Scroll to navigation

TRACEHOOK_REPORT_SYS(9) Kernel Internals TRACEHOOK_REPORT_SYS(9)

NAME

tracehook_report_syscall_exit - task has just finished a system call

SYNOPSIS

void tracehook_report_syscall_exit(struct pt_regs * regs, int step);

ARGUMENTS

regs

user register state of current task

step

nonzero if simulating single-step or block-step

DESCRIPTION

This will be called if TIF_SYSCALL_TRACE has been set, when the current task has just finished an attempted system call. Full user register state is available here. It is safe to block here, preventing signals from being processed.

If step is nonzero, this report is also in lieu of the normal trap that would follow the system call instruction because user_enable_block_step or user_enable_single_step was used. In this case, TIF_SYSCALL_TRACE might not be set.

Called without locks, just before checking for pending signals.

May 2024 Kernel Hackers Manual 2.6.