2 * Copyright (c) 1991, 1992 Paul Kranenburg <pk@cs.few.eur.nl>
3 * Copyright (c) 1993 Branko Lankester <branko@hacktic.nl>
4 * Copyright (c) 1993, 1994, 1995, 1996 Rick Sladkey <jrs@world.std.com>
5 * Copyright (c) 1996-1999 Wichert Akkerman <wichert@cistron.nl>
6 * Copyright (c) 1999 IBM Deutschland Entwicklung GmbH, IBM Corporation
7 * Linux for s390 port by D.J. Barrow
8 * <barrow_dj@mail.yahoo.com,djbarrow@de.ibm.com>
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. The name of the author may not be used to endorse or promote products
20 * derived from this software without specific prior written permission.
22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
35 #include "native_defs.h"
36 #include <sys/param.h>
39 /* for struct iovec */
46 # undef PTRACE_GETREGS
47 # define PTRACE_GETREGS PTRACE_GETREGS64
48 # undef PTRACE_SETREGS
49 # define PTRACE_SETREGS PTRACE_SETREGS64
53 # include <asm/psrcompat.h>
63 # define NT_PRSTATUS 1
67 # warning: NSIG is not defined, using 32
73 /* Define these shorthand notations to simplify the syscallent files. */
77 #define TN TRACE_NETWORK
78 #define TP TRACE_PROCESS
79 #define TS TRACE_SIGNAL
80 #define TM TRACE_MEMORY
81 #define NF SYSCALL_NEVER_FAILS
83 #define SI STACKTRACE_INVALIDATE_CACHE
84 #define SE STACKTRACE_CAPTURE_ON_ENTER
86 #define SEN(syscall_name) SEN_ ## syscall_name, SYS_FUNC_NAME(sys_ ## syscall_name)
88 const struct_sysent sysent0[] = {
89 #include "syscallent.h"
92 #if SUPPORTED_PERSONALITIES > 1
93 # include PERSONALITY1_INCLUDE_FUNCS
94 static const struct_sysent sysent1[] = {
95 # include "syscallent1.h"
99 #if SUPPORTED_PERSONALITIES > 2
100 # include PERSONALITY2_INCLUDE_FUNCS
101 static const struct_sysent sysent2[] = {
102 # include "syscallent2.h"
106 /* Now undef them since short defines cause wicked namespace pollution. */
121 * `ioctlent[012].h' files are automatically generated by the auxiliary
122 * program `ioctlsort', such that the list is sorted by the `code' field.
123 * This has the side-effect of resolving the _IO.. macros into
124 * plain integers, eliminating the need to include here everything
128 const char *const errnoent0[] = {
129 #include "errnoent.h"
131 const char *const signalent0[] = {
132 #include "signalent.h"
134 const struct_ioctlent ioctlent0[] = {
135 #include "ioctlent0.h"
138 #if SUPPORTED_PERSONALITIES > 1
139 static const char *const errnoent1[] = {
140 # include "errnoent1.h"
142 static const char *const signalent1[] = {
143 # include "signalent1.h"
145 static const struct_ioctlent ioctlent1[] = {
146 # include "ioctlent1.h"
148 # include PERSONALITY0_INCLUDE_PRINTERS_DECLS
149 static const struct_printers printers0 = {
150 # include PERSONALITY0_INCLUDE_PRINTERS_DEFS
152 # include PERSONALITY1_INCLUDE_PRINTERS_DECLS
153 static const struct_printers printers1 = {
154 # include PERSONALITY1_INCLUDE_PRINTERS_DEFS
158 #if SUPPORTED_PERSONALITIES > 2
159 static const char *const errnoent2[] = {
160 # include "errnoent2.h"
162 static const char *const signalent2[] = {
163 # include "signalent2.h"
165 static const struct_ioctlent ioctlent2[] = {
166 # include "ioctlent2.h"
168 # include PERSONALITY2_INCLUDE_PRINTERS_DECLS
169 static const struct_printers printers2 = {
170 # include PERSONALITY2_INCLUDE_PRINTERS_DEFS
175 nsyscalls0 = ARRAY_SIZE(sysent0)
176 #if SUPPORTED_PERSONALITIES > 1
177 , nsyscalls1 = ARRAY_SIZE(sysent1)
178 # if SUPPORTED_PERSONALITIES > 2
179 , nsyscalls2 = ARRAY_SIZE(sysent2)
185 nerrnos0 = ARRAY_SIZE(errnoent0)
186 #if SUPPORTED_PERSONALITIES > 1
187 , nerrnos1 = ARRAY_SIZE(errnoent1)
188 # if SUPPORTED_PERSONALITIES > 2
