radare2/libr/core/cmd_debug.c
2021-05-16 18:46:29 +02:00

5566 lines
156 KiB
C

/* radare - LGPL - Copyright 2009-2021 - pancake */
#include <r_core.h>
#include <r_debug.h>
#include <sdb.h>
#define TN_KEY_LEN 32
#define TN_KEY_FMT "%"PFMT64u
#ifndef SIGKILL
#define SIGKILL 9
#endif
#if __linux__ && __GNU_LIBRARY__ && __GLIBC__ && __GLIBC_MINOR__
#include "r_heap_glibc.h"
#endif
#if HAVE_JEMALLOC
#include "r_heap_jemalloc.h"
#include "linux_heap_jemalloc.c"
#endif
void cmd_anal_reg (RCore *core, const char *str);
static const char *help_msg_d[] = {
"Usage:", "d", " # Debug commands",
"db", "[?]", "Breakpoints commands",
"dbt", "[?]", "Display backtrace based on dbg.btdepth and dbg.btalgo",
"dc", "[?]", "Continue execution",
"dd", "[?]", "File descriptors (!fd in r1)",
"de", "[-sc] [perm] [rm] [e]", "Debug with ESIL (see de?)",
"dg", " <file>", "Generate a core-file (WIP)",
"dH", " [handler]", "Transplant process to a new handler",
"di", "[?]", "Show debugger backend information (See dh)",
"dk", "[?]", "List, send, get, set, signal handlers of child",
"dL", "[?]", "List or set debugger handler",
"dm", "[?]", "Show memory maps",
"do", "[?]", "Open process (reload, alias for 'oo')",
"doo", "[args]", "Reopen in debug mode with args (alias for 'ood')",
"doof", "[file]", "Reopen in debug mode from file (alias for 'oodf')",
"doc", "", "Close debug session",
"dp", "[?]", "List, attach to process or thread id",
"dr", "[?]", "Cpu registers",
"ds", "[?]", "Step, over, source line",
"dt", "[?]", "Display instruction traces",
"dw", " <pid>", "Block prompt until pid dies",
#if __WINDOWS__
"dW", "", "List process windows",
"dWi", "", "Identify window under cursor",
#endif
"dx", "[?]", "Inject and run code on target process (See gs)",
NULL
};
static const char *help_msg_db[] = {
"Usage: db", "", " # Breakpoints commands",
"db", "", "List breakpoints",
"db*", "", "List breakpoints in r commands",
"db", " sym.main", "Add breakpoint into sym.main",
"db", " <addr>", "Add breakpoint",
"dbH", " <addr>", "Add hardware breakpoint",
"db-", " <addr>", "Remove breakpoint",
"db-*", "", "Remove all the breakpoints",
"db.", "", "Show breakpoint info in current offset",
"dbj", "", "List breakpoints in JSON format",
// "dbi", " 0x848 ecx=3", "stop execution when condition matches",
"dbc", " <addr> <cmd>", "Run command when breakpoint is hit",
"dbC", " <addr> <cmd>", "Run command but continue until <cmd> returns zero",
"dbd", " <addr>", "Disable breakpoint",
"dbe", " <addr>", "Enable breakpoint",
"dbs", " <addr>", "Toggle breakpoint",
"dbf", "", "Put a breakpoint into every no-return function",
//
"dbm", " <module> <offset>", "Add a breakpoint at an offset from a module's base",
"dbn", " [<name>]", "Show or set name for current breakpoint",
//
"dbi", "", "List breakpoint indexes",
"dbi", " <addr>", "Show breakpoint index in givengiven offset",
"dbi.", "", "Show breakpoint index in current offset",
"dbi-", " <idx>", "Remove breakpoint by index",
"dbix", " <idx> [expr]", "Set expression for bp at given index",
"dbic", " <idx> <cmd>", "Run command at breakpoint index",
"dbie", " <idx>", "Enable breakpoint by index",
"dbid", " <idx>", "Disable breakpoint by index",
"dbis", " <idx>", "Swap Nth breakpoint",
"dbite", " <idx>", "Enable breakpoint Trace by index",
