2 * SPDX-License-Identifier: MIT-CMU
4 * Mach Operating System
5 * Copyright (c) 1991,1990 Carnegie Mellon University
8 * Permission to use, copy, modify and distribute this software and its
9 * documentation is hereby granted, provided that both the copyright
10 * notice and this permission notice appear in all copies of the
11 * software, derivative works or modified versions, and any portions
12 * thereof, and that both notices appear in supporting documentation.
14 * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS
15 * CONDITION. CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
16 * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
18 * Carnegie Mellon requests users of this software to return to
20 * Software Distribution Coordinator or Software.Distribution@CS.CMU.EDU
21 * School of Computer Science
22 * Carnegie Mellon University
23 * Pittsburgh PA 15213-3890
25 * any improvements or extensions that they make and grant Carnegie the
26 * rights to redistribute these changes.
29 * Author: David B. Golub, Carnegie Mellon University
36 #include <sys/cdefs.h>
37 __FBSDID("$FreeBSD$");
39 #include <sys/param.h>
42 #include <sys/eventhandler.h>
44 #include <sys/kernel.h>
45 #include <sys/linker_set.h>
47 #include <sys/mutex.h>
49 #include <sys/reboot.h>
50 #include <sys/signalvar.h>
51 #include <sys/systm.h>
52 #include <sys/watchdog.h>
55 #include <ddb/db_command.h>
56 #include <ddb/db_lex.h>
57 #include <ddb/db_output.h>
59 #include <machine/cpu.h>
60 #include <machine/setjmp.h>
62 #include <security/mac/mac_framework.h>
65 * Exported global variables
69 db_addr_t db_last_addr;
73 static db_cmdfcn_t db_dump;
74 static db_cmdfcn_t db_fncall;
75 static db_cmdfcn_t db_gdb;
76 static db_cmdfcn_t db_halt;
77 static db_cmdfcn_t db_kill;
78 static db_cmdfcn_t db_reset;
79 static db_cmdfcn_t db_stack_trace;
80 static db_cmdfcn_t db_stack_trace_active;
81 static db_cmdfcn_t db_stack_trace_all;
82 static db_cmdfcn_t db_watchdog;
84 #define DB_CMD(_name, _func, _flags) \
91 #define DB_TABLE(_name, _more) \
98 static struct db_command db_show_active_cmds[] = {
99 DB_CMD("trace", db_stack_trace_active, DB_CMD_MEMSAFE),
101 struct db_command_table db_show_active_table =
102 LIST_HEAD_INITIALIZER(db_show_active_table);
104 static struct db_command db_show_all_cmds[] = {
105 DB_CMD("trace", db_stack_trace_all, DB_CMD_MEMSAFE),
107 struct db_command_table db_show_all_table =
108 LIST_HEAD_INITIALIZER(db_show_all_table);
110 static struct db_command db_show_cmds[] = {
111 DB_TABLE("active", &db_show_active_table),
112 DB_TABLE("all", &db_show_all_table),
113 DB_CMD("registers", db_show_regs, DB_CMD_MEMSAFE),
114 DB_CMD("breaks", db_listbreak_cmd, DB_CMD_MEMSAFE),
115 DB_CMD("threads", db_show_threads, DB_CMD_MEMSAFE),
117 struct db_command_table db_show_table = LIST_HEAD_INITIALIZER(db_show_table);
