kdump.c revision 304449
1206497Sluigi/*- 2206552Sluigi * Copyright (c) 1988, 1993 3206552Sluigi * The Regents of the University of California. All rights reserved. 4206497Sluigi * 5206497Sluigi * Redistribution and use in source and binary forms, with or without 6206497Sluigi * modification, are permitted provided that the following conditions 7206497Sluigi * are met: 8206497Sluigi * 1. Redistributions of source code must retain the above copyright 9206497Sluigi * notice, this list of conditions and the following disclaimer. 10206497Sluigi * 2. Redistributions in binary form must reproduce the above copyright 11206497Sluigi * notice, this list of conditions and the following disclaimer in the 12206497Sluigi * documentation and/or other materials provided with the distribution. 13206497Sluigi * 4. Neither the name of the University nor the names of its contributors 14206497Sluigi * may be used to endorse or promote products derived from this software 15206497Sluigi * without specific prior written permission. 16206497Sluigi * 17206497Sluigi * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 18206497Sluigi * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19206497Sluigi * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20206497Sluigi * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 21206497Sluigi * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22206497Sluigi * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23206497Sluigi * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24206497Sluigi * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25206497Sluigi * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26206497Sluigi * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27206497Sluigi * SUCH DAMAGE. 28206497Sluigi */ 29206497Sluigi 30206497Sluigi#ifndef lint 31206497Sluigistatic const char copyright[] = 32206497Sluigi"@(#) Copyright (c) 1988, 1993\n\ 33206497Sluigi The Regents of the University of California. All rights reserved.\n"; 34206497Sluigi#endif /* not lint */ 35206497Sluigi 36206497Sluigi#ifndef lint 37206497Sluigi#if 0 38206497Sluigistatic char sccsid[] = "@(#)kdump.c 8.1 (Berkeley) 6/6/93"; 39206497Sluigi#endif 40206497Sluigi#endif /* not lint */ 41206497Sluigi#include <sys/cdefs.h> 42206497Sluigi__FBSDID("$FreeBSD: stable/11/usr.bin/kdump/kdump.c 304449 2016-08-19 07:48:32Z kib $"); 43206497Sluigi 44206497Sluigi#define _KERNEL 45206497Sluigiextern int errno; 46206497Sluigi#include <sys/errno.h> 47206497Sluigi#undef _KERNEL 48206497Sluigi#include <sys/param.h> 49206497Sluigi#include <sys/capsicum.h> 50206497Sluigi#include <sys/errno.h> 51206497Sluigi#define _KERNEL 52206497Sluigi#include <sys/time.h> 53206497Sluigi#undef _KERNEL 54206497Sluigi#include <sys/uio.h> 55206497Sluigi#include <sys/ktrace.h> 56206497Sluigi#include <sys/ioctl.h> 57206497Sluigi#include <sys/socket.h> 58206497Sluigi#include <sys/stat.h> 59206497Sluigi#include <sys/sysent.h> 60206497Sluigi#include <sys/umtx.h> 61206497Sluigi#include <sys/un.h> 62223921Sae#include <sys/queue.h> 63206497Sluigi#include <sys/wait.h> 64206497Sluigi#ifdef HAVE_LIBCASPER 65206497Sluigi#include <sys/nv.h> 66206497Sluigi#endif 67206497Sluigi#include <arpa/inet.h> 68206497Sluigi#include <netinet/in.h> 69206497Sluigi#include <ctype.h> 70206497Sluigi#include <err.h> 71206497Sluigi#include <grp.h> 72206497Sluigi#include <inttypes.h> 73206497Sluigi#include <locale.h> 74206497Sluigi#include <netdb.h> 75218675Sluigi#include <nl_types.h> 76206497Sluigi#include <pwd.h> 77206497Sluigi#include <stdio.h> 78206497Sluigi#include <stdlib.h> 79206497Sluigi#include <string.h> 80206497Sluigi#include <sysdecode.h> 81206497Sluigi#include <termios.h> 82206497Sluigi#include <time.h> 83206497Sluigi#include <unistd.h> 84206497Sluigi#include <vis.h> 85206497Sluigi#include "ktrace.h" 86206497Sluigi#include "kdump_subr.h" 87206497Sluigi 88206497Sluigi#ifdef HAVE_LIBCASPER 89206497Sluigi#include <libcasper.h> 90206497Sluigi 91206497Sluigi#include <casper/cap_grp.h> 92218675Sluigi#include <casper/cap_pwd.h> 93206497Sluigi#endif 94206497Sluigi 95206497Sluigiu_int abidump(struct ktr_header *); 96206497Sluigiint fetchprocinfo(struct ktr_header *, u_int *); 97206497Sluigiint fread_tail(void *, int, int); 98206497Sluigivoid dumpheader(struct ktr_header *); 99206497Sluigivoid ktrsyscall(struct ktr_syscall *, u_int); 100206497Sluigivoid ktrsysret(struct ktr_sysret *, u_int); 101206497Sluigivoid ktrnamei(char *, int); 102206497Sluigivoid hexdump(char *, int, int); 103206497Sluigivoid visdump(char *, int, int); 104206497Sluigivoid ktrgenio(struct ktr_genio *, int); 105206497Sluigivoid ktrpsig(struct ktr_psig *); 106206497Sluigivoid ktrcsw(struct ktr_csw *); 107206497Sluigivoid ktrcsw_old(struct ktr_csw_old *); 108206497Sluigivoid ktruser(int, void *); 109206497Sluigivoid ktrcaprights(cap_rights_t *); 110206497Sluigivoid ktritimerval(struct itimerval *it); 111206497Sluigivoid ktrsockaddr(struct sockaddr *); 112206497Sluigivoid ktrstat(struct stat *); 113206497Sluigivoid ktrstruct(char *, size_t); 114206497Sluigivoid ktrcapfail(struct ktr_cap_fail *); 115206497Sluigivoid ktrfault(struct ktr_fault *); 116206497Sluigivoid ktrfaultend(struct ktr_faultend *); 117206497Sluigivoid limitfd(int fd); 118206497Sluigivoid usage(void); 119206497Sluigi 120206497Sluigi#define TIMESTAMP_NONE 0x0 121206497Sluigi#define TIMESTAMP_ABSOLUTE 0x1 122206497Sluigi#define TIMESTAMP_ELAPSED 0x2 123206497Sluigi#define TIMESTAMP_RELATIVE 0x4 124206497Sluigi 125206497Sluigiextern const char *signames[]; 126206497Sluigi 127206497Sluigistatic int timestamp, decimal, fancy = 1, suppressdata, tail, threads, maxdata, 128206497Sluigi resolv = 0, abiflag = 0, syscallno = 0; 129206497Sluigistatic const char *tracefile = DEF_TRACEFILE; 130206497Sluigistatic struct ktr_header ktr_header; 131206497Sluigi 132206497Sluigi#define TIME_FORMAT "%b %e %T %Y" 133206497Sluigi#define eqs(s1, s2) (strcmp((s1), (s2)) == 0) 134206497Sluigi 135206497Sluigi#define print_number(i,n,c) do { \ 136206497Sluigi if (decimal) \ 137206497Sluigi printf("%c%jd", c, (intmax_t)*i); \ 138206497Sluigi else \ 139206497Sluigi printf("%c%#jx", c, (uintmax_t)(u_register_t)*i); \ 140206497Sluigi i++; \ 141206497Sluigi n--; \ 142206497Sluigi c = ','; \ 143206497Sluigi} while (0) 144206497Sluigi 145206497Sluigistruct proc_info 146206497Sluigi{ 147206497Sluigi TAILQ_ENTRY(proc_info) info; 148206497Sluigi u_int sv_flags; 149206497Sluigi pid_t pid; 150206497Sluigi}; 