Struct ParentTracker 

pub struct ParentTracker { /* private fields */ }

How this works

Consider the following two situations:

          pid 2
         Proc A
           │  fork   pid 3
 pid 2     ├────────►Proc A
Proc C exec│           │      pid 3
  ┌───◄────┘           │exec Proc B
  │        *           └───►────┐
  │*********                    │
  │ alt exec                    │
C exec Proc D

We will derive the following relations:

Unknown ?> A
|- A spawns B
|- A becomes C
   |- C becomes D

To achieve this, we

1. for spawns(A spawns B), record the id of last exec event(Unknown ?> A) of the parent process(A) at fork time.
2. for becomes(C becomes D), record the id of last exec event(A becomes C)

If the process itself have successful execs, then the parent event is last_successful_exec Otherwise, the parent is the corresponding successful exec event of its parent process.

Implementations

impl ParentTracker

pub fn new() -> Self

pub fn save_parent_last_exec(&mut self, parent: &Self)

pub fn update_last_exec( &mut self, id: EventId, successful: bool, ) -> Option<ParentEventId>

Updates parent tracker with an exec event and returns the parent event id of this exec event

Trait Implementations

impl Clone for ParentTracker

fn clone(&self) -> ParentTracker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ParentTracker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ParentTracker

fn default() -> ParentTracker

Returns the “default value” for a type.