2016-06-01 10:23:10 +00:00
|
|
|
/* radare - LGPL - Copyright 2008-2016 - pancake */
|
2010-03-12 18:11:43 +00:00
|
|
|
|
|
|
|
#include <r_debug.h>
|
|
|
|
|
2014-11-02 00:21:45 +00:00
|
|
|
#define R_DEBUG_SDB_TRACES 1
|
|
|
|
|
2014-10-30 22:58:22 +00:00
|
|
|
// DO IT WITH SDB
|
|
|
|
|
2010-06-03 22:56:44 +00:00
|
|
|
R_API RDebugTrace *r_debug_trace_new () {
|
2016-05-24 20:22:15 +00:00
|
|
|
RDebugTrace *t = R_NEW0 (RDebugTrace);
|
|
|
|
if (!t) return NULL;
|
2010-06-04 21:47:35 +00:00
|
|
|
t->tag = 1; // UT32_MAX;
|
2010-06-13 09:59:17 +00:00
|
|
|
t->addresses = NULL;
|
2015-09-14 00:08:31 +00:00
|
|
|
t->enabled = false;
|
2010-06-03 22:56:44 +00:00
|
|
|
t->traces = r_list_new ();
|
2016-05-24 20:22:15 +00:00
|
|
|
if (!t->traces) {
|
|
|
|
r_debug_trace_free (t);
|
|
|
|
return NULL;
|
|
|
|
}
|
2010-06-03 22:56:44 +00:00
|
|
|
t->traces->free = free;
|
2014-11-02 00:21:45 +00:00
|
|
|
t->db = sdb_new0 ();
|
2016-05-24 20:22:15 +00:00
|
|
|
if (!t->db) {
|
|
|
|
r_debug_trace_free (t);
|
|
|
|
return NULL;
|
|
|
|
}
|
2010-06-03 22:56:44 +00:00
|
|
|
return t;
|
2010-03-12 18:11:43 +00:00
|
|
|
}
|
|
|
|
|
2016-06-01 10:23:10 +00:00
|
|
|
R_API void r_debug_trace_free (RDebugTrace *trace) {
|
|
|
|
if (!trace) return;
|
|
|
|
r_list_purge (trace->traces);
|
|
|
|
free (trace->traces);
|
|
|
|
sdb_free (trace->db);
|
|
|
|
free (trace);
|
|
|
|
trace = NULL;
|
2010-06-03 22:56:44 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// TODO: added overlap/mask support here... wtf?
|
|
|
|
// TODO: think about tagged traces
|
|
|
|
R_API int r_debug_trace_tag (RDebug *dbg, int tag) {
|
|
|
|
//if (tag>0 && tag<31) core->dbg->trace->tag = 1<<(sz-1);
|
|
|
|
return (dbg->trace->tag = (tag>0)? tag: UT32_MAX);
|
2010-03-12 18:11:43 +00:00
|
|
|
}
|
|
|
|
|
Major rework to the native debugger (esp on Linux) (#5185)
The major contribution here is completely re-worked breakpoint hit/recoil
handling. This work fixes #4907 and lays the ground work for future native
debugger improvements (multi-threading, etc).
* Give a human friendly type to enums
* Change many wait functions to return RDebugReasonType
* Better return checking (from r_debug_reg_sync, r_bp_restore)
* Optimized register synchronization
* Lots of comments and whitespace changes
* Improved inferior death detection
Handle EXIT_PID events differently than DEAD process events
* Move breakpoint/recoil handling to wait/cont/step
Rather than handing breakpoint related things inside cmd_debug.c, do that
inside the r_debug API functions. This seems like the most logical place for it
to live since it should apply to just about any platform/architecture. This
also centralizes calling into "cmd.bp" handling via the CoreBind callback.
* Track how the caller wishes to continue
It turns out that handling break point recoils is very complicated. The ptrace
API on Linux returns SIGTRAP for just about every type of operation (not just
breakpoints getting hit). Add the "recoil_mode" flag to indicate whether we are
single-stepping or continuing and whether or not we are inside the recoil.
* Proper handling for swstep=true
Since r_debug_step_soft calls r_debug_continue, it's already hitting the recoil
case there. Move the recoil handling from r_debug_step to r_debug_step_hard
only.
For the swstep=true case, special handling is required inside r_debug_recoil.
By resetting all of the breakpoints except the one we just hit, we ensure we
can step the original instruction and hit the new swstep breakpoint. Add a new
bp function called r_bp_restore_except to do this.
To make matters worse, we cannot use a BreakpointItem pointer because that
leads to a use-after-free condition. Instead, we the breakpoint address
instead.
