1TRACEHOOK_REPORT_SYS(9)        Kernel Internals        TRACEHOOK_REPORT_SYS(9)
2
3
4

NAME

6       tracehook_report_syscall_exit - task has just finished a system call
7

SYNOPSIS

9       void tracehook_report_syscall_exit(struct pt_regs * regs, int step);
10

ARGUMENTS

12       regs
13           user register state of current task
14
15       step
16           nonzero if simulating single-step or block-step
17

DESCRIPTION

19       This will be called if TIF_SYSCALL_TRACE has been set, when the current
20       task has just finished an attempted system call. Full user register
21       state is available here. It is safe to block here, preventing signals
22       from being processed.
23
24       If step is nonzero, this report is also in lieu of the normal trap that
25       would follow the system call instruction because user_enable_block_step
26       or user_enable_single_step was used. In this case, TIF_SYSCALL_TRACE
27       might not be set.
28
29       Called without locks, just before checking for pending signals.
30
31
32
33Kernel Hackers Manual 2.6.         June 2019           TRACEHOOK_REPORT_SYS(9)
Impressum