ce7d953ebe
strace -i was fetching PC with a separate PEEKUSER despite having GETREGS data: ptrace(PTRACE_GETREGS, 22331, 0, 0x8087f00) = 0 ptrace(PTRACE_PEEKUSER, 22331, 4*EIP, [0x80dd7b7]) = 0 write(3, "[080dd7b7] ioctl(0, SNDCTL_TMR_T"..., 82) = 82 ptrace(PTRACE_SYSCALL, 22331, 0, SIG_0) = 0 Now it does this: ptrace(PTRACE_GETREGS, 22549, 0, 0x8087ea0) = 0 write(3, "[080dd7b7] ioctl(0, SNDCTL_TMR_T"..., 82) = 82 ptrace(PTRACE_SYSCALL, 22549, 0, SIG_0) = 0 Analogous improvement in sys_sigreturn() is also implemented. * defs.h: Declare extern struct pt_regs regs for SPARC[64] and ARM. Declare clear_regs(), get_regs() and get_regs_error flag variable. * strace.c (trace): Call get_regs(pid) as soon as we know the tcb and that it is stopped. * syscall.c (get_regs): New function. Used to fetch registers early, just after tracee has stopped. (printcall): Move it here from util.c. Use global regs.REG data, if available on the arch, instead of re-fetching it. (get_scno): Use global regs.REG data. (get_syscall_result): Likewise. * signal.c (sys_sigreturn): Likewise. * util.c (printcall): Moved to syscall.c. Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
722 lines
23 KiB
C
722 lines
23 KiB
C
/*
|
|
* Copyright (c) 1991, 1992 Paul Kranenburg <pk@cs.few.eur.nl>
|
|
* Copyright (c) 1993 Branko Lankester <branko@hacktic.nl>
|
|
* Copyright (c) 1993, 1994, 1995, 1996 Rick Sladkey <jrs@world.std.com>
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. The name of the author may not be used to endorse or promote products
|
|
* derived from this software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
# include "config.h"
|
|
#endif
|
|
#ifdef _LARGEFILE64_SOURCE
|
|
/* This is the macro everything checks before using foo64 names. */
|
|
# ifndef _LFS64_LARGEFILE
|
|
# define _LFS64_LARGEFILE 1
|
|
# endif
|
|
#endif
|
|
#ifdef MIPS
|
|
# include <sgidefs.h>
|
|
#endif
|
|
#include <features.h>
|
|
#ifdef HAVE_STDBOOL_H
|
|
# include <stdbool.h>
|
|
#endif
|
|
#include <stdint.h>
|
|
#include <inttypes.h>
|
|
#include <sys/types.h>
|
|
#ifdef STDC_HEADERS
|
|
# include <stddef.h>
|
|
#endif
|
|
#include <unistd.h>
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#include <ctype.h>
|
|
#include <string.h>
|
|
#include <errno.h>
|
|
#include <signal.h>
|
|
#include <time.h>
|
|
#include <sys/time.h>
|
|
#include <sys/syscall.h>
|
|
|
|
#ifndef HAVE_STRERROR
|
|
const char *strerror(int);
|
|
#endif
|
|
#ifndef HAVE_STPCPY
|
|
/* Some libc have stpcpy, some don't. Sigh...
|
|
* Roll our private implementation...
|
|
*/
|
|
#undef stpcpy
|
|
#define stpcpy strace_stpcpy
|
|
extern char *stpcpy(char *dst, const char *src);
|
|
#endif
|
|
|
|
#if !defined __GNUC__
|
|
# define __attribute__(x) /*nothing*/
|
|
#endif
|
|
|
|
#ifndef offsetof
|
|
# define offsetof(type, member) \
|
|
(((char *) &(((type *) NULL)->member)) - ((char *) (type *) NULL))
|
|
#endif
|
|
|
|
#define ARRAY_SIZE(a) (sizeof(a) / sizeof((a)[0]))
|
|
|
|
/* Glibc has an efficient macro for sigemptyset
|
|
* (it just does one or two assignments of 0 to internal vector of longs).
