Lines Matching full:len
86 #define READ_TOKEN_BYTES(buf, len, dest, size, bytesread, err) do { \
87 if ((bytesread) + (size) > (u_int32_t)(len)) { \
95 #define READ_TOKEN_U_CHAR(buf, len, dest, bytesread, err) do { \
96 if ((bytesread) + sizeof(u_char) <= (u_int32_t)(len)) { \
103 #define READ_TOKEN_U_INT16(buf, len, dest, bytesread, err) do { \
104 if ((bytesread) + sizeof(u_int16_t) <= (u_int32_t)(len)) { \
111 #define READ_TOKEN_U_INT32(buf, len, dest, bytesread, err) do { \
112 if ((bytesread) + sizeof(u_int32_t) <= (u_int32_t)(len)) { \
119 #define READ_TOKEN_U_INT64(buf, len, dest, bytesread, err) do { \
120 if ((bytesread) + sizeof(u_int64_t) <= (u_int32_t)(len)) { \
127 #define SET_PTR(buf, len, ptr, size, bytesread, err) do { \
128 if ((bytesread) + (size) > (u_int32_t)(len)) \
196 print_mem(FILE *fp, u_char *data, size_t len)
200 if (len > 0) {
202 for (i = 0; i < len; i++)
211 print_string(FILE *fp, const char *str, size_t len)
215 if (len > 0) {
216 for (i = 0; i < len; i++) {
227 print_xml_string(FILE *fp, const char *str, size_t len)
232 if (len == 0)
235 for (i = 0; i < len; i++) {
915 fetch_header32_tok(tokenstr_t *tok, u_char *buf, int len)
919 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32.size, tok->len, err);
923 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr32.version, tok->len, err);
927 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32.e_type, tok->len, err);
931 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32.e_mod, tok->len, err);
935 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32.s, tok->len, err);
939 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32.ms, tok->len, err);
1003 fetch_header32_ex_tok(tokenstr_t *tok, u_char *buf, int len)
1007 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.size, tok->len, err);
1011 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr32_ex.version, tok->len, err);
1015 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32_ex.e_type, tok->len, err);
1019 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr32_ex.e_mod, tok->len, err);
1023 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.ad_type, tok->len, err);
1030 READ_TOKEN_BYTES(buf, len, &tok->tt.hdr32_ex.addr[0],
1031 sizeof(tok->tt.hdr32_ex.addr[0]), tok->len, err);
1037 READ_TOKEN_BYTES(buf, len, tok->tt.hdr32_ex.addr,
1038 sizeof(tok->tt.hdr32_ex.addr), tok->len, err);
1042 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.s, tok->len, err);
1046 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr32_ex.ms, tok->len, err);
1107 fetch_header64_tok(tokenstr_t *tok, u_char *buf, int len)
1111 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr64.size, tok->len, err);
1115 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr64.version, tok->len, err);
1119 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64.e_type, tok->len, err);
1123 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64.e_mod, tok->len, err);
1127 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64.s, tok->len, err);
1131 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64.ms, tok->len, err);
1191 fetch_header64_ex_tok(tokenstr_t *tok, u_char *buf, int len)
1195 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr64_ex.size, tok->len, err);
1199 READ_TOKEN_U_CHAR(buf, len, tok->tt.hdr64_ex.version, tok->len, err);
1203 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64_ex.e_type, tok->len, err);
1207 READ_TOKEN_U_INT16(buf, len, tok->tt.hdr64_ex.e_mod, tok->len, err);
1211 READ_TOKEN_U_INT32(buf, len, tok->tt.hdr64_ex.ad_type, tok->len, err);
1218 READ_TOKEN_BYTES(buf, len, &tok->tt.hdr64_ex.addr[0],
