|
@@ -130,6 +130,7 @@ static int event__synthesize_mmap_events(pid_t pid, pid_t tgid,
|
|
|
continue;
|
|
|
pbf += n + 3;
|
|
|
if (*pbf == 'x') { /* vm_exec */
|
|
|
+ u64 vm_pgoff;
|
|
|
char *execname = strchr(bf, '/');
|
|
|
|
|
|
/* Catch VDSO */
|
|
@@ -139,6 +140,14 @@ static int event__synthesize_mmap_events(pid_t pid, pid_t tgid,
|
|
|
if (execname == NULL)
|
|
|
continue;
|
|
|
|
|
|
+ pbf += 3;
|
|
|
+ n = hex2u64(pbf, &vm_pgoff);
|
|
|
+ /* pgoff is in bytes, not pages */
|
|
|
+ if (n >= 0)
|
|
|
+ ev.mmap.pgoff = vm_pgoff << getpagesize();
|
|
|
+ else
|
|
|
+ ev.mmap.pgoff = 0;
|
|
|
+
|
|
|
size = strlen(execname);
|
|
|
execname[size - 1] = '\0'; /* Remove \n */
|
|
|
memcpy(ev.mmap.filename, execname, size);
|