2 * Copyright (c) 1991, 1992 Paul Kranenburg <pk@cs.few.eur.nl>
3 * Copyright (c) 1993 Branko Lankester <branko@hacktic.nl>
4 * Copyright (c) 1993, 1994, 1995, 1996 Rick Sladkey <jrs@world.std.com>
5 * Copyright (c) 1996-1999 Wichert Akkerman <wichert@cistron.nl>
6 * Copyright (c) 1999 IBM Deutschland Entwicklung GmbH, IBM Corporation
7 * Linux for s390 port by D.J. Barrow
8 * <barrow_dj@mail.yahoo.com,djbarrow@de.ibm.com>
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. The name of the author may not be used to endorse or promote products
20 * derived from this software without specific prior written permission.
22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36 #include <sys/param.h>
43 # include <asm/ptrace_offsets.h>
49 #elif defined(HAVE_LINUX_PTRACE_H)
50 # undef PTRACE_SYSCALL
51 # ifdef HAVE_STRUCT_IA64_FPREG
52 # define ia64_fpreg XXX_ia64_fpreg
54 # ifdef HAVE_STRUCT_PT_ALL_USER_REGS
55 # define pt_all_user_regs XXX_pt_all_user_regs
57 # ifdef HAVE_STRUCT_PTRACE_PEEKSIGINFO_ARGS
58 # define ptrace_peeksiginfo_args XXX_ptrace_peeksiginfo_args
60 # include <linux/ptrace.h>
61 # undef ptrace_peeksiginfo_args
63 # undef pt_all_user_regs
67 string_to_uint(const char *str)
75 value = strtol(str, &error, 10);
76 if (errno || *error || value < 0 || (long)(int)value != value)
82 tv_nz(const struct timeval *a)
84 return a->tv_sec || a->tv_usec;
88 tv_cmp(const struct timeval *a, const struct timeval *b)
90 if (a->tv_sec < b->tv_sec
91 || (a->tv_sec == b->tv_sec && a->tv_usec < b->tv_usec))
93 if (a->tv_sec > b->tv_sec
94 || (a->tv_sec == b->tv_sec && a->tv_usec > b->tv_usec))
100 tv_float(const struct timeval *tv)
102 return tv->tv_sec + tv->tv_usec/1000000.0;
106 tv_add(struct timeval *tv, const struct timeval *a, const struct timeval *b)
108 tv->tv_sec = a->tv_sec + b->tv_sec;
109 tv->tv_usec = a->tv_usec + b->tv_usec;
110 if (tv->tv_usec >= 1000000) {
112 tv->tv_usec -= 1000000;
117 tv_sub(struct timeval *tv, const struct timeval *a, const struct timeval *b)
119 tv->tv_sec = a->tv_sec - b->tv_sec;
120 tv->tv_usec = a->tv_usec - b->tv_usec;
121 if (((long) tv->tv_usec) < 0) {
123 tv->tv_usec += 1000000;
128 tv_div(struct timeval *tv, const struct timeval *a, int n)
130 tv->tv_usec = (a->tv_sec % n * 1000000 + a->tv_usec + n / 2) / n;
131 tv->tv_sec = a->tv_sec / n + tv->tv_usec / 1000000;
132 tv->tv_usec %= 1000000;
136 tv_mul(struct timeval *tv, const struct timeval *a, int n)
138 tv->tv_usec = a->tv_usec * n;
139 tv->tv_sec = a->tv_sec * n + tv->tv_usec / 1000000;
140 tv->tv_usec %= 1000000;
144 xlookup(const struct xlat *xlat, int val)
146 for (; xlat->str != NULL; xlat++)
147 if (xlat->val == val)
152 #if !defined HAVE_STPCPY
154 stpcpy(char *dst, const char *src)
156 while ((*dst = *src++) != '\0')
162 /* Find a next bit which is set.
163 * Starts testing at cur_bit.
164 * Returns -1 if no more bits are set.
166 * We never touch bytes we don't need to.
167 * On big-endian, array is assumed to consist of
168 * current_wordsize wide words: for example, is current_wordsize is 4,
169 * the bytes are walked in 3,2,1,0, 7,6,5,4, 11,10,9,8 ... sequence.
170 * On little-endian machines, word size is immaterial.
173 next_set_bit(const void *bit_array, unsigned cur_bit, unsigned size_bits)
175 const unsigned endian = 1;
176 int little_endian = *(char*)&endian;
178 const uint8_t *array = bit_array;
179 unsigned pos = cur_bit / 8;
180 unsigned pos_xor_mask = little_endian ? 0 : current_wordsize-1;
186 if (cur_bit >= size_bits)
188 cur_byte = array[pos ^ pos_xor_mask];
190 cur_bit = (cur_bit + 8) & (-8);
194 bitmask = 1 << (cur_bit & 7);
196 if (cur_byte & bitmask)
199 if (cur_bit >= size_bits)
202 /* This check *can't be* optimized out: */
210 * Print entry in struct xlat table, if there.
