2 * Copyright (c) 1988, 1993
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 4. Neither the name of the University nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 static const char copyright[] =
32 "@(#) Copyright (c) 1988, 1993\n\
33 The Regents of the University of California. All rights reserved.\n";
38 static char sccsid[] = "@(#)kdump.c 8.1 (Berkeley) 6/6/93";
41 #include <sys/cdefs.h>
42 __FBSDID("$FreeBSD$");
46 #include <sys/errno.h>
48 #include <sys/param.h>
49 #include <sys/capsicum.h>
50 #include <sys/errno.h>
55 #include <sys/ktrace.h>
56 #include <sys/ioctl.h>
57 #include <sys/socket.h>
59 #include <sys/sysent.h>
62 #include <sys/queue.h>
64 #ifdef HAVE_LIBCAPSICUM
67 #include <arpa/inet.h>
68 #include <netinet/in.h>
73 #ifdef HAVE_LIBCAPSICUM
74 #include <libcapsicum.h>
75 #include <libcapsicum_grp.h>
76 #include <libcapsicum_pwd.h>
77 #include <libcapsicum_service.h>
91 #include "kdump_subr.h"
93 u_int abidump(struct ktr_header *);
94 int fetchprocinfo(struct ktr_header *, u_int *);
95 int fread_tail(void *, int, int);
96 void dumpheader(struct ktr_header *);
97 void ktrsyscall(struct ktr_syscall *, u_int);
98 void ktrsysret(struct ktr_sysret *, u_int);
99 void ktrnamei(char *, int);
100 void hexdump(char *, int, int);
101 void visdump(char *, int, int);
102 void ktrgenio(struct ktr_genio *, int);
103 void ktrpsig(struct ktr_psig *);
104 void ktrcsw(struct ktr_csw *);
105 void ktrcsw_old(struct ktr_csw_old *);
106 void ktruser_malloc(void *);
107 void ktruser_rtld(int, void *);
108 void ktruser(int, void *);
109 void ktrcaprights(cap_rights_t *);
110 void ktrsockaddr(struct sockaddr *);
111 void ktrstat(struct stat *);
112 void ktrstruct(char *, size_t);
113 void ktrcapfail(struct ktr_cap_fail *);
114 void ktrfault(struct ktr_fault *);
115 void ktrfaultend(struct ktr_faultend *);
116 void limitfd(int fd);
118 void ioctlname(unsigned long, int);
119 int kdump_print_utrace(FILE *, void *, size_t, int);
121 #define TIMESTAMP_NONE 0x0
122 #define TIMESTAMP_ABSOLUTE 0x1
123 #define TIMESTAMP_ELAPSED 0x2
124 #define TIMESTAMP_RELATIVE 0x4
126 extern const char *signames[], *syscallnames[];
127 extern int nsyscalls;
129 static int timestamp, decimal, fancy = 1, suppressdata, tail, threads, maxdata,
130 resolv = 0, abiflag = 0, syscallno = 0;
131 static const char *tracefile = DEF_TRACEFILE;
132 static struct ktr_header ktr_header;
134 #define TIME_FORMAT "%b %e %T %Y"
135 #define eqs(s1, s2) (strcmp((s1), (s2)) == 0)
137 #define print_number(i,n,c) do { \
139 printf("%c%jd", c, (intmax_t)*i); \
141 printf("%c%#jx", c, (uintmax_t)(u_register_t)*i); \
147 #if defined(__amd64__) || defined(__i386__)
149 void linux_ktrsyscall(struct ktr_syscall *, u_int);
150 void linux_ktrsysret(struct ktr_sysret *, u_int);
151 extern const char *linux_syscallnames[];
153 #include <linux_syscalls.c>
157 * Linux syscalls return negative errno's, we do positive and map them
159 static int bsd_to_linux_errno[ELAST + 1] = {
160 -0, -1, -2, -3, -4, -5, -6, -7, -8, -9,
161 -10, -35, -12, -13, -14, -15, -16, -17, -18, -19,
162 -20, -21, -22, -23, -24, -25, -26, -27, -28, -29,
163 -30, -31, -32, -33, -34, -11,-115,-114, -88, -89,
164 -90, -91, -92, -93, -94, -95, -96, -97, -98, -99,
165 -100,-101,-102,-103,-104,-105,-106,-107,-108,-109,
166 -110,-111, -40, -36,-112,-113, -39, -11, -87,-122,
167 -116, -66, -6, -6, -6, -6, -6, -37, -38, -9,
168 -6, -6, -43, -42, -75,-125, -84, -95, -16, -74,
173 #if defined(__amd64__)
174 extern const char *linux32_syscallnames[];
176 #include <linux32_syscalls.c>
181 TAILQ_ENTRY(proc_info) info;
186 static TAILQ_HEAD(trace_procs, proc_info) trace_procs;
188 #ifdef HAVE_LIBCAPSICUM
189 static cap_channel_t *cappwd, *capgrp;
197 * Cache NLS data before entering capability mode.