Now breakpoints should work regardless of the swtep setting.
* Always call the recoil before continuing
Some callers of r_debug_continue might not have ever inserted any breakpoints
before. If we don't restore breakpoints before each call to the underlying
continue we won't hit them.
* Hide software step breakpoint events from the user
When a breakpoint even happens due to a software-step, hide it from the user.
They aren't really breakpoints as far as they are concerned.
* Improve process exit handling on Linux
There are three types of process exiting events on Linux:
1. PTRACE_EVENT_EXIT occurs just before a process exits. It's not possible to
prevent it from exiting, but it can be used to inspect the pre-exit state.
2. The process can exit for a variety of reasons and we can notice when we call
waitpid(2).
3. The process could die randomly on us :-/
On Windows, h->wait will return R_DEBUG_REASON_EXIT_PID, but it's more likely
on Linux to find out the process is already dead.
* Check more bits within waitpid status
We can often make a decision about what happened strictly by looking at the
status returned from waitpid. In other cases, we need to call
r_debug_handle_signals.
If we reach the end of this function without knowing what happened, consider it
an error.
2016-06-22 08:34:45 +00:00
|
|
|
/*
|
|
|
|
* something happened at the given pc that we need to trace
|
|
|
|
*/
|
2017-08-22 21:55:18 +00:00
|
|
|
R_API int r_debug_trace_pc(RDebug *dbg, ut64 pc) {
|
2010-06-04 21:47:35 +00:00
|
|
|
ut8 buf[32];
|
2017-07-24 07:42:15 +00:00
|
|
|
RAnalOp op = {0};
|
2016-07-01 15:41:13 +00:00
|
|
|
static ut64 oldpc = UT64_MAX; // Must trace the previously traced instruction
|
2017-09-02 20:30:47 +00:00
|
|
|
if (!dbg->iob.is_valid_offset (dbg->iob.io, pc, 0)) {
|
2016-07-01 15:41:13 +00:00
|
|
|
eprintf ("trace_pc: cannot read memory at 0x%"PFMT64x"\n", pc);
|
2016-07-01 14:15:42 +00:00
|
|
|
return false;
|
|
|
|
}
|
2017-09-02 20:30:47 +00:00
|
|
|
(void)dbg->iob.read_at (dbg->iob.io, pc, buf, sizeof (buf));
|
2018-05-28 04:45:53 +00:00
|
|
|
if (r_anal_op (dbg->anal, &op, pc, buf, sizeof (buf), R_ANAL_OP_MASK_ESIL) < 1) {
|
2016-07-01 14:15:42 +00:00
|
|
|
eprintf ("trace_pc: cannot get opcode size at 0x%"PFMT64x"\n", pc);
|
|
|
|
return false;
|
|
|
|
}
|
2017-09-18 08:59:44 +00:00
|
|
|
if (dbg->anal->esil && dbg->trace->enabled) {
|
2016-08-13 10:09:14 +00:00
|
|
|
r_anal_esil_trace (dbg->anal->esil, &op);
|
|
|
|
}
|
2016-07-01 15:41:13 +00:00
|
|
|
if (oldpc != UT64_MAX) {
|
2016-08-13 10:09:14 +00:00
|
|
|
r_debug_trace_add (dbg, oldpc, op.size); //XXX review what this line really do
|
Major rework to the native debugger (esp on Linux) (#5185)
The major contribution here is completely re-worked breakpoint hit/recoil
handling. This work fixes #4907 and lays the ground work for future native
debugger improvements (multi-threading, etc).
* Give a human friendly type to enums
* Change many wait functions to return RDebugReasonType
* Better return checking (from r_debug_reg_sync, r_bp_restore)
* Optimized register synchronization
* Lots of comments and whitespace changes
* Improved inferior death detection
Handle EXIT_PID events differently than DEAD process events
* Move breakpoint/recoil handling to wait/cont/step
Rather than handing breakpoint related things inside cmd_debug.c, do that
inside the r_debug API functions. This seems like the most logical place for it
to live since it should apply to just about any platform/architecture. This
also centralizes calling into "cmd.bp" handling via the CoreBind callback.
* Track how the caller wishes to continue
It turns out that handling break point recoils is very complicated. The ptrace
API on Linux returns SIGTRAP for just about every type of operation (not just
breakpoints getting hit). Add the "recoil_mode" flag to indicate whether we are
single-stepping or continuing and whether or not we are inside the recoil.
* Proper handling for swstep=true
Since r_debug_step_soft calls r_debug_continue, it's already hitting the recoil
case there. Move the recoil handling from r_debug_step to r_debug_step_hard
only.