|
|
*/
|
|
#if defined(__GLIBC__) && defined(__sigemptyset) && !defined(sigemptyset)
|
|
# define sigemptyset __sigemptyset
|
|
#endif
|
|
|
|
/* Configuration section */
|
|
#ifndef MAX_QUALS
|
|
# if defined(MIPS)
|
|
# define MAX_QUALS 7000 /* maximum number of syscalls, signals, etc. */
|
|
# else
|
|
# define MAX_QUALS 2048 /* maximum number of syscalls, signals, etc. */
|
|
# endif
|
|
#endif
|
|
#ifndef DEFAULT_STRLEN
|
|
/* default maximum # of bytes printed in `printstr', change with -s switch */
|
|
# define DEFAULT_STRLEN 32
|
|
#endif
|
|
#ifndef DEFAULT_ACOLUMN
|
|
# define DEFAULT_ACOLUMN 40 /* default alignment column for results */
|
|
#endif
|
|
/*
|
|
* Maximum number of args to a syscall.
|
|
*
|
|
* Make sure that all entries in all syscallent.h files have nargs <= MAX_ARGS!
|
|
* linux/<ARCH>/syscallent.h: all have nargs <= 6.
|
|
*/
|
|
#ifndef MAX_ARGS
|
|
# define MAX_ARGS 6
|
|
#endif
|
|
/* default sorting method for call profiling */
|
|
#ifndef DEFAULT_SORTBY
|
|
# define DEFAULT_SORTBY "time"
|
|
#endif
|
|
|
|
#if defined(SPARC) || defined(SPARC64)
|
|
# define LINUXSPARC
|
|
#endif
|
|
#if defined(MIPS) && _MIPS_SIM == _MIPS_SIM_ABI32
|
|
# define LINUX_MIPSO32
|
|
#endif
|
|
#if defined(MIPS) && _MIPS_SIM == _MIPS_SIM_NABI32
|
|
# define LINUX_MIPSN32
|
|
# define LINUX_MIPS64
|
|
#endif
|
|
#if defined(MIPS) && _MIPS_SIM == _MIPS_SIM_ABI64
|
|
# define LINUX_MIPSN64
|
|
# define LINUX_MIPS64
|
|
#endif
|
|
|
|
#if (defined(LINUXSPARC) || defined(X86_64) || defined(ARM) || defined(AARCH64) || defined(AVR32)) && defined(__GLIBC__)
|
|
# include <sys/ptrace.h>
|
|
#else
|
|
/* Work around awkward prototype in ptrace.h. */
|
|
# define ptrace xptrace
|
|
# include <sys/ptrace.h>
|
|
# undef ptrace
|
|
# ifdef POWERPC
|
|
# define __KERNEL__
|
|
# include <asm/ptrace.h>
|
|
# undef __KERNEL__
|
|
# endif
|
|
extern long ptrace(int, int, char *, long);
|
|
#endif
|
|
|
|
#if !defined(__GLIBC__)
|
|
# define PTRACE_PEEKUSER PTRACE_PEEKUSR
|
|
# define PTRACE_POKEUSER PTRACE_POKEUSR
|
|
#endif
|
|
#if defined(X86_64) || defined(X32) || defined(I386)
|
|
/* For struct pt_regs. x86 strace uses PTRACE_GETREGS.
|
|
* PTRACE_GETREGS returns registers in the layout of this struct.
|
|
*/
|
|
# include <asm/ptrace.h>
|
|
#endif
|
|
#ifdef ALPHA
|
|
# define REG_R0 0
|
|
# define REG_A0 16
|
|
# define REG_A3 19
|
|
# define REG_FP 30
|
|
# define REG_PC 64
|
|
#endif /* ALPHA */
|
|
#ifdef MIPS
|
|
# define REG_V0 2
|
|
# define REG_A0 4
|
|
# define REG_A3 7
|
|
# define REG_SP 29
|
|
# define REG_EPC 64
|
|
#endif /* MIPS */
|
|
#ifdef HPPA
|
|
# define PT_GR20 (20*4)
|
|
# define PT_GR26 (26*4)
|
|
# define PT_GR28 (28*4)
|
|
# define PT_IAOQ0 (106*4)
|
|
# define PT_IAOQ1 (107*4)
|
|
#endif /* HPPA */
|
|
#ifdef SH64
|
|
/* SH64 Linux - this code assumes the following kernel API for system calls:
|
|
PC Offset 0
|
|
System Call Offset 16 (actually, (syscall no.) | (0x1n << 16),
|
|
where n = no. of parameters.
