endpoint_sec_sys

Function es_exec_fd

Source 
pub unsafe extern "C" fn es_exec_fd(
    event: &es_event_exec_t,
    index: u32,
) -> ShouldNotBeNull<es_fd_t>
Available on macOS and crate feature macos_11_0_0 only.
Expand description

Get the file descriptor at the specified position in the message containing an es_event_exec_t

  • event: The es_event_exec_t being inspected
  • index: Index of the file descriptor to retrieve (starts from 0)
  • Returns a pointer to an es_fd_t describing the file descriptor. This is zero-allocation operation. The returned pointer must not outlive exec_event.

Reading an fd where index >= es_exec_fd_count() is undefined

Available for macos 11+