Lines Matching full:payload
206 void* payload,
209 void* payload_start = payload;
217 bpf_probe_read_kernel_str(payload, MAX_PATH,
220 return payload;
222 *root_pos = payload - payload_start;
224 payload += filepart_length;
228 return payload;
251 void* payload)
304 bpf_probe_read_kernel_str(payload, MAX_PATH,
308 payload += cgroup_root_length;
312 bpf_probe_read_kernel_str(payload, MAX_PATH,
316 payload += cgroup_proc_length;
321 void* payload_end_pos = read_full_cgroup_path(proc_kernfs, root_kernfs, payload,
323 cgroup_data->cgroup_full_length = payload_end_pos - payload;
324 payload = payload_end_pos;
327 return (void*)payload;
332 u32 pid, void* payload)
343 size_t comm_length = bpf_core_read_str(payload, TASK_COMM_LEN, &task->comm);
346 payload += comm_length;
349 return (void*)payload;
362 void* payload = populate_var_metadata(&kill_data->meta, task, spid, kill_data->payload);
363 payload = populate_cgroup_info(&kill_data->cgroup_data, task, payload);
364 size_t payload_length = payload - (void*)kill_data->payload;
476 read_absolute_file_path_from_dentry(struct dentry* filp_dentry, void* payload)
487 bpf_probe_read_kernel_str(payload, MAX_PATH,
492 payload += filepart_length;
563 void* payload = populate_var_metadata(&sysctl_data->meta, task, pid, sysctl_data->payload);
564 payload = populate_cgroup_info(&sysctl_data->cgroup_data, task, payload);
571 size_t sysctl_val_length = bpf_probe_read_kernel_str(payload,
575 payload += sysctl_val_length;
579 bpf_probe_read_kernel_str(payload, MAX_PATH,
584 payload += sysctl_path_length;
588 unsigned long data_len = payload - (void*)sysctl_data;
638 void* payload = kill_data->payload;
642 payload += offset;
647 size_t comm_length = bpf_core_read_str(payload, TASK_COMM_LEN, &task->comm);
650 payload += comm_length;
654 bpf_probe_read_kernel_str(payload,
659 payload += cgroup_proc_length;
663 unsigned long data_len = (void*)payload - (void*)kill_data;
704 void* payload = populate_var_metadata(&proc_exec_data->meta, task, pid,
705 proc_exec_data->payload);
706 payload = populate_cgroup_info(&proc_exec_data->cgroup_data, task, payload);
716 bpf_probe_read_kernel_str(payload, MAX_FILENAME_LEN, filename);
719 payload += bin_path_length;
724 unsigned int cmdline_length = probe_read_lim(payload, arg_start,
729 payload += cmdline_length;
735 unsigned long env_len = probe_read_lim(payload, env_start,
739 payload += env_len;
744 unsigned long data_len = payload - (void*)proc_exec_data;
799 void* payload = populate_var_metadata(&filemod_data->meta, task, pid,
800 filemod_data->payload);
801 payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);
803 size_t len = read_absolute_file_path_from_dentry(filp_dentry, payload);
805 payload += len;
809 unsigned long data_len = payload - (void*)filemod_data;
852 void* payload = populate_var_metadata(&filemod_data->meta, task, pid,
853 filemod_data->payload);
854 payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);
856 size_t len = read_absolute_file_path_from_dentry(old_dentry, payload);
858 payload += len;
862 len = read_absolute_file_path_from_dentry(new_dentry, payload);
864 payload += len;
869 unsigned long data_len = payload - (void*)filemod_data;
907 void* payload = populate_var_metadata(&filemod_data->meta, task, pid,
908 filemod_data->payload);
909 payload = populate_cgroup_info(&filemod_data->cgroup_data, task, payload);
911 size_t len = bpf_probe_read_kernel_str(payload, MAX_FILEPATH_LENGTH,
914 payload += len;
917 len = read_absolute_file_path_from_dentry(dentry, payload);
919 payload += len;
923 unsigned long data_len = payload - (void*)filemod_data;
946 void* payload = populate_var_metadata(&fork_data->meta, child,
947 BPF_CORE_READ(child, pid), fork_data->payload);
953 unsigned long data_len = payload - (void*)fork_data;