xref: /freebsd/lib/libproc/proc_bkpt.c (revision 7dd3aed9c9e4a50bd48d342ca1fa8222c73b4708)
18eb20f36SRui Paulo /*
28eb20f36SRui Paulo  * Copyright (c) 2010 The FreeBSD Foundation
38eb20f36SRui Paulo  * All rights reserved.
48eb20f36SRui Paulo  *
58eb20f36SRui Paulo  * This software was developed by Rui Paulo under sponsorship from the
68eb20f36SRui Paulo  * FreeBSD Foundation.
78eb20f36SRui Paulo  *
88eb20f36SRui Paulo  * Redistribution and use in source and binary forms, with or without
98eb20f36SRui Paulo  * modification, are permitted provided that the following conditions
108eb20f36SRui Paulo  * are met:
118eb20f36SRui Paulo  * 1. Redistributions of source code must retain the above copyright
128eb20f36SRui Paulo  *    notice, this list of conditions and the following disclaimer.
138eb20f36SRui Paulo  * 2. Redistributions in binary form must reproduce the above copyright
148eb20f36SRui Paulo  *    notice, this list of conditions and the following disclaimer in the
158eb20f36SRui Paulo  *    documentation and/or other materials provided with the distribution.
168eb20f36SRui Paulo  *
178eb20f36SRui Paulo  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
188eb20f36SRui Paulo  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
198eb20f36SRui Paulo  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
208eb20f36SRui Paulo  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
218eb20f36SRui Paulo  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
228eb20f36SRui Paulo  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
238eb20f36SRui Paulo  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
248eb20f36SRui Paulo  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
258eb20f36SRui Paulo  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
268eb20f36SRui Paulo  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
278eb20f36SRui Paulo  * SUCH DAMAGE.
288eb20f36SRui Paulo  */
298eb20f36SRui Paulo 
308eb20f36SRui Paulo #include <sys/cdefs.h>
318eb20f36SRui Paulo __FBSDID("$FreeBSD$");
328eb20f36SRui Paulo 
338eb20f36SRui Paulo #include <sys/types.h>
348eb20f36SRui Paulo #include <sys/ptrace.h>
358eb20f36SRui Paulo #include <sys/wait.h>
368eb20f36SRui Paulo #include <machine/_inttypes.h>
378eb20f36SRui Paulo 
388eb20f36SRui Paulo #include <assert.h>
398eb20f36SRui Paulo #include <err.h>
408eb20f36SRui Paulo #include <errno.h>
41813b2694SMark Johnston #include <signal.h>
42813b2694SMark Johnston #include <stdio.h>
438eb20f36SRui Paulo #include "_libproc.h"
448eb20f36SRui Paulo 
4527e54fb5SRuslan Bukin #if defined(__aarch64__)
4627e54fb5SRuslan Bukin #define	AARCH64_BRK		0xd4200000
4727e54fb5SRuslan Bukin #define	AARCH64_BRK_IMM16_SHIFT	5
4827e54fb5SRuslan Bukin #define	AARCH64_BRK_IMM16_VAL	(0xd << AARCH64_BRK_IMM16_SHIFT)
4927e54fb5SRuslan Bukin #define	BREAKPOINT_INSTR	(AARCH64_BRK | AARCH64_BRK_IMM16_VAL)
5027e54fb5SRuslan Bukin #define	BREAKPOINT_INSTR_SZ	4
5127e54fb5SRuslan Bukin #elif defined(__amd64__) || defined(__i386__)
528eb20f36SRui Paulo #define	BREAKPOINT_INSTR	0xcc	/* int 0x3 */
538eb20f36SRui Paulo #define	BREAKPOINT_INSTR_SZ	1
54e3c074a0SAndrew Turner #define	BREAKPOINT_ADJUST_SZ	BREAKPOINT_INSTR_SZ
5527e54fb5SRuslan Bukin #elif defined(__arm__)
5627e54fb5SRuslan Bukin #define	BREAKPOINT_INSTR	0xe7ffffff	/* bkpt */
5727e54fb5SRuslan Bukin #define	BREAKPOINT_INSTR_SZ	4
58f2242861SOleksandr Tymoshenko #elif defined(__mips__)
