2 * Copyright (c) 1991, 1992 Paul Kranenburg <pk@cs.few.eur.nl>
3 * Copyright (c) 1993 Branko Lankester <branko@hacktic.nl>
4 * Copyright (c) 1993, 1994, 1995, 1996 Rick Sladkey <jrs@world.std.com>
5 * Copyright (c) 1996-1999 Wichert Akkerman <wichert@cistron.nl>
6 * Copyright (c) 1999 IBM Deutschland Entwicklung GmbH, IBM Corporation
7 * Linux for s390 port by D.J. Barrow
8 * <barrow_dj@mail.yahoo.com,djbarrow@de.ibm.com>
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. The name of the author may not be used to endorse or promote products
20 * derived from this software without specific prior written permission.
22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36 #include <sys/param.h>
40 # ifndef PTRACE_PEEKUSR
41 # define PTRACE_PEEKUSR PTRACE_PEEKUSER
43 #elif defined(HAVE_LINUX_PTRACE_H)
44 # undef PTRACE_SYSCALL
45 # ifdef HAVE_STRUCT_IA64_FPREG
46 # define ia64_fpreg XXX_ia64_fpreg
48 # ifdef HAVE_STRUCT_PT_ALL_USER_REGS
49 # define pt_all_user_regs XXX_pt_all_user_regs
51 # include <linux/ptrace.h>
53 # undef pt_all_user_regs
57 # undef PTRACE_GETREGS
58 # define PTRACE_GETREGS PTRACE_GETREGS64
59 # undef PTRACE_SETREGS
60 # define PTRACE_SETREGS PTRACE_SETREGS64
64 # include <asm/ptrace_offsets.h>
68 /* for struct iovec */
76 # include <asm/ptrace.h>
80 # include <asm/ptrace.h>
84 # define ERESTARTSYS 512
86 #ifndef ERESTARTNOINTR
87 # define ERESTARTNOINTR 513
89 #ifndef ERESTARTNOHAND
90 # define ERESTARTNOHAND 514 /* restart if no handler */
92 #ifndef ERESTART_RESTARTBLOCK
93 # define ERESTART_RESTARTBLOCK 516 /* restart by calling sys_restart_syscall */
97 # warning: NSIG is not defined, using 32
101 /* Ugh. Is this really correct? ARM has no RT signals?! */
108 /* Define these shorthand notations to simplify the syscallent files. */
109 #define TD TRACE_DESC
110 #define TF TRACE_FILE
112 #define TN TRACE_NETWORK
113 #define TP TRACE_PROCESS
114 #define TS TRACE_SIGNAL
115 #define TM TRACE_MEMORY
116 #define NF SYSCALL_NEVER_FAILS
119 const struct_sysent sysent0[] = {
120 #include "syscallent.h"
123 #if SUPPORTED_PERSONALITIES > 1
124 static const struct_sysent sysent1[] = {
125 # include "syscallent1.h"
129 #if SUPPORTED_PERSONALITIES > 2
130 static const struct_sysent sysent2[] = {
131 # include "syscallent2.h"
135 /* Now undef them since short defines cause wicked namespace pollution. */
147 * `ioctlent.h' may be generated from `ioctlent.raw' by the auxiliary
148 * program `ioctlsort', such that the list is sorted by the `code' field.
149 * This has the side-effect of resolving the _IO.. macros into
150 * plain integers, eliminating the need to include here everything
154 const char *const errnoent0[] = {
155 #include "errnoent.h"
157 const char *const signalent0[] = {
158 #include "signalent.h"
160 const struct_ioctlent ioctlent0[] = {
161 #include "ioctlent.h"
164 #if SUPPORTED_PERSONALITIES > 1
165 static const char *const errnoent1[] = {
166 # include "errnoent1.h"
168 static const char *const signalent1[] = {
169 # include "signalent1.h"
171 static const struct_ioctlent ioctlent1[] = {
172 # include "ioctlent1.h"
176 #if SUPPORTED_PERSONALITIES > 2
177 static const char *const errnoent2[] = {
178 # include "errnoent2.h"
180 static const char *const signalent2[] = {
181 # include "signalent2.h"
183 static const struct_ioctlent ioctlent2[] = {
184 # include "ioctlent2.h"
189 nsyscalls0 = ARRAY_SIZE(sysent0)
190 #if SUPPORTED_PERSONALITIES > 1
191 , nsyscalls1 = ARRAY_SIZE(sysent1)
192 # if SUPPORTED_PERSONALITIES > 2
193 , nsyscalls2 = ARRAY_SIZE(sysent2)
199 nerrnos0 = ARRAY_SIZE(errnoent0)
200 #if SUPPORTED_PERSONALITIES > 1
201 , nerrnos1 = ARRAY_SIZE(errnoent1)
202 # if SUPPORTED_PERSONALITIES > 2
203 , nerrnos2 = ARRAY_SIZE(errnoent2)
209 nsignals0 = ARRAY_SIZE(signalent0)
210 #if SUPPORTED_PERSONALITIES > 1
211 , nsignals1 = ARRAY_SIZE(signalent1)
212 # if SUPPORTED_PERSONALITIES > 2
213 , nsignals2 = ARRAY_SIZE(signalent2)
219 nioctlents0 = ARRAY_SIZE(ioctlent0)
220 #if SUPPORTED_PERSONALITIES > 1
221 , nioctlents1 = ARRAY_SIZE(ioctlent1)
222 # if SUPPORTED_PERSONALITIES > 2
223 , nioctlents2 = ARRAY_SIZE(ioctlent2)
228 #if SUPPORTED_PERSONALITIES > 1
229 const struct_sysent *sysent = sysent0;
230 const char *const *errnoent = errnoent0;
231 const char *const *signalent = signalent0;
232 const struct_ioctlent *ioctlent = ioctlent0;
234 unsigned nsyscalls = nsyscalls0;
235 unsigned nerrnos = nerrnos0;
236 unsigned nsignals = nsignals0;
237 unsigned nioctlents = nioctlents0;
240 qualbits_t *qual_vec[SUPPORTED_PERSONALITIES];
242 static const unsigned nsyscall_vec[SUPPORTED_PERSONALITIES] = {
244 #if SUPPORTED_PERSONALITIES > 1
247 #if SUPPORTED_PERSONALITIES > 2
251 static const struct_sysent *const sysent_vec[SUPPORTED_PERSONALITIES] = {
253 #if SUPPORTED_PERSONALITIES > 1
256 #if SUPPORTED_PERSONALITIES > 2
262 MAX_NSYSCALLS1 = (nsyscalls0
263 #if SUPPORTED_PERSONALITIES > 1
264 > nsyscalls1 ? nsyscalls0 : nsyscalls1
267 MAX_NSYSCALLS2 = (MAX_NSYSCALLS1
268 #if SUPPORTED_PERSONALITIES > 2
269 > nsyscalls2 ? MAX_NSYSCALLS1 : nsyscalls2
272 MAX_NSYSCALLS = MAX_NSYSCALLS2,
273 /* We are ready for arches with up to 255 signals,
274 * even though the largest known signo is on MIPS and it is 128.
275 * The number of existing syscalls on all arches is
276 * larger that 255 anyway, so it is just a pedantic matter.
