Merge pull request #29 from hzy-hits/main

 - samples/syscount: add syscount tool
 - rex/tracepoint: add RawSyscallEnter/ExitCtx struct
 - rex-macros/tracepoint: add RawSyscallEnter/Exit Ctx events

Signed-off-by: Jinghao Jia <jinghao7@illinois.edu>

Author: jinghao-jia

rex-macros/src/tracepoint.rs

@@ -64,6 +64,8 @@ impl TracePoint {
             "SyscallsExitOpenCtx" => "syscalls/sys_exit_open",
             "SyscallsExitOpenatCtx" => "syscalls/sys_exit_openat",
             "SyscallsEnterDupCtx" => "syscalls/sys_enter_dup",
+            "RawSyscallsEnterCtx" => "raw_syscalls/sys_enter",
+            "RawSyscallsExitCtx" => "raw_syscalls/sys_exit",
             _ => abort_call_site!("Please provide a valid context type. If your needed context isn't supported consider opening a PR!"),
         };
         let attached_name = format!("rex/tracepoint/{}", hook_point_name);

rex/src/tracepoint/binding.rs

@@ -42,3 +42,19 @@ pub struct SyscallsEnterDupCtx {
     pub syscall_nr: i64,
     pub fildes: u64,
 }
+
+#[repr(C)]
+#[derive(Debug, Copy, Clone)]
+pub struct RawSyscallsEnterCtx {
+    unused: u64,
+    pub id: i64,
+    pub args: [u64; 6],
+}
+
+#[repr(C)]
+#[derive(Debug, Copy, Clone)]
+pub struct RawSyscallsExitCtx {
+    unused: u64,
+    pub id: i64,
+    pub ret: i64,
+}

samples/meson.build

@@ -14,3 +14,4 @@ subdir('syscall_tp')
 subdir('trace_event')
 subdir('tracex5')
 subdir('xdp_test')
+subdir('syscount')

samples/syscount/.cargo/config.toml

@@ -0,0 +1,16 @@
+[build]
+target = "x86_64-unknown-none"
+
+[target.x86_64-unknown-none]
+linker = "ld.mold"
+rustflags = [
+    "-Zthreads=8",
+    "-Cforce-frame-pointers=y",
+    "-Csymbol-mangling-version=v0",
+    "-Ccodegen-units=1",
+    "-Crelocation-model=pie",
+    "-Crelro-level=full",
+]
+
+[unstable]
+build-std = ["core"]

samples/syscount/Cargo.lock

@@ -0,0 +1,28 @@
+[package]
+name = "syscount"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+
+[dependencies.rex]
+path = "../../rex"
+
+[lints.clippy]
+disallowed_methods = "forbid"
+disallowed_types = "forbid"
+
+[lints.rust]
+incomplete_features = "forbid"
+internal_features = "forbid"
+unsafe_code = "forbid"
+unstable_features = "forbid"
+
+[profile.dev]
+panic = "abort"
+debug = false
+
+[profile.release]
+panic = "abort"
+debug = false
+lto = true

samples/syscount/Cargo.toml

@@ -0,0 +1,7 @@
+disallowed-methods = [
+	"core::mem::forget",
+]
+
+disallowed-types = [
+	"core::mem::ManuallyDrop",
+]