18eb20f36SRui Paulo /* 28eb20f36SRui Paulo * Copyright (c) 2010 The FreeBSD Foundation 38eb20f36SRui Paulo * All rights reserved. 48eb20f36SRui Paulo * 58eb20f36SRui Paulo * This software was developed by Rui Paulo under sponsorship from the 68eb20f36SRui Paulo * FreeBSD Foundation. 78eb20f36SRui Paulo * 88eb20f36SRui Paulo * Redistribution and use in source and binary forms, with or without 98eb20f36SRui Paulo * modification, are permitted provided that the following conditions 108eb20f36SRui Paulo * are met: 118eb20f36SRui Paulo * 1. Redistributions of source code must retain the above copyright 128eb20f36SRui Paulo * notice, this list of conditions and the following disclaimer. 138eb20f36SRui Paulo * 2. Redistributions in binary form must reproduce the above copyright 148eb20f36SRui Paulo * notice, this list of conditions and the following disclaimer in the 158eb20f36SRui Paulo * documentation and/or other materials provided with the distribution. 168eb20f36SRui Paulo * 178eb20f36SRui Paulo * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 188eb20f36SRui Paulo * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 198eb20f36SRui Paulo * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 208eb20f36SRui Paulo * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 218eb20f36SRui Paulo * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 228eb20f36SRui Paulo * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 238eb20f36SRui Paulo * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 248eb20f36SRui Paulo * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 258eb20f36SRui Paulo * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 268eb20f36SRui Paulo * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 278eb20f36SRui Paulo * SUCH DAMAGE. 288eb20f36SRui Paulo */ 298eb20f36SRui Paulo 308eb20f36SRui Paulo #include <sys/cdefs.h> 318eb20f36SRui Paulo __FBSDID("$FreeBSD$"); 328eb20f36SRui Paulo 338eb20f36SRui Paulo #include <sys/types.h> 348eb20f36SRui Paulo #include <sys/ptrace.h> 358eb20f36SRui Paulo #include <sys/wait.h> 368eb20f36SRui Paulo #include <machine/_inttypes.h> 378eb20f36SRui Paulo 388eb20f36SRui Paulo #include <assert.h> 398eb20f36SRui Paulo #include <err.h> 408eb20f36SRui Paulo #include <errno.h> 41813b2694SMark Johnston #include <signal.h> 42813b2694SMark Johnston #include <stdio.h> 438eb20f36SRui Paulo #include "_libproc.h" 448eb20f36SRui Paulo 4527e54fb5SRuslan Bukin #if defined(__aarch64__) 4627e54fb5SRuslan Bukin #define AARCH64_BRK 0xd4200000 4727e54fb5SRuslan Bukin #define AARCH64_BRK_IMM16_SHIFT 5 4827e54fb5SRuslan Bukin #define AARCH64_BRK_IMM16_VAL (0xd << AARCH64_BRK_IMM16_SHIFT) 4927e54fb5SRuslan Bukin #define BREAKPOINT_INSTR (AARCH64_BRK | AARCH64_BRK_IMM16_VAL) 5027e54fb5SRuslan Bukin #define BREAKPOINT_INSTR_SZ 4 5127e54fb5SRuslan Bukin #elif defined(__amd64__) || defined(__i386__) 528eb20f36SRui Paulo #define BREAKPOINT_INSTR 0xcc /* int 0x3 */ 538eb20f36SRui Paulo #define BREAKPOINT_INSTR_SZ 1 54e3c074a0SAndrew Turner #define BREAKPOINT_ADJUST_SZ BREAKPOINT_INSTR_SZ 5527e54fb5SRuslan Bukin #elif defined(__arm__) 