151206497Sluigi 152206497Sluigistatic TAILQ_HEAD(trace_procs, proc_info) trace_procs; 153206497Sluigi 154206497Sluigi#ifdef HAVE_LIBCASPER 155206497Sluigistatic cap_channel_t *cappwd, *capgrp; 156206497Sluigi#endif 157206497Sluigi 158206497Sluigistatic void 159206497Sluigistrerror_init(void) 160206497Sluigi{ 161206497Sluigi 162206497Sluigi /* 163206497Sluigi * Cache NLS data before entering capability mode. 164206497Sluigi * XXXPJD: There should be strerror_init() and strsignal_init() in libc. 165206497Sluigi */ 166206497Sluigi (void)catopen("libc", NL_CAT_LOCALE); 167206497Sluigi} 168206497Sluigi 169206497Sluigistatic void 170206497Sluigilocaltime_init(void) 171206497Sluigi{ 172206497Sluigi time_t ltime; 173206497Sluigi 174206497Sluigi /* 175206497Sluigi * Allow localtime(3) to cache /etc/localtime content before entering 176206497Sluigi * capability mode. 177206497Sluigi * XXXPJD: There should be localtime_init() in libc. 178206497Sluigi */ 179206497Sluigi (void)time(<ime); 180206497Sluigi (void)localtime(<ime); 181206497Sluigi} 182206497Sluigi 183206497Sluigi#ifdef HAVE_LIBCASPER 184206497Sluigistatic int 185206497Sluigicappwdgrp_setup(cap_channel_t **cappwdp, cap_channel_t **capgrpp) 186206497Sluigi{ 187206497Sluigi cap_channel_t *capcas, *cappwdloc, *capgrploc; 188206497Sluigi const char *cmds[1], *fields[1]; 189206497Sluigi 190206497Sluigi capcas = cap_init(); 191206497Sluigi if (capcas == NULL) { 192206497Sluigi err(1, "unable to create casper process"); 193206497Sluigi exit(1); 194206497Sluigi } 195206497Sluigi cappwdloc = cap_service_open(capcas, "system.pwd"); 196206497Sluigi capgrploc = cap_service_open(capcas, "system.grp"); 197206497Sluigi /* Casper capability no longer needed. */ 198206497Sluigi cap_close(capcas); 199206497Sluigi if (cappwdloc == NULL || capgrploc == NULL) { 200206497Sluigi if (cappwdloc == NULL) 201227309Sed warn("unable to open system.pwd service"); 202206497Sluigi if (capgrploc == NULL) 203217324Smdf warn("unable to open system.grp service"); 204206497Sluigi exit(1); 205217324Smdf } 206206497Sluigi /* Limit system.pwd to only getpwuid() function and pw_name field. */ 207217324Smdf cmds[0] = "getpwuid"; 208206497Sluigi if (cap_pwd_limit_cmds(cappwdloc, cmds, 1) < 0) 209217324Smdf err(1, "unable to limit system.pwd service"); 210206497Sluigi fields[0] = "pw_name"; 211217324Smdf if (cap_pwd_limit_fields(cappwdloc, fields, 1) < 0) 212206497Sluigi err(1, "unable to limit system.pwd service"); 213217324Smdf /* Limit system.grp to only getgrgid() function and gr_name field. */ 214206497Sluigi cmds[0] = "getgrgid"; 215217324Smdf if (cap_grp_limit_cmds(capgrploc, cmds, 1) < 0) 216206497Sluigi err(1, "unable to limit system.grp service"); 217217324Smdf fields[0] = "gr_name"; 218206497Sluigi if (cap_grp_limit_fields(capgrploc, fields, 1) < 0) 219217324Smdf err(1, "unable to limit system.grp service"); 220206497Sluigi 221217324Smdf *cappwdp = cappwdloc; 222206497Sluigi *capgrpp = capgrploc; 223206497Sluigi return (0); 224206497Sluigi} 225206497Sluigi#endif /* HAVE_LIBCASPER */ 226206497Sluigi 227206497Sluigiint 228206497Sluigimain(int argc, char *argv[]) 229206497Sluigi{ 230206497Sluigi int ch, ktrlen, size; 231206497Sluigi void *m; 232206497Sluigi int trpoints = ALL_POINTS; 233206497Sluigi int drop_logged; 234206497Sluigi pid_t pid = 0; 235206497Sluigi u_int sv_flags; 236206497Sluigi 237206497Sluigi setlocale(LC_CTYPE, ""); 238206497Sluigi 239206497Sluigi timestamp = TIMESTAMP_NONE; 240206497Sluigi 241206497Sluigi while ((ch = getopt(argc,argv,"f:dElm:np:AHRrSsTt:")) != -1) 242206497Sluigi switch (ch) { 243206497Sluigi case 'A': 244206497Sluigi abiflag = 1; 245206497Sluigi break; 246206497Sluigi case 'f': 247206497Sluigi tracefile = optarg; 248206497Sluigi break; 249206497Sluigi case 'd': 250206497Sluigi decimal = 1; 251206497Sluigi break; 252206497Sluigi case 'l': 253206497Sluigi tail = 1; 254206497Sluigi break; 255206497Sluigi case 'm': 256206497Sluigi maxdata = atoi(optarg); 257206497Sluigi break; 258206497Sluigi case 'n': 259206497Sluigi fancy = 0; 260206497Sluigi break; 261206497Sluigi case 'p': 262206497Sluigi pid = atoi(optarg); 263206497Sluigi break; 264206497Sluigi case 'r': 265206497Sluigi resolv = 1; 266206497Sluigi break; 267206497Sluigi case 'S': 268206497Sluigi syscallno = 1; 269206497Sluigi break; 270206497Sluigi case 's': 271206497Sluigi suppressdata = 1; 272206497Sluigi break; 273206497Sluigi case 'E': 274206497Sluigi timestamp |= TIMESTAMP_ELAPSED; 275206497Sluigi break; 276206497Sluigi case 'H': 277206497Sluigi threads = 1; 278206497Sluigi break; 279206497Sluigi case 'R': 280206497Sluigi timestamp |= TIMESTAMP_RELATIVE; 281206497Sluigi break; 282206497Sluigi case 'T': 283206497Sluigi timestamp |= TIMESTAMP_ABSOLUTE; 284206497Sluigi break; 285206497Sluigi case 't': 286206497Sluigi trpoints = getpoints(optarg); 287206497Sluigi if (trpoints < 0) 288206497Sluigi errx(1, "unknown trace point in %s", optarg); 289206497Sluigi break; 290206497Sluigi default: 291206497Sluigi usage(); 292206497Sluigi } 293206497Sluigi 294206497Sluigi if (argc > optind) 295206497Sluigi usage(); 296206497Sluigi 297206497Sluigi m = malloc(size = 1025); 298206497Sluigi if (m == NULL) 299206497Sluigi errx(1, "%s", strerror(ENOMEM)); 300206497Sluigi if (strcmp(tracefile, "-") != 0) 301206497Sluigi if (!freopen(tracefile, "r", stdin)) 302206497Sluigi err(1, "%s", tracefile); 303206497Sluigi 304206497Sluigi strerror_init(); 305206497Sluigi localtime_init(); 306206497Sluigi#ifdef HAVE_LIBCASPER 307206497Sluigi if (resolv != 0) { 308206497Sluigi if (cappwdgrp_setup(&cappwd, &capgrp) < 0) { 309206497Sluigi cappwd = NULL; 310206497Sluigi capgrp = NULL; 311206497Sluigi } 312206497Sluigi } 313206497Sluigi if (resolv == 0 || (cappwd != NULL && capgrp != NULL)) { 314206497Sluigi if (cap_enter() < 0 && errno != ENOSYS) 315206497Sluigi err(1, "unable to enter capability mode"); 316206497Sluigi } 317206497Sluigi#else 318275947Simp if (resolv == 0) { 319206497Sluigi if (cap_enter() < 0 && errno != ENOSYS) 320206497Sluigi err(1, "unable to enter capability mode"); 321206497Sluigi } 322206497Sluigi#endif 323206497Sluigi limitfd(STDIN_FILENO); 324206497Sluigi limitfd(STDOUT_FILENO); 325206497Sluigi limitfd(STDERR_FILENO); 326206497Sluigi 327206497Sluigi TAILQ_INIT(&trace_procs); 328206497Sluigi drop_logged = 0; 329206497Sluigi while (fread_tail(&ktr_header, sizeof(struct ktr_header), 1)) { 330206497Sluigi if (ktr_header.ktr_type & KTR_DROP) { 331206497Sluigi ktr_header.ktr_type &= ~KTR_DROP; 332206497Sluigi if (!drop_logged && threads) { 333206497Sluigi printf( 334206497Sluigi "%6jd %6jd %-8.