198 * XXXPJD: There should be strerror_init() and strsignal_init() in libc.
200 (void)catopen("libc", NL_CAT_LOCALE);
209 * Allow localtime(3) to cache /etc/localtime content before entering
211 * XXXPJD: There should be localtime_init() in libc.
214 (void)localtime(<ime);
217 #ifdef HAVE_LIBCAPSICUM
219 cappwdgrp_setup(cap_channel_t **cappwdp, cap_channel_t **capgrpp)
221 cap_channel_t *capcas, *cappwdloc, *capgrploc;
222 const char *cmds[1], *fields[1];
225 if (capcas == NULL) {
226 warn("unable to contact casperd");
229 cappwdloc = cap_service_open(capcas, "system.pwd");
230 capgrploc = cap_service_open(capcas, "system.grp");
231 /* Casper capability no longer needed. */
233 if (cappwdloc == NULL || capgrploc == NULL) {
234 if (cappwdloc == NULL)
235 warn("unable to open system.pwd service");
236 if (capgrploc == NULL)
237 warn("unable to open system.grp service");
240 /* Limit system.pwd to only getpwuid() function and pw_name field. */
241 cmds[0] = "getpwuid";
242 if (cap_pwd_limit_cmds(cappwdloc, cmds, 1) < 0)
243 err(1, "unable to limit system.pwd service");
244 fields[0] = "pw_name";
245 if (cap_pwd_limit_fields(cappwdloc, fields, 1) < 0)
246 err(1, "unable to limit system.pwd service");
247 /* Limit system.grp to only getgrgid() function and gr_name field. */
248 cmds[0] = "getgrgid";
249 if (cap_grp_limit_cmds(capgrploc, cmds, 1) < 0)
250 err(1, "unable to limit system.grp service");
251 fields[0] = "gr_name";
252 if (cap_grp_limit_fields(capgrploc, fields, 1) < 0)
253 err(1, "unable to limit system.grp service");
255 *cappwdp = cappwdloc;
256 *capgrpp = capgrploc;
259 #endif /* HAVE_LIBCAPSICUM */
262 main(int argc, char *argv[])
264 int ch, ktrlen, size;
266 int trpoints = ALL_POINTS;
271 setlocale(LC_CTYPE, "");
273 timestamp = TIMESTAMP_NONE;
275 while ((ch = getopt(argc,argv,"f:dElm:np:AHRrSsTt:")) != -1)
290 maxdata = atoi(optarg);
308 timestamp |= TIMESTAMP_ELAPSED;
314 timestamp |= TIMESTAMP_RELATIVE;
317 timestamp |= TIMESTAMP_ABSOLUTE;
320 trpoints = getpoints(optarg);
322 errx(1, "unknown trace point in %s", optarg);
331 m = malloc(size = 1025);
333 errx(1, "%s", strerror(ENOMEM));
334 if (!freopen(tracefile, "r", stdin))
335 err(1, "%s", tracefile);
339 #ifdef HAVE_LIBCAPSICUM
341 if (cappwdgrp_setup(&cappwd, &capgrp) < 0) {
346 if (resolv == 0 || (cappwd != NULL && capgrp != NULL)) {
347 if (cap_enter() < 0 && errno != ENOSYS)
348 err(1, "unable to enter capability mode");
352 if (cap_enter() < 0 && errno != ENOSYS)
353 err(1, "unable to enter capability mode");
356 limitfd(STDIN_FILENO);
357 limitfd(STDOUT_FILENO);
358 limitfd(STDERR_FILENO);
360 TAILQ_INIT(&trace_procs);
362 while (fread_tail(&ktr_header, sizeof(struct ktr_header), 1)) {
363 if (ktr_header.ktr_type & KTR_DROP) {
364 ktr_header.ktr_type &= ~KTR_DROP;
365 if (!drop_logged && threads) {
367 "%6jd %6jd %-8.*s Events dropped.\n",
368 (intmax_t)ktr_header.ktr_pid,
369 ktr_header.ktr_tid > 0 ?
