = "olduname.return"
+   }
+# rt_sigreturn _______________________________________________
+/*
+ * asmlinkage int
+ * sys_rt_sigreturn(unsigned long __unused)
+ */
+probe kernel.syscall.rt_sigreturn =
+   kernel.function("sys_rt_sigreturn") {
+      name = "rt_sigreturn"
+      unused = $__unused
+   }
+probe kernel.syscall.rt_sigreturn.return =
+   kernel.function("sys_rt_sigreturn").return {
+      name = "rt_sigreturn.return"
+   }
+# sched_setaffinity __________________________________________
+/*
+ * asmlinkage long
+ * sys_sched_setaffinity(pid_t pid,
+ *                       unsigned int len,
+ *                       unsigned long __user *user_mask_ptr)
+ */
+probe kernel.syscall.sched_setaffinity =
+   kernel.function("sys_sched_setaffinity") {
+      name = "sched_setaffinity"
+      pid = $pid
+      /*
+       * doesnt like $len on x86_64 ????
+       */
+      len = $len
+      mask_uaddr = $user_mask_ptr
+   }
+probe kernel.syscall.sched_setaffinity.return =
+   kernel.function("sys_sched_setaffinity").return {
+      name = "sched_setaffinity.return"
+   }
+# sched_setparam _____________________________________________
+/*
+ * asmlinkage long
+ * sys_sched_setparam(pid_t pid,
+ *                    struct sched_param __user *param)
+ */
+probe kernel.syscall.sched_setparam =
+   kernel.function("do_sched_setscheduler") {
+      name = "sched_setparam"
+      pid = $pid
+      p_uaddr = $param
+   }
+probe kernel.syscall.sched_setparam.return =
+   kernel.function("do_sched_setscheduler").return {
+      name = "sched_setparam.return"
+   }
+# sched_setscheduler _________________________________________
+/*
+ * asmlinkage long
+ * sys_sched_setscheduler(pid_t pid,
+ *                        int policy,
+ *                        struct sched_param __user *param)
+ */
+probe kernel.syscall.sched_setscheduler =
+   kernel.function("do_sched_setscheduler") {
+      name = "sched_setscheduler"
+      pid = $pid
+      policy = $policy
+      policy_str = _sched_policy_str($policy)
+      p_uaddr = $param
+   }
+probe kernel.syscall.sched_setscheduler.return =
+   kernel.function("do_sched_setscheduler").return {
+      name = "sched_setscheduler.return"
+   }
+# set_thread_area ____________________________________________
+/*
+ * asmlinkage int
+ * sys_set_thread_area(struct user_desc __user *u_info)
+ */
+probe kernel.syscall.set_thread_area =
+   kernel.function("sys_set_thread_area") {
+      name = "set_thread_area"
+      u_info_uaddr = $u_info
+   }
+probe kernel.syscall.set_thread_area.return =
+   kernel.function("sys_set_thread_area").return {
+      name = "set_thread_area.return"
+   }
+# set_zone_reclaim ___________________________________________
+/*
+ * asmlinkage long
+ * sys_set_zone_reclaim(unsigned int node,
+ *                      unsigned int zone,
+ *                      unsigned int state)
+ */
+probe kernel.syscall.set_zone_reclaim =
+   kernel.function("sys_set_zone_reclaim") {
+      name = "set_zone_reclaim"
+      node = $node
+      zone = $zone
+      state = $state
+   }
+probe kernel.syscall.set_zone_reclaim.return =
+   kernel.function("sys_set_zone_reclaim").return {
+      name = "set_zone_reclaim.return"
+   }
+# shmat ______________________________________________________
+/*
+ * asmlinkage long
+ * sys_shmat(int shmid,
+ *           char __user *shmaddr,
+ *           int shmflg,
+ *           unsigned long *addr)
+ */
+probe kernel.syscall.shmat =
+   kernel.function("sys_shmat") {
+      name = "shmat"
+      shmid = $shmid
+      shmaddr_uaddr = $shmaddr
+      shmflg = $shmflg
+   }
+probe kernel.syscall.shmat.return =
