trace/events/syscalls.h

0001 /* SPDX-License-Identifier: GPL-2.0 */
0002 #undef TRACE_SYSTEM
0003 #define TRACE_SYSTEM raw_syscalls
0004 #undef TRACE_INCLUDE_FILE
0005 #define TRACE_INCLUDE_FILE syscalls
0006
0007 #if !defined(_TRACE_EVENTS_SYSCALLS_H) || defined(TRACE_HEADER_MULTI_READ)
0008 #define _TRACE_EVENTS_SYSCALLS_H
0009
0010 #include <linux/tracepoint.h>
0011
0012 #include <asm/ptrace.h>
0013 #include <asm/syscall.h>
0014
0015
0016 #ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS
0017
0018 TRACE_EVENT_FN(sys_enter,
0019
0020     TP_PROTO(struct pt_regs *regs, long id),
0021
0022     TP_ARGS(regs, id),
0023
0024     TP_STRUCT__entry(
0025         __field(    long,       id      )
0026         __array(    unsigned long,  args,   6   )
0027     ),
0028
0029     TP_fast_assign(
0030         __entry->id = id;
0031         syscall_get_arguments(current, regs, __entry->args);
0032     ),
0033
0034     TP_printk("NR %ld (%lx, %lx, %lx, %lx, %lx, %lx)",
0035           __entry->id,
0036           __entry->args[0], __entry->args[1], __entry->args[2],
0037           __entry->args[3], __entry->args[4], __entry->args[5]),
0038
0039     syscall_regfunc, syscall_unregfunc
0040 );
0041
0042 TRACE_EVENT_FLAGS(sys_enter, TRACE_EVENT_FL_CAP_ANY)
0043
0044 TRACE_EVENT_FN(sys_exit,
0045
0046     TP_PROTO(struct pt_regs *regs, long ret),
0047
0048     TP_ARGS(regs, ret),
0049
0050     TP_STRUCT__entry(
0051         __field(    long,   id  )
0052         __field(    long,   ret )
0053     ),
0054
0055     TP_fast_assign(
0056         __entry->id = syscall_get_nr(current, regs);
0057         __entry->ret    = ret;
0058     ),
0059
0060     TP_printk("NR %ld = %ld",
0061           __entry->id, __entry->ret),
0062
0063     syscall_regfunc, syscall_unregfunc
0064 );
0065
0066 TRACE_EVENT_FLAGS(sys_exit, TRACE_EVENT_FL_CAP_ANY)
0067
0068 #endif /* CONFIG_HAVE_SYSCALL_TRACEPOINTS */
0069
0070 #endif /* _TRACE_EVENTS_SYSCALLS_H */
0071
0072 /* This part must be outside protection */
0073 #include <trace/define_trace.h>
0074