-#undef TRACE_SYSTEM
-#define TRACE_SYSTEM syscalls_unknown
-
#if !defined(_TRACE_SYSCALLS_UNKNOWN_H) || defined(TRACE_HEADER_MULTI_READ)
#define _TRACE_SYSCALLS_UNKNOWN_H
),
TP_printk()
)
+TRACE_EVENT(compat_sys_unknown,
+ TP_PROTO(unsigned int id, unsigned long *args),
+ TP_ARGS(id, args),
+ TP_STRUCT__entry(
+ __field(unsigned int, id)
+ __array(unsigned long, args, UNKNOWN_SYSCALL_NRARGS)
+ ),
+ TP_fast_assign(
+ tp_assign(id, id)
+ tp_memcpy(args, args, UNKNOWN_SYSCALL_NRARGS * sizeof(*args))
+ ),
+ TP_printk()
+)
/*
* This is going to hook on sys_exit in the kernel.
* We change the name so we don't clash with the sys_exit syscall entry
* event.
*/
TRACE_EVENT(exit_syscall,
- TP_PROTO(struct pt_regs *regs, long errno),
- TP_ARGS(regs, errno),
+ TP_PROTO(struct pt_regs *regs, long ret),
+ TP_ARGS(regs, ret),
TP_STRUCT__entry(
- __field(long, errno)
+ __field(long, ret)
),
TP_fast_assign(
- tp_assign(errno, errno)
+ tp_assign(ret, ret)
),
TP_printk()
)