1 /*- 2 * Copyright (c) 1988, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 4. Neither the name of the University nor the names of its contributors 14 * may be used to endorse or promote products derived from this software 15 * without specific prior written permission. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 */ 29 30 #ifndef lint 31 static const char copyright[] = 32 "@(#) Copyright (c) 1988, 1993\n\ 33 The Regents of the University of California. All rights reserved.\n"; 34 #endif /* not lint */ 35 36 #ifndef lint 37 #if 0 38 static char sccsid[] = "@(#)kdump.c 8.1 (Berkeley) 6/6/93"; 39 #endif 40 #endif /* not lint */ 41 #include <sys/cdefs.h> 42 __FBSDID("$FreeBSD$"); 43 44 #define _WANT_KERNEL_ERRNO 45 #include <sys/param.h> 46 #include <sys/capsicum.h> 47 #include <sys/errno.h> 48 #include <sys/time.h> 49 #include <sys/uio.h> 50 #include <sys/ktrace.h> 51 #include <sys/ioctl.h> 52 #include <sys/socket.h> 53 #include <sys/stat.h> 54 #include <sys/sysent.h> 55 #include <sys/umtx.h> 56 #include <sys/un.h> 57 #include <sys/queue.h> 58 #include <sys/wait.h> 59 #ifdef HAVE_LIBCASPER 60 #include <sys/nv.h> 61 #endif 62 #include <arpa/inet.h> 63 #include <netinet/in.h> 64 #include <ctype.h> 65 #include <err.h> 66 #include <grp.h> 67 #include <inttypes.h> 68 #include <locale.h> 69 #include <netdb.h> 70 #include <nl_types.h> 71 #include <pwd.h> 72 #include <stddef.h> 73 #include <stdio.h> 74 #include <stdlib.h> 75 #include <string.h> 76 #include <sysdecode.h> 77 #include <termios.h> 78 #include <time.h> 79 #include <unistd.h> 80 #include <vis.h> 81 #include "ktrace.h" 82 #include "kdump_subr.h" 83 84 #ifdef HAVE_LIBCASPER 85 #include <libcasper.h> 86 87 #include <casper/cap_grp.h> 88 #include <casper/cap_pwd.h> 89 #endif 90 91 u_int abidump(struct ktr_header *); 92 int fetchprocinfo(struct ktr_header *, u_int *); 93 int fread_tail(void *, int, int); 94 void dumpheader(struct ktr_header *); 95 void ktrsyscall(struct ktr_syscall *, u_int); 96 void ktrsysret(struct ktr_sysret *, u_int); 97 void ktrnamei(char *, int); 98 void hexdump(char *, int, int); 99 void visdump(char *, int, int); 100 void ktrgenio(struct ktr_genio *, int); 101 void ktrpsig(struct ktr_psig *); 102 void ktrcsw(struct ktr_csw *); 103 void ktrcsw_old(struct ktr_csw_old *); 104 void ktruser(int, void *); 105 void ktrcaprights(cap_rights_t *); 106 void ktritimerval(struct itimerval *it); 107 void ktrsockaddr(struct sockaddr *); 108 void ktrstat(struct stat *); 109 void ktrstruct(char *, size_t); 110 void ktrcapfail(struct ktr_cap_fail *); 111 void ktrfault(struct ktr_fault *); 112 void ktrfaultend(struct ktr_faultend *); 113 void limitfd(int fd); 114 void usage(void); 115 116 #define TIMESTAMP_NONE 0x0 117 #define TIMESTAMP_ABSOLUTE 0x1 118 #define TIMESTAMP_ELAPSED 0x2 119 #define TIMESTAMP_RELATIVE 0x4 120 121 extern const char *signames[]; 122 123 static int timestamp, decimal, fancy = 1, suppressdata, tail, threads, maxdata, 124 resolv = 0, abiflag = 0, syscallno = 0; 125 static const char *tracefile = DEF_TRACEFILE; 126 static struct ktr_header ktr_header; 127 128 #define TIME_FORMAT "%b %e %T %Y" 129 #define eqs(s1, s2) (strcmp((s1), (s2)) == 0) 130 131 #define print_number64(first,i,n,c) do { \ 132 uint64_t __v; \ 133 \ 134 if (quad_align && (((ptrdiff_t)((i) - (first))) & 1) == 1) { \ 135 (i)++; \ 136 (n)--; \ 137 } \ 138 if (quad_slots == 2) \ 139 __v = (uint64_t)(uint32_t)(i)[0] | \ 140 ((uint64_t)(uint32_t)(i)[1]) << 32; \ 141 else \ 142 __v = (uint64_t)*(i); \ 143 if (decimal) \ 144 printf("%c%jd", (c), (intmax_t)__v); \ 145 else \ 146 printf("%c%#jx", (c), (uintmax_t)__v); \ 147 (i) += quad_slots; \ 148 (n) -= quad_slots; \ 149 (c) = ','; \ 150 } while (0) 151 152 #define print_number(i,n,c) do { \ 153 if (decimal) \ 154 printf("%c%jd", c, (intmax_t)*i); \ 155 else \ 156 printf("%c%#jx", c, (uintmax_t)(u_register_t)*i); \ 157 i++; \ 158 n--; \ 159 c = ','; \ 160 } while (0) 161 162 struct proc_info 163 { 164 TAILQ_ENTRY(proc_info) info; 165 u_int sv_flags; 166 pid_t pid; 167 }; 168 169 static TAILQ_HEAD(trace_procs, proc_info) trace_procs; 170 171 #ifdef HAVE_LIBCASPER 172 static cap_channel_t *cappwd, *capgrp; 173 #endif 174 175 static void 176 strerror_init(void) 177 { 178 179 /* 180 * Cache NLS data before entering capability mode. 181 * XXXPJD: There should be strerror_init() and strsignal_init() in libc. 182 */ 183 (void)catopen("libc", NL_CAT_LOCALE); 184 } 185 186 static void 187 localtime_init(void) 188 { 189 time_t ltime; 190 191 /* 192 * Allow localtime(3) to cache /etc/localtime content before entering 193 * capability mode. 194 * XXXPJD: There should be localtime_init() in libc. 195 */ 196 (void)time(<ime); 197 (void)localtime(<ime); 198 } 199 200 #ifdef HAVE_LIBCASPER 201 static int 202 cappwdgrp_setup(cap_channel_t **cappwdp, cap_channel_t **capgrpp) 203 { 204 cap_channel_t *capcas, *cappwdloc, *capgrploc; 205 const char *cmds[1], *fields[1]; 206 207 capcas = cap_init(); 208 if (capcas == NULL) { 209 err(1, "unable to create casper process"); 210 exit(1); 211 } 212 cappwdloc = cap_service_open(capcas, "system.pwd"); 213 capgrploc = cap_service_open(capcas, "system.grp"); 214 /* Casper capability no longer needed. */ 215 cap_close(capcas); 216 if (cappwdloc == NULL || capgrploc == NULL) { 217 if (cappwdloc == NULL) 218 warn("unable to open system.pwd service"); 219 if (capgrploc == NULL) 220 warn("unable to open system.grp service"); 221 exit(1); 222 } 223 /* Limit system.pwd to only getpwuid() function and pw_name field. */ 224 cmds[0] = "getpwuid"; 225 if (cap_pwd_limit_cmds(cappwdloc, cmds, 1) < 0) 226 err(1, "unable to limit system.pwd service"); 227 fields[0] = "pw_name"; 228 if (cap_pwd_limit_fields(cappwdloc, fields, 1) < 0) 229 err(1, "unable to limit system.pwd service"); 230 /* Limit system.grp to only getgrgid() function and gr_name field. */ 231 cmds[0] = "getgrgid"; 232 if (cap_grp_limit_cmds(capgrploc, cmds, 1) < 0) 233 err(1, "unable to limit system.grp service"); 234 fields[0] = "gr_name"; 235 if (cap_grp_limit_fields(capgrploc, fields, 1) < 0) 236 err(1, "unable to limit system.grp service"); 237 238 *cappwdp = cappwdloc; 239 *capgrpp = capgrploc; 240 return (0); 241 } 242 #endif /* HAVE_LIBCASPER */ 243 244 int 245 main(int argc, char *argv[]) 246 { 247 int ch, ktrlen, size; 248 void *m; 249 int trpoints = ALL_POINTS; 250 int drop_logged; 251 pid_t pid = 0; 252 u_int sv_flags; 253 254 setlocale(LC_CTYPE, ""); 255 256 timestamp = TIMESTAMP_NONE; 257 258 while ((ch = getopt(argc,argv,"f:dElm:np:AHRrSsTt:")) != -1) 259 switch (ch) { 260 case 'A': 261 abiflag = 1; 262 break; 263 case 'f': 264 tracefile = optarg; 265 break; 266 case 'd': 267 decimal = 1; 268 break; 269 case 'l': 270 tail = 1; 271 break; 272 case 'm': 273 maxdata = atoi(optarg); 274 break; 275 case 'n': 276 fancy = 0; 277 break; 278 case 'p': 279 pid = atoi(optarg); 280 break; 281 case 'r': 282 resolv = 1; 283 break; 284 case 'S': 285 syscallno = 1; 286 break; 287 case 's': 288 suppressdata = 1; 289 break; 290 case 'E': 291 timestamp |= TIMESTAMP_ELAPSED; 292 break; 293 case 'H': 294 threads = 1; 295 break; 296 case 'R': 297 timestamp |= TIMESTAMP_RELATIVE; 298 break; 299 case 'T': 300 timestamp |= TIMESTAMP_ABSOLUTE; 301 break; 302 case 't': 303 trpoints = getpoints(optarg); 304 if (trpoints < 0) 305 errx(1, "unknown trace point in %s", optarg); 306 break; 307 default: 308 usage(); 309 } 310 311 if (argc > optind) 312 usage(); 313 314 m = malloc(size = 1025); 315 if (m == NULL) 316 errx(1, "%s", strerror(ENOMEM)); 317 if (strcmp(tracefile, "-") != 0) 318 if (!freopen(tracefile, "r", stdin)) 319 err(1, "%s", tracefile); 320 321 strerror_init(); 322 localtime_init(); 323 #ifdef HAVE_LIBCASPER 324 if (resolv != 0) { 325 if (cappwdgrp_setup(&cappwd, &capgrp) < 0) { 326 cappwd = NULL; 327 capgrp = NULL; 328 } 329 } 330 if (resolv == 0 || (cappwd != NULL && capgrp != NULL)) { 331 if (cap_enter() < 0 && errno != ENOSYS) 332 err(1, "unable to enter capability mode"); 333 } 334 #else 335 if (resolv == 0) { 336 if (cap_enter() < 0 && errno != ENOSYS) 337 err(1, "unable to enter capability mode"); 338 } 339 #endif 340 limitfd(STDIN_FILENO); 341 limitfd(STDOUT_FILENO); 342 limitfd(STDERR_FILENO); 343 344 TAILQ_INIT(&trace_procs); 345 drop_logged = 0; 346 while (fread_tail(&ktr_header, sizeof(struct ktr_header), 1)) { 347 if (ktr_header.ktr_type & KTR_DROP) { 348 ktr_header.ktr_type &= ~KTR_DROP; 349 if (!drop_logged && threads) { 350 printf( 351 "%6jd %6jd %-8.*s Events dropped.\n", 352 (intmax_t)ktr_header.ktr_pid, 353 ktr_header.ktr_tid > 0 ? 354 (intmax_t)ktr_header.ktr_tid : 0, 355 MAXCOMLEN, ktr_header.ktr_comm); 356 drop_logged = 1; 357 } else if (!drop_logged) { 358 printf("%6jd %-8.*s Events dropped.\n", 359 (intmax_t)ktr_header.ktr_pid, MAXCOMLEN, 360 ktr_header.ktr_comm); 361 drop_logged = 1; 362 } 363 } 364 if (trpoints & (1<<ktr_header.ktr_type)) 365 if (pid == 0 || ktr_header.ktr_pid == pid || 366 ktr_header.ktr_tid == pid) 367 dumpheader(&ktr_header); 368 if ((ktrlen = ktr_header.ktr_len) < 0) 369 errx(1, "bogus length 0x%x", ktrlen); 370 if (ktrlen > size) { 371 m = realloc(m, ktrlen+1); 372 if (m == NULL) 373 errx(1, "%s", strerror(ENOMEM)); 374 size = ktrlen; 375 } 376 if (ktrlen && fread_tail(m, ktrlen, 1) == 0) 377 errx(1, "data too short"); 378 if (fetchprocinfo(&ktr_header, (u_int *)m) != 0) 379 continue; 380 sv_flags = abidump(&ktr_header); 381 if (pid && ktr_header.ktr_pid != pid && 382 ktr_header.ktr_tid != pid) 383 continue; 384 if ((trpoints & (1<<ktr_header.ktr_type)) == 0) 385 continue; 386 drop_logged = 0; 387 switch (ktr_header.ktr_type) { 388 case KTR_SYSCALL: 389 ktrsyscall((struct ktr_syscall *)m, sv_flags); 390 break; 391 case KTR_SYSRET: 392 ktrsysret((struct ktr_sysret *)m, sv_flags); 393 break; 394 case KTR_NAMEI: 395 case KTR_SYSCTL: 396 ktrnamei(m, ktrlen); 397 break; 398 case KTR_GENIO: 399 ktrgenio((struct ktr_genio *)m, ktrlen); 400 break; 401 case KTR_PSIG: 402 ktrpsig((struct ktr_psig *)m); 403 break; 404 case KTR_CSW: 405 if (ktrlen == sizeof(struct ktr_csw_old)) 406 ktrcsw_old((struct ktr_csw_old *)m); 407 else 408 ktrcsw((struct ktr_csw *)m); 409 break; 410 case KTR_USER: 411 ktruser(ktrlen, m); 412 break; 413 case KTR_STRUCT: 414 ktrstruct(m, ktrlen); 415 break; 416 case KTR_CAPFAIL: 417 ktrcapfail((struct ktr_cap_fail *)m); 418 break; 419 case KTR_FAULT: 420 ktrfault((struct ktr_fault *)m); 421 break; 422 case KTR_FAULTEND: 423 ktrfaultend((struct ktr_faultend *)m); 424 break; 425 default: 426 printf("\n"); 427 break; 428 } 429 if (tail) 430 fflush(stdout); 431 } 432 return 0; 433 } 434 435 void 436 limitfd(int fd) 437 { 438 cap_rights_t rights; 439 unsigned long cmd; 440 441 cap_rights_init(&rights, CAP_FSTAT); 442 cmd = 0; 443 444 switch (fd) { 445 