1219 sizeof(tok->tt.hdr64_ex.addr[0]), tok->len, err);
1225 READ_TOKEN_BYTES(buf, len, tok->tt.hdr64_ex.addr,
1226 sizeof(tok->tt.hdr64_ex.addr), tok->len, err);
1230 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64_ex.s, tok->len, err);
1234 READ_TOKEN_U_INT64(buf, len, tok->tt.hdr64_ex.ms, tok->len, err);
1291 fetch_trailer_tok(tokenstr_t *tok, u_char *buf, int len)
1295 READ_TOKEN_U_INT16(buf, len, tok->tt.trail.magic, tok->len, err);
1299 READ_TOKEN_U_INT32(buf, len, tok->tt.trail.count, tok->len, err);
1324 fetch_arg32_tok(tokenstr_t *tok, u_char *buf, int len)
1328 READ_TOKEN_U_CHAR(buf, len, tok->tt.arg32.no, tok->len, err);
1332 READ_TOKEN_U_INT32(buf, len, tok->tt.arg32.val, tok->len, err);
1336 READ_TOKEN_U_INT16(buf, len, tok->tt.arg32.len, tok->len, err);
1340 SET_PTR((char*)buf, len, tok->tt.arg32.text, tok->tt.arg32.len,
1341 tok->len, err);
1361 print_string(fp, tok->tt.arg32.text, tok->tt.arg32.len);
1370 print_string(fp, tok->tt.arg32.text, tok->tt.arg32.len);
1375 fetch_arg64_tok(tokenstr_t *tok, u_char *buf, int len)
1379 READ_TOKEN_U_CHAR(buf, len, tok->tt.arg64.no, tok->len, err);
1383 READ_TOKEN_U_INT64(buf, len, tok->tt.arg64.val, tok->len, err);
1387 READ_TOKEN_U_INT16(buf, len, tok->tt.arg64.len, tok->len, err);
1391 SET_PTR((char*)buf, len, tok->tt.arg64.text, tok->tt.arg64.len,
1392 tok->len, err);
1412 print_string(fp, tok->tt.arg64.text, tok->tt.arg64.len);
1421 print_string(fp, tok->tt.arg64.text, tok->tt.arg64.len);
1432 fetch_arb_tok(tokenstr_t *tok, u_char *buf, int len)
1437 READ_TOKEN_U_CHAR(buf, len, tok->tt.arb.howtopr, tok->len, err);
1441 READ_TOKEN_U_CHAR(buf, len, tok->tt.arb.bu, tok->len, err);
1445 READ_TOKEN_U_CHAR(buf, len, tok->tt.arb.uc, tok->len, err);
1475 SET_PTR(buf, len, tok->tt.arb.data, datasize * tok->tt.arb.uc,
1476 tok->len, err);
1660 fetch_attr32_tok(tokenstr_t *tok, u_char *buf, int len)
1664 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.mode, tok->len, err);
1668 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.uid, tok->len, err);
1672 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.gid, tok->len, err);
1676 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.fsid, tok->len, err);
1680 READ_TOKEN_U_INT64(buf, len, tok->tt.attr32.nid, tok->len, err);
1684 READ_TOKEN_U_INT32(buf, len, tok->tt.attr32.dev, tok->len, err);
1741 fetch_attr64_tok(tokenstr_t *tok, u_char *buf, int len)
1745 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.mode, tok->len, err);
1749 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.uid, tok->len, err);
1753 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.gid, tok->len, err);
1757 READ_TOKEN_U_INT32(buf, len, tok->tt.attr64.fsid, tok->len, err);
1761 READ_TOKEN_U_INT64(buf, len, tok->tt.attr64.nid, tok->len, err);
1765 READ_TOKEN_U_INT64(buf, len, tok->tt.attr64.dev, tok->len, err);
1818 fetch_exit_tok(tokenstr_t *tok, u_char *buf, int len)
1822 READ_TOKEN_U_INT32(buf, len, tok->tt.exit.status, tok->len, err);
1826 READ_TOKEN_U_INT32(buf, len, tok->tt.exit.ret, tok->len, err);
1859 fetch_execarg_tok(tokenstr_t *tok, u_char *buf, int len)
1865 READ_TOKEN_U_INT32(buf, len, tok->tt.execarg.count, tok->len, err);
1870 bptr = buf + tok->len;
1876 if (++tok->len >= (u_int32_t)len)
1878 bptr = buf + tok->len;
1882 tok->len++; /* \0 character */
1917 fetch_execenv_tok(tokenstr_t *tok, u_char *buf, int len)
1923 READ_TOKEN_U_INT32(buf, len, tok->tt.execenv.count, tok->len, err);
1928 bptr = buf + tok->len;
1934 if (++tok->len >= (u_int32_t)len)
1936 bptr = buf + tok->len;
1940 tok->len++; /* \0 character */
1973 * file name len 2 bytes