119 static struct db_command db_cmds[] = {
120 DB_TABLE("show", &db_show_table),
121 DB_CMD("print", db_print_cmd, 0),
122 DB_CMD("p", db_print_cmd, 0),
123 DB_CMD("examine", db_examine_cmd, CS_SET_DOT),
124 DB_CMD("x", db_examine_cmd, CS_SET_DOT),
125 DB_CMD("search", db_search_cmd, CS_OWN|CS_SET_DOT),
126 DB_CMD("set", db_set_cmd, CS_OWN|DB_CMD_MEMSAFE),
127 DB_CMD("write", db_write_cmd, CS_MORE|CS_SET_DOT),
128 DB_CMD("w", db_write_cmd, CS_MORE|CS_SET_DOT),
129 DB_CMD("delete", db_delete_cmd, 0),
130 DB_CMD("d", db_delete_cmd, 0),
131 DB_CMD("dump", db_dump, DB_CMD_MEMSAFE),
132 DB_CMD("break", db_breakpoint_cmd, 0),
133 DB_CMD("b", db_breakpoint_cmd, 0),
134 DB_CMD("dwatch", db_deletewatch_cmd, 0),
135 DB_CMD("watch", db_watchpoint_cmd, CS_MORE),
136 DB_CMD("dhwatch", db_deletehwatch_cmd, 0),
137 DB_CMD("hwatch", db_hwatchpoint_cmd, 0),
138 DB_CMD("step", db_single_step_cmd, DB_CMD_MEMSAFE),
139 DB_CMD("s", db_single_step_cmd, DB_CMD_MEMSAFE),
140 DB_CMD("continue", db_continue_cmd, DB_CMD_MEMSAFE),
141 DB_CMD("c", db_continue_cmd, DB_CMD_MEMSAFE),
142 DB_CMD("until", db_trace_until_call_cmd, DB_CMD_MEMSAFE),
143 DB_CMD("next", db_trace_until_matching_cmd, DB_CMD_MEMSAFE),
144 DB_CMD("match", db_trace_until_matching_cmd, 0),
145 DB_CMD("trace", db_stack_trace, CS_OWN|DB_CMD_MEMSAFE),
146 DB_CMD("t", db_stack_trace, CS_OWN|DB_CMD_MEMSAFE),
147 /* XXX alias for active trace */
148 DB_CMD("acttrace", db_stack_trace_active, DB_CMD_MEMSAFE),
149 /* XXX alias for all trace */
150 DB_CMD("alltrace", db_stack_trace_all, DB_CMD_MEMSAFE),
151 DB_CMD("where", db_stack_trace, CS_OWN|DB_CMD_MEMSAFE),
152 DB_CMD("bt", db_stack_trace, CS_OWN|DB_CMD_MEMSAFE),
153 DB_CMD("call", db_fncall, CS_OWN),
154 DB_CMD("ps", db_ps, DB_CMD_MEMSAFE),
155 DB_CMD("gdb", db_gdb, 0),
156 DB_CMD("halt", db_halt, DB_CMD_MEMSAFE),
157 DB_CMD("reboot", db_reset, DB_CMD_MEMSAFE),
158 DB_CMD("reset", db_reset, DB_CMD_MEMSAFE),
159 DB_CMD("kill", db_kill, CS_OWN|DB_CMD_MEMSAFE),
160 DB_CMD("watchdog", db_watchdog, CS_OWN|DB_CMD_MEMSAFE),
161 DB_CMD("thread", db_set_thread, 0),
162 DB_CMD("run", db_run_cmd, CS_OWN|DB_CMD_MEMSAFE),
163 DB_CMD("script", db_script_cmd, CS_OWN|DB_CMD_MEMSAFE),
164 DB_CMD("scripts", db_scripts_cmd, DB_CMD_MEMSAFE),
165 DB_CMD("unscript", db_unscript_cmd, CS_OWN|DB_CMD_MEMSAFE),
166 DB_CMD("capture", db_capture_cmd, CS_OWN|DB_CMD_MEMSAFE),
167 DB_CMD("textdump", db_textdump_cmd, CS_OWN|DB_CMD_MEMSAFE),
168 DB_CMD("findstack", db_findstack_cmd, 0),
170 struct db_command_table db_cmd_table = LIST_HEAD_INITIALIZER(db_cmd_table);
175 static struct db_command *db_last_command = NULL;
178 * if 'ed' style: 'dot' is set at start of last item printed,
179 * and '+' points to next line.
180 * Otherwise: 'dot' points to next item, '..' points to last.