case STDIN_FILENO: 446 cap_rights_set(&rights, CAP_READ); 447 break; 448 case STDOUT_FILENO: 449 cap_rights_set(&rights, CAP_IOCTL, CAP_WRITE); 450 cmd = TIOCGETA; /* required by isatty(3) in printf(3) */ 451 break; 452 case STDERR_FILENO: 453 cap_rights_set(&rights, CAP_WRITE); 454 if (!suppressdata) { 455 cap_rights_set(&rights, CAP_IOCTL); 456 cmd = TIOCGWINSZ; 457 } 458 break; 459 default: 460 abort(); 461 } 462 463 if (cap_rights_limit(fd, &rights) < 0 && errno != ENOSYS) 464 err(1, "unable to limit rights for descriptor %d", fd); 465 if (cmd != 0 && cap_ioctls_limit(fd, &cmd, 1) < 0 && errno != ENOSYS) 466 err(1, "unable to limit ioctls for descriptor %d", fd); 467 } 468 469 int 470 fread_tail(void *buf, int size, int num) 471 { 472 int i; 473 474 while ((i = fread(buf, size, num, stdin)) == 0 && tail) { 475 sleep(1); 476 clearerr(stdin); 477 } 478 return (i); 479 } 480 481 int 482 fetchprocinfo(struct ktr_header *kth, u_int *flags) 483 { 484 struct proc_info *pi; 485 486 switch (kth->ktr_type) { 487 case KTR_PROCCTOR: 488 TAILQ_FOREACH(pi, &trace_procs, info) { 489 if (pi->pid == kth->ktr_pid) { 490 TAILQ_REMOVE(&trace_procs, pi, info); 491 break; 492 } 493 } 494 pi = malloc(sizeof(struct proc_info)); 495 if (pi == NULL) 496 errx(1, "%s", strerror(ENOMEM)); 497 pi->sv_flags = *flags; 498 pi->pid = kth->ktr_pid; 499 TAILQ_INSERT_TAIL(&trace_procs, pi, info); 500 return (1); 501 502 case KTR_PROCDTOR: 503 TAILQ_FOREACH(pi, &trace_procs, info) { 504 if (pi->pid == kth->ktr_pid) { 505 TAILQ_REMOVE(&trace_procs, pi, info); 506 free(pi); 507 break; 508 } 509 } 510 return (1); 511 } 512 513 return (0); 514 } 515 516 u_int 517 abidump(struct ktr_header *kth) 518 { 519 struct proc_info *pi; 520 const char *abi; 521 const char *arch; 522 u_int flags = 0; 523 524 TAILQ_FOREACH(pi, &trace_procs, info) { 525 if (pi->pid == kth->ktr_pid) { 526 flags = pi->sv_flags; 527 break; 528 } 529 } 530 531 if (abiflag == 0) 532 return (flags); 533 534 switch (flags & SV_ABI_MASK) { 535 case SV_ABI_LINUX: 536 abi = "L"; 537 break; 538 case SV_ABI_FREEBSD: 539 abi = "F"; 540 break; 541 case SV_ABI_CLOUDABI: 542 abi = "C"; 543 break; 544 default: 545 abi = "U"; 546 break; 547 } 548 549 if (flags & SV_LP64) 550 arch = "64"; 551 else if (flags & SV_ILP32) 552 arch = "32"; 553 else 554 arch = "00"; 555 556 printf("%s%s ", abi, arch); 557 558 return (flags); 559 } 560 561 void 562 dumpheader(struct ktr_header *kth) 563 { 564 static char unknown[64]; 565 static struct timeval prevtime, prevtime_e; 566 struct timeval temp; 567 const char *type; 568 const char *sign; 569 570 switch (kth->ktr_type) { 571 case KTR_SYSCALL: 572 type = "CALL"; 573 break; 574 case KTR_SYSRET: 575 type = "RET "; 576 break; 577 case KTR_NAMEI: 578 type = "NAMI"; 579 break; 580 case KTR_GENIO: 581 type = "GIO "; 582 break; 583 case KTR_PSIG: 584 type = "PSIG"; 585 break; 586 case KTR_CSW: 587 type = "CSW "; 588 break; 589 case KTR_USER: 590 type = "USER"; 591 break; 592 case KTR_STRUCT: 593 type = "STRU"; 594 break; 595 case KTR_SYSCTL: 596 type = "SCTL"; 597 break; 598 case KTR_PROCCTOR: 599 /* FALLTHROUGH */ 600 case KTR_PROCDTOR: 601 return; 602 case KTR_CAPFAIL: 603 type = "CAP "; 604 break; 605 case KTR_FAULT: 606 type = "PFLT"; 607 break; 608 case KTR_FAULTEND: 609 type = "PRET"; 610 break; 611 default: 612 sprintf(unknown, "UNKNOWN(%d)", kth->ktr_type); 613 type = unknown; 614 } 615 616 /* 617 * The ktr_tid field was previously the ktr_buffer field, which held 618 * the kernel pointer value for the buffer associated with data 619 * following the record header. It now holds a threadid, but only 620 * for trace files after the change. Older trace files still contain 621 * kernel pointers. Detect this and suppress the results by printing 622 * negative tid's as 0. 623 */ 624 if (threads) 625 printf("%6jd %6jd %-8.*s ", (intmax_t)kth->ktr_pid, 626 kth->ktr_tid > 0 ? (intmax_t)kth->ktr_tid : 0, 627 MAXCOMLEN, kth->ktr_comm); 628 else 629 printf("%6jd %-8.*s ", (intmax_t)kth->ktr_pid, MAXCOMLEN, 630 kth->ktr_comm); 631 if (timestamp) { 632 if (timestamp & TIMESTAMP_ABSOLUTE) { 633 printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec, 634 kth->ktr_time.tv_usec); 635 } 636 if (timestamp & TIMESTAMP_ELAPSED) { 637 if (prevtime_e.tv_sec == 0) 638 prevtime_e = kth->ktr_time; 639 timersub(&kth->ktr_time, &prevtime_e, &temp); 640 printf("%jd.%06ld ", (intmax_t)temp.tv_sec, 641 temp.tv_usec); 642 } 643 if (timestamp & TIMESTAMP_RELATIVE) { 644 if (prevtime.tv_sec == 0) 645 prevtime = kth->ktr_time; 646 if (timercmp(&kth->ktr_time, &prevtime, <)) { 647 timersub(&prevtime, &kth->ktr_time, &temp); 648 sign = "-"; 649 } else { 650 timersub(&kth->ktr_time, &prevtime, &temp); 651 sign = ""; 652 } 653 prevtime = kth->ktr_time; 654 printf("%s%jd.