59f2242861SOleksandr Tymoshenko #define	BREAKPOINT_INSTR	0xd	/* break */
60f2242861SOleksandr Tymoshenko #define	BREAKPOINT_INSTR_SZ	4
61c7570492SJustin Hibbits #elif defined(__powerpc__)
62c7570492SJustin Hibbits #define	BREAKPOINT_INSTR	0x7fe00008	/* trap */
63c7570492SJustin Hibbits #define	BREAKPOINT_INSTR_SZ	4
64*7dd3aed9SRuslan Bukin #elif defined(__riscv__)
65*7dd3aed9SRuslan Bukin #define	BREAKPOINT_INSTR	0x00100073	/* sbreak */
66*7dd3aed9SRuslan Bukin #define	BREAKPOINT_INSTR_SZ	4
678eb20f36SRui Paulo #else
688eb20f36SRui Paulo #error "Add support for your architecture"
698eb20f36SRui Paulo #endif
708eb20f36SRui Paulo 
71813b2694SMark Johnston static int
72813b2694SMark Johnston proc_stop(struct proc_handle *phdl)
73813b2694SMark Johnston {
74813b2694SMark Johnston 	int status;
75813b2694SMark Johnston 
76813b2694SMark Johnston 	if (kill(proc_getpid(phdl), SIGSTOP) == -1) {
77813b2694SMark Johnston 		DPRINTF("kill %d", proc_getpid(phdl));
78813b2694SMark Johnston 		return (-1);
79813b2694SMark Johnston 	} else if (waitpid(proc_getpid(phdl), &status, WSTOPPED) == -1) {
80813b2694SMark Johnston 		DPRINTF("waitpid %d", proc_getpid(phdl));
81813b2694SMark Johnston 		return (-1);
82813b2694SMark Johnston 	} else if (!WIFSTOPPED(status)) {
83813b2694SMark Johnston 		DPRINTFX("waitpid: unexpected status 0x%x", status);
84813b2694SMark Johnston 		return (-1);
85813b2694SMark Johnston 	}
86813b2694SMark Johnston 
87813b2694SMark Johnston 	return (0);
88813b2694SMark Johnston }
89813b2694SMark Johnston 
908eb20f36SRui Paulo int
918eb20f36SRui Paulo proc_bkptset(struct proc_handle *phdl, uintptr_t address,
928eb20f36SRui Paulo     unsigned long *saved)
938eb20f36SRui Paulo {
948eb20f36SRui Paulo 	struct ptrace_io_desc piod;
958eb20f36SRui Paulo 	unsigned long paddr, caddr;
9692f92525SMark Johnston 	int ret = 0, stopped;
978eb20f36SRui Paulo 
988eb20f36SRui Paulo 	*saved = 0;
998eb20f36SRui Paulo 	if (phdl->status == PS_DEAD || phdl->status == PS_UNDEAD ||
1008eb20f36SRui Paulo 	    phdl->status == PS_IDLE) {
1018eb20f36SRui Paulo 		errno = ENOENT;
1028eb20f36SRui Paulo 		return (-1);
1038eb20f36SRui Paulo 	}
1048eb20f36SRui Paulo 
105813b2694SMark Johnston 	DPRINTFX("adding breakpoint at 0x%lx", address);
106813b2694SMark Johnston 
10792f92525SMark Johnston 	stopped = 0;
10892f92525SMark Johnston 	if (phdl->status != PS_STOP) {
109813b2694SMark Johnston 		if (proc_stop(phdl) != 0)
110813b2694SMark Johnston 			return (-1);
11192f92525SMark Johnston 		stopped = 1;
11292f92525SMark Johnston 	}
113813b2694SMark Johnston 
1148eb20f36SRui Paulo 	/*
1158eb20f36SRui Paulo 	 * Read the original instruction.
1168eb20f36SRui Paulo 	 */
1178eb20f36SRui Paulo 	caddr = address;
1188eb20f36SRui Paulo 	paddr = 0;
1198eb20f36SRui Paulo 	piod.piod_op = PIOD_READ_I;
1208eb20f36SRui Paulo 	piod.piod_offs = (void *)caddr;
1218eb20f36SRui Paulo 	piod.piod_addr = &paddr;
1228eb20f36SRui Paulo 	piod.piod_len  = BREAKPOINT_INSTR_SZ;
1238eb20f36SRui Paulo 	if (ptrace(PT_IO, proc_getpid(phdl), (caddr_t)&piod, 0) < 0) {
12430e81f7eSMark Johnston 		DPRINTF("ERROR: couldn't read instruction at address 0x%"
12530e81f7eSMark Johnston 		    PRIuPTR, address);
126813b2694SMark Johnston 		ret = -1;
127813b2694SMark Johnston 		goto done;
1288eb20f36SRui Paulo 	}
1298eb20f36SRui Paulo 	*saved = paddr;
1308eb20f36SRui Paulo 	/*
1318eb20f36SRui Paulo 	 * Write a breakpoint instruction to that address.