213 printxval(const struct xlat *xlat, int val, const char *dflt)
215 const char *str = xlookup(xlat, val);
220 tprintf("%#x /* %s */", val, dflt);
224 * Print 64bit argument at position arg_no and return the index of the next
228 printllval(struct tcb *tcp, const char *format, int arg_no, bool align)
230 #if SIZEOF_LONG > 4 && SIZEOF_LONG == SIZEOF_LONG_LONG
231 # if SUPPORTED_PERSONALITIES > 1
232 if (current_wordsize > 4) {
234 tprintf(format, tcp->u_arg[arg_no]);
236 # if SUPPORTED_PERSONALITIES > 1
238 # if defined(AARCH64) || defined(POWERPC64)
240 /* Align arg_no to the next even number. */
241 arg_no = (arg_no + 1) & 0xe;
244 tprintf(format, LONG_LONG(tcp->u_arg[arg_no], tcp->u_arg[arg_no + 1]));
247 # endif /* SUPPORTED_PERSONALITIES */
248 #elif SIZEOF_LONG > 4
249 # error Unsupported configuration: SIZEOF_LONG > 4 && SIZEOF_LONG_LONG > SIZEOF_LONG
250 #elif defined LINUX_MIPSN32
251 tprintf(format, tcp->ext_arg[arg_no]);
254 if (current_personality == 0) {
255 tprintf(format, tcp->ext_arg[arg_no]);
258 tprintf(format, LONG_LONG(tcp->u_arg[arg_no], tcp->u_arg[arg_no + 1]));
262 # if defined __ARM_EABI__ || \
263 defined LINUX_MIPSO32 || \
267 /* Align arg_no to the next even number. */
268 arg_no = (arg_no + 1) & 0xe;
271 tprintf(format, LONG_LONG(tcp->u_arg[arg_no], tcp->u_arg[arg_no + 1]));
279 * Interpret `xlat' as an array of flags
280 * print the entries whose bits are on in `flags'
281 * return # of flags printed.
284 addflags(const struct xlat *xlat, int flags)
286 for (; xlat->str; xlat++) {
287 if (xlat->val && (flags & xlat->val) == xlat->val) {
288 tprintf("|%s", xlat->str);
293 tprintf("|%#x", flags);
298 * Interpret `xlat' as an array of flags.
299 * Print to static string the entries whose bits are on in `flags'
300 * Return static string.
303 sprintflags(const char *prefix, const struct xlat *xlat, int flags)
305 static char outstr[1024];
309 outptr = stpcpy(outstr, prefix);
311 for (; xlat->str; xlat++) {
312 if ((flags & xlat->val) == xlat->val) {
315 outptr = stpcpy(outptr, xlat->str);
325 outptr += sprintf(outptr, "%#x", flags);
332 printflags(const struct xlat *xlat, int flags, const char *dflt)
337 if (flags == 0 && xlat->val == 0) {
343 for (n = 0; xlat->str; xlat++) {
344 if (xlat->val && (flags & xlat->val) == xlat->val) {
345 tprintf("%s%s", sep, xlat->str);
354 tprintf("%s%#x", sep, flags);
359 tprintf("%#x", flags);
361 tprintf(" /* %s */", dflt);
372 printnum(struct tcb *tcp, long addr, const char *fmt)
380 if (umove(tcp, addr, &num) < 0) {
381 tprintf("%#lx", addr);
390 printnum_int(struct tcb *tcp, long addr, const char *fmt)
398 if (umove(tcp, addr, &num) < 0) {
399 tprintf("%#lx", addr);
408 printfd(struct tcb *tcp, int fd)
410 char path[PATH_MAX + 1];
412 if (show_fd_path && getfdpath(tcp, fd, path, sizeof(path)) >= 0)
413 tprintf("%d<%s>", fd, path);
419 printuid(const char *text, unsigned long uid)
421 tprintf((uid == -1) ? "%s%ld" : "%s%lu", text, uid);
425 * Quote string `instr' of length `size'
426 * Write up to (3 + `size' * 4) bytes to `outstr' buffer.
427 * If `len' is -1, treat `instr' as a NUL-terminated string
428 * and quote at most (`size' - 1) bytes.
430 * Returns 0 if len == -1 and NUL was seen, 1 otherwise.
431 * Note that if len >= 0, always returns 1.
434 string_quote(const char *instr, char *outstr, long len, int size)
436 const unsigned char *ustr = (const unsigned char *) instr;
438 int usehex, c, i, eol;
440 eol = 0x100; /* this can never match a char */
450 /* Check for presence of symbol which require
451 to hex-quote the whole string. */
452 for (i = 0; i < size; ++i) {
454 /* Check for NUL-terminated string. */
458 /* Force hex unless c is printable or whitespace */
463 /* In ASCII isspace is only these chars: "\t\n\v\f\r".
