exec

Documentation

Overview

Package goexec provides the utilities to analyze the executable code

Index

• Constants
• func EnvVars(pid int32) (map[string]string, error)
• func FindExeSymbols(f *elf.File, symbolNames []string) (map[string]Sym, error)
• func FindLibMaps(pid int32) ([]*procfs.ProcMap, error)
• func FindNamespace(pid int32) (uint32, error)
• func FindNamespacedPids(pid int32) ([]uint32, error)
• func FindProcLanguage(pid int32) svc.InstrumentableType
• func LibPath(name string, maps []*procfs.ProcMap) *procfs.ProcMap
• func LibPathPlain(name string, maps []*procfs.ProcMap) *procfs.ProcMap
• type FileInfo
  • func FindExecELF(p *services.ProcessInfo, svcID svc.Attrs, k8sEnabled bool) (*FileInfo, error)
  • func (fi *FileInfo) ExecutableName() string
• type ProcessEvent
• type ProcessEventType
• type Sym

Constants

const (
	ProcessEventCreated = ProcessEventType(iota)
	ProcessEventTerminated
)

Functions

func EnvVars

func EnvVars(pid int32) (map[string]string, error)

func FindExeSymbols

func FindExeSymbols(f *elf.File, symbolNames []string) (map[string]Sym, error)

func FindLibMaps

func FindLibMaps(pid int32) ([]*procfs.ProcMap, error)

func FindNamespace

func FindNamespace(pid int32) (uint32, error)

func FindNamespacedPids

func FindNamespacedPids(pid int32) ([]uint32, error)

func FindProcLanguage

func FindProcLanguage(pid int32) svc.InstrumentableType

func LibPath

func LibPath(name string, maps []*procfs.ProcMap) *procfs.ProcMap

func LibPathPlain

func LibPathPlain(name string, maps []*procfs.ProcMap) *procfs.ProcMap

Types

type FileInfo

type FileInfo struct {
	Service svc.Attrs

	CmdExePath     string
	ProExeLinkPath string
	ELF            *elf.File
	Pid            int32
	Ppid           int32
	Ino            uint64
	Ns             uint32
}

func FindExecELF

func FindExecELF(p *services.ProcessInfo, svcID svc.Attrs, k8sEnabled bool) (*FileInfo, error)

func (*FileInfo) ExecutableName

func (fi *FileInfo) ExecutableName() string

type ProcessEvent

type ProcessEvent struct {
	File *FileInfo
	Type ProcessEventType
}

type ProcessEventType

type ProcessEventType int

type Sym

type Sym struct {
	Off  uint64
	Len  uint64
	Prog *elf.Prog
}