5627e54fb5SRuslan Bukin #define BREAKPOINT_INSTR 0xe7ffffff /* bkpt */ 5727e54fb5SRuslan Bukin #define BREAKPOINT_INSTR_SZ 4 58f2242861SOleksandr Tymoshenko #elif defined(__mips__) 59f2242861SOleksandr Tymoshenko #define BREAKPOINT_INSTR 0xd /* break */ 60f2242861SOleksandr Tymoshenko #define BREAKPOINT_INSTR_SZ 4 61c7570492SJustin Hibbits #elif defined(__powerpc__) 62c7570492SJustin Hibbits #define BREAKPOINT_INSTR 0x7fe00008 /* trap */ 63c7570492SJustin Hibbits #define BREAKPOINT_INSTR_SZ 4 64*7dd3aed9SRuslan Bukin #elif defined(__riscv__) 65*7dd3aed9SRuslan Bukin #define BREAKPOINT_INSTR 0x00100073 /* sbreak */ 66*7dd3aed9SRuslan Bukin #define BREAKPOINT_INSTR_SZ 4 678eb20f36SRui Paulo #else 688eb20f36SRui Paulo #error "Add support for your architecture" 698eb20f36SRui Paulo #endif 708eb20f36SRui Paulo 71813b2694SMark Johnston static int 72813b2694SMark Johnston proc_stop(struct proc_handle *phdl) 73813b2694SMark Johnston { 74813b2694SMark Johnston int status; 75813b2694SMark Johnston 76813b2694SMark Johnston if (kill(proc_getpid(phdl), SIGSTOP) == -1) { 77813b2694SMark Johnston DPRINTF("kill %d", proc_getpid(phdl)); 78813b2694SMark Johnston return (-1); 79813b2694SMark Johnston } else if (waitpid(proc_getpid(phdl), &status, WSTOPPED) == -1) { 80813b2694SMark Johnston DPRINTF("waitpid %d", proc_getpid(phdl)); 81813b2694SMark Johnston return (-1); 82813b2694SMark Johnston } else if (!WIFSTOPPED(status)) { 83813b2694SMark Johnston DPRINTFX("waitpid: unexpected status 0x%x", status); 84813b2694SMark Johnston return (-1); 85813b2694SMark Johnston } 86813b2694SMark Johnston 87813b2694SMark Johnston return (0); 88813b2694SMark Johnston } 89813b2694SMark Johnston 908eb20f36SRui Paulo int 918eb20f36SRui Paulo proc_bkptset(struct proc_handle *phdl, uintptr_t address, 928eb20f36SRui Paulo unsigned long *saved) 938eb20f36SRui Paulo { 948eb20f36SRui Paulo struct ptrace_io_desc piod; 958eb20f36SRui Paulo unsigned long paddr, caddr; 9692f92525SMark Johnston int ret = 0, stopped; 978eb20f36SRui Paulo 988eb20f36SRui Paulo *saved = 0; 998eb20f36SRui Paulo if (phdl->status == PS_DEAD || phdl->status == PS_UNDEAD || 1008eb20f36SRui Paulo phdl->status == PS_IDLE) { 1018eb20f36SRui Paulo errno = ENOENT; 1028eb20f36SRui Paulo return (-1); 1038eb20f36SRui Paulo } 1048eb20f36SRui Paulo 105813b2694SMark Johnston DPRINTFX("adding breakpoint at 0x%lx", address); 106813b2694SMark Johnston 10792f92525SMark Johnston stopped = 0; 10892f92525SMark Johnston if (phdl->status != PS_STOP) { 109813b2694SMark Johnston if (proc_stop(phdl) != 0) 110813b2694SMark Johnston return (-1); 11192f92525SMark Johnston stopped = 1; 11292f92525SMark Johnston } 113813b2694SMark Johnston 1148eb20f36SRui Paulo /* 1158eb20f36SRui Paulo * Read the original instruction. 