- Decode the arguments for several signal-related system calls: sigpending,

sigqueue, sigreturn, sigsuspend, sigtimedwait, sigwait, sigwaitinfo, and
  thr_kill.
- Print signal sets as a structure (with {}'s) and in particular use this to
  differentiate empty sets from a NULL pointer.
- Decode arguments for some other system calls: issetugid, pipe2, sysarch
  (operations are only decoded for amd64 and i386), and thr_self.
This commit is contained in:
jhb 2015-08-17 17:52:28 +00:00
parent 2cc6e1e95a
commit 5c8f8904c2
2 changed files with 51 additions and 7 deletions

View File

@ -41,7 +41,8 @@ enum Argtype { None = 1, Hex, Octal, Int, LongHex, Name, Ptr, Stat, Ioctl, Quad,
Sigset, Sigprocmask, Kevent, Sockdomain, Socktype, Open, Sigset, Sigprocmask, Kevent, Sockdomain, Socktype, Open,
Fcntlflag, Rusage, BinString, Shutdown, Resource, Rlimit, Timeval2, Fcntlflag, Rusage, BinString, Shutdown, Resource, Rlimit, Timeval2,
Pathconf, Rforkflags, ExitStatus, Waitoptions, Idtype, Procctl, Pathconf, Rforkflags, ExitStatus, Waitoptions, Idtype, Procctl,
LinuxSockArgs, Umtxop, Atfd, Atflags, Timespec2, Accessmode }; LinuxSockArgs, Umtxop, Atfd, Atflags, Timespec2, Accessmode, Long,
Sysarch };
#define ARG_MASK 0xff #define ARG_MASK 0xff
#define OUT 0x100 #define OUT 0x100