182 static bool db_ed_style = true;
185 * Utility routine - discard tokens through end-of-line.
198 * Results of command search.
203 #define CMD_AMBIGUOUS 3
206 static void db_cmd_match(char *name, struct db_command *cmd,
207 struct db_command **cmdp, int *resultp);
208 static void db_cmd_list(struct db_command_table *table);
209 static int db_cmd_search(char *name, struct db_command_table *table,
210 struct db_command **cmdp);
211 static void db_command(struct db_command **last_cmdp,
212 struct db_command_table *cmd_table, bool dopager);
215 * Initialize the command lists from the static tables.
218 db_command_init(void)
222 for (i = 0; i < nitems(db_cmds); i++)
223 db_command_register(&db_cmd_table, &db_cmds[i]);
224 for (i = 0; i < nitems(db_show_cmds); i++)
225 db_command_register(&db_show_table, &db_show_cmds[i]);
226 for (i = 0; i < nitems(db_show_active_cmds); i++)
227 db_command_register(&db_show_active_table,
228 &db_show_active_cmds[i]);
229 for (i = 0; i < nitems(db_show_all_cmds); i++)
230 db_command_register(&db_show_all_table, &db_show_all_cmds[i]);
234 * Register a command.
237 db_command_register(struct db_command_table *list, struct db_command *cmd)
239 struct db_command *c, *last;
242 if (mac_ddb_command_register(list, cmd)) {
243 printf("%s: MAC policy refused registration of command %s\n",
244 __func__, cmd->name);
249 LIST_FOREACH(c, list, next) {
250 int n = strcmp(cmd->name, c->name);
252 /* Check that the command is not already present. */
254 printf("%s: Warning, the command \"%s\" already exists;"
255 " ignoring request\n", __func__, cmd->name);
259 /* NB: keep list sorted lexicographically */
260 LIST_INSERT_BEFORE(c, cmd, next);
266 LIST_INSERT_HEAD(list, cmd, next);
268 LIST_INSERT_AFTER(last, cmd, next);
272 * Remove a command previously registered with db_command_register.
275 db_command_unregister(struct db_command_table *list, struct db_command *cmd)
277 struct db_command *c;
279 LIST_FOREACH(c, list, next) {
281 LIST_REMOVE(cmd, next);
285 /* NB: intentionally quiet */
289 * Helper function to match a single command.
292 db_cmd_match(char *name, struct db_command *cmd, struct db_command **cmdp,
300 while ((c = *lp) == *rp) {
304 *resultp = CMD_UNIQUE;
311 /* end of name, not end of command -
313 if (*resultp == CMD_FOUND) {
314 *resultp = CMD_AMBIGUOUS;
315 /* but keep looking for a full match -
316 this lets us match single letters */
317 } else if (*resultp == CMD_NONE) {
319 *resultp = CMD_FOUND;
325 * Search for command prefix.
