2017-11-29 05:07:54 +00:00
|
|
|
/*-
|
|
|
|
* SPDX-License-Identifier: BSD-4-Clause
|
|
|
|
*
|
|
|
|
* Copyright 1997 Sean Eric Fagan
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted provided that the following conditions
|
|
|
|
* are met:
|
|
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer.
|
|
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
|
|
* documentation and/or other materials provided with the distribution.
|
|
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
|
|
* must display the following acknowledgement:
|
|
|
|
* This product includes software developed by Sean Eric Fagan
|
|
|
|
* 4. Neither the name of the author may be used to endorse or promote
|
|
|
|
* products derived from this software without specific prior written
|
|
|
|
* permission.
|
1997-12-20 18:40:43 +00:00
|
|
|
*
|
2017-11-29 05:07:54 +00:00
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
|
* SUCH DAMAGE.
|
|
|
|
*
|
|
|
|
* $FreeBSD$
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
1997-12-06 05:23:12 +00:00
|
|
|
* System call arguments come in several flavours:
|
|
|
|
* Hex -- values that should be printed in hex (addresses)
|
|
|
|
* Octal -- Same as above, but octal
|
|
|
|
* Int -- normal integer values (file descriptors, for example)
|
2014-10-13 16:37:06 +00:00
|
|
|
* LongHex -- long value that should be printed in hex
|
- Add decoding of kse_release, kevent, sigprocmask, unmount, socket, getrusage,
rename, __getcwd, shutdown, getrlimit, setrlimit, _umtx_lock, _umtx_unlock,
pathconf, truncate, ftruncate, kill
- Decode more arguments of open, mprot, *stat, and fcntl.
- Convert all constant-macro and bitfield decoding to lookup tables; much
cleaner than previous code.
- Print the timestamp of process exit and signal reception when -d or -D are in
use
- Try six times with 1/2 second delay to debug the child
PR: bin/52190 (updated)
Submitted by: Dan Nelson <dnelson@allantgroup.com>
Approved by: alfred
2006-05-15 21:18:28 +00:00
|
|
|
* Name -- pointer to a NULL-terminated string.
|
|
|
|
* BinString -- pointer to an array of chars, printed via strvisx().
|
|
|
|
* Ptr -- pointer to some unspecified structure. Just print as hex for now.
|
|
|
|
* Stat -- a pointer to a stat buffer. Prints a couple fields.
|
2017-06-23 18:06:46 +00:00
|
|
|
* Stat11 -- a pointer to a freebsd 11 stat buffer. Prints a couple fields.
|
2015-10-03 18:57:15 +00:00
|
|
|
* StatFs -- a pointer to a statfs buffer. Prints a few fields.
|
1997-12-06 06:51:14 +00:00
|
|
|
* Ioctl -- an ioctl command. Woefully limited.
|
Add support for decoding Timespec, Timeval, Itimerval, Pollfd,
Fd_set and Sigaction structures. Use these for printing the arguments
to sigaction(), nanosleep(), select(), poll(), gettimeofday(),
clock_gettime(), recvfrom(), getitimer() and setitimer().
This is based on Dan's patch from the PR but I've hacked it for
style and some other issues. While Dan has checked this patch, any
goofs are probably my fault.
(The PR also contains support for the dual return values of pipe().
These will follow once I've ported that support to platforms other
than i386.)
PR: 52190
Submitted by: Dan Nelson <dnelson@allantgroup.com>
2004-03-23 12:37:02 +00:00
|
|
|
* Quad -- a double-word value. e.g., lseek(int, offset_t, int)
|
|
|
|
* Signal -- a signal number. Prints the signal name (SIGxxx)
|
|
|
|
* Sockaddr -- a pointer to a struct sockaddr. Prints symbolic AF, and IP:Port
|
|
|
|
* StringArray -- a pointer to an array of string pointers.
|
|
|
|
* Timespec -- a pointer to a struct timespec. Prints both elements.
|
|
|
|
* Timeval -- a pointer to a struct timeval. Prints both elements.
|
- Add decoding of kse_release, kevent, sigprocmask, unmount, socket, getrusage,
rename, __getcwd, shutdown, getrlimit, setrlimit, _umtx_lock, _umtx_unlock,
pathconf, truncate, ftruncate, kill
- Decode more arguments of open, mprot, *stat, and fcntl.
- Convert all constant-macro and bitfield decoding to lookup tables; much
cleaner than previous code.
