2 * Copyright (c) 1991, 1992 Paul Kranenburg <pk@cs.few.eur.nl>
3 * Copyright (c) 1993 Branko Lankester <branko@hacktic.nl>
4 * Copyright (c) 1993, 1994, 1995, 1996 Rick Sladkey <jrs@world.std.com>
5 * Copyright (c) 1996-1999 Wichert Akkerman <wichert@cistron.nl>
6 * Copyright (c) 1999 IBM Deutschland Entwicklung GmbH, IBM Corporation
7 * Linux for s390 port by D.J. Barrow
8 * <barrow_dj@mail.yahoo.com,djbarrow@de.ibm.com>
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. The name of the author may not be used to endorse or promote products
20 * derived from this software without specific prior written permission.
22 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
23 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
24 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
25 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
26 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
27 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
28 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
29 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
31 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
39 #include <sys/syscall.h>
41 #include <sys/param.h>
47 #include <machine/reg.h>
52 #if defined(linux) && (__GLIBC__ < 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ < 1))
53 #include <linux/ptrace.h>
56 #if defined(LINUX) && defined(IA64)
57 # include <asm/ptrace_offsets.h>
63 # define PTRACE_PEEKUSR PTRACE_PEEKUSER
64 #elif defined(HAVE_LINUX_PTRACE_H)
66 # ifdef HAVE_STRUCT_IA64_FPREG
67 # define ia64_fpreg XXX_ia64_fpreg
69 # ifdef HAVE_STRUCT_PT_ALL_USER_REGS
70 # define pt_all_user_regs XXX_pt_all_user_regs
72 #include <linux/ptrace.h>
74 # undef pt_all_user_regs
77 #ifdef SUNOS4_KERNEL_ARCH_KLUDGE
78 #include <sys/utsname.h>
79 #endif /* SUNOS4_KERNEL_ARCH_KLUDGE */
81 #if defined(LINUXSPARC) && defined (SPARC64)
82 # undef PTRACE_GETREGS
83 # define PTRACE_GETREGS PTRACE_GETREGS64
84 # undef PTRACE_SETREGS
85 # define PTRACE_SETREGS PTRACE_SETREGS64
90 #define MAX(a,b) (((a) > (b)) ? (a) : (b))
93 #define MIN(a,b) (((a) < (b)) ? (a) : (b))
97 tv_nz(struct timeval *a)
99 return a->tv_sec || a->tv_usec;
103 tv_cmp(struct timeval *a, struct timeval *b)
105 if (a->tv_sec < b->tv_sec
106 || (a->tv_sec == b->tv_sec && a->tv_usec < b->tv_usec))
108 if (a->tv_sec > b->tv_sec
109 || (a->tv_sec == b->tv_sec && a->tv_usec > b->tv_usec))
115 tv_float(struct timeval *tv)
117 return tv->tv_sec + tv->tv_usec/1000000.0;
121 tv_add(struct timeval *tv, struct timeval *a, struct timeval *b)
123 tv->tv_sec = a->tv_sec + b->tv_sec;
124 tv->tv_usec = a->tv_usec + b->tv_usec;
125 if (tv->tv_usec >= 1000000) {
127 tv->tv_usec -= 1000000;
132 tv_sub(struct timeval *tv, struct timeval *a, struct timeval *b)
134 tv->tv_sec = a->tv_sec - b->tv_sec;
135 tv->tv_usec = a->tv_usec - b->tv_usec;
136 if (((long) tv->tv_usec) < 0) {
138 tv->tv_usec += 1000000;
143 tv_div(struct timeval *tv, struct timeval *a, int n)
145 tv->tv_usec = (a->tv_sec % n * 1000000 + a->tv_usec + n / 2) / n;
146 tv->tv_sec = a->tv_sec / n + tv->tv_usec / 1000000;
147 tv->tv_usec %= 1000000;
151 tv_mul(struct timeval *tv, struct timeval *a, int n)
153 tv->tv_usec = a->tv_usec * n;
154 tv->tv_sec = a->tv_sec * n + tv->tv_usec / 1000000;
155 tv->tv_usec %= 1000000;
159 xlookup(const struct xlat *xlat, int val)
161 for (; xlat->str != NULL; xlat++)
162 if (xlat->val == val)
167 #if !defined HAVE_STPCPY
169 stpcpy(char *dst, const char *src)
171 while ((*dst = *src++) != '\0')
178 * Generic ptrace wrapper which tracks ESRCH errors
179 * by setting tcp->ptrace_errno to ESRCH.
181 * We assume that ESRCH indicates likely process death (SIGKILL?),
182 * modulo bugs where process somehow ended up not stopped.
183 * Unfortunately kernel uses ESRCH for that case too. Oh well.
185 * Currently used by upeek() only.
186 * TODO: use this in all other ptrace() calls while decoding.
189 do_ptrace(int request, struct tcb *tcp, void *addr, void *data)
194 l = ptrace(request, tcp->pid, addr, (long) data);
195 /* Non-ESRCH errors might be our invalid reg/mem accesses,
196 * we do not record them. */
198 tcp->ptrace_errno = ESRCH;
203 * Used when we want to unblock stopped traced process.
204 * Should be only used with PTRACE_CONT, PTRACE_DETACH and PTRACE_SYSCALL.
205 * Returns 0 on success or if error was ESRCH
206 * (presumably process was killed while we talk to it).
