Module ptrace 

Structs

AtomicStopState

PtraceCoreState

The ptrace state that a new task needs to connect to the same tracer as the task that clones it.

PtraceEventData

Information about what caused a ptrace-event-stop.

PtraceOptions

PtraceState

Per-task ptrace-related state

ZombiePtracees

A list of zombie processes that were traced by a given tracer, but which have not yet notified that tracer of their exit. Once the tracer is notified, the original parent will be notified.

Enums

PtraceAllowedPtracers

Indicates processes specifically allowed to trace a given process if using SCOPE_RESTRICTED. Used by prctl(PR_SET_PTRACER).

PtraceAttachType

Indicates the way that ptrace attached to the task.

PtraceEvent

PtraceStatus

For most of the time, for the purposes of ptrace, a tracee is either “going” or “stopped”. However, after certain ptrace calls, there are special rules to be followed.

StopState

This enum describes the state that a task or thread group can be in when being stopped. The names are taken from ptrace(2).

Constants

PR_SET_PTRACER_ANY

Functions

ptrace_attach

ptrace_attach_from_state

Uses the given core ptrace state (including tracer, attach type, etc) to attach to another task, given by tracee_task. Also sends a signal to stop tracee_task. Typical for when inheriting ptrace state from another task.

ptrace_detach

ptrace_dispatch

For all ptrace requests that require an attached tracee

ptrace_getregset

ptrace_peekuser

Implementation of ptrace(PTRACE_PEEKUSER). The user struct holds the registers and other information about the process. See ptrace(2) and sys/user.h for full details.

ptrace_pokeuser

ptrace_setregset

ptrace_syscall_enter

ptrace_syscall_exit

ptrace_traceme