278 MIN_QUALS = MAX_NSYSCALLS > 255 ? MAX_NSYSCALLS : 255
281 #if SUPPORTED_PERSONALITIES > 1
282 unsigned current_personality;
284 # ifndef current_wordsize
285 unsigned current_wordsize;
286 static const int personality_wordsize[SUPPORTED_PERSONALITIES] = {
287 PERSONALITY0_WORDSIZE,
288 PERSONALITY1_WORDSIZE,
289 # if SUPPORTED_PERSONALITIES > 2
290 PERSONALITY2_WORDSIZE,
296 set_personality(int personality)
298 nsyscalls = nsyscall_vec[personality];
299 sysent = sysent_vec[personality];
301 switch (personality) {
303 errnoent = errnoent0;
305 ioctlent = ioctlent0;
306 nioctlents = nioctlents0;
307 signalent = signalent0;
308 nsignals = nsignals0;
312 errnoent = errnoent1;
314 ioctlent = ioctlent1;
315 nioctlents = nioctlents1;
316 signalent = signalent1;
317 nsignals = nsignals1;
320 # if SUPPORTED_PERSONALITIES > 2
322 errnoent = errnoent2;
324 ioctlent = ioctlent2;
325 nioctlents = nioctlents2;
326 signalent = signalent2;
327 nsignals = nsignals2;
332 current_personality = personality;
333 # ifndef current_wordsize
334 current_wordsize = personality_wordsize[personality];
339 update_personality(struct tcb *tcp, int personality)
341 if (personality == current_personality)
343 set_personality(personality);
345 if (personality == tcp->currpers)
347 tcp->currpers = personality;
349 # if defined(POWERPC64)
351 static const char *const names[] = {"64 bit", "32 bit"};
352 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
353 tcp->pid, names[personality]);
355 # elif defined(X86_64)
357 static const char *const names[] = {"64 bit", "32 bit", "x32"};
358 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
359 tcp->pid, names[personality]);
363 static const char *const names[] = {"x32", "32 bit"};
364 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
365 tcp->pid, names[personality]);
367 # elif defined(AARCH64)
369 static const char *const names[] = {"32-bit", "AArch64"};
370 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
371 tcp->pid, names[personality]);
375 static const char *const names[] = {"64-bit", "32-bit"};
376 fprintf(stderr, "[ Process PID=%d runs in %s mode. ]\n",
377 tcp->pid, names[personality]);
383 static int qual_syscall(), qual_signal(), qual_desc();
385 static const struct qual_options {
387 const char *option_name;
388 int (*qualify)(const char *, int, int);
389 const char *argument_name;
391 { QUAL_TRACE, "trace", qual_syscall, "system call" },
392 { QUAL_TRACE, "t", qual_syscall, "system call" },
393 { QUAL_ABBREV, "abbrev", qual_syscall, "system call" },
394 { QUAL_ABBREV, "a", qual_syscall, "system call" },
395 { QUAL_VERBOSE, "verbose", qual_syscall, "system call" },
396 { QUAL_VERBOSE, "v", qual_syscall, "system call" },
397 { QUAL_RAW, "raw", qual_syscall, "system call" },
398 { QUAL_RAW, "x", qual_syscall, "system call" },
399 { QUAL_SIGNAL, "signal", qual_signal, "signal" },
400 { QUAL_SIGNAL, "signals", qual_signal, "signal" },
401 { QUAL_SIGNAL, "s", qual_signal, "signal" },
402 { QUAL_READ, "read", qual_desc, "descriptor" },
403 { QUAL_READ, "reads", qual_desc, "descriptor" },
404 { QUAL_READ, "r", qual_desc, "descriptor" },
405 { QUAL_WRITE, "write", qual_desc, "descriptor" },
406 { QUAL_WRITE, "writes", qual_desc, "descriptor" },
407 { QUAL_WRITE, "w", qual_desc, "descriptor" },
408 { 0, NULL, NULL, NULL },
412 reallocate_qual(int n)
416 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
417 qp = qual_vec[p] = realloc(qual_vec[p], n * sizeof(qualbits_t));
420 memset(&qp[num_quals], 0, (n - num_quals) * sizeof(qualbits_t));
426 qualify_one(int n, int bitflag, int not, int pers)
431 reallocate_qual(n + 1);
433 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
434 if (pers == p || pers < 0) {
436 qual_vec[p][n] &= ~bitflag;
438 qual_vec[p][n] |= bitflag;
444 qual_syscall(const char *s, int bitflag, int not)
450 if (*s >= '0' && *s <= '9') {
451 i = string_to_uint(s);
452 if (i >= MAX_NSYSCALLS)
454 qualify_one(i, bitflag, not, -1);
458 for (p = 0; p < SUPPORTED_PERSONALITIES; p++) {
459 for (i = 0; i < nsyscall_vec[p]; i++) {
460 if (sysent_vec[p][i].sys_name
461 && strcmp(s, sysent_vec[p][i].sys_name) == 0
463 qualify_one(i, bitflag, not, p);
473 qual_signal(const char *s, int bitflag, int not)
477 if (*s >= '0' && *s <= '9') {
478 int signo = string_to_uint(s);
479 if (signo < 0 || signo > 255)
481 qualify_one(signo, bitflag, not, -1);
484 if (strncasecmp(s, "SIG", 3) == 0)
486 for (i = 0; i <= NSIG; i++) {
487 if (strcasecmp(s, signame(i) + 3) == 0) {
488 qualify_one(i, bitflag, not, -1);
496 qual_desc(const char *s, int bitflag, int not)
498 if (*s >= '0' && *s <= '9') {
499 int desc = string_to_uint(s);
500 if (desc < 0 || desc > 0x7fff) /* paranoia */
502 qualify_one(desc, bitflag, not, -1);
509 lookup_class(const char *s)
511 if (strcmp(s, "file") == 0)
513 if (strcmp(s, "ipc") == 0)
515 if (strcmp(s, "network") == 0)
516 return TRACE_NETWORK;
517 if (strcmp(s, "process") == 0)
518 return TRACE_PROCESS;
519 if (strcmp(s, "signal") == 0)
521 if (strcmp(s, "desc") == 0)
523 if (strcmp(s, "memory") == 0)
529 qualify(const char *s)
531 const struct qual_options *opt;
538 reallocate_qual(MIN_QUALS);
540 opt = &qual_options[0];
541 for (i = 0; (p = qual_options[i].option_name); i++) {
543 if (strncmp(s, p, n) == 0 && s[n] == '=') {
544 opt = &qual_options[i];
554 if (strcmp(s, "none") == 0) {
558 if (strcmp(s, "all") == 0) {
559 for (i = 0; i < num_quals; i++) {
560 qualify_one(i, opt->bitflag, not, -1);
564 for (i = 0; i < num_quals; i++) {
565 qualify_one(i, opt->bitflag, !not, -1);
570 for (p = strtok(copy, ","); p; p = strtok(NULL, ",")) {
571 if (opt->bitflag == QUAL_TRACE && (n = lookup_class(p)) > 0) {
573 for (pers = 0; pers < SUPPORTED_PERSONALITIES; pers++) {
574 for (i = 0; i < nsyscall_vec[pers]; i++)
575 if (sysent_vec[pers][i].sys_flags & n)
576 qualify_one(i, opt->bitflag, not, pers);
580 if (opt->qualify(p, opt->bitflag, not)) {
581 error_msg_and_die("invalid %s '%s'",
582 opt->argument_name, p);
589 #ifdef SYS_socket_subcall
591 decode_socket_subcall(struct tcb *tcp)
594 unsigned int i, n, size;
596 if (tcp->u_arg[0] < 0 || tcp->u_arg[0] >= SYS_socket_nsubcalls)
599 tcp->scno = SYS_socket_subcall + tcp->u_arg[0];
600 tcp->qual_flg = qual_flags[tcp->scno];
601 tcp->s_ent = &sysent[tcp->scno];
602 addr = tcp->u_arg[1];
603 size = current_wordsize;
604 n = tcp->s_ent->nargs;
605 for (i = 0; i < n; ++i) {
606 if (size == sizeof(int)) {
608 if (umove(tcp, addr, &arg) < 0)
614 if (umove(tcp, addr, &arg) < 0)
623 #ifdef SYS_ipc_subcall
625 decode_ipc_subcall(struct tcb *tcp)
629 if (tcp->u_arg[0] < 0 || tcp->u_arg[0] >= SYS_ipc_nsubcalls)
632 tcp->scno = SYS_ipc_subcall + tcp->u_arg[0];
633 tcp->qual_flg = qual_flags[tcp->scno];
634 tcp->s_ent = &sysent[tcp->scno];
635 n = tcp->s_ent->nargs;
636 for (i = 0; i < n; i++)
637 tcp->u_arg[i] = tcp->u_arg[i + 1];
642 printargs(struct tcb *tcp)
646 int n = tcp->s_ent->nargs;
647 for (i = 0; i < n; i++)
648 tprintf("%s%#lx", i ? ", " : "", tcp->u_arg[i]);
654 printargs_lu(struct tcb *tcp)
658 int n = tcp->s_ent->nargs;
659 for (i = 0; i < n; i++)
660 tprintf("%s%lu", i ? ", " : "", tcp->u_arg[i]);
666 printargs_ld(struct tcb *tcp)
670 int n = tcp->s_ent->nargs;
671 for (i = 0; i < n; i++)
672 tprintf("%s%ld", i ? ", " : "", tcp->u_arg[i]);
677 #if defined(SPARC) || defined(SPARC64) || defined(IA64) || defined(SH)
679 getrval2(struct tcb *tcp)
683 # if defined(SPARC) || defined(SPARC64)
684 val = sparc_regs.u_regs[U_REG_O1];
686 if (upeek(tcp->pid, 4*(REG_REG0+1), &val) < 0)
689 if (upeek(tcp->pid, PT_R9, &val) < 0)
698 is_restart_error(struct tcb *tcp)
700 switch (tcp->u_error) {
704 case ERESTART_RESTARTBLOCK:
713 struct user_regs_struct i386_regs;
714 # define ARCH_REGS_FOR_GETREGSET i386_regs
715 #elif defined(X86_64) || defined(X32)
717 * On i386, pt_regs and user_regs_struct are the same,
718 * but on 64 bit x86, user_regs_struct has six more fields:
719 * fs_base, gs_base, ds, es, fs, gs.
720 * PTRACE_GETREGS fills them too, so struct pt_regs would overflow.