370 (intmax_t)ktr_header.ktr_tid : 0,
371 MAXCOMLEN, ktr_header.ktr_comm);
373 } else if (!drop_logged) {
374 printf("%6jd %-8.*s Events dropped.\n",
375 (intmax_t)ktr_header.ktr_pid, MAXCOMLEN,
376 ktr_header.ktr_comm);
380 if (trpoints & (1<<ktr_header.ktr_type))
381 if (pid == 0 || ktr_header.ktr_pid == pid ||
382 ktr_header.ktr_tid == pid)
383 dumpheader(&ktr_header);
384 if ((ktrlen = ktr_header.ktr_len) < 0)
385 errx(1, "bogus length 0x%x", ktrlen);
387 m = realloc(m, ktrlen+1);
389 errx(1, "%s", strerror(ENOMEM));
392 if (ktrlen && fread_tail(m, ktrlen, 1) == 0)
393 errx(1, "data too short");
394 if (fetchprocinfo(&ktr_header, (u_int *)m) != 0)
396 sv_flags = abidump(&ktr_header);
397 if (pid && ktr_header.ktr_pid != pid &&
398 ktr_header.ktr_tid != pid)
400 if ((trpoints & (1<<ktr_header.ktr_type)) == 0)
403 switch (ktr_header.ktr_type) {
405 #if defined(__amd64__) || defined(__i386__)
406 if ((sv_flags & SV_ABI_MASK) == SV_ABI_LINUX)
407 linux_ktrsyscall((struct ktr_syscall *)m,
411 ktrsyscall((struct ktr_syscall *)m, sv_flags);
414 #if defined(__amd64__) || defined(__i386__)
415 if ((sv_flags & SV_ABI_MASK) == SV_ABI_LINUX)
416 linux_ktrsysret((struct ktr_sysret *)m,
420 ktrsysret((struct ktr_sysret *)m, sv_flags);
427 ktrgenio((struct ktr_genio *)m, ktrlen);
430 ktrpsig((struct ktr_psig *)m);
433 if (ktrlen == sizeof(struct ktr_csw_old))
434 ktrcsw_old((struct ktr_csw_old *)m);
436 ktrcsw((struct ktr_csw *)m);
442 ktrstruct(m, ktrlen);
445 ktrcapfail((struct ktr_cap_fail *)m);
448 ktrfault((struct ktr_fault *)m);
451 ktrfaultend((struct ktr_faultend *)m);
469 cap_rights_init(&rights, CAP_FSTAT);
474 cap_rights_set(&rights, CAP_READ);
477 cap_rights_set(&rights, CAP_IOCTL, CAP_WRITE);
478 cmd = TIOCGETA; /* required by isatty(3) in printf(3) */
481 cap_rights_set(&rights, CAP_WRITE);
483 cap_rights_set(&rights, CAP_IOCTL);
491 if (cap_rights_limit(fd, &rights) < 0 && errno != ENOSYS)
492 err(1, "unable to limit rights for descriptor %d", fd);
493 if (cmd != 0 && cap_ioctls_limit(fd, &cmd, 1) < 0 && errno != ENOSYS)
494 err(1, "unable to limit ioctls for descriptor %d", fd);
498 fread_tail(void *buf, int size, int num)
502 while ((i = fread(buf, size, num, stdin)) == 0 && tail) {
510 fetchprocinfo(struct ktr_header *kth, u_int *flags)
512 struct proc_info *pi;
514 switch (kth->ktr_type) {
516 TAILQ_FOREACH(pi, &trace_procs, info) {
517 if (pi->pid == kth->ktr_pid) {
518 TAILQ_REMOVE(&trace_procs, pi, info);
522 pi = malloc(sizeof(struct proc_info));
524 errx(1, "%s", strerror(ENOMEM));
525 pi->sv_flags = *flags;
526 pi->pid = kth->ktr_pid;
527 TAILQ_INSERT_TAIL(&trace_procs, pi, info);
531 TAILQ_FOREACH(pi, &trace_procs, info) {
532 if (pi->pid == kth->ktr_pid) {
533 TAILQ_REMOVE(&trace_procs, pi, info);
545 abidump(struct ktr_header *kth)
547 struct proc_info *pi;
552 TAILQ_FOREACH(pi, &trace_procs, info) {
553 if (pi->pid == kth->ktr_pid) {
554 flags = pi->sv_flags;
562 switch (flags & SV_ABI_MASK) {
582 printf("%s%s ", abi, arch);
588 dumpheader(struct ktr_header *kth)
590 static char unknown[64];
591 static struct timeval prevtime, prevtime_e, temp;
595 switch (kth->ktr_type) {
637 sprintf(unknown, "UNKNOWN(%d)", kth->ktr_type);
642 * The ktr_tid field was previously the ktr_buffer field, which held
643 * the kernel pointer value for the buffer associated with data
644 * following the record header. It now holds a threadid, but only
645 * for trace files after the change. Older trace files still contain
646 * kernel pointers. Detect this and suppress the results by printing
647 * negative tid's as 0.
