2 * Copyright (c) 2017 Dell EMC
3 * Copyright (c) 2007 Sandvine Incorporated
4 * Copyright (c) 1998 John D. Polstra
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 #include <sys/cdefs.h>
30 __FBSDID("$FreeBSD$");
32 #include <sys/endian.h>
33 #include <sys/param.h>
34 #include <sys/procfs.h>
35 #include <sys/ptrace.h>
36 #include <sys/queue.h>
37 #include <sys/linker_set.h>
39 #include <sys/sysctl.h>
42 #include <machine/elf.h>
43 #include <vm/vm_param.h>
46 #include <vm/vm_map.h>
62 * Code for generating ELF core dumps.
65 typedef void (*segment_callback)(vm_map_entry_t, void *);
67 /* Closure for cb_put_phdr(). */
69 Elf_Phdr *phdr; /* Program header to fill in */
70 Elf_Off offset; /* Offset of segment in core file */
73 /* Closure for cb_size_segment(). */
75 int count; /* Count of writable segments. */
76 size_t size; /* Total size of all writable segments. */
79 #ifdef ELFCORE_COMPAT_32
80 typedef struct fpreg32 elfcore_fpregset_t;
81 typedef struct reg32 elfcore_gregset_t;
82 typedef struct prpsinfo32 elfcore_prpsinfo_t;
83 typedef struct prstatus32 elfcore_prstatus_t;
84 typedef struct ptrace_lwpinfo32 elfcore_lwpinfo_t;
85 static void elf_convert_gregset(elfcore_gregset_t *rd, struct reg *rs);
86 static void elf_convert_fpregset(elfcore_fpregset_t *rd, struct fpreg *rs);
87 static void elf_convert_lwpinfo(struct ptrace_lwpinfo32 *pld,
88 struct ptrace_lwpinfo *pls);
90 typedef fpregset_t elfcore_fpregset_t;
91 typedef gregset_t elfcore_gregset_t;
92 typedef prpsinfo_t elfcore_prpsinfo_t;
93 typedef prstatus_t elfcore_prstatus_t;
94 typedef struct ptrace_lwpinfo elfcore_lwpinfo_t;
95 #define elf_convert_gregset(d,s) *d = *s
96 #define elf_convert_fpregset(d,s) *d = *s
97 #define elf_convert_lwpinfo(d,s) *d = *s
100 typedef void* (*notefunc_t)(void *, size_t *);
102 static void cb_put_phdr(vm_map_entry_t, void *);
103 static void cb_size_segment(vm_map_entry_t, void *);
104 static void each_dumpable_segment(vm_map_entry_t, segment_callback,
106 static void elf_detach(void); /* atexit() handler. */
107 static void *elf_note_fpregset(void *, size_t *);
108 static void *elf_note_prpsinfo(void *, size_t *);
109 static void *elf_note_prstatus(void *, size_t *);
110 static void *elf_note_thrmisc(void *, size_t *);
111 static void *elf_note_ptlwpinfo(void *, size_t *);
112 #if defined(__i386__) || defined(__amd64__)
113 static void *elf_note_x86_xstate(void *, size_t *);
115 #if defined(__powerpc__)
116 static void *elf_note_powerpc_vmx(void *, size_t *);
118 static void *elf_note_procstat_auxv(void *, size_t *);
119 static void *elf_note_procstat_files(void *, size_t *);
120 static void *elf_note_procstat_groups(void *, size_t *);
121 static void *elf_note_procstat_osrel(void *, size_t *);
122 static void *elf_note_procstat_proc(void *, size_t *);
123 static void *elf_note_procstat_psstrings(void *, size_t *);
124 static void *elf_note_procstat_rlimit(void *, size_t *);
125 static void *elf_note_procstat_umask(void *, size_t *);
126 static void *elf_note_procstat_vmmap(void *, size_t *);
127 static void elf_puthdr(int, pid_t, vm_map_entry_t, void *, size_t, size_t,
129 static void elf_putnote(int, notefunc_t, void *, struct sbuf *);
130 static void elf_putnotes(pid_t, struct sbuf *, size_t *);
131 static void freemap(vm_map_entry_t);
132 static vm_map_entry_t readmap(pid_t);
133 static void *procstat_sysctl(void *, int, size_t, size_t *sizep);
135 static pid_t g_pid; /* Pid being dumped, global for elf_detach */
136 static int g_status; /* proc status after ptrace attach */
139 elf_ident(int efd, pid_t pid __unused, char *binfile __unused)
145 cnt = read(efd, &hdr, sizeof(hdr));
146 if (cnt != sizeof(hdr))
150 switch (hdr.e_ident[EI_DATA]) {
152 machine = le16toh(hdr.e_machine);
155 machine = be16toh(hdr.e_machine);
160 if (!ELF_MACHINE_OK(machine))
174 * Forward any pending signals. SIGSTOP is generated by ptrace
175 * itself, so ignore it.
