xref: /freebsd/sbin/savecore/savecore.c (revision 1f4bcc459a76b7aa664f3fd557684cd0ba6da352)
1 /*-
2  * Copyright (c) 2002 Poul-Henning Kamp
3  * Copyright (c) 2002 Networks Associates Technology, Inc.
4  * All rights reserved.
5  *
6  * This software was developed for the FreeBSD Project by Poul-Henning Kamp
7  * and NAI Labs, the Security Research Division of Network Associates, Inc.
8  * under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the
9  * DARPA CHATS research program.
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions
13  * are met:
14  * 1. Redistributions of source code must retain the above copyright
15  *    notice, this list of conditions and the following disclaimer.
16  * 2. Redistributions in binary form must reproduce the above copyright
17  *    notice, this list of conditions and the following disclaimer in the
18  *    documentation and/or other materials provided with the distribution.
19  * 3. The names of the authors may not be used to endorse or promote
20  *    products derived from this software without specific prior written
21  *    permission.
22  *
23  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33  * SUCH DAMAGE.
34  *
35  * Copyright (c) 1986, 1992, 1993
36  *	The Regents of the University of California.  All rights reserved.
37  *
38  * Redistribution and use in source and binary forms, with or without
39  * modification, are permitted provided that the following conditions
40  * are met:
41  * 1. Redistributions of source code must retain the above copyright
42  *    notice, this list of conditions and the following disclaimer.
43  * 2. Redistributions in binary form must reproduce the above copyright
44  *    notice, this list of conditions and the following disclaimer in the
45  *    documentation and/or other materials provided with the distribution.
46  * 4. Neither the name of the University nor the names of its contributors
47  *    may be used to endorse or promote products derived from this software
48  *    without specific prior written permission.
49  *
50  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
51  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
52  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
53  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
54  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
55  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
56  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
57  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
58  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
59  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
60  * SUCH DAMAGE.
61  */
62 
63 #include <sys/cdefs.h>
64 __FBSDID("$FreeBSD$");
65 
66 #include <sys/param.h>
67 #include <sys/disk.h>
68 #include <sys/kerneldump.h>
69 #include <sys/mount.h>
70 #include <sys/stat.h>
71 #include <errno.h>
72 #include <fcntl.h>
73 #include <fstab.h>
74 #include <paths.h>
75 #include <signal.h>
76 #include <stdarg.h>
77 #include <stdio.h>
78 #include <stdlib.h>
79 #include <string.h>
80 #include <syslog.h>
81 #include <time.h>
82 #include <unistd.h>
83 #include <libxo/xo.h>
84 
85 /* The size of the buffer used for I/O. */
86 #define	BUFFERSIZE	(1024*1024)
87 
88 #define	STATUS_BAD	0
89 #define	STATUS_GOOD	1
90 #define	STATUS_UNKNOWN	2
91 
92 static int checkfor, compress, clear, force, keep, verbose;	/* flags */
93 static int nfound, nsaved, nerr;			/* statistics */
94 static int maxdumps;
95 
96 extern FILE *zopen(const char *, const char *);