207 * Otherwise prints error message and returns -1.
210 ptrace_restart(int op, struct tcb *tcp, int sig)
216 ptrace(op, tcp->pid, (void *) 1, (long) sig);
218 if (!err || err == ESRCH)
221 tcp->ptrace_errno = err;
223 if (op == PTRACE_CONT)
225 if (op == PTRACE_DETACH)
227 perror_msg("ptrace(PTRACE_%s,1,%d)", msg, sig);
232 * Print entry in struct xlat table, if there.
235 printxval(const struct xlat *xlat, int val, const char *dflt)
237 const char *str = xlookup(xlat, val);
242 tprintf("%#x /* %s */", val, dflt);
247 * Print 64bit argument at position llarg and return the index of the next
251 printllval(struct tcb *tcp, const char *format, int llarg)
253 # if defined(FREEBSD) \
254 || (defined(LINUX) && defined(POWERPC) && !defined(POWERPC64)) \
255 || defined(LINUX_MIPSO32) \
256 || defined(__ARM_EABI__)
257 /* Align 64bit argument to 64bit boundary. */
258 llarg = (llarg + 1) & 0x1e;
260 # if defined LINUX && (defined X86_64 || defined POWERPC64)
261 if (current_personality == 0) {
262 tprintf(format, tcp->u_arg[llarg]);
266 /* Align 64bit argument to 64bit boundary. */
267 llarg = (llarg + 1) & 0x1e;
269 tprintf(format, LONG_LONG(tcp->u_arg[llarg], tcp->u_arg[llarg + 1]));
272 # elif defined IA64 || defined ALPHA
273 tprintf(format, tcp->u_arg[llarg]);
275 # elif defined LINUX_MIPSN32
276 tprintf(format, tcp->ext_arg[llarg]);
279 tprintf(format, LONG_LONG(tcp->u_arg[llarg], tcp->u_arg[llarg + 1]));
287 * Interpret `xlat' as an array of flags
288 * print the entries whose bits are on in `flags'
289 * return # of flags printed.
292 addflags(const struct xlat *xlat, int flags)
294 for (; xlat->str; xlat++) {
295 if (xlat->val && (flags & xlat->val) == xlat->val) {
296 tprintf("|%s", xlat->str);
301 tprintf("|%#x", flags);
306 * Interpret `xlat' as an array of flags.
307 * Print to static string the entries whose bits are on in `flags'
308 * Return static string.
311 sprintflags(const char *prefix, const struct xlat *xlat, int flags)
313 static char outstr[1024];
317 outptr = stpcpy(outstr, prefix);
319 for (; xlat->str; xlat++) {
320 if ((flags & xlat->val) == xlat->val) {
323 outptr = stpcpy(outptr, xlat->str);
331 outptr += sprintf(outptr, "%#x", flags);
338 printflags(const struct xlat *xlat, int flags, const char *dflt)
343 if (flags == 0 && xlat->val == 0) {
349 for (n = 0; xlat->str; xlat++) {
350 if (xlat->val && (flags & xlat->val) == xlat->val) {
351 tprintf("%s%s", sep, xlat->str);
360 tprintf("%s%#x", sep, flags);
365 tprintf("%#x", flags);
367 tprintf(" /* %s */", dflt);
378 printnum(struct tcb *tcp, long addr, const char *fmt)
386 if (umove(tcp, addr, &num) < 0) {
387 tprintf("%#lx", addr);
396 printnum_int(struct tcb *tcp, long addr, const char *fmt)
404 if (umove(tcp, addr, &num) < 0) {
405 tprintf("%#lx", addr);
414 printfd(struct tcb *tcp, int fd)
418 if (show_fd_path && (p = getfdpath(tcp, fd)))
419 tprintf("%d<%s>", fd, p);
425 printuid(const char *text, unsigned long uid)
427 tprintf((uid == -1) ? "%s%ld" : "%s%lu", text, uid);
430 static char path[MAXPATHLEN + 1];
433 * Quote string `instr' of length `size'
434 * Write up to (3 + `size' * 4) bytes to `outstr' buffer.
435 * If `len' < 0, treat `instr' as a NUL-terminated string
436 * and quote at most (`size' - 1) bytes.
439 string_quote(const char *instr, char *outstr, int len, int size)
441 const unsigned char *ustr = (const unsigned char *) instr;
443 int usehex, c, i, eol;
445 eol = 0x100; /* this can never match a char */
455 /* Check for presence of symbol which require
456 to hex-quote the whole string. */
457 for (i = 0; i < size; ++i) {
459 /* Check for NUL-terminated string. */
462 if (!isprint(c) && !isspace(c)) {
472 /* Hex-quote the whole string. */
473 for (i = 0; i < size; ++i) {
475 /* Check for NUL-terminated string. */
480 *s++ = "0123456789abcdef"[c >> 4];
481 *s++ = "0123456789abcdef"[c & 0xf];
484 for (i = 0; i < size; ++i) {
486 /* Check for NUL-terminated string. */
490 case '\"': case '\\':
521 && ustr[i + 1] >= '0'
522 && ustr[i + 1] <= '9'
525 *s++ = '0' + (c >> 6);
526 *s++ = '0' + ((c >> 3) & 0x7);
531 *s++ = '0' + (c >> 6);
532 *s++ = '0' + ((c >> 3) & 0x7);
535 *s++ = '0' + (c & 0x7);
545 /* Return zero if we printed entire ASCIZ string (didn't truncate it) */
546 if (len < 0 && ustr[i] == '\0') {
547 /* We didn't see NUL yet (otherwise we'd jump to 'asciz_ended')
548 * but next char is NUL.
