|
19 | 19 | package kevent |
20 | 20 |
|
21 | 21 | import ( |
22 | | - "github.com/rabbitstack/fibratus/pkg/callstack" |
23 | 22 | "github.com/rabbitstack/fibratus/pkg/fs" |
24 | 23 | "github.com/rabbitstack/fibratus/pkg/kevent/kparams" |
25 | 24 | "github.com/rabbitstack/fibratus/pkg/kevent/ktypes" |
@@ -120,46 +119,3 @@ func TestPartialKey(t *testing.T) { |
120 | 119 | }) |
121 | 120 | } |
122 | 121 | } |
123 | | - |
124 | | -func TestCallstack(t *testing.T) { |
125 | | - e := &Kevent{ |
126 | | - Type: ktypes.CreateProcess, |
127 | | - Tid: 2484, |
128 | | - PID: 859, |
129 | | - CPU: 1, |
130 | | - Seq: 2, |
131 | | - Name: "CreateProcess", |
132 | | - Timestamp: time.Now(), |
133 | | - Category: ktypes.Process, |
134 | | - } |
135 | | - |
136 | | - e.Callstack.Init(9) |
137 | | - assert.Equal(t, 9, cap(e.Callstack)) |
138 | | - |
139 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0x2638e59e0a5, Offset: 0, Symbol: "?", Module: "unbacked"}) |
140 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0x7ffb313853b2, Offset: 0x10a, Symbol: "Java_java_lang_ProcessImpl_create", Module: "C:\\Program Files\\JetBrains\\GoLand 2021.2.3\\jbr\\bin\\java.dll"}) |
141 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0x7ffb3138592e, Offset: 0x3a2, Symbol: "Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly", Module: "C:\\Program Files\\JetBrains\\GoLand 2021.2.3\\jbr\\bin\\java.dll"}) |
142 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0x7ffb5c1d0396, Offset: 0x61, Symbol: "CreateProcessW", Module: "C:\\WINDOWS\\System32\\KERNELBASE.dll"}) |
143 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0x7ffb5d8e61f4, Offset: 0x54, Symbol: "CreateProcessW", Module: "C:\\WINDOWS\\System32\\KERNEL32.DLL"}) |
144 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0x7ffb5c1d0396, Offset: 0x66, Symbol: "CreateProcessW", Module: "C:\\WINDOWS\\System32\\KERNELBASE.dll"}) |
145 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0xfffff8015662a605, Offset: 0x9125, Symbol: "setjmpex", Module: "C:\\WINDOWS\\system32\\ntoskrnl.exe"}) |
146 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0xfffff801568e9c33, Offset: 0x2ef3, Symbol: "LpcRequestPort", Module: "C:\\WINDOWS\\system32\\ntoskrnl.exe"}) |
147 | | - e.Callstack.PushFrame(callstack.Frame{Addr: 0xfffff8015690b644, Offset: 0x45b4, Symbol: "ObDeleteCapturedInsertInfo", Module: "C:\\WINDOWS\\system32\\ntoskrnl.exe"}) |
148 | | - |
149 | | - assert.True(t, e.Callstack.ContainsUnbacked()) |
150 | | - assert.Equal(t, 9, e.Callstack.Depth()) |
151 | | - assert.Equal(t, "0xfffff8015690b644 C:\\WINDOWS\\system32\\ntoskrnl.exe!ObDeleteCapturedInsertInfo+0x45b4|0xfffff801568e9c33 C:\\WINDOWS\\system32\\ntoskrnl.exe!LpcRequestPort+0x2ef3|0xfffff8015662a605 C:\\WINDOWS\\system32\\ntoskrnl.exe!setjmpex+0x9125|0x7ffb5c1d0396 C:\\WINDOWS\\System32\\KERNELBASE.dll!CreateProcessW+0x66|0x7ffb5d8e61f4 C:\\WINDOWS\\System32\\KERNEL32.DLL!CreateProcessW+0x54|0x7ffb5c1d0396 C:\\WINDOWS\\System32\\KERNELBASE.dll!CreateProcessW+0x61|0x7ffb3138592e C:\\Program Files\\JetBrains\\GoLand 2021.2.3\\jbr\\bin\\java.dll!Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly+0x3a2|0x7ffb313853b2 C:\\Program Files\\JetBrains\\GoLand 2021.2.3\\jbr\\bin\\java.dll!Java_java_lang_ProcessImpl_create+0x10a|0x2638e59e0a5 unbacked!?", e.Callstack.String()) |
152 | | - assert.Equal(t, "KERNELBASE.dll|KERNEL32.DLL|KERNELBASE.dll|java.dll|unbacked", e.Callstack.Summary()) |
153 | | - |
154 | | - uframe := e.Callstack.FinalUserFrame() |
155 | | - require.NotNil(t, uframe) |
156 | | - assert.Equal(t, "7ffb5c1d0396", uframe.Addr.String()) |
157 | | - assert.Equal(t, "CreateProcessW", uframe.Symbol) |
158 | | - assert.Equal(t, "C:\\WINDOWS\\System32\\KERNELBASE.dll", uframe.Module) |
159 | | - |
160 | | - kframe := e.Callstack.FinalKernelFrame() |
161 | | - require.NotNil(t, kframe) |
162 | | - assert.Equal(t, "fffff8015690b644", kframe.Addr.String()) |
163 | | - assert.Equal(t, "ObDeleteCapturedInsertInfo", kframe.Symbol) |
164 | | - assert.Equal(t, "C:\\WINDOWS\\system32\\ntoskrnl.exe", kframe.Module) |
165 | | -} |
0 commit comments