722 struct i386_user_regs_struct {
742 struct user_regs_struct x86_64_r;
743 struct i386_user_regs_struct i386_r;
745 # define x86_64_regs x86_regs_union.x86_64_r
746 # define i386_regs x86_regs_union.i386_r
747 static struct iovec x86_io = {
748 .iov_base = &x86_regs_union
751 long ia32 = 0; /* not static */
752 static long ia64_r8, ia64_r10;
753 #elif defined(POWERPC)
754 struct pt_regs ppc_regs;
755 static long ppc_result;
761 struct pt_regs arm_regs; /* not static */
762 # define ARCH_REGS_FOR_GETREGSET arm_regs
763 #elif defined(AARCH64)
765 struct user_pt_regs aarch64_r;
766 struct arm_pt_regs arm_r;
768 # define aarch64_regs arm_regs_union.aarch64_r
769 # define arm_regs arm_regs_union.arm_r
770 static struct iovec aarch64_io = {
771 .iov_base = &arm_regs_union
774 static long alpha_r0;
775 static long alpha_a3;
777 static struct pt_regs avr32_regs;
778 #elif defined(SPARC) || defined(SPARC64)
779 struct pt_regs sparc_regs; /* not static */
780 #elif defined(LINUX_MIPSN32)
781 static long long mips_a3;
782 static long long mips_r2;
786 #elif defined(S390) || defined(S390X)
788 static long syscall_mode;
790 static long hppa_r28;
795 #elif defined(CRISV10) || defined(CRISV32)
796 static long cris_r10;
798 struct pt_regs tile_regs;
799 #elif defined(MICROBLAZE)
800 static long microblaze_r3;
802 static struct user_regs_struct or1k_regs;
803 # define ARCH_REGS_FOR_GETREGSET or1k_regs
805 static struct user_gp_regs metag_regs;
806 # define ARCH_REGS_FOR_GETREGSET metag_regs
807 #elif defined(XTENSA)
808 static long xtensa_a2;
812 printcall(struct tcb *tcp)
814 #define PRINTBADPC tprintf(sizeof(long) == 4 ? "[????????] " : \
815 sizeof(long) == 8 ? "[????????????????] " : \
817 if (get_regs_error) {
822 tprintf("[%08lx] ", i386_regs.eip);
823 #elif defined(S390) || defined(S390X)
825 if (upeek(tcp->pid, PT_PSWADDR, &psw) < 0) {
830 tprintf("[%08lx] ", psw);
832 tprintf("[%016lx] ", psw);
834 #elif defined(X86_64) || defined(X32)
835 if (x86_io.iov_len == sizeof(i386_regs)) {
836 tprintf("[%08x] ", (unsigned) i386_regs.eip);
839 tprintf("[%016lx] ", (unsigned long) x86_64_regs.rip);
841 /* Note: this truncates 64-bit rip to 32 bits */
842 tprintf("[%08lx] ", (unsigned long) x86_64_regs.rip);
847 if (upeek(tcp->pid, PT_B0, &ip) < 0) {
851 tprintf("[%08lx] ", ip);
852 #elif defined(POWERPC)
853 long pc = ppc_regs.nip;
855 tprintf("[%016lx] ", pc);
857 tprintf("[%08lx] ", pc);
861 if (upeek(tcp->pid, 4*PT_PC, &pc) < 0) {
862 tprints("[????????] ");
865 tprintf("[%08lx] ", pc);
868 if (upeek(tcp->pid, REG_PC, &pc) < 0) {
869 tprints("[????????????????] ");
872 tprintf("[%08lx] ", pc);
874 tprintf("[%08lx] ", sparc_regs.pc);
875 #elif defined(SPARC64)
876 tprintf("[%08lx] ", sparc_regs.tpc);
879 if (upeek(tcp->pid, PT_IAOQ0, &pc) < 0) {
880 tprints("[????????] ");
883 tprintf("[%08lx] ", pc);
886 if (upeek(tcp->pid, REG_EPC, &pc) < 0) {
887 tprints("[????????] ");
890 tprintf("[%08lx] ", pc);
893 if (upeek(tcp->pid, 4*REG_PC, &pc) < 0) {
894 tprints("[????????] ");
897 tprintf("[%08lx] ", pc);
900 if (upeek(tcp->pid, REG_PC, &pc) < 0) {
901 tprints("[????????????????] ");
904 tprintf("[%08lx] ", pc);
906 tprintf("[%08lx] ", arm_regs.ARM_pc);
907 #elif defined(AARCH64)
908 /* tprintf("[%016lx] ", aarch64_regs.regs[???]); */
910 tprintf("[%08lx] ", avr32_regs.pc);
913 if (upeek(tcp->pid, PT_PC, &pc) < 0) {
917 tprintf("[%08lx] ", pc);
918 #elif defined(CRISV10)
920 if (upeek(tcp->pid, 4*PT_IRP, &pc) < 0) {
924 tprintf("[%08lx] ", pc);
925 #elif defined(CRISV32)
927 if (upeek(tcp->pid, 4*PT_ERP, &pc) < 0) {
931 tprintf("[%08lx] ", pc);
934 tprintf("[%016lx] ", (unsigned long) tile_regs.pc);
936 tprintf("[%08lx] ", (unsigned long) tile_regs.pc);
939 tprintf("[%08lx] ", or1k_regs.pc);
941 tprintf("[%08lx] ", metag_regs.pc);
942 #elif defined(XTENSA)
944 if (upeek(tcp->pid, REG_PC, &pc) < 0) {
948 tprintf("[%08lx] ", pc);
949 #endif /* architecture */
952 /* Shuffle syscall numbers so that we don't have huge gaps in syscall table.
953 * The shuffling should be reversible: shuffle_scno(shuffle_scno(n)) == n.
955 #if defined(ARM) /* So far only ARM needs this */
957 shuffle_scno(unsigned long scno)
959 if (scno <= ARM_LAST_ORDINARY_SYSCALL)
962 /* __ARM_NR_cmpxchg? Swap with LAST_ORDINARY+1 */
963 if (scno == 0x000ffff0)
964 return ARM_LAST_ORDINARY_SYSCALL+1;
965 if (scno == ARM_LAST_ORDINARY_SYSCALL+1)
968 /* Is it ARM specific syscall?
969 * Swap with [LAST_ORDINARY+2, LAST_ORDINARY+2 + LAST_SPECIAL] range.
971 if (scno >= 0x000f0000
972 && scno <= 0x000f0000 + ARM_LAST_SPECIAL_SYSCALL
974 return scno - 0x000f0000 + (ARM_LAST_ORDINARY_SYSCALL+2);
976 if (/* scno >= ARM_LAST_ORDINARY_SYSCALL+2 - always true */ 1
977 && scno <= (ARM_LAST_ORDINARY_SYSCALL+2) + ARM_LAST_SPECIAL_SYSCALL
979 return scno + 0x000f0000 - (ARM_LAST_ORDINARY_SYSCALL+2);
985 # define shuffle_scno(scno) ((long)(scno))
989 undefined_scno_name(struct tcb *tcp)
991 static char buf[sizeof("syscall_%lu") + sizeof(long)*3];
993 sprintf(buf, "syscall_%lu", shuffle_scno(tcp->scno));
999 * PTRACE_GETREGS was added to the PowerPC kernel in v2.6.23,
1000 * we provide a slow fallback for old kernels.
1002 static int powerpc_getregs_old(pid_t pid)
1007 r = upeek(pid, sizeof(long) * PT_MSR, &ppc_regs.msr);
1010 r = upeek(pid, sizeof(long) * PT_CCR, &ppc_regs.ccr);
1013 r = upeek(pid, sizeof(long) * PT_ORIG_R3, &ppc_regs.orig_gpr3);
1016 for (i = 0; i <= 8; i++) {
1017 r = upeek(pid, sizeof(long) * (PT_R0 + i), &ppc_regs.gpr[i]);
1027 long get_regs_error;
1029 #if defined(PTRACE_GETREGSET) && defined(NT_PRSTATUS)
1030 static void get_regset(pid_t pid)
1032 /* constant iovec */
1037 static struct iovec io = {
1038 .iov_base = &ARCH_REGS_FOR_GETREGSET,
1039 .iov_len = sizeof(ARCH_REGS_FOR_GETREGSET)
1041 get_regs_error = ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &io);
1043 /* variable iovec */
1044 # elif defined(X86_64) || defined(X32)
1045 /* x86_io.iov_base = &x86_regs_union; - already is */
1046 x86_io.iov_len = sizeof(x86_regs_union);
1047 get_regs_error = ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &x86_io);
1048 # elif defined(AARCH64)
1049 /* aarch64_io.iov_base = &arm_regs_union; - already is */
1050 aarch64_io.iov_len = sizeof(arm_regs_union);
1051 get_regs_error = ptrace(PTRACE_GETREGSET, pid, NT_PRSTATUS, &aarch64_io);
1053 # warning both PTRACE_GETREGSET and NT_PRSTATUS are available but not yet used
1056 #endif /* PTRACE_GETREGSET && NT_PRSTATUS */
1061 /* PTRACE_GETREGSET only */
1062 # if defined(METAG) || defined(OR1K) || defined(X32) || defined(AARCH64)
1065 /* PTRACE_GETREGS only */
1066 # elif defined(AVR32)
1067 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &avr32_regs);
1068 # elif defined(TILE)
1069 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &tile_regs);
1070 # elif defined(SPARC) || defined(SPARC64)
1071 get_regs_error = ptrace(PTRACE_GETREGS, pid, (char *)&sparc_regs, 0);
1072 # elif defined(POWERPC)
1073 static bool old_kernel = 0;
1076 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, (long) &ppc_regs);
1077 if (get_regs_error && errno == EIO) {
1080 get_regs_error = powerpc_getregs_old(pid);
1083 /* try PTRACE_GETREGSET first, fallback to PTRACE_GETREGS */
1085 # if defined(PTRACE_GETREGSET) && defined(NT_PRSTATUS)
1086 static int getregset_support;
1088 if (getregset_support >= 0) {
1090 if (getregset_support > 0)
1092 if (get_regs_error >= 0) {
1093 getregset_support = 1;
1096 if (errno == EPERM || errno == ESRCH)
1098 getregset_support = -1;
1100 # endif /* PTRACE_GETREGSET && NT_PRSTATUS */
1102 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &arm_regs);
1103 # elif defined(I386)
1104 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &i386_regs);
1105 # elif defined(X86_64)
1106 /* Use old method, with unreliable heuristical detection of 32-bitness. */
1107 x86_io.iov_len = sizeof(x86_64_regs);
1108 get_regs_error = ptrace(PTRACE_GETREGS, pid, NULL, &x86_64_regs);
1109 if (!get_regs_error && x86_64_regs.cs == 0x23) {
1110 x86_io.iov_len = sizeof(i386_regs);
1112 * The order is important: i386_regs and x86_64_regs
1113 * are overlaid in memory!
1115 i386_regs.ebx = x86_64_regs.rbx;
1116 i386_regs.ecx = x86_64_regs.rcx;
1117 i386_regs.edx = x86_64_regs.rdx;
1118 i386_regs.esi = x86_64_regs.rsi;
1119 i386_regs.edi = x86_64_regs.rdi;
1120 i386_regs.ebp = x86_64_regs.rbp;
1121 i386_regs.eax = x86_64_regs.rax;
1122 /* i386_regs.xds = x86_64_regs.ds; unused by strace */
1123 /* i386_regs.xes = x86_64_regs.es; ditto... */
1124 /* i386_regs.xfs = x86_64_regs.fs; */
1125 /* i386_regs.xgs = x86_64_regs.gs; */
1126 i386_regs.orig_eax = x86_64_regs.orig_rax;
1127 i386_regs.eip = x86_64_regs.rip;
1128 /* i386_regs.xcs = x86_64_regs.cs; */
1129 /* i386_regs.eflags = x86_64_regs.eflags; */
1130 i386_regs.esp = x86_64_regs.rsp;
1131 /* i386_regs.xss = x86_64_regs.ss; */
1134 # error unhandled architecture
1135 # endif /* ARM || I386 || X86_64 */
1138 #endif /* !get_regs */
1141 * 0: "ignore this ptrace stop", bail out of trace_syscall_entering() silently.