558 /* Return zero: we printed entire ASCIZ string (didn't truncate it) */
563 * Print path string specified by address `addr' and length `n'.
564 * If path length exceeds `n', append `...' to the output.
567 printpathn(struct tcb *tcp, long addr, int n)
574 /* Cap path length to the path buffer size,
575 and NUL-terminate the buffer. */
576 if (n > sizeof path - 1)
580 /* Fetch one byte more to find out whether path length > n. */
581 if (umovestr(tcp, addr, n + 1, path) < 0)
582 tprintf("%#lx", addr);
584 static char outstr[4*(sizeof path - 1) + sizeof "\"...\""];
586 int trunc = (path[n] != '\0');
590 string_quote(path, outstr, -1, n + 1);
594 tprintf(fmt, outstr);
599 printpath(struct tcb *tcp, long addr)
601 printpathn(tcp, addr, sizeof path - 1);
605 * Print string specified by address `addr' and length `len'.
606 * If `len' < 0, treat the string as a NUL-terminated string.
607 * If string length exceeds `max_strlen', append `...' to the output.
610 printstr(struct tcb *tcp, long addr, int len)
612 static char *str = NULL;
621 /* Allocate static buffers if they are not allocated yet. */
623 str = malloc(max_strlen + 1);
628 outstr = malloc(4 * max_strlen + sizeof "\"...\"");
635 * Treat as a NUL-terminated string: fetch one byte more
636 * because string_quote() quotes one byte less.
638 size = max_strlen + 1;
639 str[max_strlen] = '\0';
640 /* FIXME! umovestr can overwrite the '\0' stored above??? */
641 if (umovestr(tcp, addr, size, str) < 0) {
642 tprintf("%#lx", addr);
647 size = MIN(len, max_strlen);
648 if (umoven(tcp, addr, size, str) < 0) {
649 tprintf("%#lx", addr);
655 if (string_quote(str, outstr, len, size) &&
656 (len < 0 || len > max_strlen))
659 tprintf(fmt, outstr);
664 dumpiov(struct tcb *tcp, int len, long addr)
666 #if defined(LINUX) && SUPPORTED_PERSONALITIES > 1
668 struct { u_int32_t base; u_int32_t len; } *iov32;
669 struct { u_int64_t base; u_int64_t len; } *iov64;
671 #define iov iovu.iov64
673 (personality_wordsize[current_personality] == 4 \
674 ? sizeof(*iovu.iov32) : sizeof(*iovu.iov64))
675 #define iov_iov_base(i) \
676 (personality_wordsize[current_personality] == 4 \
677 ? (u_int64_t) iovu.iov32[i].base : iovu.iov64[i].base)
678 #define iov_iov_len(i) \
679 (personality_wordsize[current_personality] == 4 \
680 ? (u_int64_t) iovu.iov32[i].len : iovu.iov64[i].len)
683 #define sizeof_iov sizeof(*iov)
684 #define iov_iov_base(i) iov[i].iov_base
685 #define iov_iov_len(i) iov[i].iov_len
690 size = sizeof_iov * len;
691 /* Assuming no sane program has millions of iovs */
692 if ((unsigned)len > 1024*1024 /* insane or negative size? */
693 || (iov = malloc(size)) == NULL) {
694 fprintf(stderr, "Out of memory\n");
697 if (umoven(tcp, addr, size, (char *) iov) >= 0) {
698 for (i = 0; i < len; i++) {
699 /* include the buffer number to make it easy to
700 * match up the trace with the source */
701 tprintf(" * %lu bytes in buffer %d\n",
702 (unsigned long)iov_iov_len(i), i);
703 dumpstr(tcp, (long) iov_iov_base(i),
716 dumpstr(struct tcb *tcp, long addr, int len)
718 static int strsize = -1;
719 static unsigned char *str;
728 fprintf(stderr, "Out of memory\n");
734 if (umoven(tcp, addr, len, (char *) str) < 0)
737 for (i = 0; i < len; i += 16) {
741 sprintf(s, " | %05x ", i);
743 for (j = 0; j < 16; j++) {
747 sprintf(s, " %02x", str[i + j]);
751 *s++ = ' '; *s++ = ' '; *s++ = ' ';
754 *s++ = ' '; *s++ = ' ';
755 for (j = 0; j < 16; j++) {
759 if (isprint(str[i + j]))
767 tprintf("%s |\n", outstr);
771 #define PAGMASK (~(PAGSIZ - 1))
773 * move `len' bytes of data from process `pid'
774 * at address `addr' to our space at `laddr'
777 umoven(struct tcb *tcp, long addr, int len, char *laddr)
785 char x[sizeof(long)];
788 if (addr & (sizeof(long) - 1)) {
789 /* addr not a multiple of sizeof(long) */
790 n = addr - (addr & -sizeof(long)); /* residue */
791 addr &= -sizeof(long); /* residue */
793 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *) addr, 0);
795 /* But if not started, we had a bogus address. */
796 if (addr != 0 && errno != EIO && errno != ESRCH)
797 perror("ptrace: umoven");
801 memcpy(laddr, &u.x[n], m = MIN(sizeof(long) - n, len));
802 addr += sizeof(long), laddr += m, len -= m;
806 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *) addr, 0);
808 if (started && (errno==EPERM || errno==EIO)) {
809 /* Ran into 'end of memory' - stupid "printpath" */
812 if (addr != 0 && errno != EIO && errno != ESRCH)
813 perror("ptrace: umoven");
817 memcpy(laddr, u.x, m = MIN(sizeof(long), len));
818 addr += sizeof(long), laddr += m, len -= m;
827 n = MIN(len, PAGSIZ);
828 n = MIN(n, ((addr + PAGSIZ) & PAGMASK) - addr);
829 if (ptrace(PTRACE_READDATA, pid,
830 (char *) addr, len, laddr) < 0) {
831 if (errno != ESRCH) {
832 perror("umoven: ptrace(PTRACE_READDATA, ...)");
844 #ifdef HAVE_MP_PROCFS
845 int fd = tcp->pfd_as;
849 lseek(fd, addr, SEEK_SET);
850 if (read(fd, laddr, len) == -1)
852 #endif /* USE_PROCFS */
858 * like `umove' but make the additional effort of looking
859 * for a terminating zero byte.
