add name resolution vulnerability detection
replace syscall args with struct pt_regs