177 sig = WIFSTOPPED(g_status) ? WSTOPSIG(g_status) : 0;
180 ptrace(PT_DETACH, g_pid, (caddr_t)1, sig);
185 * Write an ELF coredump for the given pid to the given fd.
188 elf_coredump(int efd, int fd, pid_t pid)
191 struct sseg_closure seginfo;
194 size_t hdrsize, notesz, segoff;
199 /* Attach to process to dump. */
201 if (atexit(elf_detach) != 0)
204 ptrace(PT_ATTACH, pid, NULL, 0);
207 if (waitpid(pid, &g_status, 0) == -1)
210 /* Get the program's memory map. */
213 /* Size the program segments. */
216 each_dumpable_segment(map, cb_size_segment, &seginfo);
219 * Build the header and the notes using sbuf and write to the file.
221 sb = sbuf_new_auto();
222 hdrsize = sizeof(Elf_Ehdr) + sizeof(Elf_Phdr) * (1 + seginfo.count);
223 if (seginfo.count + 1 >= PN_XNUM)
224 hdrsize += sizeof(Elf_Shdr);
225 /* Start header + notes section. */
226 sbuf_start_section(sb, NULL);
227 /* Make empty header subsection. */
228 sbuf_start_section(sb, &old_len);
230 sbuf_end_section(sb, old_len, hdrsize, 0);
232 elf_putnotes(pid, sb, ¬esz);
233 /* Align up to a page boundary for the program segments. */
234 sbuf_end_section(sb, -1, PAGE_SIZE, 0);
235 if (sbuf_finish(sb) != 0)
236 err(1, "sbuf_finish");
238 segoff = sbuf_len(sb);
239 /* Fill in the header. */
240 elf_puthdr(efd, pid, map, hdr, hdrsize, notesz, segoff, seginfo.count);
242 n = write(fd, hdr, segoff);
246 errx(1, "short write");
248 /* Write the contents of all of the writable segments. */
249 php = (Elf_Phdr *)((char *)hdr + sizeof(Elf_Ehdr)) + 1;
250 for (i = 0; i < seginfo.count; i++) {
251 struct ptrace_io_desc iorequest;
252 uintmax_t nleft = php->p_filesz;
254 iorequest.piod_op = PIOD_READ_D;
255 iorequest.piod_offs = (caddr_t)(uintptr_t)php->p_vaddr;
261 if (nleft > sizeof(buf))
265 iorequest.piod_addr = buf;
266 iorequest.piod_len = nwant;
267 ptrace(PT_IO, pid, (caddr_t)&iorequest, 0);
268 ngot = iorequest.piod_len;
269 if ((size_t)ngot < nwant)
270 errx(1, "short read wanted %zu, got %zd",
272 ngot = write(fd, buf, nwant);
274 err(1, "write of segment %d failed", i);
275 if ((size_t)ngot != nwant)
276 errx(1, "short write");
278 iorequest.piod_offs += ngot;
287 * A callback for each_dumpable_segment() to write out the segment's
288 * program header entry.
291 cb_put_phdr(vm_map_entry_t entry, void *closure)
293 struct phdr_closure *phc = (struct phdr_closure *)closure;
294 Elf_Phdr *phdr = phc->phdr;
296 phc->offset = round_page(phc->offset);
298 phdr->p_type = PT_LOAD;
299 phdr->p_offset = phc->offset;
300 phdr->p_vaddr = entry->start;
302 phdr->p_filesz = phdr->p_memsz = entry->end - entry->start;
303 phdr->p_align = PAGE_SIZE;
305 if (entry->protection & VM_PROT_READ)
306 phdr->p_flags |= PF_R;
307 if (entry->protection & VM_PROT_WRITE)
308 phdr->p_flags |= PF_W;
309 if (entry->protection & VM_PROT_EXECUTE)
310 phdr->p_flags |= PF_X;
312 phc->offset += phdr->p_filesz;
317 * A callback for each_dumpable_segment() to gather information about
318 * the number of segments and their total size.