1142 * 1: ok, continue in trace_syscall_entering().
1143 * other: error, trace_syscall_entering() should print error indicator
1144 * ("????" etc) and bail out.
1147 get_scno(struct tcb *tcp)
1151 #if defined(S390) || defined(S390X)
1152 if (upeek(tcp->pid, PT_GPR2, &syscall_mode) < 0)
1155 if (syscall_mode != -ENOSYS) {
1157 * Since kernel version 2.5.44 the scno gets passed in gpr2.
1159 scno = syscall_mode;
1162 * Old style of "passing" the scno via the SVC instruction.
1165 long opcode, offset_reg, tmp;
1167 static const int gpr_offset[16] = {
1168 PT_GPR0, PT_GPR1, PT_ORIGGPR2, PT_GPR3,
1169 PT_GPR4, PT_GPR5, PT_GPR6, PT_GPR7,
1170 PT_GPR8, PT_GPR9, PT_GPR10, PT_GPR11,
1171 PT_GPR12, PT_GPR13, PT_GPR14, PT_GPR15
1174 if (upeek(tcp->pid, PT_PSWADDR, &psw) < 0)
1177 opcode = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)(psw - sizeof(long)), 0);
1179 perror_msg("peektext(psw-oneword)");
1184 * We have to check if the SVC got executed directly or via an
1185 * EXECUTE instruction. In case of EXECUTE it is necessary to do
1186 * instruction decoding to derive the system call number.
1187 * Unfortunately the opcode sizes of EXECUTE and SVC are differently,
1188 * so that this doesn't work if a SVC opcode is part of an EXECUTE
1189 * opcode. Since there is no way to find out the opcode size this
1190 * is the best we can do...
1192 if ((opcode & 0xff00) == 0x0a00) {
1194 scno = opcode & 0xff;
1197 /* SVC got executed by EXECUTE instruction */
1200 * Do instruction decoding of EXECUTE. If you really want to
1201 * understand this, read the Principles of Operations.
1203 svc_addr = (void *) (opcode & 0xfff);
1206 offset_reg = (opcode & 0x000f0000) >> 16;
1207 if (offset_reg && (upeek(tcp->pid, gpr_offset[offset_reg], &tmp) < 0))
1212 offset_reg = (opcode & 0x0000f000) >> 12;
1213 if (offset_reg && (upeek(tcp->pid, gpr_offset[offset_reg], &tmp) < 0))
1217 scno = ptrace(PTRACE_PEEKTEXT, tcp->pid, svc_addr, 0);
1226 offset_reg = (opcode & 0x00f00000) >> 20;
1227 if (offset_reg && (upeek(tcp->pid, gpr_offset[offset_reg], &tmp) < 0))
1230 scno = (scno | tmp) & 0xff;
1233 #elif defined(POWERPC)
1234 scno = ppc_regs.gpr[0];
1238 /* Check for 64/32 bit mode. */
1239 /* SF is bit 0 of MSR */
1240 if ((ppc_regs.msr >> 63) & 1)
1244 update_personality(tcp, currpers);
1246 #elif defined(AVR32)
1247 scno = avr32_regs.r8;
1249 if (upeek(tcp->pid, PT_ORIG_P0, &scno))
1252 scno = i386_regs.orig_eax;
1253 #elif defined(X86_64) || defined(X32)
1254 # ifndef __X32_SYSCALL_BIT
1255 # define __X32_SYSCALL_BIT 0x40000000
1259 /* GETREGSET of NT_PRSTATUS tells us regset size,
1260 * which unambiguously detects i386.
1262 * Linux kernel distinguishes x86-64 and x32 processes
1263 * solely by looking at __X32_SYSCALL_BIT:
1264 * arch/x86/include/asm/compat.h::is_x32_task():
1265 * if (task_pt_regs(current)->orig_ax & __X32_SYSCALL_BIT)
1268 if (x86_io.iov_len == sizeof(i386_regs)) {
1269 scno = i386_regs.orig_eax;
1272 scno = x86_64_regs.orig_rax;
1274 if (scno & __X32_SYSCALL_BIT) {
1275 scno -= __X32_SYSCALL_BIT;
1280 /* cs = 0x33 for long mode (native 64 bit and x32)
1281 * cs = 0x23 for compatibility mode (32 bit)
1282 * ds = 0x2b for x32 mode (x86-64 in 32 bit)
1284 scno = x86_64_regs.orig_rax;
1285 switch (x86_64_regs.cs) {
1286 case 0x23: currpers = 1; break;
1288 if (x86_64_regs.ds == 0x2b) {
1290 scno &= ~__X32_SYSCALL_BIT;
1295 fprintf(stderr, "Unknown value CS=0x%08X while "
1296 "detecting personality of process "
1297 "PID=%d\n", (int)x86_64_regs.cs, tcp->pid);
1298 currpers = current_personality;
1302 /* This version analyzes the opcode of a syscall instruction.
1303 * (int 0x80 on i386 vs. syscall on x86-64)
1304 * It works, but is too complicated, and strictly speaking, unreliable.
1306 unsigned long call, rip = x86_64_regs.rip;
1307 /* sizeof(syscall) == sizeof(int 0x80) == 2 */
1310 call = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)rip, (char *)0);
1312 fprintf(stderr, "ptrace_peektext failed: %s\n",
1314 switch (call & 0xffff) {
1315 /* x86-64: syscall = 0x0f 0x05 */
1316 case 0x050f: currpers = 0; break;
1317 /* i386: int 0x80 = 0xcd 0x80 */
1318 case 0x80cd: currpers = 1; break;
1320 currpers = current_personality;
1322 "Unknown syscall opcode (0x%04X) while "
1323 "detecting personality of process "
1324 "PID=%d\n", (int)call, tcp->pid);
1330 /* If we are built for a x32 system, then personality 0 is x32
1331 * (not x86_64), and stracing of x86_64 apps is not supported.
1332 * Stracing of i386 apps is still supported.
1334 if (currpers == 0) {
1335 fprintf(stderr, "syscall_%lu(...) in unsupported "
1336 "64-bit mode of process PID=%d\n",
1340 currpers &= ~2; /* map 2,1 to 0,1 */
1342 update_personality(tcp, currpers);
1344 # define IA64_PSR_IS ((long)1 << 34)
1346 if (upeek(tcp->pid, PT_CR_IPSR, &psr) >= 0)
1347 ia32 = (psr & IA64_PSR_IS) != 0;
1349 if (upeek(tcp->pid, PT_R1, &scno) < 0)
1352 if (upeek(tcp->pid, PT_R15, &scno) < 0)
1355 #elif defined(AARCH64)
1356 switch (aarch64_io.iov_len) {
1357 case sizeof(aarch64_regs):
1358 /* We are in 64-bit mode */
1359 scno = aarch64_regs.regs[8];
1360 update_personality(tcp, 1);
1362 case sizeof(arm_regs):
1363 /* We are in 32-bit mode */
1364 scno = arm_regs.ARM_r7;
1365 update_personality(tcp, 0);
1369 if (arm_regs.ARM_ip != 0) {
1370 /* It is not a syscall entry */
1371 fprintf(stderr, "pid %d stray syscall exit\n", tcp->pid);
1372 tcp->flags |= TCB_INSYSCALL;
1375 /* Note: we support only 32-bit CPUs, not 26-bit */
1377 if (arm_regs.ARM_cpsr & 0x20) {
1379 scno = arm_regs.ARM_r7;
1383 scno = ptrace(PTRACE_PEEKTEXT, tcp->pid, (void *)(arm_regs.ARM_pc - 4), NULL);
1387 /* EABI syscall convention? */
1388 if (scno == 0xef000000) {
1389 scno = arm_regs.ARM_r7; /* yes */
1391 if ((scno & 0x0ff00000) != 0x0f900000) {
1392 fprintf(stderr, "pid %d unknown syscall trap 0x%08lx\n",
1396 /* Fixup the syscall number */
1401 scno = shuffle_scno(scno);
1403 if (upeek(tcp->pid, 4*PT_ORIG_D0, &scno) < 0)
1405 #elif defined(LINUX_MIPSN32)
1406 unsigned long long regs[38];
1408 if (ptrace(PTRACE_GETREGS, tcp->pid, NULL, (long) ®s) < 0)
1410 mips_a3 = regs[REG_A3];
1411 mips_r2 = regs[REG_V0];
1414 if (!SCNO_IN_RANGE(scno)) {
1415 if (mips_a3 == 0 || mips_a3 == -1) {
1417 fprintf(stderr, "stray syscall exit: v0 = %ld\n", scno);
1422 if (upeek(tcp->pid, REG_A3, &mips_a3) < 0)
1424 if (upeek(tcp->pid, REG_V0, &scno) < 0)
1427 if (!SCNO_IN_RANGE(scno)) {
1428 if (mips_a3 == 0 || mips_a3 == -1) {
1430 fprintf(stderr, "stray syscall exit: v0 = %ld\n", scno);
1434 #elif defined(ALPHA)
1435 if (upeek(tcp->pid, REG_A3, &alpha_a3) < 0)
1437 if (upeek(tcp->pid, REG_R0, &scno) < 0)
1441 * Do some sanity checks to figure out if it's
1442 * really a syscall entry
1444 if (!SCNO_IN_RANGE(scno)) {
1445 if (alpha_a3 == 0 || alpha_a3 == -1) {
1447 fprintf(stderr, "stray syscall exit: r0 = %ld\n", scno);
1451 #elif defined(SPARC) || defined(SPARC64)
1452 /* Disassemble the syscall trap. */
1453 /* Retrieve the syscall trap instruction. */
1456 # if defined(SPARC64)
1457 trap = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)sparc_regs.tpc, 0);
1460 trap = ptrace(PTRACE_PEEKTEXT, tcp->pid, (char *)sparc_regs.pc, 0);
1465 /* Disassemble the trap to see what personality to use. */
1468 /* Linux/SPARC syscall trap. */
1469 update_personality(tcp, 0);
1472 /* Linux/SPARC64 syscall trap. */
1473 update_personality(tcp, 2);
1476 /* SunOS syscall trap. (pers 1) */
1477 fprintf(stderr, "syscall: SunOS no support\n");
1480 /* Solaris 2.x syscall trap. (per 2) */
1481 update_personality(tcp, 1);
1484 /* NetBSD/FreeBSD syscall trap. */
1485 fprintf(stderr, "syscall: NetBSD/FreeBSD not supported\n");
1488 /* Solaris 2.x gettimeofday */
1489 update_personality(tcp, 1);
1492 # if defined(SPARC64)
1493 fprintf(stderr, "syscall: unknown syscall trap %08lx %016lx\n", trap, sparc_regs.tpc);
1495 fprintf(stderr, "syscall: unknown syscall trap %08lx %08lx\n", trap, sparc_regs.pc);
1500 /* Extract the system call number from the registers. */
1501 if (trap == 0x91d02027)
1504 scno = sparc_regs.u_regs[U_REG_G1];
1506 scno = sparc_regs.u_regs[U_REG_O0];
1507 memmove(&sparc_regs.u_regs[U_REG_O0], &sparc_regs.u_regs[U_REG_O1], 7*sizeof(sparc_regs.u_regs[0]));
1510 if (upeek(tcp->pid, PT_GR20, &scno) < 0)
1514 * In the new syscall ABI, the system call number is in R3.
