tetragon: Plumb resolve error from bpf to event

A depth of 0 indicates no resolve error. Any non-zero value indicates
the depth at which the resolution failed.

Signed-off-by: Andy Strohman <[email protected]>

Author: andrewstrohman

pkg/api/tracingapi/client_kprobe.go

@@ -47,17 +47,18 @@ type MsgLoader struct {
 }
 
 type MsgGenericKprobe struct {
-	Common        processapi.MsgCommon
-	ProcessKey    processapi.MsgExecveKey
-	Namespaces    processapi.MsgNamespaces
-	Capabilities  processapi.MsgCapabilities
-	FuncId        uint64
-	RetProbeId    uint64
-	ActionId      uint64
-	ActionArgId   uint32
-	Tid           uint32 // The recorded TID that triggered the event
-	KernelStackID int64
-	UserStackID   int64
+	Common          processapi.MsgCommon
+	ProcessKey      processapi.MsgExecveKey
+	Namespaces      processapi.MsgNamespaces
+	Capabilities    processapi.MsgCapabilities
+	FuncId          uint64
+	RetProbeId      uint64
+	ActionId        uint64
+	ActionArgId     uint32
+	Tid             uint32 // The recorded TID that triggered the event
+	KernelStackID   int64
+	UserStackID     int64
+	ResolveErrDepth [EventConfigMaxArgs]int32
 }
 
 type MsgGenericKprobeArgPath struct {

pkg/grpc/tracing/tracing.go

@@ -348,11 +348,14 @@ func GetProcessKprobe(event *MsgGenericKprobeUnix) *tetragon.ProcessKprobe {
 		}
 	}
 
-	for _, arg := range event.Args {
+	for i, arg := range event.Args {
 		a := getKprobeArgument(arg)
 		if arg.IsReturnArg() {
 			tetragonReturnArg = a
 		} else {
+			if config.EnableLargeProgs() {
+				a.ResolveErrDepth = event.Msg.ResolveErrDepth[i]
+			}
 			tetragonArgs = append(tetragonArgs, a)
 		}
 	}
@@ -884,8 +887,12 @@ func GetProcessUprobe(event *MsgGenericUprobeUnix) *tetragon.ProcessUprobe {
 		}
 	}
 
-	for _, arg := range event.Args {
-		tetragonArgs = append(tetragonArgs, getKprobeArgument(arg))
+	for i, arg := range event.Args {
+		a := getKprobeArgument(arg)
+		if config.EnableLargeProgs() {
+			a.ResolveErrDepth = event.Msg.ResolveErrDepth[i]
+		}
+		tetragonArgs = append(tetragonArgs, a)
 	}
 
 	for _, data := range event.Data {
@@ -996,8 +1003,12 @@ func GetProcessUsdt(event *MsgGenericUsdtUnix) *tetragon.ProcessUsdt {
 		}
 	}
 
-	for _, arg := range event.Args {
-		tetragonArgs = append(tetragonArgs, getKprobeArgument(arg))
+	for i, arg := range event.Args {
+		a := getKprobeArgument(arg)
+		if config.EnableLargeProgs() {
+			a.ResolveErrDepth = event.Msg.ResolveErrDepth[i]
+		}
+		tetragonArgs = append(tetragonArgs, a)
 	}
 
 	tetragonEvent := &tetragon.ProcessUsdt{
@@ -1122,8 +1133,11 @@ func GetProcessLsm(event *MsgGenericLsmUnix) *tetragon.ProcessLsm {
 		}
 	}
 
-	for _, arg := range event.Args {
+	for i, arg := range event.Args {
 		a := getKprobeArgument(arg)
+		if config.EnableLargeProgs() {
+			a.ResolveErrDepth = event.Msg.ResolveErrDepth[i]
+		}
 		tetragonArgs = append(tetragonArgs, a)
 	}