189 , nerrnos2 = ARRAY_SIZE(errnoent2)
195 nsignals0 = ARRAY_SIZE(signalent0)
196 #if SUPPORTED_PERSONALITIES > 1
197 , nsignals1 = ARRAY_SIZE(signalent1)
198 # if SUPPORTED_PERSONALITIES > 2
199 , nsignals2 = ARRAY_SIZE(signalent2)
205 nioctlents0 = ARRAY_SIZE(ioctlent0)
206 #if SUPPORTED_PERSONALITIES > 1
207 , nioctlents1 = ARRAY_SIZE(ioctlent1)
208 # if SUPPORTED_PERSONALITIES > 2
209 , nioctlents2 = ARRAY_SIZE(ioctlent2)
214 #if SUPPORTED_PERSONALITIES > 1
215 const struct_sysent *sysent = sysent0;
216 const char *const *errnoent = errnoent0;
217 const char *const *signalent = signalent0;
218 const struct_ioctlent *ioctlent = ioctlent0;
219 const struct_printers *printers = &printers0;
222 unsigned nsyscalls = nsyscalls0;
223 unsigned nerrnos = nerrnos0;
224 unsigned nsignals = nsignals0;
225 unsigned nioctlents = nioctlents0;
228 qualbits_t *qual_vec[SUPPORTED_PERSONALITIES];
230 static const unsigned nsyscall_vec[SUPPORTED_PERSONALITIES] = {
232 #if SUPPORTED_PERSONALITIES > 1
235 #if SUPPORTED_PERSONALITIES > 2
239 static const struct_sysent *const sysent_vec[SUPPORTED_PERSONALITIES] = {
241 #if SUPPORTED_PERSONALITIES > 1
244 #if SUPPORTED_PERSONALITIES > 2
250 MAX_NSYSCALLS1 = (nsyscalls0
251 #if SUPPORTED_PERSONALITIES > 1
252 > nsyscalls1 ? nsyscalls0 : nsyscalls1
255 MAX_NSYSCALLS2 = (MAX_NSYSCALLS1
256 #if SUPPORTED_PERSONALITIES > 2
257 > nsyscalls2 ? MAX_NSYSCALLS1 : nsyscalls2
260 MAX_NSYSCALLS = MAX_NSYSCALLS2,
261 /* We are ready for arches with up to 255 signals,
262 * even though the largest known signo is on MIPS and it is 128.
263 * The number of existing syscalls on all arches is
264 * larger that 255 anyway, so it is just a pedantic matter.
266 MIN_QUALS = MAX_NSYSCALLS > 255 ? MAX_NSYSCALLS : 255
269 #if SUPPORTED_PERSONALITIES > 1
270 unsigned current_personality;
272 # ifndef current_wordsize
273 unsigned current_wordsize;
274 static const int personality_wordsize[SUPPORTED_PERSONALITIES] = {
275 PERSONALITY0_WORDSIZE,
276 PERSONALITY1_WORDSIZE,
277 # if SUPPORTED_PERSONALITIES > 2
278 PERSONALITY2_WORDSIZE,
284 set_personality(int personality)
286 nsyscalls = nsyscall_vec[personality];
287 sysent = sysent_vec[personality];
289 switch (personality) {
291 errnoent = errnoent0;
293 ioctlent = ioctlent0;
294 nioctlents = nioctlents0;
295 signalent = signalent0;
296 nsignals = nsignals0;
297 printers = &printers0;
301 errnoent = errnoent1;
303 ioctlent = ioctlent1;
304 nioctlents = nioctlents1;
305 signalent = signalent1;
306 nsignals = nsignals1;
307 printers = &printers1;
310 # if SUPPORTED_PERSONALITIES > 2
312 errnoent = errnoent2;
314 ioctlent = ioctlent2;
315 nioctlents = nioctlents2;
316 signalent = signalent2;
317 nsignals = nsignals2;
318 printers = &printers2;
323 current_personality = personality;
324 # ifndef current_wordsize
325 current_wordsize = personality_wordsize[personality];
330 update_personality(struct tcb *tcp, unsigned int personality)
332 if (personality == current_personality)
334 set_personality(personality);
336 if (personality == tcp->currpers)
338 tcp->currpers = personality;
340 # undef PERSONALITY_NAMES
341 # if defined POWERPC64
342 # define PERSONALITY_NAMES {"64 bit", "32 bit"}
343 # elif defined X86_64
344 # define PERSONALITY_NAMES {"64 bit", "32 bit", "x32"}
346 # define PERSONALITY_NAMES {"x32", "32 bit"}
347 # elif defined AARCH64
348 # define PERSONALITY_NAMES {"64 bit", "32 bit"}
350 # define PERSONALITY_NAMES {"64-bit", "32-bit"}
352 # ifdef PERSONALITY_NAMES
354 static const char *const names[] = PERSONALITY_NAMES;
355 error_msg("[ Process PID=%d runs in %s mode. ]",
