1147191Sjkoshy/*-
2174215Sjkoshy * Copyright (c) 2005-2007 Joseph Koshy
3174215Sjkoshy * Copyright (c) 2007 The FreeBSD Foundation
4147191Sjkoshy * All rights reserved.
5147191Sjkoshy *
6174215Sjkoshy * Portions of this software were developed by A. Joseph Koshy under
7174215Sjkoshy * sponsorship from the FreeBSD Foundation and Google, Inc.
8174215Sjkoshy *
9147191Sjkoshy * Redistribution and use in source and binary forms, with or without
10147191Sjkoshy * modification, are permitted provided that the following conditions
11147191Sjkoshy * are met:
12147191Sjkoshy * 1. Redistributions of source code must retain the above copyright
13147191Sjkoshy *    notice, this list of conditions and the following disclaimer.
14147191Sjkoshy * 2. Redistributions in binary form must reproduce the above copyright
15147191Sjkoshy *    notice, this list of conditions and the following disclaimer in the
16147191Sjkoshy *    documentation and/or other materials provided with the distribution.
17147191Sjkoshy *
18147191Sjkoshy * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
19147191Sjkoshy * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20147191Sjkoshy * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21147191Sjkoshy * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
22147191Sjkoshy * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23147191Sjkoshy * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24147191Sjkoshy * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25147191Sjkoshy * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26147191Sjkoshy * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27147191Sjkoshy * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28147191Sjkoshy * SUCH DAMAGE.
29147191Sjkoshy */
30147191Sjkoshy
31147191Sjkoshy#include <sys/cdefs.h>
32147191Sjkoshy__FBSDID("$FreeBSD$");
33147191Sjkoshy
34147191Sjkoshy#include <sys/param.h>
35147191Sjkoshy#include <sys/pmc.h>
36147191Sjkoshy#include <sys/pmclog.h>
37147191Sjkoshy
38147191Sjkoshy#include <assert.h>
39147191Sjkoshy#include <errno.h>
40147191Sjkoshy#include <pmc.h>
41147191Sjkoshy#include <pmclog.h>
42147191Sjkoshy#include <stddef.h>
43147191Sjkoshy#include <stdlib.h>
44147191Sjkoshy#include <string.h>
45147191Sjkoshy#include <strings.h>
46147191Sjkoshy#include <unistd.h>
47147191Sjkoshy
48147191Sjkoshy#include <machine/pmc_mdep.h>
49147191Sjkoshy
50185363Sjkoshy#include "libpmcinternal.h"
51185363Sjkoshy
52147191Sjkoshy#define	PMCLOG_BUFFER_SIZE			4096
53147191Sjkoshy
54147191Sjkoshy/*
55147191Sjkoshy * API NOTES
56147191Sjkoshy *
57147191Sjkoshy * The pmclog(3) API is oriented towards parsing an event stream in
58147191Sjkoshy * "realtime", i.e., from an data source that may or may not preserve
59147191Sjkoshy * record boundaries -- for example when the data source is elsewhere
60147191Sjkoshy * on a network.  The API allows data to be fed into the parser zero
61147191Sjkoshy * or more bytes at a time.
62147191Sjkoshy *
63147191Sjkoshy * The state for a log file parser is maintained in a 'struct
64147191Sjkoshy * pmclog_parse_state'.  Parser invocations are done by calling
65147191Sjkoshy * 'pmclog_read()'; this function will inform the caller when a
66147191Sjkoshy * complete event is parsed.
67147191Sjkoshy *
68147191Sjkoshy * The parser first assembles a complete log file event in an internal
69147191Sjkoshy * work area (see "ps_saved" below).  Once a complete log file event
70147191Sjkoshy * is read, the parser then parses it and converts it to an event
71147191Sjkoshy * descriptor usable by the client.  We could possibly avoid this two
72147191Sjkoshy * step process by directly parsing the input log to set fields in the
73147191Sjkoshy * event record.  However the parser's state machine would get
74147191Sjkoshy * insanely complicated, and this code is unlikely to be used in
75147191Sjkoshy * performance critical paths.