650 printf("%6jd %6jd %-8.*s ", (intmax_t)kth->ktr_pid,
651 kth->ktr_tid > 0 ? (intmax_t)kth->ktr_tid : 0,
652 MAXCOMLEN, kth->ktr_comm);
654 printf("%6jd %-8.*s ", (intmax_t)kth->ktr_pid, MAXCOMLEN,
657 if (timestamp & TIMESTAMP_ABSOLUTE) {
658 printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec,
659 kth->ktr_time.tv_usec);
661 if (timestamp & TIMESTAMP_ELAPSED) {
662 if (prevtime_e.tv_sec == 0)
663 prevtime_e = kth->ktr_time;
664 timevalsub(&kth->ktr_time, &prevtime_e);
665 printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec,
666 kth->ktr_time.tv_usec);
667 timevaladd(&kth->ktr_time, &prevtime_e);
669 if (timestamp & TIMESTAMP_RELATIVE) {
670 if (prevtime.tv_sec == 0)
671 prevtime = kth->ktr_time;
672 temp = kth->ktr_time;
673 timevalsub(&kth->ktr_time, &prevtime);
674 if ((intmax_t)kth->ktr_time.tv_sec < 0) {
675 kth->ktr_time = prevtime;
677 timevalsub(&kth->ktr_time, &prevtime);
683 printf("%s%jd.%06ld ", sign, (intmax_t)kth->ktr_time.tv_sec,
684 kth->ktr_time.tv_usec);
690 #include <sys/syscall.h>
692 #include <sys/kern/syscalls.c>
694 int nsyscalls = sizeof (syscallnames) / sizeof (syscallnames[0]);
697 ktrsyscall(struct ktr_syscall *ktr, u_int flags)
699 int narg = ktr->ktr_narg;
703 if ((flags != 0 && ((flags & SV_ABI_MASK) != SV_ABI_FREEBSD)) ||
704 (ktr->ktr_code >= nsyscalls || ktr->ktr_code < 0))
705 printf("[%d]", ktr->ktr_code);
707 printf("%s", syscallnames[ktr->ktr_code]);
709 printf("[%d]", ktr->ktr_code);
711 ip = &ktr->ktr_args[0];
715 (flags == 0 || (flags & SV_ABI_MASK) == SV_ABI_FREEBSD)) {
716 switch (ktr->ktr_code) {
734 atfdname(*ip, decimal);
740 switch (ktr->ktr_code) {
742 print_number(ip, narg, c);
744 ioctlname(*ip, decimal);
760 print_number(ip, narg, c);
768 print_number(ip, narg, c);
770 flagsandmodename(ip[0], ip[1], decimal);
775 print_number(ip, narg, c);
776 print_number(ip, narg, c);
778 * A flags value of zero is valid for
779 * wait4() but not for wait6(), so
780 * handle zero special here.
783 print_number(ip, narg, c);
793 idtypename(*ip, decimal);
797 print_number(ip, narg, c);
798 print_number(ip, narg, c);
807 print_number(ip, narg, c);
815 print_number(ip, narg, c);
822 print_number(ip, narg, c);
823 print_number(ip, narg, c);
825 getfsstatflagsname(*ip);
830 print_number(ip, narg, c);
831 print_number(ip, narg, c);
838 print_number(ip, narg, c);
846 print_number(ip, narg, c);
847 print_number(ip, narg, c);
849 sendrecvflagsname(*ip);
855 print_number(ip, narg, c);
856 print_number(ip, narg, c);
857 print_number(ip, narg, c);
859 sendrecvflagsname(*ip);
866 print_number(ip, narg, c);
873 print_number(ip, narg, c);
892 print_number(ip, narg, c);
893 print_number(ip, narg, c);
899 #ifdef SYS_freebsd6_mmap
900 case SYS_freebsd6_mmap:
901 print_number(ip, narg, c);
902 print_number(ip, narg, c);
914 print_number(ip, narg, c);
915 print_number(ip, narg, c);
926 print_number(ip, narg, c);
927 print_number(ip, narg, c);
934 print_number(ip, narg, c);
935 print_number(ip, narg, c);
937 madvisebehavname(*ip);
941 case SYS_setpriority:
942 print_number(ip, narg, c);
943 print_number(ip, narg, c);
950 print_number(ip, narg, c);
952 fcntlcmdname(ip[0], ip[1], decimal);
960 sockdomainname(sockdomain);
964 socktypenamewithflags(*ip);
967 if (sockdomain == PF_INET ||
968 sockdomain == PF_INET6) {
970 sockipprotoname(*ip);
979 print_number(ip, narg, c);
981 sockoptlevelname(*ip, decimal);
982 if (*ip == SOL_SOCKET) {
991 #ifdef SYS_freebsd6_lseek
992 case SYS_freebsd6_lseek:
993 print_number(ip, narg, c);
994 /* Hidden 'pad' argument, not in lseek(2) */
995 print_number(ip, narg, c);
996 print_number(ip, narg, c);
1004 print_number(ip, narg, c);
1005 /* Hidden 'pad' argument, not in lseek(2) */
1006 print_number(ip, narg, c);
1013 print_number(ip, narg, c);
1023 print_number(ip, narg, c);
1030 print_number(ip, narg, c);
1032 shutdownhowname(*ip);
1036 case SYS_socketpair:
1038 sockdomainname(*ip);
