syscallctx

Documentation

Overview

Package syscallctx holds syscall context related files

Index

• type KernelSyscallCtxStruct
• type Resolver
  • func NewResolver() *Resolver
  • func (sr *Resolver) Close() error
  • func (sr *Resolver) Resolve(ctxID uint32, ctx *model.SyscallContext) error
  • func (sr *Resolver) Start(manager *manager.Manager) error

Types

type KernelSyscallCtxStruct

type KernelSyscallCtxStruct struct {
	ID    uint32
	Types uint8
	Arg1  [argMaxSize]byte
	Arg2  [argMaxSize]byte
	Arg3  [argMaxSize]byte
}

KernelSyscallCtxStruct maps the kernel structure

type Resolver

type Resolver struct {
	// contains filtered or unexported fields
}

Resolver resolves syscall context

func NewResolver

func NewResolver() *Resolver

NewResolver returns a new syscall context

func (*Resolver) Close

func (sr *Resolver) Close() error

Close the resolver

func (*Resolver) Resolve

func (sr *Resolver) Resolve(ctxID uint32, ctx *model.SyscallContext) error

Resolve resolves the syscall context

func (*Resolver) Start

func (sr *Resolver) Start(manager *manager.Manager) error

Start the syscall context resolver