464 * They happen to have ASCII codes 9,10,11,12,13.
466 if (c < ' ' && (unsigned)(c - 9) >= 5) {
476 /* Hex-quote the whole string. */
477 for (i = 0; i < size; ++i) {
479 /* Check for NUL-terminated string. */
484 *s++ = "0123456789abcdef"[c >> 4];
485 *s++ = "0123456789abcdef"[c & 0xf];
488 for (i = 0; i < size; ++i) {
490 /* Check for NUL-terminated string. */
494 case '\"': case '\\':
519 if (c >= ' ' && c <= 0x7e)
525 && ustr[i + 1] >= '0'
526 && ustr[i + 1] <= '9'
529 *s++ = '0' + (c >> 6);
530 *s++ = '0' + ((c >> 3) & 0x7);
535 *s++ = '0' + (c >> 6);
536 *s++ = '0' + ((c >> 3) & 0x7);
539 *s++ = '0' + (c & 0x7);
549 /* Return zero if we printed entire ASCIZ string (didn't truncate it) */
550 if (len == -1 && ustr[i] == '\0') {
551 /* We didn't see NUL yet (otherwise we'd jump to 'asciz_ended')
552 * but next char is NUL.
562 /* Return zero: we printed entire ASCIZ string (didn't truncate it) */
567 * Print path string specified by address `addr' and length `n'.
568 * If path length exceeds `n', append `...' to the output.
571 printpathn(struct tcb *tcp, long addr, int n)
573 char path[MAXPATHLEN + 1];
581 /* Cap path length to the path buffer size */
582 if (n > sizeof path - 1)
585 /* Fetch one byte more to find out whether path length > n. */
586 nul_seen = umovestr(tcp, addr, n + 1, path);
588 tprintf("%#lx", addr);
594 outstr = alloca(4 * n); /* 4*(n-1) + 3 for quotes and NUL */
595 string_quote(path, outstr, -1, n);
603 printpath(struct tcb *tcp, long addr)
605 /* Size must correspond to char path[] size in printpathn */
606 printpathn(tcp, addr, MAXPATHLEN);
610 * Print string specified by address `addr' and length `len'.
611 * If `len' < 0, treat the string as a NUL-terminated string.
612 * If string length exceeds `max_strlen', append `...' to the output.
615 printstr(struct tcb *tcp, long addr, long len)
617 static char *str = NULL;
626 /* Allocate static buffers if they are not allocated yet. */
628 unsigned int outstr_size = 4 * max_strlen + /*for quotes and NUL:*/ 3;
630 if (outstr_size / 4 != max_strlen)
632 str = malloc(max_strlen + 1);
635 outstr = malloc(outstr_size);
642 * Treat as a NUL-terminated string: fetch one byte more
643 * because string_quote() quotes one byte less.
645 size = max_strlen + 1;
646 if (umovestr(tcp, addr, size, str) < 0) {
647 tprintf("%#lx", addr);
653 if (size > (unsigned long)len)
654 size = (unsigned long)len;
655 if (umoven(tcp, addr, size, str) < 0) {
656 tprintf("%#lx", addr);
661 /* If string_quote didn't see NUL and (it was supposed to be ASCIZ str
662 * or we were requested to print more than -s NUM chars)...