1042 socktypenamewithflags(*ip);
1056 print_number(ip, narg, c);
1078 print_number(ip, narg, c);
1079 print_number(ip, narg, c);
1086 print_number(ip, narg, c);
1087 print_number(ip, narg, c);
1094 print_number(ip, narg, c);
1101 print_number(ip, narg, c);
1102 print_number(ip, narg, c);
1109 print_number(ip, narg, c);
1116 print_number(ip, narg, c);
1119 printf(",0%o", (unsigned int)ip[1]);
1124 print_number(ip, narg, c);
1125 print_number(ip, narg, c);
1138 case SYS_lio_listio:
1140 lio_listioname(*ip);
1151 case SYS_sched_setscheduler:
1152 print_number(ip, narg, c);
1154 schedpolicyname(*ip);
1158 case SYS_sched_get_priority_max:
1159 case SYS_sched_get_priority_min:
1161 schedpolicyname(*ip);
1166 print_number(ip, narg, c);
1167 print_number(ip, narg, c);
1168 print_number(ip, narg, c);
1169 print_number(ip, narg, c);
1170 print_number(ip, narg, c);
1171 print_number(ip, narg, c);
1173 sendfileflagsname(*(int *)ip);
1178 print_number(ip, narg, c);
1184 case SYS_sigprocmask:
1186 sigprocmaskhowname(*ip);
1191 case SYS___acl_get_file:
1192 case SYS___acl_set_file:
1193 case SYS___acl_get_fd:
1194 case SYS___acl_set_fd:
1195 case SYS___acl_delete_file:
1196 case SYS___acl_delete_fd:
1197 case SYS___acl_aclcheck_file:
1198 case SYS___acl_aclcheck_fd:
1199 case SYS___acl_get_link:
1200 case SYS___acl_set_link:
1201 case SYS___acl_delete_link:
1202 case SYS___acl_aclcheck_link:
1203 print_number(ip, narg, c);
1216 case SYS_extattrctl:
1217 print_number(ip, narg, c);
1219 extattrctlname(*ip);
1224 print_number(ip, narg, c);
1225 print_number(ip, narg, c);
1227 mountflagsname(*ip);
1231 case SYS_thr_create:
1232 print_number(ip, narg, c);
1233 print_number(ip, narg, c);
1235 thrcreateflagsname(*ip);
1240 print_number(ip, narg, c);
1246 case SYS_kldunloadf:
1247 print_number(ip, narg, c);
1249 kldunloadfflagsname(*ip);
1256 print_number(ip, narg, c);
1258 atfdname(*ip, decimal);
1262 case SYS_cap_fcntls_limit:
1263 print_number(ip, narg, c);
1270 case SYS_posix_fadvise:
1271 print_number(ip, narg, c);
1272 print_number(ip, narg, c);
1273 print_number(ip, narg, c);
1275 fadvisebehavname((int)*ip);
1281 idtypename(*ip, decimal);
1285 print_number(ip, narg, c);
1287 procctlcmdname(*ip);
1292 print_number(ip, narg, c);
1296 case UMTX_OP_CV_WAIT:
1300 umtxcvwaitflags(*ip);
1302 case UMTX_OP_RW_RDLOCK:
1306 umtxrwlockflags(*ip);
1314 print_number(ip, narg, c);
1322 ktrsysret(struct ktr_sysret *ktr, u_int flags)
1324 register_t ret = ktr->ktr_retval;
1325 int error = ktr->ktr_error;
1326 int code = ktr->ktr_code;
1328 if ((flags != 0 && ((flags & SV_ABI_MASK) != SV_ABI_FREEBSD)) ||
1329 (code >= nsyscalls || code < 0))
1330 printf("[%d] ", code);
1332 printf("%s", syscallnames[code]);
1334 printf("[%d]", code);
1340 printf("%ld", (long)ret);
1341 if (ret < 0 || ret > 9)
1342 printf("/%#lx", (unsigned long)ret);
1345 printf("%ld", (long)ret);
1347 printf("%#lx", (unsigned long)ret);
1349 } else if (error == ERESTART)
1351 else if (error == EJUSTRETURN)
1352 printf("JUSTRETURN");
1354 printf("-1 errno %d", ktr->ktr_error);
1356 printf(" %s", strerror(ktr->ktr_error));
1362 ktrnamei(char *cp, int len)
1364 printf("\"%.*s\"\n", len, cp);
1368 hexdump(char *p, int len, int screenwidth)
1376 i = 13; /* base offset */
1377 i += (width / 2) + 1; /* spaces every second byte */
1378 i += (width * 2); /* width of bytes */
1380 i += width; /* each byte */
1382 } while (i < screenwidth);
1385 for (n = 0; n < len; n += width) {
1386 for (i = n; i < n + width; i++) {
1387 if ((i % width) == 0) { /* beginning of line */
1388 printf(" 0x%04x", i);
1394 printf("%02x", p[i] & 0xff);
1399 for (i = n; i < n + width; i++) {
1402 if (p[i] >= ' ' && p[i] <= '~')
1409 if ((i % width) != 0)
1414 visdump(char *dp, int datalen, int screenwidth)
1423 for (;datalen > 0; datalen--, dp++) {
1424 vis(visbuf, *dp, VIS_CSTYLE, *(dp+1));
1427 * Keep track of printables and
1428 * space chars (like fold(1)).