76147191Sjkoshy */
77147191Sjkoshy
78147191Sjkoshyenum pmclog_parser_state {
79147191Sjkoshy	PL_STATE_NEW_RECORD,		/* in-between records */
80147191Sjkoshy	PL_STATE_EXPECTING_HEADER,	/* header being read */
81147191Sjkoshy	PL_STATE_PARTIAL_RECORD,	/* header present but not the record */
82147191Sjkoshy	PL_STATE_ERROR			/* parsing error encountered */
83147191Sjkoshy};
84147191Sjkoshy
85147191Sjkoshystruct pmclog_parse_state {
86147191Sjkoshy	enum pmclog_parser_state ps_state;
87147191Sjkoshy	enum pmc_cputype	ps_arch;	/* log file architecture */
88147191Sjkoshy	uint32_t		ps_version;	/* hwpmc version */
89147191Sjkoshy	int			ps_initialized;	/* whether initialized */
90147191Sjkoshy	int			ps_count;	/* count of records processed */
91147191Sjkoshy	off_t			ps_offset;	/* stream byte offset */
92147191Sjkoshy	union pmclog_entry	ps_saved;	/* saved partial log entry */
93147191Sjkoshy	int			ps_svcount;	/* #bytes saved */
94147191Sjkoshy	int			ps_fd;		/* active fd or -1 */
95147191Sjkoshy	char			*ps_buffer;	/* scratch buffer if fd != -1 */
96147191Sjkoshy	char			*ps_data;	/* current parse pointer */
97147191Sjkoshy	size_t			ps_len;		/* length of buffered data */
98147191Sjkoshy};
99147191Sjkoshy
100147191Sjkoshy#define	PMCLOG_HEADER_FROM_SAVED_STATE(PS)				\
101147191Sjkoshy	(* ((uint32_t *) &(PS)->ps_saved))
102147191Sjkoshy
103147191Sjkoshy#define	PMCLOG_INITIALIZE_READER(LE,A)	LE = (uint32_t *) &(A)
104147191Sjkoshy#define	PMCLOG_READ32(LE,V) 		do {				\
105147191Sjkoshy		(V)  = *(LE)++;						\
106147191Sjkoshy	} while (0)
107147191Sjkoshy#define	PMCLOG_READ64(LE,V)		do {				\
108147191Sjkoshy		uint64_t _v;						\
109147191Sjkoshy		_v  = (uint64_t) *(LE)++;				\
110147191Sjkoshy		_v |= ((uint64_t) *(LE)++) << 32;			\
111147191Sjkoshy		(V) = _v;						\
112147191Sjkoshy	} while (0)
113147191Sjkoshy
114147191Sjkoshy#define	PMCLOG_READSTRING(LE,DST,LEN)	strlcpy((DST), (char *) (LE), (LEN))
115147191Sjkoshy
116147191Sjkoshy/*
117147191Sjkoshy * Assemble a log record from '*len' octets starting from address '*data'.
118147191Sjkoshy * Update 'data' and 'len' to reflect the number of bytes consumed.
119147191Sjkoshy *
120147191Sjkoshy * '*data' is potentially an unaligned address and '*len' octets may
121147191Sjkoshy * not be enough to complete a event record.
