Expand description
Flags used as an argument to many system calls
Structs§
- Event
Flags - Fobtain
FdFlags - MapFlags
- Mremap
Flags - Munmap
Flags - Ptrace
Flags - RwFlags
- Send
FdFlags - Sigcontrol
Flags - Wait
Flags
Constants§
- ADDRSPACE_
OP_ MMAP - ADDRSPACE_
OP_ MPROTECT - ADDRSPACE_
OP_ MUNMAP - ADDRSPACE_
OP_ TRANSFER - APPEND
- CLOCK_
MONOTONIC - CLOCK_
REALTIME - EVENT_
NONE - EVENT_
READ - EVENT_
WRITE - FIXED
- FIXED_
REPLACE - FUTEX_
REQUEUE - FUTEX_
WAIT - FUTEX_
WAIT64 - FUTEX_
WAKE - F_DUPFD
- F_GETFD
- F_GETFL
- F_SETFD
- F_SETFL
- INHIBIT_
DELIVERY - Prevents the kernel from jumping the context to the signal trampoline, but otherwise has absolutely no effect on which signals are blocked etc. Meant to be used for short-lived critical sections inside libc.
- KEEP_
OLD - Alias’s memory region at
old_address
tonew_address
such that both regions share the same frames. - MAP_
FIXED - MAP_
FIXED_ NOREPLACE - MAP_
LAZY - For userspace-backed mmaps, return from the mmap call before all pages have been provided by the scheme. This requires the scheme to be trusted, as the current context can block indefinitely, if the scheme does not respond to the page fault handler’s request, as it tries to map the page by requesting it from the scheme.
- MAP_
PRIVATE - MAP_
SHARED - MODE_
CHR - MODE_
DIR - MODE_
FIFO - MODE_
FILE - MODE_
PERM - MODE_
SETGID - MODE_
SETUID - MODE_
SYMLINK - MODE_
TYPE - NEEDS_
SYNC - Indicates whether the funmap call must implicitly do an msync, for the changes to become visible later.
- NONBLOCK
- O_
ACCMODE - O_
APPEND - O_ASYNC
- O_
CLOEXEC - O_CREAT
- O_
DIRECTORY - O_EXCL
- O_
EXLOCK - O_FSYNC
- O_
NOFOLLOW - O_
NONBLOCK - O_
RDONLY - O_RDWR
- O_
SHLOCK - O_STAT
- O_
SYMLINK - O_TRUNC
- O_
WRONLY - PROT_
EXEC - PROT_
NONE - PROT_
READ - PROT_
WRITE - PTRACE_
EVENT_ ADDRSPACE_ SWITCH - Sent when current-addrspace is changed, allowing the tracer to reopen the memory file.
- PTRACE_
EVENT_ CLONE - Sent when a child is cloned, giving you the opportunity to trace it. If you don’t catch this, the child is started as normal.
- PTRACE_
EVENT_ MASK - PTRACE_
FLAG_ IGNORE - Special meaning, depending on the event. Usually, when fired before an action, it will skip performing that action.
- PTRACE_
FLAG_ MASK - PTRACE_
STOP_ BREAKPOINT - Stop on a software breakpoint, such as the int3 instruction for x86_64.
- PTRACE_
STOP_ EXIT - Stop just before exiting for good.
- PTRACE_
STOP_ MASK - PTRACE_
STOP_ POST_ SYSCALL - Stop after a syscall is handled.
- PTRACE_
STOP_ PRE_ SYSCALL - Stop before a syscall is handled. Send PTRACE_FLAG_IGNORE to not handle the syscall.
- PTRACE_
STOP_ SIGNAL - Stop before a signal is handled. Send PTRACE_FLAG_IGNORE to not handle signal.
- PTRACE_
STOP_ SINGLESTEP - Stop after exactly one instruction. TODO: This may not handle fexec/signal boundaries. Should it?
- SEEK_
CUR - SEEK_
END - SEEK_
SET - SIGABRT
- SIGALRM
- SIGBUS
- SIGCHLD
- SIGCONT
- SIGFPE
- SIGHUP
- SIGILL
- SIGINT
- SIGIO
- SIGKILL
- SIGPIPE
- SIGPROF
- SIGPWR
- SIGQUIT
- SIGSEGV
- SIGSTKFLT
- SIGSTOP
- SIGSYS
- SIGTERM
- SIGTRAP
- SIGTSTP
- SIGTTIN
- SIGTTOU
- SIGURG
- SIGUSR1
- SIGUSR2
- SIGVTALRM
- SIGWINCH
- SIGXCPU
- SIGXFSZ
- SKMSG_
FOBTAINFD - SKMSG_
FRETURNFD - SKMSG_
PROVIDE_ MMAP - WCONTINUED
- WNOHANG
- WUNTRACED
Functions§
- wcoredump
- True if status indicates a core dump was created.
- wexitstatus
- If wifexited(status), the exit status.
- wifcontinued
- True if status indicates the child continued after a stop.
- wifexited
- True if status indicates normal termination.
- wifsignaled
- True if STATUS indicates termination by a signal.
- wifstopped
- True if status indicates the child is stopped.
- wstopsig
- If wifstopped(status), the signal that stopped the child.
- wtermsig
- If wifsignaled(status), the terminating signal.