321 cb_size_segment(vm_map_entry_t entry, void *closure)
323 struct sseg_closure *ssc = (struct sseg_closure *)closure;
326 ssc->size += entry->end - entry->start;
330 * For each segment in the given memory map, call the given function
331 * with a pointer to the map entry and some arbitrary caller-supplied
335 each_dumpable_segment(vm_map_entry_t map, segment_callback func, void *closure)
337 vm_map_entry_t entry;
339 for (entry = map; entry != NULL; entry = entry->next)
340 (*func)(entry, closure);
344 elf_putnotes(pid_t pid, struct sbuf *sb, size_t *sizep)
347 size_t threads, old_len;
352 threads = ptrace(PT_GETNUMLWPS, pid, NULL, 0);
354 err(1, "PT_GETNUMLWPS");
355 tids = malloc(threads * sizeof(*tids));
357 errx(1, "out of memory");
359 ptrace(PT_GETLWPLIST, pid, (void *)tids, threads);
361 err(1, "PT_GETLWPLIST");
363 sbuf_start_section(sb, &old_len);
364 elf_putnote(NT_PRPSINFO, elf_note_prpsinfo, &pid, sb);
366 for (i = 0; i < threads; ++i) {
367 elf_putnote(NT_PRSTATUS, elf_note_prstatus, tids + i, sb);
368 elf_putnote(NT_FPREGSET, elf_note_fpregset, tids + i, sb);
369 elf_putnote(NT_THRMISC, elf_note_thrmisc, tids + i, sb);
370 elf_putnote(NT_PTLWPINFO, elf_note_ptlwpinfo, tids + i, sb);
371 #if defined(__i386__) || defined(__amd64__)
372 elf_putnote(NT_X86_XSTATE, elf_note_x86_xstate, tids + i, sb);
374 #if defined(__powerpc__)
375 elf_putnote(NT_PPC_VMX, elf_note_powerpc_vmx, tids + i, sb);
379 #ifndef ELFCORE_COMPAT_32
380 elf_putnote(NT_PROCSTAT_PROC, elf_note_procstat_proc, &pid, sb);
381 elf_putnote(NT_PROCSTAT_FILES, elf_note_procstat_files, &pid, sb);
382 elf_putnote(NT_PROCSTAT_VMMAP, elf_note_procstat_vmmap, &pid, sb);
383 elf_putnote(NT_PROCSTAT_GROUPS, elf_note_procstat_groups, &pid, sb);
384 elf_putnote(NT_PROCSTAT_UMASK, elf_note_procstat_umask, &pid, sb);
385 elf_putnote(NT_PROCSTAT_RLIMIT, elf_note_procstat_rlimit, &pid, sb);
386 elf_putnote(NT_PROCSTAT_OSREL, elf_note_procstat_osrel, &pid, sb);
387 elf_putnote(NT_PROCSTAT_PSSTRINGS, elf_note_procstat_psstrings, &pid,
389 elf_putnote(NT_PROCSTAT_AUXV, elf_note_procstat_auxv, &pid, sb);
392 size = sbuf_end_section(sb, old_len, 1, 0);
394 err(1, "sbuf_end_section");
400 * Emit one note section to sbuf.
403 elf_putnote(int type, notefunc_t notefunc, void *arg, struct sbuf *sb)
410 desc = notefunc(arg, &descsz);
411 note.n_namesz = 8; /* strlen("FreeBSD") + 1 */
412 note.n_descsz = descsz;
415 sbuf_bcat(sb, ¬e, sizeof(note));
416 sbuf_start_section(sb, &old_len);
417 sbuf_bcat(sb, "FreeBSD", note.n_namesz);
418 sbuf_end_section(sb, old_len, sizeof(Elf32_Size), 0);
421 sbuf_start_section(sb, &old_len);
422 sbuf_bcat(sb, desc, descsz);
423 sbuf_end_section(sb, old_len, sizeof(Elf32_Size), 0);
428 * Generate the ELF coredump header.