862 umovestr(struct tcb *tcp, long addr, int len, char *laddr)
865 #ifdef HAVE_MP_PROCFS
866 int fd = tcp->pfd_as;
870 /* Some systems (e.g. FreeBSD) can be upset if we read off the
871 end of valid memory, avoid this by trying to read up
872 to page boundaries. But we don't know what a page is (and
873 getpagesize(2) (if it exists) doesn't necessarily return
874 hardware page size). Assume all pages >= 1024 (a-historical
877 int page = 1024; /* How to find this? */
878 int move = page - (addr & (page - 1));
881 lseek(fd, addr, SEEK_SET);
886 move = read(fd, laddr, move);
888 return left != len ? 0 : -1;
889 if (memchr(laddr, 0, move))
896 #else /* !USE_PROCFS */
902 char x[sizeof(long)];
905 if (addr & (sizeof(long) - 1)) {
906 /* addr not a multiple of sizeof(long) */
907 n = addr - (addr & -sizeof(long)); /* residue */
908 addr &= -sizeof(long); /* residue */
910 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *)addr, 0);
912 if (addr != 0 && errno != EIO && errno != ESRCH)
917 memcpy(laddr, &u.x[n], m = MIN(sizeof(long)-n, len));
918 while (n & (sizeof(long) - 1))
919 if (u.x[n++] == '\0')
921 addr += sizeof(long), laddr += m, len -= m;
925 u.val = ptrace(PTRACE_PEEKDATA, pid, (char *)addr, 0);
927 if (started && (errno==EPERM || errno==EIO)) {
928 /* Ran into 'end of memory' - stupid "printpath" */
931 if (addr != 0 && errno != EIO && errno != ESRCH)
936 memcpy(laddr, u.x, m = MIN(sizeof(long), len));
937 for (i = 0; i < sizeof(long); i++)
941 addr += sizeof(long), laddr += m, len -= m;
943 #endif /* !USE_PROCFS */
948 # if !defined (SPARC) && !defined(SPARC64)
949 # define PTRACE_WRITETEXT 101
950 # define PTRACE_WRITEDATA 102
951 # endif /* !SPARC && !SPARC64 */
957 uload(int cmd, int pid, long addr, int len, char *laddr)
963 char x[sizeof(long)];
966 if (cmd == PTRACE_WRITETEXT) {
967 peek = PTRACE_PEEKTEXT;
968 poke = PTRACE_POKETEXT;
971 peek = PTRACE_PEEKDATA;
972 poke = PTRACE_POKEDATA;
974 if (addr & (sizeof(long) - 1)) {
975 /* addr not a multiple of sizeof(long) */
976 n = addr - (addr & -sizeof(long)); /* residue */
977 addr &= -sizeof(long);
979 u.val = ptrace(peek, pid, (char *) addr, 0);
981 perror("uload: POKE");
984 memcpy(&u.x[n], laddr, m = MIN(sizeof(long) - n, len));
985 if (ptrace(poke, pid, (char *)addr, u.val) < 0) {
986 perror("uload: POKE");
989 addr += sizeof(long), laddr += m, len -= m;
992 if (len < sizeof(long))
993 u.val = ptrace(peek, pid, (char *) addr, 0);
994 memcpy(u.x, laddr, m = MIN(sizeof(long), len));
995 if (ptrace(poke, pid, (char *) addr, u.val) < 0) {
996 perror("uload: POKE");
999 addr += sizeof(long), laddr += m, len -= m;
1005 tload(int pid, int addr, int len, char *laddr)
1007 return uload(PTRACE_WRITETEXT, pid, addr, len, laddr);
1011 dload(int pid, int addr, int len, char *laddr)
1013 return uload(PTRACE_WRITEDATA, pid, addr, len, laddr);
1021 upeek(struct tcb *tcp, long off, long *res)
1025 # ifdef SUNOS4_KERNEL_ARCH_KLUDGE
1027 static int is_sun4m = -1;
1028 struct utsname name;
1030 /* Round up the usual suspects. */
1031 if (is_sun4m == -1) {
