1/*-
2 * Copyright (c) 2007 Sandvine Incorporated
3 * Copyright (c) 1998 John D. Polstra
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 *    notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 *    notice, this list of conditions and the following disclaimer in the
13 *    documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25 * SUCH DAMAGE.
26 */
27
28#include <sys/cdefs.h>
29__FBSDID("$FreeBSD: stable/10/usr.bin/gcore/elfcore.c 318192 2017-05-11 17:26:34Z jhb $");
30
31#include <sys/endian.h>
32#include <sys/param.h>
33#include <sys/procfs.h>
34#include <sys/ptrace.h>
35#include <sys/queue.h>
36#include <sys/linker_set.h>
37#include <sys/sbuf.h>
38#include <sys/sysctl.h>
39#include <sys/user.h>
40#include <sys/wait.h>
41#include <machine/elf.h>
42#include <vm/vm_param.h>
43#include <vm/vm.h>
44#include <vm/pmap.h>
45#include <vm/vm_map.h>
46#include <assert.h>
47#include <err.h>
48#include <errno.h>
49#include <fcntl.h>
50#include <stdbool.h>
51#include <stdint.h>
52#include <stdio.h>
53#include <stdlib.h>
54#include <string.h>
55#include <unistd.h>
56#include <libutil.h>
57
58#include "extern.h"
59
60/*
61 * Code for generating ELF core dumps.
62 */
63
64typedef void (*segment_callback)(vm_map_entry_t, void *);
65
66/* Closure for cb_put_phdr(). */
67struct phdr_closure {
68	Elf_Phdr *phdr;		/* Program header to fill in */
69	Elf_Off offset;		/* Offset of segment in core file */
70};
71
72/* Closure for cb_size_segment(). */
73struct sseg_closure {
74	int count;		/* Count of writable segments. */
75	size_t size;		/* Total size of all writable segments. */
76};
77
78#ifdef ELFCORE_COMPAT_32
79typedef struct fpreg32 elfcore_fpregset_t;
80typedef struct reg32   elfcore_gregset_t;
81typedef struct prpsinfo32 elfcore_prpsinfo_t;
82typedef struct prstatus32 elfcore_prstatus_t;
83static void elf_convert_gregset(elfcore_gregset_t *rd, struct reg *rs);
84static void elf_convert_fpregset(elfcore_fpregset_t *rd, struct fpreg *rs);
85#else
86typedef fpregset_t elfcore_fpregset_t;
87typedef gregset_t  elfcore_gregset_t;
88typedef prpsinfo_t elfcore_prpsinfo_t;
89typedef prstatus_t elfcore_prstatus_t;
90#define elf_convert_gregset(d,s)	*d = *s
91#define elf_convert_fpregset(d,s)	*d = *s
92#endif
93
94typedef void* (*notefunc_t)(void *, size_t *);
95
96static void cb_put_phdr(vm_map_entry_t, void *);
97static void cb_size_segment(vm_map_entry_t, void *);
98static void each_writable_segment(vm_map_entry_t, segment_callback,
99    void *closure);
100static void elf_detach(void);	/* atexit() handler. */
101static void *elf_note_fpregset(void *, size_t *);
102static void *elf_note_prpsinfo(void *, size_t *);
103static void *elf_note_prstatus(void *, size_t *);
104static void *elf_note_thrmisc(void *, size_t *);
105#if defined(__i386__) || defined(__amd64__)
106static void *elf_note_x86_xstate(void *, size_t *);
107#endif
108static void *elf_note_procstat_auxv(void *, size_t *);
109static void *elf_note_procstat_files(void *, size_t *);
110static void *elf_note_procstat_groups(void *, size_t *);
111static void *elf_note_procstat_osrel(void *, size_t *);
112static void *elf_note_procstat_proc(void *, size_t *);
113static void *elf_note_procstat_psstrings(void *, size_t *);
114static void *elf_note_procstat_rlimit(void *, size_t *);
115static void *elf_note_procstat_umask(void *, size_t *);
116static void *elf_note_procstat_vmmap(void *, size_t *);
117static void elf_puthdr(int, pid_t, vm_map_entry_t, void *, size_t, size_t,
118    size_t, int);
119static void elf_putnote(int, notefunc_t, void *, struct sbuf *);
120static void elf_putnotes(pid_t, struct sbuf *, size_t *);
121static void freemap(vm_map_entry_t);
122static vm_map_entry_t readmap(pid_t);
123static void *procstat_sysctl(void *, int, size_t, size_t *sizep);
124
125static pid_t g_pid;		/* Pid being dumped, global for elf_detach */
126static int g_status;		/* proc status after ptrace attach */