328 db_cmd_search(char *name, struct db_command_table *table,
329 struct db_command **cmdp)
331 struct db_command *cmd;
332 int result = CMD_NONE;
334 LIST_FOREACH(cmd, table, next) {
335 db_cmd_match(name,cmd,cmdp,&result);
336 if (result == CMD_UNIQUE)
340 if (result == CMD_NONE) {
341 /* check for 'help' */
342 if (name[0] == 'h' && name[1] == 'e'
343 && name[2] == 'l' && name[3] == 'p')
350 db_cmd_list(struct db_command_table *table)
352 struct db_command *cmd;
353 int have_subcommands;
355 have_subcommands = 0;
356 LIST_FOREACH(cmd, table, next) {
357 if (cmd->more != NULL)
359 db_printf("%-16s", cmd->name);
363 if (have_subcommands > 0) {
364 db_printf("\nThe following have subcommands; append \"help\" "
365 "to list (e.g. \"show help\"):\n");
366 LIST_FOREACH(cmd, table, next) {
367 if (cmd->more == NULL)
369 db_printf("%-16s", cmd->name);
376 db_command(struct db_command **last_cmdp, struct db_command_table *cmd_table,
379 char modif[TOK_STRING_SIZE];
380 struct db_command *cmd = NULL;
381 db_expr_t addr, count;
383 bool have_addr = false;
387 /* empty line repeats last command, at 'next' */
389 addr = (db_expr_t)db_next;
393 } else if (t == tEXCL) {
394 db_fncall((db_expr_t)0, false, (db_expr_t)0, NULL);
396 } else if (t != tIDENT) {
397 db_printf("Unrecognized input; use \"help\" "
398 "to list available commands\n");
405 while (cmd_table != NULL) {
406 result = db_cmd_search(db_tok_string, cmd_table, &cmd);
409 db_printf("No such command; use \"help\" "
410 "to list available commands\n");
414 db_printf("Ambiguous\n");
418 if (cmd_table == &db_cmd_table) {
419 db_printf("This is ddb(4), the kernel debugger; "
420 "see https://man.FreeBSD.org/ddb/4 for help.\n");
421 db_printf("Use \"bt\" for backtrace, \"dump\" for "
422 "kernel core dump, \"reset\" to reboot.\n");
423 db_printf("Available commands:\n");
425 db_cmd_list(cmd_table);
432 if ((cmd_table = cmd->more) != NULL) {
435 db_printf("Subcommand required; "
436 "available subcommands:\n");
437 db_cmd_list(cmd_table);
444 if ((cmd->flag & CS_OWN) == 0) {
447 * command [/modifier] [addr] [,count]
453 db_printf("Bad modifier\n");
457 db_strcpy(modif, db_tok_string);
463 if (db_expression(&addr)) {
464 db_dot = (db_addr_t) addr;
465 db_last_addr = db_dot;
468 addr = (db_expr_t) db_dot;
474 if (!db_expression(&count)) {
475 db_printf("Count missing\n");
484 if ((cmd->flag & CS_MORE) == 0) {
493 if (mac_ddb_command_exec(cmd, addr, have_addr, count, modif)) {
494 db_printf("MAC prevented execution of command %s\n",
500 * Execute the command.
506 (*cmd->fcn)(addr, have_addr, count, modif);
510 if (cmd->flag & CS_SET_DOT) {
512 * If command changes dot, set dot to previous address
513 * displayed (if 'ed' style).
515 db_dot = db_ed_style ? db_prev : db_next;
518 * If command does not change dot, set 'next' location
527 * At least one non-optional command must be implemented using
528 * DB_COMMAND() so that db_cmd_set gets created. Here is one.
530 DB_COMMAND_FLAGS(panic, db_panic, DB_CMD_MEMSAFE)
533 panic("from debugger");
537 db_command_loop(void)
540 * Initialize 'prev' and 'next' to dot.