1032 if (uname(&name) < 0) {
1033 perror("upeek: uname?");
1036 is_sun4m = strcmp(name.machine, "sun4m") == 0;
1038 const struct xlat *x;
1040 for (x = struct_user_offsets; x->str; x++)
1047 # endif /* SUNOS4_KERNEL_ARCH_KLUDGE */
1049 val = do_ptrace(PTRACE_PEEKUSER, tcp, (char *) off, 0);
1050 if (val == -1 && errno) {
1051 if (errno != ESRCH) {
1053 sprintf(buf, "upeek: ptrace(PTRACE_PEEKUSER,%d,%lu,0)", tcp->pid, off);
1062 #endif /* !USE_PROCFS */
1065 printcall(struct tcb *tcp)
1067 #define PRINTBADPC tprintf(sizeof(long) == 4 ? "[????????] " : \
1068 sizeof(long) == 8 ? "[????????????????] " : \
1075 if (upeek(tcp, 4*EIP, &eip) < 0) {
1079 tprintf("[%08lx] ", eip);
1081 # elif defined(S390) || defined(S390X)
1083 if (upeek(tcp, PT_PSWADDR, &psw) < 0) {
1088 tprintf("[%08lx] ", psw);
1090 tprintf("[%16lx] ", psw);
1093 # elif defined(X86_64)
1096 if (upeek(tcp, 8*RIP, &rip) < 0) {
1100 tprintf("[%16lx] ", rip);
1101 # elif defined(IA64)
1104 if (upeek(tcp, PT_B0, &ip) < 0) {
1108 tprintf("[%08lx] ", ip);
1109 # elif defined(POWERPC)
1112 if (upeek(tcp, sizeof(unsigned long)*PT_NIP, &pc) < 0) {
1117 tprintf("[%016lx] ", pc);
1119 tprintf("[%08lx] ", pc);
1121 # elif defined(M68K)
1124 if (upeek(tcp, 4*PT_PC, &pc) < 0) {
1125 tprints("[????????] ");
1128 tprintf("[%08lx] ", pc);
1129 # elif defined(ALPHA)
1132 if (upeek(tcp, REG_PC, &pc) < 0) {
1133 tprints("[????????????????] ");
1136 tprintf("[%08lx] ", pc);
1137 # elif defined(SPARC) || defined(SPARC64)
1138 struct pt_regs regs;
1139 if (ptrace(PTRACE_GETREGS, tcp->pid, (char *)®s, 0) < 0) {
1143 # if defined(SPARC64)
1144 tprintf("[%08lx] ", regs.tpc);
1146 tprintf("[%08lx] ", regs.pc);
1148 # elif defined(HPPA)
1151 if (upeek(tcp, PT_IAOQ0, &pc) < 0) {
1152 tprints("[????????] ");
1155 tprintf("[%08lx] ", pc);
1156 # elif defined(MIPS)
1159 if (upeek(tcp, REG_EPC, &pc) < 0) {
1160 tprints("[????????] ");
1163 tprintf("[%08lx] ", pc);
1167 if (upeek(tcp, 4*REG_PC, &pc) < 0) {
1168 tprints("[????????] ");
1171 tprintf("[%08lx] ", pc);
1172 # elif defined(SH64)
1175 if (upeek(tcp, REG_PC, &pc) < 0) {
1176 tprints("[????????????????] ");
1179 tprintf("[%08lx] ", pc);
1183 if (upeek(tcp, 4*15, &pc) < 0) {
1187 tprintf("[%08lx] ", pc);
1188 # elif defined(AVR32)
1191 if (upeek(tcp, REG_PC, &pc) < 0) {
1192 tprints("[????????] ");
1195 tprintf("[%08lx] ", pc);
1196 # elif defined(BFIN)
1199 if (upeek(tcp, PT_PC, &pc) < 0) {
1203 tprintf("[%08lx] ", pc);
1204 #elif defined(CRISV10)
1207 if (upeek(tcp, 4*PT_IRP, &pc) < 0) {
1211 tprintf("[%08lx] ", pc);
1212 #elif defined(CRISV32)
1215 if (upeek(tcp, 4*PT_ERP, &pc) < 0) {
1219 tprintf("[%08lx] ", pc);
1220 # endif /* architecture */
1226 if (ptrace(PTRACE_GETREGS, tcp->pid, (char *) ®s, 0) < 0) {
1227 perror("printcall: ptrace(PTRACE_GETREGS, ...)");
1231 tprintf("[%08x] ", regs.r_o7);
1241 pread(tcp->pfd_reg, ®s, sizeof(regs), 0);
1242 tprintf("[%08x] ", regs.r_eip);
1243 #endif /* FREEBSD */
1248 * These #if's are huge, please indent them correctly.
1249 * It's easy to get confused otherwise.