127
128static int
129elf_ident(int efd, pid_t pid __unused, char *binfile __unused)
130{
131	Elf_Ehdr hdr;
132	int cnt;
133	uint16_t machine;
134
135	cnt = read(efd, &hdr, sizeof(hdr));
136	if (cnt != sizeof(hdr))
137		return (0);
138	if (!IS_ELF(hdr))
139		return (0);
140	switch (hdr.e_ident[EI_DATA]) {
141	case ELFDATA2LSB:
142		machine = le16toh(hdr.e_machine);
143		break;
144	case ELFDATA2MSB:
145		machine = be16toh(hdr.e_machine);
146		break;
147	default:
148		return (0);
149	}
150	if (!ELF_MACHINE_OK(machine))
151		return (0);
152
153	/* Looks good. */
154	return (1);
155}
156
157static void
158elf_detach(void)
159{
160	int sig;
161
162	if (g_pid != 0) {
163		/*
164		 * Forward any pending signals. SIGSTOP is generated by ptrace
165		 * itself, so ignore it.
166		 */
167		sig = WIFSTOPPED(g_status) ? WSTOPSIG(g_status) : 0;
168		if (sig == SIGSTOP)
169			sig = 0;
170		ptrace(PT_DETACH, g_pid, (caddr_t)1, sig);
171	}
172}
173
174/*
175 * Write an ELF coredump for the given pid to the given fd.
176 */
177static void
178elf_coredump(int efd, int fd, pid_t pid)
179{
180	vm_map_entry_t map;
181	struct sseg_closure seginfo;
182	struct sbuf *sb;
183	void *hdr;
184	size_t hdrsize, notesz, segoff;
185	ssize_t n, old_len;
186	Elf_Phdr *php;
187	int i;
188
189	/* Attach to process to dump. */
190	g_pid = pid;
191	if (atexit(elf_detach) != 0)
192		err(1, "atexit");
193	errno = 0;
194	ptrace(PT_ATTACH, pid, NULL, 0);
195	if (errno)
196		err(1, "PT_ATTACH");
197	if (waitpid(pid, &g_status, 0) == -1)
198		err(1, "waitpid");
199
200	/* Get the program's memory map. */
201	map = readmap(pid);
202
203	/* Size the program segments. */
204	seginfo.count = 0;
205	seginfo.size = 0;
206	each_writable_segment(map, cb_size_segment, &seginfo);
207
208	/*
209	 * Build the header and the notes using sbuf and write to the file.
210	 */
211	sb = sbuf_new_auto();
212	hdrsize = sizeof(Elf_Ehdr) + sizeof(Elf_Phdr) * (1 + seginfo.count);
213	/* Start header + notes section. */
214	sbuf_start_section(sb, NULL);
215	/* Make empty header subsection. */
216	sbuf_start_section(sb, &old_len);
217	sbuf_putc(sb, 0);
218	sbuf_end_section(sb, old_len, hdrsize, 0);
219	/* Put notes. */
220	elf_putnotes(pid, sb, &notesz);
221	/* Align up to a page boundary for the program segments. */
222	sbuf_end_section(sb, -1, PAGE_SIZE, 0);
223	if (sbuf_finish(sb) != 0)
224		err(1, "sbuf_finish");
225	hdr = sbuf_data(sb);
226	segoff = sbuf_len(sb);
227	/* Fill in the header. */
228	elf_puthdr(efd, pid, map, hdr, hdrsize, notesz, segoff, seginfo.count);
229
230	n = write(fd, hdr, segoff);
231	if (n == -1)
232		err(1, "write");
233	if (n < segoff)
234              errx(1, "short write");
235
236	/* Write the contents of all of the writable segments. */
237	php = (Elf_Phdr *)((char *)hdr + sizeof(Elf_Ehdr)) + 1;
238	for (i = 0;  i < seginfo.count;  i++) {
239		struct ptrace_io_desc iorequest;
240		uintmax_t nleft = php->p_filesz;
241
242		iorequest.piod_op = PIOD_READ_D;
243		iorequest.piod_offs = (caddr_t)(uintptr_t)php->p_vaddr;
244		while (nleft > 0) {
245			char buf[8*1024];
246			size_t nwant;
247			ssize_t ngot;
248
249			if (nleft > sizeof(buf))
250				nwant = sizeof buf;
251			else
252				nwant = nleft;
253			iorequest.piod_addr = buf;
254			iorequest.piod_len = nwant;
255			ptrace(PT_IO, pid, (caddr_t)&iorequest, 0);
256			ngot = iorequest.piod_len;
257			if ((size_t)ngot < nwant)
258				errx(1, "short read wanted %zu, got %zd",
259				    nwant, ngot);
260			ngot = write(fd, buf, nwant);
261			if (ngot == -1)
262				err(1, "write of segment %d failed", i);
263			if ((size_t)ngot != nwant)
264				errx(1, "short write");
265			nleft -= nwant;
266			iorequest.piod_offs += ngot;
267		}
268		php++;
269	}
270	sbuf_delete(sb);
271	freemap(map);
272}
273
274/*
275 * A callback for each_writable_segment() to write out the segment's
276 * program header entry.