1977 fetch_file_tok(tokenstr_t *tok, u_char *buf, int len)
1981 READ_TOKEN_U_INT32(buf, len, tok->tt.file.s, tok->len, err);
1985 READ_TOKEN_U_INT32(buf, len, tok->tt.file.ms, tok->len, err);
1989 READ_TOKEN_U_INT16(buf, len, tok->tt.file.len, tok->len, err);
1993 SET_PTR((char*)buf, len, tok->tt.file.name, tok->tt.file.len, tok->len,
2014 print_string(fp, tok->tt.file.name, tok->tt.file.len);
2022 print_string(fp, tok->tt.file.name, tok->tt.file.len);
2031 fetch_newgroups_tok(tokenstr_t *tok, u_char *buf, int len)
2036 READ_TOKEN_U_INT16(buf, len, tok->tt.grps.no, tok->len, err);
2041 READ_TOKEN_U_INT32(buf, len, tok->tt.grps.list[i], tok->len,
2073 fetch_inaddr_tok(tokenstr_t *tok, u_char *buf, int len)
2077 READ_TOKEN_BYTES(buf, len, &tok->tt.inaddr.addr, sizeof(uint32_t),
2078 tok->len, err);
2105 fetch_inaddr_ex_tok(tokenstr_t *tok, u_char *buf, int len)
2109 READ_TOKEN_U_INT32(buf, len, tok->tt.inaddr_ex.type, tok->len, err);
2114 READ_TOKEN_BYTES(buf, len, &tok->tt.inaddr_ex.addr[0],
2115 sizeof(tok->tt.inaddr_ex.addr[0]), tok->len, err);
2119 READ_TOKEN_BYTES(buf, len, tok->tt.inaddr_ex.addr,
2120 sizeof(tok->tt.inaddr_ex.addr), tok->len, err);
2149 fetch_ip_tok(tokenstr_t *tok, u_char *buf, int len)
2153 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.version, tok->len, err);
2157 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.tos, tok->len, err);
2161 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.len, sizeof(uint16_t),
2162 tok->len, err);
2166 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.id, sizeof(uint16_t),
2167 tok->len, err);
2171 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.offset, sizeof(uint16_t),
2172 tok->len, err);
2176 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.ttl, tok->len, err);
2180 READ_TOKEN_U_CHAR(buf, len, tok->tt.ip.prot, tok->len, err);
2184 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.chksm, sizeof(uint16_t),
2185 tok->len, err);
2189 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.src, sizeof(tok->tt.ip.src),
2190 tok->len, err);
2194 READ_TOKEN_BYTES(buf, len, &tok->tt.ip.dest, sizeof(tok->tt.ip.dest),
2195 tok->len, err);
2215 open_attr(fp, "len");
2216 print_2_bytes(fp, ntohs(tok->tt.ip.len), "%u");
2247 print_2_bytes(fp, ntohs(tok->tt.ip.len), "%u");
2270 fetch_ipc_tok(tokenstr_t *tok, u_char *buf, int len)
2274 READ_TOKEN_U_CHAR(buf, len, tok->tt.ipc.type, tok->len, err);
2278 READ_TOKEN_U_INT32(buf, len, tok->tt.ipc.id, tok->len, err);
2316 fetch_ipcperm_tok(tokenstr_t *tok, u_char *buf, int len)
2320 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.uid, tok->len, err);
2324 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.gid, tok->len, err);
2328 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.puid, tok->len, err);
2332 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.pgid, tok->len, err);
2336 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.mode, tok->len, err);
2340 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.seq, tok->len, err);
2344 READ_TOKEN_U_INT32(buf, len, tok->tt.ipcperm.key, tok->len, err);
2401 fetch_iport_tok(tokenstr_t *tok, u_char *buf, int len)
2405 READ_TOKEN_BYTES(buf, len, &tok->tt.iport.port, sizeof(uint16_t),
2406 tok->len, err);
2432 fetch_opaque_tok(tokenstr_t *tok, u_char *buf, int len)
2436 READ_TOKEN_U_INT16(buf, len, tok->tt.opaque.size, tok->len, err);
2440 SET_PTR((char*)buf, len, tok->tt.opaque.data, tok->tt.opaque.size,
2441 tok->len, err);
2471 fetch_path_tok(tokenstr_t *tok, u_char *buf, int len)
2475 READ_TOKEN_U_INT16(buf, len, tok->tt.path.len, tok->len, err);
2479 SET_PTR((char*)buf, len, tok->tt.path.path, tok->tt.path.len, tok->len,
