2 * Copyright (c) 1991, 1992 Paul Kranenburg <pk@cs.few.eur.nl>
3 * Copyright (c) 1993 Branko Lankester <branko@hacktic.nl>
4 * Copyright (c) 1993, 1994, 1995, 1996 Rick Sladkey <jrs@world.std.com>
5 * Copyright (c) 1996-1999 Wichert Akkerman <wichert@cistron.nl>
6 * Copyright (c) 1999 IBM Deutschland Entwicklung GmbH, IBM Corporation
7 * Linux for s390 port by D.J. Barrow
8 * <barrow_dj@mail.yahoo.com,djbarrow@de.ibm.com>
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. The name of the author may not be used to endorse or promote products
20 * derived from this software without specific prior written permission.
22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36 #include <sys/param.h>
42 #ifdef HAVE_LINUX_PTRACE_H
43 # undef PTRACE_SYSCALL
44 # ifdef HAVE_STRUCT_IA64_FPREG
45 # define ia64_fpreg XXX_ia64_fpreg
47 # ifdef HAVE_STRUCT_PT_ALL_USER_REGS
48 # define pt_all_user_regs XXX_pt_all_user_regs
50 # ifdef HAVE_STRUCT_PTRACE_PEEKSIGINFO_ARGS
51 # define ptrace_peeksiginfo_args XXX_ptrace_peeksiginfo_args
53 # include <linux/ptrace.h>
54 # undef ptrace_peeksiginfo_args
56 # undef pt_all_user_regs
60 # undef PTRACE_GETREGS
61 # define PTRACE_GETREGS PTRACE_GETREGS64
62 # undef PTRACE_SETREGS
63 # define PTRACE_SETREGS PTRACE_SETREGS64
67 # include <asm/ptrace_offsets.h>
71 /* for struct iovec */
79 # include <asm/ptrace.h>
83 # include <asm/ptrace.h>
87 # warning: NSIG is not defined, using 32
93 /* Define these shorthand notations to simplify the syscallent files. */
97 #define TN TRACE_NETWORK
98 #define TP TRACE_PROCESS
99 #define TS TRACE_SIGNAL
100 #define TM TRACE_MEMORY
101 #define NF SYSCALL_NEVER_FAILS
103 #define SI STACKTRACE_INVALIDATE_CACHE
104 #define SE STACKTRACE_CAPTURE_ON_ENTER
106 const struct_sysent sysent0[] = {
107 #include "syscallent.h"
110 #if SUPPORTED_PERSONALITIES > 1
111 static const struct_sysent sysent1[] = {
112 # include "syscallent1.h"
116 #if SUPPORTED_PERSONALITIES > 2
117 static const struct_sysent sysent2[] = {
118 # include "syscallent2.h"
122 /* Now undef them since short defines cause wicked namespace pollution. */
136 * `ioctlent.h' may be generated from `ioctlent.raw' by the auxiliary
137 * program `ioctlsort', such that the list is sorted by the `code' field.
138 * This has the side-effect of resolving the _IO.. macros into
139 * plain integers, eliminating the need to include here everything
143 const char *const errnoent0[] = {
144 #include "errnoent.h"
146 const char *const signalent0[] = {
147 #include "signalent.h"
149 const struct_ioctlent ioctlent0[] = {
150 #include "ioctlent.h"
153 #if SUPPORTED_PERSONALITIES > 1
154 static const char *const errnoent1[] = {
155 # include "errnoent1.h"
157 static const char *const signalent1[] = {
158 # include "signalent1.h"
160 static const struct_ioctlent ioctlent1[] = {
161 # include "ioctlent1.h"
165 #if SUPPORTED_PERSONALITIES > 2
166 static const char *const errnoent2[] = {
167 # include "errnoent2.h"
169 static const char *const signalent2[] = {
170 # include "signalent2.h"
172 static const struct_ioctlent ioctlent2[] = {
173 # include "ioctlent2.h"
178 nsyscalls0 = ARRAY_SIZE(sysent0)
179 #if SUPPORTED_PERSONALITIES > 1
180 , nsyscalls1 = ARRAY_SIZE(sysent1)
181 # if SUPPORTED_PERSONALITIES > 2
182 , nsyscalls2 = ARRAY_SIZE(sysent2)
188 nerrnos0 = ARRAY_SIZE(errnoent0)
189 #if SUPPORTED_PERSONALITIES > 1
190 , nerrnos1 = ARRAY_SIZE(errnoent1)
191 # if SUPPORTED_PERSONALITIES > 2
192 , nerrnos2 = ARRAY_SIZE(errnoent2)
198 nsignals0 = ARRAY_SIZE(signalent0)
199 #if SUPPORTED_PERSONALITIES > 1
200 , nsignals1 = ARRAY_SIZE(signalent1)
201 # if SUPPORTED_PERSONALITIES > 2
202 , nsignals2 = ARRAY_SIZE(signalent2)
208 nioctlents0 = ARRAY_SIZE(ioctlent0)
209 #if SUPPORTED_PERSONALITIES > 1
210 , nioctlents1 = ARRAY_SIZE(ioctlent1)
211 # if SUPPORTED_PERSONALITIES > 2
212 , nioctlents2 = ARRAY_SIZE(ioctlent2)
217 #if SUPPORTED_PERSONALITIES > 1
218 const struct_sysent *sysent = sysent0;
219 const char *const *errnoent = errnoent0;
220 const char *const *signalent = signalent0;
221 const struct_ioctlent *ioctlent = ioctlent0;
223 unsigned nsyscalls = nsyscalls0;
224 unsigned nerrnos = nerrnos0;
225 unsigned nsignals = nsignals0;
226 unsigned nioctlents = nioctlents0;
229 qualbits_t *qual_vec[SUPPORTED_PERSONALITIES];
231 static const unsigned nsyscall_vec[SUPPORTED_PERSONALITIES] = {
233 #if SUPPORTED_PERSONALITIES > 1
236 #if SUPPORTED_PERSONALITIES > 2
240 static const struct_sysent *const sysent_vec[SUPPORTED_PERSONALITIES] = {
242 #if SUPPORTED_PERSONALITIES > 1
245 #if SUPPORTED_PERSONALITIES > 2
251 MAX_NSYSCALLS1 = (nsyscalls0
252 #if SUPPORTED_PERSONALITIES > 1
253 > nsyscalls1 ? nsyscalls0 : nsyscalls1
256 MAX_NSYSCALLS2 = (MAX_NSYSCALLS1
257 #if SUPPORTED_PERSONALITIES > 2
258 > nsyscalls2 ? MAX_NSYSCALLS1 : nsyscalls2
261 MAX_NSYSCALLS = MAX_NSYSCALLS2,
262 /* We are ready for arches with up to 255 signals,
263 * even though the largest known signo is on MIPS and it is 128.
264 * The number of existing syscalls on all arches is
265 * larger that 255 anyway, so it is just a pedantic matter.
267 MIN_QUALS = MAX_NSYSCALLS > 255 ? MAX_NSYSCALLS : 255
270 #if SUPPORTED_PERSONALITIES > 1
271 unsigned current_personality;
273 # ifndef current_wordsize
274 unsigned current_wordsize;
275 static const int personality_wordsize[SUPPORTED_PERSONALITIES] = {
276 PERSONALITY0_WORDSIZE,
277 PERSONALITY1_WORDSIZE,
278 # if SUPPORTED_PERSONALITIES > 2
279 PERSONALITY2_WORDSIZE,
285 set_personality(int personality)
287 nsyscalls = nsyscall_vec[personality];
288 sysent = sysent_vec[personality];
290 switch (personality) {
292 errnoent = errnoent0;
294 ioctlent = ioctlent0;
295 nioctlents = nioctlents0;
296 signalent = signalent0;
297 nsignals = nsignals0;
301 errnoent = errnoent1;
303 ioctlent = ioctlent1;
304 nioctlents = nioctlents1;
305 signalent = signalent1;
306 nsignals = nsignals1;
309 # if SUPPORTED_PERSONALITIES > 2
311 errnoent = errnoent2;
313 ioctlent = ioctlent2;
314 nioctlents = nioctlents2;
315 signalent = signalent2;
316 nsignals = nsignals2;
321 current_personality = personality;
322 # ifndef current_wordsize
323 current_wordsize = personality_wordsize[personality];
328 update_personality(struct tcb *tcp, unsigned int personality)
330 if (personality == current_personality)
332 set_personality(personality);
334 if (personality == tcp->currpers)
336 tcp->currpers = personality;
338 # if defined(POWERPC64)
340 static const char *const names[] = {"64 bit", "32 bit"};
341 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
342 tcp->pid, names[personality]);
344 # elif defined(X86_64)
346 static const char *const names[] = {"64 bit", "32 bit", "x32"};
