1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
// SPDX-License-Identifier: GPL-2.0
/* Copyright (c) 2024 Meta Platforms, Inc. and affiliates. */
#include "vmlinux.h"
#include <bpf/bpf_helpers.h>
#include "bpf_misc.h"
char _license[] SEC("license") = "GPL";
struct inner_array_type {
__uint(type, BPF_MAP_TYPE_ARRAY);
__uint(map_flags, BPF_F_MMAPABLE);
__type(key, __u32);
__type(value, __u64);
__uint(max_entries, 1);
} inner_array SEC(".maps");
struct {
__uint(type, BPF_MAP_TYPE_HASH_OF_MAPS);
__uint(key_size, 4);
__uint(value_size, 4);
__uint(max_entries, 1);
__array(values, struct inner_array_type);
} outer_map SEC(".maps");
int pid = 0;
__u64 match_value = 0x13572468;
bool done = false;
bool pid_match = false;
bool outer_map_match = false;
SEC("fentry/" SYS_PREFIX "sys_nanosleep")
int add_to_list_in_inner_array(void *ctx)
{
__u32 curr_pid, zero = 0;
struct bpf_map *map;
__u64 *value;
curr_pid = (u32)bpf_get_current_pid_tgid();
if (done || curr_pid != pid)
return 0;
pid_match = true;
map = bpf_map_lookup_elem(&outer_map, &curr_pid);
if (!map)
return 0;
outer_map_match = true;
value = bpf_map_lookup_elem(map, &zero);
if (!value)
return 0;
*value = match_value;
done = true;
return 0;
}
|
