mirror of
https://github.com/hanzoai/visor.git
synced 2026-09-24 17:04:14 +00:00
The systrap platform like the ptrace platform uses stub processes to manage the user address space. The difference is how they intercept system calls and other events like memory faults, exceptions, etc. In case of systrap, all events that have to be handled by the Sentry trigger signals that are handled by a custom signal handler installed on stub processes. The signal handler switches control to the Sentry. Here are a few other optimizations: * On x86, system calls can be replaced with a function call to remove overhead of signals. * For fast interactions of sentry and stub processes, futex wait/wake can be a bottle neck, so we use a polling mode. The platform is launched for the purpose of testing and gathering initial feedback. It is not yet ready for use in production. PiperOrigin-RevId: 511650064
40 lines
1.2 KiB
Go
40 lines
1.2 KiB
Go
// Copyright 2021 The gVisor Authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package systrap
|
|
|
|
import (
|
|
"gvisor.dev/gvisor/pkg/hostarch"
|
|
)
|
|
|
|
const syscallStubMessageOffset = hostarch.PageSize
|
|
|
|
// syscallSentryMessage is a shared message that can be changed only from the
|
|
// Sentry and a stub process can only read it.
|
|
type syscallSentryMessage struct {
|
|
state uint32
|
|
unused uint32
|
|
sysno uint64
|
|
args [6]uint64
|
|
}
|
|
|
|
// syscallStubMessage is a shared message that can be changed from a stub
|
|
// process. It is used to notify the Sentry that a requested system call has
|
|
// been executed.
|
|
//
|
|
// Attention: It can be compromised by user threads.
|
|
type syscallStubMessage struct {
|
|
ret uint64
|
|
}
|