1516 if (upeek(tcp->pid, 4*(REG_REG0+3), &scno) < 0)
1520 /* Odd as it may seem, a glibc bug has been known to cause
1521 glibc to issue bogus negative syscall numbers. So for
1522 our purposes, make strace print what it *should* have been */
1523 long correct_scno = (scno & 0xff);
1526 "Detected glibc bug: bogus system call"
1527 " number = %ld, correcting to %ld\n",
1530 scno = correct_scno;
1533 if (upeek(tcp->pid, REG_SYSCALL, &scno) < 0)
1536 #elif defined(CRISV10) || defined(CRISV32)
1537 if (upeek(tcp->pid, 4*PT_R9, &scno) < 0)
1541 scno = tile_regs.regs[10];
1545 # ifndef PT_FLAGS_COMPAT
1546 # define PT_FLAGS_COMPAT 0x10000 /* from Linux 3.8 on */
1548 if (tile_regs.flags & PT_FLAGS_COMPAT)
1553 update_personality(tcp, currpers);
1554 #elif defined(MICROBLAZE)
1555 if (upeek(tcp->pid, 0, &scno) < 0)
1558 scno = or1k_regs.gpr[11];
1559 #elif defined(METAG)
1560 scno = metag_regs.dx[0][1]; /* syscall number in D1Re0 (D1.0) */
1561 #elif defined(XTENSA)
1562 if (upeek(tcp->pid, SYSCALL_NR, &scno) < 0)
1567 if (SCNO_IS_VALID(tcp->scno)) {
1568 tcp->s_ent = &sysent[scno];
1569 tcp->qual_flg = qual_flags[scno];
1571 static const struct_sysent unknown = {
1574 .sys_func = printargs,
1575 .sys_name = "unknown", /* not used */
1577 tcp->s_ent = &unknown;
1578 tcp->qual_flg = UNDEFINED_SCNO | QUAL_RAW | DEFAULT_QUAL_FLAGS;
1583 /* Called at each syscall entry.
1585 * 0: "ignore this ptrace stop", bail out of trace_syscall_entering() silently.
1586 * 1: ok, continue in trace_syscall_entering().
1587 * other: error, trace_syscall_entering() should print error indicator
1588 * ("????" etc) and bail out.
1591 syscall_fixup_on_sysenter(struct tcb *tcp)
1593 /* A common case of "not a syscall entry" is post-execve SIGTRAP */
1595 if (i386_regs.eax != -ENOSYS) {
1597 fprintf(stderr, "not a syscall entry (eax = %ld)\n", i386_regs.eax);
1600 #elif defined(X86_64) || defined(X32)
1603 if (x86_io.iov_len == sizeof(i386_regs)) {
1604 /* Sign extend from 32 bits */
1605 rax = (int32_t)i386_regs.eax;
1607 /* Note: in X32 build, this truncates 64 to 32 bits */
1608 rax = x86_64_regs.rax;
1610 if (rax != -ENOSYS) {
1612 fprintf(stderr, "not a syscall entry (rax = %ld)\n", rax);
1616 #elif defined(S390) || defined(S390X)
1617 /* TODO: we already fetched PT_GPR2 in get_scno
1618 * and stored it in syscall_mode, reuse it here
1619 * instead of re-fetching?
1621 if (upeek(tcp->pid, PT_GPR2, &gpr2) < 0)
1623 if (syscall_mode != -ENOSYS)
1624 syscall_mode = tcp->scno;
1625 if (gpr2 != syscall_mode) {
1627 fprintf(stderr, "not a syscall entry (gpr2 = %ld)\n", gpr2);
1631 /* TODO? Eliminate upeek's in arches below like we did in x86 */
1632 if (upeek(tcp->pid, 4*PT_D0, &m68k_d0) < 0)
1634 if (m68k_d0 != -ENOSYS) {
1636 fprintf(stderr, "not a syscall entry (d0 = %ld)\n", m68k_d0);
1640 if (upeek(tcp->pid, PT_R10, &ia64_r10) < 0)
1642 if (upeek(tcp->pid, PT_R8, &ia64_r8) < 0)
1644 if (ia32 && ia64_r8 != -ENOSYS) {
1646 fprintf(stderr, "not a syscall entry (r8 = %ld)\n", ia64_r8);
1649 #elif defined(CRISV10) || defined(CRISV32)
1650 if (upeek(tcp->pid, 4*PT_R10, &cris_r10) < 0)
1652 if (cris_r10 != -ENOSYS) {
1654 fprintf(stderr, "not a syscall entry (r10 = %ld)\n", cris_r10);
1657 #elif defined(MICROBLAZE)
1658 if (upeek(tcp->pid, 3 * 4, µblaze_r3) < 0)
1660 if (microblaze_r3 != -ENOSYS) {
1662 fprintf(stderr, "not a syscall entry (r3 = %ld)\n", microblaze_r3);
1670 internal_fork(struct tcb *tcp)
1672 #if defined S390 || defined S390X || defined CRISV10 || defined CRISV32
1673 # define ARG_FLAGS 1
1675 # define ARG_FLAGS 0
1677 #ifndef CLONE_UNTRACED
1678 # define CLONE_UNTRACED 0x00800000
1680 if ((ptrace_setoptions
1681 & (PTRACE_O_TRACECLONE | PTRACE_O_TRACEFORK | PTRACE_O_TRACEVFORK))
1682 == (PTRACE_O_TRACECLONE | PTRACE_O_TRACEFORK | PTRACE_O_TRACEVFORK))
1688 if (entering(tcp)) {
1690 * We won't see the new child if clone is called with
1691 * CLONE_UNTRACED, so we keep the same logic with that option
1692 * and don't trace it.
