diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-21 17:54:03 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-21 17:54:03 +0300 |
| commit | 61f0da12457ffc27b42565e79ac8c2ec9db0e4e7 (patch) | |
| tree | fe8bb802faf0cc7ab01abbd467a75046c2eff4bc /internal/generate/bpfhandler.go | |
| parent | 2e32f235adee23eea2349c83312bb58f0ee6c7da (diff) | |
h7 classify additional memory syscalls
Diffstat (limited to 'internal/generate/bpfhandler.go')
| -rw-r--r-- | internal/generate/bpfhandler.go | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/internal/generate/bpfhandler.go b/internal/generate/bpfhandler.go index 7dba8d7..cd2321b 100644 --- a/internal/generate/bpfhandler.go +++ b/internal/generate/bpfhandler.go @@ -328,6 +328,14 @@ func generateExtraPoll(name string) string { func generateExtraMem(name string) string { switch name { + case "sys_enter_mprotect": + return " ev->addr = (__u64)ctx->args[0];\n ev->length = (__u64)ctx->args[1];\n ev->length2 = 0;\n ev->flags = (__u64)ctx->args[2];\n" + case "sys_enter_madvise": + return " ev->addr = (__u64)ctx->args[0];\n ev->length = (__u64)ctx->args[1];\n ev->length2 = 0;\n ev->flags = (__u64)ctx->args[2];\n" + case "sys_enter_pkey_mprotect": + return " ev->addr = (__u64)ctx->args[0];\n ev->length = (__u64)ctx->args[1];\n ev->length2 = (__u64)ctx->args[3];\n ev->flags = (__u64)ctx->args[2];\n" + case "sys_enter_brk": + return " ev->addr = (__u64)ctx->args[0];\n ev->length = 0;\n ev->length2 = 0;\n ev->flags = 0;\n" case "sys_enter_munmap": return " ev->addr = (__u64)ctx->args[0];\n ev->length = (__u64)ctx->args[1];\n ev->length2 = 0;\n ev->flags = 0;\n" case "sys_enter_mremap": |