664 ellipsis = (string_quote(str, outstr, len, size) &&
665 (len < 0 || len > max_strlen));
674 dumpiov(struct tcb *tcp, int len, long addr)
676 #if SUPPORTED_PERSONALITIES > 1
678 struct { u_int32_t base; u_int32_t len; } *iov32;
679 struct { u_int64_t base; u_int64_t len; } *iov64;
681 #define iov iovu.iov64
683 (current_wordsize == 4 ? sizeof(*iovu.iov32) : sizeof(*iovu.iov64))
684 #define iov_iov_base(i) \
685 (current_wordsize == 4 ? (uint64_t) iovu.iov32[i].base : iovu.iov64[i].base)
686 #define iov_iov_len(i) \
687 (current_wordsize == 4 ? (uint64_t) iovu.iov32[i].len : iovu.iov64[i].len)
690 #define sizeof_iov sizeof(*iov)
691 #define iov_iov_base(i) iov[i].iov_base
692 #define iov_iov_len(i) iov[i].iov_len
697 size = sizeof_iov * len;
698 /* Assuming no sane program has millions of iovs */
699 if ((unsigned)len > 1024*1024 /* insane or negative size? */
700 || (iov = malloc(size)) == NULL) {
701 fprintf(stderr, "Out of memory\n");
704 if (umoven(tcp, addr, size, (char *) iov) >= 0) {
705 for (i = 0; i < len; i++) {
706 /* include the buffer number to make it easy to
707 * match up the trace with the source */
708 tprintf(" * %lu bytes in buffer %d\n",
709 (unsigned long)iov_iov_len(i), i);
710 dumpstr(tcp, (long) iov_iov_base(i),
723 dumpstr(struct tcb *tcp, long addr, int len)
725 static int strsize = -1;
726 static unsigned char *str;
731 "xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx "
732 "1234567890123456") + /*in case I'm off by few:*/ 4)
733 /*align to 8 to make memset easier:*/ + 7) & -8
735 const unsigned char *src;
738 memset(outbuf, ' ', sizeof(outbuf));
740 if (strsize < len + 16) {
742 str = malloc(len + 16);
745 fprintf(stderr, "Out of memory\n");
751 if (umoven(tcp, addr, len, (char *) str) < 0)
754 /* Space-pad to 16 bytes */
766 *dst++ = "0123456789abcdef"[*src >> 4];
767 *dst++ = "0123456789abcdef"[*src & 0xf];
773 dst++; /* space is there by memset */
776 dst++; /* space is there by memset */
783 if (*src >= ' ' && *src < 0x7f)
790 tprintf(" | %05x %s |\n", i - 16, outbuf);
794 #ifdef HAVE_PROCESS_VM_READV
795 /* C library supports this, but the kernel might not. */
796 static bool process_vm_readv_not_supported = 0;
799 /* Need to do this since process_vm_readv() is not yet available in libc.
800 * When libc is be updated, only "static bool process_vm_readv_not_supported"
801 * line should remain.
803 #if !defined(__NR_process_vm_readv)
805 # define __NR_process_vm_readv 347
806 # elif defined(X86_64)
807 # define __NR_process_vm_readv 310
808 # elif defined(POWERPC)
809 # define __NR_process_vm_readv 351
813 #if defined(__NR_process_vm_readv)
814 static bool process_vm_readv_not_supported = 0;
815 /* Have to avoid duplicating with the C library headers. */
816 static ssize_t strace_process_vm_readv(pid_t pid,
817 const struct iovec *lvec,
818 unsigned long liovcnt,
819 const struct iovec *rvec,
820 unsigned long riovcnt,
823 return syscall(__NR_process_vm_readv, (long)pid, lvec, liovcnt, rvec, riovcnt, flags);
825 #define process_vm_readv strace_process_vm_readv
827 static bool process_vm_readv_not_supported = 1;
828 # define process_vm_readv(...) (errno = ENOSYS, -1)
831 #endif /* end of hack */
833 #define PAGMASK (~(PAGSIZ - 1))
835 * move `len' bytes of data from process `pid'
836 * at address `addr' to our space at `laddr'
839 umoven(struct tcb *tcp, long addr, int len, char *laddr)
845 char x[sizeof(long)];
848 #if SUPPORTED_PERSONALITIES > 1 && SIZEOF_LONG > 4
849 if (current_wordsize < sizeof(addr))
850 addr &= (1ul << 8 * current_wordsize) - 1;
853 if (!process_vm_readv_not_supported) {
854 struct iovec local[1], remote[1];
857 local[0].iov_base = laddr;
858 remote[0].iov_base = (void*)addr;
859 local[0].iov_len = remote[0].iov_len = len;
860 r = process_vm_readv(pid, local, 1, remote, 1, 0);
864 error_msg("umoven: short read (%d < %d) @0x%lx",
870 process_vm_readv_not_supported = 1;
873 /* the process is gone */
875 case EFAULT: case EIO: case EPERM:
876 /* address space is inaccessible */
879 /* all the rest is strange and should be reported */
880 perror_msg("process_vm_readv");
886 if (addr & (sizeof(long) - 1)) {
887 /* addr not a multiple of sizeof(long) */
888 n = addr - (addr & -sizeof(long)); /* residue */
889 addr &= -sizeof(long); /* residue */
891 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *) addr, 0);
895 case ESRCH: case EINVAL:
896 /* these could be seen if the process is gone */
898 case EFAULT: case EIO: case EPERM:
899 /* address space is inaccessible */
902 /* all the rest is strange and should be reported */
903 perror_msg("umoven: PTRACE_PEEKDATA pid:%d @0x%lx",
907 m = MIN(sizeof(long) - n, len);
908 memcpy(laddr, &u.x[n], m);
909 addr += sizeof(long);
916 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *) addr, 0);
920 case ESRCH: case EINVAL:
921 /* these could be seen if the process is gone */
923 case EFAULT: case EIO: case EPERM:
924 /* address space is inaccessible */
926 perror_msg("umoven: short read (%d < %d) @0x%lx",
927 nread, nread + len, addr - nread);
931 /* all the rest is strange and should be reported */
932 perror_msg("umoven: PTRACE_PEEKDATA pid:%d @0x%lx",
936 m = MIN(sizeof(long), len);
937 memcpy(laddr, u.x, m);
938 addr += sizeof(long);
948 * Like `umove' but make the additional effort of looking
949 * for a terminating zero byte.