2493 print_string(fp, tok->tt.path.path, tok->tt.path.len);
2497 print_string(fp, tok->tt.path.path, tok->tt.path.len);
2515 fetch_process32_tok(tokenstr_t *tok, u_char *buf, int len)
2519 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.auid, tok->len, err);
2523 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.euid, tok->len, err);
2527 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.egid, tok->len, err);
2531 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.ruid, tok->len, err);
2535 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.rgid, tok->len, err);
2539 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.pid, tok->len, err);
2543 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.sid, tok->len, err);
2547 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32.tid.port, tok->len, err);
2551 READ_TOKEN_BYTES(buf, len, &tok->tt.proc32.tid.addr,
2552 sizeof(tok->tt.proc32.tid.addr), tok->len, err);
2627 fetch_process64_tok(tokenstr_t *tok, u_char *buf, int len)
2631 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.auid, tok->len, err);
2635 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.euid, tok->len, err);
2639 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.egid, tok->len, err);
2643 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.ruid, tok->len, err);
2647 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.rgid, tok->len, err);
2651 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.pid, tok->len, err);
2655 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64.sid, tok->len, err);
2659 READ_TOKEN_U_INT64(buf, len, tok->tt.proc64.tid.port, tok->len, err);
2663 READ_TOKEN_BYTES(buf, len, &tok->tt.proc64.tid.addr,
2664 sizeof(tok->tt.proc64.tid.addr), tok->len, err);
2735 * address type-len 4 bytes
2739 fetch_process32ex_tok(tokenstr_t *tok, u_char *buf, int len)
2743 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.auid, tok->len, err);
2747 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.euid, tok->len, err);
2751 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.egid, tok->len, err);
2755 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.ruid, tok->len, err);
2759 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.rgid, tok->len, err);
2763 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.pid, tok->len, err);
2767 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.sid, tok->len, err);
2771 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.tid.port, tok->len,
2776 READ_TOKEN_U_INT32(buf, len, tok->tt.proc32_ex.tid.type, tok->len,
2782 READ_TOKEN_BYTES(buf, len, &tok->tt.proc32_ex.tid.addr[0],
2783 sizeof(tok->tt.proc32_ex.tid.addr[0]), tok->len, err);
2787 READ_TOKEN_BYTES(buf, len, tok->tt.proc32_ex.tid.addr,
2788 sizeof(tok->tt.proc32_ex.tid.addr), tok->len, err);
2864 * address type-len 4 bytes
2868 fetch_process64ex_tok(tokenstr_t *tok, u_char *buf, int len)
2872 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.auid, tok->len, err);
2876 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.euid, tok->len, err);
2880 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.egid, tok->len, err);
2884 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.ruid, tok->len, err);
2888 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.rgid, tok->len, err);
2892 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.pid, tok->len, err);
2896 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.sid, tok->len, err);
2900 READ_TOKEN_U_INT64(buf, len, tok->tt.proc64_ex.tid.port, tok->len,
2905 READ_TOKEN_U_INT32(buf, len, tok->tt.proc64_ex.tid.type, tok->len,
