|
@@ -571,8 +571,8 @@ auditsys:
|
|
|
* masked off.
|
|
|
*/
|
|
|
sysret_audit:
|
|
|
- movq %rax,%rsi /* second arg, syscall return value */
|
|
|
- cmpq $0,%rax /* is it < 0? */
|
|
|
+ movq RAX-ARGOFFSET(%rsp),%rsi /* second arg, syscall return value */
|
|
|
+ cmpq $0,%rsi /* is it < 0? */
|
|
|
setl %al /* 1 if so, 0 if not */
|
|
|
movzbl %al,%edi /* zero-extend that into %edi */
|
|
|
inc %edi /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */
|