%06ld ", sign, (intmax_t)temp.tv_sec, 655 temp.tv_usec); 656 } 657 } 658 printf("%s ", type); 659 } 660 661 #include <sys/syscall.h> 662 663 static void 664 ioctlname(unsigned long val) 665 { 666 const char *str; 667 668 str = sysdecode_ioctlname(val); 669 if (str != NULL) 670 printf("%s", str); 671 else if (decimal) 672 printf("%lu", val); 673 else 674 printf("%#lx", val); 675 } 676 677 static enum sysdecode_abi 678 syscallabi(u_int sv_flags) 679 { 680 681 if (sv_flags == 0) 682 return (SYSDECODE_ABI_FREEBSD); 683 switch (sv_flags & SV_ABI_MASK) { 684 case SV_ABI_FREEBSD: 685 return (SYSDECODE_ABI_FREEBSD); 686 #if defined(__amd64__) || defined(__i386__) 687 case SV_ABI_LINUX: 688 #ifdef __amd64__ 689 if (sv_flags & SV_ILP32) 690 return (SYSDECODE_ABI_LINUX32); 691 #endif 692 return (SYSDECODE_ABI_LINUX); 693 #endif 694 #if defined(__aarch64__) || defined(__amd64__) 695 case SV_ABI_CLOUDABI: 696 return (SYSDECODE_ABI_CLOUDABI64); 697 #endif 698 default: 699 return (SYSDECODE_ABI_UNKNOWN); 700 } 701 } 702 703 static void 704 syscallname(u_int code, u_int sv_flags) 705 { 706 const char *name; 707 708 name = sysdecode_syscallname(syscallabi(sv_flags), code); 709 if (name == NULL) 710 printf("[%d]", code); 711 else { 712 printf("%s", name); 713 if (syscallno) 714 printf("[%d]", code); 715 } 716 } 717 718 void 719 ktrsyscall(struct ktr_syscall *ktr, u_int sv_flags) 720 { 721 int narg = ktr->ktr_narg; 722 register_t *ip, *first; 723 intmax_t arg; 724 int quad_align, quad_slots; 725 726 syscallname(ktr->ktr_code, sv_flags); 727 ip = first = &ktr->ktr_args[0]; 728 if (narg) { 729 char c = '('; 730 if (fancy && 731 (sv_flags == 0 || 732 (sv_flags & SV_ABI_MASK) == SV_ABI_FREEBSD)) { 733 quad_align = 0; 734 if (sv_flags & SV_ILP32) { 735 #ifdef __powerpc__ 736 quad_align = 1; 737 #endif 738 quad_slots = 2; 739 } else 740 quad_slots = 1; 741 switch (ktr->ktr_code) { 742 case SYS_bindat: 743 case SYS_connectat: 744 case SYS_faccessat: 745 case SYS_fchmodat: 746 case SYS_fchownat: 747 case SYS_fstatat: 748 case SYS_futimesat: 749 case SYS_linkat: 750 case SYS_mkdirat: 751 case SYS_mkfifoat: 752 case SYS_mknodat: 753 case SYS_openat: 754 case SYS_readlinkat: 755 case SYS_renameat: 756 case SYS_unlinkat: 757 case SYS_utimensat: 758 putchar('('); 759 atfdname(*ip, decimal); 760 c = ','; 761 ip++; 762 narg--; 763 break; 764 } 765 switch (ktr->ktr_code) { 766 case SYS_ioctl: { 767 print_number(ip, narg, c); 768 putchar(c); 769 ioctlname(*ip); 770 c = ','; 771 ip++; 772 narg--; 773 break; 774 } 775 case SYS_ptrace: 776 putchar('('); 777 ptraceopname(*ip); 778 c = ','; 779 ip++; 780 narg--; 781 break; 782 case SYS_access: 783 case SYS_eaccess: 784 case SYS_faccessat: 785 print_number(ip, narg, c); 786 putchar(','); 787 accessmodename(*ip); 788 ip++; 789 narg--; 790 break; 791 case SYS_open: 792 case SYS_openat: 793 print_number(ip, narg, c); 794 putchar(','); 795 flagsandmodename(ip[0], ip[1], decimal); 796 ip += 2; 797 narg -= 2; 798 break; 799 case SYS_wait4: 800 print_number(ip, narg, c); 801 print_number(ip, narg, c); 802 /* 803 * A flags value of zero is valid for 804 * wait4() but not for wait6(), so 805 * handle zero special here. 806 */ 807 if (*ip == 0) { 808 print_number(ip, narg, c); 809 } else { 810 putchar(','); 811 wait6optname(*ip); 812 ip++; 813 narg--; 814 } 815 break; 816 case SYS_wait6: 817 putchar('('); 818 idtypename(*ip, decimal); 819 c = ','; 820 ip++; 821 narg--; 822 print_number64(first, ip, narg, c); 823 print_number(ip, narg, c); 824 putchar(','); 825 wait6optname(*ip); 826 ip++; 827 narg--; 828 break; 829 case SYS_chmod: 830 case SYS_fchmod: 831 case SYS_lchmod: 832 case SYS_fchmodat: 833 print_number(ip, narg, c); 834 putchar(','); 835 modename(*ip); 836 ip++; 837 narg--; 838 break; 839 case SYS_mknod: 840 case SYS_mknodat: 841 print_number(ip, narg, c); 842 putchar(','); 843 modename(*ip); 844 ip++; 845 narg--; 846 break; 847 case SYS_getfsstat: 848 print_number(ip, narg, c); 849 print_number(ip, narg, c); 850 putchar(','); 851 getfsstatflagsname(*ip); 852 ip++; 853 narg--; 854 break; 855 case SYS_mount: 856 print_number(ip, narg, c); 857 print_number(ip, narg, c); 858 putchar(','); 859 mountflagsname(*ip); 860 ip++; 861 narg--; 862 break; 863 case SYS_unmount: 864 print_number(ip, narg, c); 865 putchar(','); 866 mountflagsname(*ip); 867 ip++; 868 narg--; 869 break; 870 case SYS_recvmsg: 871 case SYS_sendmsg: 872 print_number(ip, narg, c); 873 print_number(ip, narg, c); 874 putchar(','); 875 sendrecvflagsname(*ip); 876 ip++; 877 narg--; 878 break; 879 case SYS_recvfrom: 880 case SYS_sendto: 881 print_number(ip, narg, c); 882 print_number(ip, narg, c); 883 print_number(ip, narg, c); 884 putchar(','); 885 sendrecvflagsname(*ip); 886 ip++; 887 narg--; 888 break; 889 case SYS_chflags: 890 case SYS_fchflags: 891 case SYS_lchflags: 892 print_number(ip, narg, c); 893 putchar(','); 894 modename(*ip); 895 ip++; 896 narg--; 897 break; 898 case SYS_kill: 899 print_number(ip, narg, c); 900 putchar(','); 901 signame(*ip); 902 ip++; 903 narg--; 904 break; 905 case SYS_reboot: 906 putchar('('); 907 rebootoptname(*ip); 908 ip++; 909 narg--; 910 break; 911 case SYS_umask: 912 putchar('('); 913 modename(*ip); 914 ip++; 915 narg--; 916 break; 917 case SYS_msync: 918 print_number(ip, narg, c); 919 print_number(ip, narg, c); 920 putchar(','); 921 msyncflagsname(*ip); 922 ip++; 923 narg--; 924 break; 925 #ifdef SYS_freebsd6_mmap 926 case SYS_freebsd6_mmap: 927 print_number(ip, narg, c); 928 print_number(ip, narg, c); 929 putchar(','); 930 mmapprotname(*ip); 931 putchar(','); 932 ip++; 933 narg--; 934 mmapflagsname(*ip); 935 ip++; 936 narg--; 937 break; 938 #endif 939 case SYS_mmap: 940 print_number(ip, narg, c); 941 print_number(ip, narg, c); 942 putchar(','); 943 mmapprotname(*ip); 944 putchar(','); 945 ip++; 946 narg--; 947 mmapflagsname(*ip); 948 ip++; 949 narg--; 950 break; 951 case SYS_mprotect: 952 print_number(ip, narg, c); 953 print_number(ip, narg, c); 954 putchar(','); 955 mmapprotname(*ip); 