audit_fstat
typedef struct audit_fstat au_fstat_t;
struct audit_fstat audit_fstat;
audit_fstat.af_filesz = 0; /* '0' means unset, unbounded. */
audit_fstat.af_currsz = 0;
extern struct audit_fstat audit_fstat;
audit_fstat.af_filesz = udata.au_fstat.af_filesz;
udata.au_fstat.af_filesz = audit_fstat.af_filesz;
udata.au_fstat.af_currsz = audit_fstat.af_currsz;
if (audit_fstat.af_filesz != 0 &&
audit_size >= audit_fstat.af_filesz * (audit_file_rotate_wait + 1)) {