Lines Matching full:len
86 #define READ_TOKEN_BYTES(buf, len, dest, size, bytesread, err) do { \ argument
87 if ((bytesread) + (size) > (u_int32_t)(len)) { \
95 #define READ_TOKEN_U_CHAR(buf, len, dest, bytesread, err) do { \ argument
96 if ((bytesread) + sizeof(u_char) <= (u_int32_t)(len)) { \
103 #define READ_TOKEN_U_INT16(buf, len, dest, bytesread, err) do { \ argument
104 if ((bytesread) + sizeof(u_int16_t) <= (u_int32_t)(len)) { \
111 #define READ_TOKEN_U_INT32(buf, len, dest, bytesread, err) do { \ argument
112 if ((bytesread) + sizeof(u_int32_t) <= (u_int32_t)(len)) { \
119 #define READ_TOKEN_U_INT64(buf, len, dest, bytesread, err) do { \ argument
120 if ((bytesread) + sizeof(u_int64_t) <= (u_int32_t)(len)) { \
127 #define SET_PTR(buf, len, ptr, size, bytesread, err) do { \ argument
128 if ((bytesread) + (size) > (u_int32_t)(len)) \
196 print_mem(FILE *fp, u_char *data, size_t len) in print_mem() argument
200 if (len > 0) { in print_mem()
202 for (i = 0; i < len; i++) in print_mem()
211 print_string(FILE *fp, const char *str, size_t len) in print_string() argument
215 if (len > 0) { in print_string()
216 for (i = 0; i < len; i++) { in print_string()
227 print_xml_string(FILE *fp, const char *str, size_t len) in print_xml_string() argument
232 if (len == 0) in print_xml_string()
235 for (i = 0; i < len; i++) { in print_xml_string()
915 fetch_header32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_header32_tok() argument
919 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32.size, tok->len, err); in fetch_header32_tok()
923 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr32.version, tok->len, err); in fetch_header32_tok()
927 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32.e_type, tok->len, err); in fetch_header32_tok()
931 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32.e_mod, tok->len, err); in fetch_header32_tok()
935 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32.s, tok->len, err); in fetch_header32_tok()
939 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32.ms, tok->len, err); in fetch_header32_tok()
1003 fetch_header32_ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_header32_ex_tok() argument
1007 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.size, tok->len, err); in fetch_header32_ex_tok()
1011 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr32_ex.version, tok->len, err); in fetch_header32_ex_tok()
1015 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32_ex.e_type, tok->len, err); in fetch_header32_ex_tok()
1019 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32_ex.e_mod, tok->len, err); in fetch_header32_ex_tok()
1023 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.ad_type, tok->len, err); in fetch_header32_ex_tok()
1030 READ_TOKEN_BYTES(buf, len, &tok->tt.hdr32_ex.addr[0], in fetch_header32_ex_tok()
1031 sizeof(tok->tt.hdr32_ex.addr[0]), tok->len, err); in fetch_header32_ex_tok()
1037 READ_TOKEN_BYTES(buf, len, tok->tt.hdr32_ex.addr, in fetch_header32_ex_tok()
1038 sizeof(tok->tt.hdr32_ex.addr), tok->len, err); in fetch_header32_ex_tok()
1042 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.s, tok->len, err); in fetch_header32_ex_tok()
1046 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.ms, tok->len, err); in fetch_header32_ex_tok()
1107 fetch_header64_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_header64_tok() argument
1111 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr64.size, tok->len, err); in fetch_header64_tok()
1115 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr64.version, tok->len, err); in fetch_header64_tok()
1119 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64.e_type, tok->len, err); in fetch_header64_tok()
1123 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64.e_mod, tok->len, err); in fetch_header64_tok()
1127 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64.s, tok->len, err); in fetch_header64_tok()
1131 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64.ms, tok->len, err); in fetch_header64_tok()
1191 fetch_header64_ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_header64_ex_tok() argument
1195 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr64_ex.size, tok->len, err); in fetch_header64_ex_tok()
1199 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr64_ex.version, tok->len, err); in fetch_header64_ex_tok()