1694 if ((tcp->s_ent->sys_func == sys_clone)
1695 && (tcp->u_arg[ARG_FLAGS] & CLONE_UNTRACED)
1700 if (tcp->flags & TCB_BPTSET)
1705 #if defined(TCB_WAITEXECVE)
1707 internal_exec(struct tcb *tcp)
1709 /* Maybe we have post-execve SIGTRAP suppressed? */
1710 if (ptrace_setoptions & PTRACE_O_TRACEEXEC)
1711 return; /* yes, no need to do anything */
1713 if (exiting(tcp) && syserror(tcp))
1714 /* Error in execve, no post-execve SIGTRAP expected */
1715 tcp->flags &= ~TCB_WAITEXECVE;
1717 tcp->flags |= TCB_WAITEXECVE;
1722 syscall_fixup_for_fork_exec(struct tcb *tcp)
1725 * We must always trace a few critical system calls in order to
1726 * correctly support following forks in the presence of tracing
1731 func = tcp->s_ent->sys_func;
1733 if ( sys_fork == func
1734 || sys_vfork == func
1735 || sys_clone == func
1741 #if defined(TCB_WAITEXECVE)
1742 if ( sys_execve == func
1743 # if defined(SPARC) || defined(SPARC64)
1744 || sys_execv == func
1753 /* Return -1 on error or 1 on success (never 0!) */
1755 get_syscall_args(struct tcb *tcp)
1759 nargs = tcp->s_ent->nargs;
1761 #if defined(S390) || defined(S390X)
1762 for (i = 0; i < nargs; ++i)
1763 if (upeek(tcp->pid, i==0 ? PT_ORIGGPR2 : PT_GPR2 + i*sizeof(long), &tcp->u_arg[i]) < 0)
1765 #elif defined(ALPHA)
1766 for (i = 0; i < nargs; ++i)
1767 if (upeek(tcp->pid, REG_A0+i, &tcp->u_arg[i]) < 0)
1771 unsigned long *out0, cfm, sof, sol;
1773 /* be backwards compatible with kernel < 2.4.4... */
1775 # define PT_RBS_END PT_AR_BSP
1778 if (upeek(tcp->pid, PT_RBS_END, &rbs_end) < 0)
1780 if (upeek(tcp->pid, PT_CFM, (long *) &cfm) < 0)
1783 sof = (cfm >> 0) & 0x7f;
1784 sol = (cfm >> 7) & 0x7f;
1785 out0 = ia64_rse_skip_regs((unsigned long *) rbs_end, -sof + sol);
1787 for (i = 0; i < nargs; ++i) {
1788 if (umoven(tcp, (unsigned long) ia64_rse_skip_regs(out0, i),
1789 sizeof(long), (char *) &tcp->u_arg[i]) < 0)
1793 static const int argreg[MAX_ARGS] = { PT_R11 /* EBX = out0 */,
1794 PT_R9 /* ECX = out1 */,
1795 PT_R10 /* EDX = out2 */,
1796 PT_R14 /* ESI = out3 */,
1797 PT_R15 /* EDI = out4 */,
1798 PT_R13 /* EBP = out5 */};
1800 for (i = 0; i < nargs; ++i) {
1801 if (upeek(tcp->pid, argreg[i], &tcp->u_arg[i]) < 0)
1803 /* truncate away IVE sign-extension */
1804 tcp->u_arg[i] &= 0xffffffff;
1807 #elif defined(LINUX_MIPSN32) || defined(LINUX_MIPSN64)
1808 /* N32 and N64 both use up to six registers. */
1809 unsigned long long regs[38];
1811 if (ptrace(PTRACE_GETREGS, tcp->pid, NULL, (long) ®s) < 0)
1814 for (i = 0; i < nargs; ++i) {
1815 tcp->u_arg[i] = regs[REG_A0 + i];
1816 # if defined(LINUX_MIPSN32)
1817 tcp->ext_arg[i] = regs[REG_A0 + i];
1824 if (upeek(tcp->pid, REG_SP, &sp) < 0)
1826 for (i = 0; i < 4; ++i)
1827 if (upeek(tcp->pid, REG_A0 + i, &tcp->u_arg[i]) < 0)
1829 umoven(tcp, sp + 16, (nargs - 4) * sizeof(tcp->u_arg[0]),
1830 (char *)(tcp->u_arg + 4));
1832 for (i = 0; i < nargs; ++i)
1833 if (upeek(tcp->pid, REG_A0 + i, &tcp->u_arg[i]) < 0)
1836 #elif defined(POWERPC)
1839 tcp->u_arg[0] = ppc_regs.orig_gpr3;
1840 tcp->u_arg[1] = ppc_regs.gpr[4];
1841 tcp->u_arg[2] = ppc_regs.gpr[5];
1842 tcp->u_arg[3] = ppc_regs.gpr[6];
1843 tcp->u_arg[4] = ppc_regs.gpr[7];
1844 tcp->u_arg[5] = ppc_regs.gpr[8];
1845 #elif defined(SPARC) || defined(SPARC64)
1846 for (i = 0; i < nargs; ++i)
1847 tcp->u_arg[i] = sparc_regs.u_regs[U_REG_O0 + i];
1849 for (i = 0; i < nargs; ++i)
1850 if (upeek(tcp->pid, PT_GR26-4*i, &tcp->u_arg[i]) < 0)
1852 #elif defined(ARM) || defined(AARCH64)
1853 # if defined(AARCH64)
1854 if (tcp->currpers == 1)
1855 for (i = 0; i < nargs; ++i)
1856 tcp->u_arg[i] = aarch64_regs.regs[i];
1859 for (i = 0; i < nargs; ++i)
1860 tcp->u_arg[i] = arm_regs.uregs[i];
1861 #elif defined(AVR32)
1864 tcp->u_arg[0] = avr32_regs.r12;
1865 tcp->u_arg[1] = avr32_regs.r11;
1866 tcp->u_arg[2] = avr32_regs.r10;
1867 tcp->u_arg[3] = avr32_regs.r9;
1868 tcp->u_arg[4] = avr32_regs.r5;
1869 tcp->u_arg[5] = avr32_regs.r3;
1871 static const int argreg[MAX_ARGS] = { PT_R0, PT_R1, PT_R2, PT_R3, PT_R4, PT_R5 };
1873 for (i = 0; i < nargs; ++i)
1874 if (upeek(tcp->pid, argreg[i], &tcp->u_arg[i]) < 0)
1877 static const int syscall_regs[MAX_ARGS] = {
1878 4 * (REG_REG0+4), 4 * (REG_REG0+5), 4 * (REG_REG0+6),
1879 4 * (REG_REG0+7), 4 * (REG_REG0 ), 4 * (REG_REG0+1)
1882 for (i = 0; i < nargs; ++i)
1883 if (upeek(tcp->pid, syscall_regs[i], &tcp->u_arg[i]) < 0)
1887 /* Registers used by SH5 Linux system calls for parameters */
1888 static const int syscall_regs[MAX_ARGS] = { 2, 3, 4, 5, 6, 7 };
1890 for (i = 0; i < nargs; ++i)
1891 if (upeek(tcp->pid, REG_GENERAL(syscall_regs[i]), &tcp->u_arg[i]) < 0)
1896 tcp->u_arg[0] = i386_regs.ebx;
1897 tcp->u_arg[1] = i386_regs.ecx;
1898 tcp->u_arg[2] = i386_regs.edx;
1899 tcp->u_arg[3] = i386_regs.esi;
1900 tcp->u_arg[4] = i386_regs.edi;
1901 tcp->u_arg[5] = i386_regs.ebp;
1902 #elif defined(X86_64) || defined(X32)
1905 if (x86_io.iov_len != sizeof(i386_regs)) {
1906 /* x86-64 or x32 ABI */
1907 tcp->u_arg[0] = x86_64_regs.rdi;
1908 tcp->u_arg[1] = x86_64_regs.rsi;
1909 tcp->u_arg[2] = x86_64_regs.rdx;
1910 tcp->u_arg[3] = x86_64_regs.r10;
1911 tcp->u_arg[4] = x86_64_regs.r8;
1912 tcp->u_arg[5] = x86_64_regs.r9;
1914 tcp->ext_arg[0] = x86_64_regs.rdi;
1915 tcp->ext_arg[1] = x86_64_regs.rsi;
1916 tcp->ext_arg[2] = x86_64_regs.rdx;
1917 tcp->ext_arg[3] = x86_64_regs.r10;
1918 tcp->ext_arg[4] = x86_64_regs.r8;
1919 tcp->ext_arg[5] = x86_64_regs.r9;
1923 /* Zero-extend from 32 bits */
1924 /* Use widen_to_long(tcp->u_arg[N]) in syscall handlers
1925 * if you need to use *sign-extended* parameter.
1927 tcp->u_arg[0] = (long)(uint32_t)i386_regs.ebx;
1928 tcp->u_arg[1] = (long)(uint32_t)i386_regs.ecx;
1929 tcp->u_arg[2] = (long)(uint32_t)i386_regs.edx;
1930 tcp->u_arg[3] = (long)(uint32_t)i386_regs.esi;
1931 tcp->u_arg[4] = (long)(uint32_t)i386_regs.edi;
1932 tcp->u_arg[5] = (long)(uint32_t)i386_regs.ebp;
1934 #elif defined(MICROBLAZE)
1935 for (i = 0; i < nargs; ++i)
1936 if (upeek(tcp->pid, (5 + i) * 4, &tcp->u_arg[i]) < 0)
1938 #elif defined(CRISV10) || defined(CRISV32)
1939 static const int crisregs[MAX_ARGS] = {
1940 4*PT_ORIG_R10, 4*PT_R11, 4*PT_R12,
1941 4*PT_R13 , 4*PT_MOF, 4*PT_SRP
1944 for (i = 0; i < nargs; ++i)
1945 if (upeek(tcp->pid, crisregs[i], &tcp->u_arg[i]) < 0)
1948 for (i = 0; i < nargs; ++i)
1949 tcp->u_arg[i] = tile_regs.regs[i];
1951 for (i = 0; i < nargs; ++i)
1952 if (upeek(tcp->pid, (i < 5 ? i : i + 2)*4, &tcp->u_arg[i]) < 0)
1956 for (i = 0; i < 6; ++i)
1957 tcp->u_arg[i] = or1k_regs.gpr[3 + i];
1958 #elif defined(METAG)
1959 for (i = 0; i < nargs; i++)
1960 /* arguments go backwards from D1Ar1 (D1.3) */
1961 tcp->u_arg[i] = ((unsigned long *)&metag_regs.dx[3][1])[-i];
1962 #elif defined(XTENSA)
1963 /* arg0: a6, arg1: a3, arg2: a4, arg3: a5, arg4: a8, arg5: a9 */
1964 static const int xtensaregs[MAX_ARGS] = { 6, 3, 4, 5, 8, 9 };
1965 for (i = 0; i < nargs; ++i)
1966 if (upeek(tcp->pid, REG_A_BASE + xtensaregs[i], &tcp->u_arg[i]) < 0)
1968 #else /* Other architecture (32bits specific) */
1969 for (i = 0; i < nargs; ++i)
1970 if (upeek(tcp->pid, i*4, &tcp->u_arg[i]) < 0)
1977 trace_syscall_entering(struct tcb *tcp)
1981 #if defined TCB_WAITEXECVE
1982 if (tcp->flags & TCB_WAITEXECVE) {
1983 /* This is the post-execve SIGTRAP. */
1984 tcp->flags &= ~TCB_WAITEXECVE;
1989 scno_good = res = (get_regs_error ? -1 : get_scno(tcp));
1993 res = syscall_fixup_on_sysenter(tcp);
1997 res = get_syscall_args(tcp);
2003 tprints("????" /* anti-trigraph gap */ "(");
2004 else if (tcp->qual_flg & UNDEFINED_SCNO)
2005 tprintf("%s(", undefined_scno_name(tcp));
2007 tprintf("%s(", tcp->s_ent->sys_name);
2009 * " <unavailable>" will be added later by the code which
2010 * detects ptrace errors.