347 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
348 tcp->pid, names[personality]);
352 static const char *const names[] = {"x32", "32 bit"};
353 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
354 tcp->pid, names[personality]);
356 # elif defined(AARCH64)
358 static const char *const names[] = {"32-bit", "AArch64"};
359 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
360 tcp->pid, names[personality]);
364 static const char *const names[] = {"64-bit", "32-bit"};
365 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
366 tcp->pid, names[personality]);
372 static int qual_syscall(), qual_signal(), qual_desc();
374 static const struct qual_options {
375 unsigned int bitflag;
376 const char *option_name;
377 int (*qualify)(const char *, int, int);
378 const char *argument_name;
380 { QUAL_TRACE, "trace", qual_syscall, "system call" },
381 { QUAL_TRACE, "t", qual_syscall, "system call" },
382 { QUAL_ABBREV, "abbrev", qual_syscall, "system call" },
383 { QUAL_ABBREV, "a", qual_syscall, "system call" },
384 { QUAL_VERBOSE, "verbose", qual_syscall, "system call" },
385 { QUAL_VERBOSE, "v", qual_syscall, "system call" },
386 { QUAL_RAW, "raw", qual_syscall, "system call" },
387 { QUAL_RAW, "x", qual_syscall, "system call" },
388 { QUAL_SIGNAL, "signal", qual_signal, "signal" },
389 { QUAL_SIGNAL, "signals", qual_signal, "signal" },
390 { QUAL_SIGNAL, "s", qual_signal, "signal" },
391 { QUAL_READ, "read", qual_desc, "descriptor" },
392 { QUAL_READ, "reads", qual_desc, "descriptor" },
393 { QUAL_READ, "r", qual_desc, "descriptor" },
394 { QUAL_WRITE, "write", qual_desc, "descriptor" },
395 { QUAL_WRITE, "writes", qual_desc, "descriptor" },
396 { QUAL_WRITE, "w", qual_desc, "descriptor" },
397 { 0, NULL, NULL, NULL },
401 reallocate_qual(const unsigned int n)
405 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
406 qp = qual_vec[p] = realloc(qual_vec[p], n * sizeof(qualbits_t));
409 memset(&qp[num_quals], 0, (n - num_quals) * sizeof(qualbits_t));
415 qualify_one(const unsigned int n, unsigned int bitflag, const int not, const int pers)
420 reallocate_qual(n + 1);
422 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
423 if (pers == p || pers < 0) {
425 qual_vec[p][n] &= ~bitflag;
427 qual_vec[p][n] |= bitflag;
433 qual_syscall(const char *s, const unsigned int bitflag, const int not)
439 if (*s >= '0' && *s <= '9') {
440 i = string_to_uint(s);
441 if (i >= MAX_NSYSCALLS)
443 qualify_one(i, bitflag, not, -1);
447 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
448 for (i = 0; i < nsyscall_vec[p]; i++) {
449 if (sysent_vec[p][i].sys_name
450 && strcmp(s, sysent_vec[p][i].sys_name) == 0
452 qualify_one(i, bitflag, not, p);
462 qual_signal(const char *s, const unsigned int bitflag, const int not)
466 if (*s >= '0' && *s <= '9') {
467 int signo = string_to_uint(s);
468 if (signo < 0 || signo > 255)
470 qualify_one(signo, bitflag, not, -1);
473 if (strncasecmp(s, "SIG", 3) == 0)
475 for (i = 0; i <= NSIG; i++) {
476 if (strcasecmp(s, signame(i) + 3) == 0) {
477 qualify_one(i, bitflag, not, -1);
485 qual_desc(const char *s, const unsigned int bitflag, const int not)
487 if (*s >= '0' && *s <= '9') {
488 int desc = string_to_uint(s);
489 if (desc < 0 || desc > 0x7fff) /* paranoia */
491 qualify_one(desc, bitflag, not, -1);
498 lookup_class(const char *s)
500 if (strcmp(s, "file") == 0)
502 if (strcmp(s, "ipc") == 0)
504 if (strcmp(s, "network") == 0)
505 return TRACE_NETWORK;
506 if (strcmp(s, "process") == 0)
507 return TRACE_PROCESS;
508 if (strcmp(s, "signal") == 0)
510 if (strcmp(s, "desc") == 0)
512 if (strcmp(s, "memory") == 0)
518 qualify(const char *s)
520 const struct qual_options *opt;
527 reallocate_qual(MIN_QUALS);
529 opt = &qual_options[0];
530 for (i = 0; (p = qual_options[i].option_name); i++) {
531 unsigned int len = strlen(p);
532 if (strncmp(s, p, len) == 0 && s[len] == '=') {
533 opt = &qual_options[i];
543 if (strcmp(s, "none") == 0) {
547 if (strcmp(s, "all") == 0) {
548 for (i = 0; i < num_quals; i++) {
549 qualify_one(i, opt->bitflag, not, -1);
553 for (i = 0; i < num_quals; i++) {
554 qualify_one(i, opt->bitflag, !not, -1);
559 for (p = strtok(copy, ","); p; p = strtok(NULL, ",")) {
561 if (opt->bitflag == QUAL_TRACE && (n = lookup_class(p)) > 0) {
563 for (pers = 0; pers < SUPPORTED_PERSONALITIES; pers++) {
564 for (i = 0; i < nsyscall_vec[pers]; i++)
565 if (sysent_vec[pers][i].sys_flags & n)
566 qualify_one(i, opt->bitflag, not, pers);
570 if (opt->qualify(p, opt->bitflag, not)) {
571 error_msg_and_die("invalid %s '%s'",
572 opt->argument_name, p);
579 #ifdef SYS_socket_subcall
581 decode_socket_subcall(struct tcb *tcp)
584 unsigned int i, n, size;
586 if (tcp->u_arg[0] < 0 || tcp->u_arg[0] >= SYS_socket_nsubcalls)
589 tcp->scno = SYS_socket_subcall + tcp->u_arg[0];
590 tcp->qual_flg = qual_flags[tcp->scno];
591 tcp->s_ent = &sysent[tcp->scno];
592 addr = tcp->u_arg[1];
593 size = current_wordsize;
594 n = tcp->s_ent->nargs;
595 for (i = 0; i < n; ++i) {
596 if (size == sizeof(int)) {
598 if (umove(tcp, addr, &arg) < 0)
604 if (umove(tcp, addr, &arg) < 0)
613 #ifdef SYS_ipc_subcall
615 decode_ipc_subcall(struct tcb *tcp)
619 if (tcp->u_arg[0] < 0 || tcp->u_arg[0] >= SYS_ipc_nsubcalls)
622 tcp->scno = SYS_ipc_subcall + tcp->u_arg[0];
623 tcp->qual_flg = qual_flags[tcp->scno];
624 tcp->s_ent = &sysent[tcp->scno];
625 n = tcp->s_ent->nargs;
626 for (i = 0; i < n; i++)
627 tcp->u_arg[i] = tcp->u_arg[i + 1];
632 printargs(struct tcb *tcp)
636 int n = tcp->s_ent->nargs;
637 for (i = 0; i < n; i++)
638 tprintf("%s%#lx", i ? ", " : "", tcp->u_arg[i]);
644 printargs_lu(struct tcb *tcp)
648 int n = tcp->s_ent->nargs;
649 for (i = 0; i < n; i++)
650 tprintf("%s%lu", i ? ", " : "", tcp->u_arg[i]);
656 printargs_ld(struct tcb *tcp)
660 int n = tcp->s_ent->nargs;
661 for (i = 0; i < n; i++)
662 tprintf("%s%ld", i ? ", " : "", tcp->u_arg[i]);
667 #if defined(SPARC) || defined(SPARC64) || defined(IA64) || defined(SH)
669 getrval2(struct tcb *tcp)
673 # if defined(SPARC) || defined(SPARC64)
674 val = sparc_regs.u_regs[U_REG_O1];
676 if (upeek(tcp->pid, 4*(REG_REG0+1), &val) < 0)
679 if (upeek(tcp->pid, PT_R9, &val) < 0)
688 static struct user_regs_struct i386_regs;
689 /* Cast suppresses signedness warning (.esp is long, not unsigned long) */
690 uint32_t *const i386_esp_ptr = (uint32_t*)&i386_regs.esp;
691 # define ARCH_REGS_FOR_GETREGSET i386_regs
692 #elif defined(X86_64) || defined(X32)
694 * On i386, pt_regs and user_regs_struct are the same,
695 * but on 64 bit x86, user_regs_struct has six more fields:
696 * fs_base, gs_base, ds, es, fs, gs.
697 * PTRACE_GETREGS fills them too, so struct pt_regs would overflow.