|
|
Other regs Offset 24+
|
|
|
|
On entry: R2-7 = parameters 1-6 (as many as necessary)
|
|
On return: R9 = result. */
|
|
|
|
/* Offset for peeks of registers */
|
|
# define REG_OFFSET (24)
|
|
# define REG_GENERAL(x) (8*(x)+REG_OFFSET)
|
|
# define REG_PC (0*8)
|
|
# define REG_SYSCALL (2*8)
|
|
#endif /* SH64 */
|
|
#ifdef AARCH64
|
|
#define NUM_ARM_REGS 18
|
|
struct arm_pt_regs {
|
|
int uregs[NUM_ARM_REGS];
|
|
};
|
|
#define ARM_cpsr uregs[16]
|
|
#define ARM_pc uregs[15]
|
|
#define ARM_lr uregs[14]
|
|
#define ARM_sp uregs[13]
|
|
#define ARM_ip uregs[12]
|
|
#define ARM_fp uregs[11]
|
|
#define ARM_r10 uregs[10]
|
|
#define ARM_r9 uregs[9]
|
|
#define ARM_r8 uregs[8]
|
|
#define ARM_r7 uregs[7]
|
|
#define ARM_r6 uregs[6]
|
|
#define ARM_r5 uregs[5]
|
|
#define ARM_r4 uregs[4]
|
|
#define ARM_r3 uregs[3]
|
|
#define ARM_r2 uregs[2]
|
|
#define ARM_r1 uregs[1]
|
|
#define ARM_r0 uregs[0]
|
|
#define ARM_ORIG_r0 uregs[17]
|
|
#endif /* AARCH64 */
|
|
|
|
#define SUPPORTED_PERSONALITIES 1
|
|
#define DEFAULT_PERSONALITY 0
|
|
|
|
#ifdef LINUXSPARC
|
|
/* Indexes into the pt_regs.u_reg[] array -- UREG_XX from kernel are all off
|
|
* by 1 and use Ix instead of Ox. These work for both 32 and 64 bit Linux. */
|
|
# define U_REG_G1 0
|
|
# define U_REG_O0 7
|
|
# define U_REG_O1 8
|
|
# define PERSONALITY0_WORDSIZE 4
|
|
# define PERSONALITY1_WORDSIZE 4
|
|
# undef SUPPORTED_PERSONALITIES
|
|
# if defined(SPARC64)
|
|
# include <asm/psrcompat.h>
|
|
# define SUPPORTED_PERSONALITIES 3
|
|
# define PERSONALITY2_WORDSIZE 8
|
|
# else
|
|
# include <asm/psr.h>
|
|
# define SUPPORTED_PERSONALITIES 2
|
|
# endif /* SPARC64 */
|
|
#endif /* LINUXSPARC */
|
|
|
|
#ifdef X86_64
|
|
# undef SUPPORTED_PERSONALITIES
|
|
# define SUPPORTED_PERSONALITIES 3
|
|
# define PERSONALITY0_WORDSIZE 8
|
|
# define PERSONALITY1_WORDSIZE 4
|
|
# define PERSONALITY2_WORDSIZE 4
|
|
#endif
|
|
|
|
#ifdef X32
|
|
# undef SUPPORTED_PERSONALITIES
|
|
# define SUPPORTED_PERSONALITIES 2
|
|
# define PERSONALITY0_WORDSIZE 4
|
|
# define PERSONALITY1_WORDSIZE 4
|
|
#endif
|
|
|
|
#ifdef ARM
|
|
# undef SUPPORTED_PERSONALITIES
|
|
# define SUPPORTED_PERSONALITIES 2
|
|
# define PERSONALITY0_WORDSIZE 4
|
|
# define PERSONALITY1_WORDSIZE 4
|
|
#endif
|
|
|
|
#ifdef AARCH64
|
|
# undef SUPPORTED_PERSONALITIES
|
|
/* The existing ARM personality, then AArch64 */
|
|
# define SUPPORTED_PERSONALITIES 2
|
|
# define PERSONALITY0_WORDSIZE 4
|
|
# define PERSONALITY1_WORDSIZE 8
|
|
# undef DEFAULT_PERSONALITY
|
|
# define DEFAULT_PERSONALITY 1
|
|
#endif
|
|
|
|
#ifdef POWERPC64
|
|
# undef SUPPORTED_PERSONALITIES
|
|
# define SUPPORTED_PERSONALITIES 2
|
|
# define PERSONALITY0_WORDSIZE 8
|
|
# define PERSONALITY1_WORDSIZE 4
|
|
#endif
|
|
|
|
#ifndef PERSONALITY0_WORDSIZE
|
|
# define PERSONALITY0_WORDSIZE (int)(sizeof(long))
|
|
#endif
|
|
|
|
#if !HAVE_DECL_PTRACE_SETOPTIONS
|
|
# define PTRACE_SETOPTIONS 0x4200
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_GETEVENTMSG
|
|
# define PTRACE_GETEVENTMSG 0x4201
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_GETSIGINFO
|
|
# define PTRACE_GETSIGINFO 0x4202
|
|
#endif
|
|
|
|
#if !HAVE_DECL_PTRACE_O_TRACESYSGOOD
|
|
# define PTRACE_O_TRACESYSGOOD 0x00000001
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_O_TRACEFORK