For the swstep=true case, special handling is required inside r_debug_recoil.
By resetting all of the breakpoints except the one we just hit, we ensure we
can step the original instruction and hit the new swstep breakpoint. Add a new
bp function called r_bp_restore_except to do this.
To make matters worse, we cannot use a BreakpointItem pointer because that
leads to a use-after-free condition. Instead, we the breakpoint address
instead.
Now breakpoints should work regardless of the swtep setting.
* Always call the recoil before continuing
Some callers of r_debug_continue might not have ever inserted any breakpoints
before. If we don't restore breakpoints before each call to the underlying
continue we won't hit them.
* Hide software step breakpoint events from the user
When a breakpoint even happens due to a software-step, hide it from the user.
They aren't really breakpoints as far as they are concerned.
* Improve process exit handling on Linux
There are three types of process exiting events on Linux:
1. PTRACE_EVENT_EXIT occurs just before a process exits. It's not possible to
prevent it from exiting, but it can be used to inspect the pre-exit state.
2. The process can exit for a variety of reasons and we can notice when we call
waitpid(2).
3. The process could die randomly on us :-/
On Windows, h->wait will return R_DEBUG_REASON_EXIT_PID, but it's more likely
on Linux to find out the process is already dead.
* Check more bits within waitpid status
We can often make a decision about what happened strictly by looking at the
status returned from waitpid. In other cases, we need to call
r_debug_handle_signals.
If we reach the end of this function without knowing what happened, consider it
an error.
2016-06-22 08:34:45 +00:00
|
|
|
}
|
2016-07-01 14:15:42 +00:00
|
|
|
oldpc = pc;
|
2017-07-24 07:42:15 +00:00
|
|
|
r_anal_op_fini (&op);
|
2016-07-01 14:15:42 +00:00
|
|
|
return true;
|
2010-03-12 18:11:43 +00:00
|
|
|
}
|
|
|
|
|
2010-06-13 09:59:17 +00:00
|
|
|
R_API void r_debug_trace_at(RDebug *dbg, const char *str) {
|
|
|
|
// TODO: parse offsets and so use ut64 instead of strstr()
|
|
|
|
free (dbg->trace->addresses);
|
|
|
|
dbg->trace->addresses = (str&&*str)? strdup (str): NULL;
|
|
|
|
}
|
|
|
|
|
2010-06-04 21:47:35 +00:00
|
|
|
R_API RDebugTracepoint *r_debug_trace_get (RDebug *dbg, ut64 addr) {
|
2014-11-02 00:21:45 +00:00
|
|
|
Sdb *db = dbg->trace->db;
|
2010-06-04 21:47:35 +00:00
|
|
|
int tag = dbg->trace->tag;
|
2012-02-14 17:19:16 +00:00
|
|
|
RDebugTracepoint *trace;
|
2014-11-02 00:21:45 +00:00
|
|
|
#if R_DEBUG_SDB_TRACES
|
|
|
|
trace = (RDebugTracepoint*)(void*)(size_t)sdb_num_get (db,
|
2018-04-10 21:52:47 +00:00
|
|
|
sdb_fmt ("trace.%d.%"PFMT64x, tag, addr), NULL);
|
2014-11-02 00:21:45 +00:00
|
|
|
return trace;
|
|
|
|
#else
|
|
|
|
RListIter *iter;
|
2012-02-14 17:19:16 +00:00
|
|
|
r_list_foreach (dbg->trace->traces, iter, trace) {
|
2010-06-03 22:56:44 +00:00
|
|
|
if (tag != 0 && !(dbg->trace->tag & (1<<tag)))
|
2010-03-12 18:11:43 +00:00
|
|
|
continue;
|
|
|
|
if (trace->addr == addr)
|
|
|
|
return trace;
|
|
|
|
}
|
2014-11-02 00:21:45 +00:00
|
|
|
#endif
|
2010-03-12 18:11:43 +00:00
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2010-06-04 21:47:35 +00:00
|
|
|
R_API void r_debug_trace_list (RDebug *dbg, int mode) {
|
|
|
|
int tag = dbg->trace->tag;
|
2012-02-14 17:19:16 +00:00
|
|
|
RListIter *iter;
|
|
|
|
RDebugTracepoint *trace;
|
|
|
|
r_list_foreach (dbg->trace->traces, iter, trace) {
|
2010-06-04 21:47:35 +00:00
|
|
|
if (!trace->tag || (tag & trace->tag)) {
|
2015-08-12 08:40:24 +00:00
|
|
|
switch (mode) {
|
|
|
|
case 1:
|
|
|
|
case '*':
|
2017-07-17 12:13:13 +00:00
|
|
|
dbg->cb_printf ("dt+ 0x%"PFMT64x" %d\n", trace->addr, trace->times);
|
2015-08-12 08:40:24 +00:00
|
|
|
break;
|
|
|
|
default:
|
|
|
|
dbg->cb_printf ("0x%08"PFMT64x" size=%d count=%d times=%d tag=%d\n",
|
|
|
|
trace->addr, trace->size, trace->count, trace->times, trace->tag);
|
|
|
|
break;
|
|
|
|
}
|
2010-06-04 21:47:35 +00:00
|
|
|
}
|
2010-03-12 18:11:43 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-06-13 09:59:17 +00:00
|
|
|
// XXX: find better name, make it public?