*s Events dropped.\n", 335206497Sluigi (intmax_t)ktr_header.ktr_pid, 336206497Sluigi ktr_header.ktr_tid > 0 ? 337206497Sluigi (intmax_t)ktr_header.ktr_tid : 0, 338206497Sluigi MAXCOMLEN, ktr_header.ktr_comm); 339206497Sluigi drop_logged = 1; 340206497Sluigi } else if (!drop_logged) { 341206497Sluigi printf("%6jd %-8.*s Events dropped.\n", 342206497Sluigi (intmax_t)ktr_header.ktr_pid, MAXCOMLEN, 343206497Sluigi ktr_header.ktr_comm); 344206497Sluigi drop_logged = 1; 345206497Sluigi } 346206497Sluigi } 347206497Sluigi if (trpoints & (1<<ktr_header.ktr_type)) 348206497Sluigi if (pid == 0 || ktr_header.ktr_pid == pid || 349206497Sluigi ktr_header.ktr_tid == pid) 350206497Sluigi dumpheader(&ktr_header); 351206497Sluigi if ((ktrlen = ktr_header.ktr_len) < 0) 352206497Sluigi errx(1, "bogus length 0x%x", ktrlen); 353275947Simp if (ktrlen > size) { 354206497Sluigi m = realloc(m, ktrlen+1); 355206497Sluigi if (m == NULL) 356206497Sluigi errx(1, "%s", strerror(ENOMEM)); 357206497Sluigi size = ktrlen; 358206497Sluigi } 359206497Sluigi if (ktrlen && fread_tail(m, ktrlen, 1) == 0) 360206497Sluigi errx(1, "data too short"); 361206497Sluigi if (fetchprocinfo(&ktr_header, (u_int *)m) != 0) 362206497Sluigi continue; 363206497Sluigi sv_flags = abidump(&ktr_header); 364206497Sluigi if (pid && ktr_header.ktr_pid != pid && 365206497Sluigi ktr_header.ktr_tid != pid) 366206497Sluigi continue; 367206497Sluigi if ((trpoints & (1<<ktr_header.ktr_type)) == 0) 368206497Sluigi continue; 369206497Sluigi drop_logged = 0; 370206497Sluigi switch (ktr_header.ktr_type) { 371206497Sluigi case KTR_SYSCALL: 372206497Sluigi ktrsyscall((struct ktr_syscall *)m, sv_flags); 373206497Sluigi break; 374206497Sluigi case KTR_SYSRET: 375206497Sluigi ktrsysret((struct ktr_sysret *)m, sv_flags); 376206497Sluigi break; 377206497Sluigi case KTR_NAMEI: 378206497Sluigi case KTR_SYSCTL: 379206497Sluigi ktrnamei(m, ktrlen); 380206497Sluigi break; 381206497Sluigi case KTR_GENIO: 382206497Sluigi ktrgenio((struct ktr_genio *)m, ktrlen); 383206497Sluigi break; 384206497Sluigi case KTR_PSIG: 385206497Sluigi ktrpsig((struct ktr_psig *)m); 386206497Sluigi break; 387206497Sluigi case KTR_CSW: 388206497Sluigi if (ktrlen == sizeof(struct ktr_csw_old)) 389206497Sluigi ktrcsw_old((struct ktr_csw_old *)m); 390206497Sluigi else 391206497Sluigi ktrcsw((struct ktr_csw *)m); 392206497Sluigi break; 393206497Sluigi case KTR_USER: 394206497Sluigi ktruser(ktrlen, m); 395206497Sluigi break; 396206497Sluigi case KTR_STRUCT: 397206497Sluigi ktrstruct(m, ktrlen); 398206497Sluigi break; 399206497Sluigi case KTR_CAPFAIL: 400206497Sluigi ktrcapfail((struct ktr_cap_fail *)m); 401206497Sluigi break; 402206497Sluigi case KTR_FAULT: 403206497Sluigi ktrfault((struct ktr_fault *)m); 404206497Sluigi break; 405206497Sluigi case KTR_FAULTEND: 406206497Sluigi ktrfaultend((struct ktr_faultend *)m); 407206497Sluigi break; 408206497Sluigi default: 409206497Sluigi printf("\n"); 410206497Sluigi break; 411206497Sluigi } 412206497Sluigi if (tail) 413206497Sluigi fflush(stdout); 414206497Sluigi } 415206497Sluigi return 0; 416206497Sluigi} 417206497Sluigi 418206497Sluigivoid 419206497Sluigilimitfd(int fd) 420206497Sluigi{ 421206497Sluigi cap_rights_t rights; 422206497Sluigi unsigned long cmd; 423206497Sluigi 424206497Sluigi cap_rights_init(&rights, CAP_FSTAT); 425206497Sluigi cmd = 0; 426206497Sluigi 427206497Sluigi switch (fd) { 428206497Sluigi case STDIN_FILENO: 429206497Sluigi cap_rights_set(&rights, CAP_READ); 430206497Sluigi break; 431206497Sluigi case STDOUT_FILENO: 432206497Sluigi cap_rights_set(&rights, CAP_IOCTL, CAP_WRITE); 433206497Sluigi cmd = TIOCGETA; /* required by isatty(3) in printf(3) */ 434206497Sluigi break; 435206497Sluigi case STDERR_FILENO: 436206497Sluigi cap_rights_set(&rights, CAP_WRITE); 437206497Sluigi if (!suppressdata) { 438206497Sluigi cap_rights_set(&rights, CAP_IOCTL); 439206497Sluigi cmd = TIOCGWINSZ; 440206497Sluigi } 441275947Simp break; 442206497Sluigi default: 443206497Sluigi abort(); 444206497Sluigi } 445206497Sluigi 446206497Sluigi if (cap_rights_limit(fd, &rights) < 0 && errno != ENOSYS) 447206497Sluigi err(1, "unable to limit rights for descriptor %d", fd); 448206497Sluigi if (cmd != 0 && cap_ioctls_limit(fd, &cmd, 1) < 0 && errno != ENOSYS) 449206497Sluigi err(1, "unable to limit ioctls for descriptor %d", fd); 450206497Sluigi} 451206497Sluigi 452206497Sluigiint 453206497Sluigifread_tail(void *buf, int size, int num) 454206497Sluigi{ 455206497Sluigi int i; 456206497Sluigi 457206497Sluigi while ((i = fread(buf, size, num, stdin)) == 0 && tail) { 458206497Sluigi sleep(1); 459275947Simp clearerr(stdin); 460206497Sluigi } 461206497Sluigi return (i); 462206497Sluigi} 463206497Sluigi 464206497Sluigiint 465206497Sluigifetchprocinfo(struct ktr_header *kth, u_int *flags) 466206497Sluigi{ 467206497Sluigi struct proc_info *pi; 468206497Sluigi 469206497Sluigi switch (kth->ktr_type) { 470206497Sluigi case KTR_PROCCTOR: 471206497Sluigi TAILQ_FOREACH(pi, &trace_procs, info) { 472206497Sluigi if (pi->pid == kth->ktr_pid) { 473206497Sluigi TAILQ_REMOVE(&trace_procs, pi, info); 474206497Sluigi break; 475206497Sluigi } 476206497Sluigi } 477206497Sluigi pi = malloc(sizeof(struct proc_info)); 478206497Sluigi if (pi == NULL) 479206497Sluigi errx(1, "%s", strerror(ENOMEM)); 480206497Sluigi pi->sv_flags = *flags; 481206497Sluigi pi->pid = kth->ktr_pid; 482206497Sluigi TAILQ_INSERT_TAIL(&trace_procs, pi, info); 483206497Sluigi return (1); 484206497Sluigi 485206497Sluigi case KTR_PROCDTOR: 486206497Sluigi TAILQ_FOREACH(pi, &trace_procs, info) { 487206497Sluigi if (pi->pid == kth->ktr_pid) { 488206497Sluigi TAILQ_REMOVE(&trace_procs, pi, info); 489206497Sluigi free(pi); 490206497Sluigi break; 491206497Sluigi } 492206497Sluigi } 493206497Sluigi return (1); 494206497Sluigi } 495206497Sluigi 496206497Sluigi return (0); 497206497Sluigi} 498206497Sluigi 499206497Sluigiu_int 500206497Sluigiabidump(struct ktr_header *kth) 501206497Sluigi{ 502206497Sluigi struct proc_info *pi; 503206497Sluigi const char *abi; 504206497Sluigi const char *arch; 505206497Sluigi u_int flags = 0; 506206497Sluigi 507206497Sluigi TAILQ_FOREACH(pi, &trace_procs, info) { 508206497Sluigi if (pi->pid == kth->ktr_pid) { 509206497Sluigi flags = pi->sv_flags; 510206497Sluigi break; 511206497Sluigi } 512206497Sluigi } 513206497Sluigi 514206497Sluigi if (abiflag == 0) 515206497Sluigi return (flags); 516206497Sluigi 517206497Sluigi switch (flags & SV_ABI_MASK) { 518206497Sluigi case SV_ABI_LINUX: 519206497Sluigi abi = "L"; 520206497Sluigi break; 521206497Sluigi case SV_ABI_FREEBSD: 522206497Sluigi abi = "F"; 523206497Sluigi break; 524206497Sluigi case SV_ABI_CLOUDABI: 525206497Sluigi abi = "C"; 526206497Sluigi break; 527206497Sluigi default: 528206497Sluigi abi = "U"; 529206497Sluigi break; 530206497Sluigi } 531206497Sluigi 532206497Sluigi if (flags & SV_LP64) 533206497Sluigi arch = "64"; 534206497Sluigi else if (flags & SV_ILP32) 535206497Sluigi arch = "32"; 536206497Sluigi else 537206497Sluigi arch = "00"; 538206497Sluigi 539206497Sluigi printf("%s%s ", abi, arch); 540206497Sluigi 541275947Simp return (flags); 542206497Sluigi} 543206497Sluigi 544206497Sluigivoid 545206497Sluigidumpheader(struct ktr_header *kth) 546206497Sluigi{ 547206497Sluigi static char unknown[64]; 548206497Sluigi static struct timeval prevtime, prevtime_e, temp; 549206497Sluigi const char *type; 550206497Sluigi const char *sign; 551206497Sluigi 552206497Sluigi switch (kth->ktr_type) { 553206497Sluigi case KTR_SYSCALL: 554206497Sluigi type = "CALL"; 555206497Sluigi break; 556206497Sluigi case KTR_SYSRET: 557206497Sluigi type = "RET "; 558206497Sluigi break; 559206497Sluigi case KTR_NAMEI: 560206497Sluigi type = "NAMI"; 561206497Sluigi break; 562206497Sluigi case KTR_GENIO: 563275947Simp type = "GIO "; 564206497Sluigi break; 565206497Sluigi case KTR_PSIG: 566206497Sluigi type = "PSIG"; 567206497Sluigi break; 568206497Sluigi case KTR_CSW: 569206497Sluigi type = "CSW "; 570206497Sluigi break; 571206497Sluigi case KTR_USER: 572206497Sluigi type = "USER"; 573206497Sluigi break; 574206497Sluigi case KTR_STRUCT: 575206497Sluigi type = "STRU"; 576206497Sluigi break; 577206497Sluigi case KTR_SYSCTL: 578206497Sluigi type = "SCTL"; 579206497Sluigi break; 580206497Sluigi case KTR_PROCCTOR: 581206497Sluigi /* FALLTHROUGH */ 582206497Sluigi case KTR_PROCDTOR: 583206497Sluigi return; 584206497Sluigi case KTR_CAPFAIL: 585206497Sluigi type = "CAP "; 586206497Sluigi break; 587206497Sluigi case KTR_FAULT: 588206497Sluigi type = "PFLT"; 589206497Sluigi break; 590206497Sluigi case KTR_FAULTEND: 591206497Sluigi type = "PRET"; 592206497Sluigi break; 593206497Sluigi default: 594206497Sluigi sprintf(unknown, "UNKNOWN(%d)", kth->ktr_type); 595206497Sluigi type = unknown; 596206497Sluigi } 597206497Sluigi 598206497Sluigi /* 599206497Sluigi * The ktr_tid field was previously the ktr_buffer field, which held 600206497Sluigi * the kernel pointer value for the buffer associated with data 601206497Sluigi * following the record header. It now holds a threadid, but only 602206497Sluigi * for trace files after the change. Older trace files still contain 603206497Sluigi * kernel pointers. Detect this and suppress the results by printing 604206497Sluigi * negative tid's as 0. 605206497Sluigi */ 606206497Sluigi if (threads) 607206497Sluigi printf("%6jd %6jd %-8.*s ", (intmax_t)kth->ktr_pid, 608206497Sluigi kth->ktr_tid > 0 ? (intmax_t)kth->ktr_tid : 0, 609206497Sluigi MAXCOMLEN, kth->ktr_comm); 610206497Sluigi else 611206497Sluigi printf("%6jd %-8.*s ", (intmax_t)kth->ktr_pid, MAXCOMLEN, 612206497Sluigi kth->ktr_comm); 613206497Sluigi if (timestamp) { 614206497Sluigi if (timestamp & TIMESTAMP_ABSOLUTE) { 615206497Sluigi printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec, 616206497Sluigi kth->ktr_time.tv_usec); 617206497Sluigi } 618206497Sluigi if (timestamp & TIMESTAMP_ELAPSED) { 619206497Sluigi if (prevtime_e.tv_sec == 0) 620206497Sluigi prevtime_e = kth->ktr_time; 621206497Sluigi timevalsub(&kth->ktr_time, &prevtime_e); 622206497Sluigi printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec, 623206497Sluigi kth->ktr_time.tv_usec); 624206497Sluigi timevaladd(&kth->ktr_time, &prevtime_e); 625206497Sluigi } 626206497Sluigi if (timestamp & TIMESTAMP_RELATIVE) { 627206497Sluigi if (prevtime.tv_sec == 0) 628206497Sluigi prevtime = kth->ktr_time; 629206497Sluigi temp = kth->ktr_time; 630206497Sluigi timevalsub(&kth->ktr_time, &prevtime); 631206497Sluigi if ((intmax_t)kth->ktr_time.tv_sec < 0) { 632206497Sluigi kth->ktr_time = prevtime; 633206497Sluigi prevtime = temp; 634206497Sluigi timevalsub(&kth->ktr_time, &prevtime); 635206497Sluigi sign = "-"; 636206497Sluigi } else { 637206497Sluigi prevtime = temp; 638206497Sluigi sign = ""; 639206497Sluigi } 640206497Sluigi printf("%s%jd.%06ld ", sign, (intmax_t)kth->ktr_time.tv_sec, 641206497Sluigi kth->ktr_time.tv_usec); 642206497Sluigi } 643218675Sluigi } 644218675Sluigi printf("%s ", type); 645218675Sluigi} 646218675Sluigi 647218675Sluigi#include <sys/syscall.h> 648218675Sluigi 649218675Sluigistatic void 650218675Sluigiioctlname(unsigned long val) 651218675Sluigi{ 652218675Sluigi const char *str; 653218675Sluigi 654218675Sluigi str = sysdecode_ioctlname(val); 655218675Sluigi if (str != NULL) 656218675Sluigi printf("%s", str); 657218675Sluigi else if (decimal) 658218675Sluigi printf("%lu", val); 659218675Sluigi else 660218675Sluigi printf("%#lx", val); 661206497Sluigi} 662206497Sluigi 663206497Sluigistatic enum sysdecode_abi 664206497Sluigisyscallabi(u_int sv_flags) 665206497Sluigi{ 666206497Sluigi 667206497Sluigi if (sv_flags == 0) 668206497Sluigi return (SYSDECODE_ABI_FREEBSD); 669206497Sluigi switch (sv_flags & SV_ABI_MASK) { 670206497Sluigi case SV_ABI_FREEBSD: 671206497Sluigi return (SYSDECODE_ABI_FREEBSD); 672206497Sluigi#if defined(__amd64__) || defined(__i386__) 673206497Sluigi case SV_ABI_LINUX: 674206497Sluigi#ifdef __amd64__ 675206497Sluigi if (sv_flags & SV_ILP32) 676206497Sluigi return (SYSDECODE_ABI_LINUX32); 677206497Sluigi#endif 678206497Sluigi return (SYSDECODE_ABI_LINUX); 679206497Sluigi#endif 680206497Sluigi#if defined(__aarch64__) || defined(__amd64__) 681206497Sluigi case SV_ABI_CLOUDABI: 682206497Sluigi return (SYSDECODE_ABI_CLOUDABI64); 683206497Sluigi#endif 684206497Sluigi default: 685206497Sluigi return (SYSDECODE_ABI_UNKNOWN); 686206497Sluigi } 687206497Sluigi} 688206497Sluigi 689206497Sluigistatic void 690206497Sluigisyscallname(u_int code, u_int sv_flags) 691206497Sluigi{ 692206497Sluigi const char *name; 693206497Sluigi 694206497Sluigi name = sysdecode_syscallname(syscallabi(sv_flags), code); 695206497Sluigi if (name == NULL) 696206497Sluigi printf("[%d]", code); 697206497Sluigi else { 698206497Sluigi printf("%s", name); 699206497Sluigi