1440 width = 8 - (col&07);
1445 if (col + width > (screenwidth-2)) {
1460 ktrgenio(struct ktr_genio *ktr, int len)
1462 int datalen = len - sizeof (struct ktr_genio);
1463 char *dp = (char *)ktr + sizeof (struct ktr_genio);
1464 static int screenwidth = 0;
1467 printf("fd %d %s %d byte%s\n", ktr->ktr_fd,
1468 ktr->ktr_rw == UIO_READ ? "read" : "wrote", datalen,
1469 datalen == 1 ? "" : "s");
1472 if (screenwidth == 0) {
1475 if (fancy && ioctl(fileno(stderr), TIOCGWINSZ, &ws) != -1 &&
1477 screenwidth = ws.ws_col;
1481 if (maxdata && datalen > maxdata)
1484 for (i = 0, binary = 0; i < datalen && binary == 0; i++) {
1485 if (dp[i] >= 32 && dp[i] < 127)
1487 if (dp[i] == 10 || dp[i] == 13 || dp[i] == 0 || dp[i] == 9)
1492 hexdump(dp, datalen, screenwidth);
1494 visdump(dp, datalen, screenwidth);
1497 const char *signames[] = {
1498 "NULL", "HUP", "INT", "QUIT", "ILL", "TRAP", "IOT", /* 1 - 6 */
1499 "EMT", "FPE", "KILL", "BUS", "SEGV", "SYS", /* 7 - 12 */
1500 "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", /* 13 - 18 */
1501 "CONT", "CHLD", "TTIN", "TTOU", "IO", "XCPU", /* 19 - 24 */
1502 "XFSZ", "VTALRM", "PROF", "WINCH", "29", "USR1", /* 25 - 30 */
1503 "USR2", NULL, /* 31 - 32 */
1507 ktrpsig(struct ktr_psig *psig)
1509 if (psig->signo > 0 && psig->signo < NSIG)
1510 printf("SIG%s ", signames[psig->signo]);
1512 printf("SIG %d ", psig->signo);
1513 if (psig->action == SIG_DFL) {
1514 printf("SIG_DFL code=");
1515 sigcodename(psig->signo, psig->code);
1518 printf("caught handler=0x%lx mask=0x%x code=",
1519 (u_long)psig->action, psig->mask.__bits[0]);
1520 sigcodename(psig->signo, psig->code);
1526 ktrcsw_old(struct ktr_csw_old *cs)
1528 printf("%s %s\n", cs->out ? "stop" : "resume",
1529 cs->user ? "user" : "kernel");
1533 ktrcsw(struct ktr_csw *cs)
1535 printf("%s %s \"%s\"\n", cs->out ? "stop" : "resume",
1536 cs->user ? "user" : "kernel", cs->wmesg);
1540 ktruser(int len, void *p)
1544 if (kdump_print_utrace(stdout, p, len, decimal)) {
1553 printf(" %d", *cp++);
1555 printf(" %02x", *cp++);
1560 ktrcaprights(cap_rights_t *rightsp)
1563 printf("cap_rights_t ");
1569 ktrsockaddr(struct sockaddr *sa)
1572 TODO: Support additional address families
1573 #include <netnatm/natm.h>
1574 struct sockaddr_natm *natm;
1575 #include <netsmb/netbios.h>
1576 struct sockaddr_nb *nb;
1581 * note: ktrstruct() has already verified that sa points to a
1582 * buffer at least sizeof(struct sockaddr) bytes long and exactly
1583 * sa->sa_len bytes long.