356 tcp->pid, names[personality]);
362 static int qual_desc(const char *, unsigned int, int);
363 static int qual_signal(const char *, unsigned int, int);
364 static int qual_syscall(const char *, unsigned int, int);
366 static const struct qual_options {
367 unsigned int bitflag;
368 const char *option_name;
369 int (*qualify)(const char *, unsigned int, int);
370 const char *argument_name;
372 { QUAL_TRACE, "trace", qual_syscall, "system call" },
373 { QUAL_TRACE, "t", qual_syscall, "system call" },
374 { QUAL_ABBREV, "abbrev", qual_syscall, "system call" },
375 { QUAL_ABBREV, "a", qual_syscall, "system call" },
376 { QUAL_VERBOSE, "verbose", qual_syscall, "system call" },
377 { QUAL_VERBOSE, "v", qual_syscall, "system call" },
378 { QUAL_RAW, "raw", qual_syscall, "system call" },
379 { QUAL_RAW, "x", qual_syscall, "system call" },
380 { QUAL_SIGNAL, "signal", qual_signal, "signal" },
381 { QUAL_SIGNAL, "signals", qual_signal, "signal" },
382 { QUAL_SIGNAL, "s", qual_signal, "signal" },
383 { QUAL_READ, "read", qual_desc, "descriptor" },
384 { QUAL_READ, "reads", qual_desc, "descriptor" },
385 { QUAL_READ, "r", qual_desc, "descriptor" },
386 { QUAL_WRITE, "write", qual_desc, "descriptor" },
387 { QUAL_WRITE, "writes", qual_desc, "descriptor" },
388 { QUAL_WRITE, "w", qual_desc, "descriptor" },
389 { 0, NULL, NULL, NULL },
393 reallocate_vec(void **vec, unsigned int old_nmemb,
394 size_t size, unsigned int new_nmemb)
398 for (p = 0; p < SUPPORTED_PERSONALITIES; ++p) {
399 vec[p] = xreallocarray(vec[p], new_nmemb, size);
400 memset(vec[p] + size * old_nmemb, 0,
401 (new_nmemb - old_nmemb) * size);
406 reallocate_qual(const unsigned int n)
408 reallocate_vec((void **) qual_vec, num_quals, sizeof(qualbits_t), n);
413 qualify_one(const unsigned int n, unsigned int bitflag, const int not, const int pers)
418 reallocate_qual(n + 1);
420 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
421 if (pers == p || pers < 0) {
423 qual_vec[p][n] &= ~bitflag;
425 qual_vec[p][n] |= bitflag;
431 qualify_scno(const char *const s, const unsigned int bitflag,
436 if (*s < '0' || *s > '9' || (i = string_to_uint(s)) >= MAX_NSYSCALLS)
439 qualify_one(i, bitflag, not, -1);
444 lookup_class(const char *s)
446 if (strcmp(s, "file") == 0)
448 if (strcmp(s, "ipc") == 0)
450 if (strcmp(s, "network") == 0)
451 return TRACE_NETWORK;
452 if (strcmp(s, "process") == 0)
453 return TRACE_PROCESS;
454 if (strcmp(s, "signal") == 0)
456 if (strcmp(s, "desc") == 0)
458 if (strcmp(s, "memory") == 0)
464 qualify_syscall_class(const char *const s, const unsigned int bitflag,
468 const int n = lookup_class(s);
473 for (p = 0; p < SUPPORTED_PERSONALITIES; ++p) {
476 for (i = 0; i < nsyscall_vec[p]; ++i) {
477 if (sysent_vec[p][i].sys_name
478 && (sysent_vec[p][i].sys_flags & n) == n) {
479 qualify_one(i, bitflag, not, p);
488 qualify_syscall_name(const char *const s, const unsigned int bitflag,
494 for (p = 0; p < SUPPORTED_PERSONALITIES; ++p) {
497 for (i = 0; i < nsyscall_vec[p]; ++i) {
498 if (sysent_vec[p][i].sys_name
499 && strcmp(s, sysent_vec[p][i].sys_name) == 0) {
500 qualify_one(i, bitflag, not, p);
510 qual_syscall(const char *s, const unsigned int bitflag, const int not)
512 if (qualify_scno(s, bitflag, not)
513 || qualify_syscall_class(s, bitflag, not)
514 || qualify_syscall_name(s, bitflag, not)) {
522 qual_signal(const char *s, const unsigned int bitflag, const int not)
526 if (*s >= '0' && *s <= '9') {
527 int signo = string_to_uint(s);
528 if (signo < 0 || signo > 255)
530 qualify_one(signo, bitflag, not, -1);
533 if (strncasecmp(s, "SIG", 3) == 0)
535 for (i = 0; i <= NSIG; i++) {