if (syscallno) 700 printf("[%d]", code); 701 } 702} 703 704void 705ktrsyscall(struct ktr_syscall *ktr, u_int sv_flags) 706{ 707 int narg = ktr->ktr_narg; 708 register_t *ip; 709 intmax_t arg; 710 711 syscallname(ktr->ktr_code, sv_flags); 712 ip = &ktr->ktr_args[0]; 713 if (narg) { 714 char c = '('; 715 if (fancy && 716 (sv_flags == 0 || 717 (sv_flags & SV_ABI_MASK) == SV_ABI_FREEBSD)) { 718 switch (ktr->ktr_code) { 719 case SYS_bindat: 720 case SYS_connectat: 721 case SYS_faccessat: 722 case SYS_fchmodat: 723 case SYS_fchownat: 724 case SYS_fstatat: 725 case SYS_futimesat: 726 case SYS_linkat: 727 case SYS_mkdirat: 728 case SYS_mkfifoat: 729 case SYS_mknodat: 730 case SYS_openat: 731 case SYS_readlinkat: 732 case SYS_renameat: 733 case SYS_unlinkat: 734 case SYS_utimensat: 735 putchar('('); 736 atfdname(*ip, decimal); 737 c = ','; 738 ip++; 739 narg--; 740 break; 741 } 742 switch (ktr->ktr_code) { 743 case SYS_ioctl: { 744 print_number(ip, narg, c); 745 putchar(c); 746 ioctlname(*ip); 747 c = ','; 748 ip++; 749 narg--; 750 break; 751 } 752 case SYS_ptrace: 753 putchar('('); 754 ptraceopname(*ip); 755 c = ','; 756 ip++; 757 narg--; 758 break; 759 case SYS_access: 760 case SYS_eaccess: 761 case SYS_faccessat: 762 print_number(ip, narg, c); 763 putchar(','); 764 accessmodename(*ip); 765 ip++; 766 narg--; 767 break; 768 case SYS_open: 769 case SYS_openat: 770 print_number(ip, narg, c); 771 putchar(','); 772 flagsandmodename(ip[0], ip[1], decimal); 773 ip += 2; 774 narg -= 2; 775 break; 776 case SYS_wait4: 777 print_number(ip, narg, c); 778 print_number(ip, narg, c); 779 /* 780 * A flags value of zero is valid for 781 * wait4() but not for wait6(), so 782 * handle zero special here. 783 */ 784 if (*ip == 0) { 785 print_number(ip, narg, c); 786 } else { 787 putchar(','); 788 wait6optname(*ip); 789 ip++; 790 narg--; 791 } 792 break; 793 case SYS_wait6: 794 putchar('('); 795 idtypename(*ip, decimal); 796 c = ','; 797 ip++; 798 narg--; 799 print_number(ip, narg, c); 800 print_number(ip, narg, c); 801 putchar(','); 802 wait6optname(*ip); 803 ip++; 804 narg--; 805 break; 806 case SYS_chmod: 807 case SYS_fchmod: 808 case SYS_lchmod: 809 case SYS_fchmodat: 810 print_number(ip, narg, c); 811 putchar(','); 812 modename(*ip); 813 ip++; 814 narg--; 815 break; 816 case SYS_mknod: 817 case SYS_mknodat: 818 print_number(ip, narg, c); 819 putchar(','); 820 modename(*ip); 821 ip++; 822 narg--; 823 break; 824 case SYS_getfsstat: 825 print_number(ip, narg, c); 826 print_number(ip, narg, c); 827 putchar(','); 828 getfsstatflagsname(*ip); 829 ip++; 830 narg--; 831 break; 832 case SYS_mount: 833 print_number(ip, narg, c); 834 print_number(ip, narg, c); 835 putchar(','); 836 mountflagsname(*ip); 837 ip++; 838 narg--; 839 break; 840 case SYS_unmount: 841 print_number(ip, narg, c); 842 putchar(','); 843 mountflagsname(*ip); 844 ip++; 845 narg--; 846 break; 847 case SYS_recvmsg: 848 case SYS_sendmsg: 849 print_number(ip, narg, c); 850 print_number(ip, narg, c); 851 putchar(','); 852 sendrecvflagsname(*ip); 853 ip++; 854 narg--; 855 break; 856 case SYS_recvfrom: 857 case SYS_sendto: 858 print_number(ip, narg, c); 859 print_number(ip, narg, c); 860 print_number(ip, narg, c); 861 putchar(','); 862 sendrecvflagsname(*ip); 863 ip++; 864 narg--; 865 break; 866 case SYS_chflags: 867 case SYS_fchflags: 868 case SYS_lchflags: 869 print_number(ip, narg, c); 870 putchar(','); 871 modename(*ip); 872 ip++; 873 narg--; 874 break; 875 case SYS_kill: 876 print_number(ip, narg, c); 877 putchar(','); 878 signame(*ip); 879 ip++; 880 narg--; 881 break; 882 case SYS_reboot: 883 putchar('('); 884 rebootoptname(*ip); 885 ip++; 886 narg--; 887 break; 888 case SYS_umask: 889 putchar('('); 890 modename(*ip); 891 ip++; 892 narg--; 893 break; 894 case SYS_msync: 895 print_number(ip, narg, c); 896 print_number(ip, narg, c); 897 putchar(','); 898 msyncflagsname(*ip); 899 ip++; 900 narg--; 901 break; 902#ifdef SYS_freebsd6_mmap 903 case SYS_freebsd6_mmap: 904 print_number(ip, narg, c); 905 print_number(ip, narg, c); 906 putchar(','); 907 mmapprotname(*ip); 908 putchar(','); 909 ip++; 910 narg--; 911 mmapflagsname(*ip); 912 ip++; 913 narg--; 914 break; 915#endif 916 case SYS_mmap: 917 print_number(ip, narg, c); 918 print_number(ip, narg, c); 919 putchar(','); 920 mmapprotname(*ip); 921 putchar(','); 922 ip++; 923 narg--; 924 mmapflagsname(*ip); 925 ip++; 926 narg--; 927 break; 928 case SYS_mprotect: 929 print_number(ip, narg, c); 930 print_number(ip, narg, c); 931 putchar(','); 932 mmapprotname(*ip); 933 ip++; 934 narg--; 935 break; 936 case SYS_madvise: 937 print_number(ip, narg, c); 938 print_number(ip, narg, c); 939 putchar(','); 940 madvisebehavname(*ip); 941 ip++; 942 narg--; 943 break; 944 case SYS_setpriority: 945 print_number(ip, narg, c); 946 print_number(ip, narg, c); 947 putchar(','); 948 prioname(*ip); 949 ip++; 950 narg--; 951 break; 952 case SYS_fcntl: 953 print_number(ip, narg, c); 954 putchar(','); 955 fcntlcmdname(ip[0], ip[1], decimal); 956 ip += 2; 957 narg -= 2; 958 break; 959 case SYS_socket: { 960 int sockdomain; 961 putchar('('); 962 sockdomain = *ip; 963 sockdomainname(sockdomain); 964 ip++; 965 narg--; 966 putchar(','); 967 socktypenamewithflags(*ip); 968 ip++; 969 narg--; 970 if (sockdomain == PF_INET || 971 sockdomain == PF_INET6) { 972 putchar(','); 973 sockipprotoname(*ip); 974 ip++; 975 narg--; 976 } 977 c = ','; 978 break; 979 } 980 case SYS_setsockopt: 981 case SYS_getsockopt: 982 print_number(ip, narg, c); 983 putchar(','); 984 sockoptlevelname(*ip, decimal); 985 if (*ip == SOL_SOCKET) { 986 ip++; 987 narg--; 988 putchar(','); 989 sockoptname(*ip); 990 } 991 ip++; 992 narg--; 993 break; 994#ifdef SYS_freebsd6_lseek 995 case SYS_freebsd6_lseek: 996 print_number(ip, narg, c); 997 /* Hidden 'pad' argument, not in lseek(2) */ 998 print_number(ip, narg, c); 999 print_number(ip, narg, c); 1000 putchar(','); 1001 whencename(*ip); 1002 ip++; 1003 narg--; 1004 break; 1005#endif 1006 case SYS_lseek: 1007 print_number(ip, narg, c); 1008 /* Hidden 'pad' argument, not in lseek(2) */ 1009 print_number(ip, narg, c); 1010 putchar(','); 1011 whencename(*ip); 1012 ip++; 1013 narg--; 1014 break; 1015 case SYS_flock: 1016 print_number(ip, narg, c); 1017 putchar(','); 1018 flockname(*ip); 1019 ip++; 1020 narg--; 1021 break; 1022 case SYS_mkfifo: 1023 case SYS_mkfifoat: 1024 case SYS_mkdir: 1025 case SYS_mkdirat: 1026 print_number(ip, narg, c); 1027 putchar(','); 1028 modename(*ip); 