flags_str = _send_flags_str($flags)
to_uaddr = $addr
tolen = $addr_len
- argstr = ""
+ argstr = sprintf("%d, [0x%x], %s, [0x%x], %d", $fd, buf_uaddr,
+ flags_str, to_uaddr, $addr_len)
}
probe syscall.send.return = kernel.function("sys_sendto").return {
name = "send"
in_fd = $in_fd
offset_uaddr = $offset
count = $count
- argstr = ""
+ argstr = sprintf("%d, %d, [0x%x], %d", $out_fd, $in_fd, offset_uaddr,
+ $count)
}
probe syscall.sendfile.return = kernel.function("sys_sendfile").return {
name = "sendfile"
in_fd = $in_fd
offset_uaddr = $offset
count = $count
- argstr = ""
+ argstr = sprintf("%d, %d, [0x%x], %d", $out_fd, $in_fd, offset_uaddr,
+ $count)
}
probe syscall.sendfile64.return = kernel.function("sys_sendfile64").return {
name = "sendfile64"
msg_uaddr = $msg
flags = $flags
flags_str = _send_flags_str($flags)
- argstr = ""
+ argstr = sprintf("%d, [0x%x], %s", $fd, msg_uaddr, flags_str)
}
probe syscall.sendmsg.return = kernel.function("sys_sendmsg").return {
name = "sendmsg"
flags_str = _send_flags_str($flags)
to_uaddr = $addr
tolen = $addr_len
- argstr = ""
+ argstr = sprintf("%d, [0x%x], %d, %s, [0x%x], %d", $fd, buf_uaddr,
+ $len, flags_str, to_uaddr, $addr_len)
}
probe syscall.sendto.return = kernel.function("sys_sendto").return {
name = "sendto"
probe syscall.setfsgid = kernel.function("sys_setfsgid") {
name = "setfsgid"
fsgid = $gid
- argstr = ""
+ argstr = string($gid)
}
probe syscall.setfsgid.return = kernel.function("sys_setfsgid").return {
name = "setfsgid"
probe syscall.setfsgid16 = kernel.function("sys_setfsgid") {
name = "setfsgid16"
gid = $gid
- argstr = ""
+ argstr = string($gid)
}
probe syscall.setfsgid16.return = kernel.function("sys_setfsgid").return {
name = "setfsgid16"
probe syscall.setfsuid = kernel.function("sys_setfsuid") {
name = "setfsuid"
fsuid = $uid
- argstr = ""
+ argstr = string($uid)
}
probe syscall.setfsuid.return = kernel.function("sys_setfsuid").return {
name = "setfsuid"
probe syscall.setfsuid16 = kernel.function("sys_setfsuid") {
name = "setfsuid16"
uid = $uid
- argstr = ""
+ argstr = string($uid)
}
probe syscall.setfsuid16.return = kernel.function("sys_setfsuid").return {
name = "setfsuid16"
probe syscall.setgid = kernel.function("sys_setgid") {
name = "setgid"
gid = $gid
- argstr = ""
+ argstr = string($gid)
}
probe syscall.setgid.return = kernel.function("sys_setgid").return {
name = "setgid"
probe syscall.setgid16 = kernel.function("sys_setgid") {
name = "setgid16"
gid = $gid
- argstr = ""
+ argstr = string($gid)
}
probe syscall.setgid16.return = kernel.function("sys_setgid").return {
name = "setgid16"
* embedded C if need be.