97 
98 static sig_atomic_t got_siginfo;
99 static void infohandler(int);
100 
101 static void
102 printheader(xo_handle_t *xo, const struct kerneldumpheader *h, const char *device,
103     int bounds, const int status)
104 {
105 	uint64_t dumplen;
106 	time_t t;
107 	const char *stat_str;
108 
109 	xo_flush_h(xo);
110 	xo_emit_h(xo, "{Lwc:Dump header from device}{:dump_device/%s}\n", device);
111 	xo_emit_h(xo, "{P:  }{Lwc:Architecture}{:architecture/%s}\n", h->architecture);
112 	xo_emit_h(xo, "{P:  }{Lwc:Architecture Version}{:architecture_version/%u}\n", dtoh32(h->architectureversion));
113 	dumplen = dtoh64(h->dumplength);
114 	xo_emit_h(xo, "{P:  }{Lwc:Dump Length}{:dump_length_bytes/%lld}\n", (long long)dumplen);
115 	xo_emit_h(xo, "{P:  }{Lwc:Blocksize}{:blocksize/%d}\n", dtoh32(h->blocksize));
116 	t = dtoh64(h->dumptime);
117 	xo_emit_h(xo, "{P:  }{Lwc:Dumptime}{:dumptime/%s}", ctime(&t));
118 	xo_emit_h(xo, "{P:  }{Lwc:Hostname}{:hostname/%s}\n", h->hostname);
119 	xo_emit_h(xo, "{P:  }{Lwc:Magic}{:magic/%s}\n", h->magic);
120 	xo_emit_h(xo, "{P:  }{Lwc:Version String}{:version_string/%s}", h->versionstring);
121 	xo_emit_h(xo, "{P:  }{Lwc:Panic String}{:panic_string/%s}\n", h->panicstring);
122 	xo_emit_h(xo, "{P:  }{Lwc:Dump Parity}{:dump_parity/%u}\n", h->parity);
123 	xo_emit_h(xo, "{P:  }{Lwc:Bounds}{:bounds/%d}\n", bounds);
124 
125 	switch(status) {
126 	case STATUS_BAD:
127 		stat_str = "bad";
128 		break;
129 	case STATUS_GOOD:
130 		stat_str = "good";
131 		break;
132 	default:
133 		stat_str = "unknown";
134 	}
135 	xo_emit_h(xo, "{P:  }{Lwc:Dump Status}{:dump_status/%s}\n", stat_str);
136 	xo_flush_h(xo);
137 }
138 
139 static int
140 getbounds(void) {
141 	FILE *fp;
142 	char buf[6];
143 	int ret;
144 
145 	ret = 0;
146 
147 	if ((fp = fopen("bounds", "r")) == NULL) {
148 		if (verbose)
149 			printf("unable to open bounds file, using 0\n");
150 		return (ret);
151 	}
152 
153 	if (fgets(buf, sizeof buf, fp) == NULL) {
154 		if (feof(fp))
155 			syslog(LOG_WARNING, "bounds file is empty, using 0");
156 		else
157 			syslog(LOG_WARNING, "bounds file: %s", strerror(errno));
158 		fclose(fp);
159 		return (ret);
160 	}
161 
162 	errno = 0;
163 	ret = (int)strtol(buf, NULL, 10);
164 	if (ret == 0 && (errno == EINVAL || errno == ERANGE))
165 		syslog(LOG_WARNING, "invalid value found in bounds, using 0");
166 	fclose(fp);
167 	return (ret);
168 }
169 
170 static void
171 writebounds(int bounds) {
172 	FILE *fp;
173 
174 	if ((fp = fopen("bounds", "w")) == NULL) {
175 		syslog(LOG_WARNING, "unable to write to bounds file: %m");
176 		return;
177 	}
178 
179 	if (verbose)
180 		printf("bounds number: %d\n", bounds);
181 
182 	fprintf(fp, "%d\n", bounds);
183 	fclose(fp);
184 }
185 
186 static off_t
187 file_size(const char *path)
188 {
189 	struct stat sb;
190 
191 	/* Ignore all errors, those file may not exists. */
192 	if (stat(path, &sb) == -1)
193 		return (0);
194 	return (sb.st_size);
195 }
196 
197 static off_t
198 saved_dump_size(int bounds)
199 {
200 	static char path[PATH_MAX];
201 	off_t dumpsize;
202 
203 	dumpsize = 0;
204 
205 	(void)snprintf(path, sizeof(path), "info.%d", bounds);
206 	dumpsize += file_size(path);
207 	(void)snprintf(path, sizeof(path), "vmcore.%d", bounds);
208 	dumpsize += file_size(path);
209 	(void)snprintf(path, sizeof(path), "vmcore.%d.gz", bounds);
210 	dumpsize += file_size(path);
211 	(void)snprintf(path, sizeof(path), "textdump.tar.%d", bounds);