536 if (strcasecmp(s, signame(i) + 3) == 0) {
537 qualify_one(i, bitflag, not, -1);
545 qual_desc(const char *s, const unsigned int bitflag, const int not)
547 if (*s >= '0' && *s <= '9') {
548 int desc = string_to_uint(s);
549 if (desc < 0 || desc > 0x7fff) /* paranoia */
551 qualify_one(desc, bitflag, not, -1);
558 qualify(const char *s)
560 const struct qual_options *opt;
567 reallocate_qual(MIN_QUALS);
569 opt = &qual_options[0];
570 for (i = 0; (p = qual_options[i].option_name); i++) {
571 unsigned int len = strlen(p);
572 if (strncmp(s, p, len) == 0 && s[len] == '=') {
573 opt = &qual_options[i];
583 if (strcmp(s, "none") == 0) {
587 if (strcmp(s, "all") == 0) {
588 for (i = 0; i < num_quals; i++) {
589 qualify_one(i, opt->bitflag, not, -1);
593 for (i = 0; i < num_quals; i++) {
594 qualify_one(i, opt->bitflag, !not, -1);
597 for (p = strtok(copy, ","); p; p = strtok(NULL, ",")) {
598 if (opt->qualify(p, opt->bitflag, not)) {
599 error_msg_and_die("invalid %s '%s'",
600 opt->argument_name, p);
607 #ifdef SYS_socket_subcall
609 decode_socket_subcall(struct tcb *tcp)
611 const int call = tcp->u_arg[0];
613 if (call < 1 || call >= SYS_socket_nsubcalls)
616 const unsigned long scno = SYS_socket_subcall + call;
617 const unsigned int nargs = sysent[scno].nargs;
620 if (umoven(tcp, tcp->u_arg[1], nargs * current_wordsize, buf) < 0)
624 tcp->qual_flg = qual_flags[scno];
625 tcp->s_ent = &sysent[scno];
628 for (i = 0; i < nargs; ++i)
629 tcp->u_arg[i] = (sizeof(uint32_t) == current_wordsize)
630 ? ((uint32_t *) (void *) buf)[i] : buf[i];
634 #ifdef SYS_ipc_subcall
636 decode_ipc_subcall(struct tcb *tcp)
638 unsigned int call = tcp->u_arg[0];
639 const unsigned int version = call >> 16;
642 # if defined S390 || defined S390X
646 if (current_wordsize == 8)
649 set_tcb_priv_ulong(tcp, version);
655 case 1: case 2: case 3: case 4:
656 case 11: case 12: case 13: case 14:
657 case 21: case 22: case 23: case 24:
663 tcp->scno = SYS_ipc_subcall + call;
664 tcp->qual_flg = qual_flags[tcp->scno];
665 tcp->s_ent = &sysent[tcp->scno];
667 const unsigned int n = tcp->s_ent->nargs;
669 for (i = 0; i < n; i++)
670 tcp->u_arg[i] = tcp->u_arg[i + 1];
676 decode_mips_subcall(struct tcb *tcp)
678 if (!SCNO_IS_VALID(tcp->u_arg[0]))
680 tcp->scno = tcp->u_arg[0];
681 tcp->qual_flg = qual_flags[tcp->scno];
682 tcp->s_ent = &sysent[tcp->scno];
683 memmove(&tcp->u_arg[0], &tcp->u_arg[1],
684 sizeof(tcp->u_arg) - sizeof(tcp->u_arg[0]));
686 * Fetching the last arg of 7-arg syscalls (fadvise64_64
687 * and sync_file_range) requires additional code,
688 * see linux/mips/get_syscall_args.c
690 if (tcp->s_ent->nargs == MAX_ARGS) {
692 mips_REG_SP + MAX_ARGS * sizeof(tcp->u_arg[0]),
693 sizeof(tcp->u_arg[0]),
694 &tcp->u_arg[MAX_ARGS - 1]) < 0)
695 tcp->u_arg[MAX_ARGS - 1] = 0;
698 #endif /* LINUX_MIPSO32 */
701 dumpio(struct tcb *tcp)
707 if ((unsigned long) tcp->u_arg[0] >= num_quals)
709 sen = tcp->s_ent->sen;
710 if (SEN_printargs == sen)
712 if (qual_flags[tcp->u_arg[0]] & QUAL_READ) {
718 case SEN_mq_timedreceive:
719 dumpstr(tcp, tcp->u_arg[1], tcp->u_rval);
724 dumpiov_upto(tcp, tcp->u_arg[2], tcp->u_arg[1],
728 dumpiov_in_msghdr(tcp, tcp->u_arg[1], tcp->u_rval);
731 dumpiov_in_mmsghdr(tcp, tcp->u_arg[1]);
735 if (qual_flags[tcp->u_arg[0]] & QUAL_WRITE) {
741 case SEN_mq_timedsend:
742 dumpstr(tcp, tcp->u_arg[1], tcp->u_arg[2]);
748 dumpiov(tcp, tcp->u_arg[2], tcp->u_arg[1]);
751 dumpiov_in_msghdr(tcp, tcp->u_arg[1],
752 (unsigned long) -1L);
755 dumpiov_in_mmsghdr(tcp, tcp->u_arg[1]);
762 * Shuffle syscall numbers so that we don't have huge gaps in syscall table.