956 ip++; 957 narg--; 958 break; 959 case SYS_madvise: 960 print_number(ip, narg, c); 961 print_number(ip, narg, c); 962 putchar(','); 963 madvisebehavname(*ip); 964 ip++; 965 narg--; 966 break; 967 case SYS_setpriority: 968 print_number(ip, narg, c); 969 print_number(ip, narg, c); 970 putchar(','); 971 prioname(*ip); 972 ip++; 973 narg--; 974 break; 975 case SYS_fcntl: 976 print_number(ip, narg, c); 977 putchar(','); 978 fcntlcmdname(ip[0], ip[1], decimal); 979 ip += 2; 980 narg -= 2; 981 break; 982 case SYS_socket: { 983 int sockdomain; 984 putchar('('); 985 sockdomain = *ip; 986 sockdomainname(sockdomain); 987 ip++; 988 narg--; 989 putchar(','); 990 socktypenamewithflags(*ip); 991 ip++; 992 narg--; 993 if (sockdomain == PF_INET || 994 sockdomain == PF_INET6) { 995 putchar(','); 996 sockipprotoname(*ip); 997 ip++; 998 narg--; 999 } 1000 c = ','; 1001 break; 1002 } 1003 case SYS_setsockopt: 1004 case SYS_getsockopt: 1005 print_number(ip, narg, c); 1006 putchar(','); 1007 sockoptlevelname(*ip, decimal); 1008 if (*ip == SOL_SOCKET) { 1009 ip++; 1010 narg--; 1011 putchar(','); 1012 sockoptname(*ip); 1013 } 1014 ip++; 1015 narg--; 1016 break; 1017 #ifdef SYS_freebsd6_lseek 1018 case SYS_freebsd6_lseek: 1019 print_number(ip, narg, c); 1020 /* Hidden 'pad' argument, not in lseek(2) */ 1021 print_number(ip, narg, c); 1022 print_number64(first, ip, narg, c); 1023 putchar(','); 1024 whencename(*ip); 1025 ip++; 1026 narg--; 1027 break; 1028 #endif 1029 case SYS_lseek: 1030 print_number(ip, narg, c); 1031 print_number64(first, ip, narg, c); 1032 putchar(','); 1033 whencename(*ip); 1034 ip++; 1035 narg--; 1036 break; 1037 case SYS_flock: 1038 print_number(ip, narg, c); 1039 putchar(','); 1040 flockname(*ip); 1041 ip++; 1042 narg--; 1043 break; 1044 case SYS_mkfifo: 1045 case SYS_mkfifoat: 1046 case SYS_mkdir: 1047 case SYS_mkdirat: 1048 print_number(ip, narg, c); 1049 putchar(','); 1050 modename(*ip); 1051 ip++; 1052 narg--; 1053 break; 1054 case SYS_shutdown: 1055 print_number(ip, narg, c); 1056 putchar(','); 1057 shutdownhowname(*ip); 1058 ip++; 1059 narg--; 1060 break; 1061 case SYS_socketpair: 1062 putchar('('); 1063 sockdomainname(*ip); 1064 ip++; 1065 narg--; 1066 putchar(','); 1067 socktypenamewithflags(*ip); 1068 ip++; 1069 narg--; 1070 c = ','; 1071 break; 1072 case SYS_getrlimit: 1073 case SYS_setrlimit: 1074 putchar('('); 1075 rlimitname(*ip); 1076 ip++; 1077 narg--; 1078 c = ','; 1079 break; 1080 case SYS_quotactl: 1081 print_number(ip, narg, c); 1082 putchar(','); 1083 quotactlname(*ip); 1084 ip++; 1085 narg--; 1086 c = ','; 1087 break; 1088 case SYS_nfssvc: 1089 putchar('('); 1090 nfssvcname(*ip); 1091 ip++; 1092 narg--; 1093 c = ','; 1094 break; 1095 case SYS_rtprio: 1096 putchar('('); 1097 rtprioname(*ip); 1098 ip++; 1099 narg--; 1100 c = ','; 1101 break; 1102 case SYS___semctl: 1103 print_number(ip, narg, c); 1104 print_number(ip, narg, c); 1105 putchar(','); 1106 semctlname(*ip); 1107 ip++; 1108 narg--; 1109 break; 1110 case SYS_semget: 1111 print_number(ip, narg, c); 1112 print_number(ip, narg, c); 1113 putchar(','); 1114 semgetname(*ip); 1115 ip++; 1116 narg--; 1117 break; 1118 case SYS_msgctl: 1119 print_number(ip, narg, c); 1120 putchar(','); 1121 shmctlname(*ip); 1122 ip++; 1123 narg--; 1124 break; 1125 case SYS_shmat: 1126 print_number(ip, narg, c); 1127 print_number(ip, narg, c); 1128 putchar(','); 1129 shmatname(*ip); 1130 ip++; 1131 narg--; 1132 break; 1133 case SYS_shmctl: 1134 print_number(ip, narg, c); 1135 putchar(','); 1136 shmctlname(*ip); 1137 ip++; 1138 narg--; 1139 break; 1140 case SYS_shm_open: 1141 print_number(ip, narg, c); 1142 putchar(','); 1143 flagsname(ip[0]); 1144 printf(",0%o", (unsigned int)ip[1]); 1145 ip += 3; 1146 narg -= 3; 1147 break; 1148 case SYS_minherit: 1149 print_number(ip, narg, c); 1150 print_number(ip, narg, c); 1151 putchar(','); 1152 minheritname(*ip); 1153 ip++; 1154 narg--; 1155 break; 1156 case SYS_rfork: 1157 putchar('('); 1158 rforkname(*ip); 1159 ip++; 1160 narg--; 1161 c = ','; 1162 break; 1163 case SYS_lio_listio: 1164 putchar('('); 1165 lio_listioname(*ip); 1166 ip++; 1167 narg--; 1168 c = ','; 1169 break; 1170 case SYS_mlockall: 1171 putchar('('); 1172 mlockallname(*ip); 1173 ip++; 1174 narg--; 1175 break; 1176 case SYS_sched_setscheduler: 1177 print_number(ip, narg, c); 1178 putchar(','); 1179 schedpolicyname(*ip); 1180 ip++; 1181 narg--; 1182 break; 1183 case SYS_sched_get_priority_max: 1184 case SYS_sched_get_priority_min: 1185 putchar('('); 1186 schedpolicyname(*ip); 1187 ip++; 1188 narg--; 1189 break; 1190 case SYS_sendfile: 1191 print_number(ip, narg, c); 1192 print_number(ip, narg, c); 1193 print_number(ip, narg, c); 1194 print_number(ip, narg, c); 1195 print_number(ip, narg, c); 1196 print_number(ip, narg, c); 1197 putchar(','); 1198 sendfileflagsname(*(int *)ip); 1199 ip++; 1200 narg--; 1201 break; 1202 case SYS_kldsym: 1203 print_number(ip, narg, c); 1204 putchar(','); 1205 kldsymcmdname(*ip); 1206 ip++; 1207 narg--; 1208 break; 1209 case SYS_sigprocmask: 1210 putchar('('); 1211 sigprocmaskhowname(*ip); 1212 ip++; 1213 narg--; 1214 c = ','; 1215 break; 1216 case SYS___acl_get_file: 1217 case SYS___acl_set_file: 1218 case SYS___acl_get_fd: 1219 case SYS___acl_set_fd: 1220 case SYS___acl_delete_file: 1221 case SYS___acl_delete_fd: 1222 case SYS___acl_aclcheck_file: 1223 case SYS___acl_aclcheck_fd: 1224 case