212 	dumpsize += file_size(path);
213 	(void)snprintf(path, sizeof(path), "textdump.tar.%d.gz", bounds);
214 	dumpsize += file_size(path);
215 
216 	return (dumpsize);
217 }
218 
219 static void
220 saved_dump_remove(int bounds)
221 {
222 	static char path[PATH_MAX];
223 
224 	(void)snprintf(path, sizeof(path), "info.%d", bounds);
225 	(void)unlink(path);
226 	(void)snprintf(path, sizeof(path), "vmcore.%d", bounds);
227 	(void)unlink(path);
228 	(void)snprintf(path, sizeof(path), "vmcore.%d.gz", bounds);
229 	(void)unlink(path);
230 	(void)snprintf(path, sizeof(path), "textdump.tar.%d", bounds);
231 	(void)unlink(path);
232 	(void)snprintf(path, sizeof(path), "textdump.tar.%d.gz", bounds);
233 	(void)unlink(path);
234 }
235 
236 static void
237 symlinks_remove(void)
238 {
239 
240 	(void)unlink("info.last");
241 	(void)unlink("vmcore.last");
242 	(void)unlink("vmcore.last.gz");
243 	(void)unlink("textdump.tar.last");
244 	(void)unlink("textdump.tar.last.gz");
245 }
246 
247 /*
248  * Check that sufficient space is available on the disk that holds the
249  * save directory.
250  */
251 static int
252 check_space(const char *savedir, off_t dumpsize, int bounds)
253 {
254 	FILE *fp;
255 	off_t minfree, spacefree, totfree, needed;
256 	struct statfs fsbuf;
257 	char buf[100];
258 
259 	if (statfs(".", &fsbuf) < 0) {
260 		syslog(LOG_ERR, "%s: %m", savedir);
261 		exit(1);
262 	}
263 	spacefree = ((off_t) fsbuf.f_bavail * fsbuf.f_bsize) / 1024;
264 	totfree = ((off_t) fsbuf.f_bfree * fsbuf.f_bsize) / 1024;
265 
266 	if ((fp = fopen("minfree", "r")) == NULL)
267 		minfree = 0;
268 	else {
269 		if (fgets(buf, sizeof(buf), fp) == NULL)
270 			minfree = 0;
271 		else
272 			minfree = atoi(buf);
273 		(void)fclose(fp);
274 	}
275 
276 	needed = dumpsize / 1024 + 2;	/* 2 for info file */
277 	needed -= saved_dump_size(bounds);
278 	if ((minfree > 0 ? spacefree : totfree) - needed < minfree) {
279 		syslog(LOG_WARNING,
280 	"no dump, not enough free space on device (%lld available, need %lld)",
281 		    (long long)(minfree > 0 ? spacefree : totfree),
282 		    (long long)needed);
283 		return (0);
284 	}
285 	if (spacefree - needed < 0)
286 		syslog(LOG_WARNING,
287 		    "dump performed, but free space threshold crossed");
288 	return (1);
289 }
290 
291 #define BLOCKSIZE (1<<12)
292 #define BLOCKMASK (~(BLOCKSIZE-1))
293 
294 static int
295 DoRegularFile(int fd, off_t dumpsize, char *buf, const char *device,
296     const char *filename, FILE *fp)
297 {
298 	int he, hs, nr, nw, wl;
299 	off_t dmpcnt, origsize;
300 
301 	dmpcnt = 0;
302 	origsize = dumpsize;
303 	he = 0;
304 	while (dumpsize > 0) {
305 		wl = BUFFERSIZE;
306 		if (wl > dumpsize)
307 			wl = dumpsize;
308 		nr = read(fd, buf, wl);
309 		if (nr != wl) {
310 			if (nr == 0)
311 				syslog(LOG_WARNING,
312 				    "WARNING: EOF on dump device");
313 			else
314 				syslog(LOG_ERR, "read error on %s: %m", device);
315 			nerr++;
316 			return (-1);
317 		}
318 		if (compress) {
319 			nw = fwrite(buf, 1, wl, fp);
320 		} else {
321 			for (nw = 0; nw < nr; nw = he) {
322 				/* find a contiguous block of zeroes */
323 				for (hs = nw; hs < nr; hs += BLOCKSIZE) {
324 					for (he = hs; he < nr && buf[he] == 0;
325 					    ++he)
326 						/* nothing */ ;
327 					/* is the hole long enough to matter? */
328 					if (he >= hs + BLOCKSIZE)
329 						break;
330 				}
331 
332 				/* back down to a block boundary */
333 				he &= BLOCKMASK;
334 
335 				/*
336 				 * 1) Don't go beyond the end of the buffer.
