Enum Abi 

pub enum Abi {
    X86_64,
    I386,
    Aarch64,
    Arm,
}

The ABI a request came through.

Variants

X86_64

I386

Aarch64

Arm

32-bit ARM (EABI) compat on an aarch64 kernel.

Implementations

impl Abi

pub fn from_audit(arch: u32) -> Option<Abi>

ABI from a seccomp arch field; None for x32 and anything else.

pub fn native() -> Abi

The 64-bit ABI of the host this binary was built for.

pub fn compat() -> Abi

The 32-bit compat ABI of the host, if any.

pub fn audit(self) -> u32

Audit arch value the kernel reports for this ABI.

pub fn ptr_size(self) -> usize

Size of a pointer in the tracee.

pub fn to_canonical(self, nr: i64) -> Option<(i64, Variant)>

Maps a syscall number of this ABI onto the canonical (x86_64) number.

Arguments

• nr - Syscall number as the tracee issued it.

Returns

The canonical number and the argument variant, or None when the syscall is not one we filter (or the ABI is not served).

pub fn open_flags_arg(self, nr: i64) -> Option<usize>

This ABI’s number for a canonical open-family syscall, with the index of its flags argument (for the filter’s O_PATH routing).

pub fn open_flags_to_host(self, flags: i64) -> i64

Converts this ABI’s open(2) flag bits into the host’s.

The generic values are shared by x86 and aarch64; ARM differs in O_DIRECTORY, O_NOFOLLOW, O_DIRECT and O_LARGEFILE, so a 32-bit ARM caller’s flags are remapped before any handler interprets them.

Arguments

• flags - Flags as the tracee passed them.

pub fn socketcall_nr(self) -> Option<i64>

The legacy socketcall multiplexer of this ABI, if it has one.

i386 glibc issues every socket operation through it, so a 32-bit program’s bind and connect arrive here rather than as syscalls.

pub fn numbers_for(self, canonical: &[i64]) -> Vec<i64>

This ABI’s numbers for every canonical syscall in canonical.

Arguments

• canonical - x86_64 numbers (the lists in syscall).

Trait Implementations

impl Clone for Abi

fn clone(&self) -> Abi

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Abi

impl Debug for Abi

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Abi

impl PartialEq for Abi

fn eq(&self, other: &Abi) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Abi