SYS___acl_get_link: 1225 case SYS___acl_set_link: 1226 case SYS___acl_delete_link: 1227 case SYS___acl_aclcheck_link: 1228 print_number(ip, narg, c); 1229 putchar(','); 1230 acltypename(*ip); 1231 ip++; 1232 narg--; 1233 break; 1234 case SYS_sigaction: 1235 putchar('('); 1236 signame(*ip); 1237 ip++; 1238 narg--; 1239 c = ','; 1240 break; 1241 case SYS_extattrctl: 1242 print_number(ip, narg, c); 1243 putchar(','); 1244 extattrctlname(*ip); 1245 ip++; 1246 narg--; 1247 break; 1248 case SYS_nmount: 1249 print_number(ip, narg, c); 1250 print_number(ip, narg, c); 1251 putchar(','); 1252 mountflagsname(*ip); 1253 ip++; 1254 narg--; 1255 break; 1256 case SYS_thr_create: 1257 print_number(ip, narg, c); 1258 print_number(ip, narg, c); 1259 putchar(','); 1260 thrcreateflagsname(*ip); 1261 ip++; 1262 narg--; 1263 break; 1264 case SYS_thr_kill: 1265 print_number(ip, narg, c); 1266 putchar(','); 1267 signame(*ip); 1268 ip++; 1269 narg--; 1270 break; 1271 case SYS_kldunloadf: 1272 print_number(ip, narg, c); 1273 putchar(','); 1274 kldunloadfflagsname(*ip); 1275 ip++; 1276 narg--; 1277 break; 1278 case SYS_linkat: 1279 case SYS_renameat: 1280 case SYS_symlinkat: 1281 print_number(ip, narg, c); 1282 putchar(','); 1283 atfdname(*ip, decimal); 1284 ip++; 1285 narg--; 1286 break; 1287 case SYS_cap_fcntls_limit: 1288 print_number(ip, narg, c); 1289 putchar(','); 1290 arg = *ip; 1291 ip++; 1292 narg--; 1293 capfcntlname(arg); 1294 break; 1295 case SYS_posix_fadvise: 1296 print_number(ip, narg, c); 1297 print_number(ip, narg, c); 1298 print_number(ip, narg, c); 1299 (void)putchar(','); 1300 fadvisebehavname((int)*ip); 1301 ip++; 1302 narg--; 1303 break; 1304 case SYS_procctl: 1305 putchar('('); 1306 idtypename(*ip, decimal); 1307 c = ','; 1308 ip++; 1309 narg--; 1310 print_number64(first, ip, narg, c); 1311 putchar(','); 1312 procctlcmdname(*ip); 1313 ip++; 1314 narg--; 1315 break; 1316 case SYS__umtx_op: 1317 print_number(ip, narg, c); 1318 putchar(','); 1319 umtxopname(*ip); 1320 switch (*ip) { 1321 case UMTX_OP_CV_WAIT: 1322 ip++; 1323 narg--; 1324 putchar(','); 1325 umtxcvwaitflags(*ip); 1326 break; 1327 case UMTX_OP_RW_RDLOCK: 1328 ip++; 1329 narg--; 1330 putchar(','); 1331 umtxrwlockflags(*ip); 1332 break; 1333 } 1334 ip++; 1335 narg--; 1336 break; 1337 case SYS_ftruncate: 1338 case SYS_truncate: 1339 print_number(ip, narg, c); 1340 print_number64(first, ip, narg, c); 1341 break; 1342 } 1343 } 1344 while (narg > 0) { 1345 print_number(ip, narg, c); 1346 } 1347 putchar(')'); 1348 } 1349 putchar('\n'); 1350 } 1351 1352 void 1353 ktrsysret(struct ktr_sysret *ktr, u_int sv_flags) 1354 { 1355 register_t ret = ktr->ktr_retval; 1356 int error = ktr->ktr_error; 1357 1358 syscallname(ktr->ktr_code, sv_flags); 1359 printf(" "); 1360 1361 if (error == 0) { 1362 if (fancy) { 1363 printf("%ld", (long)ret); 1364 if (ret < 0 || ret > 9) 1365 printf("/%#lx", (unsigned long)ret); 1366 } else { 1367 if (decimal) 1368 printf("%ld", (long)ret); 1369 else 1370 printf("%#lx", (unsigned long)ret); 1371 } 1372 } else if (error == ERESTART) 1373 printf("RESTART"); 1374 else if (error == EJUSTRETURN) 1375 printf("JUSTRETURN"); 1376 else { 1377 printf("-1 errno %d", sysdecode_freebsd_to_abi_errno( 1378 syscallabi(sv_flags), error)); 1379 if (fancy) 1380 printf(" %s", strerror(ktr->ktr_error)); 1381 } 1382 putchar('\n'); 1383 } 1384 1385 void 1386 ktrnamei(char *cp, int len) 1387 { 1388 printf("\"%.*s\"\n", len, cp); 1389 } 1390 1391 void 1392 hexdump(char *p, int len, int screenwidth) 1393 { 1394 int n, i; 1395 int width; 1396 1397 width = 0; 1398 do { 1399 width += 2; 1400 i = 13; /* base offset */ 1401 i += (width / 2) + 1; /* spaces every second byte */ 1402 i += (width * 2); /* width of bytes */ 1403 i += 3; /* " |" */ 1404 i += width; /* each byte */ 1405 i += 1; /* "|" */ 1406 } while (i < screenwidth); 1407 width -= 2; 1408 1409 for (n = 0; n < len; n += width) { 1410 for (i = n; i < n + width; i++) { 1411 if ((i % width) == 0) { /* beginning of line */ 1412 printf(" 0x%04x", i); 1413 } 1414 if ((i % 2) == 0) { 1415 printf(" "); 1416 } 1417 if (i < len) 1418 printf("%02x", p[i] & 0xff); 1419 else 1420 printf(" "); 1421 } 1422 printf(" |"); 1423 for (i = n; i < n + width; i++) { 1424 if (i >= len) 1425 break; 1426 if (p[i] >= ' ' && p[i] <= '~') 1427 printf("%c", p[i]); 1428 else 1429 printf("."); 1430 } 1431 printf("|\n"); 1432 } 1433 if ((i % width) != 0) 1434 printf("\n"); 1435 } 1436 1437 void 1438 visdump(char *dp, int datalen, int screenwidth) 1439 { 1440 int col = 0; 1441 char *cp; 1442 int width; 1443 char visbuf[5]; 1444 1445 printf(" \""); 1446 col = 8; 1447 for (;datalen > 0; datalen--, dp++) { 1448 vis(visbuf, *dp, VIS_CSTYLE, *(dp+1)); 1449 cp = visbuf; 1450 /* 1451 * Keep track of printables and 1452 * space chars (like fold(1)). 