|
|
# define PTRACE_O_TRACEFORK 0x00000002
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_O_TRACEVFORK
|
|
# define PTRACE_O_TRACEVFORK 0x00000004
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_O_TRACECLONE
|
|
# define PTRACE_O_TRACECLONE 0x00000008
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_O_TRACEEXEC
|
|
# define PTRACE_O_TRACEEXEC 0x00000010
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_O_TRACEEXIT
|
|
# define PTRACE_O_TRACEEXIT 0x00000040
|
|
#endif
|
|
|
|
#if !HAVE_DECL_PTRACE_EVENT_FORK
|
|
# define PTRACE_EVENT_FORK 1
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_EVENT_VFORK
|
|
# define PTRACE_EVENT_VFORK 2
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_EVENT_CLONE
|
|
# define PTRACE_EVENT_CLONE 3
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_EVENT_EXEC
|
|
# define PTRACE_EVENT_EXEC 4
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_EVENT_VFORK_DONE
|
|
# define PTRACE_EVENT_VFORK_DONE 5
|
|
#endif
|
|
#if !HAVE_DECL_PTRACE_EVENT_EXIT
|
|
# define PTRACE_EVENT_EXIT 6
|
|
#endif
|
|
|
|
/* Experimental code using PTRACE_SEIZE can be enabled here.
|
|
* This needs Linux kernel 3.4.x or later to work.
|
|
*/
|
|
#define USE_SEIZE 1
|
|
|
|
#ifdef USE_SEIZE
|
|
# undef PTRACE_SEIZE
|
|
# define PTRACE_SEIZE 0x4206
|
|
# undef PTRACE_INTERRUPT
|
|
# define PTRACE_INTERRUPT 0x4207
|
|
# undef PTRACE_LISTEN
|
|
# define PTRACE_LISTEN 0x4208
|
|
# undef PTRACE_EVENT_STOP
|
|
# define PTRACE_EVENT_STOP 128
|
|
#endif
|
|
|
|
#if defined(I386)
|
|
extern struct pt_regs i386_regs;
|
|
#endif
|
|
#if defined(IA64)
|
|
extern long ia32;
|
|
#endif
|
|
#if defined(SPARC) || defined(SPARC64)
|
|
extern struct pt_regs regs;
|
|
#endif
|
|
#if defined(ARM)
|
|
extern struct pt_regs regs;
|
|
#endif
|
|
|
|
/* Trace Control Block */
|
|
struct tcb {
|
|
int flags; /* See below for TCB_ values */
|
|
int pid; /* Process Id of this entry */
|
|
int u_nargs; /* System call argument count */
|
|
int u_error; /* Error code */
|
|
long scno; /* System call number */
|
|
long u_arg[MAX_ARGS]; /* System call arguments */
|
|
#if defined(LINUX_MIPSN32) || defined(X32)
|
|
long long ext_arg[MAX_ARGS]; /* System call arguments */
|
|
#endif
|
|
long u_rval; /* return value */
|
|
#if defined(LINUX_MIPSN32) || defined(X32)
|
|
long long u_lrval; /* long long return value */
|
|
#endif
|
|
#if SUPPORTED_PERSONALITIES > 1
|
|
int currpers; /* Personality at the time of scno update */
|
|
#endif
|
|
int curcol; /* Output column for this process */
|
|
FILE *outf; /* Output file for this process */
|
|
const char *auxstr; /* Auxiliary info from syscall (see RVAL_STR) */
|
|
struct timeval stime; /* System time usage as of last process wait */
|
|
struct timeval dtime; /* Delta for system time usage */
|
|
struct timeval etime; /* Syscall entry time */
|
|
/* Support for tracing forked processes: */
|
|
long inst[2]; /* Saved clone args (badly named) */
|
|
};
|
|
|
|
/* TCB flags */
|
|
#define TCB_INUSE 00001 /* This table entry is in use */
|
|
/* We have attached to this process, but did not see it stopping yet */
|
|
#define TCB_STARTUP 00002
|
|
#define TCB_IGNORE_ONE_SIGSTOP 00004 /* Next SIGSTOP is to be ignored */
|
|
/*
|
|
* Are we in system call entry or in syscall exit?