2911 READ_TOKEN_BYTES(buf, len, &tok->tt.proc64_ex.tid.addr[0],
2912 sizeof(tok->tt.proc64_ex.tid.addr[0]), tok->len, err);
2916 READ_TOKEN_BYTES(buf, len, tok->tt.proc64_ex.tid.addr,
2917 sizeof(tok->tt.proc64_ex.tid.addr), tok->len, err);
2986 fetch_return32_tok(tokenstr_t *tok, u_char *buf, int len)
2990 READ_TOKEN_U_CHAR(buf, len, tok->tt.ret32.status, tok->len, err);
2994 READ_TOKEN_U_INT32(buf, len, tok->tt.ret32.ret, tok->len, err);
3023 fetch_return64_tok(tokenstr_t *tok, u_char *buf, int len)
3027 READ_TOKEN_U_CHAR(buf, len, tok->tt.ret64.err, tok->len, err);
3031 READ_TOKEN_U_INT64(buf, len, tok->tt.ret64.val, tok->len, err);
3063 fetch_seq_tok(tokenstr_t *tok, u_char *buf, int len)
3067 READ_TOKEN_U_INT32(buf, len, tok->tt.seq.seqno, tok->len, err);
3096 fetch_sock_inet32_tok(tokenstr_t *tok, u_char *buf, int len)
3100 READ_TOKEN_U_INT16(buf, len, tok->tt.sockinet_ex32.family, tok->len,
3105 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.port,
3106 sizeof(uint16_t), tok->len, err);
3110 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.addr,
3111 sizeof(tok->tt.sockinet_ex32.addr[0]), tok->len, err);
3150 fetch_sock_inet128_tok(tokenstr_t *tok, u_char *buf, int len)
3154 READ_TOKEN_U_INT16(buf, len, tok->tt.sockinet_ex32.family, tok->len,
3159 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.port,
3160 sizeof(uint16_t), tok->len, err);
3164 READ_TOKEN_BYTES(buf, len, &tok->tt.sockinet_ex32.addr,
3165 sizeof(tok->tt.sockinet_ex32.addr), tok->len, err);
3203 fetch_sock_unix_tok(tokenstr_t *tok, u_char *buf, int len)
3210 READ_TOKEN_U_INT16(buf, len, tok->tt.sockunix.family, tok->len, err);
3214 /* slen = strnlen((buf + tok->len), 104) + 1; */
3215 p = (u_char *)memchr((const void *)(buf + tok->len), '\0', 104);
3216 slen = (p ? (int)(p - (buf + tok->len)) : 104) + 1;
3218 READ_TOKEN_BYTES(buf, len, tok->tt.sockunix.path, slen, tok->len, err);
3258 fetch_socket_tok(tokenstr_t *tok, u_char *buf, int len)
3262 READ_TOKEN_U_INT16(buf, len, tok->tt.socket.type, tok->len, err);
3266 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.l_port, sizeof(uint16_t),
3267 tok->len, err);
3271 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.l_addr,
3272 sizeof(tok->tt.socket.l_addr), tok->len, err);
3276 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.r_port, sizeof(uint16_t),
3277 tok->len, err);
3281 READ_TOKEN_BYTES(buf, len, &tok->tt.socket.l_addr,
3282 sizeof(tok->tt.socket.r_addr), tok->len, err);
3338 fetch_subject32_tok(tokenstr_t *tok, u_char *buf, int len)
3342 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.auid, tok->len, err);
3346 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.euid, tok->len, err);
3350 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.egid, tok->len, err);
3354 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.ruid, tok->len, err);
3358 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.rgid, tok->len, err);
3362 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.pid, tok->len, err);
3366 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.sid, tok->len, err);
3370 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32.tid.port, tok->len, err);
3374 READ_TOKEN_BYTES(buf, len, &tok->tt.subj32.tid.addr,
3375 sizeof(tok->tt.subj32.tid.addr), tok->len, err);
3469 fetch_priv_tok(tokenstr_t *tok, u_char *buf, int len)
3473 READ_TOKEN_U_CHAR(buf, len, tok->tt.priv.sorf, tok->len, err);
3476 READ_TOKEN_U_INT16(buf, len, tok->tt.priv.privstrlen, tok->len, err);
3479 SET_PTR((char *)buf, len, tok->tt.priv.priv, tok->tt.priv.privstrlen,
3480 tok->len, err);
3493 fetch_privset_tok(tokenstr_t *tok, u_char *buf, int len)