|
|
|
|
static int r_debug_trace_is_traceable(RDebug *dbg, ut64 addr) {
|
|
|
|
if (dbg->trace->addresses) {
|
2015-09-14 00:08:31 +00:00
|
|
|
char addr_str[32];
|
2010-06-13 09:59:17 +00:00
|
|
|
snprintf (addr_str, sizeof (addr_str), "0x%08"PFMT64x, addr);
|
2010-06-18 09:09:19 +00:00
|
|
|
if (!strstr (dbg->trace->addresses, addr_str))
|
2015-09-14 00:08:31 +00:00
|
|
|
return false;
|
2010-06-13 09:59:17 +00:00
|
|
|
}
|
2015-09-14 00:08:31 +00:00
|
|
|
return true;
|
2010-06-13 09:59:17 +00:00
|
|
|
}
|
|
|
|
|
2010-06-04 21:47:35 +00:00
|
|
|
R_API RDebugTracepoint *r_debug_trace_add (RDebug *dbg, ut64 addr, int size) {
|
2010-06-13 09:59:17 +00:00
|
|
|
RDebugTracepoint *tp;
|
2010-06-04 21:47:35 +00:00
|
|
|
int tag = dbg->trace->tag;
|
2010-06-13 09:59:17 +00:00
|
|
|
if (!r_debug_trace_is_traceable (dbg, addr))
|
|
|
|
return NULL;
|
2011-02-11 10:22:43 +00:00
|
|
|
r_anal_trace_bb (dbg->anal, addr);
|
2010-06-13 09:59:17 +00:00
|
|
|
tp = r_debug_trace_get (dbg, addr);
|
2010-06-03 22:56:44 +00:00
|
|
|
if (!tp) {
|
2014-10-30 22:58:22 +00:00
|
|
|
tp = R_NEW0 (RDebugTracepoint);
|
2016-05-24 20:22:15 +00:00
|
|
|
if (!tp) return NULL;
|
2010-06-03 22:56:44 +00:00
|
|
|
tp->stamp = r_sys_now ();
|
|
|
|
tp->addr = addr;
|
|
|
|
tp->tags = tag;
|
|
|
|
tp->size = size;
|
2014-10-30 22:58:22 +00:00
|
|
|
tp->count = ++dbg->trace->count;
|
2010-06-17 00:22:50 +00:00
|
|
|
tp->times = 1;
|
2010-06-03 22:56:44 +00:00
|
|
|
r_list_append (dbg->trace->traces, tp);
|
2014-11-02 00:21:45 +00:00
|
|
|
#if R_DEBUG_SDB_TRACES
|
2018-04-10 21:52:47 +00:00
|
|
|
sdb_num_set (dbg->trace->db, sdb_fmt ("trace.%d.%"PFMT64x, tag, addr),
|
2014-11-02 00:21:45 +00:00
|
|
|
(ut64)(size_t)tp, 0);
|
|
|
|
#endif
|
2018-04-10 21:52:47 +00:00
|
|
|
} else {
|
|
|
|
tp->times++;
|
|
|
|
}
|
2010-06-03 22:56:44 +00:00
|
|
|
return tp;
|
2010-03-12 18:11:43 +00:00
|
|
|
}
|
2010-11-24 22:19:17 +00:00
|
|
|
|
|
|
|
R_API void r_debug_trace_reset (RDebug *dbg) {
|
|
|
|
RDebugTrace *t = dbg->trace;
|
2014-05-02 14:54:27 +00:00
|
|
|
r_list_purge (t->traces);
|
2014-11-02 00:21:45 +00:00
|
|
|
#if R_DEBUG_SDB_TRACES
|
|
|
|
sdb_free (t->db);
|
|
|
|
t->db = sdb_new0 ();
|
|
|
|
#endif
|
2010-11-24 22:19:17 +00:00
|
|
|
t->traces = r_list_new ();
|
|
|
|
t->traces->free = free;
|
|
|
|
}
|