699 struct i386_user_regs_struct {
719 struct user_regs_struct x86_64_r;
720 struct i386_user_regs_struct i386_r;
722 # define x86_64_regs x86_regs_union.x86_64_r
723 # define i386_regs x86_regs_union.i386_r
724 uint32_t *const i386_esp_ptr = &i386_regs.esp;
725 static struct iovec x86_io = {
726 .iov_base = &x86_regs_union
729 bool ia64_ia32mode = 0; /* not static */
730 static long ia64_r8, ia64_r10;
731 #elif defined(POWERPC)
732 struct pt_regs ppc_regs;
738 struct pt_regs arm_regs; /* not static */
739 # define ARCH_REGS_FOR_GETREGSET arm_regs
740 #elif defined(AARCH64)
742 struct user_pt_regs aarch64_r;
743 struct arm_pt_regs arm_r;
745 # define aarch64_regs arm_regs_union.aarch64_r
746 # define arm_regs arm_regs_union.arm_r
747 static struct iovec aarch64_io = {
748 .iov_base = &arm_regs_union
751 static long alpha_r0;
752 static long alpha_a3;
754 static struct pt_regs avr32_regs;
755 #elif defined(SPARC) || defined(SPARC64)
756 struct pt_regs sparc_regs; /* not static */
757 #elif defined(LINUX_MIPSN32)
758 static long long mips_a3;
759 static long long mips_r2;
763 #elif defined(S390) || defined(S390X)
764 static long s390_gpr2;
766 static long hppa_r28;
771 #elif defined(CRISV10) || defined(CRISV32)
772 static long cris_r10;
774 struct pt_regs tile_regs;
775 #elif defined(MICROBLAZE)
776 static long microblaze_r3;
778 static struct user_regs_struct or1k_regs;
779 # define ARCH_REGS_FOR_GETREGSET or1k_regs
781 static struct user_gp_regs metag_regs;
782 # define ARCH_REGS_FOR_GETREGSET metag_regs
783 #elif defined(XTENSA)
784 static long xtensa_a2;
786 static struct user_regs_struct arc_regs;
787 # define ARCH_REGS_FOR_GETREGSET arc_regs
791 print_pc(struct tcb *tcp)
793 #define PRINTBADPC tprintf(sizeof(long) == 4 ? "[????????] " : \
794 sizeof(long) == 8 ? "[????????????????] " : \
796 if (get_regs_error) {
801 tprintf("[%08lx] ", i386_regs.eip);
802 #elif defined(S390) || defined(S390X)
804 if (upeek(tcp->pid, PT_PSWADDR, &psw) < 0) {
809 tprintf("[%08lx] ", psw);
811 tprintf("[%016lx] ", psw);
813 #elif defined(X86_64) || defined(X32)
814 if (x86_io.iov_len == sizeof(i386_regs)) {
815 tprintf("[%08x] ", (unsigned) i386_regs.eip);
818 tprintf("[%016lx] ", (unsigned long) x86_64_regs.rip);
820 /* Note: this truncates 64-bit rip to 32 bits */
821 tprintf("[%08lx] ", (unsigned long) x86_64_regs.rip);
826 if (upeek(tcp->pid, PT_B0, &ip) < 0) {
830 tprintf("[%08lx] ", ip);
831 #elif defined(POWERPC)
832 long pc = ppc_regs.nip;
834 tprintf("[%016lx] ", pc);
836 tprintf("[%08lx] ", pc);
840 if (upeek(tcp->pid, 4*PT_PC, &pc) < 0) {
841 tprints("[????????] ");
844 tprintf("[%08lx] ", pc);
847 if (upeek(tcp->pid, REG_PC, &pc) < 0) {
848 tprints("[????????????????] ");
851 tprintf("[%08lx] ", pc);
853 tprintf("[%08lx] ", sparc_regs.pc);
854 #elif defined(SPARC64)
855 tprintf("[%08lx] ", sparc_regs.tpc);
858 if (upeek(tcp->pid, PT_IAOQ0, &pc) < 0) {
859 tprints("[????????] ");
862 tprintf("[%08lx] ", pc);
865 if (upeek(tcp->pid, REG_EPC, &pc) < 0) {
866 tprints("[????????] ");
869 tprintf("[%08lx] ", pc);
872 if (upeek(tcp->pid, 4*REG_PC, &pc) < 0) {
873 tprints("[????????] ");
876 tprintf("[%08lx] ", pc);
879 if (upeek(tcp->pid, REG_PC, &pc) < 0) {
880 tprints("[????????????????] ");
883 tprintf("[%08lx] ", pc);
885 tprintf("[%08lx] ", arm_regs.ARM_pc);
886 #elif defined(AARCH64)
887 /* tprintf("[%016lx] ", aarch64_regs.regs[???]); */
889 tprintf("[%08lx] ", avr32_regs.pc);
892 if (upeek(tcp->pid, PT_PC, &pc) < 0) {
896 tprintf("[%08lx] ", pc);
897 #elif defined(CRISV10)
899 if (upeek(tcp->pid, 4*PT_IRP, &pc) < 0) {
903 tprintf("[%08lx] ", pc);
904 #elif defined(CRISV32)
906 if (upeek(tcp->pid, 4*PT_ERP, &pc) < 0) {
910 tprintf("[%08lx] ", pc);
913 tprintf("[%016lx] ", (unsigned long) tile_regs.pc);
915 tprintf("[%08lx] ", (unsigned long) tile_regs.pc);
918 tprintf("[%08lx] ", or1k_regs.pc);
920 tprintf("[%08lx] ", metag_regs.pc);
921 #elif defined(XTENSA)
923 if (upeek(tcp->pid, REG_PC, &pc) < 0) {
927 tprintf("[%08lx] ", pc);
929 tprintf("[%08lx] ", arc_regs.efa);
930 #endif /* architecture */
933 /* Shuffle syscall numbers so that we don't have huge gaps in syscall table.
934 * The shuffling should be reversible: shuffle_scno(shuffle_scno(n)) == n.
936 #if defined(ARM) || defined(AARCH64) /* So far only 32-bit ARM needs this */
938 shuffle_scno(unsigned long scno)
940 if (scno <= ARM_LAST_ORDINARY_SYSCALL)
943 /* __ARM_NR_cmpxchg? Swap with LAST_ORDINARY+1 */
944 if (scno == 0x000ffff0)
945 return ARM_LAST_ORDINARY_SYSCALL+1;
946 if (scno == ARM_LAST_ORDINARY_SYSCALL+1)
949 /* Is it ARM specific syscall?
950 * Swap with [LAST_ORDINARY+2, LAST_ORDINARY+2 + LAST_SPECIAL] range.
952 if (scno >= 0x000f0000
953 && scno <= 0x000f0000 + ARM_LAST_SPECIAL_SYSCALL
955 return scno - 0x000f0000 + (ARM_LAST_ORDINARY_SYSCALL+2);
957 if (/* scno >= ARM_LAST_ORDINARY_SYSCALL+2 - always true */ 1
958 && scno <= (ARM_LAST_ORDINARY_SYSCALL+2) + ARM_LAST_SPECIAL_SYSCALL
960 return scno + 0x000f0000 - (ARM_LAST_ORDINARY_SYSCALL+2);
966 # define shuffle_scno(scno) ((long)(scno))
970 undefined_scno_name(struct tcb *tcp)
972 static char buf[sizeof("syscall_%lu") + sizeof(long)*3];
974 sprintf(buf, "syscall_%lu", shuffle_scno(tcp->scno));
980 * PTRACE_GETREGS was added to the PowerPC kernel in v2.6.23,
981 * we provide a slow fallback for old kernels.
983 static int powerpc_getregs_old(pid_t pid)
989 r = upeek(pid, sizeof(long) * PT_NIP, (long *)&ppc_regs.nip);
993 #ifdef POWERPC64 /* else we never use it */
994 r = upeek(pid, sizeof(long) * PT_MSR, (long *)&ppc_regs.msr);
998 r = upeek(pid, sizeof(long) * PT_CCR, (long *)&ppc_regs.ccr);
1001 r = upeek(pid, sizeof(long) * PT_ORIG_R3, (long *)&ppc_regs.orig_gpr3);
1004 for (i = 0; i <= 8; i++) {
1005 r = upeek(pid, sizeof(long) * (PT_R0 + i),
1006 (long *)&ppc_regs.gpr[i]);
1016 long get_regs_error;
1018 #if defined(PTRACE_GETREGSET) && defined(NT_PRSTATUS)
1019 static void get_regset(pid_t pid)
1021 /* constant iovec */
1027 static struct iovec io = {
1028 .iov_base = &ARCH_REGS_FOR_GETREGSET,
1029 .iov_len = sizeof(ARCH_REGS_FOR_GETREGSET)
1031 get_regs_error = ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &io);
1033 /* variable iovec */
1034 # elif defined(X86_64) || defined(X32)
1035 /* x86_io.iov_base = &x86_regs_union; - already is */
1036 x86_io.iov_len = sizeof(x86_regs_union);
1037 get_regs_error = ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &x86_io);
1038 # elif defined(AARCH64)
1039 /* aarch64_io.iov_base = &arm_regs_union; - already is */
1040 aarch64_io.iov_len = sizeof(arm_regs_union);
1041 get_regs_error = ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &aarch64_io);
1043 # warning both PTRACE_GETREGSET and NT_PRSTATUS are available but not yet used
1046 #endif /* PTRACE_GETREGSET && NT_PRSTATUS */
1051 /* PTRACE_GETREGSET only */
1052 # if defined(METAG) || defined(OR1K) || defined(X32) || defined(AARCH64) || defined(ARC)
1055 /* PTRACE_GETREGS only */
1056 # elif defined(AVR32)
1057 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &avr32_regs);
1058 # elif defined(TILE)
1059 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &tile_regs);
1060 # elif defined(SPARC) || defined(SPARC64)
1061 get_regs_error = ptrace(PTRACE_GETREGS, pid, (char *)&sparc_regs, 0);
1062 # elif defined(POWERPC)
1063 static bool old_kernel = 0;
1066 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, (long) &ppc_regs);
1067 if (get_regs_error && errno == EIO) {
1070 get_regs_error = powerpc_getregs_old(pid);
1073 /* try PTRACE_GETREGSET first, fallback to PTRACE_GETREGS */
1075 # if defined(PTRACE_GETREGSET) && defined(NT_PRSTATUS)
1076 static int getregset_support;
1078 if (getregset_support >= 0) {
1080 if (getregset_support > 0)
1082 if (get_regs_error >= 0) {
1083 getregset_support = 1;
1086 if (errno == EPERM || errno == ESRCH)
1088 getregset_support = -1;
1090 # endif /* PTRACE_GETREGSET && NT_PRSTATUS */
1092 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &arm_regs);
1093 # elif defined(I386)
1094 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &i386_regs);
1095 # elif defined(X86_64)
1096 /* Use old method, with unreliable heuristical detection of 32-bitness. */
1097 x86_io.iov_len = sizeof(x86_64_regs);
1098 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &x86_64_regs);
1099 if (!get_regs_error && x86_64_regs.cs == 0x23) {
1100 x86_io.iov_len = sizeof(i386_regs);
1102 * The order is important: i386_regs and x86_64_regs
1103 * are overlaid in memory!
1105 i386_regs.ebx = x86_64_regs.rbx;
1106 i386_regs.ecx = x86_64_regs.rcx;
1107 i386_regs.edx = x86_64_regs.rdx;
1108 i386_regs.esi = x86_64_regs.rsi;
1109 i386_regs.edi = x86_64_regs.rdi;
1110 i386_regs.ebp = x86_64_regs.rbp;
1111 i386_regs.eax = x86_64_regs.rax;
1112 /* i386_regs.xds = x86_64_regs.ds; unused by strace */
1113 /* i386_regs.xes = x86_64_regs.es; ditto... */
1114 /* i386_regs.xfs = x86_64_regs.fs; */
1115 /* i386_regs.xgs = x86_64_regs.gs; */
1116 i386_regs.orig_eax = x86_64_regs.orig_rax;
1117 i386_regs.eip = x86_64_regs.rip;
1118 /* i386_regs.xcs = x86_64_regs.cs; */
1119 /* i386_regs.eflags = x86_64_regs.eflags; */
1120 i386_regs.esp = x86_64_regs.rsp;
1121 /* i386_regs.xss = x86_64_regs.ss; */
1124 # error unhandled architecture
1125 # endif /* ARM || I386 || X86_64 */
1128 #endif /* !get_regs */
1131 * 0: "ignore this ptrace stop", bail out of trace_syscall_entering() silently.
1132 * 1: ok, continue in trace_syscall_entering().
1133 * other: error, trace_syscall_entering() should print error indicator
1134 * ("????" etc) and bail out.
1137 get_scno(struct tcb *tcp)
1141 #if defined(S390) || defined(S390X)
1142 if (upeek(tcp->pid, PT_GPR2, &s390_gpr2) < 0)
1145 if (s390_gpr2 != -ENOSYS) {
1147 * Since kernel version 2.5.44 the scno gets passed in gpr2.
