get_one_event

函数名称：Get an fsnotify notification event if one exists and is small* enough to fit in "count". Return an error pointer if the count* is not large enough. When permission event is dequeued, its state is* updated accordingly.

函数原型：static struct fsnotify_event *get_one_event(struct fsnotify_group *group, size_t count)

返回类型：struct fsnotify_event

参数：

类型	参数	名称
struct fsnotify_group *	group
size_t	count

event_size等于Helper functions to deal with fanotify_event_metadata buffers

struct fsnotify_event * fsn_event = NULL

pr_debug("%s: group=%p count=%zd\n", __func__, group, count)

加自旋锁

如果rn true if the notify queue is empty, false otherwise 则转到:out

如果FAN_GROUP_FLAG(group, Report unique file id )则

event_size加等于fanotify_event_info_len(FANOTIFY_E(This will not remove the event, that must be done with* fsnotify_remove_first_event()))

如果event_size大于count则

fsn_event等于错误号

转到:out

fsn_event等于Remove and return the first event from the notification list. It is the* responsibility of the caller to destroy the obtained event

如果fanotify_is_perm_event(mask)则state of the event 等于FAN_EVENT_REPORTED

out :

自旋锁解锁

返回:fsn_event

**调用者**
名称	描述
fanotify_read
inotify_read

源代码转换工具开放的插件接口	X
支持：c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现：逻辑报告代码生成和批量转换代码

函数逻辑报告