1453 */ 1454 if (col == 0) { 1455 putchar('\t'); 1456 col = 8; 1457 } 1458 switch(*cp) { 1459 case '\n': 1460 col = 0; 1461 putchar('\n'); 1462 continue; 1463 case '\t': 1464 width = 8 - (col&07); 1465 break; 1466 default: 1467 width = strlen(cp); 1468 } 1469 if (col + width > (screenwidth-2)) { 1470 printf("\\\n\t"); 1471 col = 8; 1472 } 1473 col += width; 1474 do { 1475 putchar(*cp++); 1476 } while (*cp); 1477 } 1478 if (col == 0) 1479 printf(" "); 1480 printf("\"\n"); 1481 } 1482 1483 void 1484 ktrgenio(struct ktr_genio *ktr, int len) 1485 { 1486 int datalen = len - sizeof (struct ktr_genio); 1487 char *dp = (char *)ktr + sizeof (struct ktr_genio); 1488 static int screenwidth = 0; 1489 int i, binary; 1490 1491 printf("fd %d %s %d byte%s\n", ktr->ktr_fd, 1492 ktr->ktr_rw == UIO_READ ? "read" : "wrote", datalen, 1493 datalen == 1 ? "" : "s"); 1494 if (suppressdata) 1495 return; 1496 if (screenwidth == 0) { 1497 struct winsize ws; 1498 1499 if (fancy && ioctl(fileno(stderr), TIOCGWINSZ, &ws) != -1 && 1500 ws.ws_col > 8) 1501 screenwidth = ws.ws_col; 1502 else 1503 screenwidth = 80; 1504 } 1505 if (maxdata && datalen > maxdata) 1506 datalen = maxdata; 1507 1508 for (i = 0, binary = 0; i < datalen && binary == 0; i++) { 1509 if (dp[i] >= 32 && dp[i] < 127) 1510 continue; 1511 if (dp[i] == 10 || dp[i] == 13 || dp[i] == 0 || dp[i] == 9) 1512 continue; 1513 binary = 1; 1514 } 1515 if (binary) 1516 hexdump(dp, datalen, screenwidth); 1517 else 1518 visdump(dp, datalen, screenwidth); 1519 } 1520 1521 const char *signames[] = { 1522 "NULL", "HUP", "INT", "QUIT", "ILL", "TRAP", "IOT", /* 1 - 6 */ 1523 "EMT", "FPE", "KILL", "BUS", "SEGV", "SYS", /* 7 - 12 */ 1524 "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", /* 13 - 18 */ 1525 "CONT", "CHLD", "TTIN", "TTOU", "IO", "XCPU", /* 19 - 24 */ 1526 "XFSZ", "VTALRM", "PROF", "WINCH", "29", "USR1", /* 25 - 30 */ 1527 "USR2", NULL, /* 31 - 32 */ 1528 }; 1529 1530 void 1531 ktrpsig(struct ktr_psig *psig) 1532 { 1533 if (psig->signo > 0 && psig->signo < NSIG) 1534 printf("SIG%s ", signames[psig->signo]); 1535 else 1536 printf("SIG %d ", psig->signo); 1537 if (psig->action == SIG_DFL) { 1538 printf("SIG_DFL code="); 1539 sigcodename(psig->signo, psig->code); 1540 putchar('\n'); 1541 } else { 1542 printf("caught handler=0x%lx mask=0x%x code=", 1543 (u_long)psig->action, psig->mask.__bits[0]); 1544 sigcodename(psig->signo, psig->code); 1545 putchar('\n'); 1546 } 1547 } 1548 1549 void 1550 ktrcsw_old(struct ktr_csw_old *cs) 1551 { 1552 printf("%s %s\n", cs->out ? "stop" : "resume", 1553 cs->user ? "user" : "kernel"); 1554 } 1555 1556 void 1557 ktrcsw(struct ktr_csw *cs) 1558 { 1559 printf("%s %s \"%s\"\n", cs->out ? "stop" : "resume", 1560 cs->user ? "user" : "kernel", cs->wmesg); 1561 } 1562 1563 void 1564 ktruser(int len, void *p) 1565 { 1566 unsigned char *cp; 1567 1568 if (sysdecode_utrace(stdout, p, len)) { 1569 printf("\n"); 1570 return; 1571 } 1572 1573 printf("%d ", len); 1574 cp = p; 1575 while (len--) 1576 if (decimal) 1577 printf(" %d", *cp++); 1578 else 1579 printf(" %02x", *cp++); 1580 printf("\n"); 1581 } 1582 1583 void 1584 ktrcaprights(cap_rights_t *rightsp) 1585 { 1586 1587 printf("cap_rights_t "); 1588 capname(rightsp); 1589 printf("\n"); 1590 } 1591 1592 static void 1593 ktrtimeval(struct timeval *tv) 1594 { 1595 1596 printf("{%ld, %ld}", (long)tv->tv_sec, tv->tv_usec); 1597 } 1598 1599 void 1600 ktritimerval(struct itimerval *it) 1601 { 1602 1603 printf("itimerval { .interval = "); 1604 ktrtimeval(&it->it_interval); 1605 printf(", .value = "); 1606 ktrtimeval(&it->it_value); 1607 printf(" }\n"); 1608 } 1609 1610 void 1611 ktrsockaddr(struct sockaddr *sa) 1612 { 1613 /* 1614 TODO: Support additional address families 1615 #include <netnatm/natm.h> 1616 struct sockaddr_natm *natm; 1617 #include <netsmb/netbios.h> 1618 struct sockaddr_nb *nb; 1619 */ 1620 char addr[64]; 1621 1622 /* 1623 * note: ktrstruct() has already verified that sa points to a 1624 * buffer at least sizeof(struct sockaddr) bytes long and exactly 1625 * sa->sa_len bytes long. 1626 */ 1627 printf("struct sockaddr { "); 1628 sockfamilyname(sa->sa_family); 1629 printf(", "); 1630 1631 #define check_sockaddr_len(n) \ 1632 if (sa_##n.s##n##_len < sizeof(struct sockaddr_##n)) { \ 1633 printf("invalid"); \ 1634 break; \ 1635 } 1636 1637 switch(sa->sa_family) { 1638 case AF_INET: { 1639 struct sockaddr_in sa_in; 1640 1641 memset(&sa_in, 0, sizeof(sa_in)); 1642 memcpy(&sa_in, sa, sa->sa_len); 1643 check_sockaddr_len(in); 1644 inet_ntop(AF_INET, &sa_in.sin_addr, addr, sizeof addr); 1645 printf("%s:%u", addr, ntohs(sa_in.sin_port)); 1646 break; 1647 } 1648 case AF_INET6: { 1649 struct sockaddr_in6 sa_in6; 1650 1651 memset(&sa_in6, 0, sizeof(sa_in6)); 1652 memcpy(&sa_in6, sa, sa->sa_len); 1653 check_sockaddr_len(in6); 1654 getnameinfo((struct sockaddr *)&sa_in6, sizeof(sa_in6), 1655 addr, sizeof(addr), NULL, 0, NI_NUMERICHOST); 1656 printf("[%s]:%u", addr, htons(sa_in6.sin6_port)); 1657 break; 1658 } 1659 case AF_UNIX: { 1660 struct sockaddr_un sa_un; 1661 1662 memset(&sa_un, 0, sizeof(sa_un)); 1663 memcpy(&sa_un, sa, sa->sa_len); 1664 printf("%.*s", (int)sizeof(sa_un.sun_path), sa_un.sun_path); 1665 break; 1666 } 1667 default: 1668 printf("unknown address family"); 1669 } 1670 printf(" }\n"); 1671 } 1672 1673 void 1674 ktrstat(struct stat *statp) 1675 { 1676 char mode[12], timestr[PATH_MAX + 4]; 1677 struct passwd *pwd; 1678 struct group *grp; 1679 struct tm *tm; 1680 1681 /* 1682 * note: ktrstruct() has already verified that statp points to a 1683 * buffer exactly sizeof(struct stat) bytes long. 1684 */ 1685 printf("struct stat {"); 1686 printf("dev=%ju, ino=%ju, ", 1687 (uintmax_t)statp->st_dev, (uintmax_t)statp->st_ino); 1688 if (resolv == 0) 1689 printf("mode=0%jo, ", (uintmax_t)statp->st_mode); 1690 else { 1691 strmode(statp->st_mode, mode); 1692 printf("mode=%s, ", mode); 1693 } 1694 printf("nlink=%ju, ", (uintmax_t)statp->st_nlink); 1695 if (resolv == 0) { 1696 