951 * Returns < 0 on error, > 0 if NUL was seen,
952 * (TODO if useful: return count of bytes including NUL),
953 * else 0 if len bytes were read but no NUL byte seen.
955 * Note: there is no guarantee we won't overwrite some bytes
956 * in laddr[] _after_ terminating NUL (but, of course,
957 * we never write past laddr[len-1]).
960 umovestr(struct tcb *tcp, long addr, int len, char *laddr)
963 const unsigned long x01010101 = 0x01010101ul;
964 const unsigned long x80808080 = 0x80808080ul;
965 #elif SIZEOF_LONG == 8
966 const unsigned long x01010101 = 0x0101010101010101ul;
967 const unsigned long x80808080 = 0x8080808080808080ul;
969 # error SIZEOF_LONG > 8
976 char x[sizeof(long)];
979 #if SUPPORTED_PERSONALITIES > 1 && SIZEOF_LONG > 4
980 if (current_wordsize < sizeof(addr))
981 addr &= (1ul << 8 * current_wordsize) - 1;
985 if (!process_vm_readv_not_supported) {
986 struct iovec local[1], remote[1];
988 local[0].iov_base = laddr;
989 remote[0].iov_base = (void*)addr;
996 /* Don't read kilobytes: most strings are short */
1000 /* Don't cross pages. I guess otherwise we can get EFAULT
1001 * and fail to notice that terminating NUL lies
1002 * in the existing (first) page.
1003 * (I hope there aren't arches with pages < 4K)
1005 end_in_page = ((addr + chunk_len) & 4095);
1006 r = chunk_len - end_in_page;
1007 if (r > 0) /* if chunk_len > end_in_page */
1008 chunk_len = r; /* chunk_len -= end_in_page */
1010 local[0].iov_len = remote[0].iov_len = chunk_len;
1011 r = process_vm_readv(pid, local, 1, remote, 1, 0);
1013 if (memchr(local[0].iov_base, '\0', r))
1015 local[0].iov_base += r;
1016 remote[0].iov_base += r;
1023 process_vm_readv_not_supported = 1;
1024 goto vm_readv_didnt_work;
1026 /* the process is gone */
1028 case EFAULT: case EIO: case EPERM:
1029 /* address space is inaccessible */
1031 perror_msg("umovestr: short read (%d < %d) @0x%lx",
1032 nread, nread + len, addr);
1036 /* all the rest is strange and should be reported */
1037 perror_msg("process_vm_readv");
1043 vm_readv_didnt_work:
1045 if (addr & (sizeof(long) - 1)) {
1046 /* addr not a multiple of sizeof(long) */
1047 n = addr - (addr & -sizeof(long)); /* residue */
1048 addr &= -sizeof(long); /* residue */
1050 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *)addr, 0);
1054 case ESRCH: case EINVAL:
1055 /* these could be seen if the process is gone */
1057 case EFAULT: case EIO: case EPERM:
1058 /* address space is inaccessible */
1061 /* all the rest is strange and should be reported */
1062 perror_msg("umovestr: PTRACE_PEEKDATA pid:%d @0x%lx",
1066 m = MIN(sizeof(long) - n, len);
1067 memcpy(laddr, &u.x[n], m);
1068 while (n & (sizeof(long) - 1))
1069 if (u.x[n++] == '\0')
1071 addr += sizeof(long);
1079 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *)addr, 0);
1083 case ESRCH: case EINVAL:
1084 /* these could be seen if the process is gone */
1086 case EFAULT: case EIO: case EPERM:
1087 /* address space is inaccessible */
1089 perror_msg("umovestr: short read (%d < %d) @0x%lx",
1090 nread, nread + len, addr - nread);
1094 /* all the rest is strange and should be reported */
1095 perror_msg("umovestr: PTRACE_PEEKDATA pid:%d @0x%lx",
1099 m = MIN(sizeof(long), len);
1100 memcpy(laddr, u.x, m);
1101 /* "If a NUL char exists in this word" */
1102 if ((u.val - x01010101) & ~u.val & x80808080)
1104 addr += sizeof(long);
1113 upeek(int pid, long off, long *res)
1118 val = ptrace(PTRACE_PEEKUSER, (pid_t)pid, (char *) off, 0);
1119 if (val == -1 && errno) {
1120 if (errno != ESRCH) {
1121 perror_msg("upeek: PTRACE_PEEKUSER pid:%d @0x%lx)", pid, off);
1129 /* Note! On new kernels (about 2.5.46+), we use PTRACE_O_TRACECLONE
1130 * and PTRACE_O_TRACE[V]FORK for tracing children.