*/
list_uaddr = $grouplist
- argstr = ""
+ argstr = sprintf("%d, [0x%x]", $gidsetsize, list_uaddr)
}
probe syscall.setgroups.return = kernel.function("sys_setgroups").return {
name = "setgroups"
probe syscall.sethostname = kernel.function("sys_sethostname") {
name = "sethostname"
hostname_uaddr = $name
+ name_str = user_string($name)
len = $len
- argstr = ""
+ argstr = sprintf("%s, %d", name_str, $len)
}
probe syscall.sethostname.return = kernel.function("sys_sethostname").return {
name = "sethostname"
name = "setpgid"
pid = $pid
pgid = $pgid
- argstr = ""
+ argstr = sprintf("%d, %d", $pid, $pgid)
}
probe syscall.setpgid.return = kernel.function("sys_setpgid").return {
name = "setpgid"
which_str = _priority_which_str($which)
who = $who
prio = $niceval
- argstr = ""
+ argstr = sprintf("%s, %d, %d", which_str, $who, $niceval)
}
probe syscall.setpriority.return = kernel.function("sys_setpriority").return {
name = "setpriority"
name = "setregid"
rgid = $rgid
egid = $egid
- argstr = ""
+ argstr = sprintf("%d, %d", $rgid, $egid)
}
probe syscall.setregid.return = kernel.function("sys_setregid").return {
name = "setregid"
name = "setregid16"
rgid = $rgid
egid = $egid
- argstr = ""
+ argstr = sprintf("%d, %d", $rgid, $egid)
}
probe syscall.setregid16.return = kernel.function("sys_setregid").return {
name = "setregid16"
rgid = $rgid
egid = $egid
sgid = $sgid
- argstr = ""
+ argstr = sprintf("%d, %d, %d", $rgid, $egid, $sgid)
}
probe syscall.setresgid.return = kernel.function("sys_setresgid").return {
name = "setresgid"
rgid = $rgid
egid = $egid
sgid = $sgid
- argstr = ""
+ argstr = sprintf("%d, %d, %d", $rgid, $egid, $sgid)
}
probe syscall.setresgid16.return = kernel.function("sys_setresgid").return {
name = "setresgid16"
ruid = $ruid
euid = $euid
suid = $suid
- argstr = ""
+ argstr = sprintf("%d, %d, %d", $ruid, $euid, $suid)
}
probe syscall.setresuid.return = kernel.function("sys_setresuid").return {
name = "setresuid"
ruid = $ruid
euid = $euid
suid = $suid
- argstr = ""
+ argstr = sprintf("%d, %d, %d", $ruid, $euid, $suid)
}
probe syscall.setresuid16.return = kernel.function("sys_setresuid").return {
name = "setresuid16"
name = "setreuid"
ruid = $ruid
euid = $euid
- argstr = ""
+ argstr = sprintf("%d, %d", $ruid, $euid)
}
probe syscall.setreuid.return = kernel.function("sys_setreuid").return {
name = "setreuid"
name = "setreuid16"
ruid = $ruid
euid = $euid
- argstr = ""
+ argstr = sprintf("%d, %d", $ruid, $euid)
}
probe syscall.setreuid16.return = kernel.function("sys_setreuid").return {
name = "setreuid16"
probe syscall.setrlimit = kernel.function("sys_setrlimit") {
name = "setrlimit"
resource = $resource
- resource_str = _rlimit_resource_str($resource)
rlim_uaddr = $rlim
- argstr = ""
+ argstr = sprintf("%s, %s", _rlimit_resource_str($resource),
+ _struct_rlimit_u($rlim))
}
