clues::Clone3SystemCall Struct Reference

Inheritance diagram for clues::Clone3SystemCall:

Public Attributes
item::CloneArgs	cl_args
	Combined clone arguments.
item::SizeValue	size
	Size of the CloneArgs structure argument in cl_args.
item::ProcessIDItem	pid
	New child's PID or zero if executing in child context.

Protected Member Functions
void	updateFDTracking (const Tracee &proc) override
	Update file descriptor tracking.
Protected Member Functions inherited from clues::SystemCall
void	fillParameters (const Tracee &proc, const SystemCallInfo &info)
void	setReturnItem (SystemCallItem &ret)
	Sets the return value system call item.
void	addParameters ()
template<typename T, typename... Targs>
void	addParameters (T &par, Targs &...rest)
template<typename... Targs>
void	setParameters (Targs &...args)
virtual bool	check2ndPass (const Tracee &)
	Check whether a second pass needs to be made processing parameters.
virtual void	prepareNewSystemCall ()
	Perform any necessary actions before processing a new system call entry event.
void	dropFD (const Tracee &proc, const cosmos::FileNum num)
void	trackFD (const Tracee &proc, FDInfo &&info)

Additional Inherited Members
Public Types inherited from clues::SystemCall
using	ParameterVector = std::vector<SystemCallItemPtr>
	Vector of the parameters required for a system call.
Public Member Functions inherited from clues::SystemCall
	SystemCall (const SystemCallNr nr)
	Instantiates a new SystemCall object with given properties.
	SystemCall (const SystemCall &other)=delete
SystemCall &	operator= (const SystemCall &other)=delete
void	setEntryInfo (const Tracee &proc, const SystemCallInfo &info)
	Update the stored parameter values from the given tracee.
void	setExitInfo (const Tracee &proc, const SystemCallInfo &info)
	Update possible out and return parameter values from the given tracee.
std::string_view	name () const
	Returns the system call's human readable name.
size_t	numPars () const
	Returns the number of parameters for this system call.
SystemCallNr	callNr () const
	Returns the system call table number for this system call.
const ParameterVector &	parameters () const
	Access to the parameters associated with this system call.
SystemCallItemPtr	result () const
	Access to the return value parameter associated with this system call.
std::optional< ErrnoResult >	error () const
	Access to the errno result seen for this system call.
bool	hasOutParameter () const
bool	hasResultValue () const
bool	hasErrorCode () const
ABI	abi () const
	Returns the system call ABi seen during system call entry.
bool	is32BitEmulationABI () const
const SystemCallInfo *	currentInfo () const
	Access the current SystemCallInfo if currently processing syscall entry/exit.
Static Public Member Functions inherited from clues::SystemCall
static const char *	name (const SystemCallNr nr)
	Returns the name of the given system call or "<unknown>" if unknown.
static bool	validNr (const SystemCallNr nr)
	Returns whether the given system call number is in a valid range.
Protected Attributes inherited from clues::SystemCall
SystemCallNr	m_nr
	The raw system call number of the system call.
const std::string_view	m_name
	The basic name of the system call.
const SystemCallInfo *	m_info = nullptr
	Current system call info during entry/exit processing, nullptr otherwise.
SystemCallItemPtr	m_return
	The return value of the system call.
std::optional< ErrnoResult >	m_error
	If the system call fails, this is the error code.
ParameterVector	m_pars
	The array of system call parameters, if any.
ABI	m_abi = ABI::UNKNOWN
	The current system call ABI which is in effect.

Detailed Description

Definition at line 121 of file process.hxx.

Constructor & Destructor Documentation

Clone3SystemCall()

clues::Clone3SystemCall::Clone3SystemCall ( )

inline

Definition at line 123 of file process.hxx.

                           :
                        SystemCall{SystemCallNr::CLONE3},
                        size{"size", "cl_args structure size"},
                        pid{ItemType::RETVAL, "child pid"} {
                setParameters(cl_args, size);
                setReturnItem(pid);
        }

Member Function Documentation

updateFDTracking()

void clues::Clone3SystemCall::updateFDTracking ( const Tracee & proc )

overrideprotectedvirtual

Update file descriptor tracking.

This function is called upon successful system call exit to track any potential new file descriptors or stop tracking of existing file descriptors.

Specializations of SystemCall that create or close file descriptors need to overwrite this function and call proc.trackFD() or proc.dropFD() accordingly.

Reimplemented from clues::SystemCall.

Definition at line 136 of file process.cxx.

                                                          {
        const auto args = cl_args.args();
 
        if (!args) {
                return;
        } else if (args->flags()[cosmos::CloneFlag::PIDFD]) {
                FDInfo info{FDInfo::Type::PID_FD, cl_args.pidfd()};
                trackFD(proc, std::move(info));
        }
}

Member Data Documentation

cl_args

item::CloneArgs clues::Clone3SystemCall::cl_args

Combined clone arguments.

Definition at line 132 of file process.hxx.

pid

item::ProcessIDItem clues::Clone3SystemCall::pid

New child's PID or zero if executing in child context.

Definition at line 136 of file process.hxx.

size

item::SizeValue clues::Clone3SystemCall::size

Size of the CloneArgs structure argument in cl_args.

Definition at line 134 of file process.hxx.

---

The documentation for this struct was generated from the following files:

• include/syscalls/process.hxx
• src/syscalls/process.cxx