+   kernel.function("sys_shmat").return {
+      name = "shmat.return"
+   }
+# sigaction __________________________________________________
+/*
+ * asmlinkage int
+ * sys_sigaction(int sig,
+ *               const struct old_sigaction __user *act,
+ *               struct old_sigaction __user *oact)
+ */
+probe kernel.syscall.sigaction =
+   kernel.function("sys_sigaction") {
+      name = "sigaction"
+      sig = $sig
+      act_uaddr = $act
+      oact_uaddr = $oact
+   }
+probe kernel.syscall.sigaction.return =
+   kernel.function("sys_sigaction").return {
+      name = "sigaction.return"
+   }
+# sigaltstack ________________________________________________
+/*
+ * asmlinkage int
+ * sys_sigaltstack(unsigned long ebx)
+ */
+probe kernel.syscall.sigaltstack =
+   kernel.function("sys_sigaltstack") {
+      name = "sigaltstack"
+      ebx = $ebx
+   }
+probe kernel.syscall.sigaltstack.return =
+   kernel.function("sys_sigaltstack").return {
+      name = "sigaltstack.return"
+   }
+# sigreturn __________________________________________________
+/*
+ * asmlinkage int
+ * sys_sigreturn(unsigned long __unused)
+ */
+probe kernel.syscall.sigreturn =
+   kernel.function("sys_sigreturn") {
+      name = "sigreturn"
+      unused = $__unused
+   }
+probe kernel.syscall.sigreturn.return =
+   kernel.function("sys_sigreturn").return {
+      name = "sigreturn.return"
+   }
+# sigsuspend _________________________________________________
+/*
+ * asmlinkage int
+ * sys_sigsuspend(int history0,
+ *                int history1,
+ *                old_sigset_t mask)
+ */
+probe kernel.syscall.sigsuspend =
+   kernel.function("sys_sigsuspend") {
+      name = "sigsuspend"
+      history0 = $history0
+      history1 = $history1
+      mask = $mask
+   }
+probe kernel.syscall.sigsuspend.return =
+   kernel.function("sys_sigsuspend").return {
+      name = "sigsuspend.return"
+   }
+# stat64 _____________________________________________________
+/*
+ * asmlinkage long
+ * sys_stat64(char __user * filename,
+ *            struct stat64 __user * statbuf)
+ */
+probe kernel.syscall.stat64 =
+   kernel.function("sys_stat64") {
+      name = "stat64"
+      filename_uaddr = $filename
+      buf_uaddr = $statbuf
+   }
+probe kernel.syscall.stat64.return =
+   kernel.function("sys_stat64").return {
+      name = "stat64.return"
+   }
+# umask ______________________________________________________
+/*
+ * asmlinkage long
+ * sys_umask(int mask)
+ */
+probe kernel.syscall.umask =
+   kernel.function("sys_umask") {
+      name = "umask"
+      /*
+       * doesnt like $mask on x86_64 ????
+       */
+      mask = $mask
+   }
+probe kernel.syscall.umask.return =
+   kernel.function("sys_umask").return {
+      name = "umask.return"
+   }
+# vm86 _______________________________________________________
+/*
+ * asmlinkage int
+ * sys_vm86(struct pt_regs regs)
+ */
+probe kernel.syscall.vm86 =
+   kernel.function("sys_vm86") {
+      name = "vm86"
+      /*
+       * unsupported type identifier '$regs'
+       * regs = $regs
+       */
+   }
+probe kernel.syscall.vm86.return =
+   kernel.function("sys_vm86").return {
+      name = "vm86.return"
+   }
+# vm86old ____________________________________________________
+/*
+ * asmlinkage int
+ * sys_vm86old(struct pt_regs regs)
+ */
+probe kernel.syscall.vm86old =
+   kernel.function("sys_vm86old") {
+      name = "vm86old"
+      /*
+       * unsupported type identifier '$regs'
+       * regs = $regs
+       */
+   }
+probe kernel.syscall.vm86old.return =
+   kernel.function("sys_vm86old").return {
+      name = "vm86old.return"
+   }