122147191Sjkoshy */
123147191Sjkoshy
124147191Sjkoshystatic enum pmclog_parser_state
125147191Sjkoshypmclog_get_record(struct pmclog_parse_state *ps, char **data, ssize_t *len)
126147191Sjkoshy{
127147191Sjkoshy	int avail, copylen, recordsize, used;
128147191Sjkoshy	uint32_t h;
129147191Sjkoshy	const int HEADERSIZE = sizeof(uint32_t);
130147191Sjkoshy	char *src, *dst;
131147191Sjkoshy
132147191Sjkoshy	if ((avail = *len) <= 0)
133147191Sjkoshy		return (ps->ps_state = PL_STATE_ERROR);
134147191Sjkoshy
135147191Sjkoshy	src = *data;
136147191Sjkoshy	h = used = 0;
137147191Sjkoshy
138147191Sjkoshy	if (ps->ps_state == PL_STATE_NEW_RECORD)
139147191Sjkoshy		ps->ps_svcount = 0;
140147191Sjkoshy
141147191Sjkoshy	dst = (char *) &ps->ps_saved + ps->ps_svcount;
142147191Sjkoshy
143147191Sjkoshy	switch (ps->ps_state) {
144147191Sjkoshy	case PL_STATE_NEW_RECORD:
145147191Sjkoshy
146147191Sjkoshy		/*
147147191Sjkoshy		 * Transitions:
148147191Sjkoshy		 *
149147191Sjkoshy		 * Case A: avail < headersize
150147191Sjkoshy		 *	-> 'expecting header'
151147191Sjkoshy		 *
152147191Sjkoshy		 * Case B: avail >= headersize
153147191Sjkoshy		 *    B.1: avail < recordsize
154147191Sjkoshy		 *	   -> 'partial record'
155147191Sjkoshy		 *    B.2: avail >= recordsize
156147191Sjkoshy		 *         -> 'new record'
157147191Sjkoshy		 */
158147191Sjkoshy
159147191Sjkoshy		copylen = avail < HEADERSIZE ? avail : HEADERSIZE;
160147191Sjkoshy		bcopy(src, dst, copylen);
161147191Sjkoshy		ps->ps_svcount = used = copylen;
162147191Sjkoshy
163147191Sjkoshy		if (copylen < HEADERSIZE) {
164147191Sjkoshy			ps->ps_state = PL_STATE_EXPECTING_HEADER;
165147191Sjkoshy			goto done;
166147191Sjkoshy		}
167147191Sjkoshy
168147191Sjkoshy		src += copylen;
169147191Sjkoshy		dst += copylen;
170147191Sjkoshy
171147191Sjkoshy		h = PMCLOG_HEADER_FROM_SAVED_STATE(ps);
172147191Sjkoshy		recordsize = PMCLOG_HEADER_TO_LENGTH(h);
173147191Sjkoshy
174147191Sjkoshy		if (recordsize <= 0)
175147191Sjkoshy			goto error;
176147191Sjkoshy
177147191Sjkoshy		if (recordsize <= avail) { /* full record available */
178147191Sjkoshy			bcopy(src, dst, recordsize - copylen);
179147191Sjkoshy			ps->ps_svcount = used = recordsize;
180147191Sjkoshy			goto done;
181147191Sjkoshy		}
182147191Sjkoshy
183147191Sjkoshy		/* header + a partial record is available */
184147191Sjkoshy		bcopy(src, dst, avail - copylen);
185147191Sjkoshy		ps->ps_svcount = used = avail;
186147191Sjkoshy		ps->ps_state = PL_STATE_PARTIAL_RECORD;
187147191Sjkoshy
188147191Sjkoshy		break;
189147191Sjkoshy
190147191Sjkoshy	case PL_STATE_EXPECTING_HEADER:
191147191Sjkoshy
192147191Sjkoshy		/*
193147191Sjkoshy		 * Transitions:
194147191Sjkoshy		 *
195147191Sjkoshy		 * Case C: avail+saved < headersize
196147191Sjkoshy		 * 	-> 'expecting header'
197147191Sjkoshy		 *
198147191Sjkoshy		 * Case D: avail+saved >= headersize
199147191Sjkoshy		 *    D.1: avail+saved < recordsize
200147191Sjkoshy		 *    	-> 'partial record'
201147191Sjkoshy		 *    D.2: avail+saved >= recordsize
202147191Sjkoshy		 *    	-> 'new record'
203147191Sjkoshy		 *    (see PARTIAL_RECORD handling below)
204147191Sjkoshy		 */
205147191Sjkoshy
206147191Sjkoshy		if (avail + ps->ps_svcount < HEADERSIZE) {
207147191Sjkoshy			bcopy(src, dst, avail);
208147191Sjkoshy			ps->ps_svcount += avail;