1203 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64_ex.e_type, tok->len, err); in fetch_header64_ex_tok()
1207 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64_ex.e_mod, tok->len, err); in fetch_header64_ex_tok()
1211 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr64_ex.ad_type, tok->len, err); in fetch_header64_ex_tok()
1218 READ_TOKEN_BYTES(buf, len, &tok->tt.hdr64_ex.addr[0], in fetch_header64_ex_tok()
1219 sizeof(tok->tt.hdr64_ex.addr[0]), tok->len, err); in fetch_header64_ex_tok()
1225 READ_TOKEN_BYTES(buf, len, tok->tt.hdr64_ex.addr, in fetch_header64_ex_tok()
1226 sizeof(tok->tt.hdr64_ex.addr), tok->len, err); in fetch_header64_ex_tok()
1230 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64_ex.s, tok->len, err); in fetch_header64_ex_tok()
1234 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64_ex.ms, tok->len, err); in fetch_header64_ex_tok()
1291 fetch_trailer_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_trailer_tok() argument
1295 READ_TOKEN_U_INT16(buf, len, tok->tt.trail.magic, tok->len, err); in fetch_trailer_tok()
1299 READ_TOKEN_U_INT32(buf, len, tok->tt.trail.count, tok->len, err); in fetch_trailer_tok()
1324 fetch_arg32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_arg32_tok() argument
1328 READ_TOKEN_U_CHAR(buf, len, tok->tt.arg32.no, tok->len, err); in fetch_arg32_tok()
1332 READ_TOKEN_U_INT32(buf, len, tok->tt.arg32.val, tok->len, err); in fetch_arg32_tok()
1336 READ_TOKEN_U_INT16(buf, len, tok->tt.arg32.len, tok->len, err); in fetch_arg32_tok()
1340 SET_PTR((char*)buf, len, tok->tt.arg32.text, tok->tt.arg32.len, in fetch_arg32_tok()
1341 tok->len, err); in fetch_arg32_tok()
1361 print_string(fp, tok->tt.arg32.text, tok->tt.arg32.len); in print_arg32_tok()
1370 print_string(fp, tok->tt.arg32.text, tok->tt.arg32.len); in print_arg32_tok()
1375 fetch_arg64_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_arg64_tok() argument
1379 READ_TOKEN_U_CHAR(buf, len, tok->tt.arg64.no, tok->len, err); in fetch_arg64_tok()
1383 READ_TOKEN_U_INT64(buf, len, tok->tt.arg64.val, tok->len, err); in fetch_arg64_tok()
1387 READ_TOKEN_U_INT16(buf, len, tok->tt.arg64.len, tok->len, err); in fetch_arg64_tok()
1391 SET_PTR((char*)buf, len, tok->tt.arg64.text, tok->tt.arg64.len, in fetch_arg64_tok()
1392 tok->len, err); in fetch_arg64_tok()
1412 print_string(fp, tok->tt.arg64.text, tok->tt.arg64.len); in print_arg64_tok()
1421 print_string(fp, tok->tt.arg64.text, tok->tt.arg64.len); in print_arg64_tok()
1432 fetch_arb_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_arb_tok() argument
1437 READ_TOKEN_U_CHAR(buf, len, tok->tt.arb.howtopr, tok->len, err); in fetch_arb_tok()
1441 READ_TOKEN_U_CHAR(buf, len, tok->tt.arb.bu, tok->len, err); in fetch_arb_tok()
1445 READ_TOKEN_U_CHAR(buf, len, tok->tt.arb.uc, tok->len, err); in fetch_arb_tok()
1475 SET_PTR(buf, len, tok->tt.arb.data, datasize * tok->tt.arb.uc, in fetch_arb_tok()
1476 tok->len, err); in fetch_arb_tok()
1660 fetch_attr32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_attr32_tok() argument
1664 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.mode, tok->len, err); in fetch_attr32_tok()
1668 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.uid, tok->len, err); in fetch_attr32_tok()
1672 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.gid, tok->len, err); in fetch_attr32_tok()
1676 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.fsid, tok->len, err); in fetch_attr32_tok()
1680 READ_TOKEN_U_INT64(buf, len, tok->tt.attr32.nid, tok->len, err); in fetch_attr32_tok()
1684 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.dev, tok->len, err); in fetch_attr32_tok()
1741 fetch_attr64_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_attr64_tok() argument
1745 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.mode, tok->len, err); in fetch_attr64_tok()
1749 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.uid, tok->len, err); in fetch_attr64_tok()
1753 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.gid, tok->len, err); in fetch_attr64_tok()
1757 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.fsid, tok->len, err); in fetch_attr64_tok()
1761 READ_TOKEN_U_INT64(buf, len, tok->tt.attr64.nid, tok->len, err); in fetch_attr64_tok()
1765 READ_TOKEN_U_INT64(buf, len, tok->tt.attr64.dev, tok->len, err); in fetch_attr64_tok()
1818 fetch_exit_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_exit_tok() argument
