74 lines · 1.5 KB · C
RawDownload
/* SPDX-License-Identifier: GPL-2.0 */#undef TRACE_SYSTEM#define TRACE_SYSTEM raw_syscalls#undef TRACE_INCLUDE_FILE#define TRACE_INCLUDE_FILE syscalls #if !defined(_TRACE_EVENTS_SYSCALLS_H) || defined(TRACE_HEADER_MULTI_READ)#define _TRACE_EVENTS_SYSCALLS_H #include <linux/tracepoint.h> #include <asm/ptrace.h>#include <asm/syscall.h>  #ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS TRACE_EVENT_SYSCALL(sys_enter, 	TP_PROTO(struct pt_regs *regs, long id), 	TP_ARGS(regs, id), 	TP_STRUCT__entry(		__field(	long,		id		)		__array(	unsigned long,	args,	6	)	), 	TP_fast_assign(		__entry->id	= id;		syscall_get_arguments(current, regs, __entry->args);	), 	TP_printk("NR %ld (%lx, %lx, %lx, %lx, %lx, %lx)",		  __entry->id,		  __entry->args[0], __entry->args[1], __entry->args[2],		  __entry->args[3], __entry->args[4], __entry->args[5]), 	syscall_regfunc, syscall_unregfunc); TRACE_EVENT_FLAGS(sys_enter, TRACE_EVENT_FL_CAP_ANY) TRACE_EVENT_SYSCALL(sys_exit, 	TP_PROTO(struct pt_regs *regs, long ret), 	TP_ARGS(regs, ret), 	TP_STRUCT__entry(		__field(	long,	id	)		__field(	long,	ret	)	), 	TP_fast_assign(		__entry->id	= syscall_get_nr(current, regs);		__entry->ret	= ret;	), 	TP_printk("NR %ld = %ld",		  __entry->id, __entry->ret), 	syscall_regfunc, syscall_unregfunc); TRACE_EVENT_FLAGS(sys_exit, TRACE_EVENT_FL_CAP_ANY) #endif /* CONFIG_HAVE_SYSCALL_TRACEPOINTS */ #endif /* _TRACE_EVENTS_SYSCALLS_H */ /* This part must be outside protection */#include <trace/define_trace.h>