209147191Sjkoshy			used = avail;
210147191Sjkoshy			break;
211147191Sjkoshy		}
212147191Sjkoshy
213147191Sjkoshy		used = copylen = HEADERSIZE - ps->ps_svcount;
214147191Sjkoshy		bcopy(src, dst, copylen);
215147191Sjkoshy		src += copylen;
216147191Sjkoshy		dst += copylen;
217147191Sjkoshy		avail -= copylen;
218147191Sjkoshy		ps->ps_svcount += copylen;
219147191Sjkoshy
220147191Sjkoshy		/*FALLTHROUGH*/
221147191Sjkoshy
222147191Sjkoshy	case PL_STATE_PARTIAL_RECORD:
223147191Sjkoshy
224147191Sjkoshy		/*
225147191Sjkoshy		 * Transitions:
226147191Sjkoshy		 *
227147191Sjkoshy		 * Case E: avail+saved < recordsize
228147191Sjkoshy		 * 	-> 'partial record'
229147191Sjkoshy		 *
230147191Sjkoshy		 * Case F: avail+saved >= recordsize
231147191Sjkoshy		 * 	-> 'new record'
232147191Sjkoshy		 */
233147191Sjkoshy
234147191Sjkoshy		h = PMCLOG_HEADER_FROM_SAVED_STATE(ps);
235147191Sjkoshy		recordsize = PMCLOG_HEADER_TO_LENGTH(h);
236147191Sjkoshy
237147191Sjkoshy		if (recordsize <= 0)
238147191Sjkoshy			goto error;
239147191Sjkoshy
240147191Sjkoshy		if (avail + ps->ps_svcount < recordsize) {
241147191Sjkoshy			copylen = avail;
242147191Sjkoshy			ps->ps_state = PL_STATE_PARTIAL_RECORD;
243147191Sjkoshy		} else {
244147191Sjkoshy			copylen = recordsize - ps->ps_svcount;
245147191Sjkoshy			ps->ps_state = PL_STATE_NEW_RECORD;
246147191Sjkoshy		}
247147191Sjkoshy
248147191Sjkoshy		bcopy(src, dst, copylen);
249147191Sjkoshy		ps->ps_svcount += copylen;
250147191Sjkoshy		used += copylen;
251147191Sjkoshy		break;
252147191Sjkoshy
253147191Sjkoshy	default:
254147191Sjkoshy		goto error;
255147191Sjkoshy	}
256147191Sjkoshy
257147191Sjkoshy done:
258147191Sjkoshy	*data += used;
259147191Sjkoshy	*len  -= used;
260147191Sjkoshy	return ps->ps_state;
261147191Sjkoshy
262147191Sjkoshy error:
263147191Sjkoshy	ps->ps_state = PL_STATE_ERROR;
264147191Sjkoshy	return ps->ps_state;
265147191Sjkoshy}
266147191Sjkoshy
267147191Sjkoshy/*
268147191Sjkoshy * Get an event from the stream pointed to by '*data'.  '*len'
269147191Sjkoshy * indicates the number of bytes available to parse.  Arguments
270147191Sjkoshy * '*data' and '*len' are updated to indicate the number of bytes
271147191Sjkoshy * consumed.
272147191Sjkoshy */
273147191Sjkoshy
274147191Sjkoshystatic int
275147191Sjkoshypmclog_get_event(void *cookie, char **data, ssize_t *len,
276147191Sjkoshy    struct pmclog_ev *ev)
277147191Sjkoshy{
278147191Sjkoshy	int evlen, pathlen;
279174215Sjkoshy	uint32_t h, *le, npc;
280147191Sjkoshy	enum pmclog_parser_state e;
281147191Sjkoshy	struct pmclog_parse_state *ps;
282147191Sjkoshy
283147191Sjkoshy	ps = (struct pmclog_parse_state *) cookie;
284147191Sjkoshy
285147191Sjkoshy	assert(ps->ps_state != PL_STATE_ERROR);
286147191Sjkoshy
287147191Sjkoshy	if ((e = pmclog_get_record(ps,data,len)) == PL_STATE_ERROR) {
288147191Sjkoshy		ev->pl_state = PMCLOG_ERROR;
289147191Sjkoshy		return -1;
290147191Sjkoshy	}
291147191Sjkoshy
292147191Sjkoshy	if (e != PL_STATE_NEW_RECORD) {
293147191Sjkoshy		ev->pl_state = PMCLOG_REQUIRE_DATA;
294147191Sjkoshy		return -1;
295147191Sjkoshy	}
296147191Sjkoshy
297147191Sjkoshy	PMCLOG_INITIALIZE_READER(le, ps->ps_saved);
298147191Sjkoshy
299147191Sjkoshy	PMCLOG_READ32(le,h);
300147191Sjkoshy
301147191Sjkoshy	if (!PMCLOG_HEADER_CHECK_MAGIC(h)) {
302147191Sjkoshy		ps->ps_state = PL_STATE_ERROR;