337 				 * 2) If the end of the buffer is less than
338 				 *    BLOCKSIZE bytes away, we're at the end
339 				 *    of the file, so just grab what's left.
340 				 */
341 				if (hs + BLOCKSIZE > nr)
342 					hs = he = nr;
343 
344 				/*
345 				 * At this point, we have a partial ordering:
346 				 *     nw <= hs <= he <= nr
347 				 * If hs > nw, buf[nw..hs] contains non-zero data.
348 				 * If he > hs, buf[hs..he] is all zeroes.
349 				 */
350 				if (hs > nw)
351 					if (fwrite(buf + nw, hs - nw, 1, fp)
352 					    != 1)
353 					break;
354 				if (he > hs)
355 					if (fseeko(fp, he - hs, SEEK_CUR) == -1)
356 						break;
357 			}
358 		}
359 		if (nw != wl) {
360 			syslog(LOG_ERR,
361 			    "write error on %s file: %m", filename);
362 			syslog(LOG_WARNING,
363 			    "WARNING: vmcore may be incomplete");
364 			nerr++;
365 			return (-1);
366 		}
367 		if (verbose) {
368 			dmpcnt += wl;
369 			printf("%llu\r", (unsigned long long)dmpcnt);
370 			fflush(stdout);
371 		}
372 		dumpsize -= wl;
373 		if (got_siginfo) {
374 			printf("%s %.1lf%%\n", filename, (100.0 - (100.0 *
375 			    (double)dumpsize / (double)origsize)));
376 			got_siginfo = 0;
377 		}
378 	}
379 	return (0);
380 }
381 
382 /*
383  * Specialized version of dump-reading logic for use with textdumps, which
384  * are written backwards from the end of the partition, and must be reversed
385  * before being written to the file.  Textdumps are small, so do a bit less
386  * work to optimize/sparsify.