1255 # include "syscall.h"
1257 # include <sys/syscall.h>
1258 # ifndef CLONE_PTRACE
1259 # define CLONE_PTRACE 0x00002000
1261 # ifndef CLONE_VFORK
1262 # define CLONE_VFORK 0x00004000
1265 # define CLONE_VM 0x00000100
1267 # ifndef CLONE_STOPPED
1268 # define CLONE_STOPPED 0x02000000
1273 /* We don't have fork()/vfork() syscalls on ia64 itself, but the ia32
1274 subsystem has them for x86... */
1276 # define SYS_vfork 190
1278 typedef unsigned long *arg_setup_state;
1281 arg_setup(struct tcb *tcp, arg_setup_state *state)
1283 unsigned long cfm, sof, sol;
1287 /* Satisfy a false GCC warning. */
1292 if (upeek(tcp, PT_AR_BSP, &bsp) < 0)
1294 if (upeek(tcp, PT_CFM, (long *) &cfm) < 0)
1297 sof = (cfm >> 0) & 0x7f;
1298 sol = (cfm >> 7) & 0x7f;
1299 bsp = (long) ia64_rse_skip_regs((unsigned long *) bsp, -sof + sol);
1301 *state = (unsigned long *) bsp;
1305 # define arg_finish_change(tcp, state) 0
1309 get_arg0(struct tcb *tcp, arg_setup_state *state, long *valp)
1314 ret = upeek(tcp, PT_R11, valp);
1317 (unsigned long) ia64_rse_skip_regs(*state, 0),
1318 sizeof(long), (void *) valp);
1323 get_arg1(struct tcb *tcp, arg_setup_state *state, long *valp)
1328 ret = upeek(tcp, PT_R9, valp);
1331 (unsigned long) ia64_rse_skip_regs(*state, 1),
1332 sizeof(long), (void *) valp);
1338 set_arg0(struct tcb *tcp, arg_setup_state *state, long val)
1340 int req = PTRACE_POKEDATA;
1344 ap = (void *) (intptr_t) PT_R11; /* r11 == EBX */
1345 req = PTRACE_POKEUSER;
1347 ap = ia64_rse_skip_regs(*state, 0);
1349 ptrace(req, tcp->pid, ap, val);
1350 return errno ? -1 : 0;
1354 set_arg1(struct tcb *tcp, arg_setup_state *state, long val)
1356 int req = PTRACE_POKEDATA;
1360 ap = (void *) (intptr_t) PT_R9; /* r9 == ECX */
1361 req = PTRACE_POKEUSER;
1363 ap = ia64_rse_skip_regs(*state, 1);
1365 ptrace(req, tcp->pid, ap, val);
1366 return errno ? -1 : 0;
1369 /* ia64 does not return the input arguments from functions (and syscalls)
1370 according to ia64 RSE (Register Stack Engine) behavior. */
1372 # define restore_arg0(tcp, state, val) ((void) (state), 0)
1373 # define restore_arg1(tcp, state, val) ((void) (state), 0)
1375 # elif defined (SPARC) || defined (SPARC64)
1377 typedef struct pt_regs arg_setup_state;
1379 # define arg_setup(tcp, state) \
1380 (ptrace(PTRACE_GETREGS, tcp->pid, (char *) (state), 0))
1381 # define arg_finish_change(tcp, state) \
1382 (ptrace(PTRACE_SETREGS, tcp->pid, (char *) (state), 0))
1384 # define get_arg0(tcp, state, valp) (*(valp) = (state)->u_regs[U_REG_O0], 0)
1385 # define get_arg1(tcp, state, valp) (*(valp) = (state)->u_regs[U_REG_O1], 0)
1386 # define set_arg0(tcp, state, val) ((state)->u_regs[U_REG_O0] = (val), 0)
1387 # define set_arg1(tcp, state, val) ((state)->u_regs[U_REG_O1] = (val), 0)
1388 # define restore_arg0(tcp, state, val) 0
1390 # else /* other architectures */
1392 # if defined S390 || defined S390X
1393 /* Note: this is only true for the `clone' system call, which handles
1394 arguments specially. We could as well say that its first two arguments
1395 are swapped relative to other architectures, but that would just be
1396 another #ifdef in the calls. */
1397 # define arg0_offset PT_GPR3
1398 # define arg1_offset PT_ORIGGPR2
1399 # define restore_arg0(tcp, state, val) ((void) (state), 0)
1400 # define restore_arg1(tcp, state, val) ((void) (state), 0)
1401 # define arg0_index 1
1402 # define arg1_index 0
1403 # elif defined (ALPHA) || defined (MIPS)
1404 # define arg0_offset REG_A0
1405 # define arg1_offset (REG_A0+1)
1406 # elif defined (AVR32)
1407 # define arg0_offset (REG_R12)
1408 # define arg1_offset (REG_R11)
1409 # elif defined (POWERPC)
1410 # define arg0_offset (sizeof(unsigned long)*PT_R3)
1411 # define arg1_offset (sizeof(unsigned long)*PT_R4)
1412 # define restore_arg0(tcp, state, val) ((void) (state), 0)
1413 # elif defined (HPPA)
1414 # define arg0_offset PT_GR26
1415 # define arg1_offset (PT_GR26-4)
1416 # elif defined (X86_64)
1417 # define arg0_offset ((long)(8*(current_personality ? RBX : RDI)))
1418 # define arg1_offset ((long)(8*(current_personality ? RCX : RSI)))
1420 # define arg0_offset (4*(REG_REG0+4))
1421 # define arg1_offset (4*(REG_REG0+5))
1422 # elif defined (SH64)
1423 /* ABI defines arg0 & 1 in r2 & r3 */
1424 # define arg0_offset (REG_OFFSET+16)
1425 # define arg1_offset (REG_OFFSET+24)
1426 # define restore_arg0(tcp, state, val) 0
1427 # elif defined CRISV10 || defined CRISV32
