gistfile1.txt

function __task_file_handle_filp:long(task:long, fd:long) %{ /* pure */
  struct task_struct *p = (struct task_struct *)((long)THIS->task);
  struct files_struct *files;
  struct file *filp;

  rcu_read_lock();
  if ((files = kread(&p->files))) {
    if ((filp = fcheck_files(files, THIS->fd))) {
      THIS->__retvalue = (long)filp;
    }
  }
  CATCH_DEREF_FAULT();
  rcu_read_unlock();
%}

gistfile2.txt

function startswith:long (haystack:string, needle:string)
%{
  THIS->__retvalue = strstr(THIS->haystack, THIS->needle) == THIS->haystack;
%}