|
|
*
|
|
* This bit is set after all syscall entry processing is done.
|
|
* Therefore, this bit will be set when next ptrace stop occurs,
|
|
* which should be syscall exit stop. Other stops which are possible
|
|
* directly after syscall entry (death, ptrace event stop)
|
|
* are simpler and handled without calling trace_syscall(), therefore
|
|
* the places where TCB_INSYSCALL can be set but we aren't in syscall stop
|
|
* are limited to trace(), this condition is never observed in trace_syscall()
|
|
* and below.
|
|
* The bit is cleared after all syscall exit processing is done.
|
|
* User-generated SIGTRAPs and post-execve SIGTRAP make it necessary
|
|
* to be very careful and NOT set TCB_INSYSCALL bit when they are encountered.
|
|
* TCB_WAITEXECVE bit is used for this purpose (see below).
|
|
*
|
|
* Use entering(tcp) / exiting(tcp) to check this bit to make code more readable.
|
|
*/
|
|
#define TCB_INSYSCALL 00010
|
|
#define TCB_ATTACHED 00020 /* It is attached already */
|
|
/* Are we PROG from "strace PROG [ARGS]" invocation? */
|
|
#define TCB_STRACE_CHILD 0040
|
|
#define TCB_BPTSET 00100 /* "Breakpoint" set after fork(2) */
|
|
#define TCB_REPRINT 00200 /* We should reprint this syscall on exit */
|
|
#define TCB_FILTERED 00400 /* This system call has been filtered out */
|
|
/* x86 does not need TCB_WAITEXECVE.
|
|
* It can detect SIGTRAP by looking at eax/rax.
|
|
* See "not a syscall entry (eax = %ld)\n" message
|
|
* in syscall_fixup_on_sysenter().
|
|
*/
|
|
#if defined(ALPHA) || defined(AVR32) || defined(SPARC) || defined(SPARC64) \
|
|
|| defined(POWERPC) || defined(IA64) || defined(HPPA) \
|
|
|| defined(SH) || defined(SH64) || defined(S390) || defined(S390X) \
|
|
|| defined(ARM) || defined(AARCH64) || defined(MIPS) || defined(BFIN) \
|
|
|| defined(TILE)
|
|
/* This tracee has entered into execve syscall. Expect post-execve SIGTRAP
|
|
* to happen. (When it is detected, tracee is continued and this bit is cleared.)
|
|
*/
|
|
# define TCB_WAITEXECVE 01000
|
|
#endif
|
|
|
|
/* qualifier flags */
|
|
#define QUAL_TRACE 0001 /* this system call should be traced */
|
|
#define QUAL_ABBREV 0002 /* abbreviate the structures of this syscall */
|
|
#define QUAL_VERBOSE 0004 /* decode the structures of this syscall */
|
|
#define QUAL_RAW 0010 /* print all args in hex for this syscall */
|
|
#define QUAL_SIGNAL 0020 /* report events with this signal */
|
|
#define QUAL_FAULT 0040 /* report events with this fault */
|
|
#define QUAL_READ 0100 /* dump data read on this file descriptor */
|
|
#define QUAL_WRITE 0200 /* dump data written to this file descriptor */
|
|
|
|
#define entering(tcp) (!((tcp)->flags & TCB_INSYSCALL))
|
|
#define exiting(tcp) ((tcp)->flags & TCB_INSYSCALL)
|
|
#define syserror(tcp) ((tcp)->u_error != 0)
|
|
#define verbose(tcp) (qual_flags[(tcp)->scno] & QUAL_VERBOSE)
|
|
#define abbrev(tcp) (qual_flags[(tcp)->scno] & QUAL_ABBREV)
|
|
#define filtered(tcp) ((tcp)->flags & TCB_FILTERED)
|
|
|
|
struct xlat {
|
|
int val;
|
|
const char *str;
|
|
};
|
|
|
|
extern const struct xlat open_mode_flags[];
|
|
extern const struct xlat addrfams[];
|
|
extern const struct xlat struct_user_offsets[];
|
|
extern const struct xlat open_access_modes[];
|
|
|
|
/* Format of syscall return values */
|
|
#define RVAL_DECIMAL 000 /* decimal format */
|
|
#define RVAL_HEX 001 /* hex format */
|
|
#define RVAL_OCTAL 002 /* octal format */
|
|
#define RVAL_UDECIMAL 003 /* unsigned decimal format */
|
|
#if defined(LINUX_MIPSN32) || defined(X32)
|
|
# if 0 /* unused so far */
|
|
# define RVAL_LDECIMAL 004 /* long decimal format */
|
|
# define RVAL_LHEX 005 /* long hex format */
|
|