"dbitd", " <idx>", "Disable breakpoint Trace by index",
"dbits", " <idx>", "Swap Nth breakpoint trace",
//
"dbh", " x86", "Set/list breakpoint plugin handlers",
"dbh-", " <name>", "Remove breakpoint plugin handler",
"dbt", "[?]", "Show backtrace. See dbt? for more details",
"dbx", " [expr]", "Set expression for bp in current offset",
"dbw", " <addr> <r/w/rw>", "Add watchpoint",
#if __WINDOWS__
"dbW", " <WM_DEFINE> [?|handle|name]", "Set cond. breakpoint on a window message handler",
#endif
"drx", " number addr len perm", "Modify hardware breakpoint",
"drx-", "number", "Clear hardware breakpoint",
NULL
};
static const char *help_msg_dbt[] = {
"Usage: dbt", "", " # Backtrace commands",
"dbt", "", "Display backtrace based on dbg.btdepth and dbg.btalgo",
"dbt*", "", "Display backtrace in flags",
"dbt=", "", "Display backtrace in one line (see dbt=s and dbt=b for sp or bp)",
"dbtv", "", "Display backtrace with local vars if any",
"dbtj", "", "Display backtrace in JSON",
"dbta", "", "Display ascii-art representation of the stack backtrace",
"dbte", " <addr>", "Enable Breakpoint Trace",
"dbtd", " <addr>", "Disable Breakpoint Trace",
"dbts", " <addr>", "Swap Breakpoint Trace",
NULL
};
static const char *help_msg_dbw[] = {
"Usage: dbw", "<addr> <r/w/rw>"," # Add watchpoint",
NULL
};
static const char *help_msg_dc[] = {
"Usage: dc", "", "Execution continuation commands",
"dc", "", "Continue execution of all children",
"dc", " <pid>", "Continue execution of pid",
"dc", "[-pid]", "Stop execution of pid",
"dca", " [sym] [sym].", "Continue at every hit on any given symbol",
"dcb", "", "Continue back until breakpoint",
"dcc", "", "Continue until call (use step into)",
"dccu", "", "Continue until unknown call (call reg)",
#if __WINDOWS__
"dce", "", "Continue execution (pass exception to program)",
#endif
"dcf", "", "Continue until fork (TODO)",
"dck", " <signal> <pid>", "Continue sending signal to process",
"dcp", "", "Continue until program code (mapped io section)",
"dcr", "", "Continue until ret (uses step over)",
"dcs", "[?] <num>", "Continue until syscall",
"dct", " <len>", "Traptrace from curseek to len, no argument to list",
"dcu", "[?] [..end|addr] ([end])", "Continue until address (or range)",
/*"TODO: dcu/dcr needs dbg.untilover=true??",*/
/*"TODO: same for only user/libs side, to avoid steping into libs",*/
/*"TODO: support for threads?",*/
NULL
};
static const char *help_msg_dcs[] = {
"Usage:", "dcs", " Continue until syscall",
"dcs", "", "Continue until next syscall",
"dcs [str]", "", "Continue until next call to the 'str' syscall",
"dcs", "*", "Trace all syscalls, a la strace",
NULL
};
static const char *help_msg_dcu[] = {
"Usage:", "dcu", " Continue until address",
"dcu.", "", "Alias for dcu $$ (continue until current address",
"dcu", " address", "Continue until address",
"dcu", " [..tail]", "Continue until the range",
"dcu", " [from] [to]", "Continue until the range",
NULL
};
static const char *help_msg_dd[] = {
"Usage: dd", "", "Descriptors commands",
"dd", "", "List file descriptors",
"dd", " <file>", "Open and map that file into the UI",
"dd-", "<fd>", "Close stdout fd",
"dd*", "", "List file descriptors (in radare commands)",
"dds", " <fd> <off>", "Seek given fd)",
"ddd", " <fd1> <fd2>", "Dup2 from fd1 to fd2",