probe syscall.setrlimit.return = kernel.function("sys_setrlimit").return {
name = "setrlimit"
optname_str = _sockopt_optname_str($optname)
optval_uaddr = $optval
optlen = $optlen
- argstr = ""
+ argstr = sprintf("%d, %s, %s, [0x%x], %d", $fd, level_str,
+ optname_str, optval_uaddr, $optlen)
}
probe syscall.setsockopt.return = kernel.function("sys_setsockopt").return {
name = "setsockopt"
probe syscall.set_tid_address = kernel.function("sys_set_tid_address") {
name = "set_tid_address"
tidptr_uaddr = $tidptr
- argstr = ""
+ argstr = sprintf("[0x%x]", tidptr_uaddr)
}
probe syscall.set_tid_address.return =
kernel.function("sys_set_tid_address").return {
* tz_tz_minuteswest = __uget_tz_m($tz,0)
* tz_tz_dsttime = __uget_tz_m($tz,1)
*/
- argstr = ""
+ argstr = sprintf("%s, %s", _struct_timeval_u($tv),
+ _struct_timezone_u($tz))
}
probe syscall.settimeofday.return =
kernel.function("sys_settimeofday").return {
probe syscall.setuid = kernel.function("sys_setuid") {
name = "setuid"
uid = $uid
- argstr = ""
+ argstr = string($uid)
}
probe syscall.setuid.return = kernel.function("sys_setuid").return {
name = "setuid"
probe syscall.setuid16 = kernel.function("sys_setuid") {
name = "setuid16"
uid = $uid
- argstr = ""
+ argstr = string($uid)
}
probe syscall.setuid16.return = kernel.function("sys_setuid").return {
name = "setuid16"
probe syscall.setxattr = kernel.function("sys_setxattr") {
name = "setxattr"
path_uaddr = $path
+ path = user_string($path)
name_uaddr = $name
+ name_str = user_string($name)
value_uaddr = $value
size = $size
flags = $flags
- argstr = ""
+ argstr = sprintf("%s, %s, [0x%x], %d, %d", path, name_str, value_uaddr,
+ $size, $flags)
}
probe syscall.setxattr.return = kernel.function("sys_setxattr").return {
name = "setxattr"
shmid = $shmid
cmd = $cmd
buf_uaddr = $buf
- argstr = ""
+ argstr = sprintf("%d, %s, [0x%x]", $shmid, _semctl_cmd($cmd),
+ buf_uaddr)
}
probe syscall.shmctl.return = kernel.function("sys_shmctl").return {
name = "shmctl"
probe syscall.shmdt = kernel.function("sys_shmdt") {
name = "shmdt"
shmaddr_uaddr = $shmaddr
- argstr = ""
+ argstr = sprintf("[0x%x]", shmaddr_uaddr)
}
probe syscall.shmdt.return = kernel.function("sys_shmdt").return {
name = "shmdt"
key = $key
size = $size
shmflg = $shmflg
- argstr = ""
+ argstr = sprintf("%d, %d, %d", $key, $size, $shmflg)
}
probe syscall.shmget.return = kernel.function("sys_shmget").return {
name = "shmget"
s = $fd
how = $how
how_str = _shutdown_how_str($how)
- argstr = ""
+ argstr = sprintf("%d, %s", s, how_str)
}
probe syscall.shutdown.return = kernel.function("sys_shutdown").return {
name = "shutdown"
name = "signal"
sig = $sig
handler = $handler
- argstr = ""
+ argstr = sprintf("%s, [0x%x]", _signal_name($sig), $handler)
}
probe syscall.signal.return = kernel.function("sys_signal").return {
name = "signal"
* addr, let the user take care of it
* with embedded C if need be.