545 db_cmd_loop_done = 0;
546 while (!db_cmd_loop_done) {
547 if (db_print_position() != 0)
551 (void)db_read_line();
553 db_command(&db_last_command, &db_cmd_table, /* dopager */ true);
558 * Execute a command on behalf of a script. The caller is responsible for
559 * making sure that the command string is < DB_MAXLINE or it will be
562 * XXXRW: Runs by injecting faked input into DDB input stream; it would be
563 * nicer to use an alternative approach that didn't mess with the previous
567 db_command_script(const char *command)
569 db_prev = db_next = db_dot;
570 db_inject_line(command);
571 db_command(&db_last_command, &db_cmd_table, /* dopager */ false);
575 db_error(const char *s)
580 kdb_reenter_silent();
584 db_dump(db_expr_t dummy, bool dummy2, db_expr_t dummy3, char *dummy4)
588 if (textdump_pending) {
589 db_printf("textdump_pending set.\n"
590 "run \"textdump unset\" first or \"textdump dump\" for a textdump.\n");
593 error = doadump(false);
595 db_printf("Cannot dump: ");
598 db_printf("debugger got invoked while dumping.\n");
601 db_printf("no dump device specified.\n");
604 db_printf("unknown error (error=%d).\n", error);
611 * Call random function:
615 /* The generic implementation supports a maximum of 10 arguments. */
616 typedef db_expr_t __db_f(db_expr_t, db_expr_t, db_expr_t, db_expr_t,
617 db_expr_t, db_expr_t, db_expr_t, db_expr_t, db_expr_t, db_expr_t);
620 db_fncall_generic(db_expr_t addr, db_expr_t *rv, int nargs, db_expr_t args[])
622 __db_f *f = (__db_f *)addr;
625 db_printf("Too many arguments (max 10)\n");
628 *rv = (*f)(args[0], args[1], args[2], args[3], args[4], args[5],
629 args[6], args[7], args[8], args[9]);
634 db_fncall(db_expr_t dummy1, bool dummy2, db_expr_t dummy3, char *dummy4)
637 db_expr_t args[DB_MAXARGS];
642 if (!db_expression(&fn_addr)) {
643 db_printf("Bad function\n");
650 if (db_expression(&args[0])) {
652 while ((t = db_read_token()) == tCOMMA) {
653 if (nargs == DB_MAXARGS) {
654 db_printf("Too many arguments (max %d)\n", DB_MAXARGS);
658 if (!db_expression(&args[nargs])) {
659 db_printf("Argument missing\n");
667 if (db_read_token() != tRPAREN) {
668 db_printf("Mismatched parens\n");
676 if (DB_CALL(fn_addr, &retval, nargs, args))
677 db_printf("= %#lr\n", (long)retval);
681 db_halt(db_expr_t dummy, bool dummy2, db_expr_t dummy3, char *dummy4)
688 db_kill(db_expr_t dummy1, bool dummy2, db_expr_t dummy3, char *dummy4)
690 db_expr_t old_radix, pid, sig;
693 #define DB_ERROR(f) do { db_printf f; db_flush_lex(); goto out; } while (0)
696 * PIDs and signal numbers are typically represented in base
697 * 10, so make that the default here. It can, of course, be
698 * overridden by specifying a prefix.
700 old_radix = db_radix;
702 /* Retrieve arguments. */
703 if (!db_expression(&sig))
704 DB_ERROR(("Missing signal number\n"));
705 if (!db_expression(&pid))
706 DB_ERROR(("Missing process ID\n"));
708 if (!_SIG_VALID(sig))
709 DB_ERROR(("Signal number out of range\n"));
712 * Find the process in question. allproc_lock is not needed
713 * since we're in DDB.
715 /* sx_slock(&allproc_lock); */
716 FOREACH_PROC_IN_SYSTEM(p)
719 /* sx_sunlock(&allproc_lock); */
721 DB_ERROR(("Can't find process with pid %ld\n", (long) pid));
723 /* If it's already locked, bail; otherwise, do the deed. */
724 if (PROC_TRYLOCK(p) == 0)
725 DB_ERROR(("Can't lock process with pid %ld\n", (long) pid));
727 pksignal(p, sig, NULL);
732 db_radix = old_radix;
737 * Reboot. In case there is an additional argument, take it as delay in
738 * seconds. Default to 15s if we cannot parse it and make sure we will
739 * never wait longer than 1 week. Some code is similar to
740 * kern_shutdown.c:shutdown_panic().
742 #ifndef DB_RESET_MAXDELAY
743 #define DB_RESET_MAXDELAY (3600 * 24 * 7)
747 db_reset(db_expr_t addr, bool have_addr, db_expr_t count __unused,
753 delay = (int)db_hex2dec(addr);
755 /* If we parse to fail, use 15s. */
759 /* Cap at one week. */
760 if ((uintmax_t)delay > (uintmax_t)DB_RESET_MAXDELAY)
761 delay = DB_RESET_MAXDELAY;
763 db_printf("Automatic reboot in %d seconds - "
764 "press a key on the console to abort\n", delay);
765 for (loop = delay * 10; loop > 0; --loop) {
766 DELAY(1000 * 100); /* 1/10th second */
767 /* Did user type a key? */
768 if (cncheckc() != -1)
774 * Conditionally try the standard reboot path, so any registered
775 * shutdown/reset handlers have a chance to run first. Some platforms
776 * may not support the machine-dependent mechanism used by cpu_reset()
777 * and rely on some other non-standard mechanism to perform the reset.