1131 * If you are adding a new arch which is only supported by newer kernels,
1132 * you most likely don't need to add any code below
1133 * beside a dummy "return 0" block in change_syscall().
1137 * These #if's are huge, please indent them correctly.
1138 * It's easy to get confused otherwise.
1141 #include "syscall.h"
1143 #ifndef CLONE_PTRACE
1144 # define CLONE_PTRACE 0x00002000
1147 # define CLONE_VFORK 0x00004000
1150 # define CLONE_VM 0x00000100
1155 typedef unsigned long *arg_setup_state;
1158 arg_setup(struct tcb *tcp, arg_setup_state *state)
1160 unsigned long cfm, sof, sol;
1163 if (ia64_ia32mode) {
1164 /* Satisfy a false GCC warning. */
1169 if (upeek(tcp->pid, PT_AR_BSP, &bsp) < 0)
1171 if (upeek(tcp->pid, PT_CFM, (long *) &cfm) < 0)
1174 sof = (cfm >> 0) & 0x7f;
1175 sol = (cfm >> 7) & 0x7f;
1176 bsp = (long) ia64_rse_skip_regs((unsigned long *) bsp, -sof + sol);
1178 *state = (unsigned long *) bsp;
1182 # define arg_finish_change(tcp, state) 0
1185 get_arg0(struct tcb *tcp, arg_setup_state *state, long *valp)
1190 ret = upeek(tcp->pid, PT_R11, valp);
1193 (unsigned long) ia64_rse_skip_regs(*state, 0),
1194 sizeof(long), (void *) valp);
1199 get_arg1(struct tcb *tcp, arg_setup_state *state, long *valp)
1204 ret = upeek(tcp->pid, PT_R9, valp);
1207 (unsigned long) ia64_rse_skip_regs(*state, 1),
1208 sizeof(long), (void *) valp);
1213 set_arg0(struct tcb *tcp, arg_setup_state *state, long val)
1215 int req = PTRACE_POKEDATA;
1218 if (ia64_ia32mode) {
1219 ap = (void *) (intptr_t) PT_R11; /* r11 == EBX */
1220 req = PTRACE_POKEUSER;
1222 ap = ia64_rse_skip_regs(*state, 0);
1224 ptrace(req, tcp->pid, ap, val);
1225 return errno ? -1 : 0;
1229 set_arg1(struct tcb *tcp, arg_setup_state *state, long val)
1231 int req = PTRACE_POKEDATA;
1234 if (ia64_ia32mode) {
1235 ap = (void *) (intptr_t) PT_R9; /* r9 == ECX */
1236 req = PTRACE_POKEUSER;
1238 ap = ia64_rse_skip_regs(*state, 1);
1240 ptrace(req, tcp->pid, ap, val);
1241 return errno ? -1 : 0;
1244 /* ia64 does not return the input arguments from functions (and syscalls)
1245 according to ia64 RSE (Register Stack Engine) behavior. */
1247 # define restore_arg0(tcp, state, val) ((void) (state), 0)
1248 # define restore_arg1(tcp, state, val) ((void) (state), 0)
1250 #elif defined(SPARC) || defined(SPARC64)
1252 # if defined(SPARC64)
1253 # undef PTRACE_GETREGS
1254 # define PTRACE_GETREGS PTRACE_GETREGS64
1255 # undef PTRACE_SETREGS
1256 # define PTRACE_SETREGS PTRACE_SETREGS64
1259 typedef struct pt_regs arg_setup_state;
1261 # define arg_setup(tcp, state) \
1262 (ptrace(PTRACE_GETREGS, (tcp)->pid, (char *) (state), 0))
1263 # define arg_finish_change(tcp, state) \
1264 (ptrace(PTRACE_SETREGS, (tcp)->pid, (char *) (state), 0))
1266 # define get_arg0(tcp, state, valp) (*(valp) = (state)->u_regs[U_REG_O0], 0)
1267 # define get_arg1(tcp, state, valp) (*(valp) = (state)->u_regs[U_REG_O1], 0)
1268 # define set_arg0(tcp, state, val) ((state)->u_regs[U_REG_O0] = (val), 0)
1269 # define set_arg1(tcp, state, val) ((state)->u_regs[U_REG_O1] = (val), 0)
1270 # define restore_arg0(tcp, state, val) 0
1272 #else /* other architectures */
1274 # if defined S390 || defined S390X
1275 /* Note: this is only true for the `clone' system call, which handles
1276 arguments specially. We could as well say that its first two arguments
1277 are swapped relative to other architectures, but that would just be
1278 another #ifdef in the calls. */
1279 # define arg0_offset PT_GPR3
1280 # define arg1_offset PT_ORIGGPR2
1281 # define restore_arg0(tcp, state, val) ((void) (state), 0)
1282 # define restore_arg1(tcp, state, val) ((void) (state), 0)
1283 # define arg0_index 1
1284 # define arg1_index 0
1285 # elif defined(ALPHA) || defined(MIPS)
1286 # define arg0_offset REG_A0