- Print the timestamp of process exit and signal reception when -d or -D are in
use
- Try six times with 1/2 second delay to debug the child
PR: bin/52190 (updated)
Submitted by: Dan Nelson <dnelson@allantgroup.com>
Approved by: alfred
2006-05-15 21:18:28 +00:00
|
|
|
* Timeval2 -- a pointer to two struct timevals. Prints both elements of both.
|
Add support for decoding Timespec, Timeval, Itimerval, Pollfd,
Fd_set and Sigaction structures. Use these for printing the arguments
to sigaction(), nanosleep(), select(), poll(), gettimeofday(),
clock_gettime(), recvfrom(), getitimer() and setitimer().
This is based on Dan's patch from the PR but I've hacked it for
style and some other issues. While Dan has checked this patch, any
goofs are probably my fault.
(The PR also contains support for the dual return values of pipe().
These will follow once I've ported that support to platforms other
than i386.)
PR: 52190
Submitted by: Dan Nelson <dnelson@allantgroup.com>
2004-03-23 12:37:02 +00:00
|
|
|
* Itimerval -- a pointer to a struct itimerval. Prints all elements.
|
|
|
|
* Pollfd -- a pointer to an array of struct pollfd. Prints .fd and .events.
|
|
|
|
* Fd_set -- a pointer to an array of fd_set. Prints the fds that are set.
|
|
|
|
* Sigaction -- a pointer to a struct sigaction. Prints all elements.
|
- Add decoding of kse_release, kevent, sigprocmask, unmount, socket, getrusage,
rename, __getcwd, shutdown, getrlimit, setrlimit, _umtx_lock, _umtx_unlock,
pathconf, truncate, ftruncate, kill
- Decode more arguments of open, mprot, *stat, and fcntl.
- Convert all constant-macro and bitfield decoding to lookup tables; much
cleaner than previous code.
- Print the timestamp of process exit and signal reception when -d or -D are in
use
- Try six times with 1/2 second delay to debug the child
PR: bin/52190 (updated)
Submitted by: Dan Nelson <dnelson@allantgroup.com>
Approved by: alfred
2006-05-15 21:18:28 +00:00
|
|
|
* Sigset -- a pointer to a sigset_t. Prints the signals that are set.
|
|
|
|
* Sigprocmask -- the first argument to sigprocmask(). Prints the name.
|
|
|
|
* Kevent -- a pointer to an array of struct kevents. Prints all elements.
|
2008-07-31 17:15:21 +00:00
|
|
|
* Pathconf -- the 2nd argument of pathconf().
|
2015-10-06 21:58:38 +00:00
|
|
|
* Utrace -- utrace(2) buffer.
|
2017-06-02 13:33:50 +00:00
|
|
|
* CapRights -- a pointer to a cap_rights_t. Prints all set capabilities.
|
1997-12-06 05:23:12 +00:00
|
|
|
*
|
|
|
|
* In addition, the pointer types (String, Ptr) may have OUT masked in --
|
|
|
|
* this means that the data is set on *return* from the system call -- or
|
|
|
|
* IN (meaning that the data is passed *into* the system call).
|
|
|
|
*/
|
|
|
|
|
2018-03-29 00:12:50 +00:00
|
|
|
enum Argtype {
|
|
|
|
None = 1,
|
2015-10-08 05:27:45 +00:00
|
|
|
|
2018-03-29 00:12:50 +00:00
|
|
|
/* Scalar integers. */
|
|
|
|
Socklent,
|
|
|
|
Octal,
|
|
|
|
Int,
|
|
|
|
UInt,
|
|
|
|
Hex,
|
|
|
|
Long,
|
|
|
|
LongHex,
|
|
|
|
Sizet,
|
|
|
|
Quad,
|
|