"ddr", " <fd> <size>", "Read N bytes from fd",
"ddw", " <fd> <hexpairs>", "Write N bytes to fd",
NULL
};
static const char *help_msg_de[] = {
"Usage:", "de", "[-sc] [perm] [rm] [expr]",
"de", "", "List esil watchpoints",
"de-*", "", "Delete all esil watchpoints",
"de", " [perm] [rm] [addr|reg|from..to]", "Stop on condition",
"dec", "", "Continue execution until matching expression",
"des", "[?] [N]", "Step-in N instructions with esildebug",
"desu", " [addr]", "Esildebug until specific address",
NULL
};
static const char *help_msg_des[] = {
"Usage:", "des", "[u] [arg]",
"des", " [N]", "step-in N instructions with esildebug",
"desu", " [addr]", "esildebug until specific address",
NULL
};
static const char *help_msg_di[] = {
"Usage: di", "", "Debugger target information",
"di", "", "Show debugger target information",
"di*", "", "Same as above, but in r2 commands",
"diq", "", "Same as above, but in one line",
"dij", "", "Same as above, but in JSON format",
"dif", " [$a] [$b]", "Compare two files (or $alias files)",
NULL
};
static const char *help_msg_dk[] = {
"Usage: dk", "", "Signal commands",
"dk", "", "List all signal handlers of child process",
"dk", " <signal>", "Send KILL signal to child",
"dk", " <signal>=1", "Set signal handler for <signal> in child",
"dk?", "<signal>", "Name/signum resolver",
"dko", "[?] <signal>", "Reset skip or cont options for given signal",
"dko", " <signal> [|skip|cont]", "On signal SKIP handler or CONT into",
"dkj", "", "List all signal handlers in JSON",
NULL
};
static const char *help_msg_dko[] = {
"Usage:", "dko", " # Signal handling commands",
"dko", "", "List existing signal handling",
"dko", " [signal]", "Clear handling for a signal",
"dko", " [signal] [skip|cont]", "Set handling for a signal",
NULL
};
static const char *help_msg_dm[] = {
"Usage:", "dm", " # Memory maps commands",
"dm", "", "List memory maps of target process",
"dm", " address size", "Allocate <size> bytes at <address> (anywhere if address is -1) in child process",
"dm=", "", "List memory maps of target process (ascii-art bars)",
"dm.", "", "Show map name of current address",
"dm*", "", "List memmaps in radare commands",
"dm-", " address", "Deallocate memory map of <address>",
"dmd", "[a] [file]", "Dump current (all) debug map region to a file (from-to.dmp) (see Sd)",
"dmh", "[?]", "Show map of heap",
"dmi", " [addr|libname] [symname]", "List symbols of target lib",
"dmi*", " [addr|libname] [symname]", "List symbols of target lib in radare commands",
"dmi.", "", "List closest symbol to the current address",
"dmis", " [libname]", "Same as .dmi* - import all symbols from given lib as flags",
"dmiv", "", "Show address of given symbol for given lib",
"dmj", "", "List memmaps in JSON format",
"dml", " <file>", "Load contents of file into the current map region",
"dmm", "[?][j*]", "List modules (libraries, binaries loaded in memory)",
"dmp", "[?] <address> <size> <perms>", "Change page at <address> with <size>, protection <perms> (perm)",
"dms", "[?] <id> <mapaddr>", "Take memory snapshot",
"dms-", " <id> <mapaddr>", "Restore memory snapshot",
"dmS", " [addr|libname] [sectname]", "List sections of target lib",
"dmS*", " [addr|libname] [sectname]", "List sections of target lib in radare commands",
