函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-27 12:31:10
Last Modify:2020-03-17 16:31:21 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：handle_one

函数原型：static inline void handle_one(const struct inode *inode)

返回类型：void

参数：

类型参数名称
const struct inode *inode
1742  如果此条件成立可能性大(为编译器优化)(!i_fsnotify_marks)则返回
1744  context等于audit_context()
1745  p等于trees
1746  count等于tree_count
1747  _read_lock() - mark the beginning of an RCU read-side critical section* When synchronize_rcu() is invoked on one CPU while other CPUs* are within RCU read-side critical sections, then the* synchronize_rcu() is guaranteed to block until after all the other
1748  chunk等于alled under rcu_read_lock
1749  _read_unlock() - marks the end of an RCU read-side critical section.* In most situations, rcu_read_unlock() is immune from deadlock.* However, in kernels built with CONFIG_RCU_BOOST, rcu_read_unlock()
1750  如果非chunk则返回
1752  如果此条件成立可能性大(为编译器优化)(put_tree_ref(context, chunk))则返回
1754  如果此条件成立可能性小(为编译器优化)(!grow_tree_refs(context))则
1755  打印警告信息("out of memory, audit has lost a tree reference\n")
1756  We keep a linked list of fixed-sized (31 pointer) arrays of audit_chunk *;* ->first_trees points to its beginning, ->trees - to the current end of data
1757  audit_put_chunk(chunk)
1758  unroll_tree_refs(context, p, count)
1759  返回
1761  put_tree_ref(context, chunk)
调用者
名称描述
__audit_inode_child__audit_inode_child - collect inode info for created/removed objects*@parent: inode of dentry parent*@dentry: dentry being audited*@type: AUDIT_TYPE_* value that we're looking for* For syscalls that create or remove filesystem objects, audit_inode