2015 if ( sys_execve == tcp->s_ent->sys_func
2016 # if defined(SPARC) || defined(SPARC64)
2017 || sys_execv == tcp->s_ent->sys_func
2020 hide_log_until_execve = 0;
2023 #if defined(SYS_socket_subcall) || defined(SYS_ipc_subcall)
2025 # ifdef SYS_socket_subcall
2026 if (tcp->s_ent->sys_func == sys_socketcall) {
2027 decode_socket_subcall(tcp);
2031 # ifdef SYS_ipc_subcall
2032 if (tcp->s_ent->sys_func == sys_ipc) {
2033 decode_ipc_subcall(tcp);
2041 if (need_fork_exec_workarounds)
2042 syscall_fixup_for_fork_exec(tcp);
2044 if (!(tcp->qual_flg & QUAL_TRACE)
2045 || (tracing_paths && !pathtrace_match(tcp))
2047 tcp->flags |= TCB_INSYSCALL | TCB_FILTERED;
2051 tcp->flags &= ~TCB_FILTERED;
2053 if (cflag == CFLAG_ONLY_STATS || hide_log_until_execve) {
2059 if (tcp->qual_flg & UNDEFINED_SCNO)
2060 tprintf("%s(", undefined_scno_name(tcp));
2062 tprintf("%s(", tcp->s_ent->sys_name);
2063 if ((tcp->qual_flg & QUAL_RAW) && tcp->s_ent->sys_func != sys_exit)
2064 res = printargs(tcp);
2066 res = tcp->s_ent->sys_func(tcp);
2070 tcp->flags |= TCB_INSYSCALL;
2071 /* Measure the entrance time as late as possible to avoid errors. */
2073 gettimeofday(&tcp->etime, NULL);
2078 * 1: ok, continue in trace_syscall_exiting().
2079 * -1: error, trace_syscall_exiting() should print error indicator
2080 * ("????" etc) and bail out.
2083 get_syscall_result(struct tcb *tcp)
2085 #if defined(S390) || defined(S390X)
2086 if (upeek(tcp->pid, PT_GPR2, &gpr2) < 0)
2088 #elif defined(POWERPC)
2089 # define SO_MASK 0x10000000
2090 ppc_result = ppc_regs.gpr[3];
2091 if (ppc_regs.ccr & SO_MASK)
2092 ppc_result = -ppc_result;
2093 #elif defined(AVR32)
2094 /* already done by get_regs */
2096 if (upeek(tcp->pid, PT_R0, &bfin_r0) < 0)
2099 /* already done by get_regs */
2100 #elif defined(X86_64) || defined(X32)
2101 /* already done by get_regs */
2103 # define IA64_PSR_IS ((long)1 << 34)
2105 if (upeek(tcp->pid, PT_CR_IPSR, &psr) >= 0)
2106 ia32 = (psr & IA64_PSR_IS) != 0;
2107 if (upeek(tcp->pid, PT_R8, &ia64_r8) < 0)
2109 if (upeek(tcp->pid, PT_R10, &ia64_r10) < 0)
2112 /* already done by get_regs */
2113 #elif defined(AARCH64)
2114 /* register reading already done by get_regs */
2116 /* Used to do this, but we did it on syscall entry already: */
2117 /* We are in 64-bit mode (personality 1) if register struct is aarch64_regs,
2118 * else it's personality 0.
2120 /*update_personality(tcp, aarch64_io.iov_len == sizeof(aarch64_regs));*/
2122 if (upeek(tcp->pid, 4*PT_D0, &m68k_d0) < 0)
2124 #elif defined(LINUX_MIPSN32)
2125 unsigned long long regs[38];
2127 if (ptrace(PTRACE_GETREGS, tcp->pid, NULL, (long) ®s) < 0)
2129 mips_a3 = regs[REG_A3];
2130 mips_r2 = regs[REG_V0];
2132 if (upeek(tcp->pid, REG_A3, &mips_a3) < 0)
2134 if (upeek(tcp->pid, REG_V0, &mips_r2) < 0)
2136 #elif defined(ALPHA)
2137 if (upeek(tcp->pid, REG_A3, &alpha_a3) < 0)
2139 if (upeek(tcp->pid, REG_R0, &alpha_r0) < 0)
2141 #elif defined(SPARC) || defined(SPARC64)
2142 /* already done by get_regs */
2144 if (upeek(tcp->pid, PT_GR28, &hppa_r28) < 0)
2147 /* new syscall ABI returns result in R0 */
2148 if (upeek(tcp->pid, 4*REG_REG0, (long *)&sh_r0) < 0)
2151 /* ABI defines result returned in r9 */
2152 if (upeek(tcp->pid, REG_GENERAL(9), (long *)&sh64_r9) < 0)
2154 #elif defined(CRISV10) || defined(CRISV32)
2155 if (upeek(tcp->pid, 4*PT_R10, &cris_r10) < 0)
2158 /* already done by get_regs */
2159 #elif defined(MICROBLAZE)
2160 if (upeek(tcp->pid, 3 * 4, µblaze_r3) < 0)
2163 /* already done by get_regs */
2164 #elif defined(METAG)
2165 /* already done by get_regs */
2166 #elif defined(XTENSA)
2167 if (upeek(tcp->pid, REG_A_BASE + 2, &xtensa_a2) < 0)
2173 /* Called at each syscall exit */
2175 syscall_fixup_on_sysexit(struct tcb *tcp)
2177 #if defined(S390) || defined(S390X)
2178 if (syscall_mode != -ENOSYS)
2179 syscall_mode = tcp->scno;
2180 if ((tcp->flags & TCB_WAITEXECVE)
2181 && (gpr2 == -ENOSYS || gpr2 == tcp->scno)) {
2183 * Return from execve.
2184 * Fake a return value of zero. We leave the TCB_WAITEXECVE
2185 * flag set for the post-execve SIGTRAP to see and reset.
2193 * Check the syscall return value register value for whether it is
2194 * a negated errno code indicating an error, or a success return value.
2197 is_negated_errno(unsigned long int val)
2199 unsigned long int max = -(long int) nerrnos;
2200 #if SUPPORTED_PERSONALITIES > 1 && SIZEOF_LONG > 4
2201 if (current_wordsize < sizeof(val)) {
2202 val = (unsigned int) val;
2203 max = (unsigned int) max;
2211 is_negated_errno_x32(unsigned long long val)
2213 unsigned long long max = -(long long) nerrnos;
2215 * current_wordsize is 4 even in personality 0 (native X32)
2216 * but truncation _must not_ be done in it.
2217 * can't check current_wordsize here!
2219 if (current_personality != 0) {
2220 val = (uint32_t) val;
2221 max = (uint32_t) max;
2228 * 1: ok, continue in trace_syscall_exiting().
2229 * -1: error, trace_syscall_exiting() should print error indicator
2230 * ("????" etc) and bail out.
2233 get_error(struct tcb *tcp)
2236 int check_errno = 1;
2237 if (tcp->s_ent->sys_flags & SYSCALL_NEVER_FAILS) {
2240 #if defined(S390) || defined(S390X)
2241 if (check_errno && is_negated_errno(gpr2)) {
2249 if (check_errno && is_negated_errno(i386_regs.eax)) {
2251 u_error = -i386_regs.eax;
2254 tcp->u_rval = i386_regs.eax;
2256 #elif defined(X86_64)
2258 if (x86_io.iov_len == sizeof(i386_regs)) {
2259 /* Sign extend from 32 bits */
2260 rax = (int32_t)i386_regs.eax;
2262 rax = x86_64_regs.rax;
2264 if (check_errno && is_negated_errno(rax)) {
2272 /* In X32, return value is 64-bit (llseek uses one).
2273 * Using merely "long rax" would not work.
2276 if (x86_io.iov_len == sizeof(i386_regs)) {
2277 /* Sign extend from 32 bits */
2278 rax = (int32_t)i386_regs.eax;
2280 rax = x86_64_regs.rax;
2282 /* Careful: is_negated_errno() works only on longs */
2283 if (check_errno && is_negated_errno_x32(rax)) {
2288 tcp->u_rval = rax; /* truncating */
2296 if (check_errno && is_negated_errno(err)) {
2304 if (check_errno && ia64_r10) {
2308 tcp->u_rval = ia64_r8;
2312 if (check_errno && mips_a3) {
2316 tcp->u_rval = mips_r2;
2317 # if defined(LINUX_MIPSN32)
2318 tcp->u_lrval = mips_r2;
2321 #elif defined(POWERPC)
2322 if (check_errno && is_negated_errno(ppc_result)) {
2324 u_error = -ppc_result;
2327 tcp->u_rval = ppc_result;
2330 if (check_errno && is_negated_errno(m68k_d0)) {
2335 tcp->u_rval = m68k_d0;
2337 #elif defined(ARM) || defined(AARCH64)
2338 # if defined(AARCH64)
2339 if (tcp->currpers == 1) {
2340 if (check_errno && is_negated_errno(aarch64_regs.regs[0])) {
2342 u_error = -aarch64_regs.regs[0];
2345 tcp->u_rval = aarch64_regs.regs[0];
2351 if (check_errno && is_negated_errno(arm_regs.ARM_r0)) {
2353 u_error = -arm_regs.ARM_r0;
2356 tcp->u_rval = arm_regs.ARM_r0;
2359 #elif defined(AVR32)
2360 if (check_errno && avr32_regs.r12 && (unsigned) -avr32_regs.r12 < nerrnos) {
2362 u_error = -avr32_regs.r12;
2365 tcp->u_rval = avr32_regs.r12;
2368 if (check_errno && is_negated_errno(bfin_r0)) {
2372 tcp->u_rval = bfin_r0;
2374 #elif defined(ALPHA)
2375 if (check_errno && alpha_a3) {
2380 tcp->u_rval = alpha_r0;
2382 #elif defined(SPARC)
2383 if (check_errno && sparc_regs.psr & PSR_C) {
2385 u_error = sparc_regs.u_regs[U_REG_O0];
2388 tcp->u_rval = sparc_regs.u_regs[U_REG_O0];
2390 #elif defined(SPARC64)
2391 if (check_errno && sparc_regs.tstate & 0x1100000000UL) {
2393 u_error = sparc_regs.u_regs[U_REG_O0];
2396 tcp->u_rval = sparc_regs.u_regs[U_REG_O0];
2399 if (check_errno && is_negated_errno(hppa_r28)) {
2401 u_error = -hppa_r28;
2404 tcp->u_rval = hppa_r28;
2407 if (check_errno && is_negated_errno(sh_r0)) {
2412 tcp->u_rval = sh_r0;
2415 if (check_errno && is_negated_errno(sh64_r9)) {
2420 tcp->u_rval = sh64_r9;
2422 #elif defined(METAG)
2423 /* result pointer in D0Re0 (D0.0) */
2424 if (check_errno && is_negated_errno(metag_regs.dx[0][0])) {
2426 u_error = -metag_regs.dx[0][0];
2429 tcp->u_rval = metag_regs.dx[0][0];
2431 #elif defined(CRISV10) || defined(CRISV32)
2432 if (check_errno && cris_r10 && (unsigned) -cris_r10 < nerrnos) {
2434 u_error = -cris_r10;
2437 tcp->u_rval = cris_r10;
2441 * The standard tile calling convention returns the value (or negative
2442 * errno) in r0, and zero (or positive errno) in r1.