1428 # define arg0_offset (4*PT_R11)
1429 # define arg1_offset (4*PT_ORIG_R10)
1430 # define restore_arg0(tcp, state, val) 0
1431 # define restore_arg1(tcp, state, val) 0
1432 # define arg0_index 1
1433 # define arg1_index 0
1435 # define arg0_offset 0
1436 # define arg1_offset 4
1438 # define restore_arg0(tcp, state, val) 0
1442 typedef int arg_setup_state;
1444 # define arg_setup(tcp, state) (0)
1445 # define arg_finish_change(tcp, state) 0
1446 # define get_arg0(tcp, cookie, valp) \
1447 (upeek((tcp), arg0_offset, (valp)))
1448 # define get_arg1(tcp, cookie, valp) \
1449 (upeek((tcp), arg1_offset, (valp)))
1452 set_arg0(struct tcb *tcp, void *cookie, long val)
1454 return ptrace(PTRACE_POKEUSER, tcp->pid, (char*)arg0_offset, val);
1458 set_arg1(struct tcb *tcp, void *cookie, long val)
1460 return ptrace(PTRACE_POKEUSER, tcp->pid, (char*)arg1_offset, val);
1463 # endif /* architectures */
1465 # ifndef restore_arg0
1466 # define restore_arg0(tcp, state, val) set_arg0((tcp), (state), (val))
1468 # ifndef restore_arg1
1469 # define restore_arg1(tcp, state, val) set_arg1((tcp), (state), (val))
1473 # define arg0_index 0
1474 # define arg1_index 1
1478 setbpt(struct tcb *tcp)
1480 static int clone_scno[SUPPORTED_PERSONALITIES] = { SYS_clone };
1481 arg_setup_state state;
1483 if (tcp->flags & TCB_BPTSET) {
1484 fprintf(stderr, "PANIC: TCB already set in pid %u\n", tcp->pid);
1489 * It's a silly kludge to initialize this with a search at runtime.
1490 * But it's better than maintaining another magic thing in the
1491 * godforsaken tables.
1493 if (clone_scno[current_personality] == 0) {
1495 for (i = 0; i < nsyscalls; ++i)
1496 if (sysent[i].sys_func == sys_clone) {
1497 clone_scno[current_personality] = i;
1502 switch (known_scno(tcp)) {
1509 # if defined SYS_fork || defined SYS_vfork
1510 if (arg_setup(tcp, &state) < 0
1511 || get_arg0(tcp, &state, &tcp->inst[0]) < 0
1512 || get_arg1(tcp, &state, &tcp->inst[1]) < 0
1513 || change_syscall(tcp, clone_scno[current_personality]) < 0
1514 || set_arg0(tcp, &state, CLONE_PTRACE|SIGCHLD) < 0
1515 || set_arg1(tcp, &state, 0) < 0
1516 || arg_finish_change(tcp, &state) < 0)
1518 tcp->u_arg[arg0_index] = CLONE_PTRACE|SIGCHLD;
1519 tcp->u_arg[arg1_index] = 0;
1520 tcp->flags |= TCB_BPTSET;
1528 /* ia64 calls directly `clone (CLONE_VFORK | CLONE_VM)'
1529 contrary to x86 SYS_vfork above. Even on x86 we turn the
1530 vfork semantics into plain fork - each application must not
1531 depend on the vfork specifics according to POSIX. We would
1532 hang waiting for the parent resume otherwise. We need to
1533 clear also CLONE_VM but only in the CLONE_VFORK case as
1534 otherwise we would break pthread_create. */
1536 long new_arg0 = (tcp->u_arg[arg0_index] | CLONE_PTRACE);
1537 if (new_arg0 & CLONE_VFORK)
1538 new_arg0 &= ~(unsigned long)(CLONE_VFORK | CLONE_VM);
1539 if (arg_setup(tcp, &state) < 0
1540 || set_arg0(tcp, &state, new_arg0) < 0
1541 || arg_finish_change(tcp, &state) < 0)
1543 tcp->flags |= TCB_BPTSET;
1544 tcp->inst[0] = tcp->u_arg[arg0_index];
1545 tcp->inst[1] = tcp->u_arg[arg1_index];
1549 fprintf(stderr, "PANIC: setbpt for syscall %ld on %u???\n",
1550 tcp->scno, tcp->pid);
1558 clearbpt(struct tcb *tcp)
1560 arg_setup_state state;
1561 if (arg_setup(tcp, &state) < 0
1562 || restore_arg0(tcp, &state, tcp->inst[0]) < 0
1563 || restore_arg1(tcp, &state, tcp->inst[1]) < 0
1564 || arg_finish_change(tcp, &state))
1567 tcp->flags &= ~TCB_BPTSET;
1571 # else /* !defined LINUX */
1574 setbpt(struct tcb *tcp)
1577 # ifdef SPARC /* This code is slightly sparc specific */
1580 # define BPT 0x91d02001 /* ta 1 */
1581 # define LOOP 0x10800000 /* ba 0 */
1582 # define LOOPA 0x30800000 /* ba,a 0 */
1583 # define NOP 0x01000000
1585 static int loopdeloop[1] = {LOOPA};
1587 static int loopdeloop[2] = {LOOP, NOP};
1590 if (tcp->flags & TCB_BPTSET) {
1591 fprintf(stderr, "PANIC: TCB already set in pid %u\n", tcp->pid);
1594 if (ptrace(PTRACE_GETREGS, tcp->pid, (char *)®s, 0) < 0) {
1595 perror("setbpt: ptrace(PTRACE_GETREGS, ...)");
1598 tcp->baddr = regs.r_o7 + 8;
1599 if (ptrace(PTRACE_READTEXT, tcp->pid, (char *)tcp->baddr,
1600 sizeof tcp->inst, (char *)tcp->inst) < 0) {
1601 perror("setbpt: ptrace(PTRACE_READTEXT, ...)");
1606 * XXX - BRUTAL MODE ON
1607 * We cannot set a real BPT in the child, since it will not be
1608 * traced at the moment it will reach the trap and would probably
1609 * die with a core dump.