1822 READ_TOKEN_U_INT32(buf, len, tok->tt.exit.status, tok->len, err); in fetch_exit_tok()
1826 READ_TOKEN_U_INT32(buf, len, tok->tt.exit.ret, tok->len, err); in fetch_exit_tok()
1859 fetch_execarg_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_execarg_tok() argument
1865 READ_TOKEN_U_INT32(buf, len, tok->tt.execarg.count, tok->len, err); in fetch_execarg_tok()
1870 bptr = buf + tok->len; in fetch_execarg_tok()
1876 if (++tok->len >= (u_int32_t)len) in fetch_execarg_tok()
1878 bptr = buf + tok->len; in fetch_execarg_tok()
1882 tok->len++; /* \0 character */ in fetch_execarg_tok()
1917 fetch_execenv_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_execenv_tok() argument
1923 READ_TOKEN_U_INT32(buf, len, tok->tt.execenv.count, tok->len, err); in fetch_execenv_tok()
1928 bptr = buf + tok->len; in fetch_execenv_tok()
1934 if (++tok->len >= (u_int32_t)len) in fetch_execenv_tok()
1936 bptr = buf + tok->len; in fetch_execenv_tok()
1940 tok->len++; /* \0 character */ in fetch_execenv_tok()
1973 * file name len 2 bytes
1977 fetch_file_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_file_tok() argument
1981 READ_TOKEN_U_INT32(buf, len, tok->tt.file.s, tok->len, err); in fetch_file_tok()
1985 READ_TOKEN_U_INT32(buf, len, tok->tt.file.ms, tok->len, err); in fetch_file_tok()
1989 READ_TOKEN_U_INT16(buf, len, tok->tt.file.len, tok->len, err); in fetch_file_tok()
1993 SET_PTR((char*)buf, len, tok->tt.file.name, tok->tt.file.len, tok->len, in fetch_file_tok()
2014 print_string(fp, tok->tt.file.name, tok->tt.file.len); in print_file_tok()
2022 print_string(fp, tok->tt.file.name, tok->tt.file.len); in print_file_tok()
2031 fetch_newgroups_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_newgroups_tok() argument
2036 READ_TOKEN_U_INT16(buf, len, tok->tt.grps.no, tok->len, err); in fetch_newgroups_tok()
2041 READ_TOKEN_U_INT32(buf, len, tok->tt.grps.list[i], tok->len, in fetch_newgroups_tok()
2073 fetch_inaddr_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_inaddr_tok() argument
2077 READ_TOKEN_BYTES(buf, len, &tok->tt.inaddr.addr, sizeof(uint32_t), in fetch_inaddr_tok()
2078 tok->len, err); in fetch_inaddr_tok()
2105 fetch_inaddr_ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_inaddr_ex_tok() argument
2109 READ_TOKEN_U_INT32(buf, len, tok->tt.inaddr_ex.type, tok->len, err); in fetch_inaddr_ex_tok()
2114 READ_TOKEN_BYTES(buf, len, &tok->tt.inaddr_ex.addr[0], in fetch_inaddr_ex_tok()
2115 sizeof(tok->tt.inaddr_ex.addr[0]), tok->len, err); in fetch_inaddr_ex_tok()
2119 READ_TOKEN_BYTES(buf, len, tok->tt.inaddr_ex.addr, in fetch_inaddr_ex_tok()
2120 sizeof(tok->tt.inaddr_ex.addr), tok->len, err); in fetch_inaddr_ex_tok()
2149 fetch_ip_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_ip_tok() argument
2153 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.version, tok->len, err); in fetch_ip_tok()
2157 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.tos, tok->len, err); in fetch_ip_tok()
2161 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.len, sizeof(uint16_t), in fetch_ip_tok()
2162 tok->len, err); in fetch_ip_tok()
2166 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.id, sizeof(uint16_t), in fetch_ip_tok()
2167 tok->len, err); in fetch_ip_tok()
2171 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.offset, sizeof(uint16_t), in fetch_ip_tok()
2172 tok->len, err); in fetch_ip_tok()
2176 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.ttl, tok->len, err); in fetch_ip_tok()
2180 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.prot, tok->len, err); in fetch_ip_tok()
2184 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.chksm, sizeof(uint16_t), in fetch_ip_tok()
2185 tok->len, err); in fetch_ip_tok()
2189 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.src, sizeof(tok->tt.ip.src), in fetch_ip_tok()
2190 tok->len, err); in fetch_ip_tok()
2194 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.dest, sizeof(tok->tt.ip.dest), in fetch_ip_tok()
2195 tok->len, err); in fetch_ip_tok()
2215 open_attr(fp, "len"); in print_ip_tok()
2216 print_2_bytes(fp, ntohs(tok->tt.ip.len), "%u"); in print_ip_tok()
2247 print_2_bytes(fp, ntohs(tok->tt.ip.len), "%u"); in print_ip_tok()
2270 fetch_ipc_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_ipc_tok() argument
2274 READ_TOKEN_U_CHAR(buf, len, tok->tt.ipc.type, tok->len, err); in fetch_ipc_tok()