*/
- set_uaddr = $set
- argstr = ""
+ set_uaddr = $set
+ sigsetsize = $sigsetsize
+ argstr = sprintf("[0x%x], %d", set_uaddr, $sigsetsize)
}
probe syscall.sigpending.return = kernel.function("do_sigpending").return {
name = "sigpending"
*/
set_uaddr = $set
oldset_uaddr = $oset
- argstr = ""
+ argstr = sprintf("%s, [0x%x], [0x%x]", how_str, set_uaddr,
+ oldset_uaddr)
}
probe syscall.sigprocmask.return = kernel.function("sigprocmask").return {
name = "sigprocmask"
probe syscall.socket = kernel.function("sys_socket") {
name = "socket"
family = $family
- family_str = _sock_family_str($family)
type = $type
- type_str = _sock_type_str($type)
protocol = $protocol
- argstr = ""
+ argstr = sprintf("%s, %s, %d", _sock_family_str($family),
+ _sock_type_str($type),
+ $protocol)
}
probe syscall.socket.return = kernel.function("sys_socket").return {
name = "socket"
name = "socketcall"
call = $call
args_uaddr = $args
- argstr = ""
+ argstr = sprintf("%d, [0x%x]", $call, args_uaddr)
}
probe syscall.socketcall.return = kernel.function("sys_socketcall").return {
name = "socketcall"
probe syscall.socketpair = kernel.function("sys_socketpair") {
name = "socketpair"
family = $family
- family_str = _sock_family_str($family)
type = $type
- type_str = _sock_type_str($type)
protocol = $protocol
sv_uaddr = $usockvec
- argstr = ""
+ argstr = sprintf("%s, %s, %d, [0x%x]",
+ _sock_family_str($family),
+ _sock_type_str($type),
+ $protocol, sv_uaddr)
}
probe syscall.socketpair.return = kernel.function("sys_socketpair").return {
name = "socketpair"
probe syscall.ssetmask = kernel.function("sys_ssetmask") {
name = "ssetmask"
newmask = $newmask
- argstr = ""
+ argstr = string($newmask)
}
probe syscall.ssetmask.return = kernel.function("sys_ssetmask").return {
name = "ssetmask"
probe syscall.statfs = kernel.function("sys_statfs") {
name = "statfs"
path_uaddr = $path
+ path = user_string($path)
buf_uaddr = $buf
- argstr = ""
+ argstr = sprintf("%s, [0x%x]", path, buf_uaddr)
}
probe syscall.statfs.return = kernel.function("sys_statfs").return {
name = "statfs"
probe syscall.statfs64 = kernel.function("sys_statfs64") {
name = "statfs64"
path_uaddr = $path
+ path = user_string($path)
sz = $sz
buf_uaddr = $buf
- argstr = ""
+ argstr = sprintf("%s, %d, [0x%x]", path, $sz, buf_uaddr)
}
probe syscall.statfs64.return = kernel.function("sys_statfs64").return {
name = "statfs64"
probe syscall.stime = kernel.function("sys_stime") {
name = "stime"
t_uaddr = $tptr
- /*
- * XXX NOT SAFE -- might sleep
- * t = __uget_num($tptr)
- */
- argstr = ""
+
+ /* Fixme, should just use get_user? */
+ argstr = sprintf("[0x%x]", t_uaddr)
}
probe syscall.stime.return = kernel.function("sys_stime").return {
name = "stime"
#
probe syscall.swapoff = kernel.function("sys_swapoff") {
name = "swapoff"
- path_uaddr = $specialfile
- argstr = ""
+ path = user_string($specialfile)
+ argstr = sprintf("%s", path)
}
probe syscall.swapoff.return = kernel.function("sys_swapoff").return {
name = "swapoff"
#
probe syscall.swapon = kernel.function("sys_swapon") {
name = "swapon"
- path_uaddr = $specialfile
+ path = user_string($specialfile)
swapflags = $swap_flags
- argstr = ""
+ argstr = sprintf("%s, %d", path, swapflags)
}
probe syscall.swapon.return = kernel.function("sys_swapon").return {
name = "swapon"
#
probe syscall.symlink = kernel.function("sys_symlink") {
name = "symlink"
- oldpath_uaddr = $oldname
- newpath_uaddr = $newname
- argstr = ""
+ oldpath = user_string($oldname)
+ newpath = user_string($newname)
+ argstr = sprintf("%s, %s", oldpath, newpath)
}
probe syscall.symlink.return = kernel.function("sys_symlink").return {
name = "symlink"
probe syscall.sysctl = kernel.function("sys_sysctl") {
name = "sysctl"
args_uaddr = $args
- argstr = ""
+ argstr = sprintf("[0x%x]", args_uaddr)
}
probe syscall.sysctl.return = kernel.function("sys_sysctl").return {
name = "sysctl"
option = $option
arg1 = $arg1
arg2 = $arg2
- argstr = ""
+ argstr = sprintf("%d, %d, %d", $option, $arg1, $arg2)
}
probe syscall.sysfs.return = kernel.function("sys_sysfs").return {
name = "sysfs"