303147191Sjkoshy		ev->pl_state = PMCLOG_ERROR;
304147191Sjkoshy		return -1;
305147191Sjkoshy	}
306147191Sjkoshy
307147191Sjkoshy	/* copy out the time stamp */
308147191Sjkoshy	PMCLOG_READ32(le,ev->pl_ts.tv_sec);
309147191Sjkoshy	PMCLOG_READ32(le,ev->pl_ts.tv_nsec);
310147191Sjkoshy
311147191Sjkoshy	evlen = PMCLOG_HEADER_TO_LENGTH(h);
312147191Sjkoshy
313147191Sjkoshy#define	PMCLOG_GET_PATHLEN(P,E,TYPE) do {				\
314147191Sjkoshy		(P) = (E) - offsetof(struct TYPE, pl_pathname);		\
315147191Sjkoshy		if ((P) > PATH_MAX || (P) < 0)				\
316147191Sjkoshy			goto error;					\
317147191Sjkoshy	} while (0)
318147191Sjkoshy
319174215Sjkoshy#define	PMCLOG_GET_CALLCHAIN_SIZE(SZ,E) do {				\
320174215Sjkoshy		(SZ) = ((E) - offsetof(struct pmclog_callchain, pl_pc))	\
321174215Sjkoshy			/ sizeof(uintfptr_t);				\
322174215Sjkoshy	} while (0);
323174215Sjkoshy
324147191Sjkoshy	switch (ev->pl_type = PMCLOG_HEADER_TO_TYPE(h)) {
325174215Sjkoshy	case PMCLOG_TYPE_CALLCHAIN:
326174215Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_cc.pl_pid);
327174215Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_cc.pl_pmcid);
328174215Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_cc.pl_cpuflags);
329174215Sjkoshy		PMCLOG_GET_CALLCHAIN_SIZE(ev->pl_u.pl_cc.pl_npc,evlen);
330174215Sjkoshy		for (npc = 0; npc < ev->pl_u.pl_cc.pl_npc; npc++)
331174215Sjkoshy			PMCLOG_READADDR(le,ev->pl_u.pl_cc.pl_pc[npc]);
332174215Sjkoshy		for (;npc < PMC_CALLCHAIN_DEPTH_MAX; npc++)
333174215Sjkoshy			ev->pl_u.pl_cc.pl_pc[npc] = (uintfptr_t) 0;
334174215Sjkoshy		break;
335147191Sjkoshy	case PMCLOG_TYPE_CLOSELOG:
336147191Sjkoshy	case PMCLOG_TYPE_DROPNOTIFY:
337147191Sjkoshy		/* nothing to do */
338147191Sjkoshy		break;
339147191Sjkoshy	case PMCLOG_TYPE_INITIALIZE:
340147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_i.pl_version);
341147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_i.pl_arch);
342147191Sjkoshy		ps->ps_version = ev->pl_u.pl_i.pl_version;
343147191Sjkoshy		ps->ps_arch = ev->pl_u.pl_i.pl_arch;
344147191Sjkoshy		ps->ps_initialized = 1;
345147191Sjkoshy		break;
346157144Sjkoshy	case PMCLOG_TYPE_MAP_IN:
347157144Sjkoshy		PMCLOG_GET_PATHLEN(pathlen,evlen,pmclog_map_in);
348157144Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_mi.pl_pid);
349157144Sjkoshy		PMCLOG_READADDR(le,ev->pl_u.pl_mi.pl_start);
350157144Sjkoshy		PMCLOG_READSTRING(le, ev->pl_u.pl_mi.pl_pathname, pathlen);
351147191Sjkoshy		break;
352157144Sjkoshy	case PMCLOG_TYPE_MAP_OUT:
353157144Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_mo.pl_pid);
354157144Sjkoshy		PMCLOG_READADDR(le,ev->pl_u.pl_mo.pl_start);
355157144Sjkoshy		PMCLOG_READADDR(le,ev->pl_u.pl_mo.pl_end);
356157144Sjkoshy		break;
357147191Sjkoshy	case PMCLOG_TYPE_PCSAMPLE:
358147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_s.pl_pid);
359147191Sjkoshy		PMCLOG_READADDR(le,ev->pl_u.pl_s.pl_pc);
360147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_s.pl_pmcid);
361147708Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_s.pl_usermode);
362147191Sjkoshy		break;
363147191Sjkoshy	case PMCLOG_TYPE_PMCALLOCATE:
364147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_a.pl_pmcid);
365147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_a.pl_event);
366147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_a.pl_flags);