1585 printf("struct sockaddr { ");
1586 sockfamilyname(sa->sa_family);
1589 #define check_sockaddr_len(n) \
1590 if (sa_##n.s##n##_len < sizeof(struct sockaddr_##n)) { \
1591 printf("invalid"); \
1595 switch(sa->sa_family) {
1597 struct sockaddr_in sa_in;
1599 memset(&sa_in, 0, sizeof(sa_in));
1600 memcpy(&sa_in, sa, sa->sa_len);
1601 check_sockaddr_len(in);
1602 inet_ntop(AF_INET, &sa_in.sin_addr, addr, sizeof addr);
1603 printf("%s:%u", addr, ntohs(sa_in.sin_port));
1607 struct sockaddr_in6 sa_in6;
1609 memset(&sa_in6, 0, sizeof(sa_in6));
1610 memcpy(&sa_in6, sa, sa->sa_len);
1611 check_sockaddr_len(in6);
1612 getnameinfo((struct sockaddr *)&sa_in6, sizeof(sa_in6),
1613 addr, sizeof(addr), NULL, 0, NI_NUMERICHOST);
1614 printf("[%s]:%u", addr, htons(sa_in6.sin6_port));
1618 struct sockaddr_un sa_un;
1620 memset(&sa_un, 0, sizeof(sa_un));
1621 memcpy(&sa_un, sa, sa->sa_len);
1622 printf("%.*s", (int)sizeof(sa_un.sun_path), sa_un.sun_path);
1626 printf("unknown address family");
1632 ktrstat(struct stat *statp)
1634 char mode[12], timestr[PATH_MAX + 4];
1640 * note: ktrstruct() has already verified that statp points to a
1641 * buffer exactly sizeof(struct stat) bytes long.
1643 printf("struct stat {");
1644 printf("dev=%ju, ino=%ju, ",
1645 (uintmax_t)statp->st_dev, (uintmax_t)statp->st_ino);
1647 printf("mode=0%jo, ", (uintmax_t)statp->st_mode);
1649 strmode(statp->st_mode, mode);
1650 printf("mode=%s, ", mode);
1652 printf("nlink=%ju, ", (uintmax_t)statp->st_nlink);
1656 #ifdef HAVE_LIBCAPSICUM
1658 pwd = cap_getpwuid(cappwd, statp->st_uid);
1661 pwd = getpwuid(statp->st_uid);
1664 printf("uid=%ju, ", (uintmax_t)statp->st_uid);
1666 printf("uid=\"%s\", ", pwd->pw_name);
1670 #ifdef HAVE_LIBCAPSICUM
1672 grp = cap_getgrgid(capgrp, statp->st_gid);
1675 grp = getgrgid(statp->st_gid);
1678 printf("gid=%ju, ", (uintmax_t)statp->st_gid);
1680 printf("gid=\"%s\", ", grp->gr_name);
1681 printf("rdev=%ju, ", (uintmax_t)statp->st_rdev);
1684 printf("%jd", (intmax_t)statp->st_atim.tv_sec);
1686 tm = localtime(&statp->st_atim.tv_sec);
1687 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1688 printf("\"%s\"", timestr);
1690 if (statp->st_atim.tv_nsec != 0)
1691 printf(".%09ld, ", statp->st_atim.tv_nsec);
1696 printf("%jd", (intmax_t)statp->st_mtim.tv_sec);
1698 tm = localtime(&statp->st_mtim.tv_sec);
1699 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1700 printf("\"%s\"", timestr);
1702 if (statp->st_mtim.tv_nsec != 0)
1703 printf(".%09ld, ", statp->st_mtim.tv_nsec);
1708 printf("%jd", (intmax_t)statp->st_ctim.tv_sec);
1710 tm = localtime(&statp->st_ctim.tv_sec);
1711 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1712 printf("\"%s\"", timestr);
1714 if (statp->st_ctim.tv_nsec != 0)
1715 printf(".%09ld, ", statp->st_ctim.tv_nsec);
1718 printf("birthtime=");
1720 printf("%jd", (intmax_t)statp->st_birthtim.tv_sec);
1722 tm = localtime(&statp->st_birthtim.tv_sec);
1723 strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1724 printf("\"%s\"", timestr);
1726 if (statp->st_birthtim.tv_nsec != 0)
1727 printf(".%09ld, ", statp->st_birthtim.tv_nsec);
1730 printf("size=%jd, blksize=%ju, blocks=%jd, flags=0x%x",
1731 (uintmax_t)statp->st_size, (uintmax_t)statp->st_blksize,
1732 (intmax_t)statp->st_blocks, statp->st_flags);
1737 ktrstruct(char *buf, size_t buflen)
1740 size_t namelen, datalen;
1742 cap_rights_t rights;
1744 struct sockaddr_storage ss;
1746 for (name = buf, namelen = 0;