1152 * Old style of "passing" the scno via the SVC instruction.
1155 long opcode, offset_reg, tmp;
1157 static const int gpr_offset[16] = {
1158 PT_GPR0, PT_GPR1, PT_ORIGGPR2, PT_GPR3,
1159 PT_GPR4, PT_GPR5, PT_GPR6, PT_GPR7,
1160 PT_GPR8, PT_GPR9, PT_GPR10, PT_GPR11,
1161 PT_GPR12, PT_GPR13, PT_GPR14, PT_GPR15
1164 if (upeek(tcp->pid, PT_PSWADDR, &psw) < 0)
1167 opcode = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)(psw - sizeof(long)), 0);
1169 perror_msg("peektext(psw-oneword)");
1174 * We have to check if the SVC got executed directly or via an
1175 * EXECUTE instruction. In case of EXECUTE it is necessary to do
1176 * instruction decoding to derive the system call number.
1177 * Unfortunately the opcode sizes of EXECUTE and SVC are differently,
1178 * so that this doesn't work if a SVC opcode is part of an EXECUTE
1179 * opcode. Since there is no way to find out the opcode size this
1180 * is the best we can do...
1182 if ((opcode & 0xff00) == 0x0a00) {
1184 scno = opcode & 0xff;
1187 /* SVC got executed by EXECUTE instruction */
1190 * Do instruction decoding of EXECUTE. If you really want to
1191 * understand this, read the Principles of Operations.
1193 svc_addr = (void *) (opcode & 0xfff);
1196 offset_reg = (opcode & 0x000f0000) >> 16;
1197 if (offset_reg && (upeek(tcp->pid, gpr_offset[offset_reg], &tmp) < 0))
1202 offset_reg = (opcode & 0x0000f000) >> 12;
1203 if (offset_reg && (upeek(tcp->pid, gpr_offset[offset_reg], &tmp) < 0))
1207 scno = ptrace(PTRACE_PEEKTEXT, tcp->pid, svc_addr, 0);
1216 offset_reg = (opcode & 0x00f00000) >> 20;
1217 if (offset_reg && (upeek(tcp->pid, gpr_offset[offset_reg], &tmp) < 0))
1220 scno = (scno | tmp) & 0xff;
1223 #elif defined(POWERPC)
1224 scno = ppc_regs.gpr[0];
1226 unsigned int currpers;
1229 * Check for 64/32 bit mode.
1230 * Embedded implementations covered by Book E extension of PPC use
1231 * bit 0 (CM) of 32-bit Machine state register (MSR).
1232 * Other implementations use bit 0 (SF) of 64-bit MSR.
1234 currpers = (ppc_regs.msr & 0x8000000080000000) ? 0 : 1;
1235 update_personality(tcp, currpers);
1237 #elif defined(AVR32)
1238 scno = avr32_regs.r8;
1240 if (upeek(tcp->pid, PT_ORIG_P0, &scno))
1243 scno = i386_regs.orig_eax;
1244 #elif defined(X86_64) || defined(X32)
1245 # ifndef __X32_SYSCALL_BIT
1246 # define __X32_SYSCALL_BIT 0x40000000
1248 unsigned int currpers;
1250 /* GETREGSET of NT_PRSTATUS tells us regset size,
1251 * which unambiguously detects i386.
1253 * Linux kernel distinguishes x86-64 and x32 processes
1254 * solely by looking at __X32_SYSCALL_BIT:
1255 * arch/x86/include/asm/compat.h::is_x32_task():
1256 * if (task_pt_regs(current)->orig_ax & __X32_SYSCALL_BIT)
1259 if (x86_io.iov_len == sizeof(i386_regs)) {
1260 scno = i386_regs.orig_eax;
1263 scno = x86_64_regs.orig_rax;
1265 if (scno & __X32_SYSCALL_BIT) {
1266 scno -= __X32_SYSCALL_BIT;
1271 /* cs = 0x33 for long mode (native 64 bit and x32)
1272 * cs = 0x23 for compatibility mode (32 bit)
1273 * ds = 0x2b for x32 mode (x86-64 in 32 bit)
1275 scno = x86_64_regs.orig_rax;
1276 switch (x86_64_regs.cs) {
1277 case 0x23: currpers = 1; break;
1279 if (x86_64_regs.ds == 0x2b) {
1281 scno &= ~__X32_SYSCALL_BIT;
1286 fprintf(stderr, "Unknown value CS=0x%08X while "
1287 "detecting personality of process "
1288 "PID=%d\n", (int)x86_64_regs.cs, tcp->pid);
1289 currpers = current_personality;
1293 /* This version analyzes the opcode of a syscall instruction.
1294 * (int 0x80 on i386 vs. syscall on x86-64)
1295 * It works, but is too complicated, and strictly speaking, unreliable.
1297 unsigned long call, rip = x86_64_regs.rip;
1298 /* sizeof(syscall) == sizeof(int 0x80) == 2 */
1301 call = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)rip, (char *)0);
1303 fprintf(stderr, "ptrace_peektext failed: %s\n",
1305 switch (call & 0xffff) {
1306 /* x86-64: syscall = 0x0f 0x05 */
1307 case 0x050f: currpers = 0; break;
1308 /* i386: int 0x80 = 0xcd 0x80 */
1309 case 0x80cd: currpers = 1; break;
1311 currpers = current_personality;
1313 "Unknown syscall opcode (0x%04X) while "
1314 "detecting personality of process "
1315 "PID=%d\n", (int)call, tcp->pid);
1321 /* If we are built for a x32 system, then personality 0 is x32
1322 * (not x86_64), and stracing of x86_64 apps is not supported.
1323 * Stracing of i386 apps is still supported.
1325 if (currpers == 0) {
1326 fprintf(stderr, "syscall_%lu(...) in unsupported "
1327 "64-bit mode of process PID=%d\n",
1331 currpers &= ~2; /* map 2,1 to 0,1 */
1333 update_personality(tcp, currpers);
1335 # define IA64_PSR_IS ((long)1 << 34)
1337 if (upeek(tcp->pid, PT_CR_IPSR, &psr) >= 0)
1338 ia64_ia32mode = ((psr & IA64_PSR_IS) != 0);
1339 if (ia64_ia32mode) {
1340 if (upeek(tcp->pid, PT_R1, &scno) < 0)
1343 if (upeek(tcp->pid, PT_R15, &scno) < 0)
1346 #elif defined(AARCH64)
1347 switch (aarch64_io.iov_len) {
1348 case sizeof(aarch64_regs):
1349 /* We are in 64-bit mode */
1350 scno = aarch64_regs.regs[8];
1351 update_personality(tcp, 1);
1353 case sizeof(arm_regs):
1354 /* We are in 32-bit mode */
1355 /* Note: we don't support OABI, unlike 32-bit ARM build */
1356 scno = arm_regs.ARM_r7;
1357 scno = shuffle_scno(scno);
1358 update_personality(tcp, 0);
1362 if (arm_regs.ARM_ip != 0) {
1363 /* It is not a syscall entry */
1364 fprintf(stderr, "pid %d stray syscall exit\n", tcp->pid);
1365 tcp->flags |= TCB_INSYSCALL;
1368 /* Note: we support only 32-bit CPUs, not 26-bit */
1370 # if !defined(__ARM_EABI__) || ENABLE_ARM_OABI
1371 if (arm_regs.ARM_cpsr & 0x20)
1375 /* Check EABI/OABI by examining SVC insn's low 24 bits */
1377 scno = ptrace(PTRACE_PEEKTEXT, tcp->pid, (void *)(arm_regs.ARM_pc - 4), NULL);
1380 /* EABI syscall convention? */
1381 if (scno != 0xef000000) {
1383 if ((scno & 0x0ff00000) != 0x0f900000) {
1384 fprintf(stderr, "pid %d unknown syscall trap 0x%08lx\n",
1388 /* Fixup the syscall number */
1392 scno = arm_regs.ARM_r7;
1394 # else /* __ARM_EABI__ || !ENABLE_ARM_OABI */
1395 scno = arm_regs.ARM_r7;
1397 scno = shuffle_scno(scno);
1399 if (upeek(tcp->pid, 4*PT_ORIG_D0, &scno) < 0)
1401 #elif defined(LINUX_MIPSN32)
1402 unsigned long long regs[38];
1404 if (ptrace(PTRACE_GETREGS, tcp->pid, NULL, (long) ®s) < 0)
1406 mips_a3 = regs[REG_A3];
1407 mips_r2 = regs[REG_V0];
1410 if (!SCNO_IN_RANGE(scno)) {
1411 if (mips_a3 == 0 || mips_a3 == -1) {
1413 fprintf(stderr, "stray syscall exit: v0 = %ld\n", scno);
1418 if (upeek(tcp->pid, REG_A3, &mips_a3) < 0)
1420 if (upeek(tcp->pid, REG_V0, &scno) < 0)
1423 if (!SCNO_IN_RANGE(scno)) {
1424 if (mips_a3 == 0 || mips_a3 == -1) {
1426 fprintf(stderr, "stray syscall exit: v0 = %ld\n", scno);
1430 #elif defined(ALPHA)
1431 if (upeek(tcp->pid, REG_A3, &alpha_a3) < 0)
1433 if (upeek(tcp->pid, REG_R0, &scno) < 0)
1437 * Do some sanity checks to figure out if it's
1438 * really a syscall entry
1440 if (!SCNO_IN_RANGE(scno)) {
1441 if (alpha_a3 == 0 || alpha_a3 == -1) {
1443 fprintf(stderr, "stray syscall exit: r0 = %ld\n", scno);
1447 #elif defined(SPARC) || defined(SPARC64)
1448 /* Disassemble the syscall trap. */
1449 /* Retrieve the syscall trap instruction. */
1452 # if defined(SPARC64)
1453 trap = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)sparc_regs.tpc, 0);
1456 trap = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)sparc_regs.pc, 0);
1461 /* Disassemble the trap to see what personality to use. */
1464 /* Linux/SPARC syscall trap. */
1465 update_personality(tcp, 0);
1468 /* Linux/SPARC64 syscall trap. */
1469 update_personality(tcp, 2);
1472 /* SunOS syscall trap. (pers 1) */
1473 fprintf(stderr, "syscall: SunOS no support\n");
1476 /* Solaris 2.x syscall trap. (per 2) */
1477 update_personality(tcp, 1);
1480 /* NetBSD/FreeBSD syscall trap. */
1481 fprintf(stderr, "syscall: NetBSD/FreeBSD not supported\n");
1484 /* Solaris 2.x gettimeofday */
1485 update_personality(tcp, 1);
1488 # if defined(SPARC64)
1489 fprintf(stderr, "syscall: unknown syscall trap %08lx %016lx\n", trap, sparc_regs.tpc);
1491 fprintf(stderr, "syscall: unknown syscall trap %08lx %08lx\n", trap, sparc_regs.pc);
1496 /* Extract the system call number from the registers. */
1497 if (trap == 0x91d02027)
1500 scno = sparc_regs.u_regs[U_REG_G1];
1502 scno = sparc_regs.u_regs[U_REG_O0];
1503 memmove(&sparc_regs.u_regs[U_REG_O0], &sparc_regs.u_regs[U_REG_O1], 7*sizeof(sparc_regs.u_regs[0]));
1506 if (upeek(tcp->pid, PT_GR20, &scno) < 0)
1510 * In the new syscall ABI, the system call number is in R3.