pwd = NULL; 1697 } else { 1698 #ifdef HAVE_LIBCASPER 1699 if (cappwd != NULL) 1700 pwd = cap_getpwuid(cappwd, statp->st_uid); 1701 else 1702 #endif 1703 pwd = getpwuid(statp->st_uid); 1704 } 1705 if (pwd == NULL) 1706 printf("uid=%ju, ", (uintmax_t)statp->st_uid); 1707 else 1708 printf("uid=\"%s\", ", pwd->pw_name); 1709 if (resolv == 0) { 1710 grp = NULL; 1711 } else { 1712 #ifdef HAVE_LIBCASPER 1713 if (capgrp != NULL) 1714 grp = cap_getgrgid(capgrp, statp->st_gid); 1715 else 1716 #endif 1717 grp = getgrgid(statp->st_gid); 1718 } 1719 if (grp == NULL) 1720 printf("gid=%ju, ", (uintmax_t)statp->st_gid); 1721 else 1722 printf("gid=\"%s\", ", grp->gr_name); 1723 printf("rdev=%ju, ", (uintmax_t)statp->st_rdev); 1724 printf("atime="); 1725 if (resolv == 0) 1726 printf("%jd", (intmax_t)statp->st_atim.tv_sec); 1727 else { 1728 tm = localtime(&statp->st_atim.tv_sec); 1729 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1730 printf("\"%s\"", timestr); 1731 } 1732 if (statp->st_atim.tv_nsec != 0) 1733 printf(".%09ld, ", statp->st_atim.tv_nsec); 1734 else 1735 printf(", "); 1736 printf("mtime="); 1737 if (resolv == 0) 1738 printf("%jd", (intmax_t)statp->st_mtim.tv_sec); 1739 else { 1740 tm = localtime(&statp->st_mtim.tv_sec); 1741 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1742 printf("\"%s\"", timestr); 1743 } 1744 if (statp->st_mtim.tv_nsec != 0) 1745 printf(".%09ld, ", statp->st_mtim.tv_nsec); 1746 else 1747 printf(", "); 1748 printf("ctime="); 1749 if (resolv == 0) 1750 printf("%jd", (intmax_t)statp->st_ctim.tv_sec); 1751 else { 1752 tm = localtime(&statp->st_ctim.tv_sec); 1753 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1754 printf("\"%s\"", timestr); 1755 } 1756 if (statp->st_ctim.tv_nsec != 0) 1757 printf(".%09ld, ", statp->st_ctim.tv_nsec); 1758 else 1759 printf(", "); 1760 printf("birthtime="); 1761 if (resolv == 0) 1762 printf("%jd", (intmax_t)statp->st_birthtim.tv_sec); 1763 else { 1764 tm = localtime(&statp->st_birthtim.tv_sec); 1765 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm); 1766 printf("\"%s\"", timestr); 1767 } 1768 if (statp->st_birthtim.tv_nsec != 0) 1769 printf(".%09ld, ", statp->st_birthtim.tv_nsec); 1770 else 1771 printf(", "); 1772 printf("size=%jd, blksize=%ju, blocks=%jd, flags=0x%x", 1773 (uintmax_t)statp->st_size, (uintmax_t)statp->st_blksize, 1774 (intmax_t)statp->st_blocks, statp->st_flags); 1775 printf(" }\n"); 1776 } 1777 1778 void 1779 ktrstruct(char *buf, size_t buflen) 1780 { 1781 char *name, *data; 1782 size_t namelen, datalen; 1783 int i; 1784 cap_rights_t rights; 1785 struct itimerval it; 1786 struct stat sb; 1787 struct sockaddr_storage ss; 1788 1789 for (name = buf, namelen = 0; 1790 namelen < buflen && name[namelen] != '\0'; 1791 ++namelen) 1792 /* nothing */; 1793 if (namelen == buflen) 1794 goto invalid; 1795 if (name[namelen] != '\0') 1796 goto invalid; 1797 data = buf + namelen + 1; 1798 datalen = buflen - namelen - 1; 1799 if (datalen == 0) 1800 goto invalid; 1801 /* sanity check */ 1802 for (i = 0; i < (int)namelen; ++i) 1803 if (!isalpha(name[i])) 1804 goto invalid; 1805 if (strcmp(name, "caprights") == 0) { 1806 if (datalen != sizeof(cap_rights_t)) 1807 goto invalid; 1808 memcpy(&rights, data, datalen); 1809 ktrcaprights(&rights); 1810 } else if (strcmp(name, "itimerval") == 0) { 1811 if (datalen != sizeof(struct itimerval)) 1812 goto invalid; 1813 memcpy(&it, data, datalen); 1814 ktritimerval(&it); 1815 } else if (strcmp(name, "stat") == 0) { 1816 if (datalen != sizeof(struct stat)) 1817 goto invalid; 1818 memcpy(&sb, data, datalen); 1819 ktrstat(&sb); 1820 } else if (strcmp(name, "sockaddr") == 0) { 1821 if (datalen > sizeof(ss)) 1822 goto invalid; 1823 memcpy(&ss, data, datalen); 1824 if (datalen != ss.ss_len) 1825 goto invalid; 1826 ktrsockaddr((struct sockaddr *)&ss); 1827 } else { 1828 printf("unknown structure\n"); 1829 } 1830 return; 1831 invalid: 1832 printf("invalid record\n"); 1833 } 1834 1835 void 1836 ktrcapfail(struct ktr_cap_fail *ktr) 1837 { 1838 switch (ktr->cap_type) { 1839 case CAPFAIL_NOTCAPABLE: 1840 /* operation on fd with insufficient capabilities */ 1841 printf("operation requires "); 1842 capname(&ktr->cap_needed); 1843 printf(", descriptor holds "); 1844 capname(&ktr->cap_held); 1845 break; 1846 case CAPFAIL_INCREASE: 1847 /* requested more capabilities than fd already has */ 1848 printf("attempt to increase capabilities from "); 1849 capname(&ktr->cap_held); 1850 printf(" to "); 1851 capname(&ktr->cap_needed); 1852 break; 1853 case CAPFAIL_SYSCALL: 1854 /* called restricted syscall */ 1855 printf("disallowed system call"); 1856 break; 1857 case CAPFAIL_LOOKUP: 1858 /* used ".." in strict-relative mode */ 1859 printf("restricted VFS lookup"); 1860 break; 1861 default: 1862 printf("unknown capability failure: "); 1863 capname(&ktr->cap_needed); 1864 printf(" "); 1865 capname(&ktr->cap_held); 1866 break; 1867 } 1868 printf("\n"); 1869 } 1870 1871 void 1872 ktrfault(struct ktr_fault *ktr) 1873 { 1874 1875 printf("0x%jx ", (uintmax_t)ktr->vaddr); 1876 vmprotname(ktr->type); 1877 printf("\n"); 1878 } 1879 1880 void 1881 ktrfaultend(struct ktr_faultend *ktr) 1882 { 1883 1884 vmresultname(ktr->result); 1885 printf("\n"); 1886 } 1887 1888 void 1889 usage(void) 1890 { 1891 fprintf(stderr, "usage: kdump [-dEnlHRrSsTA] [-f trfile] " 1892 "[-m maxdata] [-p pid] [-t trstr]\n"); 1893 exit(1); 1894 } 1895