1168eb20f36SRui Paulo */ 1178eb20f36SRui Paulo caddr = address; 1188eb20f36SRui Paulo paddr = 0; 1198eb20f36SRui Paulo piod.piod_op = PIOD_READ_I; 1208eb20f36SRui Paulo piod.piod_offs = (void *)caddr; 1218eb20f36SRui Paulo piod.piod_addr = &paddr; 1228eb20f36SRui Paulo piod.piod_len = BREAKPOINT_INSTR_SZ; 1238eb20f36SRui Paulo if (ptrace(PT_IO, proc_getpid(phdl), (caddr_t)&piod, 0) < 0) { 12430e81f7eSMark Johnston DPRINTF("ERROR: couldn't read instruction at address 0x%" 12530e81f7eSMark Johnston PRIuPTR, address); 126813b2694SMark Johnston ret = -1; 127813b2694SMark Johnston goto done; 1288eb20f36SRui Paulo } 1298eb20f36SRui Paulo *saved = paddr; 1308eb20f36SRui Paulo /* 1318eb20f36SRui Paulo * Write a breakpoint instruction to that address. 1328eb20f36SRui Paulo */ 1338eb20f36SRui Paulo caddr = address; 1348eb20f36SRui Paulo paddr = BREAKPOINT_INSTR; 1358eb20f36SRui Paulo piod.piod_op = PIOD_WRITE_I; 1368eb20f36SRui Paulo piod.piod_offs = (void *)caddr; 1378eb20f36SRui Paulo piod.piod_addr = &paddr; 1388eb20f36SRui Paulo piod.piod_len = BREAKPOINT_INSTR_SZ; 1398eb20f36SRui Paulo if (ptrace(PT_IO, proc_getpid(phdl), (caddr_t)&piod, 0) < 0) { 14030e81f7eSMark Johnston DPRINTF("ERROR: couldn't write instruction at address 0x%" 14130e81f7eSMark Johnston PRIuPTR, address); 142813b2694SMark Johnston ret = -1; 143813b2694SMark Johnston goto done; 1448eb20f36SRui Paulo } 1458eb20f36SRui Paulo 146813b2694SMark Johnston done: 14792f92525SMark Johnston if (stopped) 148813b2694SMark Johnston /* Restart the process if we had to stop it. */ 14992f92525SMark Johnston proc_continue(phdl); 150813b2694SMark Johnston 151813b2694SMark Johnston return (ret); 1528eb20f36SRui Paulo } 1538eb20f36SRui Paulo 1548eb20f36SRui Paulo int 1558eb20f36SRui Paulo proc_bkptdel(struct proc_handle *phdl, uintptr_t address, 1568eb20f36SRui Paulo unsigned long saved) 1578eb20f36SRui Paulo { 1588eb20f36SRui Paulo struct ptrace_io_desc piod; 1598eb20f36SRui Paulo unsigned long paddr, caddr; 16092f92525SMark Johnston int ret = 0, stopped; 1618eb20f36SRui Paulo 1628eb20f36SRui Paulo if (phdl->status == PS_DEAD || phdl->status == PS_UNDEAD || 1638eb20f36SRui Paulo phdl->status == PS_IDLE) { 1648eb20f36SRui Paulo errno = ENOENT; 1658eb20f36SRui Paulo return (-1); 1668eb20f36SRui Paulo } 167813b2694SMark Johnston 168813b2694SMark Johnston DPRINTFX("removing breakpoint at 0x%lx", address); 169813b2694SMark Johnston 17092f92525SMark Johnston stopped = 0; 17192f92525SMark Johnston if (phdl->status != PS_STOP) { 172813b2694SMark Johnston if (proc_stop(phdl) != 0) 173813b2694SMark Johnston return (-1); 17492f92525SMark Johnston stopped = 1; 17592f92525SMark Johnston } 176813b2694SMark Johnston 1778eb20f36SRui Paulo /* 1788eb20f36SRui Paulo * Overwrite the breakpoint instruction that we setup previously. 1798eb20f36SRui Paulo */ 1808eb20f36SRui Paulo caddr = address; 1818eb20f36SRui Paulo paddr = saved; 1828eb20f36SRui Paulo piod.piod_op = PIOD_WRITE_I; 1838eb20f36SRui Paulo piod.piod_offs = (void *)caddr; 1848eb20f36SRui Paulo piod.piod_addr = &paddr; 1858eb20f36SRui Paulo piod.piod_len = BREAKPOINT_INSTR_SZ; 1868eb20f36SRui Paulo if (ptrace(PT_IO, proc_getpid(phdl), (caddr_t)&piod, 0) < 0) { 18730e81f7eSMark Johnston DPRINTF("ERROR: couldn't write instruction at address 0x%" 18830e81f7eSMark Johnston PRIuPTR, address); 189813b2694SMark Johnston ret = -1; 1908eb20f36SRui Paulo } 1918eb20f36SRui Paulo 19292f92525SMark Johnston if (stopped) 193813b2694SMark Johnston /* Restart the process if we had to stop it. */ 19492f92525SMark Johnston proc_continue(phdl); 195813b2694SMark Johnston 196813b2694SMark Johnston return (ret); 1978eb20f36SRui Paulo } 1988eb20f36SRui Paulo 1998eb20f36SRui Paulo /* 2008eb20f36SRui Paulo * Decrement pc so that we delete the breakpoint at the correct 2018eb20f36SRui Paulo * address, i.e. at the BREAKPOINT_INSTR address. 