1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /* Copyright (c) 2019 Facebook */
3*4882a593Smuzhiyun #include <stdbool.h>
4*4882a593Smuzhiyun #include <stddef.h>
5*4882a593Smuzhiyun #include <linux/bpf.h>
6*4882a593Smuzhiyun #include <linux/ptrace.h>
7*4882a593Smuzhiyun #include <bpf/bpf_helpers.h>
8*4882a593Smuzhiyun #include <bpf/bpf_tracing.h>
9*4882a593Smuzhiyun
10*4882a593Smuzhiyun struct task_struct;
11*4882a593Smuzhiyun
12*4882a593Smuzhiyun SEC("kprobe/__set_task_comm")
BPF_KPROBE(prog1,struct task_struct * tsk,const char * buf,bool exec)13*4882a593Smuzhiyun int BPF_KPROBE(prog1, struct task_struct *tsk, const char *buf, bool exec)
14*4882a593Smuzhiyun {
15*4882a593Smuzhiyun return !tsk;
16*4882a593Smuzhiyun }
17*4882a593Smuzhiyun
18*4882a593Smuzhiyun SEC("kretprobe/__set_task_comm")
BPF_KRETPROBE(prog2,int ret)19*4882a593Smuzhiyun int BPF_KRETPROBE(prog2, int ret)
20*4882a593Smuzhiyun {
21*4882a593Smuzhiyun return ret;
22*4882a593Smuzhiyun }
23*4882a593Smuzhiyun
24*4882a593Smuzhiyun SEC("raw_tp/task_rename")
prog3(struct bpf_raw_tracepoint_args * ctx)25*4882a593Smuzhiyun int prog3(struct bpf_raw_tracepoint_args *ctx)
26*4882a593Smuzhiyun {
27*4882a593Smuzhiyun return !ctx->args[0];
28*4882a593Smuzhiyun }
29*4882a593Smuzhiyun
30*4882a593Smuzhiyun SEC("fentry/__set_task_comm")
BPF_PROG(prog4,struct task_struct * tsk,const char * buf,bool exec)31*4882a593Smuzhiyun int BPF_PROG(prog4, struct task_struct *tsk, const char *buf, bool exec)
32*4882a593Smuzhiyun {
33*4882a593Smuzhiyun return 0;
34*4882a593Smuzhiyun }
35*4882a593Smuzhiyun
36*4882a593Smuzhiyun SEC("fexit/__set_task_comm")
BPF_PROG(prog5,struct task_struct * tsk,const char * buf,bool exec)37*4882a593Smuzhiyun int BPF_PROG(prog5, struct task_struct *tsk, const char *buf, bool exec)
38*4882a593Smuzhiyun {
39*4882a593Smuzhiyun return 0;
40*4882a593Smuzhiyun }
41*4882a593Smuzhiyun
42*4882a593Smuzhiyun char _license[] SEC("license") = "GPL";
43