1328eb20f36SRui Paulo 	 */
1338eb20f36SRui Paulo 	caddr = address;
1348eb20f36SRui Paulo 	paddr = BREAKPOINT_INSTR;
1358eb20f36SRui Paulo 	piod.piod_op = PIOD_WRITE_I;
1368eb20f36SRui Paulo 	piod.piod_offs = (void *)caddr;
1378eb20f36SRui Paulo 	piod.piod_addr = &paddr;
1388eb20f36SRui Paulo 	piod.piod_len  = BREAKPOINT_INSTR_SZ;
1398eb20f36SRui Paulo 	if (ptrace(PT_IO, proc_getpid(phdl), (caddr_t)&piod, 0) < 0) {
14030e81f7eSMark Johnston 		DPRINTF("ERROR: couldn't write instruction at address 0x%"
14130e81f7eSMark Johnston 		    PRIuPTR, address);
142813b2694SMark Johnston 		ret = -1;
143813b2694SMark Johnston 		goto done;
1448eb20f36SRui Paulo 	}
1458eb20f36SRui Paulo 
146813b2694SMark Johnston done:
14792f92525SMark Johnston 	if (stopped)
148813b2694SMark Johnston 		/* Restart the process if we had to stop it. */
14992f92525SMark Johnston 		proc_continue(phdl);
150813b2694SMark Johnston 
151813b2694SMark Johnston 	return (ret);
1528eb20f36SRui Paulo }
1538eb20f36SRui Paulo 
1548eb20f36SRui Paulo int
1558eb20f36SRui Paulo proc_bkptdel(struct proc_handle *phdl, uintptr_t address,
1568eb20f36SRui Paulo     unsigned long saved)
1578eb20f36SRui Paulo {
1588eb20f36SRui Paulo 	struct ptrace_io_desc piod;
1598eb20f36SRui Paulo 	unsigned long paddr, caddr;
16092f92525SMark Johnston 	int ret = 0, stopped;
1618eb20f36SRui Paulo 
1628eb20f36SRui Paulo 	if (phdl->status == PS_DEAD || phdl->status == PS_UNDEAD ||
1638eb20f36SRui Paulo 	    phdl->status == PS_IDLE) {
1648eb20f36SRui Paulo 		errno = ENOENT;
1658eb20f36SRui Paulo 		return (-1);
1668eb20f36SRui Paulo 	}
167813b2694SMark Johnston 
168813b2694SMark Johnston 	DPRINTFX("removing breakpoint at 0x%lx", address);
169813b2694SMark Johnston 
17092f92525SMark Johnston 	stopped = 0;
17192f92525SMark Johnston 	if (phdl->status != PS_STOP) {
172813b2694SMark Johnston 		if (proc_stop(phdl) != 0)
173813b2694SMark Johnston 			return (-1);
17492f92525SMark Johnston 		stopped = 1;
17592f92525SMark Johnston 	}
176813b2694SMark Johnston 
1778eb20f36SRui Paulo 	/*
1788eb20f36SRui Paulo 	 * Overwrite the breakpoint instruction that we setup previously.
1798eb20f36SRui Paulo 	 */
1808eb20f36SRui Paulo 	caddr = address;
1818eb20f36SRui Paulo 	paddr = saved;
1828eb20f36SRui Paulo 	piod.piod_op = PIOD_WRITE_I;
1838eb20f36SRui Paulo 	piod.piod_offs = (void *)caddr;
1848eb20f36SRui Paulo 	piod.piod_addr = &paddr;
1858eb20f36SRui Paulo 	piod.piod_len  = BREAKPOINT_INSTR_SZ;
1868eb20f36SRui Paulo 	if (ptrace(PT_IO, proc_getpid(phdl), (caddr_t)&piod, 0) < 0) {
18730e81f7eSMark Johnston 		DPRINTF("ERROR: couldn't write instruction at address 0x%"
18830e81f7eSMark Johnston 		    PRIuPTR, address);
189813b2694SMark Johnston 		ret = -1;
1908eb20f36SRui Paulo 	}
1918eb20f36SRui Paulo 
19292f92525SMark Johnston 	if (stopped)
193813b2694SMark Johnston 		/* Restart the process if we had to stop it. */
19492f92525SMark Johnston 		proc_continue(phdl);
195813b2694SMark Johnston 
196813b2694SMark Johnston 	return (ret);
1978eb20f36SRui Paulo }
1988eb20f36SRui Paulo 
1998eb20f36SRui Paulo /*
2008eb20f36SRui Paulo  * Decrement pc so that we delete the breakpoint at the correct
2018eb20f36SRui Paulo  * address, i.e. at the BREAKPOINT_INSTR address.
