Method handleStatx

cmd/run/engine/process/handle.go:216–249

handleStatx handles the statx(2) syscall.

(n *seccomp.Notif, dirfd int, pathAddr uintptr, flags int, mask int, bufAddr uintptr)

// handleStatx handles the statx(2) syscall.
func (p *Process) handleStatx(n *seccomp.Notif, dirfd int, pathAddr uintptr, flags int, mask int, bufAddr uintptr) error {
	path, errno, err := p.resolvePath(n, dirfd, pathAddr)
	if err != nil {
		return fmt.Errorf("resolve path: %w", err)
	}
	if errno != 0 {
		return n.Return(0, errno)
	}
	if !tls.Enabled || !tls.IsKnownPath(path) {
		return n.Skip()
	}

	ephemeralPEM := tls.GetEphemeralCAPEM()

	pathb := []byte(path)

	var orig linux.Statx
	b := make([]byte, orig.SizeBytes(), orig.SizeBytes())
	if _, _, errno := unix.Syscall6(unix.SYS_STATX, uintptr(dirfd), uintptr(unsafe.Pointer(&pathb[0])), uintptr(flags), uintptr(mask), uintptr(unsafe.Pointer(&b[0])), 0); errno != 0 {
		return n.Skip()
	}
	orig.UnmarshalBytes(b)

	repl := orig
	repl.Size += uint64(len(ephemeralPEM))
	b = make([]byte, repl.SizeBytes(), repl.SizeBytes())
	repl.MarshalBytes(b)

	errno, err = p.vmWriteBytes(n, bufAddr, b)
	if err != nil {
		return fmt.Errorf("write statx to process memory: %w", err)
	}
	return n.Return(0, errno)
}

// handleClose handles the close(2) syscall.
func (p *Process) handleClose(n *seccomp.Notif, fd int) error {