367147191Sjkoshy		if ((ev->pl_u.pl_a.pl_evname =
368185363Sjkoshy		    _pmc_name_of_event(ev->pl_u.pl_a.pl_event, ps->ps_arch))
369185363Sjkoshy		    == NULL)
370147191Sjkoshy			goto error;
371147191Sjkoshy		break;
372236238Sfabient	case PMCLOG_TYPE_PMCALLOCATEDYN:
373236238Sfabient		PMCLOG_READ32(le,ev->pl_u.pl_ad.pl_pmcid);
374236238Sfabient		PMCLOG_READ32(le,ev->pl_u.pl_ad.pl_event);
375236238Sfabient		PMCLOG_READ32(le,ev->pl_u.pl_ad.pl_flags);
376236238Sfabient		PMCLOG_READSTRING(le,ev->pl_u.pl_ad.pl_evname,PMC_NAME_MAX);
377236238Sfabient		break;
378147191Sjkoshy	case PMCLOG_TYPE_PMCATTACH:
379147191Sjkoshy		PMCLOG_GET_PATHLEN(pathlen,evlen,pmclog_pmcattach);
380147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_t.pl_pmcid);
381147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_t.pl_pid);
382147191Sjkoshy		PMCLOG_READSTRING(le,ev->pl_u.pl_t.pl_pathname,pathlen);
383147191Sjkoshy		break;
384147191Sjkoshy	case PMCLOG_TYPE_PMCDETACH:
385147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_d.pl_pmcid);
386147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_d.pl_pid);
387147191Sjkoshy		break;
388147191Sjkoshy	case PMCLOG_TYPE_PROCCSW:
389147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_c.pl_pmcid);
390147191Sjkoshy		PMCLOG_READ64(le,ev->pl_u.pl_c.pl_value);
391147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_c.pl_pid);
392147191Sjkoshy		break;
393147191Sjkoshy	case PMCLOG_TYPE_PROCEXEC:
394147191Sjkoshy		PMCLOG_GET_PATHLEN(pathlen,evlen,pmclog_procexec);
395147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_x.pl_pid);
396147708Sjkoshy		PMCLOG_READADDR(le,ev->pl_u.pl_x.pl_entryaddr);
397147708Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_x.pl_pmcid);
398147191Sjkoshy		PMCLOG_READSTRING(le,ev->pl_u.pl_x.pl_pathname,pathlen);
399147191Sjkoshy		break;
400147191Sjkoshy	case PMCLOG_TYPE_PROCEXIT:
401147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_e.pl_pmcid);
402147191Sjkoshy		PMCLOG_READ64(le,ev->pl_u.pl_e.pl_value);
403147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_e.pl_pid);
404147191Sjkoshy		break;
405147191Sjkoshy	case PMCLOG_TYPE_PROCFORK:
406147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_f.pl_oldpid);
407147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_f.pl_newpid);
408147191Sjkoshy		break;
409147191Sjkoshy	case PMCLOG_TYPE_SYSEXIT:
410147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_se.pl_pid);
411147191Sjkoshy		break;
412147191Sjkoshy	case PMCLOG_TYPE_USERDATA:
413147191Sjkoshy		PMCLOG_READ32(le,ev->pl_u.pl_u.pl_userdata);
414147191Sjkoshy		break;
415147191Sjkoshy	default:	/* unknown record type */
416147191Sjkoshy		ps->ps_state = PL_STATE_ERROR;
417147191Sjkoshy		ev->pl_state = PMCLOG_ERROR;
418174215Sjkoshy		return (-1);
419147191Sjkoshy	}
420147191Sjkoshy
421147191Sjkoshy	ev->pl_offset = (ps->ps_offset += evlen);
422147191Sjkoshy	ev->pl_count  = (ps->ps_count += 1);
423147191Sjkoshy	ev->pl_state = PMCLOG_OK;
424147191Sjkoshy	return 0;
425147191Sjkoshy
426147191Sjkoshy error:
427147191Sjkoshy	ev->pl_state = PMCLOG_ERROR;
428147191Sjkoshy	ps->ps_state = PL_STATE_ERROR;
429147191Sjkoshy	return -1;
430147191Sjkoshy}
431147191Sjkoshy
432147191Sjkoshy/*
433147191Sjkoshy * Extract and return the next event from the byte stream.