1512 if (upeek(tcp->pid, 4*(REG_REG0+3), &scno) < 0)
1516 /* Odd as it may seem, a glibc bug has been known to cause
1517 glibc to issue bogus negative syscall numbers. So for
1518 our purposes, make strace print what it *should* have been */
1519 long correct_scno = (scno & 0xff);
1522 "Detected glibc bug: bogus system call"
1523 " number = %ld, correcting to %ld\n",
1526 scno = correct_scno;
1529 if (upeek(tcp->pid, REG_SYSCALL, &scno) < 0)
1532 #elif defined(CRISV10) || defined(CRISV32)
1533 if (upeek(tcp->pid, 4*PT_R9, &scno) < 0)
1536 unsigned int currpers;
1537 scno = tile_regs.regs[10];
1541 # ifndef PT_FLAGS_COMPAT
1542 # define PT_FLAGS_COMPAT 0x10000 /* from Linux 3.8 on */
1544 if (tile_regs.flags & PT_FLAGS_COMPAT)
1549 update_personality(tcp, currpers);
1550 #elif defined(MICROBLAZE)
1551 if (upeek(tcp->pid, 0, &scno) < 0)
1554 scno = or1k_regs.gpr[11];
1555 #elif defined(METAG)
1556 scno = metag_regs.dx[0][1]; /* syscall number in D1Re0 (D1.0) */
1557 #elif defined(XTENSA)
1558 if (upeek(tcp->pid, SYSCALL_NR, &scno) < 0)
1561 scno = arc_regs.scratch.r8;
1565 if (SCNO_IS_VALID(tcp->scno)) {
1566 tcp->s_ent = &sysent[scno];
1567 tcp->qual_flg = qual_flags[scno];
1569 static const struct_sysent unknown = {
1572 .sys_func = printargs,
1573 .sys_name = "unknown", /* not used */
1575 tcp->s_ent = &unknown;
1576 tcp->qual_flg = UNDEFINED_SCNO | QUAL_RAW | DEFAULT_QUAL_FLAGS;
1581 /* Called at each syscall entry.
1583 * 0: "ignore this ptrace stop", bail out of trace_syscall_entering() silently.
1584 * 1: ok, continue in trace_syscall_entering().
1585 * other: error, trace_syscall_entering() should print error indicator
1586 * ("????" etc) and bail out.
1589 syscall_fixup_on_sysenter(struct tcb *tcp)
1591 /* A common case of "not a syscall entry" is post-execve SIGTRAP */
1593 if (i386_regs.eax != -ENOSYS) {
1595 fprintf(stderr, "not a syscall entry (eax = %ld)\n", i386_regs.eax);
1598 #elif defined(X86_64) || defined(X32)
1601 if (x86_io.iov_len == sizeof(i386_regs)) {
1602 /* Sign extend from 32 bits */
1603 rax = (int32_t)i386_regs.eax;
1605 /* Note: in X32 build, this truncates 64 to 32 bits */
1606 rax = x86_64_regs.rax;
1608 if (rax != -ENOSYS) {
1610 fprintf(stderr, "not a syscall entry (rax = %ld)\n", rax);
1615 /* TODO? Eliminate upeek's in arches below like we did in x86 */
1616 if (upeek(tcp->pid, 4*PT_D0, &m68k_d0) < 0)
1618 if (m68k_d0 != -ENOSYS) {
1620 fprintf(stderr, "not a syscall entry (d0 = %ld)\n", m68k_d0);
1624 if (upeek(tcp->pid, PT_R10, &ia64_r10) < 0)
1626 if (upeek(tcp->pid, PT_R8, &ia64_r8) < 0)
1628 if (ia64_ia32mode && ia64_r8 != -ENOSYS) {
1630 fprintf(stderr, "not a syscall entry (r8 = %ld)\n", ia64_r8);
1633 #elif defined(CRISV10) || defined(CRISV32)
1634 if (upeek(tcp->pid, 4*PT_R10, &cris_r10) < 0)
1636 if (cris_r10 != -ENOSYS) {
1638 fprintf(stderr, "not a syscall entry (r10 = %ld)\n", cris_r10);
1641 #elif defined(MICROBLAZE)
1642 if (upeek(tcp->pid, 3 * 4, µblaze_r3) < 0)
1644 if (microblaze_r3 != -ENOSYS) {
1646 fprintf(stderr, "not a syscall entry (r3 = %ld)\n", microblaze_r3);
1654 internal_fork(struct tcb *tcp)
1656 #if defined S390 || defined S390X || defined CRISV10 || defined CRISV32
1657 # define ARG_FLAGS 1
1659 # define ARG_FLAGS 0
1661 #ifndef CLONE_UNTRACED
1662 # define CLONE_UNTRACED 0x00800000
1664 if ((ptrace_setoptions
1665 & (PTRACE_O_TRACECLONE | PTRACE_O_TRACEFORK | PTRACE_O_TRACEVFORK))
1666 == (PTRACE_O_TRACECLONE | PTRACE_O_TRACEFORK | PTRACE_O_TRACEVFORK))
1672 if (entering(tcp)) {
1674 * We won't see the new child if clone is called with
1675 * CLONE_UNTRACED, so we keep the same logic with that option
1676 * and don't trace it.
1678 if ((tcp->s_ent->sys_func == sys_clone)
1679 && (tcp->u_arg[ARG_FLAGS] & CLONE_UNTRACED)
1684 if (tcp->flags & TCB_BPTSET)
1689 #if defined(TCB_WAITEXECVE)
1691 internal_exec(struct tcb *tcp)
1693 /* Maybe we have post-execve SIGTRAP suppressed? */
1694 if (ptrace_setoptions & PTRACE_O_TRACEEXEC)
1695 return; /* yes, no need to do anything */
1697 if (exiting(tcp) && syserror(tcp))
1698 /* Error in execve, no post-execve SIGTRAP expected */
1699 tcp->flags &= ~TCB_WAITEXECVE;
1701 tcp->flags |= TCB_WAITEXECVE;
1706 syscall_fixup_for_fork_exec(struct tcb *tcp)
1709 * We must always trace a few critical system calls in order to
1710 * correctly support following forks in the presence of tracing
1715 func = tcp->s_ent->sys_func;
1717 if ( sys_fork == func
1718 || sys_clone == func
1724 #if defined(TCB_WAITEXECVE)
1725 if ( sys_execve == func
1726 # if defined(SPARC) || defined(SPARC64)
1727 || sys_execv == func
1736 /* Return -1 on error or 1 on success (never 0!) */
1738 get_syscall_args(struct tcb *tcp)
1742 nargs = tcp->s_ent->nargs;
1744 #if defined(S390) || defined(S390X)
1745 for (i = 0; i < nargs; ++i)
1746 if (upeek(tcp->pid, i==0 ? PT_ORIGGPR2 : PT_GPR2 + i*sizeof(long), &tcp->u_arg[i]) < 0)
1748 #elif defined(ALPHA)
1749 for (i = 0; i < nargs; ++i)
1750 if (upeek(tcp->pid, REG_A0+i, &tcp->u_arg[i]) < 0)
1753 if (!ia64_ia32mode) {
1754 unsigned long *out0, cfm, sof, sol;
1756 /* be backwards compatible with kernel < 2.4.4... */
1758 # define PT_RBS_END PT_AR_BSP
1761 if (upeek(tcp->pid, PT_RBS_END, &rbs_end) < 0)
1763 if (upeek(tcp->pid, PT_CFM, (long *) &cfm) < 0)
1766 sof = (cfm >> 0) & 0x7f;
1767 sol = (cfm >> 7) & 0x7f;
1768 out0 = ia64_rse_skip_regs((unsigned long *) rbs_end, -sof + sol);
1770 for (i = 0; i < nargs; ++i) {
1771 if (umoven(tcp, (unsigned long) ia64_rse_skip_regs(out0, i),
1772 sizeof(long), (char *) &tcp->u_arg[i]) < 0)
1776 static const int argreg[MAX_ARGS] = { PT_R11 /* EBX = out0 */,
1777 PT_R9 /* ECX = out1 */,
1778 PT_R10 /* EDX = out2 */,
1779 PT_R14 /* ESI = out3 */,
1780 PT_R15 /* EDI = out4 */,
1781 PT_R13 /* EBP = out5 */};
1783 for (i = 0; i < nargs; ++i) {
1784 if (upeek(tcp->pid, argreg[i], &tcp->u_arg[i]) < 0)
1786 /* truncate away IVE sign-extension */
1787 tcp->u_arg[i] &= 0xffffffff;
1790 #elif defined(LINUX_MIPSN32) || defined(LINUX_MIPSN64)
1791 /* N32 and N64 both use up to six registers. */
1792 unsigned long long regs[38];
1794 if (ptrace(PTRACE_GETREGS, tcp->pid, NULL, (long) ®s) < 0)
1797 for (i = 0; i < nargs; ++i) {
1798 tcp->u_arg[i] = regs[REG_A0 + i];
1799 # if defined(LINUX_MIPSN32)
1800 tcp->ext_arg[i] = regs[REG_A0 + i];
1807 if (upeek(tcp->pid, REG_SP, &sp) < 0)
1809 for (i = 0; i < 4; ++i)
1810 if (upeek(tcp->pid, REG_A0 + i, &tcp->u_arg[i]) < 0)