2278 READ_TOKEN_U_INT32(buf, len, tok->tt.ipc.id, tok->len, err); in fetch_ipc_tok()
2316 fetch_ipcperm_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_ipcperm_tok() argument
2320 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.uid, tok->len, err); in fetch_ipcperm_tok()
2324 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.gid, tok->len, err); in fetch_ipcperm_tok()
2328 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.puid, tok->len, err); in fetch_ipcperm_tok()
2332 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.pgid, tok->len, err); in fetch_ipcperm_tok()
2336 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.mode, tok->len, err); in fetch_ipcperm_tok()
2340 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.seq, tok->len, err); in fetch_ipcperm_tok()
2344 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.key, tok->len, err); in fetch_ipcperm_tok()
2401 fetch_iport_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_iport_tok() argument
2405 READ_TOKEN_BYTES(buf, len, &tok->tt.iport.port, sizeof(uint16_t), in fetch_iport_tok()
2406 tok->len, err); in fetch_iport_tok()
2432 fetch_opaque_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_opaque_tok() argument
2436 READ_TOKEN_U_INT16(buf, len, tok->tt.opaque.size, tok->len, err); in fetch_opaque_tok()
2440 SET_PTR((char*)buf, len, tok->tt.opaque.data, tok->tt.opaque.size, in fetch_opaque_tok()
2441 tok->len, err); in fetch_opaque_tok()
2471 fetch_path_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_path_tok() argument
2475 READ_TOKEN_U_INT16(buf, len, tok->tt.path.len, tok->len, err); in fetch_path_tok()
2479 SET_PTR((char*)buf, len, tok->tt.path.path, tok->tt.path.len, tok->len, in fetch_path_tok()
2493 print_string(fp, tok->tt.path.path, tok->tt.path.len); in print_path_tok()
2497 print_string(fp, tok->tt.path.path, tok->tt.path.len); in print_path_tok()
2515 fetch_process32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_process32_tok() argument
2519 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.auid, tok->len, err); in fetch_process32_tok()
2523 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.euid, tok->len, err); in fetch_process32_tok()
2527 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.egid, tok->len, err); in fetch_process32_tok()
2531 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.ruid, tok->len, err); in fetch_process32_tok()
2535 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.rgid, tok->len, err); in fetch_process32_tok()
2539 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.pid, tok->len, err); in fetch_process32_tok()
2543 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.sid, tok->len, err); in fetch_process32_tok()
2547 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.tid.port, tok->len, err); in fetch_process32_tok()
2551 READ_TOKEN_BYTES(buf, len, &tok->tt.proc32.tid.addr, in fetch_process32_tok()
2552 sizeof(tok->tt.proc32.tid.addr), tok->len, err); in fetch_process32_tok()
2627 fetch_process64_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_process64_tok() argument
2631 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.auid, tok->len, err); in fetch_process64_tok()
2635 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.euid, tok->len, err); in fetch_process64_tok()
2639 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.egid, tok->len, err); in fetch_process64_tok()
2643 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.ruid, tok->len, err); in fetch_process64_tok()
2647 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.rgid, tok->len, err); in fetch_process64_tok()
2651 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.pid, tok->len, err); in fetch_process64_tok()
2655 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.sid, tok->len, err); in fetch_process64_tok()
2659 READ_TOKEN_U_INT64(buf, len, tok->tt.proc64.tid.port, tok->len, err); in fetch_process64_tok()
2663 READ_TOKEN_BYTES(buf, len, &tok->tt.proc64.tid.addr, in fetch_process64_tok()
2664 sizeof(tok->tt.proc64.tid.addr), tok->len, err); in fetch_process64_tok()
2735 * address type-len 4 bytes
2739 fetch_process32ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_process32ex_tok() argument
2743 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.auid, tok->len, err); in fetch_process32ex_tok()
