5db02dd7f0
bpf_get_current_pid_tgid() returns u64, whose upper 32 bits are the same as userspace getpid() return value. Signed-off-by: Yucong Sun <sunyucong@gmail.com> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20211006185619.364369-13-fallentree@fb.com
32 lines
614 B
C
32 lines
614 B
C
// SPDX-License-Identifier: GPL-2.0
|
|
/* Copyright (c) 2021 Facebook */
|
|
#include "vmlinux.h"
|
|
#include <bpf/bpf_helpers.h>
|
|
#include <bpf/bpf_tracing.h>
|
|
|
|
char LICENSE[] SEC("license") = "GPL";
|
|
|
|
int pid = 0;
|
|
int fentry_cnt = 0;
|
|
int fexit_cnt = 0;
|
|
|
|
SEC("fentry/__x64_sys_nanosleep")
|
|
int BPF_PROG(nanosleep_fentry, const struct pt_regs *regs)
|
|
{
|
|
if (bpf_get_current_pid_tgid() >> 32 != pid)
|
|
return 0;
|
|
|
|
fentry_cnt++;
|
|
return 0;
|
|
}
|
|
|
|
SEC("fexit/__x64_sys_nanosleep")
|
|
int BPF_PROG(nanosleep_fexit, const struct pt_regs *regs, int ret)
|
|
{
|
|
if (bpf_get_current_pid_tgid() >> 32 != pid)
|
|
return 0;
|
|
|
|
fexit_cnt++;
|
|
return 0;
|
|
}
|