Commit ff00f9cb authored by Andrii Nakryiko's avatar Andrii Nakryiko Committed by Daniel Borkmann
Browse files

libbpf: Define i386 syscall regs spec in bpf_tracing.h 



Define explicit table of registers used for syscall argument passing.

Signed-off-by: default avatarAndrii Nakryiko <andrii@kernel.org>
Signed-off-by: default avatarDaniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20230120200914.3008030-15-andrii@kernel.org
parent d21fbcee

tools/lib/bpf/bpf_tracing.h

+8 −0
Original line number Diff line number Diff line
@@ -115,6 +115,14 @@ 
#define __PT_PARM1_REG eax

#define __PT_PARM2_REG edx

#define __PT_PARM3_REG ecx

/* i386 syscall ABI is very different, refer to syscall(2) manpage */

#define __PT_PARM1_SYSCALL_REG ebx

#define __PT_PARM2_SYSCALL_REG ecx

#define __PT_PARM3_SYSCALL_REG edx

#define __PT_PARM4_SYSCALL_REG esi

#define __PT_PARM5_SYSCALL_REG edi

#define __PT_PARM6_SYSCALL_REG ebp



#define __PT_RET_REG esp

#define __PT_FP_REG ebp

#define __PT_RC_REG eax