2747 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.euid, tok->len, err); in fetch_process32ex_tok()
2751 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.egid, tok->len, err); in fetch_process32ex_tok()
2755 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.ruid, tok->len, err); in fetch_process32ex_tok()
2759 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.rgid, tok->len, err); in fetch_process32ex_tok()
2763 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.pid, tok->len, err); in fetch_process32ex_tok()
2767 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.sid, tok->len, err); in fetch_process32ex_tok()
2771 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.tid.port, tok->len, in fetch_process32ex_tok()
2776 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.tid.type, tok->len, in fetch_process32ex_tok()
2782 READ_TOKEN_BYTES(buf, len, &tok->tt.proc32_ex.tid.addr[0], in fetch_process32ex_tok()
2783 sizeof(tok->tt.proc32_ex.tid.addr[0]), tok->len, err); in fetch_process32ex_tok()
2787 READ_TOKEN_BYTES(buf, len, tok->tt.proc32_ex.tid.addr, in fetch_process32ex_tok()
2788 sizeof(tok->tt.proc32_ex.tid.addr), tok->len, err); in fetch_process32ex_tok()
2864 * address type-len 4 bytes
2868 fetch_process64ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_process64ex_tok() argument
2872 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.auid, tok->len, err); in fetch_process64ex_tok()
2876 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.euid, tok->len, err); in fetch_process64ex_tok()
2880 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.egid, tok->len, err); in fetch_process64ex_tok()
2884 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.ruid, tok->len, err); in fetch_process64ex_tok()
2888 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.rgid, tok->len, err); in fetch_process64ex_tok()
2892 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.pid, tok->len, err); in fetch_process64ex_tok()
2896 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.sid, tok->len, err); in fetch_process64ex_tok()
2900 READ_TOKEN_U_INT64(buf, len, tok->tt.proc64_ex.tid.port, tok->len, in fetch_process64ex_tok()
2905 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.tid.type, tok->len, in fetch_process64ex_tok()
2911 READ_TOKEN_BYTES(buf, len, &tok->tt.proc64_ex.tid.addr[0], in fetch_process64ex_tok()
2912 sizeof(tok->tt.proc64_ex.tid.addr[0]), tok->len, err); in fetch_process64ex_tok()
2916 READ_TOKEN_BYTES(buf, len, tok->tt.proc64_ex.tid.addr, in fetch_process64ex_tok()
2917 sizeof(tok->tt.proc64_ex.tid.addr), tok->len, err); in fetch_process64ex_tok()
2986 fetch_return32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_return32_tok() argument
2990 READ_TOKEN_U_CHAR(buf, len, tok->tt.ret32.status, tok->len, err); in fetch_return32_tok()
2994 READ_TOKEN_U_INT32(buf, len, tok->tt.ret32.ret, tok->len, err); in fetch_return32_tok()
3023 fetch_return64_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_return64_tok() argument
3027 READ_TOKEN_U_CHAR(buf, len, tok->tt.ret64.err, tok->len, err); in fetch_return64_tok()
3031 READ_TOKEN_U_INT64(buf, len, tok->tt.ret64.val, tok->len, err); in fetch_return64_tok()
3063 fetch_seq_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_seq_tok() argument
3067 READ_TOKEN_U_INT32(buf, len, tok->tt.seq.seqno, tok->len, err); in fetch_seq_tok()
3096 fetch_sock_inet32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_sock_inet32_tok() argument
3100 READ_TOKEN_U_INT16(buf, len, tok->tt.sockinet_ex32.family, tok->len, in fetch_sock_inet32_tok()
3105 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.port, in fetch_sock_inet32_tok()
3106 sizeof(uint16_t), tok->len, err); in fetch_sock_inet32_tok()
3110 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.addr, in fetch_sock_inet32_tok()
3111 sizeof(tok->tt.sockinet_ex32.addr[0]), tok->len, err); in fetch_sock_inet32_tok()
3150 fetch_sock_inet128_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_sock_inet128_tok() argument
3154 READ_TOKEN_U_INT16(buf, len, tok->tt.sockinet_ex32.family, tok->len, in fetch_sock_inet128_tok()
3159 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.port, in fetch_sock_inet128_tok()
3160 sizeof(uint16_t), tok->len, err); in fetch_sock_inet128_tok()
3164 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.addr, in fetch_sock_inet128_tok()