"dmL", " address size", "Allocate <size> bytes at <address> and promote to huge page",
//"dm, " rw- esp 9K", "set 9KB of the stack as read+write (no exec)",
"TODO:", "", "map files in process memory. (dmf file @ [addr])",
NULL
};
static const char *help_msg_dmi[] = {
"Usage: dmi", "", " # List/Load Symbols",
"dmi", "[j|q|*] [libname] [symname]", "List symbols of target lib",
"dmia", "[j|q|*] [libname]", "List all info of target lib",
"dmi*", "", "List symbols of target lib in radare commands",
"dmi.", "", "List closest symbol to the current address",
"dmiv", "", "Show address of given symbol for given lib",
NULL
};
static const char *help_msg_dmm[] = {
"Usage:", "dmm", " # Module memory maps commands",
"dmm", "", "List modules of target process",
"dmm*", "", "List modules of target process (r2 commands)",
"dmm.", "", "List memory map of current module",
"dmmj", "", "List modules of target process (JSON)",
NULL
};
static const char *help_msg_dxe[] = {
"Usage:", "dxe", " egg-program # see ragg2 and the 'g' command for more details",
"dxe", " sym.imp.puts(\"foo\")", "Call puts with a string argument",
NULL
};
static const char *help_msg_dmp[] = {
"Usage:", "dmp", " Change page permissions",
"dmp", " [addr] [size] [perms]", "Change permissions",
"dmp", " [perms]", "Change dbg.map permissions",
NULL
};
static const char *help_msg_do[] = {
"Usage:", "do", " # Debug (re)open commands",
"do", "", "Open process (reload, alias for 'oo')",
"dor", " [rarun2]", "Comma separated list of k=v rarun2 profile options (e dbg.profile)",
"doe", "", "Show rarun2 startup profile",
"doe!", "", "Edit rarun2 startup profile with $EDITOR",
"doo", " [args]", "Reopen in debug mode with args (alias for 'ood')",
"doof", " [args]", "Reopen in debug mode from file (alias for 'oodf')",
"doc", "", "Close debug session",
NULL
};
static const char *help_msg_dp[] = {
"Usage:", "dp", " # Process commands",
"dp", "", "List current pid and children",
"dp", " <pid>", "List children of pid",
"dpj", " <pid>", "List children of pid in JSON format",
"dpl", "", "List all attachable pids",
"dplj", "", "List all attachable pids in JSON format",
"dp-", " <pid>", "Detach select pid",
"dp=", "<pid>", "Select pid",
"dpa", " <pid>", "Attach and select pid",
"dpc", "", "Select forked pid (see dbg.forks)",
"dpc*", "", "Display forked pid (see dbg.forks)",
"dpe", "", "Show path to executable",
"dpf", "", "Attach to pid like file fd // HACK",
"dpk", " <pid> [<signal>]", "Send signal to process (default 0)",
"dpn", "", "Create new process (fork)",
"dptn", "", "Create new thread (clone)",
"dpt", "", "List threads of current pid",
"dptj", "", "List threads of current pid in JSON format",
"dpt", " <pid>", "List threads of process",
"dptj", " <pid>", "List threads of process in JSON format",
"dpt=", "<thread>", "Attach to thread",
NULL
};
static const char *help_msg_dr[] = {
"Usage: dr", "", "Registers commands",
"dr", "", "Show 'gpr' registers",
"dr", " <register>=<val>", "Set register value",
"dr.", " >$snapshot", "Capture current register values in r2 alias file",
"dr,", " [table-query]", "Enumerate registers in table format",
"dr8", "[1|2|4|8] [type]", "Display hexdump of gpr arena (WIP)",
"dr=", "", "Show registers in columns",
"dr?", "<register>", "Show value of given register",
