* Calls to manipulate elements of the audit record structure from system * call code. Macro wrappers will prevent this functions from being entered * if auditing is disabled, avoiding the function call cost. We check the * thread audit record pointer anyway, as the audit condition could change, * and pre-selection may not have allocated an audit record for this event. * * XXXAUDIT: Should
| 70 | * hasn't already been filled in? |
| 71 | */ |
| 72 | void |
| 73 | audit_arg_addr(void *addr) |
| 74 | { |
| 75 | struct kaudit_record *ar; |
| 76 | |
| 77 | ar = currecord(); |
| 78 | if (ar == NULL) |
| 79 | return; |
| 80 | |
| 81 | ar->k_ar.ar_arg_addr = addr; |
| 82 | ARG_SET_VALID(ar, ARG_ADDR); |
| 83 | } |
| 84 | |
| 85 | void |
| 86 | audit_arg_exit(int status, int retval) |
nothing calls this directly
no test coverage detected