3165 sizeof(tok->tt.sockinet_ex32.addr), tok->len, err); in fetch_sock_inet128_tok()
3203 fetch_sock_unix_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_sock_unix_tok() argument
3210 READ_TOKEN_U_INT16(buf, len, tok->tt.sockunix.family, tok->len, err); in fetch_sock_unix_tok()
3214 /* slen = strnlen((buf + tok->len), 104) + 1; */ in fetch_sock_unix_tok()
3215 p = (u_char *)memchr((const void *)(buf + tok->len), '\0', 104); in fetch_sock_unix_tok()
3216 slen = (p ? (int)(p - (buf + tok->len)) : 104) + 1; in fetch_sock_unix_tok()
3218 READ_TOKEN_BYTES(buf, len, tok->tt.sockunix.path, slen, tok->len, err); in fetch_sock_unix_tok()
3258 fetch_socket_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_socket_tok() argument
3262 READ_TOKEN_U_INT16(buf, len, tok->tt.socket.type, tok->len, err); in fetch_socket_tok()
3266 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.l_port, sizeof(uint16_t), in fetch_socket_tok()
3267 tok->len, err); in fetch_socket_tok()
3271 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.l_addr, in fetch_socket_tok()
3272 sizeof(tok->tt.socket.l_addr), tok->len, err); in fetch_socket_tok()
3276 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.r_port, sizeof(uint16_t), in fetch_socket_tok()
3277 tok->len, err); in fetch_socket_tok()
3281 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.l_addr, in fetch_socket_tok()
3282 sizeof(tok->tt.socket.r_addr), tok->len, err); in fetch_socket_tok()
3338 fetch_subject32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_subject32_tok() argument
3342 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.auid, tok->len, err); in fetch_subject32_tok()
3346 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.euid, tok->len, err); in fetch_subject32_tok()
3350 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.egid, tok->len, err); in fetch_subject32_tok()
3354 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.ruid, tok->len, err); in fetch_subject32_tok()
3358 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.rgid, tok->len, err); in fetch_subject32_tok()
3362 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.pid, tok->len, err); in fetch_subject32_tok()
3366 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.sid, tok->len, err); in fetch_subject32_tok()
3370 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.tid.port, tok->len, err); in fetch_subject32_tok()
3374 READ_TOKEN_BYTES(buf, len, &tok->tt.subj32.tid.addr, in fetch_subject32_tok()
3375 sizeof(tok->tt.subj32.tid.addr), tok->len, err); in fetch_subject32_tok()
3469 fetch_priv_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_priv_tok() argument
3473 READ_TOKEN_U_CHAR(buf, len, tok->tt.priv.sorf, tok->len, err); in fetch_priv_tok()
3476 READ_TOKEN_U_INT16(buf, len, tok->tt.priv.privstrlen, tok->len, err); in fetch_priv_tok()
3479 SET_PTR((char *)buf, len, tok->tt.priv.priv, tok->tt.priv.privstrlen, in fetch_priv_tok()
3480 tok->len, err); in fetch_priv_tok()
3493 fetch_privset_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_privset_tok() argument
3497 READ_TOKEN_U_INT16(buf, len, tok->tt.privset.privtstrlen, in fetch_privset_tok()
3498 tok->len, err); in fetch_privset_tok()
3501 SET_PTR((char *)buf, len, tok->tt.privset.privtstr, in fetch_privset_tok()
3502 tok->tt.privset.privtstrlen, tok->len, err); in fetch_privset_tok()
3505 READ_TOKEN_U_INT16(buf, len, tok->tt.privset.privstrlen, in fetch_privset_tok()
3506 tok->len, err); in fetch_privset_tok()
3509 SET_PTR((char *)buf, len, tok->tt.privset.privstr, in fetch_privset_tok()
3510 tok->tt.privset.privstrlen, tok->len, err); in fetch_privset_tok()
3553 fetch_subject64_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_subject64_tok() argument
3557 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.auid, tok->len, err); in fetch_subject64_tok()
3561 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.euid, tok->len, err); in fetch_subject64_tok()
3565 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.egid, tok->len, err); in fetch_subject64_tok()
3569 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.ruid, tok->len, err); in fetch_subject64_tok()
3573 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.rgid, tok->len, err); in fetch_subject64_tok()
3577 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.pid, tok->len, err); in fetch_subject64_tok()
3581 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.sid, tok->len, err); in fetch_subject64_tok()