202e3c074a0SAndrew Turner  *
203e3c074a0SAndrew Turner  * This is only needed on some architectures where the pc value
204e3c074a0SAndrew Turner  * when reading registers points at the instruction after the
205e3c074a0SAndrew Turner  * breakpoint, e.g. x86.
2068eb20f36SRui Paulo  */
2078eb20f36SRui Paulo void
2088eb20f36SRui Paulo proc_bkptregadj(unsigned long *pc)
2098eb20f36SRui Paulo {
210e3c074a0SAndrew Turner 
211e3c074a0SAndrew Turner 	(void)pc;
212e3c074a0SAndrew Turner #ifdef BREAKPOINT_ADJUST_SZ
213e3c074a0SAndrew Turner 	*pc = *pc - BREAKPOINT_ADJUST_SZ;
214e3c074a0SAndrew Turner #endif
2158eb20f36SRui Paulo }
2168eb20f36SRui Paulo 
2178eb20f36SRui Paulo /*
2188eb20f36SRui Paulo  * Step over the breakpoint.
2198eb20f36SRui Paulo  */
2208eb20f36SRui Paulo int
2218eb20f36SRui Paulo proc_bkptexec(struct proc_handle *phdl, unsigned long saved)
2228eb20f36SRui Paulo {
2238eb20f36SRui Paulo 	unsigned long pc;
2248eb20f36SRui Paulo 	unsigned long samesaved;
2258eb20f36SRui Paulo 	int status;
2268eb20f36SRui Paulo 
2278eb20f36SRui Paulo 	if (proc_regget(phdl, REG_PC, &pc) < 0) {
22830e81f7eSMark Johnston 		DPRINTFX("ERROR: couldn't get PC register");
2298eb20f36SRui Paulo 		return (-1);
2308eb20f36SRui Paulo 	}
2318eb20f36SRui Paulo 	proc_bkptregadj(&pc);
2328eb20f36SRui Paulo 	if (proc_bkptdel(phdl, pc, saved) < 0) {
23330e81f7eSMark Johnston 		DPRINTFX("ERROR: couldn't delete breakpoint");
2348eb20f36SRui Paulo 		return (-1);
2358eb20f36SRui Paulo 	}
2368eb20f36SRui Paulo 	/*
2378eb20f36SRui Paulo 	 * Go back in time and step over the new instruction just
2388eb20f36SRui Paulo 	 * set up by proc_bkptdel().
2398eb20f36SRui Paulo 	 */
2408eb20f36SRui Paulo 	proc_regset(phdl, REG_PC, pc);
2418eb20f36SRui Paulo 	if (ptrace(PT_STEP, proc_getpid(phdl), (caddr_t)1, 0) < 0) {
24230e81f7eSMark Johnston 		DPRINTFX("ERROR: ptrace step failed");
2438eb20f36SRui Paulo 		return (-1);
2448eb20f36SRui Paulo 	}
2454c74b245SRui Paulo 	proc_wstatus(phdl);
2464c74b245SRui Paulo 	status = proc_getwstat(phdl);
2478eb20f36SRui Paulo 	if (!WIFSTOPPED(status)) {
24830e81f7eSMark Johnston 		DPRINTFX("ERROR: don't know why process stopped");
2498eb20f36SRui Paulo 		return (-1);
2508eb20f36SRui Paulo 	}
2518eb20f36SRui Paulo 	/*
2528eb20f36SRui Paulo 	 * Restore the breakpoint. The saved instruction should be
2538eb20f36SRui Paulo 	 * the same as the one that we were passed in.
2548eb20f36SRui Paulo 	 */
2558eb20f36SRui Paulo 	if (proc_bkptset(phdl, pc, &samesaved) < 0) {
25630e81f7eSMark Johnston 		DPRINTFX("ERROR: couldn't restore breakpoint");
2578eb20f36SRui Paulo 		return (-1);
2588eb20f36SRui Paulo 	}
2598eb20f36SRui Paulo 	assert(samesaved == saved);
2608eb20f36SRui Paulo 
2618eb20f36SRui Paulo 	return (0);
2628eb20f36SRui Paulo }
263