431 elf_puthdr(int efd, pid_t pid, vm_map_entry_t map, void *hdr, size_t hdrsize,
432 size_t notesz, size_t segoff, int numsegs)
434 Elf_Ehdr *ehdr, binhdr;
437 struct phdr_closure phc;
440 cnt = read(efd, &binhdr, sizeof(binhdr));
442 err(1, "Failed to re-read ELF header");
443 else if (cnt != sizeof(binhdr))
444 errx(1, "Failed to re-read ELF header");
446 ehdr = (Elf_Ehdr *)hdr;
448 ehdr->e_ident[EI_MAG0] = ELFMAG0;
449 ehdr->e_ident[EI_MAG1] = ELFMAG1;
450 ehdr->e_ident[EI_MAG2] = ELFMAG2;
451 ehdr->e_ident[EI_MAG3] = ELFMAG3;
452 ehdr->e_ident[EI_CLASS] = ELF_CLASS;
453 ehdr->e_ident[EI_DATA] = ELF_DATA;
454 ehdr->e_ident[EI_VERSION] = EV_CURRENT;
455 ehdr->e_ident[EI_OSABI] = ELFOSABI_FREEBSD;
456 ehdr->e_ident[EI_ABIVERSION] = 0;
457 ehdr->e_ident[EI_PAD] = 0;
458 ehdr->e_type = ET_CORE;
459 ehdr->e_machine = binhdr.e_machine;
460 ehdr->e_version = EV_CURRENT;
462 ehdr->e_phoff = sizeof(Elf_Ehdr);
463 ehdr->e_flags = binhdr.e_flags;
464 ehdr->e_ehsize = sizeof(Elf_Ehdr);
465 ehdr->e_phentsize = sizeof(Elf_Phdr);
466 ehdr->e_shentsize = sizeof(Elf_Shdr);
467 ehdr->e_shstrndx = SHN_UNDEF;
468 if (numsegs + 1 < PN_XNUM) {
469 ehdr->e_phnum = numsegs + 1;
472 ehdr->e_phnum = PN_XNUM;
475 ehdr->e_shoff = ehdr->e_phoff +
476 (numsegs + 1) * ehdr->e_phentsize;
478 shdr = (Elf_Shdr *)((char *)hdr + ehdr->e_shoff);
479 memset(shdr, 0, sizeof(*shdr));
481 * A special first section is used to hold large segment and
482 * section counts. This was proposed by Sun Microsystems in
483 * Solaris and has been adopted by Linux; the standard ELF
484 * tools are already familiar with the technique.
486 * See table 7-7 of the Solaris "Linker and Libraries Guide"
487 * (or 12-7 depending on the version of the document) for more
490 shdr->sh_type = SHT_NULL;
491 shdr->sh_size = ehdr->e_shnum;
492 shdr->sh_link = ehdr->e_shstrndx;
493 shdr->sh_info = numsegs + 1;
497 * Fill in the program header entries.
499 phdr = (Elf_Phdr *)((char *)hdr + ehdr->e_phoff);
501 /* The note segement. */
502 phdr->p_type = PT_NOTE;
503 phdr->p_offset = hdrsize;
506 phdr->p_filesz = notesz;
508 phdr->p_flags = PF_R;
509 phdr->p_align = sizeof(Elf32_Size);
512 /* All the writable segments from the program. */
515 each_dumpable_segment(map, cb_put_phdr, &phc);
519 * Free the memory map.
522 freemap(vm_map_entry_t map)
525 while (map != NULL) {
526 vm_map_entry_t next = map->next;
533 * Read the process's memory map using kinfo_getvmmap(), and return a list of
534 * VM map entries. Only the non-device read/writable segments are
535 * returned. The map entries in the list aren't fully filled in; only
536 * the items we need are present.
538 static vm_map_entry_t
541 vm_map_entry_t ent, *linkp, map;
542 struct kinfo_vmentry *vmentl, *kve;
545 vmentl = kinfo_getvmmap(pid, &nitems);
547 err(1, "cannot retrieve mappings for %u process", pid);
551 for (i = 0; i < nitems; i++) {
555 * Ignore 'malformed' segments or ones representing memory
556 * mapping with MAP_NOCORE on.
557 * If the 'full' support is disabled, just dump the most
558 * meaningful data segments.
560 if ((kve->kve_protection & KVME_PROT_READ) == 0 ||
561 (kve->kve_flags & KVME_FLAG_NOCOREDUMP) != 0 ||
562 kve->kve_type == KVME_TYPE_DEAD ||
563 kve->kve_type == KVME_TYPE_UNKNOWN ||
564 ((pflags & PFLAGS_FULL) == 0 &&
565 kve->kve_type != KVME_TYPE_DEFAULT &&
566 kve->kve_type != KVME_TYPE_VNODE &&
567 kve->kve_type != KVME_TYPE_SWAP &&
568 kve->kve_type != KVME_TYPE_PHYS))
571 ent = calloc(1, sizeof(*ent));
573 errx(1, "out of memory");
574 ent->start = (vm_offset_t)kve->kve_start;
575 ent->end = (vm_offset_t)kve->kve_end;
576 ent->protection = VM_PROT_READ | VM_PROT_WRITE;
577 if ((kve->kve_protection & KVME_PROT_EXEC) != 0)
578 ent->protection |= VM_PROT_EXECUTE;
588 * Miscellaneous note out functions.
