TRACEHOOK_REPORT_SYS(9) Kernel Internals TRACEHOOK_REPORT_SYS(9)NAMEtracehook_report_syscall_exit - task has just finished a system call
SYNOPSIS
void tracehook_report_syscall_exit(struct pt_regs * regs, int step);
ARGUMENTS
regs
user register state of current task
step
nonzero if simulating single-step or block-step
DESCRIPTION
This will be called if TIF_SYSCALL_TRACE has been set, when the current
task has just finished an attempted system call. Full user register
state is available here. It is safe to block here, preventing signals
from being processed.
If step is nonzero, this report is also in lieu of the normal trap that
would follow the system call instruction because user_enable_block_step
or user_enable_single_step was used. In this case, TIF_SYSCALL_TRACE
might not be set.
Called without locks, just before checking for pending signals.
Kernel Hackers Manual 2.6. November 2013 TRACEHOOK_REPORT_SYS(9)