1812 umoven(tcp, sp + 16, (nargs - 4) * sizeof(tcp->u_arg[0]),
1813 (char *)(tcp->u_arg + 4));
1815 for (i = 0; i < nargs; ++i)
1816 if (upeek(tcp->pid, REG_A0 + i, &tcp->u_arg[i]) < 0)
1819 #elif defined(POWERPC)
1822 tcp->u_arg[0] = ppc_regs.orig_gpr3;
1823 tcp->u_arg[1] = ppc_regs.gpr[4];
1824 tcp->u_arg[2] = ppc_regs.gpr[5];
1825 tcp->u_arg[3] = ppc_regs.gpr[6];
1826 tcp->u_arg[4] = ppc_regs.gpr[7];
1827 tcp->u_arg[5] = ppc_regs.gpr[8];
1828 #elif defined(SPARC) || defined(SPARC64)
1829 for (i = 0; i < nargs; ++i)
1830 tcp->u_arg[i] = sparc_regs.u_regs[U_REG_O0 + i];
1832 for (i = 0; i < nargs; ++i)
1833 if (upeek(tcp->pid, PT_GR26-4*i, &tcp->u_arg[i]) < 0)
1835 #elif defined(ARM) || defined(AARCH64)
1836 # if defined(AARCH64)
1837 if (tcp->currpers == 1)
1838 for (i = 0; i < nargs; ++i)
1839 tcp->u_arg[i] = aarch64_regs.regs[i];
1842 for (i = 0; i < nargs; ++i)
1843 tcp->u_arg[i] = arm_regs.uregs[i];
1844 #elif defined(AVR32)
1847 tcp->u_arg[0] = avr32_regs.r12;
1848 tcp->u_arg[1] = avr32_regs.r11;
1849 tcp->u_arg[2] = avr32_regs.r10;
1850 tcp->u_arg[3] = avr32_regs.r9;
1851 tcp->u_arg[4] = avr32_regs.r5;
1852 tcp->u_arg[5] = avr32_regs.r3;
1854 static const int argreg[MAX_ARGS] = { PT_R0, PT_R1, PT_R2, PT_R3, PT_R4, PT_R5 };
1856 for (i = 0; i < nargs; ++i)
1857 if (upeek(tcp->pid, argreg[i], &tcp->u_arg[i]) < 0)
1860 static const int syscall_regs[MAX_ARGS] = {
1861 4 * (REG_REG0+4), 4 * (REG_REG0+5), 4 * (REG_REG0+6),
1862 4 * (REG_REG0+7), 4 * (REG_REG0 ), 4 * (REG_REG0+1)
1865 for (i = 0; i < nargs; ++i)
1866 if (upeek(tcp->pid, syscall_regs[i], &tcp->u_arg[i]) < 0)
1870 /* Registers used by SH5 Linux system calls for parameters */
1871 static const int syscall_regs[MAX_ARGS] = { 2, 3, 4, 5, 6, 7 };
1873 for (i = 0; i < nargs; ++i)
1874 if (upeek(tcp->pid, REG_GENERAL(syscall_regs[i]), &tcp->u_arg[i]) < 0)
1879 tcp->u_arg[0] = i386_regs.ebx;
1880 tcp->u_arg[1] = i386_regs.ecx;
1881 tcp->u_arg[2] = i386_regs.edx;
1882 tcp->u_arg[3] = i386_regs.esi;
1883 tcp->u_arg[4] = i386_regs.edi;
1884 tcp->u_arg[5] = i386_regs.ebp;
1885 #elif defined(X86_64) || defined(X32)
1888 if (x86_io.iov_len != sizeof(i386_regs)) {
1889 /* x86-64 or x32 ABI */
1890 tcp->u_arg[0] = x86_64_regs.rdi;
1891 tcp->u_arg[1] = x86_64_regs.rsi;
1892 tcp->u_arg[2] = x86_64_regs.rdx;
1893 tcp->u_arg[3] = x86_64_regs.r10;
1894 tcp->u_arg[4] = x86_64_regs.r8;
1895 tcp->u_arg[5] = x86_64_regs.r9;
1897 tcp->ext_arg[0] = x86_64_regs.rdi;
1898 tcp->ext_arg[1] = x86_64_regs.rsi;
1899 tcp->ext_arg[2] = x86_64_regs.rdx;
1900 tcp->ext_arg[3] = x86_64_regs.r10;
1901 tcp->ext_arg[4] = x86_64_regs.r8;
1902 tcp->ext_arg[5] = x86_64_regs.r9;
1906 /* Zero-extend from 32 bits */
1907 /* Use widen_to_long(tcp->u_arg[N]) in syscall handlers
1908 * if you need to use *sign-extended* parameter.
1910 tcp->u_arg[0] = (long)(uint32_t)i386_regs.ebx;
1911 tcp->u_arg[1] = (long)(uint32_t)i386_regs.ecx;
1912 tcp->u_arg[2] = (long)(uint32_t)i386_regs.edx;
1913 tcp->u_arg[3] = (long)(uint32_t)i386_regs.esi;
1914 tcp->u_arg[4] = (long)(uint32_t)i386_regs.edi;
1915 tcp->u_arg[5] = (long)(uint32_t)i386_regs.ebp;
1917 #elif defined(MICROBLAZE)
1918 for (i = 0; i < nargs; ++i)
1919 if (upeek(tcp->pid, (5 + i) * 4, &tcp->u_arg[i]) < 0)
1921 #elif defined(CRISV10) || defined(CRISV32)
1922 static const int crisregs[MAX_ARGS] = {
1923 4*PT_ORIG_R10, 4*PT_R11, 4*PT_R12,
1924 4*PT_R13 , 4*PT_MOF, 4*PT_SRP
1927 for (i = 0; i < nargs; ++i)
1928 if (upeek(tcp->pid, crisregs[i], &tcp->u_arg[i]) < 0)
1931 for (i = 0; i < nargs; ++i)
1932 tcp->u_arg[i] = tile_regs.regs[i];
1934 for (i = 0; i < nargs; ++i)
1935 if (upeek(tcp->pid, (i < 5 ? i : i + 2)*4, &tcp->u_arg[i]) < 0)
1939 for (i = 0; i < 6; ++i)
1940 tcp->u_arg[i] = or1k_regs.gpr[3 + i];
1941 #elif defined(METAG)
1942 for (i = 0; i < nargs; i++)
1943 /* arguments go backwards from D1Ar1 (D1.3) */
1944 tcp->u_arg[i] = ((unsigned long *)&metag_regs.dx[3][1])[-i];
1945 #elif defined(XTENSA)
1946 /* arg0: a6, arg1: a3, arg2: a4, arg3: a5, arg4: a8, arg5: a9 */
1947 static const int xtensaregs[MAX_ARGS] = { 6, 3, 4, 5, 8, 9 };
1948 for (i = 0; i < nargs; ++i)
1949 if (upeek(tcp->pid, REG_A_BASE + xtensaregs[i], &tcp->u_arg[i]) < 0)
1952 long *arc_args = &arc_regs.scratch.r0;
1953 for (i = 0; i < nargs; ++i)
1954 tcp->u_arg[i] = *arc_args--;
1956 #else /* Other architecture (32bits specific) */
1957 for (i = 0; i < nargs; ++i)
1958 if (upeek(tcp->pid, i*4, &tcp->u_arg[i]) < 0)
1965 trace_syscall_entering(struct tcb *tcp)
1969 #if defined TCB_WAITEXECVE
1970 if (tcp->flags & TCB_WAITEXECVE) {
1971 /* This is the post-execve SIGTRAP. */
1972 tcp->flags &= ~TCB_WAITEXECVE;
1977 scno_good = res = (get_regs_error ? -1 : get_scno(tcp));
1981 res = syscall_fixup_on_sysenter(tcp);
1985 res = get_syscall_args(tcp);
1991 tprints("????" /* anti-trigraph gap */ "(");
1992 else if (tcp->qual_flg & UNDEFINED_SCNO)
1993 tprintf("%s(", undefined_scno_name(tcp));
1995 tprintf("%s(", tcp->s_ent->sys_name);
1997 * " <unavailable>" will be added later by the code which
1998 * detects ptrace errors.
2003 if ( sys_execve == tcp->s_ent->sys_func
2004 # if defined(SPARC) || defined(SPARC64)
2005 || sys_execv == tcp->s_ent->sys_func
2008 hide_log_until_execve = 0;
2011 #if defined(SYS_socket_subcall) || defined(SYS_ipc_subcall)
2013 # ifdef SYS_socket_subcall
2014 if (tcp->s_ent->sys_func == sys_socketcall) {
2015 decode_socket_subcall(tcp);
2019 # ifdef SYS_ipc_subcall
2020 if (tcp->s_ent->sys_func == sys_ipc) {
2021 decode_ipc_subcall(tcp);
2029 if (need_fork_exec_workarounds)
2030 syscall_fixup_for_fork_exec(tcp);
2032 if (!(tcp->qual_flg & QUAL_TRACE)
2033 || (tracing_paths && !pathtrace_match(tcp))
2035 tcp->flags |= TCB_INSYSCALL | TCB_FILTERED;
2039 tcp->flags &= ~TCB_FILTERED;
2041 if (cflag == CFLAG_ONLY_STATS || hide_log_until_execve) {
2046 #ifdef USE_LIBUNWIND
2047 if (stack_trace_enabled) {
2048 if (tcp->s_ent->sys_flags & STACKTRACE_CAPTURE_ON_ENTER)
2049 unwind_capture_stacktrace(tcp);
2054 if (tcp->qual_flg & UNDEFINED_SCNO)
2055 tprintf("%s(", undefined_scno_name(tcp));
2057 tprintf("%s(", tcp->s_ent->sys_name);
2058 if ((tcp->qual_flg & QUAL_RAW) && tcp->s_ent->sys_func != sys_exit)
2059 res = printargs(tcp);
2061 res = tcp->s_ent->sys_func(tcp);
2065 tcp->flags |= TCB_INSYSCALL;
2066 /* Measure the entrance time as late as possible to avoid errors. */
2068 gettimeofday(&tcp->etime, NULL);
2073 * 1: ok, continue in trace_syscall_exiting().