592 elf_note_prpsinfo(void *arg, size_t *sizep)
596 elfcore_prpsinfo_t *psinfo;
597 struct kinfo_proc kip;
602 psinfo = calloc(1, sizeof(*psinfo));
604 errx(1, "out of memory");
605 psinfo->pr_version = PRPSINFO_VERSION;
606 psinfo->pr_psinfosz = sizeof(*psinfo);
610 name[2] = KERN_PROC_PID;
613 if (sysctl(name, 4, &kip, &len, NULL, 0) == -1)
614 err(1, "kern.proc.pid.%u", pid);
615 if (kip.ki_pid != pid)
616 err(1, "kern.proc.pid.%u", pid);
617 strlcpy(psinfo->pr_fname, kip.ki_comm, sizeof(psinfo->pr_fname));
618 name[2] = KERN_PROC_ARGS;
619 len = sizeof(psinfo->pr_psargs) - 1;
620 if (sysctl(name, 4, psinfo->pr_psargs, &len, NULL, 0) == 0 && len > 0) {
621 cp = psinfo->pr_psargs;
624 cp = memchr(cp, '\0', end - cp);
630 strlcpy(psinfo->pr_psargs, kip.ki_comm,
631 sizeof(psinfo->pr_psargs));
632 psinfo->pr_pid = pid;
634 *sizep = sizeof(*psinfo);
639 elf_note_prstatus(void *arg, size_t *sizep)
642 elfcore_prstatus_t *status;
645 tid = *(lwpid_t *)arg;
646 status = calloc(1, sizeof(*status));
648 errx(1, "out of memory");
649 status->pr_version = PRSTATUS_VERSION;
650 status->pr_statussz = sizeof(*status);
651 status->pr_gregsetsz = sizeof(elfcore_gregset_t);
652 status->pr_fpregsetsz = sizeof(elfcore_fpregset_t);
653 status->pr_osreldate = __FreeBSD_version;
654 status->pr_pid = tid;
655 ptrace(PT_GETREGS, tid, (void *)&greg, 0);
656 elf_convert_gregset(&status->pr_reg, &greg);
658 *sizep = sizeof(*status);
663 elf_note_fpregset(void *arg, size_t *sizep)
666 elfcore_fpregset_t *fpregset;
669 tid = *(lwpid_t *)arg;
670 fpregset = calloc(1, sizeof(*fpregset));
671 if (fpregset == NULL)
672 errx(1, "out of memory");
673 ptrace(PT_GETFPREGS, tid, (void *)&fpreg, 0);
674 elf_convert_fpregset(fpregset, &fpreg);
676 *sizep = sizeof(*fpregset);
681 elf_note_thrmisc(void *arg, size_t *sizep)
684 struct ptrace_lwpinfo lwpinfo;
687 tid = *(lwpid_t *)arg;
688 thrmisc = calloc(1, sizeof(*thrmisc));
690 errx(1, "out of memory");
691 ptrace(PT_LWPINFO, tid, (void *)&lwpinfo,
693 memset(&thrmisc->_pad, 0, sizeof(thrmisc->_pad));
694 strcpy(thrmisc->pr_tname, lwpinfo.pl_tdname);
696 *sizep = sizeof(*thrmisc);
701 elf_note_ptlwpinfo(void *arg, size_t *sizep)
704 elfcore_lwpinfo_t *elf_info;
705 struct ptrace_lwpinfo lwpinfo;
708 tid = *(lwpid_t *)arg;
709 p = calloc(1, sizeof(int) + sizeof(elfcore_lwpinfo_t));
711 errx(1, "out of memory");
712 *(int *)p = sizeof(elfcore_lwpinfo_t);
713 elf_info = (void *)((int *)p + 1);
714 ptrace(PT_LWPINFO, tid, (void *)&lwpinfo, sizeof(lwpinfo));
715 elf_convert_lwpinfo(elf_info, &lwpinfo);
717 *sizep = sizeof(int) + sizeof(struct ptrace_lwpinfo);
721 #if defined(__i386__) || defined(__amd64__)
723 elf_note_x86_xstate(void *arg, size_t *sizep)
727 static bool xsave_checked = false;
728 static struct ptrace_xstate_info info;
730 tid = *(lwpid_t *)arg;
731 if (!xsave_checked) {
732 if (ptrace(PT_GETXSTATE_INFO, tid, (void *)&info,
735 xsave_checked = true;