434147191Sjkoshy *
435147191Sjkoshy * Returns 0 and sets the event's state to PMCLOG_OK in case an event
436147191Sjkoshy * was successfully parsed.  Otherwise this function returns -1 and
437147191Sjkoshy * sets the event's state to one of PMCLOG_REQUIRE_DATA (if more data
438147191Sjkoshy * is needed) or PMCLOG_EOF (if an EOF was seen) or PMCLOG_ERROR if
439147191Sjkoshy * a parse error was encountered.
440147191Sjkoshy */
441147191Sjkoshy
442147191Sjkoshyint
443147191Sjkoshypmclog_read(void *cookie, struct pmclog_ev *ev)
444147191Sjkoshy{
445147864Sjkoshy	int retval;
446147191Sjkoshy	ssize_t nread;
447147191Sjkoshy	struct pmclog_parse_state *ps;
448147191Sjkoshy
449147191Sjkoshy	ps = (struct pmclog_parse_state *) cookie;
450147191Sjkoshy
451147191Sjkoshy	if (ps->ps_state == PL_STATE_ERROR) {
452147191Sjkoshy		ev->pl_state = PMCLOG_ERROR;
453147191Sjkoshy		return -1;
454147191Sjkoshy	}
455147191Sjkoshy
456147191Sjkoshy	/*
457147191Sjkoshy	 * If there isn't enough data left for a new event try and get
458147191Sjkoshy	 * more data.
459147191Sjkoshy	 */
460147191Sjkoshy	if (ps->ps_len == 0) {
461147191Sjkoshy		ev->pl_state = PMCLOG_REQUIRE_DATA;
462147191Sjkoshy
463147191Sjkoshy		/*
464147191Sjkoshy		 * If we have a valid file descriptor to read from, attempt
465147191Sjkoshy		 * to read from that.  This read may return with an error,
466147191Sjkoshy		 * (which may be EAGAIN or other recoverable error), or
467147191Sjkoshy		 * can return EOF.
468147191Sjkoshy		 */
469147191Sjkoshy		if (ps->ps_fd != PMCLOG_FD_NONE) {
470147864Sjkoshy		refill:
471147191Sjkoshy			nread = read(ps->ps_fd, ps->ps_buffer,
472147191Sjkoshy			    PMCLOG_BUFFER_SIZE);
473147191Sjkoshy
474147191Sjkoshy			if (nread <= 0) {
475147708Sjkoshy				if (nread == 0)
476147708Sjkoshy					ev->pl_state = PMCLOG_EOF;
477147708Sjkoshy				else if (errno != EAGAIN) /* not restartable */
478147708Sjkoshy					ev->pl_state = PMCLOG_ERROR;
479147191Sjkoshy				return -1;
480147191Sjkoshy			}
481147191Sjkoshy
482147191Sjkoshy			ps->ps_len = nread;
483147191Sjkoshy			ps->ps_data = ps->ps_buffer;
484147191Sjkoshy		} else
485147191Sjkoshy			return -1;
486147191Sjkoshy	}
487147191Sjkoshy
488147191Sjkoshy	assert(ps->ps_len > 0);
489147191Sjkoshy
490147864Sjkoshy
491147864Sjkoshy	 /* Retrieve one event from the byte stream. */
492147864Sjkoshy	retval = pmclog_get_event(ps, &ps->ps_data, &ps->ps_len, ev);
493147864Sjkoshy
494147191Sjkoshy	/*
495147864Sjkoshy	 * If we need more data and we have a configured fd, try read
496147864Sjkoshy	 * from it.