387  */
388 static int
389 DoTextdumpFile(int fd, off_t dumpsize, off_t lasthd, char *buf,
390     const char *device, const char *filename, FILE *fp)
391 {
392 	int nr, nw, wl;
393 	off_t dmpcnt, totsize;
394 
395 	totsize = dumpsize;
396 	dmpcnt = 0;
397 	wl = 512;
398 	if ((dumpsize % wl) != 0) {
399 		syslog(LOG_ERR, "textdump uneven multiple of 512 on %s",
400 		    device);
401 		nerr++;
402 		return (-1);
403 	}
404 	while (dumpsize > 0) {
405 		nr = pread(fd, buf, wl, lasthd - (totsize - dumpsize) - wl);
406 		if (nr != wl) {
407 			if (nr == 0)
408 				syslog(LOG_WARNING,
409 				    "WARNING: EOF on dump device");
410 			else
411 				syslog(LOG_ERR, "read error on %s: %m", device);
412 			nerr++;
413 			return (-1);
414 		}
415 		nw = fwrite(buf, 1, wl, fp);
416 		if (nw != wl) {
417 			syslog(LOG_ERR,
418 			    "write error on %s file: %m", filename);
419 			syslog(LOG_WARNING,
420 			    "WARNING: textdump may be incomplete");
421 			nerr++;
422 			return (-1);
423 		}
424 		if (verbose) {
425 			dmpcnt += wl;
426 			printf("%llu\r", (unsigned long long)dmpcnt);
427 			fflush(stdout);
428 		}
429 		dumpsize -= wl;
430 	}
431 	return (0);
432 }
433 
434 static void
435 DoFile(const char *savedir, const char *device)
436 {
437 	xo_handle_t *xostdout, *xoinfo;
438 	static char infoname[PATH_MAX], corename[PATH_MAX], linkname[PATH_MAX];
439 	static char *buf = NULL;
440 	struct kerneldumpheader kdhf, kdhl;
441 	off_t mediasize, dumpsize, firsthd, lasthd;
442 	FILE *info, *fp;
443 	mode_t oumask;
444 	int fd, fdinfo, error;
445 	int bounds, status;
446 	u_int sectorsize, xostyle;
447 	int istextdump;
448 
449 	bounds = getbounds();
450 	mediasize = 0;
451 	status = STATUS_UNKNOWN;
452 
453 	xostdout = xo_create_to_file(stdout, XO_STYLE_TEXT, 0);
454 	if (xostdout == NULL) {
455 		syslog(LOG_ERR, "%s: %m", infoname);
456 		return;
457 	}
458 
459 	if (maxdumps > 0 && bounds == maxdumps)
460 		bounds = 0;
461 
462 	if (buf == NULL) {
463 		buf = malloc(BUFFERSIZE);
464 		if (buf == NULL) {
465 			syslog(LOG_ERR, "%m");
466 			return;
467 		}
468 	}
469 
470 	if (verbose)
471 		printf("checking for kernel dump on device %s\n", device);
472 
473 	fd = open(device, (checkfor || keep) ? O_RDONLY : O_RDWR);
474 	if (fd < 0) {
475 		syslog(LOG_ERR, "%s: %m", device);
476 		return;
477 	}
478 
479 	error = ioctl(fd, DIOCGMEDIASIZE, &mediasize);
480 	if (!error)
481 		error = ioctl(fd, DIOCGSECTORSIZE, &sectorsize);
482 	if (error) {
483 		syslog(LOG_ERR,
484 		    "couldn't find media and/or sector size of %s: %m", device);
485 		goto closefd;
486 	}
487 
488 	if (verbose) {
489 		printf("mediasize = %lld\n", (long long)mediasize);
490 		printf("sectorsize = %u\n", sectorsize);
491 	}
492 
493 	lasthd = mediasize - sectorsize;
494 	if (lseek(fd, lasthd, SEEK_SET) != lasthd ||
495 	    read(fd, &kdhl, sizeof(kdhl)) != sizeof(kdhl)) {
496 		syslog(LOG_ERR,
497 		    "error reading last dump header at offset %lld in %s: %m",
498 		    (long long)lasthd, device);
499 		goto closefd;
500 	}
501 	istextdump = 0;
502 	if (strncmp(kdhl.magic, TEXTDUMPMAGIC, sizeof kdhl) == 0) {
503 		if (verbose)
504 			printf("textdump magic on last dump header on %s\n",
505 			    device);
506 		istextdump = 1;