# define RVAL_LOCTAL 006 /* long octal format */
|
|
# endif
|
|
# define RVAL_LUDECIMAL 007 /* long unsigned decimal format */
|
|
#endif
|
|
#define RVAL_MASK 007 /* mask for these values */
|
|
|
|
#define RVAL_STR 010 /* Print `auxstr' field after return val */
|
|
#define RVAL_NONE 020 /* Print nothing */
|
|
|
|
#define TRACE_FILE 001 /* Trace file-related syscalls. */
|
|
#define TRACE_IPC 002 /* Trace IPC-related syscalls. */
|
|
#define TRACE_NETWORK 004 /* Trace network-related syscalls. */
|
|
#define TRACE_PROCESS 010 /* Trace process-related syscalls. */
|
|
#define TRACE_SIGNAL 020 /* Trace signal-related syscalls. */
|
|
#define TRACE_DESC 040 /* Trace file descriptor-related syscalls. */
|
|
#define TRACE_MEMORY 0100 /* Trace memory mapping-related syscalls. */
|
|
#define SYSCALL_NEVER_FAILS 0200 /* Syscall is always successful. */
|
|
|
|
typedef enum {
|
|
CFLAG_NONE = 0,
|
|
CFLAG_ONLY_STATS,
|
|
CFLAG_BOTH
|
|
} cflag_t;
|
|
extern cflag_t cflag;
|
|
extern int *qual_flags;
|
|
extern bool debug_flag;
|
|
extern bool Tflag;
|
|
extern bool qflag;
|
|
extern bool not_failing_only;
|
|
extern bool show_fd_path;
|
|
extern bool tracing_paths;
|
|
extern unsigned int xflag;
|
|
extern unsigned int followfork;
|
|
extern unsigned int ptrace_setoptions;
|
|
extern unsigned int max_strlen;
|
|
|
|
enum bitness_t { BITNESS_CURRENT = 0, BITNESS_32 };
|
|
|
|
void error_msg(const char *fmt, ...) __attribute__ ((format(printf, 1, 2)));
|
|
void perror_msg(const char *fmt, ...) __attribute__ ((format(printf, 1, 2)));
|
|
void error_msg_and_die(const char *fmt, ...) __attribute__ ((noreturn, format(printf, 1, 2)));
|
|
void perror_msg_and_die(const char *fmt, ...) __attribute__ ((noreturn, format(printf, 1, 2)));
|
|
void die_out_of_memory(void) __attribute__ ((noreturn));
|
|
|
|
#ifdef USE_CUSTOM_PRINTF
|
|
/*
|
|
* Speed-optimized vfprintf implementation.
|
|
* See comment in vsprintf.c for allowed formats.
|
|
* Short version: %h[h]u, %zu, %tu are not allowed, use %[l[l]]u.
|
|
*
|
|
* It results in strace using about 5% less CPU in user space
|
|
* (compared to glibc version).
|
|
* But strace spends a lot of time in kernel space,
|
|
* so overall it does not appear to be a significant win.
|
|
* Thus disabled by default.
|
|
*/
|
|
int strace_vfprintf(FILE *fp, const char *fmt, va_list args);
|
|
#else
|
|
# define strace_vfprintf vfprintf
|
|
#endif
|
|
|
|
extern void set_sortby(const char *);
|
|
extern void set_overhead(int);
|
|
extern void qualify(const char *);
|
|
extern int trace_syscall(struct tcb *);
|
|
extern void count_syscall(struct tcb *, struct timeval *);
|
|
extern void call_summary(FILE *);
|
|
|
|
#if defined(AVR32) \
|
|
|| defined(I386) \
|
|
|| defined(X86_64) || defined(X32) \
|
|
|| defined(AARCH64) \
|
|
|| defined(ARM) \
|
|
|| defined(SPARC) || defined(SPARC64)
|
|
extern long get_regs_error;
|
|
# define clear_regs() (get_regs_error = -1)
|
|
extern void get_regs(pid_t pid);
|
|
#else
|
|
# define get_regs_error 0
|
|
# define clear_regs() ((void)0)
|
|
# define get_regs(pid) ((void)0)
|
|
#endif
|
|
extern int umoven(struct tcb *, long, int, char *);
|
|
#define umove(pid, addr, objp) \
|
|
umoven((pid), (addr), sizeof(*(objp)), (char *) (objp))
|
|
extern int umovestr(struct tcb *, long, int, char *);
|
|
extern int upeek(struct tcb *, long, long *);
|
|
#if defined(SPARC) || defined(SPARC64) || defined(IA64) || defined(SH)
|
|
extern long getrval2(struct tcb *);
|
|
#endif
|
|
/*
|
|
* On Linux, "setbpt" is a misnomer: we don't set a breakpoint
|
|
* (IOW: no poking in user's text segment),
|
|
* instead we change fork/vfork/clone into clone(CLONE_PTRACE).