"dr??", "", "Same as dr?`drp~=[0]+` # list all reg roles alias names and values",
"dra", "[?]", "Manage register arenas. see ara?",
"drb", "[1|2|4|8] [type]", "Display hexdump of gpr arena (WIP)",
"drc", " [name]", "Related to conditional flag registers",
"drC", " [register]", "Show register comments",
"drd", "", "Show only different registers",
"drf", "", "Show fpu registers (80 bit long double)",
"dri", "", "Show inverse registers dump (sorted by value)",
"drl", "[j]", "List all register names",
"drm", "[?]", "Show multimedia packed registers",
// "drm", " xmm0 0 32 = 12", "Set the first 32 bit word of the xmm0 reg to 12", // Do not advertise - broken
"dro", "", "Show previous (old) values of registers",
"drp", "[?] ", "Display current register profile",
"drr", "", "Show registers references (telescoping)",
"drrj", "", "Show registers references (telescoping) in JSON format",
// TODO: 'drs' to swap register arenas and display old register valuez
"drs", "[?]", "Stack register states",
"drS", "", "Show the size of the register profile",
"drt", "[?]", "Show all register types",
"drw"," <hexnum>", "Set contents of the register arena",
"drx", "[?]", "Show debug registers",
".dr", "*", "Include common register values in flags",
".dr", "-", "Unflag all registers",
NULL
};
static const char *help_msg_drp[] = {
"Usage:", "drp", " # Register profile commands",
"drp", "", "Show the current register profile",
"drp", " [regprofile-file]", "Set the current register profile",
"drp", " [gdb] [regprofile-file]", "Parse gdb register profile and dump an r2 profile string",
"drpc", "", "Show register profile comments",
"drpi", "", "Show internal representation of the register profile",
"drp.", "", "Show the current fake size",
"drpj", "", "Show the current register profile (JSON)",
"drps", " [new fake size]", "Set the fake size",
NULL
};
static const char *help_msg_drs[] = {
"Usage:", "drs", "register states commands",
"drs", "", "list register stack",
"drs", "+", "push register state",
"drs", "-", "pop register state",
NULL
};
static const char *help_msg_drt[] = {
"Usage:", "drt", " [type] [size] # debug register types",
"drt", "", "List all available register types",
"drt", " [size]", "Show all regs in the profile of size",
"drt", " 16", "Show 16 bit registers",
"drt", " [type]", "Show all regs in the profile of this type",
"drt", " all", "Show all registers",
"drt", " fpu", "Show fpu registers",
"drt", " [type] [size]", "Same as above for type and size",
"drt", " [type] [size]", "Same as above for type and size",
"drt*", "", "List flags in r commands",
NULL
};
static const char *help_msg_drx[] = {
"Usage: drx", "", "Hardware breakpoints commands",
"drx", "", "List all (x86?) hardware breakpoints",
"drx", " <number> <address> <length> <perms>", "Modify hardware breakpoint",
"drx-", "<number>", "Clear hardware breakpoint",
NULL
};
static const char *help_msg_drm[] = {
"Usage: drm", " [reg] [idx] [wordsize] [= value]", "Show multimedia packed registers",
"drm", "", "Show XMM registers",
"drm", " xmm0", "Show all packings of xmm0",
"drm", " xmm0 0 32 = 12", "Set the first 32 bit word of the xmm0 reg to 12",
"drmb", " [reg]", "Show registers as bytes",
"drmw", " [reg]", "Show registers as words",
"drmd", " [reg]", "Show registers as doublewords",
