2b75c8ad3d
- Refactor the interface between the ABI-independent code and the ABI-specific backends. The backends now provide smaller hooks to fetch system call arguments and return values. The rest of the system call entry and exit handling that was previously duplicated among all the backends has been moved to one place. - Merge the loop when waiting for an event with the loop for handling stops. This also means not emulating a procfs-like interface on top of ptrace(). Instead, use a single event loop that fetches process events via waitid(). Among other things this allows us to report the full 32-bit exit value. - Use PT_FOLLOW_FORK to follow new child processes instead of forking a new truss process for each new child. This allows one truss process to monitor a tree of processes and truss -c should now display one total for the entire tree instead of separate summaries per process. - Use the recently added fields to ptrace_lwpinfo to determine the current system call number and argument count. The latter is especially useful and fixes a regression since the conversion from procfs. truss now generally prints the correct number of arguments for most system calls rather than printing extra arguments for any call not listed in the table in syscalls.c. - Actually check the new ABI when processes call exec. The comments claimed that this happened but it was not being done (perhaps this was another regression in the conversion to ptrace()). If the new ABI after exec is not supported, truss detaches from the process. If truss does not support the ABI for a newly executed process the process is killed before it returns from exec. - Along with the refactor, teach the various ABI-specific backends to fetch both return values, not just the first. Use this to properly report the full 64-bit return value from lseek(). In addition, the handler for "pipe" now pulls the pair of descriptors out of the return values (which is the true kernel system call interface) but displays them as an argument (which matches the interface exported by libc). - Each ABI handler adds entries to a linker set rather than requiring a statically defined table of handlers in main.c. - The arm and mips system call fetching code was changed to follow the same pattern as amd64 (and the in-kernel handler) of fetching register arguments first and then reading any remaining arguments from the stack. This should fix indirect system call arguments on at least arm. - The mipsn32 and n64 ABIs will now look for arguments in A4 through A7. - Use register %ebp for the 6th system call argument for Linux/i386 ABIs to match the in-kernel argument fetch code. - For powerpc binaries on a powerpc64 system, fetch the extra arguments on the stack as 32-bit values that are then copied into the 64-bit argument array instead of reading the 32-bit values directly into the 64-bit array. Reviewed by: kib (earlier version) Tested on: amd64 (FreeBSD/amd64 & i386), i386, arm (earlier version) Tested on: powerpc64 (FreeBSD/powerpc64 & powerpc) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D3575
132 lines
3.8 KiB
C
132 lines
3.8 KiB
C
/*
|
|
* Copyright 1997 Sean Eric Fagan
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by Sean Eric Fagan
|
|
* 4. Neither the name of the author may be used to endorse or promote
|
|
* products derived from this software without specific prior written
|
|
* permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include <sys/cdefs.h>
|
|
__FBSDID("$FreeBSD$");
|
|
|
|
/* FreeBSD/i386-specific system call handling. */
|
|
|
|
#include <sys/ptrace.h>
|
|
#include <sys/syscall.h>
|
|
|
|
#include <machine/reg.h>
|
|
#include <machine/psl.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#include "truss.h"
|
|
|
|
#include "syscalls.h"
|
|
|
|
static int
|
|
i386_fetch_args(struct trussinfo *trussinfo, u_int narg)
|
|
{
|
|
struct ptrace_io_desc iorequest;
|
|
struct reg regs;
|
|
struct current_syscall *cs;
|
|
lwpid_t tid;
|
|
unsigned int parm_offset;
|
|
|
|
tid = trussinfo->curthread->tid;
|
|
cs = &trussinfo->curthread->cs;
|
|
if (ptrace(PT_GETREGS, tid, (caddr_t)®s, 0) < 0) {
|
|
fprintf(trussinfo->outfile, "-- CANNOT READ REGISTERS --\n");
|
|
return (-1);
|
|
}
|
|
parm_offset = regs.r_esp + sizeof(int);
|
|
|
|
/*
|
|
* FreeBSD has two special kinds of system call redirections --
|
|
* SYS_syscall, and SYS___syscall. The former is the old syscall()
|
|
* routine, basically; the latter is for quad-aligned arguments.
|
|
*
|
|
* The system call argument count and code from ptrace() already
|
|
* account for these, but we need to skip over the first argument.
|
|
*/
|
|
switch (regs.r_eax) {
|
|
case SYS_syscall:
|
|
parm_offset += sizeof(int);
|
|
break;
|
|
case SYS___syscall:
|
|
parm_offset += sizeof(quad_t);
|
|
break;
|
|
}
|
|
|
|
iorequest.piod_op = PIOD_READ_D;
|
|
iorequest.piod_offs = (void *)parm_offset;
|
|
iorequest.piod_addr = cs->args;
|
|
iorequest.piod_len = narg * sizeof(unsigned long);
|
|
ptrace(PT_IO, tid, (caddr_t)&iorequest, 0);
|
|
if (iorequest.piod_len == 0)
|
|
return (-1);
|
|
|
|
return (0);
|
|
}
|
|
|
|
static int
|
|
i386_fetch_retval(struct trussinfo *trussinfo, long *retval, int *errorp)
|
|
{
|
|
struct reg regs;
|
|
lwpid_t tid;
|
|
|
|
tid = trussinfo->curthread->tid;
|
|
if (ptrace(PT_GETREGS, tid, (caddr_t)®s, 0) < 0) {
|
|
fprintf(trussinfo->outfile, "-- CANNOT READ REGISTERS --\n");
|
|
return (-1);
|
|
}
|
|
|
|
retval[0] = regs.r_eax;
|
|
retval[1] = regs.r_edx;
|
|
*errorp = !!(regs.r_eflags & PSL_C);
|
|
return (0);
|
|
}
|
|
|
|
static struct procabi i386_fbsd = {
|
|
"FreeBSD ELF32",
|
|
syscallnames,
|
|
nitems(syscallnames),
|
|
i386_fetch_args,
|
|
i386_fetch_retval
|
|
};
|
|
|
|
PROCABI(i386_fbsd);
|
|
|
|
static struct procabi i386_fbsd_aout = {
|
|
"FreeBSD a.out",
|
|
syscallnames,
|
|
nitems(syscallnames),
|
|
i386_fetch_args,
|
|
i386_fetch_retval
|
|
};
|
|
|
|
PROCABI(i386_fbsd_aout);
|
|
|