1029 ip++; 1030 narg--; 1031 break; 1032 case SYS_shutdown: 1033 print_number(ip, narg, c); 1034 putchar(','); 1035 shutdownhowname(*ip); 1036 ip++; 1037 narg--; 1038 break; 1039 case SYS_socketpair: 1040 putchar('('); 1041 sockdomainname(*ip); 1042 ip++; 1043 narg--; 1044 putchar(','); 1045 socktypenamewithflags(*ip); 1046 ip++; 1047 narg--; 1048 c = ','; 1049 break; 1050 case SYS_getrlimit: 1051 case SYS_setrlimit: 1052 putchar('('); 1053 rlimitname(*ip); 1054 ip++; 1055 narg--; 1056 c = ','; 1057 break; 1058 case SYS_quotactl: 1059 print_number(ip, narg, c); 1060 putchar(','); 1061 quotactlname(*ip); 1062 ip++; 1063 narg--; 1064 c = ','; 1065 break; 1066 case SYS_nfssvc: 1067 putchar('('); 1068 nfssvcname(*ip); 1069 ip++; 1070 narg--; 1071 c = ','; 1072 break; 1073 case SYS_rtprio: 1074 putchar('('); 1075 rtprioname(*ip); 1076 ip++; 1077 narg--; 1078 c = ','; 1079 break; 1080 case SYS___semctl: 1081 print_number(ip, narg, c); 1082 print_number(ip, narg, c); 1083 putchar(','); 1084 semctlname(*ip); 1085 ip++; 1086 narg--; 1087 break; 1088 case SYS_semget: 1089 print_number(ip, narg, c); 1090 print_number(ip, narg, c); 1091 putchar(','); 1092 semgetname(*ip); 1093 ip++; 1094 narg--; 1095 break; 1096 case SYS_msgctl: 1097 print_number(ip, narg, c); 1098 putchar(','); 1099 shmctlname(*ip); 1100 ip++; 1101 narg--; 1102 break; 1103 case SYS_shmat: 1104 print_number(ip, narg, c); 1105 print_number(ip, narg, c); 1106 putchar(','); 1107 shmatname(*ip); 1108 ip++; 1109 narg--; 1110 break; 1111 case SYS_shmctl: 1112 print_number(ip, narg, c); 1113 putchar(','); 1114 shmctlname(*ip); 1115 ip++; 1116 narg--; 1117 break; 1118 case SYS_shm_open: 1119 print_number(ip, narg, c); 1120 putchar(','); 1121 flagsname(ip[0]); 1122 printf(",0%o", (unsigned int)ip[1]); 1123 ip += 3; 1124 narg -= 3; 1125 break; 1126 case SYS_minherit: 1127 print_number(ip, narg, c); 1128 print_number(ip, narg, c); 1129 putchar(','); 1130 minheritname(*ip); 1131 ip++; 1132 narg--; 1133 break; 1134 case SYS_rfork: 1135 putchar('('); 1136 rforkname(*ip); 1137 ip++; 1138 narg--; 1139 c = ','; 1140 break; 1141 case SYS_lio_listio: 1142 putchar('('); 1143 lio_listioname(*ip); 1144 ip++; 1145 narg--; 1146 c = ','; 1147 break; 1148 case SYS_mlockall: 1149 putchar('('); 1150 mlockallname(*ip); 1151 ip++; 1152 narg--; 1153 break; 1154 case SYS_sched_setscheduler: 1155 print_number(ip, narg, c); 1156 putchar(','); 1157 schedpolicyname(*ip); 1158 ip++; 1159 narg--; 1160 break; 1161 case SYS_sched_get_priority_max: 1162 case SYS_sched_get_priority_min: 1163 putchar('('); 1164 schedpolicyname(*ip); 1165 ip++; 1166 narg--; 1167 break; 1168 case SYS_sendfile: 1169 print_number(ip, narg, c); 1170 print_number(ip, narg, c); 1171 print_number(ip, narg, c); 1172 print_number(ip, narg, c); 1173 print_number(ip, narg, c); 1174 print_number(ip, narg, c); 1175 putchar(','); 1176 sendfileflagsname(*(int *)ip); 1177 ip++; 1178 narg--; 1179 break; 1180 case SYS_kldsym: 1181 print_number(ip, narg, c); 1182 putchar(','); 1183 kldsymcmdname(*ip); 1184 ip++; 1185 narg--; 1186 break; 1187 case SYS_sigprocmask: 1188 putchar('('); 1189 sigprocmaskhowname(*ip); 1190 ip++; 1191 narg--; 1192 c = ','; 1193 break; 1194 case SYS___acl_get_file: 1195 case SYS___acl_set_file: 1196 case SYS___acl_get_fd: 1197 case SYS___acl_set_fd: 1198 case SYS___acl_delete_file: 1199 case SYS___acl_delete_fd: 1200 case SYS___acl_aclcheck_file: 1201 case SYS___acl_aclcheck_fd: 1202 case SYS___acl_get_link: 1203 case SYS___acl_set_link: 1204 case SYS___acl_delete_link: 1205 case SYS___acl_aclcheck_link: 1206 print_number(ip, narg, c); 1207 putchar(','); 1208 acltypename(*ip); 1209 ip++; 1210 narg--; 1211 break; 1212 case SYS_sigaction: 1213 putchar('('); 1214 signame(*ip); 1215 ip++; 1216 narg--; 1217 c = ','; 1218 break; 1219 case SYS_extattrctl: 1220 print_number(ip, narg, c); 1221 putchar(','); 1222 extattrctlname(*ip); 1223 ip++; 1224 narg--; 1225 break; 1226 case SYS_nmount: 1227 print_number(ip, narg, c); 1228 print_number(ip, narg, c); 1229 putchar(','); 1230 mountflagsname(*ip); 1231 ip++; 1232 narg--; 1233 break; 1234 case SYS_thr_create: 1235 print_number(ip, narg, c); 1236 print_number(ip, narg, c); 1237 putchar(','); 1238 thrcreateflagsname(*ip); 1239 ip++; 1240 narg--; 1241 break; 1242 case SYS_thr_kill: 1243 print_number(ip, narg, c); 1244 putchar(','); 1245 signame(*ip); 1246 ip++; 1247 narg--; 1248 break; 1249 case SYS_kldunloadf: 1250 print_number(ip, narg, c); 1251 putchar(','); 1252 kldunloadfflagsname(*ip); 1253 ip++; 1254 narg--; 1255 break; 1256 case SYS_linkat: 1257 case SYS_renameat: 1258 case SYS_symlinkat: 1259 print_number(ip, narg, c); 1260 putchar(','); 1261 atfdname(*ip, decimal); 1262 ip++; 1263 narg--; 1264 break; 1265 case SYS_cap_fcntls_limit: 1266 print_number(ip, narg, c); 1267 putchar(','); 1268 arg = *ip; 1269 ip++; 1270 narg--; 1271 capfcntlname(arg); 1272 break; 1273 case SYS_posix_fadvise: 1274 print_number(ip, narg, c); 1275 print_number(ip, narg, c); 1276 print_number(ip, narg, c); 1277 (void)putchar(','); 1278 fadvisebehavname((int)*ip); 1279 ip++; 1280 narg--; 1281 break; 1282 case SYS_procctl: 1283 putchar('('); 1284 idtypename(*ip, decimal); 1285 c = ','; 1286 ip++; 1287 narg--; 1288 print_number(ip, narg, c); 1289 putchar(','); 1290 procctlcmdname(*ip); 1291 ip++; 1292 narg--; 1293 break; 1294 case SYS__umtx_op: 1295 print_number(ip, narg, c); 1296 putchar(','); 1297 umtxopname(*ip); 1298 switch (*ip) { 1299 case UMTX_OP_CV_WAIT: 1300 ip++; 1301 narg--; 1302 putchar(','); 1303 umtxcvwaitflags(*ip); 1304 break; 1305 case UMTX_OP_RW_RDLOCK: 1306 ip++; 1307 narg--; 1308 putchar(','); 1309 umtxrwlockflags(*ip); 1310 break; 1311 } 1312 ip++; 1313 narg--; 1314 } 1315 } 1316 while (narg > 0) { 1317 print_number(ip, narg, c); 1318 } 1319 putchar(')'); 1320 } 1321 putchar('\n'); 1322} 1323 1324void 1325ktrsysret(struct ktr_sysret *ktr, u_int sv_flags) 1326{ 1327 register_t ret = ktr->ktr_retval; 1328 int error = ktr->ktr_error; 1329 1330 syscallname(ktr->ktr_code, sv_flags); 1331 printf(" "); 1332 1333 if (error == 0) { 1334 if (fancy) { 1335 printf("%ld", (long)ret); 1336 if (ret < 0 || ret > 9) 1337 printf("/%#lx", (unsigned long)ret); 1338 } else { 1339 if (decimal) 1340 printf("%ld", (long)ret); 1341 else 1342 printf("%#lx", (unsigned long)ret); 1343 } 1344 } else if (error == ERESTART) 1345 printf("RESTART"); 1346 else if (error == EJUSTRETURN) 1347 printf("JUSTRETURN"); 1348 else { 1349 printf("-1 errno %d", sysdecode_freebsd_to_abi_errno( 1350 syscallabi(sv_flags), error)); 1351 if (fancy) 1352 printf(" %s", strerror(ktr->ktr_error)); 1353 } 1354 putchar('\n'); 1355} 1356 1357void 1358ktrnamei(char *cp, int len) 1359{ 1360 printf("\"%.