737 if (info.xsave_len == 0) {
741 xstate = calloc(1, info.xsave_len);
742 ptrace(PT_GETXSTATE, tid, xstate, 0);
743 *(uint64_t *)(xstate + X86_XSTATE_XCR0_OFFSET) = info.xsave_mask;
744 *sizep = info.xsave_len;
749 #if defined(__powerpc__)
751 elf_note_powerpc_vmx(void *arg, size_t *sizep)
755 static bool has_vmx = true;
758 tid = *(lwpid_t *)arg;
760 if (ptrace(PT_GETVRREGS, tid, (void *)&info,
768 vmx = calloc(1, sizeof(*vmx));
769 memcpy(vmx, &info, sizeof(*vmx));
770 *sizep = sizeof(*vmx);
776 procstat_sysctl(void *arg, int what, size_t structsz, size_t *sizep)
780 int name[4], structsize;
784 structsize = structsz;
790 if (sysctl(name, 4, NULL, &len, NULL, 0) == -1)
791 err(1, "kern.proc.%d.%u", what, pid);
792 buf = calloc(1, sizeof(structsize) + len * 4 / 3);
794 errx(1, "out of memory");
795 bcopy(&structsize, buf, sizeof(structsize));
796 p = (char *)buf + sizeof(structsize);
797 if (sysctl(name, 4, p, &len, NULL, 0) == -1)
798 err(1, "kern.proc.%d.%u", what, pid);
800 *sizep = sizeof(structsize) + len;
805 elf_note_procstat_proc(void *arg, size_t *sizep)
808 return (procstat_sysctl(arg, KERN_PROC_PID | KERN_PROC_INC_THREAD,
809 sizeof(struct kinfo_proc), sizep));
813 elf_note_procstat_files(void *arg, size_t *sizep)
816 return (procstat_sysctl(arg, KERN_PROC_FILEDESC,
817 sizeof(struct kinfo_file), sizep));
821 elf_note_procstat_vmmap(void *arg, size_t *sizep)
824 return (procstat_sysctl(arg, KERN_PROC_VMMAP,
825 sizeof(struct kinfo_vmentry), sizep));
829 elf_note_procstat_groups(void *arg, size_t *sizep)
832 return (procstat_sysctl(arg, KERN_PROC_GROUPS, sizeof(gid_t), sizep));
836 elf_note_procstat_umask(void *arg, size_t *sizep)
839 return (procstat_sysctl(arg, KERN_PROC_UMASK, sizeof(u_short), sizep));
843 elf_note_procstat_osrel(void *arg, size_t *sizep)
846 return (procstat_sysctl(arg, KERN_PROC_OSREL, sizeof(int), sizep));
850 elf_note_procstat_psstrings(void *arg, size_t *sizep)
853 return (procstat_sysctl(arg, KERN_PROC_PS_STRINGS,
854 sizeof(vm_offset_t), sizep));
858 elf_note_procstat_auxv(void *arg, size_t *sizep)
861 return (procstat_sysctl(arg, KERN_PROC_AUXV,
862 sizeof(Elf_Auxinfo), sizep));
866 elf_note_procstat_rlimit(void *arg, size_t *sizep)
870 int i, name[5], structsize;
874 structsize = sizeof(struct rlimit) * RLIM_NLIMITS;
875 buf = calloc(1, sizeof(structsize) + structsize);
877 errx(1, "out of memory");
878 bcopy(&structsize, buf, sizeof(structsize));
879 p = (char *)buf + sizeof(structsize);
882 name[2] = KERN_PROC_RLIMIT;
884 len = sizeof(struct rlimit);
885 for (i = 0; i < RLIM_NLIMITS; i++) {
887 if (sysctl(name, 5, p, &len, NULL, 0) == -1)
888 err(1, "kern.proc.rlimit.%u", pid);
889 if (len != sizeof(struct rlimit))
890 errx(1, "kern.proc.rlimit.%u: short read", pid);
894 *sizep = sizeof(structsize) + structsize;
898 struct dumpers __elfN(dump) = { elf_ident, elf_coredump };
899 TEXT_SET(dumpset, __elfN(dump));