1287 # define arg1_offset (REG_A0+1)
1288 # elif defined(POWERPC)
1289 # define arg0_offset (sizeof(unsigned long)*PT_R3)
1290 # define arg1_offset (sizeof(unsigned long)*PT_R4)
1291 # define restore_arg0(tcp, state, val) ((void) (state), 0)
1292 # elif defined(HPPA)
1293 # define arg0_offset PT_GR26
1294 # define arg1_offset (PT_GR26-4)
1295 # elif defined(X86_64) || defined(X32)
1296 # define arg0_offset ((long)(8*(current_personality ? RBX : RDI)))
1297 # define arg1_offset ((long)(8*(current_personality ? RCX : RSI)))
1299 # define arg0_offset (4*(REG_REG0+4))
1300 # define arg1_offset (4*(REG_REG0+5))
1301 # elif defined(SH64)
1302 /* ABI defines arg0 & 1 in r2 & r3 */
1303 # define arg0_offset (REG_OFFSET+16)
1304 # define arg1_offset (REG_OFFSET+24)
1305 # define restore_arg0(tcp, state, val) 0
1306 # elif defined CRISV10 || defined CRISV32
1307 # define arg0_offset (4*PT_R11)
1308 # define arg1_offset (4*PT_ORIG_R10)
1309 # define restore_arg0(tcp, state, val) 0
1310 # define restore_arg1(tcp, state, val) 0
1311 # define arg0_index 1
1312 # define arg1_index 0
1314 # define arg0_offset 0
1315 # define arg1_offset 4
1317 # define restore_arg0(tcp, state, val) 0
1321 typedef int arg_setup_state;
1323 # define arg_setup(tcp, state) (0)
1324 # define arg_finish_change(tcp, state) 0
1325 # define get_arg0(tcp, cookie, valp) (upeek((tcp)->pid, arg0_offset, (valp)))
1326 # define get_arg1(tcp, cookie, valp) (upeek((tcp)->pid, arg1_offset, (valp)))
1329 set_arg0(struct tcb *tcp, void *cookie, long val)
1331 return ptrace(PTRACE_POKEUSER, tcp->pid, (char*)arg0_offset, val);
1335 set_arg1(struct tcb *tcp, void *cookie, long val)
1337 return ptrace(PTRACE_POKEUSER, tcp->pid, (char*)arg1_offset, val);
1340 #endif /* architectures */
1342 #ifndef restore_arg0
1343 # define restore_arg0(tcp, state, val) set_arg0((tcp), (state), (val))
1345 #ifndef restore_arg1
1346 # define restore_arg1(tcp, state, val) set_arg1((tcp), (state), (val))
1350 # define arg0_index 0
1351 # define arg1_index 1
1355 change_syscall(struct tcb *tcp, arg_setup_state *state, int new)
1358 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(ORIG_EAX * 4), new) < 0)
1361 #elif defined(X86_64)
1362 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(ORIG_RAX * 8), new) < 0)
1366 /* setbpt/clearbpt never used: */
1367 /* X32 is only supported since about linux-3.0.30 */
1368 #elif defined(POWERPC)
1369 if (ptrace(PTRACE_POKEUSER, tcp->pid,
1370 (char*)(sizeof(unsigned long)*PT_R0), new) < 0)
1373 #elif defined(S390) || defined(S390X)
1374 /* s390 linux after 2.4.7 has a hook in entry.S to allow this */
1375 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(PT_GPR2), new) < 0)
1379 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(4*PT_ORIG_D0), new) < 0)
1382 #elif defined(SPARC) || defined(SPARC64)
1383 state->u_regs[U_REG_G1] = new;
1386 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(REG_V0), new) < 0)
1389 #elif defined(ALPHA)
1390 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(REG_A3), new) < 0)
1393 #elif defined(AVR32)
1394 /* setbpt/clearbpt never used: */
1395 /* AVR32 is only supported since about linux-2.6.19 */
1397 /* setbpt/clearbpt never used: */
1398 /* Blackfin is only supported since about linux-2.6.23 */
1400 if (ia64_ia32mode) {
1403 break; /* x86 SYS_fork */
1408 fprintf(stderr, "%s: unexpected syscall %d\n",
1412 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(PT_R1), new) < 0)
1414 } else if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(PT_R15), new) < 0)
1418 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(PT_GR20), new) < 0)
1422 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(4*(REG_REG0+3)), new) < 0)
1426 /* Top half of reg encodes the no. of args n as 0x1n.