202e3c074a0SAndrew Turner * 203e3c074a0SAndrew Turner * This is only needed on some architectures where the pc value 204e3c074a0SAndrew Turner * when reading registers points at the instruction after the 205e3c074a0SAndrew Turner * breakpoint, e.g. x86. 2068eb20f36SRui Paulo */ 2078eb20f36SRui Paulo void 2088eb20f36SRui Paulo proc_bkptregadj(unsigned long *pc) 2098eb20f36SRui Paulo { 210e3c074a0SAndrew Turner 211e3c074a0SAndrew Turner (void)pc; 212e3c074a0SAndrew Turner #ifdef BREAKPOINT_ADJUST_SZ 213e3c074a0SAndrew Turner *pc = *pc - BREAKPOINT_ADJUST_SZ; 214e3c074a0SAndrew Turner #endif 2158eb20f36SRui Paulo } 2168eb20f36SRui Paulo 2178eb20f36SRui Paulo /* 2188eb20f36SRui Paulo * Step over the breakpoint. 2198eb20f36SRui Paulo */ 2208eb20f36SRui Paulo int 2218eb20f36SRui Paulo proc_bkptexec(struct proc_handle *phdl, unsigned long saved) 2228eb20f36SRui Paulo { 2238eb20f36SRui Paulo unsigned long pc; 2248eb20f36SRui Paulo unsigned long samesaved; 2258eb20f36SRui Paulo int status; 2268eb20f36SRui Paulo 2278eb20f36SRui Paulo if (proc_regget(phdl, REG_PC, &pc) < 0) { 22830e81f7eSMark Johnston DPRINTFX("ERROR: couldn't get PC register"); 2298eb20f36SRui Paulo return (-1); 2308eb20f36SRui Paulo } 2318eb20f36SRui Paulo proc_bkptregadj(&pc); 2328eb20f36SRui Paulo if (proc_bkptdel(phdl, pc, saved) < 0) { 23330e81f7eSMark Johnston DPRINTFX("ERROR: couldn't delete breakpoint"); 2348eb20f36SRui Paulo return (-1); 2358eb20f36SRui Paulo } 2368eb20f36SRui Paulo /* 2378eb20f36SRui Paulo * Go back in time and step over the new instruction just 2388eb20f36SRui Paulo * set up by proc_bkptdel(). 2398eb20f36SRui Paulo */ 2408eb20f36SRui Paulo proc_regset(phdl, REG_PC, pc); 2418eb20f36SRui Paulo if (ptrace(PT_STEP, proc_getpid(phdl), (caddr_t)1, 0) < 0) { 24230e81f7eSMark Johnston DPRINTFX("ERROR: ptrace step failed"); 2438eb20f36SRui Paulo return (-1); 2448eb20f36SRui Paulo } 2454c74b245SRui Paulo proc_wstatus(phdl); 2464c74b245SRui Paulo status = proc_getwstat(phdl); 2478eb20f36SRui Paulo if (!WIFSTOPPED(status)) { 24830e81f7eSMark Johnston DPRINTFX("ERROR: don't know why process stopped"); 2498eb20f36SRui Paulo return (-1); 2508eb20f36SRui Paulo } 2518eb20f36SRui Paulo /* 2528eb20f36SRui Paulo * Restore the breakpoint. The saved instruction should be 2538eb20f36SRui Paulo * the same as the one that we were passed in. 2548eb20f36SRui Paulo */ 2558eb20f36SRui Paulo if (proc_bkptset(phdl, pc, &samesaved) < 0) { 25630e81f7eSMark Johnston DPRINTFX("ERROR: couldn't restore breakpoint"); 2578eb20f36SRui Paulo return (-1); 2588eb20f36SRui Paulo } 2598eb20f36SRui Paulo assert(samesaved == saved); 2608eb20f36SRui Paulo 2618eb20f36SRui Paulo return (0); 2628eb20f36SRui Paulo } 263