*s\"\n", len, cp); 1361} 1362 1363void 1364hexdump(char *p, int len, int screenwidth) 1365{ 1366 int n, i; 1367 int width; 1368 1369 width = 0; 1370 do { 1371 width += 2; 1372 i = 13; /* base offset */ 1373 i += (width / 2) + 1; /* spaces every second byte */ 1374 i += (width * 2); /* width of bytes */ 1375 i += 3; /* " |" */ 1376 i += width; /* each byte */ 1377 i += 1; /* "|" */ 1378 } while (i < screenwidth); 1379 width -= 2; 1380 1381 for (n = 0; n < len; n += width) { 1382 for (i = n; i < n + width; i++) { 1383 if ((i % width) == 0) { /* beginning of line */ 1384 printf(" 0x%04x", i); 1385 } 1386 if ((i % 2) == 0) { 1387 printf(" "); 1388 } 1389 if (i < len) 1390 printf("%02x", p[i] & 0xff); 1391 else 1392 printf(" "); 1393 } 1394 printf(" |"); 1395 for (i = n; i < n + width; i++) { 1396 if (i >= len) 1397 break; 1398 if (p[i] >= ' ' && p[i] <= '~') 1399 printf("%c", p[i]); 1400 else 1401 printf("."); 1402 } 1403 printf("|\n"); 1404 } 1405 if ((i % width) != 0) 1406 printf("\n"); 1407} 1408 1409void 1410visdump(char *dp, int datalen, int screenwidth) 1411{ 1412 int col = 0; 1413 char *cp; 1414 int width; 1415 char visbuf[5]; 1416 1417 printf(" \""); 1418 col = 8; 1419 for (;datalen > 0; datalen--, dp++) { 1420 vis(visbuf, *dp, VIS_CSTYLE, *(dp+1)); 1421 cp = visbuf; 1422 /* 1423 * Keep track of printables and 1424 * space chars (like fold(1)). 1425 */ 1426 if (col == 0) { 1427 putchar('\t'); 1428 col = 8; 1429 } 1430 switch(*cp) { 1431 case '\n': 1432 col = 0; 1433 putchar('\n'); 1434 continue; 1435 case '\t': 1436 width = 8 - (col&07); 1437 break; 1438 default: 1439 width = strlen(cp); 1440 } 1441 if (col + width > (screenwidth-2)) { 1442 printf("\\\n\t"); 1443 col = 8; 1444 } 1445 col += width; 1446 do { 1447 putchar(*cp++); 1448 } while (*cp); 1449 } 1450 if (col == 0) 1451 printf(" "); 1452 printf("\"\n"); 1453} 1454 1455void 1456ktrgenio(struct ktr_genio *ktr, int len) 1457{ 1458 int datalen = len - sizeof (struct ktr_genio); 1459 char *dp = (char *)ktr + sizeof (struct ktr_genio); 1460 static int screenwidth = 0; 1461 int i, binary; 1462 1463 printf("fd %d %s %d byte%s\n", ktr->ktr_fd, 1464 ktr->ktr_rw == UIO_READ ? "read" : "wrote", datalen, 1465 datalen == 1 ? "" : "s"); 1466 if (suppressdata) 1467 return; 1468 if (screenwidth == 0) { 1469 struct winsize ws; 1470 1471 if (fancy && ioctl(fileno(stderr), TIOCGWINSZ, &ws) != -1 && 1472 ws.ws_col > 8) 1473 screenwidth = ws.ws_col; 1474 else 1475 screenwidth = 80; 1476 } 1477 if (maxdata && datalen > maxdata) 1478 datalen = maxdata; 1479 1480 for (i = 0, binary = 0; i < datalen && binary == 0; i++) { 1481 if (dp[i] >= 32 && dp[i] < 127) 1482 continue; 1483 if (dp[i] == 10 || dp[i] == 13 || dp[i] == 0 || dp[i] == 9) 1484 continue; 1485 binary = 1; 1486 } 1487 if (binary) 1488 hexdump(dp, datalen, screenwidth); 1489 else 1490 visdump(dp, datalen, screenwidth); 1491} 1492 1493const char *signames[] = { 1494 "NULL", "HUP", "INT", "QUIT", "ILL", "TRAP", "IOT", /* 1 - 6 */ 1495 "EMT", "FPE", "KILL", "BUS", "SEGV", "SYS", /* 7 - 12 */ 1496 "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", /* 13 - 18 */ 1497 "CONT", "CHLD", "TTIN", "TTOU", "IO", "XCPU", /* 19 - 24 */ 1498 "XFSZ", "VTALRM", "PROF", "WINCH", "29", "USR1", /* 25 - 30 */ 1499 "USR2", NULL, /* 31 - 32 */ 1500}; 1501 1502void 1503ktrpsig(struct ktr_psig *psig) 1504{ 1505 if (psig->signo > 0 && psig->signo < NSIG) 1506 printf("SIG%s ", signames[psig->signo]); 1507 else 1508 printf("SIG %d ", psig->signo); 1509 if (psig->action == SIG_DFL) { 1510 printf("SIG_DFL code="); 1511 sigcodename(psig->signo, psig->code); 1512 putchar('\n'); 1513 } else { 1514 printf("caught handler=0x%lx mask=0x%x code=", 1515 (u_long)psig->action, psig->mask.__bits[0]); 1516 sigcodename(psig->signo, psig->code); 1517 putchar('\n'); 1518 } 1519} 1520 1521void 1522ktrcsw_old(struct ktr_csw_old *cs) 1523{ 1524 printf("%s %s\n", cs->out ? "stop" : "resume", 1525 cs->user ? "user" : "kernel"); 1526} 1527 1528void 1529ktrcsw(struct ktr_csw *cs) 1530{ 1531 printf("%s %s \"%s\"\n", cs->out ? "stop" : "resume", 1532 cs->user ? "user" : "kernel", cs->wmesg); 1533} 1534 1535void 1536ktruser(int len, void *p) 1537{ 1538 unsigned char *cp; 1539 1540 if (sysdecode_utrace(stdout, p, len)) { 1541 printf("\n"); 1542 return; 1543 } 1544 1545 printf("%d ", len); 1546 cp = p; 1547 while (len--) 1548 if (decimal) 1549 printf(" %d", *cp++); 1550 else 1551 printf(" %02x", *cp++); 1552 printf("\n"); 1553} 1554 1555void 1556ktrcaprights(cap_rights_t *rightsp) 1557{ 1558 1559 printf("cap_rights_t "); 1560 capname(rightsp); 1561 printf("\n"); 1562} 1563 1564static void 1565ktrtimeval(struct timeval *tv) 1566{ 1567 1568 printf("{%ld, %ld}", (long)tv->tv_sec, tv->tv_usec); 1569} 1570 1571void 1572ktritimerval(struct itimerval *it) 1573{ 1574 1575 printf("itimerval { .interval = "); 1576 ktrtimeval(&it->it_interval); 1577 printf(", .value = "); 1578 ktrtimeval(&it->it_value); 1579 printf(" }\n"); 1580} 1581 1582void 1583ktrsockaddr(struct sockaddr *sa) 1584{ 1585/* 1586 TODO: Support additional address families 1587 #include <netnatm/natm.h> 1588 struct sockaddr_natm *natm; 1589 #include <netsmb/netbios.h> 1590 struct sockaddr_nb *nb; 1591*/ 1592 char addr[64]; 1593 1594 /* 1595 * note: ktrstruct() has already verified that sa points to a 1596 * buffer at least sizeof(struct sockaddr) bytes long and exactly 1597 * sa->sa_len bytes long. 1598 */ 1599 printf("struct sockaddr { "); 1600 sockfamilyname(sa->sa_family); 1601 printf(", "); 1602 1603#define check_sockaddr_len(n) \ 1604 if (sa_##n.s##n##_len < sizeof(struct sockaddr_##n)) { \ 1605 printf("invalid"); \ 1606 break; \ 1607 } 1608 1609 switch(sa->sa_family) { 1610 case AF_INET: { 1611 struct sockaddr_in sa_in; 1612 1613 memset(&sa_in, 0, sizeof(sa_in)); 1614 memcpy(&sa_in, sa, sa->sa_len); 1615 check_sockaddr_len(in); 1616 inet_ntop(AF_INET, &sa_in.sin_addr, addr, sizeof addr); 1617 printf("%s:%u", addr, ntohs(sa_in.sin_port)); 1618 break; 1619 } 1620 case AF_INET6: { 1621 struct sockaddr_in6 sa_in6; 1622 1623 memset(&sa_in6, 0, sizeof(sa_in6)); 1624 memcpy(&sa_in6, sa, sa->sa_len); 1625 check_sockaddr_len(in6); 1626 getnameinfo((struct sockaddr *)&sa_in6, sizeof(sa_in6), 1627 addr, sizeof(addr), NULL, 0, NI_NUMERICHOST); 1628 printf("[%s]:%u", addr, htons(sa_in6.sin6_port)); 1629 break; 1630 } 1631 case AF_UNIX: { 1632 struct sockaddr_un sa_un; 1633 1634 memset(&sa_un, 0, sizeof(sa_un)); 1635 memcpy(&sa_un, sa, sa->sa_len); 1636 printf("%.