![]() Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /opt/rh/gcc-toolset-11/root/usr/share/systemtap/tapset/linux/ |
# sched_setattr ______________________________________________ # # SYSCALL_DEFINE3(sched_setattr, pid_t, pid, struct sched_attr __user *, uattr, # unsigned int, flags) # @define _SYSCALL_SCHED_SETATTR_NAME %( name = "sched_setattr" %) @define _SYSCALL_SCHED_SETATTR_ARGSTR %( argstr = sprintf("%d, %s, %u", pid, sched_attr_str, flags) %) @define _SYSCALL_SCHED_SETATTR_REGARGS %( pid = int_arg(1) sched_attr_uaddr = pointer_arg(2) sched_attr_str = _struct_sched_attr_u(sched_attr_uaddr) flags = uint_arg(3) %) @define _SYSCALL_SCHED_SETATTR_REGARGS_STORE %( if (@probewrite(pid)) set_int_arg(1, pid) if (@probewrite(sched_attr_uaddr)) set_pointer_arg(2, sched_attr_uaddr) if (@probewrite(flags)) set_uint_arg(3, flags) %) probe syscall.sched_setattr = dw_syscall.sched_setattr !, nd_syscall.sched_setattr ? {} probe syscall.sched_setattr.return = dw_syscall.sched_setattr.return !, nd_syscall.sched_setattr.return ? {} # dw_sched_setattr _____________________________________________________ probe dw_syscall.sched_setattr = kernel.function("sys_sched_setattr") ? { @_SYSCALL_SCHED_SETATTR_NAME pid = __int32($pid) sched_attr_uaddr = $uattr sched_attr_str = _struct_sched_attr_u(sched_attr_uaddr) flags = __uint32($flags) @_SYSCALL_SCHED_SETATTR_ARGSTR } probe dw_syscall.sched_setattr.return = kernel.function("sys_sched_setattr").return ? { @_SYSCALL_SCHED_SETATTR_NAME @SYSC_RETVALSTR($return) } # nd_sched_setattr _____________________________________________________ probe nd_syscall.sched_setattr = nd1_syscall.sched_setattr!, nd2_syscall.sched_setattr!, tp_syscall.sched_setattr { } probe nd1_syscall.sched_setattr = kprobe.function("sys_sched_setattr") ? { @_SYSCALL_SCHED_SETATTR_NAME asmlinkage() @_SYSCALL_SCHED_SETATTR_REGARGS @_SYSCALL_SCHED_SETATTR_ARGSTR } /* kernel 4.17+ */ probe nd2_syscall.sched_setattr = kprobe.function(@arch_syscall_prefix "sys_sched_setattr") ? { __set_syscall_pt_regs(pointer_arg(1)) @_SYSCALL_SCHED_SETATTR_NAME @_SYSCALL_SCHED_SETATTR_REGARGS @_SYSCALL_SCHED_SETATTR_ARGSTR }, { %( @_IS_SREG_KERNEL %? @_SYSCALL_SCHED_SETATTR_REGARGS_STORE %) } /* kernel 3.5+, but undesirable because it affects all syscalls */ probe tp_syscall.sched_setattr = kernel.trace("sys_enter") { __set_syscall_pt_regs($regs) @__syscall_compat_gate(@const("__NR_sched_setattr"), @const("__NR_compat_sched_setattr")) @_SYSCALL_SCHED_SETATTR_NAME @_SYSCALL_SCHED_SETATTR_REGARGS @_SYSCALL_SCHED_SETATTR_ARGSTR }, { %( @_IS_SREG_KERNEL %? @_SYSCALL_SCHED_SETATTR_REGARGS_STORE %) } probe nd_syscall.sched_setattr.return = nd1_syscall.sched_setattr.return!, nd2_syscall.sched_setattr.return!, tp_syscall.sched_setattr.return { } probe nd1_syscall.sched_setattr.return = kprobe.function("sys_sched_setattr").return ? { @_SYSCALL_SCHED_SETATTR_NAME @SYSC_RETVALSTR(returnval()) } /* kernel 4.17+ */ probe nd2_syscall.sched_setattr.return = kprobe.function(@arch_syscall_prefix "sys_sched_setattr").return ? { @_SYSCALL_SCHED_SETATTR_NAME @SYSC_RETVALSTR(returnval()) } /* kernel 3.5+, but undesirable because it affects all syscalls */ probe tp_syscall.sched_setattr.return = kernel.trace("sys_exit") { __set_syscall_pt_regs($regs) @__syscall_compat_gate(@const("__NR_sched_setattr"), @const("__NR_compat_sched_setattr")) @_SYSCALL_SCHED_SETATTR_NAME @SYSC_RETVALSTR($ret) }