3585 READ_TOKEN_U_INT64(buf, len, tok->tt.subj64.tid.port, tok->len, err); in fetch_subject64_tok()
3589 READ_TOKEN_BYTES(buf, len, &tok->tt.subj64.tid.addr, in fetch_subject64_tok()
3590 sizeof(tok->tt.subj64.tid.addr), tok->len, err); in fetch_subject64_tok()
3665 fetch_subject32ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_subject32ex_tok() argument
3669 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.auid, tok->len, err); in fetch_subject32ex_tok()
3673 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.euid, tok->len, err); in fetch_subject32ex_tok()
3677 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.egid, tok->len, err); in fetch_subject32ex_tok()
3681 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.ruid, tok->len, err); in fetch_subject32ex_tok()
3685 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.rgid, tok->len, err); in fetch_subject32ex_tok()
3689 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.pid, tok->len, err); in fetch_subject32ex_tok()
3693 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.sid, tok->len, err); in fetch_subject32ex_tok()
3697 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.tid.port, tok->len, in fetch_subject32ex_tok()
3702 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.tid.type, tok->len, in fetch_subject32ex_tok()
3708 READ_TOKEN_BYTES(buf, len, &tok->tt.subj32_ex.tid.addr[0], in fetch_subject32ex_tok()
3709 sizeof(tok->tt.subj32_ex.tid.addr[0]), tok->len, err); in fetch_subject32ex_tok()
3713 READ_TOKEN_BYTES(buf, len, tok->tt.subj32_ex.tid.addr, in fetch_subject32ex_tok()
3714 sizeof(tok->tt.subj32_ex.tid.addr), tok->len, err); in fetch_subject32ex_tok()
3793 fetch_subject64ex_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_subject64ex_tok() argument
3797 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.auid, tok->len, err); in fetch_subject64ex_tok()
3801 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.euid, tok->len, err); in fetch_subject64ex_tok()
3805 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.egid, tok->len, err); in fetch_subject64ex_tok()
3809 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.ruid, tok->len, err); in fetch_subject64ex_tok()
3813 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.rgid, tok->len, err); in fetch_subject64ex_tok()
3817 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.pid, tok->len, err); in fetch_subject64ex_tok()
3821 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.sid, tok->len, err); in fetch_subject64ex_tok()
3825 READ_TOKEN_U_INT64(buf, len, tok->tt.subj64_ex.tid.port, tok->len, in fetch_subject64ex_tok()
3830 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.tid.type, tok->len, in fetch_subject64ex_tok()
3836 READ_TOKEN_BYTES(buf, len, &tok->tt.subj64_ex.tid.addr[0], in fetch_subject64ex_tok()
3837 sizeof(tok->tt.subj64_ex.tid.addr[0]), tok->len, err); in fetch_subject64ex_tok()
3841 READ_TOKEN_BYTES(buf, len, tok->tt.subj64_ex.tid.addr, in fetch_subject64ex_tok()
3842 sizeof(tok->tt.subj64_ex.tid.addr), tok->len, err); in fetch_subject64ex_tok()
3911 fetch_text_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_text_tok() argument
3915 READ_TOKEN_U_INT16(buf, len, tok->tt.text.len, tok->len, err); in fetch_text_tok()
3919 SET_PTR((char*)buf, len, tok->tt.text.text, tok->tt.text.len, tok->len, in fetch_text_tok()
3933 print_string(fp, tok->tt.text.text, tok->tt.text.len); in print_text_tok()
3937 print_string(fp, tok->tt.text.text, tok->tt.text.len); in print_text_tok()
3951 fetch_socketex32_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_socketex32_tok() argument
3955 READ_TOKEN_U_INT16(buf, len, tok->tt.socket_ex32.domain, tok->len, in fetch_socketex32_tok()
3960 READ_TOKEN_U_INT16(buf, len, tok->tt.socket_ex32.type, tok->len, in fetch_socketex32_tok()
3965 READ_TOKEN_U_INT16(buf, len, tok->tt.socket_ex32.atype, tok->len, in fetch_socketex32_tok()
3974 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.l_port, in fetch_socketex32_tok()
3975 sizeof(uint16_t), tok->len, err); in fetch_socketex32_tok()
3980 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.l_addr, in fetch_socketex32_tok()
3981 sizeof(tok->tt.socket_ex32.l_addr[0]), tok->len, err); in fetch_socketex32_tok()
3985 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.l_addr, in fetch_socketex32_tok()
