exec

Documentation

Overview

Package goexec provides the utilities to analyse the executable code

Index

• func EnvVars(pid int32) (map[string]string, error)
• func FindExeSymbols(f *elf.File, lookup map[string]struct{}) (map[string]Sym, error)
• func FindLibMaps(pid int32) ([]*procfs.ProcMap, error)
• func FindNamespace(pid int32) (uint32, error)
• func FindNamespacedPids(pid int32) ([]uint32, error)
• func FindProcLanguage(pid int32, elfF *elf.File, path string) svc.InstrumentableType
• func LibPath(name string, maps []*procfs.ProcMap) *procfs.ProcMap
• type FileInfo
  • func FindExecELF(p *services.ProcessInfo, svcID svc.Attrs, k8sEnabled bool) (*FileInfo, error)
  • func (fi *FileInfo) ExecutableName() string
• type Sym

Functions

func EnvVars

func EnvVars(pid int32) (map[string]string, error)

func FindExeSymbols

func FindExeSymbols(f *elf.File, lookup map[string]struct{}) (map[string]Sym, error)

func FindLibMaps

func FindLibMaps(pid int32) ([]*procfs.ProcMap, error)

func FindNamespace

func FindNamespace(pid int32) (uint32, error)

func FindNamespacedPids

func FindNamespacedPids(pid int32) ([]uint32, error)

func FindProcLanguage

func FindProcLanguage(pid int32, elfF *elf.File, path string) svc.InstrumentableType

func LibPath

func LibPath(name string, maps []*procfs.ProcMap) *procfs.ProcMap

Types

type FileInfo

type FileInfo struct {
	Service svc.Attrs

	CmdExePath     string
	ProExeLinkPath string
	ELF            *elf.File
	Pid            int32
	Ppid           int32
	Ino            uint64
	Ns             uint32
}

func FindExecELF

func FindExecELF(p *services.ProcessInfo, svcID svc.Attrs, k8sEnabled bool) (*FileInfo, error)

func (*FileInfo) ExecutableName

func (fi *FileInfo) ExecutableName() string

type Sym

type Sym struct {
	Off  uint64
	Len  uint64
	Prog *elf.Prog
}