// SPDX-License-Identifier: GPL-2.0-only OR MIT
/*
 * Copyright (C) 2023 The Falco Authors.
 *
 * This file is dual licensed under either the MIT or GPL 2. See MIT.txt
 * or GPL2.txt for full copies of the license.
 */

#include <helpers/interfaces/fixed_size_event.h>

/*=============================== ENTER EVENT ===========================*/

SEC("tp_btf/sys_enter")
int BPF_PROG(pidfd_open_e,
         struct pt_regs *regs,
         long id)
{
    struct ringbuf_struct ringbuf;
    if(!ringbuf__reserve_space(&ringbuf, ctx, PIDFD_OPEN_E_SIZE, PPME_SYSCALL_PIDFD_OPEN_E))
    {
        return 0;
    }

    ringbuf__store_event_header(&ringbuf);

    /*=============================== COLLECT PARAMETERS  ===========================*/

    // Here we have no parameters to collect. 

    /*=============================== COLLECT PARAMETERS  ===========================*/

    ringbuf__submit_event(&ringbuf);

    return 0;
}

/*=============================== ENTER EVENT ===========================*/

/*=============================== EXIT EVENT  ===========================*/

SEC("tp_btf/sys_exit")
int BPF_PROG(pidfd_open_x,
         struct pt_regs *regs,
         long ret)
{
    struct ringbuf_struct ringbuf;
    if(!ringbuf__reserve_space(&ringbuf, ctx, PIDFD_OPEN_X_SIZE, PPME_SYSCALL_PIDFD_OPEN_X))
    {
        return 0;
    }

    ringbuf__store_event_header(&ringbuf);

    /*=============================== COLLECT PARAMETERS  ===========================*/

    /* Parameter 1: res (type: PT_FD) */
	ringbuf__store_s64(&ringbuf, ret);

    /* Parameter 2: pid (type: PT_PID)*/
    pid_t pid = (int32_t)extract__syscall_argument(regs, 0);
    ringbuf__store_s64(&ringbuf, (int64_t)pid); 

    /* Parameter 3: pid (type: PT_FLAGS32)*/
    uint32_t flags = (uint32_t)extract__syscall_argument(regs, 1);
    ringbuf__store_u32(&ringbuf, pidfd_open_flags_to_scap(flags));

    /*=============================== COLLECT PARAMETERS  ===========================*/

    ringbuf__submit_event(&ringbuf);

    return 0;
}

/*=============================== EXIT EVENT  ===========================*/