*s", (int)sizeof(sa_un.sun_path), sa_un.sun_path); 1637 break; 1638 } 1639 default: 1640 printf("unknown address family"); 1641 } 1642 printf(" }\n"); 1643} 1644 1645void 1646ktrstat(struct stat *statp) 1647{ 1648 char mode[12], timestr[PATH_MAX + 4]; 1649 struct passwd *pwd; 1650 struct group *grp; 1651 struct tm *tm; 1652 1653 /* 1654 * note: ktrstruct() has already verified that statp points to a 1655 * buffer exactly sizeof(struct stat) bytes long. 1656 */ 1657 printf("struct stat {"); 1658 printf("dev=%ju, ino=%ju, ", 1659 (uintmax_t)statp->st_dev, (uintmax_t)statp->st_ino); 1660 if (resolv == 0) 1661 printf("mode=0%jo, ", (uintmax_t)statp->st_mode); 1662 else { 1663 strmode(statp->st_mode, mode); 1664 printf("mode=%s, ", mode); 1665 } 1666 printf("nlink=%ju, ", (uintmax_t)statp->st_nlink); 1667 if (resolv == 0) { 1668 pwd = NULL; 1669 } else { 1670#ifdef HAVE_LIBCASPER 1671 if (cappwd != NULL) 1672 pwd = cap_getpwuid(cappwd, statp->st_uid); 1673 else 1674#endif 1675 pwd = getpwuid(statp->st_uid); 1676 } 1677 if (pwd == NULL) 1678 printf("uid=%ju, ", (uintmax_t)statp->st_uid); 1679 else 1680 printf("uid=\"%s\", ", pwd->pw_name); 1681 if (resolv == 0) { 1682 grp = NULL; 1683 } else { 1684#ifdef HAVE_LIBCASPER 1685 if (capgrp != NULL) 1686 grp = cap_getgrgid(capgrp, statp->st_gid); 1687 else 1688#endif 1689 grp = getgrgid(statp->st_gid); 1690 } 1691 if (grp == NULL) 1692 printf("gid=%ju, ", (uintmax_t)statp->st_gid); 1693 else 1694 printf("gid=\"%s\", ", grp->gr_name); 1695 printf("rdev=%ju, ", (uintmax_t)statp->st_rdev); 1696 printf("atime="); 1697 if (resolv == 0) 1698 printf("%jd", (intmax_t)statp->st_atim.tv_sec); 1699 else { 1700 tm = localtime(&statp->st_atim.tv_sec); 1701 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1702 printf("\"%s\"", timestr); 1703 } 1704 if (statp->st_atim.tv_nsec != 0) 1705 printf(".%09ld, ", statp->st_atim.tv_nsec); 1706 else 1707 printf(", "); 1708 printf("mtime="); 1709 if (resolv == 0) 1710 printf("%jd", (intmax_t)statp->st_mtim.tv_sec); 1711 else { 1712 tm = localtime(&statp->st_mtim.tv_sec); 1713 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1714 printf("\"%s\"", timestr); 1715 } 1716 if (statp->st_mtim.tv_nsec != 0) 1717 printf(".%09ld, ", statp->st_mtim.tv_nsec); 1718 else 1719 printf(", "); 1720 printf("ctime="); 1721 if (resolv == 0) 1722 printf("%jd", (intmax_t)statp->st_ctim.tv_sec); 1723 else { 1724 tm = localtime(&statp->st_ctim.tv_sec); 1725 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1726 printf("\"%s\"", timestr); 1727 } 1728 if (statp->st_ctim.tv_nsec != 0) 1729 printf(".%09ld, ", statp->st_ctim.tv_nsec); 1730 else 1731 printf(", "); 1732 printf("birthtime="); 1733 if (resolv == 0) 1734 printf("%jd", (intmax_t)statp->st_birthtim.tv_sec); 1735 else { 1736 tm = localtime(&statp->st_birthtim.tv_sec); 1737 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1738 printf("\"%s\"", timestr); 1739 } 1740 if (statp->st_birthtim.tv_nsec != 0) 1741 printf(".%09ld, ", statp->st_birthtim.tv_nsec); 1742 else 1743 printf(", "); 1744 printf("size=%jd, blksize=%ju, blocks=%jd, flags=0x%x", 1745 (uintmax_t)statp->st_size, (uintmax_t)statp->st_blksize, 1746 (intmax_t)statp->st_blocks, statp->st_flags); 1747 printf(" }\n"); 1748} 1749 1750void 1751ktrstruct(char *buf, size_t buflen) 1752{ 1753 char *name, *data; 1754 size_t namelen, datalen; 1755 int i; 1756 cap_rights_t rights; 1757 struct itimerval it; 1758 struct stat sb; 1759 struct sockaddr_storage ss; 1760 1761 for (name = buf, namelen = 0; 1762 namelen < buflen && name[namelen] != '\0'; 1763 ++namelen) 1764 /* nothing */; 1765 if (namelen == buflen) 1766 goto invalid; 1767 if (name[namelen] != '\0') 1768 goto invalid; 1769 data = buf + namelen + 1; 1770 datalen = buflen - namelen - 1; 1771 if (datalen == 0) 1772 goto invalid; 1773 /* sanity check */ 1774 for (i = 0; i < (int)namelen; ++i) 1775 if (!isalpha(name[i])) 1776 goto invalid; 1777 if (strcmp(name, "caprights") == 0) { 1778 if (datalen != sizeof(cap_rights_t)) 1779 goto invalid; 1780 memcpy(&rights, data, datalen); 1781 ktrcaprights(&rights); 1782 } else if (strcmp(name, "itimerval") == 0) { 1783 if (datalen != sizeof(struct itimerval)) 1784 goto invalid; 1785 memcpy(&it, data, datalen); 1786 ktritimerval(&it); 1787 } else if (strcmp(name, "stat") == 0) { 1788 if (datalen != sizeof(struct stat)) 1789 goto invalid; 1790 memcpy(&sb, data, datalen); 1791 ktrstat(&sb); 1792 } else if (strcmp(name, "sockaddr") == 0) { 1793 if (datalen > sizeof(ss)) 1794 goto invalid; 1795 memcpy(&ss, data, datalen); 1796 if (datalen != ss.ss_len) 1797 goto invalid; 1798 ktrsockaddr((struct sockaddr *)&ss); 1799 } else { 1800 printf("unknown structure\n"); 1801 } 1802 return; 1803invalid: 1804 printf("invalid record\n"); 1805} 1806 1807void 1808ktrcapfail(struct ktr_cap_fail *ktr) 1809{ 1810 switch (ktr->cap_type) { 1811 case CAPFAIL_NOTCAPABLE: 1812 /* operation on fd with insufficient capabilities */ 1813 printf("operation requires "); 1814 capname(&ktr->cap_needed); 1815 printf(", descriptor holds "); 1816 capname(&ktr->cap_held); 1817 break; 1818 case CAPFAIL_INCREASE: 1819 /* requested more capabilities than fd already has */ 1820 printf("attempt to increase capabilities from "); 1821 capname(&ktr->cap_held); 1822 printf(" to "); 1823 capname(&ktr->cap_needed); 1824 break; 1825 case CAPFAIL_SYSCALL: 1826 /* called restricted syscall */ 1827 printf("disallowed system call"); 1828 break; 1829 case CAPFAIL_LOOKUP: 1830 /* used ".." in strict-relative mode */ 1831 printf("restricted VFS lookup"); 1832 break; 1833 default: 1834 printf("unknown capability failure: "); 1835 capname(&ktr->cap_needed); 1836 printf(" "); 1837 capname(&ktr->cap_held); 1838 break; 1839 } 1840 printf("\n"); 1841} 1842 1843void 1844ktrfault(struct ktr_fault *ktr) 1845{ 1846 1847 printf("0x%jx ", (uintmax_t)ktr->vaddr); 1848 vmprotname(ktr->type); 1849 printf("\n"); 1850} 1851 1852void 1853ktrfaultend(struct ktr_faultend *ktr) 1854{ 1855 1856 vmresultname(ktr->result); 1857 printf("\n"); 1858} 1859 1860void 1861usage(void) 1862{ 1863 fprintf(stderr, "usage: kdump [-dEnlHRrSsTA] [-f trfile] " 1864 "[-m maxdata] [-p pid] [-t trstr]\n"); 1865 exit(1); 1866} 1867