|
|
QuadHex,
|
|
|
|
|
|
|
|
/* Encoded scalar values. */
|
|
|
|
Accessmode,
|
|
|
|
Acltype,
|
2020-12-10 07:13:15 +00:00
|
|
|
AiofsyncOp,
|
2018-03-29 00:12:50 +00:00
|
|
|
Atfd,
|
|
|
|
Atflags,
|
|
|
|
CapFcntlRights,
|
2022-03-03 12:45:11 +00:00
|
|
|
Closerangeflags,
|
2018-03-29 00:12:50 +00:00
|
|
|
Extattrnamespace,
|
|
|
|
Fadvice,
|
|
|
|
Fcntl,
|
|
|
|
Fcntlflag,
|
|
|
|
FileFlags,
|
|
|
|
Flockop,
|
|
|
|
Getfsstatmode,
|
|
|
|
Idtype,
|
|
|
|
Ioctl,
|
|
|
|
Kldsymcmd,
|
|
|
|
Kldunloadflags,
|
2020-12-10 07:13:15 +00:00
|
|
|
LioMode,
|
2018-03-29 00:12:50 +00:00
|
|
|
Madvice,
|
|
|
|
Minherit,
|
|
|
|
Msgflags,
|
|
|
|
Mlockall,
|
|
|
|
Mmapflags,
|
|
|
|
Mountflags,
|
|
|
|
Mprot,
|
|
|
|
Msync,
|
|
|
|
Open,
|
|
|
|
Pathconf,
|
|
|
|
Pipe2,
|
|
|
|
Procctl,
|
|
|
|
Priowhich,
|
|
|
|
Ptraceop,
|
2021-02-05 16:28:09 +00:00
|
|
|
Sendfileflags,
|
|
|
|
Sendfilehdtr,
|
2018-03-29 00:12:50 +00:00
|
|
|
Quotactlcmd,
|
|
|
|
Reboothowto,
|
|
|
|
Resource,
|
|
|
|
Rforkflags,
|
|
|
|
Rtpriofunc,
|
|
|
|
RusageWho,
|
|
|
|
Schedpolicy,
|
2020-02-19 14:54:33 +00:00
|
|
|
ShmFlags,
|
2018-03-29 00:12:50 +00:00
|
|
|
Shutdown,
|
|
|
|
Signal,
|
|
|
|
Sigprocmask,
|
|
|
|
Sockdomain,
|
|
|
|
Sockoptlevel,
|
|
|
|
Sockoptname,
|
|
|
|
Sockprotocol,
|
|
|
|
Socktype,
|
|
|
|
Sysarch,
|
2019-09-18 16:15:05 +00:00
|
|
|
Sysctl,
|
2018-03-29 00:12:50 +00:00
|
|
|
Umtxop,
|
|
|
|
Waitoptions,
|
|
|
|
Whence,
|
|
|
|
|
|
|
|
/* Pointers to non-structures. */
|
|
|
|
Ptr,
|
2020-12-10 07:13:15 +00:00
|
|
|
AiocbArray,
|
|
|
|
AiocbPointer,
|
2018-03-29 00:12:50 +00:00
|
|
|
BinString,
|
|
|
|
CapRights,
|
|
|
|
ExecArgs,
|
|
|
|
ExecEnv,
|
|
|
|
ExitStatus,
|
|
|
|
Fd_set,
|
|
|
|
IntArray,
|
|
|
|
Iovec,
|
|
|
|
Name,
|
|
|
|
PipeFds,
|
|
|
|
PSig,
|
|
|
|
PQuadHex,
|
|
|
|
PUInt,
|
|
|
|
Readlinkres,
|
2018-10-28 10:59:49 +00:00
|
|
|
ShmName,
|
2018-03-29 00:12:50 +00:00
|
|
|
StringArray,
|
|
|
|
|
|
|
|
/* Pointers to structures. */
|
2020-12-10 07:13:15 +00:00
|
|
|
Aiocb,
|
2018-03-29 00:12:50 +00:00
|
|
|
Itimerval,
|
|
|
|
Kevent,
|
|
|
|
Kevent11,
|
|
|
|
LinuxSockArgs,
|
|
|
|
Msghdr,
|
|
|
|
Pollfd,
|
|
|
|
Rlimit,
|
|
|
|
Rusage,
|
|
|
|
Schedparam,
|
|
|
|
Sctpsndrcvinfo,
|
|
|
|
Sigaction,
|
2020-12-10 07:13:15 +00:00
|
|
|
Sigevent,
|
2018-03-29 00:12:50 +00:00
|
|
|
Siginfo,
|
|
|
|
Sigset,
|
|
|
|
Sockaddr,
|
|
|
|
Stat,
|
|
|
|
Stat11,
|
|
|
|
StatFs,
|
|
|
|
Timespec,
|
|
|
|
Timespec2,
|
|
|
|
Timeval,
|
|
|
|
Timeval2,
|
|
|
|
Utrace,
|
|
|
|
|
|
|
|
MAX_ARG_TYPE,
|
|
|
|
};
|
1997-12-06 05:23:12 +00:00
|
|
|
|
2012-09-02 11:03:18 +00:00
|
|
|
#define ARG_MASK 0xff
|
|
|
|
#define OUT 0x100
|
|
|
|
#define IN /*0x20*/0
|
1997-12-06 05:23:12 +00:00
|
|
|
|
2018-03-29 00:12:50 +00:00
|
|
|
_Static_assert(ARG_MASK > MAX_ARG_TYPE,
|
|
|
|
"ARG_MASK overlaps with Argtype values");
|
|
|
|
|
2021-03-04 18:28:25 +00:00
|
|
|
struct syscall_arg {
|
1997-12-06 05:23:12 +00:00
|
|
|
enum Argtype type;
|
|
|
|
int offset;
|
|
|
|
};
|
|
|
|
|
