Systrack v0.3
New arch support: PowerPC 64-bit, all ABIs, tested on v5.0+ kernels.
Improvements:
- Add ABI
bits
(integer) andcompat
(boolean) fields to JSON output. - Support ELF symbols with weird names (special chars in the name).
- Support function descriptors for syscall table entries (useful for PowerPC64 and Itanium 64).
- Support weird arch-specific
SYSCALL_DEFINEn
macros. - Building kernels now generates relative paths in DWARF debug symbols through
-fdebug-prefix-map
. - Improve stdout output and add a table header.
- Use
null
instead of??
/?
for unknown file/line info in JSON output. - x86: improve dummy syscall implementation detection (handling endbr64/32 instructions).
- ARM OABI: output syscall number location for the calling convention (
swi <NR>
).
Bug fixes:
- Correctly report
socketcall
depending onCONFIG_NET=y
. - Correctly strip more syscall symbol prefixes for more accurate syscall names.
- Fix bad symbol prefix detection in some weird edge cases, leading to wrong syscall names.
- x86: fix wrong register names for x86-64 compat 32-bit ABI (IA-32).
Internal changes:
- Reorganize arch-specific code.
- Handle SIGINT for more graceful termination.
- Auto-remap definition locations relative to KDIR for ease of use.