763 * The shuffling should be an involution: shuffle_scno(shuffle_scno(n)) == n.
765 #if defined(ARM) || defined(AARCH64) /* So far only 32-bit ARM needs this */
767 shuffle_scno(unsigned long scno)
769 if (scno < ARM_FIRST_SHUFFLED_SYSCALL)
772 /* __ARM_NR_cmpxchg? Swap with LAST_ORDINARY+1 */
773 if (scno == ARM_FIRST_SHUFFLED_SYSCALL)
775 if (scno == 0x000ffff0)
776 return ARM_FIRST_SHUFFLED_SYSCALL;
778 #define ARM_SECOND_SHUFFLED_SYSCALL (ARM_FIRST_SHUFFLED_SYSCALL + 1)
780 * Is it ARM specific syscall?
781 * Swap [0x000f0000, 0x000f0000 + LAST_SPECIAL] range
782 * with [SECOND_SHUFFLED, SECOND_SHUFFLED + LAST_SPECIAL] range.
784 if (scno >= 0x000f0000 &&
785 scno <= 0x000f0000 + ARM_LAST_SPECIAL_SYSCALL) {
786 return scno - 0x000f0000 + ARM_SECOND_SHUFFLED_SYSCALL;
788 if (scno <= ARM_SECOND_SHUFFLED_SYSCALL + ARM_LAST_SPECIAL_SYSCALL) {
789 return scno + 0x000f0000 - ARM_SECOND_SHUFFLED_SYSCALL;
795 # define shuffle_scno(scno) ((long)(scno))
799 syscall_name(long scno)
801 static char buf[sizeof("syscall_%lu") + sizeof(long)*3];
803 if (SCNO_IS_VALID(scno))
804 return sysent[scno].sys_name;
806 sprintf(buf, "syscall_%lu", scno);
812 err_name(unsigned long err)
814 if ((err < nerrnos) && errnoent[err])
815 return errnoent[err];
820 static long get_regs_error;
828 static int get_syscall_args(struct tcb *);
829 static int get_syscall_result(struct tcb *);
830 static int arch_get_scno(struct tcb *tcp);
831 static void get_error(struct tcb *, const bool);
834 trace_syscall_entering(struct tcb *tcp)
838 scno_good = res = get_scno(tcp);
842 res = get_syscall_args(tcp);
846 tprintf("%s(", scno_good == 1 ? tcp->s_ent->sys_name : "????");
848 * " <unavailable>" will be added later by the code which
849 * detects ptrace errors.
855 if (SEN_syscall == tcp->s_ent->sen)
856 decode_mips_subcall(tcp);
859 if ( SEN_execve == tcp->s_ent->sen
860 # if defined(SPARC) || defined(SPARC64)
861 || SEN_execv == tcp->s_ent->sen
864 hide_log_until_execve = 0;
867 #if defined(SYS_socket_subcall) || defined(SYS_ipc_subcall)
868 switch (tcp->s_ent->sen) {
869 # ifdef SYS_socket_subcall
871 decode_socket_subcall(tcp);
874 # ifdef SYS_ipc_subcall
876 decode_ipc_subcall(tcp);
882 if (!(tcp->qual_flg & QUAL_TRACE)
883 || (tracing_paths && !pathtrace_match(tcp))
885 tcp->flags |= TCB_INSYSCALL | TCB_FILTERED;
886 tcp->sys_func_rval = 0;
890 tcp->flags &= ~TCB_FILTERED;
892 if (cflag == CFLAG_ONLY_STATS || hide_log_until_execve) {
898 if (stack_trace_enabled) {
899 if (tcp->s_ent->sys_flags & STACKTRACE_CAPTURE_ON_ENTER)
900 unwind_capture_stacktrace(tcp);
905 tprintf("%s(", tcp->s_ent->sys_name);
906 if ((tcp->qual_flg & QUAL_RAW) && SEN_exit != tcp->s_ent->sen)
907 res = printargs(tcp);
909 res = tcp->s_ent->sys_func(tcp);
913 tcp->flags |= TCB_INSYSCALL;
914 tcp->sys_func_rval = res;
915 /* Measure the entrance time as late as possible to avoid errors. */
917 gettimeofday(&tcp->etime, NULL);
922 trace_syscall_exiting(struct tcb *tcp)
927 unsigned long u_error;
928 const char *u_error_str;
930 /* Measure the exit time as early as possible to avoid errors. */
932 gettimeofday(&tv, NULL);
935 if (stack_trace_enabled) {
936 if (tcp->s_ent->sys_flags & STACKTRACE_INVALIDATE_CACHE)
937 unwind_cache_invalidate(tcp);
941 #if SUPPORTED_PERSONALITIES > 1
942 update_personality(tcp, tcp->currpers);
944 res = (get_regs_error ? -1 : get_syscall_result(tcp));
945 if (filtered(tcp) || hide_log_until_execve)
949 count_syscall(tcp, &tv);
950 if (cflag == CFLAG_ONLY_STATS) {
955 /* If not in -ff mode, and printing_tcp != tcp,
956 * then the log currently does not end with output
957 * of _our syscall entry_, but with something else.