277 */
278static void
279cb_put_phdr(vm_map_entry_t entry, void *closure)
280{
281	struct phdr_closure *phc = (struct phdr_closure *)closure;
282	Elf_Phdr *phdr = phc->phdr;
283
284	phc->offset = round_page(phc->offset);
285
286	phdr->p_type = PT_LOAD;
287	phdr->p_offset = phc->offset;
288	phdr->p_vaddr = entry->start;
289	phdr->p_paddr = 0;
290	phdr->p_filesz = phdr->p_memsz = entry->end - entry->start;
291	phdr->p_align = PAGE_SIZE;
292	phdr->p_flags = 0;
293	if (entry->protection & VM_PROT_READ)
294		phdr->p_flags |= PF_R;
295	if (entry->protection & VM_PROT_WRITE)
296		phdr->p_flags |= PF_W;
297	if (entry->protection & VM_PROT_EXECUTE)
298		phdr->p_flags |= PF_X;
299
300	phc->offset += phdr->p_filesz;
301	phc->phdr++;
302}
303
304/*
305 * A callback for each_writable_segment() to gather information about
306 * the number of segments and their total size.
307 */
308static void
309cb_size_segment(vm_map_entry_t entry, void *closure)
310{
311	struct sseg_closure *ssc = (struct sseg_closure *)closure;
312
313	ssc->count++;
314	ssc->size += entry->end - entry->start;
315}
316
317/*
318 * For each segment in the given memory map, call the given function
319 * with a pointer to the map entry and some arbitrary caller-supplied
320 * data.
321 */
322static void
323each_writable_segment(vm_map_entry_t map, segment_callback func, void *closure)
324{
325	vm_map_entry_t entry;
326
327	for (entry = map;  entry != NULL;  entry = entry->next)
328		(*func)(entry, closure);
329}
330
331static void
332elf_putnotes(pid_t pid, struct sbuf *sb, size_t *sizep)
333{
334	lwpid_t *tids;
335	size_t threads, old_len;
336	ssize_t size;
337	int i;
338
339	errno = 0;
340	threads = ptrace(PT_GETNUMLWPS, pid, NULL, 0);
341	if (errno)
342		err(1, "PT_GETNUMLWPS");
343	tids = malloc(threads * sizeof(*tids));
344	if (tids == NULL)
345		errx(1, "out of memory");
346	errno = 0;
347	ptrace(PT_GETLWPLIST, pid, (void *)tids, threads);
348	if (errno)
349		err(1, "PT_GETLWPLIST");
350
351	sbuf_start_section(sb, &old_len);
352	elf_putnote(NT_PRPSINFO, elf_note_prpsinfo, &pid, sb);
353
354	for (i = 0; i < threads; ++i) {
355		elf_putnote(NT_PRSTATUS, elf_note_prstatus, tids + i, sb);
356		elf_putnote(NT_FPREGSET, elf_note_fpregset, tids + i, sb);
357		elf_putnote(NT_THRMISC, elf_note_thrmisc, tids + i, sb);
358#if defined(__i386__) || defined(__amd64__)
359		elf_putnote(NT_X86_XSTATE, elf_note_x86_xstate, tids + i, sb);
360#endif
361	}
362
363#ifndef ELFCORE_COMPAT_32
364	elf_putnote(NT_PROCSTAT_PROC, elf_note_procstat_proc, &pid, sb);
365	elf_putnote(NT_PROCSTAT_FILES, elf_note_procstat_files, &pid, sb);
366	elf_putnote(NT_PROCSTAT_VMMAP, elf_note_procstat_vmmap, &pid, sb);
367	elf_putnote(NT_PROCSTAT_GROUPS, elf_note_procstat_groups, &pid, sb);
368	elf_putnote(NT_PROCSTAT_UMASK, elf_note_procstat_umask, &pid, sb);
369	elf_putnote(NT_PROCSTAT_RLIMIT, elf_note_procstat_rlimit, &pid, sb);
370	elf_putnote(NT_PROCSTAT_OSREL, elf_note_procstat_osrel, &pid, sb);
371	elf_putnote(NT_PROCSTAT_PSSTRINGS, elf_note_procstat_psstrings, &pid,
372	    sb);
373	elf_putnote(NT_PROCSTAT_AUXV, elf_note_procstat_auxv, &pid, sb);
374#endif
375
376	size = sbuf_end_section(sb, old_len, 1, 0);
377	if (size == -1)
378		err(1, "sbuf_end_section");
379	free(tids);
380	*sizep = size;
381}
382
383/*
384 * Emit one note section to sbuf.