2021-03-04 18:28:25 +00:00
|
|
|
struct syscall_decode {
|
|
|
|
const char *name; /* Name for calling convention lookup. */
|
|
|
|
/*
|
|
|
|
* Syscall return type:
|
|
|
|
* 0: no return value (e.g. exit)
|
|
|
|
* 1: normal return value (a single int/long/pointer)
|
|
|
|
* 2: off_t return value (two values for 32-bit ABIs)
|
|
|
|
*/
|
|
|
|
u_int ret_type;
|
|
|
|
u_int nargs; /* number of meaningful arguments */
|
|
|
|
struct syscall_arg args[10]; /* Hopefully no syscalls with > 10 args */
|
|
|
|
};
|
|
|
|
|
1997-12-06 05:23:12 +00:00
|
|
|
struct syscall {
|
2015-10-05 18:08:35 +00:00
|
|
|
STAILQ_ENTRY(syscall) entries;
|
2021-03-04 18:28:25 +00:00
|
|
|
const char *name; /* Name to be displayed, might be malloc()'d */
|
|
|
|
struct syscall_decode decode;
|
2009-05-12 20:42:12 +00:00
|
|
|
struct timespec time; /* Time spent for this call */
|
|
|
|
int ncalls; /* Number of calls */
|
|
|
|
int nerror; /* Number of calls that returned with error */
|
2016-12-06 00:39:00 +00:00
|
|
|
bool unknown; /* Unknown system call */
|
1997-12-06 05:23:12 +00:00
|
|
|
};
|
|
|
|
|
2016-12-06 00:39:00 +00:00
|
|
|
struct syscall *get_syscall(struct threadinfo *, u_int, u_int);
|
2022-01-12 23:28:13 +00:00
|
|
|
char *print_arg(struct syscall_arg *, unsigned long *, register_t *,
|
2019-07-16 22:59:15 +00:00
|
|
|
struct trussinfo *);
|
2014-04-24 14:12:35 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Linux Socket defines
|
|
|
|
*/
|
|
|
|
#define LINUX_SOCKET 1
|
|
|
|
#define LINUX_BIND 2
|
|
|
|
#define LINUX_CONNECT 3
|
|
|
|
#define LINUX_LISTEN 4
|
|
|
|
#define LINUX_ACCEPT 5
|
|
|
|
#define LINUX_GETSOCKNAME 6
|
|
|
|
#define LINUX_GETPEERNAME 7
|
|
|
|
#define LINUX_SOCKETPAIR 8
|
|
|
|
#define LINUX_SEND 9
|
|
|
|
#define LINUX_RECV 10
|
|
|
|
#define LINUX_SENDTO 11
|
|
|
|
#define LINUX_RECVFROM 12
|
|
|
|
#define LINUX_SHUTDOWN 13
|
|
|
|
#define LINUX_SETSOCKOPT 14
|
|
|
|
#define LINUX_GETSOCKOPT 15
|
|
|
|
#define LINUX_SENDMSG 16
|
2015-09-30 00:08:24 +00:00
|
|
|
#define LINUX_RECVMSG 17
|
2014-04-24 14:12:35 +00:00
|
|
|
|
2022-01-12 23:28:13 +00:00
|
|
|
#define PAD_(t) (sizeof(register_t) <= sizeof(t) ? \
|
|
|
|
0 : sizeof(register_t) - sizeof(t))
|
2015-09-30 00:08:24 +00:00
|
|
|
|
2014-04-24 14:12:35 +00:00
|
|
|
#if BYTE_ORDER == LITTLE_ENDIAN
|
|
|
|
#define PADL_(t) 0
|
|
|
|
#define PADR_(t) PAD_(t)
|
|
|
|
#else
|
|
|
|
#define PADL_(t) PAD_(t)
|
|
|
|
#define PADR_(t) 0
|
|
|
|
#endif
|
|
|
|
|
|
|
|
typedef int l_int;
|
|
|
|
typedef uint32_t l_ulong;
|
|
|
|
|
|
|
|
struct linux_socketcall_args {
|
|
|
|
char what_l_[PADL_(l_int)]; l_int what; char what_r_[PADR_(l_int)];
|
|
|
|
char args_l_[PADL_(l_ulong)]; l_ulong args; char args_r_[PADR_(l_ulong)];
|
|
|
|
};
|
|
|
|
|
2016-02-16 22:00:01 +00:00
|
|
|
void print_syscall(struct trussinfo *);
|
2022-01-12 23:28:13 +00:00
|
|
|
void print_syscall_ret(struct trussinfo *, int, register_t *);
|
2009-05-12 20:42:12 +00:00
|
|
|
void print_summary(struct trussinfo *trussinfo);
|