958 * We need to say which syscall's return is this.
960 * Forced reprinting via TCB_REPRINT is used only by
961 * "strace -ff -oLOG test/threaded_execve" corner case.
962 * It's the only case when -ff mode needs reprinting.
964 if ((followfork < 2 && printing_tcp != tcp) || (tcp->flags & TCB_REPRINT)) {
965 tcp->flags &= ~TCB_REPRINT;
967 tprintf("<... %s resumed> ", tcp->s_ent->sys_name);
971 tcp->s_prev_ent = NULL;
973 /* There was error in one of prior ptrace ops */
976 tprints("= ? <unavailable>\n");
978 tcp->flags &= ~TCB_INSYSCALL;
979 tcp->sys_func_rval = 0;
980 free_tcb_priv_data(tcp);
983 tcp->s_prev_ent = tcp->s_ent;
986 if (tcp->qual_flg & QUAL_RAW) {
987 /* sys_res = printargs(tcp); - but it's nop on sysexit */
989 /* FIXME: not_failing_only (IOW, option -z) is broken:
990 * failure of syscall is known only after syscall return.
991 * Thus we end up with something like this on, say, ENOENT:
992 * open("doesnt_exist", O_RDONLY <unfinished ...>
993 * {next syscall decode}
994 * whereas the intended result is that open(...) line
995 * is not shown at all.
997 if (not_failing_only && tcp->u_error)
998 goto ret; /* ignore failed syscalls */
999 if (tcp->sys_func_rval & RVAL_DECODED)
1000 sys_res = tcp->sys_func_rval;
1002 sys_res = tcp->s_ent->sys_func(tcp);
1007 u_error = tcp->u_error;
1008 if (tcp->qual_flg & QUAL_RAW) {
1010 tprintf("= -1 (errno %lu)", u_error);
1012 tprintf("= %#lx", tcp->u_rval);
1014 else if (!(sys_res & RVAL_NONE) && u_error) {
1016 /* Blocked signals do not interrupt any syscalls.
1017 * In this case syscalls don't return ERESTARTfoo codes.
1019 * Deadly signals set to SIG_DFL interrupt syscalls
1020 * and kill the process regardless of which of the codes below
1021 * is returned by the interrupted syscall.
1022 * In some cases, kernel forces a kernel-generated deadly
1023 * signal to be unblocked and set to SIG_DFL (and thus cause
1024 * death) if it is blocked or SIG_IGNed: for example, SIGSEGV
1025 * or SIGILL. (The alternative is to leave process spinning
1026 * forever on the faulty instruction - not useful).
1028 * SIG_IGNed signals and non-deadly signals set to SIG_DFL
1029 * (for example, SIGCHLD, SIGWINCH) interrupt syscalls,
1030 * but kernel will always restart them.
1033 /* Most common type of signal-interrupted syscall exit code.
1034 * The system call will be restarted with the same arguments
1035 * if SA_RESTART is set; otherwise, it will fail with EINTR.
1037 tprints("= ? ERESTARTSYS (To be restarted if SA_RESTART is set)");
1039 case ERESTARTNOINTR:
1040 /* Rare. For example, fork() returns this if interrupted.
1041 * SA_RESTART is ignored (assumed set): the restart is unconditional.
1043 tprints("= ? ERESTARTNOINTR (To be restarted)");
1045 case ERESTARTNOHAND:
1046 /* pause(), rt_sigsuspend() etc use this code.
1047 * SA_RESTART is ignored (assumed not set):
1048 * syscall won't restart (will return EINTR instead)
1049 * even after signal with SA_RESTART set. However,
1050 * after SIG_IGN or SIG_DFL signal it will restart
1051 * (thus the name "restart only if has no handler").
1053 tprints("= ? ERESTARTNOHAND (To be restarted if no handler)");
1055 case ERESTART_RESTARTBLOCK:
1056 /* Syscalls like nanosleep(), poll() which can't be
1057 * restarted with their original arguments use this
1058 * code. Kernel will execute restart_syscall() instead,
1059 * which changes arguments before restarting syscall.