2074 * -1: error, trace_syscall_exiting() should print error indicator
2075 * ("????" etc) and bail out.
2078 get_syscall_result(struct tcb *tcp)
2080 #if defined(S390) || defined(S390X)
2081 if (upeek(tcp->pid, PT_GPR2, &s390_gpr2) < 0)
2083 #elif defined(POWERPC)
2084 /* already done by get_regs */
2085 #elif defined(AVR32)
2086 /* already done by get_regs */
2088 if (upeek(tcp->pid, PT_R0, &bfin_r0) < 0)
2091 /* already done by get_regs */
2092 #elif defined(X86_64) || defined(X32)
2093 /* already done by get_regs */
2095 # define IA64_PSR_IS ((long)1 << 34)
2097 if (upeek(tcp->pid, PT_CR_IPSR, &psr) >= 0)
2098 ia64_ia32mode = ((psr & IA64_PSR_IS) != 0);
2099 if (upeek(tcp->pid, PT_R8, &ia64_r8) < 0)
2101 if (upeek(tcp->pid, PT_R10, &ia64_r10) < 0)
2104 /* already done by get_regs */
2105 #elif defined(AARCH64)
2106 /* register reading already done by get_regs */
2108 /* Used to do this, but we did it on syscall entry already: */
2109 /* We are in 64-bit mode (personality 1) if register struct is aarch64_regs,
2110 * else it's personality 0.
2112 /*update_personality(tcp, aarch64_io.iov_len == sizeof(aarch64_regs));*/
2114 if (upeek(tcp->pid, 4*PT_D0, &m68k_d0) < 0)
2116 #elif defined(LINUX_MIPSN32)
2117 unsigned long long regs[38];
2119 if (ptrace(PTRACE_GETREGS, tcp->pid, NULL, (long) ®s) < 0)
2121 mips_a3 = regs[REG_A3];
2122 mips_r2 = regs[REG_V0];
2124 if (upeek(tcp->pid, REG_A3, &mips_a3) < 0)
2126 if (upeek(tcp->pid, REG_V0, &mips_r2) < 0)
2128 #elif defined(ALPHA)
2129 if (upeek(tcp->pid, REG_A3, &alpha_a3) < 0)
2131 if (upeek(tcp->pid, REG_R0, &alpha_r0) < 0)
2133 #elif defined(SPARC) || defined(SPARC64)
2134 /* already done by get_regs */
2136 if (upeek(tcp->pid, PT_GR28, &hppa_r28) < 0)
2139 /* new syscall ABI returns result in R0 */
2140 if (upeek(tcp->pid, 4*REG_REG0, (long *)&sh_r0) < 0)
2143 /* ABI defines result returned in r9 */
2144 if (upeek(tcp->pid, REG_GENERAL(9), (long *)&sh64_r9) < 0)
2146 #elif defined(CRISV10) || defined(CRISV32)
2147 if (upeek(tcp->pid, 4*PT_R10, &cris_r10) < 0)
2150 /* already done by get_regs */
2151 #elif defined(MICROBLAZE)
2152 if (upeek(tcp->pid, 3 * 4, µblaze_r3) < 0)
2155 /* already done by get_regs */
2156 #elif defined(METAG)
2157 /* already done by get_regs */
2158 #elif defined(XTENSA)
2159 if (upeek(tcp->pid, REG_A_BASE + 2, &xtensa_a2) < 0)
2162 /* already done by get_regs */
2167 /* Called at each syscall exit */
2169 syscall_fixup_on_sysexit(struct tcb *tcp)
2171 #if defined(S390) || defined(S390X)
2172 if ((tcp->flags & TCB_WAITEXECVE)
2173 && (s390_gpr2 == -ENOSYS || s390_gpr2 == tcp->scno)) {
2175 * Return from execve.
2176 * Fake a return value of zero. We leave the TCB_WAITEXECVE
2177 * flag set for the post-execve SIGTRAP to see and reset.
2185 * Check the syscall return value register value for whether it is
2186 * a negated errno code indicating an error, or a success return value.
2189 is_negated_errno(unsigned long int val)
2191 unsigned long int max = -(long int) nerrnos;
2192 #if SUPPORTED_PERSONALITIES > 1 && SIZEOF_LONG > 4
2193 if (current_wordsize < sizeof(val)) {
2194 val = (unsigned int) val;
2195 max = (unsigned int) max;
2203 is_negated_errno_x32(unsigned long long val)
2205 unsigned long long max = -(long long) nerrnos;
2207 * current_wordsize is 4 even in personality 0 (native X32)
2208 * but truncation _must not_ be done in it.
2209 * can't check current_wordsize here!
2211 if (current_personality != 0) {
2212 val = (uint32_t) val;
2213 max = (uint32_t) max;
2220 * 1: ok, continue in trace_syscall_exiting().
2221 * -1: error, trace_syscall_exiting() should print error indicator
2222 * ("????" etc) and bail out.
2225 get_error(struct tcb *tcp)
2228 int check_errno = 1;
2229 if (tcp->s_ent->sys_flags & SYSCALL_NEVER_FAILS) {
2232 #if defined(S390) || defined(S390X)
2233 if (check_errno && is_negated_errno(s390_gpr2)) {
2235 u_error = -s390_gpr2;
2238 tcp->u_rval = s390_gpr2;
2241 if (check_errno && is_negated_errno(i386_regs.eax)) {
2243 u_error = -i386_regs.eax;
2246 tcp->u_rval = i386_regs.eax;
2248 #elif defined(X86_64)
2250 if (x86_io.iov_len == sizeof(i386_regs)) {
2251 /* Sign extend from 32 bits */
2252 rax = (int32_t)i386_regs.eax;
2254 rax = x86_64_regs.rax;
2256 if (check_errno && is_negated_errno(rax)) {
2264 /* In X32, return value is 64-bit (llseek uses one).
2265 * Using merely "long rax" would not work.
2268 if (x86_io.iov_len == sizeof(i386_regs)) {
2269 /* Sign extend from 32 bits */
2270 rax = (int32_t)i386_regs.eax;
2272 rax = x86_64_regs.rax;
2274 /* Careful: is_negated_errno() works only on longs */
2275 if (check_errno && is_negated_errno_x32(rax)) {
2280 tcp->u_rval = rax; /* truncating */
2284 if (ia64_ia32mode) {
2288 if (check_errno && is_negated_errno(err)) {
2296 if (check_errno && ia64_r10) {
2300 tcp->u_rval = ia64_r8;
2304 if (check_errno && mips_a3) {
2308 tcp->u_rval = mips_r2;
2309 # if defined(LINUX_MIPSN32)
2310 tcp->u_lrval = mips_r2;
2313 #elif defined(POWERPC)
2314 if (check_errno && (ppc_regs.ccr & 0x10000000)) {
2316 u_error = ppc_regs.gpr[3];
2319 tcp->u_rval = ppc_regs.gpr[3];
2322 if (check_errno && is_negated_errno(m68k_d0)) {
2327 tcp->u_rval = m68k_d0;
2329 #elif defined(ARM) || defined(AARCH64)
2330 # if defined(AARCH64)
2331 if (tcp->currpers == 1) {
2332 if (check_errno && is_negated_errno(aarch64_regs.regs[0])) {
2334 u_error = -aarch64_regs.regs[0];
2337 tcp->u_rval = aarch64_regs.regs[0];
2343 if (check_errno && is_negated_errno(arm_regs.ARM_r0)) {
2345 u_error = -arm_regs.ARM_r0;
2348 tcp->u_rval = arm_regs.ARM_r0;
2351 #elif defined(AVR32)
2352 if (check_errno && avr32_regs.r12 && (unsigned) -avr32_regs.r12 < nerrnos) {
2354 u_error = -avr32_regs.r12;
2357 tcp->u_rval = avr32_regs.r12;
2360 if (check_errno && is_negated_errno(bfin_r0)) {
2364 tcp->u_rval = bfin_r0;
2366 #elif defined(ALPHA)
2367 if (check_errno && alpha_a3) {
2372 tcp->u_rval = alpha_r0;
2374 #elif defined(SPARC)
2375 if (check_errno && sparc_regs.psr & PSR_C) {
2377 u_error = sparc_regs.u_regs[U_REG_O0];
2380 tcp->u_rval = sparc_regs.u_regs[U_REG_O0];
2382 #elif defined(SPARC64)
2383 if (check_errno && sparc_regs.tstate & 0x1100000000UL) {
2385 u_error = sparc_regs.u_regs[U_REG_O0];
2388 tcp->u_rval = sparc_regs.u_regs[U_REG_O0];
2391 if (check_errno && is_negated_errno(hppa_r28)) {
2393 u_error = -hppa_r28;
2396 tcp->u_rval = hppa_r28;
2399 if (check_errno && is_negated_errno(sh_r0)) {
2404 tcp->u_rval = sh_r0;
2407 if (check_errno && is_negated_errno(sh64_r9)) {
2412 tcp->u_rval = sh64_r9;
2414 #elif defined(METAG)
2415 /* result pointer in D0Re0 (D0.0) */
2416 if (check_errno && is_negated_errno(metag_regs.dx[0][0])) {
2418 u_error = -metag_regs.dx[0][0];
2421 tcp->u_rval = metag_regs.dx[0][0];
2423 #elif defined(CRISV10) || defined(CRISV32)
2424 if (check_errno && cris_r10 && (unsigned) -cris_r10 < nerrnos) {
2426 u_error = -cris_r10;
2429 tcp->u_rval = cris_r10;
2433 * The standard tile calling convention returns the value (or negative
2434 * errno) in r0, and zero (or positive errno) in r1.
