tracee-ebpf: simplify saving to buf

[yanivagman]

No description provided.

[grantseltzer]

Do I understand correctly that you're calculating the index of the string buffer when you originally create it, and then use it when accessing the buffer, instead of recalculating on each access?

[grantseltzer]

BPF programs can't be preempted and moved to a different CPU, right?

[yanivagman]

Right

[yanivagman]

Do I understand correctly that you're calculating the index of the string buffer when you originally create it, and then use it when accessing the buffer, instead of recalculating on each access?

I only moved the logic into a new function, nothing changed with the string indexes. The string buffer is used as a temporary buffer to store the string while it is being created. buf_off tells where the string starts in the buffer (the string doesn't start from offset 0, as the path components are added in a reverse order). So, instead of returning buf_off and then using it as an index to the string buffer when using save_str_to_buf, I now return the address of string_p[buf_off], which gives the same effect

[grantseltzer]

LGTM!