385 */
386static void
387elf_putnote(int type, notefunc_t notefunc, void *arg, struct sbuf *sb)
388{
389	Elf_Note note;
390	size_t descsz;
391	ssize_t old_len;
392	void *desc;
393
394	desc = notefunc(arg, &descsz);
395	note.n_namesz = 8; /* strlen("FreeBSD") + 1 */
396	note.n_descsz = descsz;
397	note.n_type = type;
398
399	sbuf_bcat(sb, &note, sizeof(note));
400	sbuf_start_section(sb, &old_len);
401	sbuf_bcat(sb, "FreeBSD", note.n_namesz);
402	sbuf_end_section(sb, old_len, sizeof(Elf32_Size), 0);
403	if (descsz == 0)
404		return;
405	sbuf_start_section(sb, &old_len);
406	sbuf_bcat(sb, desc, descsz);
407	sbuf_end_section(sb, old_len, sizeof(Elf32_Size), 0);
408	free(desc);
409}
410
411/*
412 * Generate the ELF coredump header.
413 */
414static void
415elf_puthdr(int efd, pid_t pid, vm_map_entry_t map, void *hdr, size_t hdrsize,
416    size_t notesz, size_t segoff, int numsegs)
417{
418	Elf_Ehdr *ehdr, binhdr;
419	Elf_Phdr *phdr;
420	struct phdr_closure phc;
421	ssize_t cnt;
422
423	cnt = read(efd, &binhdr, sizeof(binhdr));
424	if (cnt < 0)
425		err(1, "Failed to re-read ELF header");
426	else if (cnt != sizeof(binhdr))
427		errx(1, "Failed to re-read ELF header");
428
429	ehdr = (Elf_Ehdr *)hdr;
430	phdr = (Elf_Phdr *)((char *)hdr + sizeof(Elf_Ehdr));
431
432	ehdr->e_ident[EI_MAG0] = ELFMAG0;
433	ehdr->e_ident[EI_MAG1] = ELFMAG1;
434	ehdr->e_ident[EI_MAG2] = ELFMAG2;
435	ehdr->e_ident[EI_MAG3] = ELFMAG3;
436	ehdr->e_ident[EI_CLASS] = ELF_CLASS;
437	ehdr->e_ident[EI_DATA] = ELF_DATA;
438	ehdr->e_ident[EI_VERSION] = EV_CURRENT;
439	ehdr->e_ident[EI_OSABI] = ELFOSABI_FREEBSD;
440	ehdr->e_ident[EI_ABIVERSION] = 0;
441	ehdr->e_ident[EI_PAD] = 0;
442	ehdr->e_type = ET_CORE;
443	ehdr->e_machine = binhdr.e_machine;
444	ehdr->e_version = EV_CURRENT;
445	ehdr->e_entry = 0;
446	ehdr->e_phoff = sizeof(Elf_Ehdr);
447	ehdr->e_flags = binhdr.e_flags;
448	ehdr->e_ehsize = sizeof(Elf_Ehdr);
449	ehdr->e_phentsize = sizeof(Elf_Phdr);
450	ehdr->e_phnum = numsegs + 1;
451	ehdr->e_shentsize = sizeof(Elf_Shdr);
452	ehdr->e_shnum = 0;
453	ehdr->e_shstrndx = SHN_UNDEF;
454
455	/*
456	 * Fill in the program header entries.
457	 */
458
459	/* The note segement. */
460	phdr->p_type = PT_NOTE;
461	phdr->p_offset = hdrsize;
462	phdr->p_vaddr = 0;
463	phdr->p_paddr = 0;
464	phdr->p_filesz = notesz;
465	phdr->p_memsz = 0;
466	phdr->p_flags = PF_R;
467	phdr->p_align = sizeof(Elf32_Size);
468	phdr++;
469
470	/* All the writable segments from the program. */
471	phc.phdr = phdr;
472	phc.offset = segoff;
473	each_writable_segment(map, cb_put_phdr, &phc);
474}
475
476/*
477 * Free the memory map.
478 */
479static void
480freemap(vm_map_entry_t map)
481{
482
483	while (map != NULL) {
484		vm_map_entry_t next = map->next;
485		free(map);
486		map = next;
487	}
488}
489
490/*
491 * Read the process's memory map using kinfo_getvmmap(), and return a list of
492 * VM map entries.  Only the non-device read/writable segments are
493 * returned.  The map entries in the list aren't fully filled in; only
494 * the items we need are present.
495 */
496static vm_map_entry_t
497readmap(pid_t pid)
498{
499	vm_map_entry_t ent, *linkp, map;
500	struct kinfo_vmentry *vmentl, *kve;
501	int i, nitems;
502
503	vmentl = kinfo_getvmmap(pid, &nitems);
504	if (vmentl == NULL)
505		err(1, "cannot retrieve mappings for %u process", pid);
506
507	map = NULL;
508	linkp = &map;
509	for (i = 0; i < nitems; i++) {
510		kve = &vmentl[i];
511
512		/*
513		 * Ignore 'malformed' segments or ones representing memory
514		 * mapping with MAP_NOCORE on.
515		 * If the 'full' support is disabled, just dump the most
516		 * meaningful data segments.
517		 */
518		if ((kve->kve_protection & KVME_PROT_READ) == 0 ||
519		    (kve->kve_flags & KVME_FLAG_NOCOREDUMP) != 0 ||
520		    kve->kve_type == KVME_TYPE_DEAD ||
521		    kve->kve_type == KVME_TYPE_UNKNOWN ||
522		    ((pflags & PFLAGS_FULL) == 0 &&
523		    kve->kve_type != KVME_TYPE_DEFAULT &&
524		    kve->kve_type != KVME_TYPE_VNODE &&
525		    kve->kve_type != KVME_TYPE_SWAP &&
526		    kve->kve_type != KVME_TYPE_PHYS))
527			continue;
528
529		ent = calloc(1, sizeof(*ent));
530		if (ent == NULL)
531			errx(1, "out of memory");
532		ent->start = (vm_offset_t)kve->kve_start;
533		ent->end = (vm_offset_t)kve->kve_end;
534		ent->protection = VM_PROT_READ | VM_PROT_WRITE;
535		if ((kve->kve_protection & KVME_PROT_EXEC) != 0)
536			ent->protection |= VM_PROT_EXECUTE;
537
538		*linkp = ent;
539		linkp = &ent->next;
540	}
541	free(vmentl);
542	return (map);
543}
544
545/*
546 * Miscellaneous note out functions.
547 */
548
549static void *
550elf_note_prpsinfo(void *arg, size_t *sizep)
551{
552	char *cp, *end;
553	pid_t pid;
554	elfcore_prpsinfo_t *psinfo;
555	struct kinfo_proc kip;
556	size_t len;
557	int name[4];
558
559	pid = *(pid_t *)arg;
560	psinfo = calloc(1, sizeof(*psinfo));
561	if (psinfo == NULL)
562		errx(1, "out of memory");
563	psinfo->pr_version = PRPSINFO_VERSION;
564	psinfo->pr_psinfosz = sizeof(*psinfo);
565
566	name[0] = CTL_KERN;
567	name[1] = KERN_PROC;
568	name[2] = KERN_PROC_PID;
569	name[3] = pid;
570	len = sizeof(kip);
571	if (sysctl(name, 4, &kip, &len, NULL, 0) == -1)
572		err(1, "kern.proc.pid.%u", pid);
573	if (kip.ki_pid != pid)
574		err(1, "kern.proc.pid.%u", pid);
575	strlcpy(psinfo->pr_fname, kip.ki_comm, sizeof(psinfo->pr_fname));
576	name[2] = KERN_PROC_ARGS;
577	len = sizeof(psinfo->pr_psargs) - 1;
578	if (sysctl(name, 4, psinfo->pr_psargs, &len, NULL, 0) == 0 && len > 0) {
579		cp = psinfo->pr_psargs;
580		end = cp + len - 1;
581		for (;;) {
582			cp = memchr(cp, '\0', end - cp);
583			if (cp == NULL)
584				break;
585			*cp = ' ';
586		}
587	} else
588		strlcpy(psinfo->pr_psargs, kip.ki_comm,
589		    sizeof(psinfo->pr_psargs));
590	psinfo->pr_pid = pid;
591
592	*sizep = sizeof(*psinfo);
593	return (psinfo);
594}
595
596static void *
597elf_note_prstatus(void *arg, size_t *sizep)
598{
599	lwpid_t tid;
600	elfcore_prstatus_t *status;
601	struct reg greg;
602
603	tid = *(lwpid_t *)arg;
604	status = calloc(1, sizeof(*status));
605	if (status == NULL)
606		errx(1, "out of memory");
607	status->pr_version = PRSTATUS_VERSION;
608	status->pr_statussz = sizeof(*status);
609	status->pr_gregsetsz = sizeof(elfcore_gregset_t);
610	status->pr_fpregsetsz = sizeof(elfcore_fpregset_t);
611	status->pr_osreldate = __FreeBSD_version;
612	status->pr_pid = tid;
613	ptrace(PT_GETREGS, tid, (void *)&greg, 0);
614	elf_convert_gregset(&status->pr_reg, &greg);
615
616	*sizep = sizeof(*status);
617	return (status);
618}
619
620static void *
621elf_note_fpregset(void *arg, size_t *sizep)
622{
623	lwpid_t tid;
624	elfcore_fpregset_t *fpregset;
625	fpregset_t fpreg;
626
627	tid = *(lwpid_t *)arg;
628	fpregset = calloc(1, sizeof(*fpregset));
629	if (fpregset == NULL)
630		errx(1, "out of memory");
631	ptrace(PT_GETFPREGS, tid, (void *)&fpreg, 0);
632	elf_convert_fpregset(fpregset, &fpreg);
633
634	*sizep = sizeof(*fpregset);
635	return (fpregset);
636}
637
638static void *
639elf_note_thrmisc(void *arg, size_t *sizep)
640{
641	lwpid_t tid;
642	struct ptrace_lwpinfo lwpinfo;
643	thrmisc_t *thrmisc;
644
645	tid = *(lwpid_t *)arg;
646	thrmisc = calloc(1, sizeof(*thrmisc));
647	if (thrmisc == NULL)
648		errx(1, "out of memory");
649	ptrace(PT_LWPINFO, tid, (void *)&lwpinfo,
650	    sizeof(lwpinfo));
651	memset(&thrmisc->_pad, 0, sizeof(thrmisc->_pad));
652	strcpy(thrmisc->pr_tname, lwpinfo.pl_tdname);
653
654	*sizep = sizeof(*thrmisc);
655	return (thrmisc);
656}
657
658#if defined(__i386__) || defined(__amd64__)
659static void *
660elf_note_x86_xstate(void *arg, size_t *sizep)
661{
662	lwpid_t tid;
663	char *xstate;
664	static bool xsave_checked = false;
665	static struct ptrace_xstate_info info;
666
667	tid = *(lwpid_t *)arg;
668	if (!xsave_checked) {
669		if (ptrace(PT_GETXSTATE_INFO, tid, (void *)&info,
670		    sizeof(info)) != 0)
671			info.xsave_len = 0;
672		xsave_checked = true;
673	}
674	if (info.xsave_len == 0) {
675		*sizep = 0;
676		return (NULL);
677	}
