(f Field, e *event.Event)
| 89 | func newPSAccessor(psnap psnap.Snapshotter) Accessor { return &psAccessor{psnap: psnap} } |
| 90 | |
| 91 | func (ps *psAccessor) Get(f Field, e *event.Event) (params.Value, error) { |
| 92 | switch f.Name { |
| 93 | case fields.PsPid: |
| 94 | return e.PID, nil |
| 95 | case fields.PsPpid: |
| 96 | ps := e.PS |
| 97 | if ps == nil { |
| 98 | return nil, ErrPsNil |
| 99 | } |
| 100 | return ps.Ppid, nil |
| 101 | case fields.PsName: |
| 102 | ps := e.PS |
| 103 | if ps == nil { |
| 104 | return nil, ErrPsNil |
| 105 | } |
| 106 | return ps.Name, nil |
| 107 | case fields.PsComm, fields.PsCmdline: |
| 108 | ps := e.PS |
| 109 | if ps == nil { |
| 110 | return nil, ErrPsNil |
| 111 | } |
| 112 | return ps.Cmdline, nil |
| 113 | case fields.PsExe: |
| 114 | ps := e.PS |
| 115 | if ps == nil { |
| 116 | return nil, ErrPsNil |
| 117 | } |
| 118 | return ps.Exe, nil |
| 119 | case fields.PsArgs: |
| 120 | ps := e.PS |
| 121 | if ps == nil { |
| 122 | return nil, ErrPsNil |
| 123 | } |
| 124 | return ps.Args, nil |
| 125 | case fields.PsCwd: |
| 126 | ps := e.PS |
| 127 | if ps == nil { |
| 128 | return nil, ErrPsNil |
| 129 | } |
| 130 | return ps.Cwd, nil |
| 131 | case fields.PsSID: |
| 132 | ps := e.PS |
| 133 | if ps == nil { |
| 134 | return nil, ErrPsNil |
| 135 | } |
| 136 | return ps.SID, nil |
| 137 | case fields.PsIsWOW64Field: |
| 138 | ps := e.PS |
| 139 | if ps == nil { |
| 140 | return nil, ErrPsNil |
| 141 | } |
| 142 | return ps.IsWOW64, nil |
| 143 | case fields.PsIsPackagedField: |
| 144 | ps := e.PS |
| 145 | if ps == nil { |
| 146 | return nil, ErrPsNil |
| 147 | } |
| 148 | return ps.IsPackaged, nil |
nothing calls this directly
no test coverage detected