|
|
* On newer kernels, we use PTRACE_O_TRACECLONE/TRACE[V]FORK instead.
|
|
*/
|
|
extern int setbpt(struct tcb *);
|
|
extern int clearbpt(struct tcb *);
|
|
|
|
extern const char *signame(int);
|
|
extern int is_restart_error(struct tcb *);
|
|
extern int pathtrace_select(const char *);
|
|
extern int pathtrace_match(struct tcb *);
|
|
extern const char *getfdpath(struct tcb *, int);
|
|
|
|
extern const char *xlookup(const struct xlat *, int);
|
|
|
|
extern int string_to_uint(const char *str);
|
|
extern int string_quote(const char *, char *, long, int);
|
|
|
|
#if HAVE_LONG_LONG
|
|
/* _l refers to the lower numbered u_arg,
|
|
* _h refers to the higher numbered u_arg
|
|
*/
|
|
# if HAVE_LITTLE_ENDIAN_LONG_LONG
|
|
# define LONG_LONG(_l,_h) \
|
|
((long long)((unsigned long long)(unsigned)(_l) | ((unsigned long long)(_h)<<32)))
|
|
# else
|
|
# define LONG_LONG(_l,_h) \
|
|
((long long)((unsigned long long)(unsigned)(_h) | ((unsigned long long)(_l)<<32)))
|
|
# endif
|
|
extern int printllval(struct tcb *, const char *, int);
|
|
#endif
|
|
extern void printxval(const struct xlat *, int, const char *);
|
|
extern int printargs(struct tcb *);
|
|
extern int printargs_lu(struct tcb *);
|
|
extern int printargs_ld(struct tcb *);
|
|
extern void addflags(const struct xlat *, int);
|
|
extern int printflags(const struct xlat *, int, const char *);
|
|
extern const char *sprintflags(const char *, const struct xlat *, int);
|
|
extern void dumpiov(struct tcb *, int, long);
|
|
extern void dumpstr(struct tcb *, long, int);
|
|
extern void printstr(struct tcb *, long, long);
|
|
extern void printnum(struct tcb *, long, const char *);
|
|
extern void printnum_int(struct tcb *, long, const char *);
|
|
extern void printpath(struct tcb *, long);
|
|
extern void printpathn(struct tcb *, long, int);
|
|
#define TIMESPEC_TEXT_BUFSIZE (sizeof(long)*3 * 2 + sizeof("{%u, %u}"))
|
|
#define TIMEVAL_TEXT_BUFSIZE TIMESPEC_TEXT_BUFSIZE
|
|
extern void printtv_bitness(struct tcb *, long, enum bitness_t, int);
|
|
#define printtv(tcp, addr) \
|
|
printtv_bitness((tcp), (addr), BITNESS_CURRENT, 0)
|
|
#define printtv_special(tcp, addr) \
|
|
printtv_bitness((tcp), (addr), BITNESS_CURRENT, 1)
|
|
extern char *sprinttv(char *, struct tcb *, long, enum bitness_t, int special);
|
|
extern void print_timespec(struct tcb *, long);
|
|
extern void sprint_timespec(char *, struct tcb *, long);
|
|
#ifdef HAVE_SIGINFO_T
|
|
extern void printsiginfo(siginfo_t *, int);
|
|
#endif
|
|
extern void printfd(struct tcb *, int);
|
|
extern void printsock(struct tcb *, long, int);
|
|
extern void print_sock_optmgmt(struct tcb *, long, int);
|
|
extern void printrusage(struct tcb *, long);
|
|
#ifdef ALPHA
|
|
extern void printrusage32(struct tcb *, long);
|
|
#endif
|
|
extern void printuid(const char *, unsigned long);
|
|
extern void printcall(struct tcb *);
|
|
extern void print_sigset(struct tcb *, long, int);
|
|
extern void printsignal(int);
|
|
extern void tprint_iov(struct tcb *, unsigned long, unsigned long, int decode_iov);
|
|
extern void tprint_iov_upto(struct tcb *, unsigned long, unsigned long, int decode_iov, unsigned long);
|
|
extern void tprint_open_modes(mode_t);