View File

@ -56,6 +56,7 @@ static const char rcsid[] =
#include <sys/event.h> #include <sys/event.h>
#include <sys/stat.h> #include <sys/stat.h>
#include <sys/resource.h> #include <sys/resource.h>
#include <machine/sysarch.h>
#include <ctype.h> #include <ctype.h>
#include <err.h> #include <err.h>
@ -113,6 +114,7 @@ static struct syscall syscalls[] = {
{ .name = "getsid", .ret_type = 1, .nargs = 1, { .name = "getsid", .ret_type = 1, .nargs = 1,
.args = { { Int, 0 } } }, .args = { { Int, 0 } } },
{ .name = "getuid", .ret_type = 1, .nargs = 0 }, { .name = "getuid", .ret_type = 1, .nargs = 0 },
{ .name = "issetugid", .ret_type = 1, .nargs = 0 },
{ .name = "readlink", .ret_type = 1, .nargs = 3, { .name = "readlink", .ret_type = 1, .nargs = 3,
.args = { { Name, 0 }, { Readlinkres | OUT, 1 }, { Int, 2 } } }, .args = { { Name, 0 }, { Readlinkres | OUT, 1 }, { Int, 2 } } },
{ .name = "readlinkat", .ret_type = 1, .nargs = 4, { .name = "readlinkat", .ret_type = 1, .nargs = 4,
@ -280,8 +282,22 @@ static struct syscall syscalls[] = {
{ .name = "kevent", .ret_type = 0, .nargs = 6, { .name = "kevent", .ret_type = 0, .nargs = 6,
.args = { { Int, 0 }, { Kevent, 1 }, { Int, 2 }, { Kevent | OUT, 3 }, .args = { { Int, 0 }, { Kevent, 1 }, { Int, 2 }, { Kevent | OUT, 3 },
{ Int, 4 }, { Timespec, 5 } } }, { Int, 4 }, { Timespec, 5 } } },
{ .name = "sigpending", .ret_type = 0, .nargs = 1,
.args = { { Sigset | OUT, 0 } } },
{ .name = "sigprocmask", .ret_type = 0, .nargs = 3, { .name = "sigprocmask", .ret_type = 0, .nargs = 3,
.args = { { Sigprocmask, 0 }, { Sigset, 1 }, { Sigset | OUT, 2 } } }, .args = { { Sigprocmask, 0 }, { Sigset, 1 }, { Sigset | OUT, 2 } } },
{ .name = "sigqueue", .ret_type = 0, .nargs = 3,
.args = { { Int, 0 }, { Signal, 1 }, { LongHex, 2 } } },
{ .name = "sigreturn", .ret_type = 0, .nargs = 1,
.args = { { Ptr, 0 } } },
{ .name = "sigsuspend", .ret_type = 0, .nargs = 1,
.args = { { Sigset | IN, 0 } } },
{ .name = "sigtimedwait", .ret_type = 1, .nargs = 3,
.args = { { Sigset | IN, 0 }, { Ptr, 1 }, { Timespec | IN, 2 } } },
{ .name = "sigwait", .ret_type = 1, .nargs = 2,
.args = { { Sigset | IN, 0 }, { Ptr, 1 } } },
{ .name = "sigwaitinfo", .ret_type = 1, .nargs = 2,
.args = { { Sigset | IN, 0 }, { Ptr, 1 } } },
{ .name = "unmount", .ret_type = 1, .nargs = 2, { .name = "unmount", .ret_type = 1, .nargs = 2,
.args = { { Name, 0 }, { Int, 1 } } }, .args = { { Name, 0 }, { Int, 1 } } },
{ .name = "socket", .ret_type = 1, .nargs = 3, { .name = "socket", .ret_type = 1, .nargs = 3,
@ -317,6 +333,8 @@ static struct syscall syscalls[] = {
.args = { { Name | IN, 0 }, { Pathconf, 1 } } }, .args = { { Name | IN, 0 }, { Pathconf, 1 } } },
{ .name = "pipe", .ret_type = 1, .nargs = 1, { .name = "pipe", .ret_type = 1, .nargs = 1,
.args = { { Ptr, 0 } } }, .args = { { Ptr, 0 } } },
{ .name = "pipe2", .ret_type = 1, .nargs = 2,
.args = { { Ptr, 0 }, { Open, 1 } } },
{ .name = "truncate", .ret_type = 1, .nargs = 3, { .name = "truncate", .ret_type = 1, .nargs = 3,
.args = { { Name | IN, 0 }, { Int | IN, 1 }, { Quad | IN, 2 } } }, .args = { { Name | IN, 0 }, { Int | IN, 1 }, { Quad | IN, 2 } } },
{ .name = "ftruncate", .ret_type = 1, .nargs = 3, { .name = "ftruncate", .ret_type = 1, .nargs = 3,
@ -345,9 +363,15 @@ static struct syscall syscalls[] = {
{ Waitoptions, 3 }, { Rusage | OUT, 4 }, { Ptr, 5 } } }, { Waitoptions, 3 }, { Rusage | OUT, 4 }, { Ptr, 5 } } },
{ .name = "procctl", .ret_type = 1, .nargs = 4, { .name = "procctl", .ret_type = 1, .nargs = 4,
.args = { { Idtype, 0 }, { Int, 1 }, { Procctl, 2 }, { Ptr, 3 } } }, .args = { { Idtype, 0 }, { Int, 1 }, { Procctl, 2 }, { Ptr, 3 } } },
{ .name = "sysarch", .ret_type = 1, .nargs = 2,
.args = { { Sysarch, 0 }, { Ptr, 1 } } },
{ .name = "_umtx_op", .ret_type = 1, .nargs = 5, { .name = "_umtx_op", .ret_type = 1, .nargs = 5,
.args = { { Ptr, 0 }, { Umtxop, 1 }, { LongHex, 2 }, { Ptr, 3 }, .args = { { Ptr, 0 }, { Umtxop, 1 }, { LongHex, 2 }, { Ptr, 3 },
{ Ptr, 4 } } }, { Ptr, 4 } } },
{ .name = "thr_kill", .ret_type = 0, .nargs = 2,
.args = { { Long, 0 }, { Signal, 1 } } },
{ .name = "thr_self", .ret_type = 0, .nargs = 1,
.args = { { Ptr, 0 } } },
{ .name = 0 }, { .name = 0 },
}; };
@ -511,6 +535,16 @@ static struct xlat access_modes[] = {
X(R_OK) X(W_OK) X(X_OK) XEND X(R_OK) X(W_OK) X(X_OK) XEND
}; };
static struct xlat sysarch_ops[] = {
#if defined(__i386__) || defined(__amd64__)
X(I386_GET_LDT) X(I386_SET_LDT) X(I386_GET_IOPERM) X(I386_SET_IOPERM)
X(I386_VM86) X(I386_GET_FSBASE) X(I386_SET_FSBASE) X(I386_GET_GSBASE)
X(I386_SET_GSBASE) X(I386_GET_XFPUSTATE) X(AMD64_GET_FSBASE)
X(AMD64_SET_FSBASE) X(AMD64_GET_GSBASE) X(AMD64_SET_GSBASE)
X(AMD64_GET_XFPUSTATE)
#endif
XEND
};
#undef X #undef X
#undef XEND #undef XEND
@ -722,6 +756,9 @@ print_arg(struct syscall_args *sc, unsigned long *args, long retval,
case LongHex: case LongHex:
asprintf(&tmp, "0x%lx", args[sc->offset]); asprintf(&tmp, "0x%lx", args[sc->offset]);
break; break;
case Long:
asprintf(&tmp, "%ld", args[sc->offset]);
break;
case Name: { case Name: {
/* NULL-terminated string. */ /* NULL-terminated string. */
char *tmp2; char *tmp2;
@ -1089,8 +1126,10 @@ print_arg(struct syscall_args *sc, unsigned long *args, long retval,
asprintf(&tmp, "0x%lx", args[sc->offset]); asprintf(&tmp, "0x%lx", args[sc->offset]);
break; break;
} }
tmp = malloc(sys_nsig * 8); /* 7 bytes avg per signal name */ tmp = malloc(sys_nsig * 8 + 2); /* 7 bytes avg per signal name */
used = 0; used = 0;
tmp[used++] = '{';
tmp[used++] = ' ';
for (i = 1; i < sys_nsig; i++) { for (i = 1; i < sys_nsig; i++) {
if (sigismember(&ss, i)) { if (sigismember(&ss, i)) {
signame = strsig(i); signame = strsig(i);
@ -1098,10 +1137,11 @@ print_arg(struct syscall_args *sc, unsigned long *args, long retval,
free(signame); free(signame);
} }
} }
if (used) if (tmp[used - 1] == '|')
tmp[used-1] = 0; used--;
else tmp[used++] = ' ';
strcpy(tmp, "0x0"); tmp[used++] = '}';
tmp[used++] = '\0';
break; break;
} }
case Sigprocmask: { case Sigprocmask: {
@ -1447,6 +1487,9 @@ print_arg(struct syscall_args *sc, unsigned long *args, long retval,
tmp = strdup(xlookup_bits(access_modes, tmp = strdup(xlookup_bits(access_modes,
args[sc->offset])); args[sc->offset]));
break; break;
case Sysarch:
tmp = strdup(xlookup(sysarch_ops, args[sc->offset]));
break;
default: default:
errx(1, "Invalid argument type %d\n", sc->type & ARG_MASK); errx(1, "Invalid argument type %d\n", sc->type & ARG_MASK);
} }