1060 * SA_RESTART is ignored (assumed not set) similarly
1061 * to ERESTARTNOHAND. (Kernel can't honor SA_RESTART
1062 * since restart data is saved in "restart block"
1063 * in task struct, and if signal handler uses a syscall
1064 * which in turn saves another such restart block,
1065 * old data is lost and restart becomes impossible)
1067 tprints("= ? ERESTART_RESTARTBLOCK (Interrupted by signal)");
1070 u_error_str = err_name(u_error);
1072 tprintf("= -1 %s (%s)",
1073 u_error_str, strerror(u_error));
1075 tprintf("= -1 %lu (%s)",
1076 u_error, strerror(u_error));
1079 if ((sys_res & RVAL_STR) && tcp->auxstr)
1080 tprintf(" (%s)", tcp->auxstr);
1083 if (sys_res & RVAL_NONE)
1086 switch (sys_res & RVAL_MASK) {
1088 #if SUPPORTED_PERSONALITIES > 1
1089 if (current_wordsize < sizeof(long))
1091 (unsigned int) tcp->u_rval);
1094 tprintf("= %#lx", tcp->u_rval);
1098 print_numeric_long_umask(tcp->u_rval);
1101 #if SUPPORTED_PERSONALITIES > 1
1102 if (current_wordsize < sizeof(long))
1104 (unsigned int) tcp->u_rval);
1107 tprintf("= %lu", tcp->u_rval);
1110 tprintf("= %ld", tcp->u_rval);
1115 printfd(tcp, tcp->u_rval);
1118 tprintf("= %ld", tcp->u_rval);
1120 #if HAVE_STRUCT_TCB_EXT_ARG
1123 tprintf("= %#llx", tcp->u_lrval);
1126 tprintf("= %#llo", tcp->u_lrval);
1129 case RVAL_LUDECIMAL:
1130 tprintf("= %llu", tcp->u_lrval);
1134 tprintf("= %lld", tcp->u_lrval);
1137 #endif /* HAVE_STRUCT_TCB_EXT_ARG */
1139 error_msg("invalid rval format");
1143 if ((sys_res & RVAL_STR) && tcp->auxstr)
1144 tprintf(" (%s)", tcp->auxstr);
1147 tv_sub(&tv, &tv, &tcp->etime);
1148 tprintf(" <%ld.%06ld>",
1149 (long) tv.tv_sec, (long) tv.tv_usec);
1155 #ifdef USE_LIBUNWIND
1156 if (stack_trace_enabled)
1157 unwind_print_stacktrace(tcp);
1161 tcp->flags &= ~TCB_INSYSCALL;
1162 tcp->sys_func_rval = 0;
1163 free_tcb_priv_data(tcp);
1168 trace_syscall(struct tcb *tcp)
1170 return exiting(tcp) ?
1171 trace_syscall_exiting(tcp) : trace_syscall_entering(tcp);
1175 is_erestart(struct tcb *tcp)
1177 switch (tcp->u_error) {
1179 case ERESTARTNOINTR:
1180 case ERESTARTNOHAND:
1181 case ERESTART_RESTARTBLOCK:
1188 static unsigned long saved_u_error;
1191 temporarily_clear_syserror(struct tcb *tcp)
1193 saved_u_error = tcp->u_error;
1198 restore_cleared_syserror(struct tcb *tcp)
1200 tcp->u_error = saved_u_error;
1203 #include "kernel_types.h"
1206 * Check the syscall return value register value for whether it is
1207 * a negated errno code indicating an error, or a success return value.
1210 is_negated_errno(kernel_ulong_t val)
1212 /* Linux kernel defines MAX_ERRNO to 4095. */
1213 kernel_ulong_t max = -(kernel_long_t) 4095;
1215 #if defined X86_64 || defined X32
1217 * current_wordsize is 4 for x32 personality
1218 * but truncation _must not_ be done in it, so
1219 * check current_personality instead.
1221 if (current_personality == 1) {
1222 val = (uint32_t) val;
1223 max = (uint32_t) max;
1225 #elif SUPPORTED_PERSONALITIES > 1 && SIZEOF_LONG > 4
1226 if (current_wordsize < sizeof(val)) {
1227 val = (uint32_t) val;
1228 max = (uint32_t) max;
1235 #include "arch_regs.c"
1237 #ifdef HAVE_GETRVAL2
1238 # include "arch_getrval2.c"
1242 print_pc(struct tcb *tcp)
1244 #if defined ARCH_PC_REG
1245 # define ARCH_GET_PC 0
1246 #elif defined ARCH_PC_PEEK_ADDR
1248 # define ARCH_PC_REG pc
1249 # define ARCH_GET_PC upeek(tcp->pid, ARCH_PC_PEEK_ADDR, &pc)
1251 # error Neither ARCH_PC_REG nor ARCH_PC_PEEK_ADDR is defined
1253 if (get_regs_error || ARCH_GET_PC)
1254 tprints(current_wordsize == 4 ? "[????????] "
1255 : "[????????????????] ");
1257 tprintf(current_wordsize == 4 ? "[%08lx] " : "[%016lx] ",
1258 (unsigned long) ARCH_PC_REG);
1261 #include "getregs_old.h"
1263 #undef ptrace_getregset_or_getregs
1264 #ifdef ARCH_REGS_FOR_GETREGSET
1266 # define ptrace_getregset_or_getregs ptrace_getregset
1268 ptrace_getregset(pid_t pid)
1270 # ifdef ARCH_IOVEC_FOR_GETREGSET
1271 /* variable iovec */
1272 ARCH_IOVEC_FOR_GETREGSET.iov_len = sizeof(ARCH_REGS_FOR_GETREGSET);
1273 return ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS,
1274 &ARCH_IOVEC_FOR_GETREGSET);
1276 /* constant iovec */
1277 static struct iovec io = {
1278 .iov_base = &ARCH_REGS_FOR_GETREGSET,
1279 .iov_len = sizeof(ARCH_REGS_FOR_GETREGSET)
1281 return ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &io);
1286 #elif defined ARCH_REGS_FOR_GETREGS
1288 # define ptrace_getregset_or_getregs ptrace_getregs
1290 ptrace_getregs(pid_t pid)
1292 # if defined SPARC || defined SPARC64
1293 /* SPARC systems have the meaning of data and addr reversed */
1294 return ptrace(PTRACE_GETREGS, pid, (void *) &ARCH_REGS_FOR_GETREGS, 0);
1296 return ptrace(PTRACE_GETREGS, pid, NULL, &ARCH_REGS_FOR_GETREGS);
1300 #endif /* ARCH_REGS_FOR_GETREGSET || ARCH_REGS_FOR_GETREGS */
1305 #undef USE_GET_SYSCALL_RESULT_REGS
1306 #ifdef ptrace_getregset_or_getregs
1308 # ifdef HAVE_GETREGS_OLD
1310 * Try PTRACE_GETREGSET/PTRACE_GETREGS first,
1311 * fallback to getregs_old.