1610 * Thus, we are force our way in by taking out two instructions
1611 * and insert an eternal loop in stead, in expectance of the SIGSTOP
1612 * generated by out PTRACE_ATTACH.
1613 * Of cause, if we evaporate ourselves in the middle of all this...
1615 if (ptrace(PTRACE_WRITETEXT, tcp->pid, (char *) tcp->baddr,
1616 sizeof loopdeloop, (char *) loopdeloop) < 0) {
1617 perror("setbpt: ptrace(PTRACE_WRITETEXT, ...)");
1620 tcp->flags |= TCB_BPTSET;
1623 # endif /* SUNOS4 */
1629 clearbpt(struct tcb *tcp)
1638 if (!(tcp->flags & TCB_BPTSET)) {
1639 fprintf(stderr, "PANIC: TCB not set in pid %u\n", tcp->pid);
1642 if (ptrace(PTRACE_WRITETEXT, tcp->pid, (char *) tcp->baddr,
1643 sizeof tcp->inst, (char *) tcp->inst) < 0) {
1644 perror("clearbtp: ptrace(PTRACE_WRITETEXT, ...)");
1647 tcp->flags &= ~TCB_BPTSET;
1651 * Since we don't have a single instruction breakpoint, we may have
1652 * to adjust the program counter after removing our `breakpoint'.
1654 if (ptrace(PTRACE_GETREGS, tcp->pid, (char *)®s, 0) < 0) {
1655 perror("clearbpt: ptrace(PTRACE_GETREGS, ...)");
1658 if ((regs.r_pc < tcp->baddr) ||
1659 (regs.r_pc > tcp->baddr + 4)) {
1660 /* The breakpoint has not been reached yet */
1663 "NOTE: PC not at bpt (pc %#x baddr %#x)\n",
1664 regs.r_pc, tcp->baddr);
1667 if (regs.r_pc != tcp->baddr)
1669 fprintf(stderr, "NOTE: PC adjusted (%#x -> %#x\n",
1670 regs.r_pc, tcp->baddr);
1672 regs.r_pc = tcp->baddr;
1673 if (ptrace(PTRACE_SETREGS, tcp->pid, (char *)®s, 0) < 0) {
1674 perror("clearbpt: ptrace(PTRACE_SETREGS, ...)");
1679 # endif /* SUNOS4 */
1684 # endif /* !defined LINUX */
1686 #endif /* !USE_PROCFS */
1692 getex(struct tcb *tcp, struct exec *hdr)
1696 for (n = 0; n < sizeof *hdr; n += 4) {
1698 if (upeek(tcp, uoff(u_exdata) + n, &res) < 0)
1700 memcpy(((char *) hdr) + n, &res, 4);
1703 fprintf(stderr, "[struct exec: magic: %o version %u Mach %o\n",
1704 hdr->a_magic, hdr->a_toolversion, hdr->a_machtype);
1705 fprintf(stderr, "Text %lu Data %lu Bss %lu Syms %lu Entry %#lx]\n",
1706 hdr->a_text, hdr->a_data, hdr->a_bss, hdr->a_syms, hdr->a_entry);
1712 fixvfork(struct tcb *tcp)
1716 * Change `vfork' in a freshly exec'ed dynamically linked
1717 * executable's (internal) symbol table to plain old `fork'
1721 struct link_dynamic dyn;
1722 struct link_dynamic_2 ld;
1725 if (getex(tcp, &hdr) < 0)
1730 if (umove(tcp, (int) N_DATADDR(hdr), &dyn) < 0) {
1731 fprintf(stderr, "Cannot read DYNAMIC\n");
1734 if (umove(tcp, (int) dyn.ld_un.ld_2, &ld) < 0) {
1735 fprintf(stderr, "Cannot read link_dynamic_2\n");
1738 strtab = malloc((unsigned)ld.ld_symb_size);
1740 die_out_of_memory();
1741 if (umoven(tcp, (int)ld.ld_symbols+(int)N_TXTADDR(hdr),
1742 (int)ld.ld_symb_size, strtab) < 0)
1745 for (cp = strtab; cp < strtab + ld.ld_symb_size; ) {
1746 if (strcmp(cp, "_vfork") == 0) {
1748 fprintf(stderr, "fixvfork: FOUND _vfork\n");
1749 strcpy(cp, "_fork");
1754 if (cp < strtab + ld.ld_symb_size)
1756 * Write entire symbol table back to avoid
1757 * memory alignment bugs in ptrace
1759 if (tload(pid, (int)ld.ld_symbols+(int)N_TXTADDR(hdr),
1760 (int)ld.ld_symb_size, strtab) < 0)