fmt

Author: bleggett

src/base_plugin/mod.rs

@@ -545,9 +545,10 @@ impl EderaPlugin {
 
         let zid = &context.decoded_evt.zone_id;
         if matches!(context.fdinfo, Cached::NotFetched) {
-            context.fdinfo = match self.threadstate.with_zoneinfo(zid, |zinfo| {
-                zinfo.get_event_fdinfo(&context.decoded_evt)
-            }) {
+            context.fdinfo = match self
+                .threadstate
+                .with_zoneinfo(zid, |zinfo| zinfo.get_event_fdinfo(&context.decoded_evt))
+            {
                 Some(t) => Cached::Found(t),
                 None => Cached::NotFound,
             };

src/parsers.rs

@@ -195,14 +195,16 @@ pub fn get_fdi(event: &ZoneKernelSyscallEvent) -> Option<u64> {
 
     // For exit events (modern_bpf only captures these), search for the FD parameter
     // Special case: sendmmsg and recvmmsg have FD at position 1
-    let maybe_fd_loc: Option<usize> = if etype == PPME_SOCKET_SENDMMSG_X || etype == PPME_SOCKET_RECVMMSG_X {
-        Some(1)
-    } else {
-        // For other exit events, search for the PT_FD parameter
-        event.event_params
-            .iter()
-            .position(|param| param.param_type == param_type::PT_FD as u32)
-    };
+    let maybe_fd_loc: Option<usize> =
+        if etype == PPME_SOCKET_SENDMMSG_X || etype == PPME_SOCKET_RECVMMSG_X {
+            Some(1)
+        } else {
+            // For other exit events, search for the PT_FD parameter
+            event
+                .event_params
+                .iter()
+                .position(|param| param.param_type == param_type::PT_FD as u32)
+        };
 
     if let Some(loc) = maybe_fd_loc {
         let res = i64::from_ne_bytes(

src/threadstate.rs

@@ -81,16 +81,11 @@ impl ZoneInfo {
     /// from event parameters and looks up the corresponding FD info.
     ///
     /// Returns None if the event doesn't use an FD or if the FD info is not found.
-    pub fn get_event_fdinfo(
-        &self,
-        event: &ZoneKernelSyscallEvent,
-    ) -> Option<ZoneKernelFdInfo> {
+    pub fn get_event_fdinfo(&self, event: &ZoneKernelSyscallEvent) -> Option<ZoneKernelFdInfo> {
         // Only exit events are captured by modern_bpf driver
         if parsers::has_fd(event) {
             parsers::get_fdi(event).and_then(|fdi| {
-                self.with_leader_fdlist_ctx(event, |fdlist| {
-                    fdlist.get(&fdi).cloned()
-                })
+                self.with_leader_fdlist_ctx(event, |fdlist| fdlist.get(&fdi).cloned())
             })
         } else {
             None
@@ -690,7 +685,9 @@ impl ZoneInfo {
                 // This is the old OPENAT format that required enter event data.
                 // Modern_bpf generates PPME_SYSCALL_OPENAT_2_X instead (see openat.bpf.c line 20).
                 // If we somehow receive this event type, we can't process it without enter events.
-                warn!("Received unsupported PPME_SYSCALL_OPENAT_X event (requires enter event data)");
+                warn!(
+                    "Received unsupported PPME_SYSCALL_OPENAT_X event (requires enter event data)"
+                );
                 return Ok(());
             }
             PPME_SYSCALL_OPENAT_2_X | PPME_SYSCALL_OPENAT2_X => {
@@ -1656,7 +1653,8 @@ impl ZoneInfo {
                 );
 
                 if tinfo.clone_ts != 0 {
-                    tinfo.exe_ino_ctime_duration_clone_ts = tinfo.clone_ts.wrapping_sub(tinfo.exe_ino_ctime);
+                    tinfo.exe_ino_ctime_duration_clone_ts =
+                        tinfo.clone_ts.wrapping_sub(tinfo.exe_ino_ctime);
                 }
 
                 if tinfo.pidns_init_start_ts != 0 && tinfo.exe_ino_ctime > tinfo.pidns_init_start_ts
@@ -3123,7 +3121,6 @@ impl ZoneInfo {
             }
         }
     }
-
 }
 
 impl ThreadState {
@@ -3496,7 +3493,6 @@ mod tests {
         assert_eq!(result, Some(100));
     }
 
-
     #[test]
     fn maybe_get_event_fdinfo_returns_none_no_thread() {
         let zinfo = ZoneInfo::default();