"drmq", " [reg]", "Show registers as quadwords",
"drmq", " xmm0~[0]", "Show first quadword of xmm0",
"drmf", " [reg]", "Show registers as 32-bit floating point",
"drml", " [reg]", "Show registers as 64-bit floating point",
"drmyb", " [reg]", "Show YMM registers as bytes",
"drmyw", " [reg]", "Show YMM registers as words",
"drmyd", " [reg]", "Show YMM registers as doublewords",
"drmyq", " [reg]", "Show YMM registers as quadwords",
"drmq", " ymm0~[3]", "Show fourth quadword of ymm0",
"drmyf", " [reg]", "Show YMM registers as 32-bit floating point",
"drmyl", " [reg]", "Show YMM registers as 64-bit floating point",
NULL
};
static const char *help_msg_ds[] = {
"Usage: ds", "", "Step commands",
"ds", "", "Step one instruction",
"ds", " <num>", "Step <num> instructions",
"dsb", "", "Step back one instruction",
"dsf", "", "Step until end of frame",
"dsi", " <cond>", "Continue until condition matches",
"dsl", "", "Step one source line",
"dsl", " <num>", "Step <num> source lines",
"dso", " <num>", "Step over <num> instructions",
"dsp", "", "Step into program (skip libs)",
"dss", " <num>", "Skip <num> step instructions",
"dsu", "[?] <address>", "Step until <address>. See 'dsu?' for other step until cmds.",
NULL
};
static const char *help_msg_dsu[] = {
"Usage: dsu", "", "Step until commands",
"dsu", " <address>", "Step until <address>",
"dsui", " <instr>", "Step until an instruction disasm matches",
"dsuir", " <regex>", "like dsui, but using a regexp",
"dsuo", " <optype> [<optype> ...]", "Step until an instr matches one of the <optype>s.",
"dsue", " <esil>", "Step until <esil> expression matches",
"dsuf", " <flag>", "Step until pc == <flag> matching name",
NULL
};
static const char *help_msg_dt[] = {
"Usage: dt", "", "Trace commands",
"dt", "", "List all traces ",
"dt", " [addr]", "Show trace info at address",
"dt%", "", "TODO",
"dt*", "", "List all traced opcode offsets",
"dt+"," [addr] [times]", "Add trace for address N times",
"dt-", "", "Reset traces (instruction/calls)",
"dt=", "", "Show ascii-art color bars with the debug trace ranges",
"dta", " 0x804020 ...", "Only trace given addresses",
"dtc[?][addr]|([from] [to] [addr])", "", "Trace call/ret",
"dtd", "[qi] [nth-start]", "List all traced disassembled (quiet, instructions)",
"dte", "[?]", "Show esil trace logs",
"dtg", "", "Graph call/ret trace",
"dtg*", "", "Graph in agn/age commands. use .dtg*;aggi for visual",
"dtgi", "", "Interactive debug trace",
"dts", "[?]", "Trace sessions",
"dtt", " [tag]", "Select trace tag (no arg unsets)",
NULL
};
static const char *help_msg_dte[] = {
"Usage:", "dte", " Show esil trace logs",
"dte", "", "Esil trace log for a single instruction",
"dte", " [idx]", "Show commands for that index log",
"dte", "-*", "Delete all esil traces",
"dtei", "", "Esil trace log single instruction",
"dtek", " [sdb query]", "Esil trace log single instruction from sdb",
NULL
};
static const char *help_msg_dts[] = {
"Usage:", "dts[*]", "",
"dts+", "", "Start trace session",
"dts-", "", "Stop trace session",
"dtst", " [dir] ", "Save trace sessions to disk",
"dtsf", " [dir] ", "Read trace sessions from disk",
"dtsm", "", "List current memory map and hash",
NULL
};
static const char *help_msg_dx[] = {
"Usage: dx", "", " # Code injection commands",
"dx", " <opcode>...", "Inject opcodes",
