Sindbad~EG File Manager
# sigreturn __________________________________________________
# int sys_sigreturn(unsigned long __unused)
#
@define _SYSCALL_SIGRETURN_NAME
%(
name = "sigreturn"
%)
@define _SYSCALL_SIGRETURN_ARGSTR
%(
argstr = ""
%)
probe syscall.sigreturn = dw_syscall.sigreturn !, nd_syscall.sigreturn ? {}
probe syscall.sigreturn.return = dw_syscall.sigreturn.return !,
nd_syscall.sigreturn.return ? {}
# dw_sigreturn _____________________________________________________
probe dw_syscall.sigreturn = kernel.function("sys_sigreturn").call ?,
kernel.function("sys32_sigreturn").call ?
{
@_SYSCALL_SIGRETURN_NAME
@_SYSCALL_SIGRETURN_ARGSTR
}
probe dw_syscall.sigreturn.return = kernel.function("sys_sigreturn").return ?,
kernel.function("sys32_sigreturn").return ?
{
@_SYSCALL_SIGRETURN_NAME
%( arch == "mips" && CONFIG_TRAD_SIGNALS == "y" %?
retstr = "void"
%:
@SYSC_RETVALSTR($return)
%)
}
# nd_sigreturn _____________________________________________________
probe nd_syscall.sigreturn = kprobe.function("sys_sigreturn") ?,
kprobe.function("sys32_sigreturn") ?
{
@_SYSCALL_SIGRETURN_NAME
@_SYSCALL_SIGRETURN_ARGSTR
}
probe nd_syscall.sigreturn.return = kprobe.function("sys_sigreturn").return ?,
kprobe.function("sys32_sigreturn").return ?
{
@_SYSCALL_SIGRETURN_NAME
@SYSC_RETVALSTR(returnval())
}
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists