elfcore.c revision 306781
1/*- 2 * Copyright (c) 2007 Sandvine Incorporated 3 * Copyright (c) 1998 John D. Polstra 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25 * SUCH DAMAGE. 26 */ 27 28#include <sys/cdefs.h> 29__FBSDID("$FreeBSD: stable/10/usr.bin/gcore/elfcore.c 306781 2016-10-06 19:41:09Z jhb $"); 30 31#include <sys/endian.h> 32#include <sys/param.h> 33#include <sys/procfs.h> 34#include <sys/ptrace.h> 35#include <sys/queue.h> 36#include <sys/linker_set.h> 37#include <sys/sbuf.h> 38#include <sys/sysctl.h> 39#include <sys/user.h> 40#include <sys/wait.h> 41#include <machine/elf.h> 42#include <vm/vm_param.h> 43#include <vm/vm.h> 44#include <vm/pmap.h> 45#include <vm/vm_map.h> 46#include <assert.h> 47#include <err.h> 48#include <errno.h> 49#include <fcntl.h> 50#include <stdbool.h> 51#include <stdint.h> 52#include <stdio.h> 53#include <stdlib.h> 54#include <string.h> 55#include <unistd.h> 56#include <libutil.h> 57 58#include "extern.h" 59 60/* 61 * Code for generating ELF core dumps. 62 */ 63 64typedef void (*segment_callback)(vm_map_entry_t, void *); 65 66/* Closure for cb_put_phdr(). */ 67struct phdr_closure { 68 Elf_Phdr *phdr; /* Program header to fill in */ 69 Elf_Off offset; /* Offset of segment in core file */ 70}; 71 72/* Closure for cb_size_segment(). */ 73struct sseg_closure { 74 int count; /* Count of writable segments. */ 75 size_t size; /* Total size of all writable segments. */ 76}; 77 78#ifdef ELFCORE_COMPAT_32 79typedef struct fpreg32 elfcore_fpregset_t; 80typedef struct reg32 elfcore_gregset_t; 81typedef struct prpsinfo32 elfcore_prpsinfo_t; 82typedef struct prstatus32 elfcore_prstatus_t; 83static void elf_convert_gregset(elfcore_gregset_t *rd, struct reg *rs); 84static void elf_convert_fpregset(elfcore_fpregset_t *rd, struct fpreg *rs); 85#else 86typedef fpregset_t elfcore_fpregset_t; 87typedef gregset_t elfcore_gregset_t; 88typedef prpsinfo_t elfcore_prpsinfo_t; 89typedef prstatus_t elfcore_prstatus_t; 90#define elf_convert_gregset(d,s) *d = *s 91#define elf_convert_fpregset(d,s) *d = *s 92#endif 93 94typedef void* (*notefunc_t)(void *, size_t *); 95 96static void cb_put_phdr(vm_map_entry_t, void *); 97static void cb_size_segment(vm_map_entry_t, void *); 98static void each_writable_segment(vm_map_entry_t, segment_callback, 99 void *closure); 100static void elf_detach(void); /* atexit() handler. */ 101static void *elf_note_fpregset(void *, size_t *); 102static void *elf_note_prpsinfo(void *, size_t *); 103static void *elf_note_prstatus(void *, size_t *); 104static void *elf_note_thrmisc(void *, size_t *); 105#if defined(__i386__) || defined(__amd64__) 106static void *elf_note_x86_xstate(void *, size_t *); 107#endif 108static void *elf_note_procstat_auxv(void *, size_t *); 109static void *elf_note_procstat_files(void *, size_t *); 110static void *elf_note_procstat_groups(void *, size_t *); 111static void *elf_note_procstat_osrel(void *, size_t *); 112static void *elf_note_procstat_proc(void *, size_t *); 113static void *elf_note_procstat_psstrings(void *, size_t *); 114static void *elf_note_procstat_rlimit(void *, size_t *); 115static void *elf_note_procstat_umask(void *, size_t *); 116static void *elf_note_procstat_vmmap(void *, size_t *); 117static void elf_puthdr(pid_t, vm_map_entry_t, void *, size_t, size_t, size_t, 118 int); 119static void elf_putnote(int, notefunc_t, void *, struct sbuf *); 120static void elf_putnotes(pid_t, struct sbuf *, size_t *); 121static void freemap(vm_map_entry_t); 122static vm_map_entry_t readmap(pid_t); 123static void *procstat_sysctl(void *, int, size_t, size_t *sizep); 124 125static pid_t g_pid; /* Pid being dumped, global for elf_detach */ 126static int g_status; /* proc status after ptrace attach */ 127 128static int 129elf_ident(int efd, pid_t pid __unused, char *binfile __unused) 130{ 131 Elf_Ehdr hdr; 132 int cnt; 133 uint16_t machine; 134 135 cnt = read(efd, &hdr, sizeof(hdr)); 136 if (cnt != sizeof(hdr)) 137 return (0); 138 if (!IS_ELF(hdr)) 139 return (0); 140 switch (hdr.e_ident[EI_DATA]) { 141 case ELFDATA2LSB: 142 machine = le16toh(hdr.e_machine); 143 break; 144 case ELFDATA2MSB: 145 machine = be16toh(hdr.e_machine); 146 break; 147 default: 148 return (0); 149 } 150 if (!ELF_MACHINE_OK(machine)) 151 return (0); 152 153 /* Looks good. */ 154 return (1); 155} 156 157static void 158elf_detach(void) 159{ 160 int sig; 161 162 if (g_pid != 0) { 163 /* 164 * Forward any pending signals. SIGSTOP is generated by ptrace 165 * itself, so ignore it. 166 */ 167 sig = WIFSTOPPED(g_status) ? WSTOPSIG(g_status) : 0; 168 if (sig == SIGSTOP) 169 sig = 0; 170 ptrace(PT_DETACH, g_pid, (caddr_t)1, sig); 171 } 172} 173 174/* 175 * Write an ELF coredump for the given pid to the given fd. 176 */ 177static void 178elf_coredump(int efd __unused, int fd, pid_t pid) 179{ 180 vm_map_entry_t map; 181 struct sseg_closure seginfo; 182 struct sbuf *sb; 183 void *hdr; 184 size_t hdrsize, notesz, segoff; 185 ssize_t n, old_len; 186 Elf_Phdr *php; 187 int i; 188 189 /* Attach to process to dump. */ 190 g_pid = pid; 191 if (atexit(elf_detach) != 0) 192 err(1, "atexit"); 193 errno = 0; 194 ptrace(PT_ATTACH, pid, NULL, 0); 195 if (errno) 196 err(1, "PT_ATTACH"); 197 if (waitpid(pid, &g_status, 0) == -1) 198 err(1, "waitpid"); 199 200 /* Get the program's memory map. */ 201 map = readmap(pid); 202 203 /* Size the program segments. */ 204 seginfo.count = 0; 205 seginfo.size = 0; 206 each_writable_segment(map, cb_size_segment, &seginfo); 207 208 /* 209 * Build the header and the notes using sbuf and write to the file. 210 */ 211 sb = sbuf_new_auto(); 212 hdrsize = sizeof(Elf_Ehdr) + sizeof(Elf_Phdr) * (1 + seginfo.count); 213 /* Start header + notes section. */ 214 sbuf_start_section(sb, NULL); 215 /* Make empty header subsection. */ 216 sbuf_start_section(sb, &old_len); 217 sbuf_putc(sb, 0); 218 sbuf_end_section(sb, old_len, hdrsize, 0); 219 /* Put notes. */ 220 elf_putnotes(pid, sb, ¬esz); 221 /* Align up to a page boundary for the program segments. */ 222 sbuf_end_section(sb, -1, PAGE_SIZE, 0); 223 if (sbuf_finish(sb) != 0) 224 err(1, "sbuf_finish"); 225 hdr = sbuf_data(sb); 226 segoff = sbuf_len(sb); 227 /* Fill in the header. */ 228 elf_puthdr(pid, map, hdr, hdrsize, notesz, segoff, seginfo.count); 229 230 n = write(fd, hdr, segoff); 231 if (n == -1) 232 err(1, "write"); 233 if (n < segoff) 234 errx(1, "short write"); 235 236 /* Write the contents of all of the writable segments. */ 237 php = (Elf_Phdr *)((char *)hdr + sizeof(Elf_Ehdr)) + 1; 238 for (i = 0; i < seginfo.count; i++) { 239 struct ptrace_io_desc iorequest; 240 uintmax_t nleft = php->p_filesz; 241 242 iorequest.piod_op = PIOD_READ_D; 243 iorequest.piod_offs = (caddr_t)(uintptr_t)php->p_vaddr; 244 while (nleft > 0) { 245 char buf[8*1024]; 246 size_t nwant; 247 ssize_t ngot; 248 249 if (nleft > sizeof(buf)) 250 nwant = sizeof buf; 251 else 252 nwant = nleft; 253 iorequest.piod_addr = buf; 254 iorequest.piod_len = nwant; 255 ptrace(PT_IO, pid, (caddr_t)&iorequest, 0); 256 ngot = iorequest.piod_len; 257 if ((size_t)ngot < nwant) 258 errx(1, "short read wanted %zu, got %zd", 259 nwant, ngot); 260 ngot = write(fd, buf, nwant); 261 if (ngot == -1) 262 err(1, "write of segment %d failed", i); 263 if ((size_t)ngot != nwant) 264 errx(1, "short write"); 265 nleft -= nwant; 266 iorequest.piod_offs += ngot; 267 } 268 php++; 269 } 270 sbuf_delete(sb); 271 freemap(map); 272} 273 274/* 275 * A callback for each_writable_segment() to write out the segment's 276 * program header entry. 277 */ 278static void 279cb_put_phdr(vm_map_entry_t entry, void *closure) 280{ 281 struct phdr_closure *phc = (struct phdr_closure *)closure; 282 Elf_Phdr *phdr = phc->phdr; 283 284 phc->offset = round_page(phc->offset); 285 286 phdr->p_type = PT_LOAD; 287 phdr->p_offset = phc->offset; 288 phdr->p_vaddr = entry->start; 289 phdr->p_paddr = 0; 290 phdr->p_filesz = phdr->p_memsz = entry->end - entry->start; 291 phdr->p_align = PAGE_SIZE; 292 phdr->p_flags = 0; 293 if (entry->protection & VM_PROT_READ) 294 phdr->p_flags |= PF_R; 295 if (entry->protection & VM_PROT_WRITE) 296 phdr->p_flags |= PF_W; 297 if (entry->protection & VM_PROT_EXECUTE) 298 phdr->p_flags |= PF_X; 299 300 phc->offset += phdr->p_filesz; 301 phc->phdr++; 302} 303 304/* 305 * A callback for each_writable_segment() to gather information about 306 * the number of segments and their total size. 307 */ 308static void 309cb_size_segment(vm_map_entry_t entry, void *closure) 310{ 311 struct sseg_closure *ssc = (struct sseg_closure *)closure; 312 313 ssc->count++; 314 ssc->size += entry->end - entry->start; 315} 316 317/* 318 * For each segment in the given memory map, call the given function 319 * with a pointer to the map entry and some arbitrary caller-supplied 320 * data. 321 */ 322static void 323each_writable_segment(vm_map_entry_t map, segment_callback func, void *closure) 324{ 325 vm_map_entry_t entry; 326 327 for (entry = map; entry != NULL; entry = entry->next) 328 (*func)(entry, closure); 329} 330 331static void 332elf_putnotes(pid_t pid, struct sbuf *sb, size_t *sizep) 333{ 334 lwpid_t *tids; 335 size_t threads, old_len; 336 ssize_t size; 337 int i; 338 339 errno = 0; 340 threads = ptrace(PT_GETNUMLWPS, pid, NULL, 0); 341 if (errno) 342 err(1, "PT_GETNUMLWPS"); 343 tids = malloc(threads * sizeof(*tids)); 344 if (tids == NULL) 345 errx(1, "out of memory"); 346 errno = 0; 347 ptrace(PT_GETLWPLIST, pid, (void *)tids, threads); 348 if (errno) 349 err(1, "PT_GETLWPLIST"); 350 351 sbuf_start_section(sb, &old_len); 352 elf_putnote(NT_PRPSINFO, elf_note_prpsinfo, &pid, sb); 353 354 for (i = 0; i < threads; ++i) { 355 elf_putnote(NT_PRSTATUS, elf_note_prstatus, tids + i, sb); 356 elf_putnote(NT_FPREGSET, elf_note_fpregset, tids + i, sb); 357 elf_putnote(NT_THRMISC, elf_note_thrmisc, tids + i, sb); 358#if defined(__i386__) || defined(__amd64__) 359 elf_putnote(NT_X86_XSTATE, elf_note_x86_xstate, tids + i, sb); 360#endif 361 } 362 363#ifndef ELFCORE_COMPAT_32 364 elf_putnote(NT_PROCSTAT_PROC, elf_note_procstat_proc, &pid, sb); 365 elf_putnote(NT_PROCSTAT_FILES, elf_note_procstat_files, &pid, sb); 366 elf_putnote(NT_PROCSTAT_VMMAP, elf_note_procstat_vmmap, &pid, sb); 367 elf_putnote(NT_PROCSTAT_GROUPS, elf_note_procstat_groups, &pid, sb); 368 elf_putnote(NT_PROCSTAT_UMASK, elf_note_procstat_umask, &pid, sb); 369 elf_putnote(NT_PROCSTAT_RLIMIT, elf_note_procstat_rlimit, &pid, sb); 370 elf_putnote(NT_PROCSTAT_OSREL, elf_note_procstat_osrel, &pid, sb); 371 elf_putnote(NT_PROCSTAT_PSSTRINGS, elf_note_procstat_psstrings, &pid, 372 sb); 373 elf_putnote(NT_PROCSTAT_AUXV, elf_note_procstat_auxv, &pid, sb); 374#endif 375 376 size = sbuf_end_section(sb, old_len, 1, 0); 377 if (size == -1) 378 err(1, "sbuf_end_section"); 379 free(tids); 380 *sizep = size; 381} 382 383/* 384 * Emit one note section to sbuf. 385 */ 386static void 387elf_putnote(int type, notefunc_t notefunc, void *arg, struct sbuf *sb) 388{ 389 Elf_Note note; 390 size_t descsz; 391 ssize_t old_len; 392 void *desc; 393 394 desc = notefunc(arg, &descsz); 395 note.n_namesz = 8; /* strlen("FreeBSD") + 1 */ 396 note.n_descsz = descsz; 397 note.n_type = type; 398 399 sbuf_bcat(sb, ¬e, sizeof(note)); 400 sbuf_start_section(sb, &old_len); 401 sbuf_bcat(sb, "FreeBSD", note.n_namesz); 402 sbuf_end_section(sb, old_len, sizeof(Elf32_Size), 0); 403 if (descsz == 0) 404 return; 405 sbuf_start_section(sb, &old_len); 406 sbuf_bcat(sb, desc, descsz); 407 sbuf_end_section(sb, old_len, sizeof(Elf32_Size), 0); 408 free(desc); 409} 410 411/* 412 * Generate the ELF coredump header. 413 */ 414static void 415elf_puthdr(pid_t pid, vm_map_entry_t map, void *hdr, size_t hdrsize, 416 size_t notesz, size_t segoff, int numsegs) 417{ 418 Elf_Ehdr *ehdr; 419 Elf_Phdr *phdr; 420 struct phdr_closure phc; 421 422 ehdr = (Elf_Ehdr *)hdr; 423 phdr = (Elf_Phdr *)((char *)hdr + sizeof(Elf_Ehdr)); 424 425 ehdr->e_ident[EI_MAG0] = ELFMAG0; 426 ehdr->e_ident[EI_MAG1] = ELFMAG1; 427 ehdr->e_ident[EI_MAG2] = ELFMAG2; 428 ehdr->e_ident[EI_MAG3] = ELFMAG3; 429 ehdr->e_ident[EI_CLASS] = ELF_CLASS; 430 ehdr->e_ident[EI_DATA] = ELF_DATA; 431 ehdr->e_ident[EI_VERSION] = EV_CURRENT; 432 ehdr->e_ident[EI_OSABI] = ELFOSABI_FREEBSD; 433 ehdr->e_ident[EI_ABIVERSION] = 0; 434 ehdr->e_ident[EI_PAD] = 0; 435 ehdr->e_type = ET_CORE; 436 ehdr->e_machine = ELF_ARCH; 437 ehdr->e_version = EV_CURRENT; 438 ehdr->e_entry = 0; 439 ehdr->e_phoff = sizeof(Elf_Ehdr); 440 ehdr->e_flags = 0; 441 ehdr->e_ehsize = sizeof(Elf_Ehdr); 442 ehdr->e_phentsize = sizeof(Elf_Phdr); 443 ehdr->e_phnum = numsegs + 1; 444 ehdr->e_shentsize = sizeof(Elf_Shdr); 445 ehdr->e_shnum = 0; 446 ehdr->e_shstrndx = SHN_UNDEF; 447 448 /* 449 * Fill in the program header entries. 450 */ 451 452 /* The note segement. */ 453 phdr->p_type = PT_NOTE; 454 phdr->p_offset = hdrsize; 455 phdr->p_vaddr = 0; 456 phdr->p_paddr = 0; 457 phdr->p_filesz = notesz; 458 phdr->p_memsz = 0; 459 phdr->p_flags = PF_R; 460 phdr->p_align = sizeof(Elf32_Size); 461 phdr++; 462 463 /* All the writable segments from the program. */ 464 phc.phdr = phdr; 465 phc.offset = segoff; 466 each_writable_segment(map, cb_put_phdr, &phc); 467} 468 469/* 470 * Free the memory map. 471 */ 472static void 473freemap(vm_map_entry_t map) 474{ 475 476 while (map != NULL) { 477 vm_map_entry_t next = map->next; 478 free(map); 479 map = next; 480 } 481} 482 483/* 484 * Read the process's memory map using kinfo_getvmmap(), and return a list of 485 * VM map entries. Only the non-device read/writable segments are 486 * returned. The map entries in the list aren't fully filled in; only 487 * the items we need are present. 488 */ 489static vm_map_entry_t 490readmap(pid_t pid) 491{ 492 vm_map_entry_t ent, *linkp, map; 493 struct kinfo_vmentry *vmentl, *kve; 494 int i, nitems; 495 496 vmentl = kinfo_getvmmap(pid, &nitems); 497 if (vmentl == NULL) 498 err(1, "cannot retrieve mappings for %u process", pid); 499 500 map = NULL; 501 linkp = ↦ 502 for (i = 0; i < nitems; i++) { 503 kve = &vmentl[i]; 504 505 /* 506 * Ignore 'malformed' segments or ones representing memory 507 * mapping with MAP_NOCORE on. 508 * If the 'full' support is disabled, just dump the most 509 * meaningful data segments. 510 */ 511 if ((kve->kve_protection & KVME_PROT_READ) == 0 || 512 (kve->kve_flags & KVME_FLAG_NOCOREDUMP) != 0 || 513 kve->kve_type == KVME_TYPE_DEAD || 514 kve->kve_type == KVME_TYPE_UNKNOWN || 515 ((pflags & PFLAGS_FULL) == 0 && 516 kve->kve_type != KVME_TYPE_DEFAULT && 517 kve->kve_type != KVME_TYPE_VNODE && 518 kve->kve_type != KVME_TYPE_SWAP && 519 kve->kve_type != KVME_TYPE_PHYS)) 520 continue; 521 522 ent = calloc(1, sizeof(*ent)); 523 if (ent == NULL) 524 errx(1, "out of memory"); 525 ent->start = (vm_offset_t)kve->kve_start; 526 ent->end = (vm_offset_t)kve->kve_end; 527 ent->protection = VM_PROT_READ | VM_PROT_WRITE; 528 if ((kve->kve_protection & KVME_PROT_EXEC) != 0) 529 ent->protection |= VM_PROT_EXECUTE; 530 531 *linkp = ent; 532 linkp = &ent->next; 533 } 534 free(vmentl); 535 return (map); 536} 537 538/* 539 * Miscellaneous note out functions. 540 */ 541 542static void * 543elf_note_prpsinfo(void *arg, size_t *sizep) 544{ 545 pid_t pid; 546 elfcore_prpsinfo_t *psinfo; 547 struct kinfo_proc kip; 548 size_t len; 549 int name[4]; 550 551 pid = *(pid_t *)arg; 552 psinfo = calloc(1, sizeof(*psinfo)); 553 if (psinfo == NULL) 554 errx(1, "out of memory"); 555 psinfo->pr_version = PRPSINFO_VERSION; 556 psinfo->pr_psinfosz = sizeof(*psinfo); 557 558 name[0] = CTL_KERN; 559 name[1] = KERN_PROC; 560 name[2] = KERN_PROC_PID; 561 name[3] = pid; 562 len = sizeof(kip); 563 if (sysctl(name, 4, &kip, &len, NULL, 0) == -1) 564 err(1, "kern.proc.pid.%u", pid); 565 if (kip.ki_pid != pid) 566 err(1, "kern.proc.pid.%u", pid); 567 strlcpy(psinfo->pr_fname, kip.ki_comm, sizeof(psinfo->pr_fname)); 568 strlcpy(psinfo->pr_psargs, psinfo->pr_fname, sizeof(psinfo->pr_psargs)); 569 570 *sizep = sizeof(*psinfo); 571 return (psinfo); 572} 573 574static void * 575elf_note_prstatus(void *arg, size_t *sizep) 576{ 577 lwpid_t tid; 578 elfcore_prstatus_t *status; 579 struct reg greg; 580 581 tid = *(lwpid_t *)arg; 582 status = calloc(1, sizeof(*status)); 583 if (status == NULL) 584 errx(1, "out of memory"); 585 status->pr_version = PRSTATUS_VERSION; 586 status->pr_statussz = sizeof(*status); 587 status->pr_gregsetsz = sizeof(elfcore_gregset_t); 588 status->pr_fpregsetsz = sizeof(elfcore_fpregset_t); 589 status->pr_osreldate = __FreeBSD_version; 590 status->pr_pid = tid; 591 ptrace(PT_GETREGS, tid, (void *)&greg, 0); 592 elf_convert_gregset(&status->pr_reg, &greg); 593 594 *sizep = sizeof(*status); 595 return (status); 596} 597 598static void * 599elf_note_fpregset(void *arg, size_t *sizep) 600{ 601 lwpid_t tid; 602 elfcore_fpregset_t *fpregset; 603 fpregset_t fpreg; 604 605 tid = *(lwpid_t *)arg; 606 fpregset = calloc(1, sizeof(*fpregset)); 607 if (fpregset == NULL) 608 errx(1, "out of memory"); 609 ptrace(PT_GETFPREGS, tid, (void *)&fpreg, 0); 610 elf_convert_fpregset(fpregset, &fpreg); 611 612 *sizep = sizeof(*fpregset); 613 return (fpregset); 614} 615 616static void * 617elf_note_thrmisc(void *arg, size_t *sizep) 618{ 619 lwpid_t tid; 620 struct ptrace_lwpinfo lwpinfo; 621 thrmisc_t *thrmisc; 622 623 tid = *(lwpid_t *)arg; 624 thrmisc = calloc(1, sizeof(*thrmisc)); 625 if (thrmisc == NULL) 626 errx(1, "out of memory"); 627 ptrace(PT_LWPINFO, tid, (void *)&lwpinfo, 628 sizeof(lwpinfo)); 629 memset(&thrmisc->_pad, 0, sizeof(thrmisc->_pad)); 630 strcpy(thrmisc->pr_tname, lwpinfo.pl_tdname); 631 632 *sizep = sizeof(*thrmisc); 633 return (thrmisc); 634} 635 636#if defined(__i386__) || defined(__amd64__) 637static void * 638elf_note_x86_xstate(void *arg, size_t *sizep) 639{ 640 lwpid_t tid; 641 char *xstate; 642 static bool xsave_checked = false; 643 static struct ptrace_xstate_info info; 644 645 tid = *(lwpid_t *)arg; 646 if (!xsave_checked) { 647 if (ptrace(PT_GETXSTATE_INFO, tid, (void *)&info, 648 sizeof(info)) != 0) 649 info.xsave_len = 0; 650 xsave_checked = true; 651 } 652 if (info.xsave_len == 0) { 653 *sizep = 0; 654 return (NULL); 655 } 656 xstate = calloc(1, info.xsave_len); 657 ptrace(PT_GETXSTATE, tid, xstate, 0); 658 *(uint64_t *)(xstate + X86_XSTATE_XCR0_OFFSET) = info.xsave_mask; 659 *sizep = info.xsave_len; 660 return (xstate); 661} 662#endif 663 664static void * 665procstat_sysctl(void *arg, int what, size_t structsz, size_t *sizep) 666{ 667 size_t len, oldlen; 668 pid_t pid; 669 int name[4], structsize; 670 void *buf, *p; 671 672 pid = *(pid_t *)arg; 673 structsize = structsz; 674 name[0] = CTL_KERN; 675 name[1] = KERN_PROC; 676 name[2] = what; 677 name[3] = pid; 678 len = 0; 679 if (sysctl(name, 4, NULL, &len, NULL, 0) == -1) 680 err(1, "kern.proc.