1427 Assume 0 args as kernel never actually checks... */
1428 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(REG_SYSCALL),
1429 0x100000 | new) < 0)
1432 #elif defined(CRISV10) || defined(CRISV32)
1433 if (ptrace(PTRACE_POKEUSER, tcp->pid, (char*)(4*PT_R9), new) < 0)
1437 /* Some kernels support this, some (pre-2.6.16 or so) don't. */
1438 # ifndef PTRACE_SET_SYSCALL
1439 # define PTRACE_SET_SYSCALL 23
1441 if (ptrace(PTRACE_SET_SYSCALL, tcp->pid, 0, new & 0xffff) != 0)
1444 #elif defined(AARCH64)
1445 /* setbpt/clearbpt never used: */
1446 /* AARCH64 is only supported since about linux-3.0.31 */
1448 /* setbpt/clearbpt never used: */
1449 /* Tilera CPUs are only supported since about linux-2.6.34 */
1450 #elif defined(MICROBLAZE)
1451 /* setbpt/clearbpt never used: */
1452 /* microblaze is only supported since about linux-2.6.30 */
1454 /* never reached; OR1K is only supported by kernels since 3.1.0. */
1455 #elif defined(METAG)
1456 /* setbpt/clearbpt never used: */
1457 /* Meta is only supported since linux-3.7 */
1458 #elif defined(XTENSA)
1459 /* setbpt/clearbpt never used: */
1460 /* Xtensa is only supported since linux 2.6.13 */
1462 /* setbpt/clearbpt never used: */
1463 /* ARC only supported since 3.9 */
1465 #warning Do not know how to handle change_syscall for this architecture
1466 #endif /* architecture */
1471 setbpt(struct tcb *tcp)
1473 static int clone_scno[SUPPORTED_PERSONALITIES] = { SYS_clone };
1474 arg_setup_state state;
1476 if (tcp->flags & TCB_BPTSET) {
1477 fprintf(stderr, "PANIC: TCB already set in pid %u\n", tcp->pid);
1482 * It's a silly kludge to initialize this with a search at runtime.
1483 * But it's better than maintaining another magic thing in the
1484 * godforsaken tables.
1486 if (clone_scno[current_personality] == 0) {
1488 for (i = 0; i < nsyscalls; ++i)
1489 if (sysent[i].sys_func == sys_clone) {
1490 clone_scno[current_personality] = i;
1495 if (tcp->s_ent->sys_func == sys_fork) {
1496 if (arg_setup(tcp, &state) < 0
1497 || get_arg0(tcp, &state, &tcp->inst[0]) < 0
1498 || get_arg1(tcp, &state, &tcp->inst[1]) < 0
1499 || change_syscall(tcp, &state,
1500 clone_scno[current_personality]) < 0
1501 || set_arg0(tcp, &state, CLONE_PTRACE|SIGCHLD) < 0
1502 || set_arg1(tcp, &state, 0) < 0
1503 || arg_finish_change(tcp, &state) < 0)
1505 tcp->u_arg[arg0_index] = CLONE_PTRACE|SIGCHLD;
1506 tcp->u_arg[arg1_index] = 0;
1507 tcp->flags |= TCB_BPTSET;
1511 if (tcp->s_ent->sys_func == sys_clone) {
1512 /* ia64 calls directly `clone (CLONE_VFORK | CLONE_VM)'
1513 contrary to x86 vfork above. Even on x86 we turn the
1514 vfork semantics into plain fork - each application must not
1515 depend on the vfork specifics according to POSIX. We would
1516 hang waiting for the parent resume otherwise. We need to
1517 clear also CLONE_VM but only in the CLONE_VFORK case as
1518 otherwise we would break pthread_create. */
1520 long new_arg0 = (tcp->u_arg[arg0_index] | CLONE_PTRACE);
1521 if (new_arg0 & CLONE_VFORK)
1522 new_arg0 &= ~(unsigned long)(CLONE_VFORK | CLONE_VM);
1523 if (arg_setup(tcp, &state) < 0
1524 || set_arg0(tcp, &state, new_arg0) < 0
1525 || arg_finish_change(tcp, &state) < 0)
1527 tcp->inst[0] = tcp->u_arg[arg0_index];
1528 tcp->inst[1] = tcp->u_arg[arg1_index];
1529 tcp->flags |= TCB_BPTSET;
1533 fprintf(stderr, "PANIC: setbpt for syscall %ld on %u???\n",
1534 tcp->scno, tcp->pid);
1539 clearbpt(struct tcb *tcp)
1541 arg_setup_state state;
1542 if (arg_setup(tcp, &state) < 0
1543 || change_syscall(tcp, &state, tcp->scno) < 0
1544 || restore_arg0(tcp, &state, tcp->inst[0]) < 0
1545 || restore_arg1(tcp, &state, tcp->inst[1]) < 0
1546 || arg_finish_change(tcp, &state))
1549 tcp->flags &= ~TCB_BPTSET;