"dxa", " nop", "Assemble code and inject",
"dxc", " addr arg1 arg2 arg3", "Compile egg expression and inject it",
"dxe", " egg-expr", "Compile egg expression and inject it",
"dxr", " <opcode>...", "Inject opcodes and restore state",
"dxs", " write 1, 0x8048, 12", "Syscall injection (see gs)",
"\nExamples:", "", "",
"dx", " 9090", "Inject two x86 nop",
"\"dxa mov eax,6;mov ebx,0;int 0x80\"", "", "Inject and restore state",
NULL
};
static const char *help_msg_dL[] = {
"Usage: dL", "", " # List or set debugger handler",
"dL", "", "List debugger handlers",
"dLq", "", "List debugger handlers in quiet mode",
"dLj", "", "List debugger handlers in json mode",
"dL", " <handler>", "Set debugger handler",
NULL
};
struct dot_trace_ght {
RGraph *graph;
Sdb *graphnodes;
};
struct trace_node {
ut64 addr;
int refs;
};
static void cmd_debug_init(RCore *core, RCmdDesc *parent) {
DEFINE_CMD_DESCRIPTOR (core, d);
DEFINE_CMD_DESCRIPTOR (core, db);
DEFINE_CMD_DESCRIPTOR (core, dbt);
DEFINE_CMD_DESCRIPTOR (core, dc);
DEFINE_CMD_DESCRIPTOR (core, dcs);
DEFINE_CMD_DESCRIPTOR (core, dcu);
DEFINE_CMD_DESCRIPTOR (core, dd);
DEFINE_CMD_DESCRIPTOR (core, de);
DEFINE_CMD_DESCRIPTOR (core, des);
DEFINE_CMD_DESCRIPTOR (core, di);
DEFINE_CMD_DESCRIPTOR (core, dk);
DEFINE_CMD_DESCRIPTOR (core, dko);
DEFINE_CMD_DESCRIPTOR (core, dm);
DEFINE_CMD_DESCRIPTOR (core, dmi);
DEFINE_CMD_DESCRIPTOR (core, dmm);
DEFINE_CMD_DESCRIPTOR (core, dmp);
DEFINE_CMD_DESCRIPTOR (core, do);
DEFINE_CMD_DESCRIPTOR (core, dp);
DEFINE_CMD_DESCRIPTOR (core, dr);
DEFINE_CMD_DESCRIPTOR (core, drp);
DEFINE_CMD_DESCRIPTOR (core, drs);
DEFINE_CMD_DESCRIPTOR (core, drt);
DEFINE_CMD_DESCRIPTOR (core, drx);
DEFINE_CMD_DESCRIPTOR (core, ds);
DEFINE_CMD_DESCRIPTOR (core, dt);
DEFINE_CMD_DESCRIPTOR (core, dte);
DEFINE_CMD_DESCRIPTOR (core, dts);
DEFINE_CMD_DESCRIPTOR (core, dx);
}
// XXX those tmp files are never removed and we shuoldnt use files for this
static void setRarunProfileString(RCore *core, const char *str) {
char *file = r_file_temp ("rarun2");
char *s = strdup (str);
r_config_set (core->config, "dbg.profile", file);
r_str_replace_char (s, ',', '\n');
r_file_dump (file, (const ut8*)s, strlen (s), 0);
r_file_dump (file, (const ut8*)"\n", 1, 1);
free (file);
}
static void cmd_debug_cont_syscall(RCore *core, const char *_str) {
// TODO : handle more than one stopping syscall
int i, *syscalls = NULL;
int count = 0;
if (_str && *_str) {
char *str = strdup (_str);
count = r_str_word_set0 (str);
syscalls = calloc (sizeof (int), count);
for (i = 0; i < count; i++) {
const char *sysnumstr = r_str_word_get0 (str, i);
int sig = (int)r_num_math (core->num, sysnumstr);
if (sig == -1) { // trace ALL syscalls
syscalls[i] = -1;
} else if (sig == 0) {
sig = r_syscall_get_num (core->anal->syscall, sysnumstr);
if (sig == -1) {
eprintf ("Unknown syscall number\n");
free (str);
free (syscalls);
return;
}
syscalls[i] = sig;
}
}
eprintf ("Running child until syscalls:");
for (i = 0; i < count; i++) {
eprintf ("%d ", syscalls[i]);
}
eprintf ("\n");
free (str);
} else {
eprintf ("Running child until next syscall\n");
}
r_reg_arena_swap (core->dbg->reg, true);
r_debug_continue_syscalls (core->dbg, syscalls, count);
free (syscalls);
}
static int showreg(RCore *core, const char *str) {
