1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
|
/*
Copyright (C) 2021 The Falco Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
#define UESTORAGE_INITIAL_BUFSIZE 256
///////////////////////////////////////////////////////////////////////////////
// A partial tracer
///////////////////////////////////////////////////////////////////////////////
class sinsp_partial_tracer
{
public:
sinsp_partial_tracer()
{
m_tags_storage = (char*)malloc(UESTORAGE_INITIAL_BUFSIZE);
m_argnames_storage = (char*)malloc(UESTORAGE_INITIAL_BUFSIZE);
m_argvals_storage = (char*)malloc(UESTORAGE_INITIAL_BUFSIZE);
m_tags_storage_size = UESTORAGE_INITIAL_BUFSIZE;
m_argnames_storage_size = UESTORAGE_INITIAL_BUFSIZE;
m_argvals_storage_size = UESTORAGE_INITIAL_BUFSIZE;
}
~sinsp_partial_tracer()
{
if(m_tags_storage)
{
free(m_tags_storage);
}
if(m_argnames_storage)
{
free(m_argnames_storage);
}
if(m_argvals_storage)
{
free(m_argvals_storage);
}
}
inline bool compare(sinsp_partial_tracer* other)
{
if(m_id != other->m_id)
{
return false;
}
if(m_tags_len != other->m_tags_len)
{
return false;
}
if(memcmp(m_tags_storage,
other->m_tags_storage,
m_tags_len) == 0)
{
return true;
}
return false;
}
inline bool compare(sinsp_partial_tracer* other, uint32_t len)
{
if(m_id != other->m_id)
{
return false;
}
if(len != other->m_tags_len - 1)
{
return false;
}
if(memcmp(m_tags_storage,
other->m_tags_storage,
len) == 0)
{
return true;
}
return false;
}
char* m_tags_storage;
char* m_argnames_storage;
char* m_argvals_storage;
uint32_t m_tags_len;
uint32_t m_argnames_len;
uint32_t m_argvals_len;
uint32_t m_tags_storage_size;
uint32_t m_argnames_storage_size;
uint32_t m_argvals_storage_size;
uint64_t m_id;
vector<char*> m_tags;
vector<char*> m_argnames;
vector<char*> m_argvals;
vector<uint32_t> m_taglens;
vector<uint32_t> m_argnamelens;
vector<uint32_t> m_argvallens;
uint32_t m_ntags;
uint32_t m_nargs;
uint64_t m_time;
uint64_t m_tid;
};
///////////////////////////////////////////////////////////////////////////////
// tracer parser
///////////////////////////////////////////////////////////////////////////////
class sinsp_tracerparser
{
public:
enum parse_result
{
RES_OK = 0,
RES_COMMA = 1,
RES_FAILED = 2,
RES_TRUNCATED = 3,
};
sinsp_tracerparser(sinsp *inspector);
~sinsp_tracerparser();
uint32_t get_storage_size()
{
return m_storage_size;
}
void set_storage_size(uint32_t newsize);
parse_result process_event_data(char *data, uint32_t datalen, uint64_t ts);
inline void parse_json(char* evtstr);
inline void parse_simple(char* evtstr);
sinsp_partial_tracer* find_parent_enter_pae();
void test();
char* m_type_str;
int64_t m_id;
vector<char*> m_tags;
vector<char*> m_argnames;
vector<char*> m_argvals;
vector<uint32_t> m_taglens;
vector<uint32_t> m_argnamelens;
vector<uint32_t> m_argvallens;
pair<vector<char*>*, vector<char*>*> m_args;
uint32_t m_tot_taglens;
uint32_t m_tot_argnamelens;
uint32_t m_tot_argvallens;
sinsp_partial_tracer* m_enter_pae;
sinsp_partial_tracer m_exit_pae;
sinsp_threadinfo* m_tinfo;
VISIBILITY_PRIVATE
inline parse_result skip_spaces(char* p, uint32_t* delta);
inline parse_result skip_spaces_and_commas(char* p, uint32_t* delta, uint32_t n_expected_commas);
inline parse_result skip_spaces_and_char(char* p, uint32_t* delta, char char_to_skip);
inline parse_result skip_spaces_and_commas_and_sq_brackets(char* p, uint32_t* delta);
inline parse_result skip_spaces_and_commas_and_cr_brackets(char* p, uint32_t* delta);
inline parse_result skip_spaces_and_commas_and_all_brackets(char* p, uint32_t* delta);
inline parse_result parsestr(char* p, char** res, uint32_t* delta);
inline parse_result parsestr_not_enforce(char* p, char** res, uint32_t* delta);
inline parse_result parsenumber(char* p, int64_t* res, uint32_t* delta);
inline parse_result parsenumber_colend(char* p, int64_t* res, uint32_t* delta);
inline void init_partial_tracer(sinsp_partial_tracer* pae);
inline void delete_char(char* p);
string m_fullfragment_storage_str;
sinsp *m_inspector;
char* m_storage;
uint32_t m_storage_size;
uint32_t m_fragment_size;
sinsp_tracerparser::parse_result m_res;
uint32_t m_storlen;
friend class sinsp_parser;
};
|