507 		if (dtoh32(kdhl.version) != KERNELDUMP_TEXT_VERSION) {
508 			syslog(LOG_ERR,
509 			    "unknown version (%d) in last dump header on %s",
510 			    dtoh32(kdhl.version), device);
511 
512 			status = STATUS_BAD;
513 			if (force == 0)
514 				goto closefd;
515 		}
516 	} else if (memcmp(kdhl.magic, KERNELDUMPMAGIC, sizeof kdhl.magic) ==
517 	    0) {
518 		if (dtoh32(kdhl.version) != KERNELDUMPVERSION) {
519 			syslog(LOG_ERR,
520 			    "unknown version (%d) in last dump header on %s",
521 			    dtoh32(kdhl.version), device);
522 
523 			status = STATUS_BAD;
524 			if (force == 0)
525 				goto closefd;
526 		}
527 	} else {
528 		if (verbose)
529 			printf("magic mismatch on last dump header on %s\n",
530 			    device);
531 
532 		status = STATUS_BAD;
533 		if (force == 0)
534 			goto closefd;
535 
536 		if (memcmp(kdhl.magic, KERNELDUMPMAGIC_CLEARED,
537 			    sizeof kdhl.magic) == 0) {
538 			if (verbose)
539 				printf("forcing magic on %s\n", device);
540 			memcpy(kdhl.magic, KERNELDUMPMAGIC,
541 			    sizeof kdhl.magic);
542 		} else {
543 			syslog(LOG_ERR, "unable to force dump - bad magic");
544 			goto closefd;
545 		}
546 		if (dtoh32(kdhl.version) != KERNELDUMPVERSION) {
547 			syslog(LOG_ERR,
548 			    "unknown version (%d) in last dump header on %s",
549 			    dtoh32(kdhl.version), device);
550 
551 			status = STATUS_BAD;
552 			if (force == 0)
553 				goto closefd;
554 		}
555 	}
556 
557 	nfound++;
558 	if (clear)
559 		goto nuke;
560 
561 	if (kerneldump_parity(&kdhl)) {
562 		syslog(LOG_ERR,
563 		    "parity error on last dump header on %s", device);
564 		nerr++;
565 		status = STATUS_BAD;
566 		if (force == 0)
567 			goto closefd;
568 	}
569 	dumpsize = dtoh64(kdhl.dumplength);
570 	firsthd = lasthd - dumpsize - sizeof kdhf;
571 	if (lseek(fd, firsthd, SEEK_SET) != firsthd ||
572 	    read(fd, &kdhf, sizeof(kdhf)) != sizeof(kdhf)) {
573 		syslog(LOG_ERR,
574 		    "error reading first dump header at offset %lld in %s: %m",
575 		    (long long)firsthd, device);
576 		nerr++;
577 		goto closefd;
578 	}
579 
580 	if (verbose >= 2) {
581 		printf("First dump headers:\n");
582 		printheader(xostdout, &kdhf, device, bounds, -1);
583 
584 		printf("\nLast dump headers:\n");
585 		printheader(xostdout, &kdhl, device, bounds, -1);
586 		printf("\n");
587 	}
588 
589 	if (memcmp(&kdhl, &kdhf, sizeof kdhl)) {
590 		syslog(LOG_ERR,
591 		    "first and last dump headers disagree on %s", device);
592 		nerr++;
593 		status = STATUS_BAD;
594 		if (force == 0)
595 			goto closefd;
596 	} else {
597 		status = STATUS_GOOD;
598 	}
599 
600 	if (checkfor) {
601 		printf("A dump exists on %s\n", device);
602 		close(fd);
603 		exit(0);
604 	}
605 
606 	if (kdhl.panicstring[0])
607 		syslog(LOG_ALERT, "reboot after panic: %*s",
608 		    (int)sizeof(kdhl.panicstring), kdhl.panicstring);
609 	else
610 		syslog(LOG_ALERT, "reboot");
611 
612 	if (verbose)
613 		printf("Checking for available free space\n");
614 
615 	if (!check_space(savedir, dumpsize, bounds)) {
616 		nerr++;
617 		goto closefd;
618 	}
619 
620 	writebounds(bounds + 1);
621 
622 	saved_dump_remove(bounds);
623 
624 	snprintf(infoname, sizeof(infoname), "info.%d", bounds);
625 
626 	/*
627 	 * Create or overwrite any existing dump header files.
