include/trace/events/syscalls.h

   1 #undef TRACE_SYSTEM
   2 #define TRACE_SYSTEM raw_syscalls
   3 #undef TRACE_INCLUDE_FILE
   4 #define TRACE_INCLUDE_FILE syscalls
   5
   6 #if !defined(_TRACE_EVENTS_SYSCALLS_H) || defined(TRACE_HEADER_MULTI_READ)
   7 #define _TRACE_EVENTS_SYSCALLS_H
   8
   9 #include <linux/tracepoint.h>
  10
  11 #include <asm/ptrace.h>
  12 #include <asm/syscall.h>
  13
  14
  15 #ifdef CONFIG_HAVE_SYSCALL_TRACEPOINTS
  16
  17 extern void syscall_regfunc(void);
  18 extern void syscall_unregfunc(void);
  19
  20 TRACE_EVENT_FN(sys_enter,
  21
  22         TP_PROTO(struct pt_regs *regs, long id),
  23
  24         TP_ARGS(regs, id),
  25
  26         TP_STRUCT__entry(
  27                 __field(        long,           id              )
  28                 __array(        unsigned long,  args,   6       )
  29         ),
  30
  31         TP_fast_assign(
  32                 __entry->id     = id;
  33                 syscall_get_arguments(current, regs, 0, 6, __entry->args);
  34         ),
  35
  36         TP_printk("NR %ld (%lx, %lx, %lx, %lx, %lx, %lx)",
  37                   __entry->id,
  38                   __entry->args[0], __entry->args[1], __entry->args[2],
  39                   __entry->args[3], __entry->args[4], __entry->args[5]),
  40
  41         syscall_regfunc, syscall_unregfunc
  42 );
  43
  44 TRACE_EVENT_FLAGS(sys_enter, TRACE_EVENT_FL_CAP_ANY)
  45
  46 TRACE_EVENT_FN(sys_exit,
  47
  48         TP_PROTO(struct pt_regs *regs, long ret),
  49
  50         TP_ARGS(regs, ret),
  51
  52         TP_STRUCT__entry(
  53                 __field(        long,   id      )
  54                 __field(        long,   ret     )
  55         ),
  56
  57         TP_fast_assign(
  58                 __entry->id     = syscall_get_nr(current, regs);
  59                 __entry->ret    = ret;
  60         ),
  61
  62         TP_printk("NR %ld = %ld",
  63                   __entry->id, __entry->ret),
  64
  65         syscall_regfunc, syscall_unregfunc
  66 );
  67
  68 TRACE_EVENT_FLAGS(sys_exit, TRACE_EVENT_FL_CAP_ANY)
  69
  70 #endif /* CONFIG_HAVE_SYSCALL_TRACEPOINTS */
  71
  72 #endif /* _TRACE_EVENTS_SYSCALLS_H */
  73
  74 /* This part must be outside protection */
  75 #include <trace/define_trace.h>
  76