|
|
extern const char *sprint_open_modes(mode_t);
|
|
extern void print_loff_t(struct tcb *, long);
|
|
|
|
extern const struct ioctlent *ioctl_lookup(long);
|
|
extern const struct ioctlent *ioctl_next_match(const struct ioctlent *);
|
|
extern int ioctl_decode(struct tcb *, long, long);
|
|
extern int term_ioctl(struct tcb *, long, long);
|
|
extern int sock_ioctl(struct tcb *, long, long);
|
|
extern int proc_ioctl(struct tcb *, int, int);
|
|
extern int rtc_ioctl(struct tcb *, long, long);
|
|
extern int scsi_ioctl(struct tcb *, long, long);
|
|
extern int block_ioctl(struct tcb *, long, long);
|
|
extern int mtd_ioctl(struct tcb *, long, long);
|
|
extern int loop_ioctl(struct tcb *, long, long);
|
|
|
|
extern int tv_nz(struct timeval *);
|
|
extern int tv_cmp(struct timeval *, struct timeval *);
|
|
extern double tv_float(struct timeval *);
|
|
extern void tv_add(struct timeval *, struct timeval *, struct timeval *);
|
|
extern void tv_sub(struct timeval *, struct timeval *, struct timeval *);
|
|
extern void tv_mul(struct timeval *, struct timeval *, int);
|
|
extern void tv_div(struct timeval *, struct timeval *, int);
|
|
|
|
/* Strace log generation machinery.
|
|
*
|
|
* printing_tcp: tcb which has incomplete line being printed right now.
|
|
* NULL if last line has been completed ('\n'-terminated).
|
|
* printleader(tcp) examines it, finishes incomplete line if needed,
|
|
* the sets it to tcp.
|
|
* line_ended() clears printing_tcp and resets ->curcol = 0.
|
|
* tcp->curcol == 0 check is also used to detect completeness
|
|
* of last line, since in -ff mode just checking printing_tcp for NULL
|
|
* is not enough.
|
|
*
|
|
* If you change this code, test log generation in both -f and -ff modes
|
|
* using:
|
|
* strace -oLOG -f[f] test/threaded_execve
|
|
* strace -oLOG -f[f] test/sigkill_rain
|
|
* strace -oLOG -f[f] -p "`pidof web_browser`"
|
|
*/
|
|
extern struct tcb *printing_tcp;
|
|
extern void printleader(struct tcb *);
|
|
extern void line_ended(void);
|
|
extern void tabto(void);
|
|
extern void tprintf(const char *fmt, ...) __attribute__ ((format (printf, 1, 2)));
|
|
extern void tprints(const char *str);
|
|
|
|
#if SUPPORTED_PERSONALITIES > 1
|
|
extern void set_personality(int personality);
|
|
extern int current_personality;
|
|
extern const int personality_wordsize[];
|
|
# define current_wordsize (personality_wordsize[current_personality])
|
|
#else
|
|
# define set_personality(personality) ((void)0)
|
|
# define current_personality 0
|
|
# define current_wordsize PERSONALITY0_WORDSIZE
|
|
#endif
|
|
|
|
struct sysent {
|
|
unsigned nargs;
|
|
int sys_flags;
|
|
int (*sys_func)();
|
|
const char *sys_name;
|
|
};
|
|
|
|
struct ioctlent {
|
|
const char *doth;
|
|
const char *symbol;
|
|
unsigned long code;
|
|
};
|
|
|
|
extern const struct sysent *sysent;
|
|
extern unsigned nsyscalls;
|
|
extern const char *const *errnoent;
|
|
extern unsigned nerrnos;
|
|
extern const struct ioctlent *ioctlent;
|
|
extern unsigned nioctlents;
|
|
extern const char *const *signalent;
|
|
extern unsigned nsignals;
|
|
|
|
#define SCNO_IN_RANGE(scno) \
|
|
((unsigned long)(scno) < nsyscalls && sysent[scno].sys_func)
|