2443 * Until at least kernel 3.8, however, the r1 value is not reflected
2444 * in ptregs at this point, so we use r0 here.
2446 if (check_errno && is_negated_errno(tile_regs.regs[0])) {
2448 u_error = -tile_regs.regs[0];
2450 tcp->u_rval = tile_regs.regs[0];
2452 #elif defined(MICROBLAZE)
2453 if (check_errno && is_negated_errno(microblaze_r3)) {
2455 u_error = -microblaze_r3;
2458 tcp->u_rval = microblaze_r3;
2461 if (check_errno && is_negated_errno(or1k_regs.gpr[11])) {
2463 u_error = -or1k_regs.gpr[11];
2466 tcp->u_rval = or1k_regs.gpr[11];
2468 #elif defined(XTENSA)
2469 if (check_errno && is_negated_errno(xtensa_a2)) {
2471 u_error = -xtensa_a2;
2474 tcp->u_rval = xtensa_a2;
2477 tcp->u_error = u_error;
2481 dumpio(struct tcb *tcp)
2487 if ((unsigned long) tcp->u_arg[0] >= num_quals)
2489 func = tcp->s_ent->sys_func;
2490 if (func == printargs)
2492 if (qual_flags[tcp->u_arg[0]] & QUAL_READ) {
2493 if (func == sys_read ||
2494 func == sys_pread ||
2496 func == sys_recvfrom)
2497 dumpstr(tcp, tcp->u_arg[1], tcp->u_rval);
2498 else if (func == sys_readv)
2499 dumpiov(tcp, tcp->u_arg[2], tcp->u_arg[1]);
2502 if (qual_flags[tcp->u_arg[0]] & QUAL_WRITE) {
2503 if (func == sys_write ||
2504 func == sys_pwrite ||
2507 dumpstr(tcp, tcp->u_arg[1], tcp->u_arg[2]);
2508 else if (func == sys_writev)
2509 dumpiov(tcp, tcp->u_arg[2], tcp->u_arg[1]);
2515 trace_syscall_exiting(struct tcb *tcp)
2522 /* Measure the exit time as early as possible to avoid errors. */
2524 gettimeofday(&tv, NULL);
2526 #if SUPPORTED_PERSONALITIES > 1
2527 update_personality(tcp, tcp->currpers);
2529 res = (get_regs_error ? -1 : get_syscall_result(tcp));
2531 syscall_fixup_on_sysexit(tcp); /* never fails */
2532 get_error(tcp); /* never fails */
2533 if (need_fork_exec_workarounds)
2534 syscall_fixup_for_fork_exec(tcp);
2535 if (filtered(tcp) || hide_log_until_execve)
2540 struct timeval t = tv;
2541 count_syscall(tcp, &t);
2542 if (cflag == CFLAG_ONLY_STATS) {
2547 /* If not in -ff mode, and printing_tcp != tcp,
2548 * then the log currently does not end with output
2549 * of _our syscall entry_, but with something else.
2550 * We need to say which syscall's return is this.
2552 * Forced reprinting via TCB_REPRINT is used only by
2553 * "strace -ff -oLOG test/threaded_execve" corner case.
2554 * It's the only case when -ff mode needs reprinting.
2556 if ((followfork < 2 && printing_tcp != tcp) || (tcp->flags & TCB_REPRINT)) {
2557 tcp->flags &= ~TCB_REPRINT;
2559 if (tcp->qual_flg & UNDEFINED_SCNO)
2560 tprintf("<... %s resumed> ", undefined_scno_name(tcp));
2562 tprintf("<... %s resumed> ", tcp->s_ent->sys_name);
2567 /* There was error in one of prior ptrace ops */
2570 tprints("= ? <unavailable>\n");
2572 tcp->flags &= ~TCB_INSYSCALL;
2577 if (tcp->qual_flg & QUAL_RAW) {
2578 /* sys_res = printargs(tcp); - but it's nop on sysexit */
2580 /* FIXME: not_failing_only (IOW, option -z) is broken:
2581 * failure of syscall is known only after syscall return.
2582 * Thus we end up with something like this on, say, ENOENT:
2583 * open("doesnt_exist", O_RDONLY <unfinished ...>
2584 * {next syscall decode}
2585 * whereas the intended result is that open(...) line
2586 * is not shown at all.
2588 if (not_failing_only && tcp->u_error)
2589 goto ret; /* ignore failed syscalls */
2590 sys_res = tcp->s_ent->sys_func(tcp);
2595 u_error = tcp->u_error;
2596 if (tcp->qual_flg & QUAL_RAW) {
2598 tprintf("= -1 (errno %ld)", u_error);
2600 tprintf("= %#lx", tcp->u_rval);
2602 else if (!(sys_res & RVAL_NONE) && u_error) {
2604 /* Blocked signals do not interrupt any syscalls.
2605 * In this case syscalls don't return ERESTARTfoo codes.
2607 * Deadly signals set to SIG_DFL interrupt syscalls
2608 * and kill the process regardless of which of the codes below
2609 * is returned by the interrupted syscall.
2610 * In some cases, kernel forces a kernel-generated deadly
2611 * signal to be unblocked and set to SIG_DFL (and thus cause
2612 * death) if it is blocked or SIG_IGNed: for example, SIGSEGV
2613 * or SIGILL. (The alternative is to leave process spinning
2614 * forever on the faulty instruction - not useful).
2616 * SIG_IGNed signals and non-deadly signals set to SIG_DFL
2617 * (for example, SIGCHLD, SIGWINCH) interrupt syscalls,
2618 * but kernel will always restart them.
2621 /* Most common type of signal-interrupted syscall exit code.
2622 * The system call will be restarted with the same arguments
2623 * if SA_RESTART is set; otherwise, it will fail with EINTR.
2625 tprints("= ? ERESTARTSYS (To be restarted if SA_RESTART is set)");
2627 case ERESTARTNOINTR:
2628 /* Rare. For example, fork() returns this if interrupted.
2629 * SA_RESTART is ignored (assumed set): the restart is unconditional.
2631 tprints("= ? ERESTARTNOINTR (To be restarted)");
2633 case ERESTARTNOHAND:
2634 /* pause(), rt_sigsuspend() etc use this code.
2635 * SA_RESTART is ignored (assumed not set):
2636 * syscall won't restart (will return EINTR instead)
2637 * even after signal with SA_RESTART set. However,
2638 * after SIG_IGN or SIG_DFL signal it will restart
2639 * (thus the name "restart only if has no handler").
2641 tprints("= ? ERESTARTNOHAND (To be restarted if no handler)");
2643 case ERESTART_RESTARTBLOCK:
2644 /* Syscalls like nanosleep(), poll() which can't be
2645 * restarted with their original arguments use this
2646 * code. Kernel will execute restart_syscall() instead,
2647 * which changes arguments before restarting syscall.
2648 * SA_RESTART is ignored (assumed not set) similarly
2649 * to ERESTARTNOHAND. (Kernel can't honor SA_RESTART
2650 * since restart data is saved in "restart block"
2651 * in task struct, and if signal handler uses a syscall
2652 * which in turn saves another such restart block,
2653 * old data is lost and restart becomes impossible)
2655 tprints("= ? ERESTART_RESTARTBLOCK (Interrupted by signal)");
2659 tprintf("= -1 E??? (errno %ld)", u_error);
2660 else if (u_error < nerrnos)
2661 tprintf("= -1 %s (%s)", errnoent[u_error],
2664 tprintf("= -1 ERRNO_%ld (%s)", u_error,
2668 if ((sys_res & RVAL_STR) && tcp->auxstr)
2669 tprintf(" (%s)", tcp->auxstr);
2672 if (sys_res & RVAL_NONE)
2675 switch (sys_res & RVAL_MASK) {
2677 tprintf("= %#lx", tcp->u_rval);
2680 tprintf("= %#lo", tcp->u_rval);
2683 tprintf("= %lu", tcp->u_rval);
2686 tprintf("= %ld", tcp->u_rval);
2688 #if defined(LINUX_MIPSN32) || defined(X32)
2691 tprintf("= %#llx", tcp->u_lrval);
2694 tprintf("= %#llo", tcp->u_lrval);
2697 case RVAL_LUDECIMAL:
2698 tprintf("= %llu", tcp->u_lrval);
2702 tprintf("= %lld", tcp->u_lrval);
2708 "invalid rval format\n");
2712 if ((sys_res & RVAL_STR) && tcp->auxstr)
2713 tprintf(" (%s)", tcp->auxstr);
2716 tv_sub(&tv, &tv, &tcp->etime);
2717 tprintf(" <%ld.%06ld>",
2718 (long) tv.tv_sec, (long) tv.tv_usec);
2725 tcp->flags &= ~TCB_INSYSCALL;
2730 trace_syscall(struct tcb *tcp)
2732 return exiting(tcp) ?
2733 trace_syscall_exiting(tcp) : trace_syscall_entering(tcp);