778 * For example, the BCM2835 watchdog driver or gpio-poweroff driver.
780 if (modif[0] != 's') {
781 kern_reboot(RB_NOSYNC);
789 db_watchdog(db_expr_t dummy1, bool dummy2, db_expr_t dummy3, char *dummy4)
791 db_expr_t old_radix, tout;
794 old_radix = db_radix;
796 err = db_expression(&tout);
798 db_radix = old_radix;
800 /* If no argument is provided the watchdog will just be disabled. */
802 db_printf("No argument provided, disabling watchdog\n");
804 } else if ((tout & WD_INTERVAL) == WD_TO_NEVER) {
805 db_error("Out of range watchdog interval\n");
808 EVENTHANDLER_INVOKE(watchdog_list, tout, &i);
812 db_gdb(db_expr_t dummy1, bool dummy2, db_expr_t dummy3, char *dummy4)
815 if (kdb_dbbe_select("gdb") != 0) {
816 db_printf("The remote GDB backend could not be selected.\n");
820 * Mark that we are done in the debugger. kdb_trap()
821 * should re-enter with the new backend.
823 db_cmd_loop_done = 1;
824 db_printf("(ctrl-c will return control to ddb)\n");
828 db_stack_trace(db_expr_t tid, bool hastid, db_expr_t count, char *modif)
836 * We parse our own arguments. We don't like the default radix.
840 hastid = db_expression(&tid);
843 if (!db_expression(&count)) {
844 db_printf("Count missing\n");
857 td = kdb_thr_lookup((lwpid_t)tid);
859 td = kdb_thr_from_pid((pid_t)tid);
861 db_printf("Thread %d not found\n", (int)tid);
866 if (td->td_proc != NULL)
867 pid = td->td_proc->p_pid;
870 db_printf("Tracing pid %d tid %ld td %p\n", pid, (long)td->td_tid, td);
871 if (td->td_proc != NULL && (td->td_proc->p_flag & P_INMEM) == 0)
872 db_printf("--- swapped out\n");
874 db_trace_thread(td, count);
878 _db_stack_trace_all(bool active_only)
884 for (td = kdb_thr_first(); td != NULL; td = kdb_thr_next(td)) {
885 prev_jb = kdb_jmpbuf(jb);
886 if (setjmp(jb) == 0) {
887 if (TD_IS_RUNNING(td))
888 db_printf("\nTracing command %s pid %d"
889 " tid %ld td %p (CPU %d)\n",
890 td->td_proc->p_comm, td->td_proc->p_pid,
891 (long)td->td_tid, td, td->td_oncpu);
892 else if (active_only)
895 db_printf("\nTracing command %s pid %d"
896 " tid %ld td %p\n", td->td_proc->p_comm,
897 td->td_proc->p_pid, (long)td->td_tid, td);
898 if (td->td_proc->p_flag & P_INMEM)
899 db_trace_thread(td, -1);
901 db_printf("--- swapped out\n");
912 db_stack_trace_active(db_expr_t dummy, bool dummy2, db_expr_t dummy3,
916 _db_stack_trace_all(true);
920 db_stack_trace_all(db_expr_t dummy, bool dummy2, db_expr_t dummy3,
924 _db_stack_trace_all(false);
928 * Take the parsed expression value from the command line that was parsed
929 * as a hexadecimal value and convert it as if the expression was parsed
930 * as a decimal value. Returns -1 if the expression was not a valid
934 db_hex2dec(db_expr_t expr)
945 val += (x % 16) * (y);