Xenia-Canary

fabi/Xenia-Canary

Fork 0

Commit Graph

Author	SHA1	Message	Date
MechaCat02	d031d7c513	[Audit] handle-lifecycle XELOGKERNEL probes (cvar-gated) New cvar `audit_handle_lifecycle` (Auditing group, default false). When enabled, emits one-line XELOGKERNEL traces tagged AUDIT-HLC at: NtCreateEvent return, NtSetEvent entry, KeSetEvent entry, NtWaitForSingleObjectEx entry + completion, EmulateCPInterruptDPC entry. Observation-only: zero-overhead when cvar off (single branch + flag read). Intended for handle disambiguation between xenia-rs and canary under the Wine cross-build oracle. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-06-06 11:57:34 +02:00
Jonathan Goyvaerts	c1af632562	Replace all gflag implementations with cvar implementations	2019-08-03 02:34:07 +02:00

Author

SHA1

Message

Date

MechaCat02

d031d7c513

[Audit] handle-lifecycle XELOGKERNEL probes (cvar-gated)

New cvar `audit_handle_lifecycle` (Auditing group, default false).
When enabled, emits one-line XELOGKERNEL traces tagged AUDIT-HLC at:
  NtCreateEvent return, NtSetEvent entry, KeSetEvent entry,
  NtWaitForSingleObjectEx entry + completion,
  EmulateCPInterruptDPC entry.

Observation-only: zero-overhead when cvar off (single branch + flag
read). Intended for handle disambiguation between xenia-rs and
canary under the Wine cross-build oracle.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-06-06 11:57:34 +02:00

Jonathan Goyvaerts

c1af632562

Replace all gflag implementations with cvar implementations

2019-08-03 02:34:07 +02:00

2 Commits