1313 static int use_getregs_old;
1314 if (use_getregs_old < 0) {
1315 get_regs_error = ptrace_getregset_or_getregs(pid);
1317 } else if (use_getregs_old == 0) {
1318 get_regs_error = ptrace_getregset_or_getregs(pid);
1319 if (get_regs_error >= 0) {
1320 use_getregs_old = -1;
1323 if (errno == EPERM || errno == ESRCH)
1325 use_getregs_old = 1;
1327 get_regs_error = getregs_old(pid);
1328 # else /* !HAVE_GETREGS_OLD */
1329 /* Assume that PTRACE_GETREGSET/PTRACE_GETREGS works. */
1330 get_regs_error = ptrace_getregset_or_getregs(pid);
1331 # endif /* !HAVE_GETREGS_OLD */
1333 #else /* !ptrace_getregset_or_getregs */
1335 # define USE_GET_SYSCALL_RESULT_REGS 1
1336 # warning get_regs is not implemented for this architecture yet
1339 #endif /* !ptrace_getregset_or_getregs */
1345 char buf[sizeof("syscall_%lu") + sizeof(long) * 3];
1349 free_sysent_buf(void *ptr)
1351 struct sysent_buf *s = ptr;
1352 s->tcp->s_prev_ent = s->tcp->s_ent = NULL;
1358 * 0: "ignore this ptrace stop", bail out of trace_syscall_entering() silently.
1359 * 1: ok, continue in trace_syscall_entering().
1360 * other: error, trace_syscall_entering() should print error indicator
1361 * ("????" etc) and bail out.
1364 get_scno(struct tcb *tcp)
1369 int rc = arch_get_scno(tcp);
1373 if (SCNO_IS_VALID(tcp->scno)) {
1374 tcp->s_ent = &sysent[tcp->scno];
1375 tcp->qual_flg = qual_flags[tcp->scno];
1377 struct sysent_buf *s = xcalloc(1, sizeof(*s));
1380 s->ent.nargs = MAX_ARGS;
1381 s->ent.sen = SEN_printargs;
1382 s->ent.sys_func = printargs;
1383 s->ent.sys_name = s->buf;
1384 sprintf(s->buf, "syscall_%lu", shuffle_scno(tcp->scno));
1386 tcp->s_ent = &s->ent;
1387 tcp->qual_flg = QUAL_RAW | DEFAULT_QUAL_FLAGS;
1389 set_tcb_priv_data(tcp, s, free_sysent_buf);
1392 error_msg("pid %d invalid syscall %ld", tcp->pid, tcp->scno);
1397 #ifdef USE_GET_SYSCALL_RESULT_REGS
1398 static int get_syscall_result_regs(struct tcb *);
1402 * 1: ok, continue in trace_syscall_exiting().
1403 * -1: error, trace_syscall_exiting() should print error indicator
1404 * ("????" etc) and bail out.
1407 get_syscall_result(struct tcb *tcp)
1409 #ifdef USE_GET_SYSCALL_RESULT_REGS
1410 if (get_syscall_result_regs(tcp))
1414 get_error(tcp, !(tcp->s_ent->sys_flags & SYSCALL_NEVER_FAILS));
1419 #include "get_scno.c"
1420 #include "get_syscall_args.c"
1421 #ifdef USE_GET_SYSCALL_RESULT_REGS
1422 # include "get_syscall_result.c"
1424 #include "get_error.c"
1425 #ifdef HAVE_GETREGS_OLD
1426 # include "getregs_old.c"