628 	 */
629 	fdinfo = open(infoname, O_WRONLY | O_CREAT | O_TRUNC, 0600);
630 	if (fdinfo < 0) {
631 		syslog(LOG_ERR, "%s: %m", infoname);
632 		nerr++;
633 		goto closefd;
634 	}
635 
636 	oumask = umask(S_IRWXG|S_IRWXO); /* Restrict access to the core file.*/
637 	if (compress) {
638 		snprintf(corename, sizeof(corename), "%s.%d.gz",
639 		    istextdump ? "textdump.tar" : "vmcore", bounds);
640 		fp = zopen(corename, "w");
641 	} else {
642 		snprintf(corename, sizeof(corename), "%s.%d",
643 		    istextdump ? "textdump.tar" : "vmcore", bounds);
644 		fp = fopen(corename, "w");
645 	}
646 	if (fp == NULL) {
647 		syslog(LOG_ERR, "%s: %m", corename);
648 		close(fdinfo);
649 		nerr++;
650 		goto closefd;
651 	}
652 	(void)umask(oumask);
653 
654 	info = fdopen(fdinfo, "w");
655 
656 	if (info == NULL) {
657 		syslog(LOG_ERR, "fdopen failed: %m");
658 		nerr++;
659 		goto closeall;
660 	}
661 
662 	xostyle = xo_get_style(NULL);
663 	xoinfo = xo_create_to_file(info, xostyle, 0);
664 	if (xoinfo == NULL) {
665 		syslog(LOG_ERR, "%s: %m", infoname);
666 		nerr++;
667 		goto closeall;
668 	}
669 	xo_open_container_h(xoinfo, "crashdump");
670 
671 	if (verbose)
672 		printheader(xostdout, &kdhl, device, bounds, status);
673 
674 	printheader(xoinfo, &kdhl, device, bounds, status);
675 	xo_close_container_h(xoinfo, "crashdump");
676 	xo_flush_h(xoinfo);
677 	xo_finish_h(xoinfo);
678 	fclose(info);
679 
680 	syslog(LOG_NOTICE, "writing %score to %s/%s",
681 	    compress ? "compressed " : "", savedir, corename);
682 
683 	if (istextdump) {
684 		if (DoTextdumpFile(fd, dumpsize, lasthd, buf, device,
685 		    corename, fp) < 0)
686 			goto closeall;
687 	} else {
688 		if (DoRegularFile(fd, dumpsize, buf, device, corename, fp)
689 		    < 0)
690 			goto closeall;
691 	}
692 	if (verbose)
693 		printf("\n");
694 
695 	if (fclose(fp) < 0) {
696 		syslog(LOG_ERR, "error on %s: %m", corename);
697 		nerr++;
698 		goto closefd;
699 	}
700 
701 	symlinks_remove();
702 	if (symlink(infoname, "info.last") == -1) {
703 		syslog(LOG_WARNING, "unable to create symlink %s/%s: %m",
704 		    savedir, "info.last");
705 	}
706 	if (compress) {
707 		snprintf(linkname, sizeof(linkname), "%s.last.gz",
708 		    istextdump ? "textdump.tar" : "vmcore");
709 	} else {
710 		snprintf(linkname, sizeof(linkname), "%s.last",
711 		    istextdump ? "textdump.tar" : "vmcore");
712 	}
713 	if (symlink(corename, linkname) == -1) {
714 		syslog(LOG_WARNING, "unable to create symlink %s/%s: %m",
715 		    savedir, linkname);
716 	}
717 
718 	nsaved++;
719 
720 	if (verbose)
721 		printf("dump saved\n");
722 
723 nuke:
724 	if (!keep) {
725 		if (verbose)
726 			printf("clearing dump header\n");
727 		memcpy(kdhl.magic, KERNELDUMPMAGIC_CLEARED, sizeof kdhl.magic);
728 		if (lseek(fd, lasthd, SEEK_SET) != lasthd ||
729 		    write(fd, &kdhl, sizeof(kdhl)) != sizeof(kdhl))