1747 namelen < buflen && name[namelen] != '\0';
1750 if (namelen == buflen)
1752 if (name[namelen] != '\0')
1754 data = buf + namelen + 1;
1755 datalen = buflen - namelen - 1;
1759 for (i = 0; i < (int)namelen; ++i)
1760 if (!isalpha(name[i]))
1762 if (strcmp(name, "caprights") == 0) {
1763 if (datalen != sizeof(cap_rights_t))
1765 memcpy(&rights, data, datalen);
1766 ktrcaprights(&rights);
1767 } else if (strcmp(name, "stat") == 0) {
1768 if (datalen != sizeof(struct stat))
1770 memcpy(&sb, data, datalen);
1772 } else if (strcmp(name, "sockaddr") == 0) {
1773 if (datalen > sizeof(ss))
1775 memcpy(&ss, data, datalen);
1776 if (datalen != ss.ss_len)
1778 ktrsockaddr((struct sockaddr *)&ss);
1780 printf("unknown structure\n");
1784 printf("invalid record\n");
1788 ktrcapfail(struct ktr_cap_fail *ktr)
1790 switch (ktr->cap_type) {
1791 case CAPFAIL_NOTCAPABLE:
1792 /* operation on fd with insufficient capabilities */
1793 printf("operation requires ");
1794 capname(&ktr->cap_needed);
1795 printf(", descriptor holds ");
1796 capname(&ktr->cap_held);
1798 case CAPFAIL_INCREASE:
1799 /* requested more capabilities than fd already has */
1800 printf("attempt to increase capabilities from ");
1801 capname(&ktr->cap_held);
1803 capname(&ktr->cap_needed);
1805 case CAPFAIL_SYSCALL:
1806 /* called restricted syscall */
1807 printf("disallowed system call");
1809 case CAPFAIL_LOOKUP:
1810 /* used ".." in strict-relative mode */
1811 printf("restricted VFS lookup");
1814 printf("unknown capability failure: ");
1815 capname(&ktr->cap_needed);
1817 capname(&ktr->cap_held);
1824 ktrfault(struct ktr_fault *ktr)
1827 printf("0x%jx ", (uintmax_t)ktr->vaddr);
1828 vmprotname(ktr->type);
1833 ktrfaultend(struct ktr_faultend *ktr)
1836 vmresultname(ktr->result);
1840 #if defined(__amd64__) || defined(__i386__)
1842 #if defined(__amd64__)
1843 #define NLINUX_SYSCALLS(v) ((v) & SV_ILP32 ? \
1844 nitems(linux32_syscallnames) : nitems(linux_syscallnames))
1845 #define LINUX_SYSCALLNAMES(v, i) ((v) & SV_ILP32 ? \
1846 linux32_syscallnames[i] : linux_syscallnames[i])
1848 #define NLINUX_SYSCALLS(v) (nitems(linux_syscallnames))
1849 #define LINUX_SYSCALLNAMES(v, i) (linux_syscallnames[i])
1853 linux_ktrsyscall(struct ktr_syscall *ktr, u_int sv_flags)
1855 int narg = ktr->ktr_narg;
1856 unsigned code = ktr->ktr_code;
1859 if (ktr->ktr_code < 0 || code >= NLINUX_SYSCALLS(sv_flags))
1860 printf("[%d]", ktr->ktr_code);
1862 printf("%s", LINUX_SYSCALLNAMES(sv_flags, ktr->ktr_code));
1864 printf("[%d]", ktr->ktr_code);
1866 ip = &ktr->ktr_args[0];
1870 print_number(ip, narg, c);
1877 linux_ktrsysret(struct ktr_sysret *ktr, u_int sv_flags)
1879 register_t ret = ktr->ktr_retval;
1880 unsigned code = ktr->ktr_code;
1881 int error = ktr->ktr_error;
1883 if (ktr->ktr_code < 0 || code >= NLINUX_SYSCALLS(sv_flags))
1884 printf("[%d] ", ktr->ktr_code);
1886 printf("%s ", LINUX_SYSCALLNAMES(sv_flags, code));
1888 printf("[%d]", code);
1894 printf("%ld", (long)ret);
1895 if (ret < 0 || ret > 9)
1896 printf("/%#lx", (unsigned long)ret);
1899 printf("%ld", (long)ret);
1901 printf("%#lx", (unsigned long)ret);
1903 } else if (error == ERESTART)
1905 else if (error == EJUSTRETURN)
1906 printf("JUSTRETURN");
1908 if (ktr->ktr_error <= ELAST + 1)
1909 error = abs(bsd_to_linux_errno[ktr->ktr_error]);
1912 printf("-1 errno %d", error);
1914 printf(" %s", strerror(ktr->ktr_error));
1923 fprintf(stderr, "usage: kdump [-dEnlHRrSsTA] [-f trfile] "
1924 "[-m maxdata] [-p pid] [-t trstr]\n");