btf

func AvailableSyscalls ¶ added in v0.11.0

func AvailableSyscalls() ([]string, error)

AvailableSyscalls returns the list of available syscalls.

It uses syscallinfo.SyscallsNames() and filters calls via information in BTF.

func FindBTFFuncParamFromHook ¶ added in v1.5.0

func FindBTFFuncParamFromHook(hook string, argIndex int) (*btf.FuncParam, error)

func FindBTFStruct ¶ added in v1.6.0

func FindBTFStruct(name string) (*btf.Struct, error)

func GetCachedBTFFile ¶

func GetCachedBTFFile() string

func GetSyscallsList ¶ added in v0.11.0

func GetSyscallsList() ([]string, error)

func InitCachedBTF ¶

func InitCachedBTF(lib, btf string) error

func NewBTF ¶

func NewBTF() (*btf.Spec, error)

func ResolveBTFPath ¶ added in v1.5.0

func ResolveBTFPath(
	btfArgs *[api.MaxBTFArgDepth]api.ConfigBTFArg,
	currentType btf.Type,
	pathToFound []string,
	i int,
) (*btf.Type, error)

Return: The last type found matching the path, or error.

func ResolveNestedTypes ¶ added in v1.4.0

func ResolveNestedTypes(ty btf.Type) btf.Type

func ValidateKprobeSpec ¶

func ValidateKprobeSpec(bspec *btf.Spec, call string, kspec *v1alpha1.KProbeSpec, ks *ksyms.Ksyms) error

ValidateKprobeSpec validates a kprobe spec based on BTF information

NB: turns out we need more than BTF information for the validation (see syscalls). We still keep this code in the btf package for now, and we can move it once we found a better home for it.