2435 * Until at least kernel 3.8, however, the r1 value is not reflected
2436 * in ptregs at this point, so we use r0 here.
2438 if (check_errno && is_negated_errno(tile_regs.regs[0])) {
2440 u_error = -tile_regs.regs[0];
2442 tcp->u_rval = tile_regs.regs[0];
2444 #elif defined(MICROBLAZE)
2445 if (check_errno && is_negated_errno(microblaze_r3)) {
2447 u_error = -microblaze_r3;
2450 tcp->u_rval = microblaze_r3;
2453 if (check_errno && is_negated_errno(or1k_regs.gpr[11])) {
2455 u_error = -or1k_regs.gpr[11];
2458 tcp->u_rval = or1k_regs.gpr[11];
2460 #elif defined(XTENSA)
2461 if (check_errno && is_negated_errno(xtensa_a2)) {
2463 u_error = -xtensa_a2;
2466 tcp->u_rval = xtensa_a2;
2469 if (check_errno && is_negated_errno(arc_regs.scratch.r0)) {
2471 u_error = -arc_regs.scratch.r0;
2474 tcp->u_rval = arc_regs.scratch.r0;
2477 tcp->u_error = u_error;
2481 dumpio(struct tcb *tcp)
2487 if ((unsigned long) tcp->u_arg[0] >= num_quals)
2489 func = tcp->s_ent->sys_func;
2490 if (func == printargs)
2492 if (qual_flags[tcp->u_arg[0]] & QUAL_READ) {
2493 if (func == sys_read ||
2494 func == sys_pread ||
2496 func == sys_recvfrom)
2497 dumpstr(tcp, tcp->u_arg[1], tcp->u_rval);
2498 else if (func == sys_readv)
2499 dumpiov(tcp, tcp->u_arg[2], tcp->u_arg[1]);
2501 else if (func == sys_recvmsg)
2502 dumpiov_in_msghdr(tcp, tcp->u_arg[1]);
2503 else if (func == sys_recvmmsg)
2504 dumpiov_in_mmsghdr(tcp, tcp->u_arg[1]);
2508 if (qual_flags[tcp->u_arg[0]] & QUAL_WRITE) {
2509 if (func == sys_write ||
2510 func == sys_pwrite ||
2513 dumpstr(tcp, tcp->u_arg[1], tcp->u_arg[2]);
2514 else if (func == sys_writev)
2515 dumpiov(tcp, tcp->u_arg[2], tcp->u_arg[1]);
2517 else if (func == sys_sendmsg)
2518 dumpiov_in_msghdr(tcp, tcp->u_arg[1]);
2519 else if (func == sys_sendmmsg)
2520 dumpiov_in_mmsghdr(tcp, tcp->u_arg[1]);
2527 trace_syscall_exiting(struct tcb *tcp)
2534 /* Measure the exit time as early as possible to avoid errors. */
2536 gettimeofday(&tv, NULL);
2538 #ifdef USE_LIBUNWIND
2539 if (stack_trace_enabled) {
2540 if (tcp->s_ent->sys_flags & STACKTRACE_INVALIDATE_CACHE)
2541 unwind_cache_invalidate(tcp);
2545 #if SUPPORTED_PERSONALITIES > 1
2546 update_personality(tcp, tcp->currpers);
2548 res = (get_regs_error ? -1 : get_syscall_result(tcp));
2550 syscall_fixup_on_sysexit(tcp); /* never fails */
2551 get_error(tcp); /* never fails */
2552 if (need_fork_exec_workarounds)
2553 syscall_fixup_for_fork_exec(tcp);
2554 if (filtered(tcp) || hide_log_until_execve)
2559 count_syscall(tcp, &tv);
2560 if (cflag == CFLAG_ONLY_STATS) {
2565 /* If not in -ff mode, and printing_tcp != tcp,
2566 * then the log currently does not end with output
2567 * of _our syscall entry_, but with something else.
2568 * We need to say which syscall's return is this.
2570 * Forced reprinting via TCB_REPRINT is used only by
2571 * "strace -ff -oLOG test/threaded_execve" corner case.
2572 * It's the only case when -ff mode needs reprinting.
2574 if ((followfork < 2 && printing_tcp != tcp) || (tcp->flags & TCB_REPRINT)) {
2575 tcp->flags &= ~TCB_REPRINT;
2577 if (tcp->qual_flg & UNDEFINED_SCNO)
2578 tprintf("<... %s resumed> ", undefined_scno_name(tcp));
2580 tprintf("<... %s resumed> ", tcp->s_ent->sys_name);
2585 /* There was error in one of prior ptrace ops */
2588 tprints("= ? <unavailable>\n");
2590 tcp->flags &= ~TCB_INSYSCALL;
2595 if (tcp->qual_flg & QUAL_RAW) {
2596 /* sys_res = printargs(tcp); - but it's nop on sysexit */
2598 /* FIXME: not_failing_only (IOW, option -z) is broken:
2599 * failure of syscall is known only after syscall return.
2600 * Thus we end up with something like this on, say, ENOENT:
2601 * open("doesnt_exist", O_RDONLY <unfinished ...>
2602 * {next syscall decode}
2603 * whereas the intended result is that open(...) line
2604 * is not shown at all.
2606 if (not_failing_only && tcp->u_error)
2607 goto ret; /* ignore failed syscalls */
2608 sys_res = tcp->s_ent->sys_func(tcp);
2613 u_error = tcp->u_error;
2614 if (tcp->qual_flg & QUAL_RAW) {
2616 tprintf("= -1 (errno %ld)", u_error);
2618 tprintf("= %#lx", tcp->u_rval);
2620 else if (!(sys_res & RVAL_NONE) && u_error) {
2622 /* Blocked signals do not interrupt any syscalls.
2623 * In this case syscalls don't return ERESTARTfoo codes.
2625 * Deadly signals set to SIG_DFL interrupt syscalls
2626 * and kill the process regardless of which of the codes below
2627 * is returned by the interrupted syscall.
2628 * In some cases, kernel forces a kernel-generated deadly
2629 * signal to be unblocked and set to SIG_DFL (and thus cause
2630 * death) if it is blocked or SIG_IGNed: for example, SIGSEGV
2631 * or SIGILL. (The alternative is to leave process spinning
2632 * forever on the faulty instruction - not useful).
2634 * SIG_IGNed signals and non-deadly signals set to SIG_DFL
2635 * (for example, SIGCHLD, SIGWINCH) interrupt syscalls,
2636 * but kernel will always restart them.
2639 /* Most common type of signal-interrupted syscall exit code.
2640 * The system call will be restarted with the same arguments
2641 * if SA_RESTART is set; otherwise, it will fail with EINTR.
2643 tprints("= ? ERESTARTSYS (To be restarted if SA_RESTART is set)");
2645 case ERESTARTNOINTR:
2646 /* Rare. For example, fork() returns this if interrupted.
2647 * SA_RESTART is ignored (assumed set): the restart is unconditional.
2649 tprints("= ? ERESTARTNOINTR (To be restarted)");
2651 case ERESTARTNOHAND:
2652 /* pause(), rt_sigsuspend() etc use this code.
2653 * SA_RESTART is ignored (assumed not set):
2654 * syscall won't restart (will return EINTR instead)
2655 * even after signal with SA_RESTART set. However,
2656 * after SIG_IGN or SIG_DFL signal it will restart
2657 * (thus the name "restart only if has no handler").
2659 tprints("= ? ERESTARTNOHAND (To be restarted if no handler)");
2661 case ERESTART_RESTARTBLOCK:
2662 /* Syscalls like nanosleep(), poll() which can't be
2663 * restarted with their original arguments use this
2664 * code. Kernel will execute restart_syscall() instead,
2665 * which changes arguments before restarting syscall.
2666 * SA_RESTART is ignored (assumed not set) similarly
2667 * to ERESTARTNOHAND. (Kernel can't honor SA_RESTART
2668 * since restart data is saved in "restart block"
2669 * in task struct, and if signal handler uses a syscall
2670 * which in turn saves another such restart block,
2671 * old data is lost and restart becomes impossible)
2673 tprints("= ? ERESTART_RESTARTBLOCK (Interrupted by signal)");
2677 tprintf("= -1 E??? (errno %ld)", u_error);
2678 else if ((unsigned long) u_error < nerrnos)
2679 tprintf("= -1 %s (%s)", errnoent[u_error],
2682 tprintf("= -1 ERRNO_%ld (%s)", u_error,
2686 if ((sys_res & RVAL_STR) && tcp->auxstr)
2687 tprintf(" (%s)", tcp->auxstr);
2690 if (sys_res & RVAL_NONE)
2693 switch (sys_res & RVAL_MASK) {
2695 tprintf("= %#lx", tcp->u_rval);
2698 tprintf("= %#lo", tcp->u_rval);
2701 tprintf("= %lu", tcp->u_rval);
2704 tprintf("= %ld", tcp->u_rval);
2709 printfd(tcp, tcp->u_rval);
2712 tprintf("= %ld", tcp->u_rval);
2714 #if defined(LINUX_MIPSN32) || defined(X32)
2717 tprintf("= %#llx", tcp->u_lrval);
2720 tprintf("= %#llo", tcp->u_lrval);
2723 case RVAL_LUDECIMAL:
2724 tprintf("= %llu", tcp->u_lrval);
2728 tprintf("= %lld", tcp->u_lrval);
2734 "invalid rval format\n");
2738 if ((sys_res & RVAL_STR) && tcp->auxstr)
2739 tprintf(" (%s)", tcp->auxstr);
2742 tv_sub(&tv, &tv, &tcp->etime);
2743 tprintf(" <%ld.%06ld>",
2744 (long) tv.tv_sec, (long) tv.tv_usec);
2750 #ifdef USE_LIBUNWIND
2751 if (stack_trace_enabled)
2752 unwind_print_stacktrace(tcp);
2756 tcp->flags &= ~TCB_INSYSCALL;
2761 trace_syscall(struct tcb *tcp)
2763 return exiting(tcp) ?
2764 trace_syscall_exiting(tcp) : trace_syscall_entering(tcp);