Lines Matching refs:payload
207 void* payload,
210 void* payload_start = payload;
218 bpf_probe_read_kernel_str(payload, MAX_PATH,
221 return payload;
223 *root_pos = payload - payload_start;
226 payload += filepart_length;
230 return payload;
253 void* payload)
306 bpf_probe_read_kernel_str(payload, MAX_PATH,
312 payload += cgroup_root_length;
316 bpf_probe_read_kernel_str(payload, MAX_PATH,
322 payload += cgroup_proc_length;
327 void* payload_end_pos = read_full_cgroup_path(proc_kernfs, root_kernfs, payload,
329 cgroup_data->cgroup_full_length = payload_end_pos - payload;
330 payload = payload_end_pos;
333 return (void*)payload;
338 u32 pid, void* payload)
349 size_t comm_length = bpf_core_read_str(payload, TASK_COMM_LEN, &task->comm);
354 payload += comm_length;
357 return (void*)payload;
370 void* payload = populate_var_metadata(&kill_data->meta, task, spid, kill_data->payload);
371 payload = populate_cgroup_info(&kill_data->cgroup_data, task, payload);
372 size_t payload_length = payload - (void*)kill_data->payload;
484 read_absolute_file_path_from_dentry(struct dentry* filp_dentry, void* payload)
495 bpf_probe_read_kernel_str(payload, MAX_PATH,
501 payload += filepart_length;
572 void* payload = populate_var_metadata(&sysctl_data->meta, task, pid, sysctl_data->payload);
573 payload = populate_cgroup_info(&sysctl_data->cgroup_data, task, payload);
580 size_t sysctl_val_length = bpf_probe_read_kernel_str(payload,
586 payload += sysctl_val_length;
590 bpf_probe_read_kernel_str(payload, MAX_PATH,
597 payload += sysctl_path_length;
601 unsigned long data_len = payload - (void*)sysctl_data;
651 void* payload = kill_data->payload;
655 payload += offset;
660 size_t comm_length = bpf_core_read_str(payload, TASK_COMM_LEN, &task->comm);
665 payload += comm_length;
669 bpf_probe_read_kernel_str(payload,
676 payload += cgroup_proc_length;
680 unsigned long data_len = (void*)payload - (void*)kill_data;
721 void* payload = populate_var_metadata(&proc_exec_data->meta, task, pid,
722 proc_exec_data->payload);
723 payload = populate_cgroup_info(&proc_exec_data->cgroup_data, task, payload);
733 bpf_probe_read_kernel_str(payload, MAX_FILENAME_LEN, filename);
738 payload += bin_path_length;
743 unsigned int cmdline_length = probe_read_lim(payload, arg_start,
749 payload += cmdline_length;
755 unsigned long env_len = probe_read_lim(payload, env_start,
759 payload += env_len;
764 unsigned long data_len = payload - (void*)proc_exec_data;
819 void* payload = populate_var_metadata(&filemod_data->meta, task, pid,
820 filemod_data->payload);
821 payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);
823 size_t len = read_absolute_file_path_from_dentry(filp_dentry, payload);
827 payload += len;
831 unsigned long data_len = payload - (void*)filemod_data;
874 void* payload = populate_var_metadata(&filemod_data->meta, task, pid,
875 filemod_data->payload);
876 payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);
878 size_t len = read_absolute_file_path_from_dentry(old_dentry, payload);
882 payload += len;
886 len = read_absolute_file_path_from_dentry(new_dentry, payload);
890 payload += len;
895 unsigned long data_len = payload - (void*)filemod_data;
933 void* payload = populate_var_metadata(&filemod_data->meta, task, pid,
934 filemod_data->payload);
935 payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);
937 size_t len = bpf_probe_read_kernel_str(payload, MAX_FILEPATH_LENGTH,
942 payload += len;
945 len = read_absolute_file_path_from_dentry(dentry, payload);
949 payload += len;
953 unsigned long data_len = payload - (void*)filemod_data;
976 void* payload = populate_var_metadata(&fork_data->meta, child,
977 BPF_CORE_READ(child, pid), fork_data->payload);
983 unsigned long data_len = payload - (void*)fork_data;