678	xstate = calloc(1, info.xsave_len);
679	ptrace(PT_GETXSTATE, tid, xstate, 0);
680	*(uint64_t *)(xstate + X86_XSTATE_XCR0_OFFSET) = info.xsave_mask;
681	*sizep = info.xsave_len;
682	return (xstate);
683}
684#endif
685
686static void *
687procstat_sysctl(void *arg, int what, size_t structsz, size_t *sizep)
688{
689	size_t len, oldlen;
690	pid_t pid;
691	int name[4], structsize;
692	void *buf, *p;
693
694	pid = *(pid_t *)arg;
695	structsize = structsz;
696	name[0] = CTL_KERN;
697	name[1] = KERN_PROC;
698	name[2] = what;
699	name[3] = pid;
700	len = 0;
701	if (sysctl(name, 4, NULL, &len, NULL, 0) == -1)
702		err(1, "kern.proc.%d.%u", what, pid);
703	buf = calloc(1, sizeof(structsize) + len * 4 / 3);
704	if (buf == NULL)
705		errx(1, "out of memory");
706	bcopy(&structsize, buf, sizeof(structsize));
707	p = (char *)buf + sizeof(structsize);
708	if (sysctl(name, 4, p, &len, NULL, 0) == -1)
709		err(1, "kern.proc.%d.%u", what, pid);
710
711	*sizep = sizeof(structsize) + len;
712	return (buf);
713}
714
715static void *
716elf_note_procstat_proc(void *arg, size_t *sizep)
717{
718
719	return (procstat_sysctl(arg, KERN_PROC_PID | KERN_PROC_INC_THREAD,
720	    sizeof(struct kinfo_proc), sizep));
721}
722
723static void *
724elf_note_procstat_files(void *arg, size_t *sizep)
725{
726
727	return (procstat_sysctl(arg, KERN_PROC_FILEDESC,
728	    sizeof(struct kinfo_file), sizep));
729}
730
731static void *
732elf_note_procstat_vmmap(void *arg, size_t *sizep)
733{
734
735	return (procstat_sysctl(arg, KERN_PROC_VMMAP,
736	    sizeof(struct kinfo_vmentry), sizep));
737}
738
739static void *
740elf_note_procstat_groups(void *arg, size_t *sizep)
741{
742
743	return (procstat_sysctl(arg, KERN_PROC_GROUPS, sizeof(gid_t), sizep));
744}
745
746static void *
747elf_note_procstat_umask(void *arg, size_t *sizep)
748{
749
750	return (procstat_sysctl(arg, KERN_PROC_UMASK, sizeof(u_short), sizep));
751}
752
753static void *
754elf_note_procstat_osrel(void *arg, size_t *sizep)
755{
756
757	return (procstat_sysctl(arg, KERN_PROC_OSREL, sizeof(int), sizep));
758}
759
760static void *
761elf_note_procstat_psstrings(void *arg, size_t *sizep)
762{
763
764	return (procstat_sysctl(arg, KERN_PROC_PS_STRINGS,
765	    sizeof(vm_offset_t), sizep));
766}
767
768static void *
769elf_note_procstat_auxv(void *arg, size_t *sizep)
770{
771
772	return (procstat_sysctl(arg, KERN_PROC_AUXV,
773	    sizeof(Elf_Auxinfo), sizep));
774}
775
776static void *
777elf_note_procstat_rlimit(void *arg, size_t *sizep)
778{
779	pid_t pid;
780	size_t len;
781	int i, name[5], structsize;
782	void *buf, *p;
783
784	pid = *(pid_t *)arg;
785	structsize = sizeof(struct rlimit) * RLIM_NLIMITS;
786	buf = calloc(1, sizeof(structsize) + structsize);
787	if (buf == NULL)
788		errx(1, "out of memory");
789	bcopy(&structsize, buf, sizeof(structsize));
790	p = (char *)buf + sizeof(structsize);
791	name[0] = CTL_KERN;
792	name[1] = KERN_PROC;
793	name[2] = KERN_PROC_RLIMIT;
794	name[3] = pid;
795	len = sizeof(struct rlimit);
796	for (i = 0; i < RLIM_NLIMITS; i++) {
797		name[4] = i;
798		if (sysctl(name, 5, p, &len, NULL, 0) == -1)
799			err(1, "kern.proc.rlimit.%u", pid);
800		if (len != sizeof(struct rlimit))
801			errx(1, "kern.proc.rlimit.%u: short read", pid);
802		p += len;
803	}
804
805	*sizep = sizeof(structsize) + structsize;
806	return (buf);
807}
808
809struct dumpers __elfN(dump) = { elf_ident, elf_coredump };
810TEXT_SET(dumpset, __elfN(dump));
811