函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:include\linux\tracehook.h Create Date:2022-07-27 08:29:23
Last Modify:2020-03-16 18:56:00 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：ptrace report for syscall entry and exit looks identical.

函数原型：static inline int ptrace_report_syscall(struct pt_regs *regs, unsigned long message)

返回类型：int

参数：

类型参数名称
struct pt_regs *regs
unsigned longmessage
60  ptrace等于ptrace
62  如果非ptrace按位与PT_PTRACED的值则返回:0
65  ptrace_message等于message
66  ptrace_notify(SIGTRAP | ((ptrace & PT_TRACESYSGOOD) ? 0x80 : 0))
73  如果exit_code则
74  send_sig(exit_code, 当前进程, 1)
75  exit_code等于0
78  ptrace_message等于0
79  返回:fatal_signal_pending(当前进程)
调用者
名称描述
tracehook_report_syscall_entryracehook_report_syscall_entry - task is about to attempt a system call*@regs: user register state of current task* This will be called if %TIF_SYSCALL_TRACE or %TIF_SYSCALL_EMU have been set,
tracehook_report_syscall_exitracehook_report_syscall_exit - task has just finished a system call*@regs: user register state of current task*@step: nonzero if simulating single-step or block-step* This will be called if %TIF_SYSCALL_TRACE has been set, when the