Quick follow-up release with a handful of Linux syscall-tracer improvements and fixes:

  • syscall-tracer: Decode timespec values. Recognize timespec pointer arguments and decode them into structured values instead of opaque byte arrays. Supports both __kernel_timespec and old_timespec32 layouts.
  • syscall-tracer: Fix raw attachment lifetime. The GVariant was previously created from data freed before return, leaving it with a dangling pointer.
  • syscall-tracer: Fix multi-attachment parsing by encoding how much space is reserved for each attachment.