%d.%u", what, pid); 681 buf = calloc(1, sizeof(structsize) + len * 4 / 3); 682 if (buf == NULL) 683 errx(1, "out of memory"); 684 bcopy(&structsize, buf, sizeof(structsize)); 685 p = (char *)buf + sizeof(structsize); 686 if (sysctl(name, 4, p, &len, NULL, 0) == -1) 687 err(1, "kern.proc.%d.%u", what, pid); 688 689 *sizep = sizeof(structsize) + len; 690 return (buf); 691} 692 693static void * 694elf_note_procstat_proc(void *arg, size_t *sizep) 695{ 696 697 return (procstat_sysctl(arg, KERN_PROC_PID | KERN_PROC_INC_THREAD, 698 sizeof(struct kinfo_proc), sizep)); 699} 700 701static void * 702elf_note_procstat_files(void *arg, size_t *sizep) 703{ 704 705 return (procstat_sysctl(arg, KERN_PROC_FILEDESC, 706 sizeof(struct kinfo_file), sizep)); 707} 708 709static void * 710elf_note_procstat_vmmap(void *arg, size_t *sizep) 711{ 712 713 return (procstat_sysctl(arg, KERN_PROC_VMMAP, 714 sizeof(struct kinfo_vmentry), sizep)); 715} 716 717static void * 718elf_note_procstat_groups(void *arg, size_t *sizep) 719{ 720 721 return (procstat_sysctl(arg, KERN_PROC_GROUPS, sizeof(gid_t), sizep)); 722} 723 724static void * 725elf_note_procstat_umask(void *arg, size_t *sizep) 726{ 727 728 return (procstat_sysctl(arg, KERN_PROC_UMASK, sizeof(u_short), sizep)); 729} 730 731static void * 732elf_note_procstat_osrel(void *arg, size_t *sizep) 733{ 734 735 return (procstat_sysctl(arg, KERN_PROC_OSREL, sizeof(int), sizep)); 736} 737 738static void * 739elf_note_procstat_psstrings(void *arg, size_t *sizep) 740{ 741 742 return (procstat_sysctl(arg, KERN_PROC_PS_STRINGS, 743 sizeof(vm_offset_t), sizep)); 744} 745 746static void * 747elf_note_procstat_auxv(void *arg, size_t *sizep) 748{ 749 750 return (procstat_sysctl(arg, KERN_PROC_AUXV, 751 sizeof(Elf_Auxinfo), sizep)); 752} 753 754static void * 755elf_note_procstat_rlimit(void *arg, size_t *sizep) 756{ 757 pid_t pid; 758 size_t len; 759 int i, name[5], structsize; 760 void *buf, *p; 761 762 pid = *(pid_t *)arg; 763 structsize = sizeof(struct rlimit) * RLIM_NLIMITS; 764 buf = calloc(1, sizeof(structsize) + structsize); 765 if (buf == NULL) 766 errx(1, "out of memory"); 767 bcopy(&structsize, buf, sizeof(structsize)); 768 p = (char *)buf + sizeof(structsize); 769 name[0] = CTL_KERN; 770 name[1] = KERN_PROC; 771 name[2] = KERN_PROC_RLIMIT; 772 name[3] = pid; 773 len = sizeof(struct rlimit); 774 for (i = 0; i < RLIM_NLIMITS; i++) { 775 name[4] = i; 776 if (sysctl(name, 5, p, &len, NULL, 0) == -1) 777 err(1, "kern.proc.rlimit.%u", pid); 778 if (len != sizeof(struct rlimit)) 779 errx(1, "kern.proc.rlimit.%u: short read", pid); 780 p += len; 781 } 782 783 *sizep = sizeof(structsize) + structsize; 784 return (buf); 785} 786 787struct dumpers __elfN(dump) = { elf_ident, elf_coredump }; 788TEXT_SET(dumpset, __elfN(dump)); 789