2 * Copryight 1997 Sean Eric Fagan
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the
11 * documentation and/or other materials provided with the distribution.
12 * 3. All advertising materials mentioning features or use of this software
13 * must display the following acknowledgement:
14 * This product includes software developed by Sean Eric Fagan
15 * 4. Neither the name of the author may be used to endorse or promote
16 * products derived from this software without specific prior written
19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 #include <sys/cdefs.h>
33 __FBSDID("$FreeBSD$");
36 * Various setup functions for truss. Not the cleanest-written code,
40 #include <sys/param.h>
41 #include <sys/types.h>
42 #include <sys/ptrace.h>
55 #include <machine/reg.h>
63 * setup_and_wait() is called to start a process. All it really does
64 * is fork(), set itself up to stop on exec or exit, and then exec
65 * the given command. At that point, the child process stops, and
66 * the parent can wake up and deal with it.
70 setup_and_wait(char *command[])
77 err(1, "fork failed");
79 if (pid == 0) { /* Child */
80 ptrace(PT_TRACE_ME, 0, 0, 0);
82 execvp(command[0], command);
83 err(1, "execvp %s", command[0]);
86 /* Only in the parent here */
87 if (waitpid(pid, &waitval, 0) < -1) {
88 err(1, "unexpect stop in waitpid");
98 * start_tracing picks up where setup_and_wait() dropped off -- namely,
99 * it sets the event mask for the given process id. Called for both
100 * monitoring an existing process and when we create our own.
104 start_tracing(int pid)
111 ret = ptrace(PT_ATTACH, pid, NULL, 0);
113 } while(ret && retry-- > 0);
115 err(1, "can not attach to target process");
118 if (waitpid(pid, &waitval, 0) < -1)
119 err(1, "Unexpect stop in waitpid");
125 * Restore a process back to it's pre-truss state.
126 * Called for SIGINT, SIGTERM, SIGQUIT. This only
127 * applies if truss was told to monitor an already-existing
131 restore_proc(int signo __unused)
135 /* stop the child so that we can detach */
136 kill(child_pid, SIGSTOP);
137 if (waitpid(child_pid, &waitval, 0) < -1)
138 err(1, "Unexpected stop in waitpid");
140 if (ptrace(PT_DETACH, child_pid, (caddr_t)1, 0) < 0)
141 err(1, "Can not detach the process");
143 kill(child_pid, SIGCONT);
148 * Change curthread member based on lwpid.
149 * If it is a new thread, create a threadinfo structure
152 find_thread(struct trussinfo *info, lwpid_t lwpid)
154 info->curthread = NULL;
155 struct threadinfo *np;
156 SLIST_FOREACH(np, &info->threadlist, entries) {
157 if (np->tid == lwpid) {
158 info->curthread = np;
163 np = (struct threadinfo *)malloc(sizeof(struct threadinfo));
165 errx(1, "malloc() failed");
169 SLIST_INSERT_HEAD(&info->threadlist, np, entries);
170 info->curthread = np;
174 * Start the traced process and wait until it stoped.
175 * Fill trussinfo structure.
176 * When this even returns, the traced process is in stop state.
179 waitevent(struct trussinfo *info)
182 static int pending_signal = 0;
184 ptrace(PT_SYSCALL, info->pid, (caddr_t)1, pending_signal);
187 if (waitpid(info->pid, &waitval, 0) < -1) {
188 err(1, "Unexpected stop in waitpid");
191 if (WIFCONTINUED(waitval)) {
192 info->pr_why = S_NONE;
195 if (WIFEXITED(waitval)) {
196 info->pr_why = S_EXIT;
197 info->pr_data = WEXITSTATUS(waitval);
200 if (WIFSTOPPED(waitval)) {
201 struct ptrace_lwpinfo lwpinfo;
202 ptrace(PT_LWPINFO, info->pid, (caddr_t)&lwpinfo, sizeof(lwpinfo));
203 find_thread(info, lwpinfo.pl_lwpid);
204 switch(WSTOPSIG(waitval)) {
206 info->pr_why = info->curthread->in_syscall?S_SCX:S_SCE;
207 info->curthread->in_syscall = 1 - info->curthread->in_syscall;
210 info->pr_why = S_SIG;
211 info->pr_data = WSTOPSIG(waitval);
212 pending_signal = info->pr_data;
216 if (WIFSIGNALED(waitval)) {
217 info->pr_why = S_EXIT;