Lines Matching defs:augmented
1212 * args_size: sum of the sizes of the syscall arguments, anything after that is augmented stuff: pathname for openat, etc.
1510 struct augmented_arg *augmented_arg = arg->augmented.args;
1513 * So that the next arg with a payload can consume its augmented arg, i.e. for rename* syscalls
1518 arg->augmented.args = ((void *)arg->augmented.args) + consumed;
1519 arg->augmented.size -= consumed;
1529 if (arg->augmented.args)
2043 .augmented = {
2365 * this breaks syscall__augmented_args() check for augmented args, as we calculate
2369 * thinking that the extra 2 u64 args are the augmented filename, so just check
2370 * here and avoid using augmented syscalls when the evsel is the raw_syscalls one.
2748 .augmented = {
4871 pr_debug("Failed to open augmented syscalls BPF skeleton");
4888 pr_debug("Failed to load augmented syscalls BPF skeleton: %s\n", bf);
4968 struct evsel *augmented = trace.syscalls.events.bpf_output;
4969 if (evsel__init_augmented_syscall_tp(augmented, evsel) ||
4970 evsel__init_augmented_syscall_tp_args(augmented))
4977 augmented->handler = trace__sys_enter;