3497 READ_TOKEN_U_INT16(buf, len, tok->tt.privset.privtstrlen,
3498 tok->len, err);
3501 SET_PTR((char *)buf, len, tok->tt.privset.privtstr,
3502 tok->tt.privset.privtstrlen, tok->len, err);
3505 READ_TOKEN_U_INT16(buf, len, tok->tt.privset.privstrlen,
3506 tok->len, err);
3509 SET_PTR((char *)buf, len, tok->tt.privset.privstr,
3510 tok->tt.privset.privstrlen, tok->len, err);
3553 fetch_subject64_tok(tokenstr_t *tok, u_char *buf, int len)
3557 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.auid, tok->len, err);
3561 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.euid, tok->len, err);
3565 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.egid, tok->len, err);
3569 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.ruid, tok->len, err);
3573 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.rgid, tok->len, err);
3577 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.pid, tok->len, err);
3581 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64.sid, tok->len, err);
3585 READ_TOKEN_U_INT64(buf, len, tok->tt.subj64.tid.port, tok->len, err);
3589 READ_TOKEN_BYTES(buf, len, &tok->tt.subj64.tid.addr,
3590 sizeof(tok->tt.subj64.tid.addr), tok->len, err);
3665 fetch_subject32ex_tok(tokenstr_t *tok, u_char *buf, int len)
3669 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.auid, tok->len, err);
3673 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.euid, tok->len, err);
3677 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.egid, tok->len, err);
3681 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.ruid, tok->len, err);
3685 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.rgid, tok->len, err);
3689 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.pid, tok->len, err);
3693 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.sid, tok->len, err);
3697 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.tid.port, tok->len,
3702 READ_TOKEN_U_INT32(buf, len, tok->tt.subj32_ex.tid.type, tok->len,
3708 READ_TOKEN_BYTES(buf, len, &tok->tt.subj32_ex.tid.addr[0],
3709 sizeof(tok->tt.subj32_ex.tid.addr[0]), tok->len, err);
3713 READ_TOKEN_BYTES(buf, len, tok->tt.subj32_ex.tid.addr,
3714 sizeof(tok->tt.subj32_ex.tid.addr), tok->len, err);
3793 fetch_subject64ex_tok(tokenstr_t *tok, u_char *buf, int len)
3797 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.auid, tok->len, err);
3801 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.euid, tok->len, err);
3805 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.egid, tok->len, err);
3809 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.ruid, tok->len, err);
3813 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.rgid, tok->len, err);
3817 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.pid, tok->len, err);
3821 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.sid, tok->len, err);
3825 READ_TOKEN_U_INT64(buf, len, tok->tt.subj64_ex.tid.port, tok->len,
3830 READ_TOKEN_U_INT32(buf, len, tok->tt.subj64_ex.tid.type, tok->len,
3836 READ_TOKEN_BYTES(buf, len, &tok->tt.subj64_ex.tid.addr[0],
3837 sizeof(tok->tt.subj64_ex.tid.addr[0]), tok->len, err);
3841 READ_TOKEN_BYTES(buf, len, tok->tt.subj64_ex.tid.addr,
3842 sizeof(tok->tt.subj64_ex.tid.addr), tok->len, err);
3911 fetch_text_tok(tokenstr_t *tok, u_char *buf, int len)
3915 READ_TOKEN_U_INT16(buf, len, tok->tt.text.len, tok->len, err);
3919 SET_PTR((char*)buf, len, tok->tt.text.text, tok->tt.text.len, tok->len,
3933 print_string(fp, tok->tt.text.text, tok->tt.text.len);
3937 print_string(fp, tok->tt.text.text, tok->tt.text.len);
3951 fetch_socketex32_tok(tokenstr_t *tok, u_char *buf, int len)