730 			syslog(LOG_ERR,
731 			    "error while clearing the dump header: %m");
732 	}
733 	xo_close_container_h(xostdout, "crashdump");
734 	xo_finish_h(xostdout);
735 	close(fd);
736 	return;
737 
738 closeall:
739 	fclose(fp);
740 
741 closefd:
742 	close(fd);
743 }
744 
745 static void
746 usage(void)
747 {
748 	xo_error("%s\n%s\n%s\n",
749 	    "usage: savecore -c [-v] [device ...]",
750 	    "       savecore -C [-v] [device ...]",
751 	    "       savecore [-fkvz] [-m maxdumps] [directory [device ...]]");
752 	exit(1);
753 }
754 
755 int
756 main(int argc, char **argv)
757 {
758 	const char *savedir = ".";
759 	struct fstab *fsp;
760 	int i, ch, error;
761 
762 	checkfor = compress = clear = force = keep = verbose = 0;
763 	nfound = nsaved = nerr = 0;
764 
765 	openlog("savecore", LOG_PERROR, LOG_DAEMON);
766 	signal(SIGINFO, infohandler);
767 
768 	argc = xo_parse_args(argc, argv);
769 	if (argc < 0)
770 		exit(1);
771 
772 	while ((ch = getopt(argc, argv, "Ccfkm:vz")) != -1)
773 		switch(ch) {
774 		case 'C':
775 			checkfor = 1;
776 			break;
777 		case 'c':
778 			clear = 1;
779 			break;
780 		case 'f':
781 			force = 1;
782 			break;
783 		case 'k':
784 			keep = 1;
785 			break;
786 		case 'm':
787 			maxdumps = atoi(optarg);
788 			if (maxdumps <= 0) {
789 				syslog(LOG_ERR, "Invalid maxdump value");
790 				exit(1);
791 			}
792 			break;
793 		case 'v':
794 			verbose++;
795 			break;
796 		case 'z':
797 			compress = 1;
798 			break;
799 		case '?':
800 		default:
801 			usage();
802 		}
803 	if (checkfor && (clear || force || keep))
804 		usage();
805 	if (clear && (compress || keep))
806 		usage();
807 	if (maxdumps > 0 && (checkfor || clear))
808 		usage();
809 	argc -= optind;
810 	argv += optind;
811 	if (argc >= 1 && !checkfor && !clear) {
812 		error = chdir(argv[0]);
813 		if (error) {
814 			syslog(LOG_ERR, "chdir(%s): %m", argv[0]);
815 			exit(1);
816 		}
817 		savedir = argv[0];
818 		argc--;
819 		argv++;
820 	}
821 	if (argc == 0) {
822 		for (;;) {
823 			fsp = getfsent();
824 			if (fsp == NULL)
825 				break;
826 			if (strcmp(fsp->fs_vfstype, "swap") &&
827 			    strcmp(fsp->fs_vfstype, "dump"))
828 				continue;
829 			DoFile(savedir, fsp->fs_spec);
830 		}
831 	} else {
832 		for (i = 0; i < argc; i++)
833 			DoFile(savedir, argv[i]);
834 	}
835 
836 	/* Emit minimal output. */
837 	if (nfound == 0) {
838 		if (checkfor) {
839 			if (verbose)
840 				printf("No dump exists\n");
841 			exit(1);
842 		}
843 		if (verbose)
844 			syslog(LOG_WARNING, "no dumps found");
845 	} else if (nsaved == 0) {
846 		if (nerr != 0) {
847 			if (verbose)
848 				syslog(LOG_WARNING, "unsaved dumps found but not saved");
849 			exit(1);
850 		} else if (verbose)
851 			syslog(LOG_WARNING, "no unsaved dumps found");
852 	}
853 
854 	return (0);
855 }
856 
857 static void
858 infohandler(int sig __unused)
859 {
860 	got_siginfo = 1;
861 }
862