3986 sizeof(tok->tt.socket_ex32.l_addr), tok->len, err); in fetch_socketex32_tok()
3991 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.r_port, in fetch_socketex32_tok()
3992 sizeof(uint16_t), tok->len, err); in fetch_socketex32_tok()
3997 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.r_addr, in fetch_socketex32_tok()
3998 sizeof(tok->tt.socket_ex32.r_addr[0]), tok->len, err); in fetch_socketex32_tok()
4002 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.r_addr, in fetch_socketex32_tok()
4003 sizeof(tok->tt.socket_ex32.r_addr), tok->len, err); in fetch_socketex32_tok()
4063 fetch_invalid_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_invalid_tok() argument
4068 recoversize = len - (tok->len + AUDIT_TRAILER_SIZE); in fetch_invalid_tok()
4074 SET_PTR((char*)buf, len, tok->tt.invalid.data, recoversize, tok->len, in fetch_invalid_tok()
4100 fetch_zonename_tok(tokenstr_t *tok, u_char *buf, int len) in fetch_zonename_tok() argument
4104 READ_TOKEN_U_INT16(buf, len, tok->tt.zonename.len, tok->len, err); in fetch_zonename_tok()
4107 SET_PTR((char *)buf, len, tok->tt.zonename.zonename, tok->tt.zonename.len, in fetch_zonename_tok()
4108 tok->len, err); in fetch_zonename_tok()
4122 tok->tt.zonename.len); in print_zonename_tok()
4128 tok->tt.zonename.len); in print_zonename_tok()
4136 au_fetch_tok(tokenstr_t *tok, u_char *buf, int len) in au_fetch_tok() argument
4139 if (len <= 0) in au_fetch_tok()
4142 tok->len = 1; in au_fetch_tok()
4148 return (fetch_header32_tok(tok, buf, len)); in au_fetch_tok()
4151 return (fetch_header32_ex_tok(tok, buf, len)); in au_fetch_tok()
4154 return (fetch_header64_tok(tok, buf, len)); in au_fetch_tok()
4157 return (fetch_header64_ex_tok(tok, buf, len)); in au_fetch_tok()
4160 return (fetch_trailer_tok(tok, buf, len)); in au_fetch_tok()
4163 return (fetch_arg32_tok(tok, buf, len)); in au_fetch_tok()
4166 return (fetch_arg64_tok(tok, buf, len)); in au_fetch_tok()
4169 return (fetch_attr32_tok(tok, buf, len)); in au_fetch_tok()
4172 return (fetch_attr64_tok(tok, buf, len)); in au_fetch_tok()
4175 return (fetch_exit_tok(tok, buf, len)); in au_fetch_tok()
4178 return (fetch_execarg_tok(tok, buf, len)); in au_fetch_tok()
4181 return (fetch_execenv_tok(tok, buf, len)); in au_fetch_tok()
4184 return (fetch_file_tok(tok, buf, len)); in au_fetch_tok()
4187 return (fetch_newgroups_tok(tok, buf, len)); in au_fetch_tok()
4190 return (fetch_inaddr_tok(tok, buf, len)); in au_fetch_tok()
4193 return (fetch_inaddr_ex_tok(tok, buf, len)); in au_fetch_tok()
4196 return (fetch_ip_tok(tok, buf, len)); in au_fetch_tok()
4199 return (fetch_ipc_tok(tok, buf, len)); in au_fetch_tok()
4202 return (fetch_ipcperm_tok(tok, buf, len)); in au_fetch_tok()
4205 return (fetch_iport_tok(tok, buf, len)); in au_fetch_tok()
4208 return (fetch_opaque_tok(tok, buf, len)); in au_fetch_tok()
4211 return (fetch_path_tok(tok, buf, len)); in au_fetch_tok()
4214 return (fetch_process32_tok(tok, buf, len)); in au_fetch_tok()
4217 return (fetch_process32ex_tok(tok, buf, len)); in au_fetch_tok()
4220 return (fetch_process64_tok(tok, buf, len)); in au_fetch_tok()
4223 return (fetch_process64ex_tok(tok, buf, len)); in au_fetch_tok()
4226 return (fetch_return32_tok(tok, buf, len)); in au_fetch_tok()
4229 return (fetch_return64_tok(tok, buf, len)); in au_fetch_tok()
4232 return (fetch_seq_tok(tok, buf, len)); in au_fetch_tok()
4235 return (fetch_socket_tok(tok, buf, len)); in au_fetch_tok()
4238 return (fetch_sock_inet32_tok(tok, buf, len)); in au_fetch_tok()
4241 return (fetch_sock_unix_tok(tok, buf, len)); in au_fetch_tok()
4244 return (fetch_sock_inet128_tok(tok, buf, len)); in au_fetch_tok()
4247 return (fetch_subject32_tok(tok, buf, len)); in au_fetch_tok()
4250 return (fetch_subject32ex_tok(tok, buf, len)); in au_fetch_tok()
4253 return (fetch_subject64_tok(tok, buf, len)); in au_fetch_tok()
4256 return (fetch_subject64ex_tok(tok, buf, len)); in au_fetch_tok()
4259 return (fetch_text_tok(tok, buf, len)); in au_fetch_tok()
4262 return (fetch_socketex32_tok(tok, buf, len)); in au_fetch_tok()
4265 return (fetch_arb_tok(tok, buf, len)); in au_fetch_tok()
4268 return (fetch_zonename_tok(tok, buf, len)); in au_fetch_tok()
4271 return (fetch_priv_tok(tok, buf, len)); in au_fetch_tok()
4274 return (fetch_privset_tok(tok, buf, len)); in au_fetch_tok()
4277 return (fetch_invalid_tok(tok, buf, len)); in au_fetch_tok()