diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-29 16:53:32 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-29 16:53:32 +0300 |
| commit | e4d91d9a0e0e3dfb3ec6914c265c2f117a66d062 (patch) | |
| tree | ec17fcbd9c39777c933ce067afe3edcaae9c8605 /docs/syscall-tracing-plan.md | |
| parent | 17822912ffd90e2ad187bfa3ff24e2d0525ecfe7 (diff) | |
test(process_madvise): lock in KindFd + UNCLASSIFIED + FamilyMemory
Audit of process_madvise(2) confirmed the existing classification is correct
and added lock-in coverage:
- KindFd with fd=args[0]: the first arg is a pidfd (a PID file descriptor
selecting the target process), not an address, so it must NOT be treated
like madvise(2) (KindMem, addr=args[0]). Extended the enter-handler test
with a negative assertion guarding against the KindMem addr wiring.
- Exit ret_type=UNCLASSIFIED: process_madvise returns the number of bytes
advised, but that is advisory accounting, not real I/O data movement, so it
stays UNCLASSIFIED like madvise(2). Added an exit-handler assertion plus
TestClassifyRetProcessMadviseUnclassified.
- FamilyMemory: shares the family with madvise/process_mrelease/process_vm_*
siblings rather than FamilyIPC (pidfd_* lifecycle). Added family lock-in
cases in family_test.go.
No classification/codegen changes were required; mage generate produces no
diff. Full ./internal/... passes.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Diffstat (limited to 'docs/syscall-tracing-plan.md')
0 files changed, 0 insertions, 0 deletions
