Module tracer 

The ptrace event loop. Runs on the thread that forked the first tracee.

Tracees are seized, so stops are unambiguous: seccomp-trace stops for the tier-two syscalls, exec events (to keep /proc/self/exe bookkeeping honest), clone/fork events (to copy bookkeeping to the child), and PTRACE_EVENT_STOP for group-stops and freshly attached children. A group-stop gets PTRACE_LISTEN so job control keeps working; every other stop is resumed. Signal-delivery stops are forwarded unchanged.

Functions

address_space_summary 🔒

One line describing a tracee’s address space, for fatal-signal reports: where the heap and stack are, how much is mapped, and the largest free gap below 4 GiB (what a 32-bit process has left to allocate from).

creator 🔒

The tracee whose fork or clone event registers pid: its thread group’s leader for a new thread, else its parent process. None once it is gone.

options

Ptrace options for every tracee.

resume 🔒

Resumes a tracee held at its first stop.

run

Runs the loop until every tracee has exited.