3955 READ_TOKEN_U_INT16(buf, len, tok->tt.socket_ex32.domain, tok->len,
3960 READ_TOKEN_U_INT16(buf, len, tok->tt.socket_ex32.type, tok->len,
3965 READ_TOKEN_U_INT16(buf, len, tok->tt.socket_ex32.atype, tok->len,
3974 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.l_port,
3975 sizeof(uint16_t), tok->len, err);
3980 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.l_addr,
3981 sizeof(tok->tt.socket_ex32.l_addr[0]), tok->len, err);
3985 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.l_addr,
3986 sizeof(tok->tt.socket_ex32.l_addr), tok->len, err);
3991 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.r_port,
3992 sizeof(uint16_t), tok->len, err);
3997 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.r_addr,
3998 sizeof(tok->tt.socket_ex32.r_addr[0]), tok->len, err);
4002 READ_TOKEN_BYTES(buf, len, &tok->tt.socket_ex32.r_addr,
4003 sizeof(tok->tt.socket_ex32.r_addr), tok->len, err);
4063 fetch_invalid_tok(tokenstr_t *tok, u_char *buf, int len)
4068 recoversize = len - (tok->len + AUDIT_TRAILER_SIZE);
4074 SET_PTR((char*)buf, len, tok->tt.invalid.data, recoversize, tok->len,
4100 fetch_zonename_tok(tokenstr_t *tok, u_char *buf, int len)
4104 READ_TOKEN_U_INT16(buf, len, tok->tt.zonename.len, tok->len, err);
4107 SET_PTR((char *)buf, len, tok->tt.zonename.zonename, tok->tt.zonename.len,
4108 tok->len, err);
4122 tok->tt.zonename.len);
4128 tok->tt.zonename.len);
4136 au_fetch_tok(tokenstr_t *tok, u_char *buf, int len)
4139 if (len <= 0)
4142 tok->len = 1;
4148 return (fetch_header32_tok(tok, buf, len));
4151 return (fetch_header32_ex_tok(tok, buf, len));
4154 return (fetch_header64_tok(tok, buf, len));
4157 return (fetch_header64_ex_tok(tok, buf, len));
4160 return (fetch_trailer_tok(tok, buf, len));
4163 return (fetch_arg32_tok(tok, buf, len));
4166 return (fetch_arg64_tok(tok, buf, len));
4169 return (fetch_attr32_tok(tok, buf, len));
4172 return (fetch_attr64_tok(tok, buf, len));
4175 return (fetch_exit_tok(tok, buf, len));
4178 return (fetch_execarg_tok(tok, buf, len));
4181 return (fetch_execenv_tok(tok, buf, len));
4184 return (fetch_file_tok(tok, buf, len));
4187 return (fetch_newgroups_tok(tok, buf, len));
4190 return (fetch_inaddr_tok(tok, buf, len));
4193 return (fetch_inaddr_ex_tok(tok, buf, len));
4196 return (fetch_ip_tok(tok, buf, len));
4199 return (fetch_ipc_tok(tok, buf, len));
4202 return (fetch_ipcperm_tok(tok, buf, len));
4205 return (fetch_iport_tok(tok, buf, len));
4208 return (fetch_opaque_tok(tok, buf, len));
4211 return (fetch_path_tok(tok, buf, len));
4214 return (fetch_process32_tok(tok, buf, len));
4217 return (fetch_process32ex_tok(tok, buf, len));
4220 return (fetch_process64_tok(tok, buf, len));
4223 return (fetch_process64ex_tok(tok, buf, len));
4226 return (fetch_return32_tok(tok, buf, len));
4229 return (fetch_return64_tok(tok, buf, len));
4232 return (fetch_seq_tok(tok, buf, len));
4235 return (fetch_socket_tok(tok, buf, len));
4238 return (fetch_sock_inet32_tok(tok, buf, len));
4241 return (fetch_sock_unix_tok(tok, buf, len));
4244 return (fetch_sock_inet128_tok(tok, buf, len));
4247 return (fetch_subject32_tok(tok, buf, len));
4250 return (fetch_subject32ex_tok(tok, buf, len));
4253 return (fetch_subject64_tok(tok, buf, len));
4256 return (fetch_subject64ex_tok(tok, buf, len));
4259 return (fetch_text_tok(tok, buf, len));
4262 return (fetch_socketex32_tok(tok, buf, len));
4265 return (fetch_arb_tok(tok, buf, len));
4268 return (fetch_zonename_tok(tok, buf, len));
4271 return (fetch_priv_tok(tok, buf, len));
4274 return (fetch_privset_tok(tok, buf, len));
4277 return (fetch_invalid_tok(tok, buf, len));