497147191Sjkoshy	 */
498147864Sjkoshy	if (retval < 0 && ev->pl_state == PMCLOG_REQUIRE_DATA &&
499147864Sjkoshy	    ps->ps_fd != -1) {
500147864Sjkoshy		assert(ps->ps_len == 0);
501147864Sjkoshy		goto refill;
502147864Sjkoshy	}
503147864Sjkoshy
504147864Sjkoshy	return retval;
505147191Sjkoshy}
506147191Sjkoshy
507147191Sjkoshy/*
508147191Sjkoshy * Feed data to a memory based parser.
509147191Sjkoshy *
510147191Sjkoshy * The memory area pointed to by 'data' needs to be valid till the
511147191Sjkoshy * next error return from pmclog_next_event().
512147191Sjkoshy */
513147191Sjkoshy
514147191Sjkoshyint
515147191Sjkoshypmclog_feed(void *cookie, char *data, int len)
516147191Sjkoshy{
517147191Sjkoshy	struct pmclog_parse_state *ps;
518147191Sjkoshy
519147191Sjkoshy	ps = (struct pmclog_parse_state *) cookie;
520147191Sjkoshy
521147191Sjkoshy	if (len < 0 ||		/* invalid length */
522147191Sjkoshy	    ps->ps_buffer ||	/* called for a file parser */
523147191Sjkoshy	    ps->ps_len != 0)	/* unnecessary call */
524147191Sjkoshy		return -1;
525147191Sjkoshy
526147191Sjkoshy	ps->ps_data = data;
527147191Sjkoshy	ps->ps_len  = len;
528147191Sjkoshy
529147191Sjkoshy	return 0;
530147191Sjkoshy}
531147191Sjkoshy
532147191Sjkoshy/*
533147191Sjkoshy * Allocate and initialize parser state.
534147191Sjkoshy */
535147191Sjkoshy
536147191Sjkoshyvoid *
537147191Sjkoshypmclog_open(int fd)
538147191Sjkoshy{
539147191Sjkoshy	struct pmclog_parse_state *ps;
540147191Sjkoshy
541147191Sjkoshy	if ((ps = (struct pmclog_parse_state *) malloc(sizeof(*ps))) == NULL)
542147191Sjkoshy		return NULL;
543147191Sjkoshy
544147191Sjkoshy	ps->ps_state = PL_STATE_NEW_RECORD;
545147191Sjkoshy	ps->ps_arch = -1;
546147191Sjkoshy	ps->ps_initialized = 0;
547147191Sjkoshy	ps->ps_count = 0;
548147191Sjkoshy	ps->ps_offset = (off_t) 0;
549147191Sjkoshy	bzero(&ps->ps_saved, sizeof(ps->ps_saved));
550147191Sjkoshy	ps->ps_svcount = 0;
551147191Sjkoshy	ps->ps_fd    = fd;
552147191Sjkoshy	ps->ps_data  = NULL;
553147191Sjkoshy	ps->ps_buffer = NULL;
554147191Sjkoshy	ps->ps_len   = 0;
555147191Sjkoshy
556147191Sjkoshy	/* allocate space for a work area */
557147191Sjkoshy	if (ps->ps_fd != PMCLOG_FD_NONE) {
558208860Sfabient		if ((ps->ps_buffer = malloc(PMCLOG_BUFFER_SIZE)) == NULL) {
559208860Sfabient			free(ps);
560147191Sjkoshy			return NULL;
561208860Sfabient		}
562147191Sjkoshy	}
563147191Sjkoshy
564147191Sjkoshy	return ps;
565147191Sjkoshy}
566147191Sjkoshy
567147191Sjkoshy
568147191Sjkoshy/*
569147191Sjkoshy * Free up parser state.
570147191Sjkoshy */
571147191Sjkoshy
572147191Sjkoshyvoid
573147191Sjkoshypmclog_close(void *cookie)
574147191Sjkoshy{
575147191Sjkoshy	struct pmclog_parse_state *ps;
576147191Sjkoshy
577147191Sjkoshy	ps = (struct pmclog_parse_state *) cookie;
578147191Sjkoshy
579147191Sjkoshy	if (ps->ps_buffer)
580147191Sjkoshy		free(ps->ps_buffer);
581147191Sjkoshy
582147191Sjkoshy	free(ps);
583147191Sjkoshy}
584