int size = 0;
RRegItem *r = 0;
const char *rname = str;
// check for alias reg
int role = r_reg_get_name_idx (str);
if (role != -1) {
rname = r_reg_get_name (core->dbg->reg, role);
}
if (!rname) {
return 0;
}
r = r_reg_get (core->dbg->reg, rname , -1);
if (r) {
ut64 off;
utX value;
if (r->size > 64) {
off = r_reg_get_value_big (core->dbg->reg, r, &value);
switch (r->size) {
case 80:
r_cons_printf ("0x%04x%016"PFMT64x"\n", value.v80.High, value.v80.Low);
break;
case 96:
r_cons_printf ("0x%08x%016"PFMT64x"\n", value.v96.High, value.v96.Low);
break;
case 128:
r_cons_printf ("0x%016"PFMT64x"%016"PFMT64x"\n", value.v128.High, value.v128.Low);
break;
case 256:
r_cons_printf ("0x%016"PFMT64x"%016"PFMT64x"%016"PFMT64x"%016"PFMT64x"\n",
value.v256.High.High, value.v256.High.Low, value.v256.Low.High, value.v256.Low.Low);
break;
default:
r_cons_printf ("Error while retrieving reg '%s' of %i bits\n", str +1, r->size);
}
} else {
off = r_reg_get_value (core->dbg->reg, r);
r_cons_printf ("0x%08"PFMT64x "\n", off);
}
return r->size;
}
char *arg = strchr (str + 1, ' ');
if (arg && size == 0) {
size = atoi (arg + 1);
} else {
size = atoi (str + 1);
}
return size;
}
static RGraphNode *get_graphtrace_node (RGraph *g, Sdb *nodes, struct trace_node *tn) {
RGraphNode *gn;
char tn_key[TN_KEY_LEN];
snprintf (tn_key, TN_KEY_LEN, TN_KEY_FMT, tn->addr);
gn = (RGraphNode *)(size_t)sdb_num_get (nodes, tn_key, NULL);
if (!gn) {
gn = r_graph_add_node (g, tn);
sdb_num_set (nodes, tn_key, (ut64)(size_t)gn, 0);
}
return gn;
}
static void dot_trace_create_node (RTreeNode *n, RTreeVisitor *vis) {
struct dot_trace_ght *data = (struct dot_trace_ght *)vis->data;
struct trace_node *tn = n->data;
if (tn) get_graphtrace_node (data->graph, data->graphnodes, tn);
}
static void dot_trace_discover_child (RTreeNode *n, RTreeVisitor *vis) {
struct dot_trace_ght *data = (struct dot_trace_ght *)vis->data;
RGraph *g = data->graph;
Sdb *gnodes = data->graphnodes;
RTreeNode *parent = n->parent;
struct trace_node *tn = n->data;
struct trace_node *tn_parent = parent->data;
if (tn && tn_parent) {
RGraphNode *gn = get_graphtrace_node (g, gnodes, tn);
RGraphNode *gn_parent = get_graphtrace_node (g, gnodes, tn_parent);
if (!r_graph_adjacent (g, gn_parent, gn))
r_graph_add_edge (g, gn_parent, gn);
}
}
static void dot_trace_traverse(RCore *core, RTree *t, int fmt) {
const char *gfont = r_config_get (core->config, "graph.font");
struct dot_trace_ght aux_data;
RTreeVisitor vis = { 0 };
const RList *nodes;
RListIter *iter;
RGraphNode *n;
if (fmt == 'i') {
r_core_cmd0 (core, "ag-;.dtg*;aggi");
return;
}
aux_data.graph = r_graph_new ();
aux_data.graphnodes = sdb_new0 ();
/* build a callgraph from the execution trace */
vis.data = &aux_data;
vis.pre_visit = (RTreeNodeVisitCb)dot_trace_create_node;
vis.discover_child = (RTreeNodeVisitCb)dot_trace_discover_child;
r_tree_bfs (t, &vis);
/* traverse the callgraph to print the dot file */
nodes = r_graph_get_nodes (aux_data.graph);
if (fmt == 0) {
r_cons_printf ("digraph code {\n"
"graph [bgcolor=white];\n"
" node [color=lightgray, style=filled"
" shape=box fontname=\"%s\" fontsize=\"8\"];\n", gfont);
}
r_list_foreach (nodes, iter, n) {
struct trace_node *tn = (struct trace_node *)n->data;
const RList *neighbours = r_graph_get_neighbours (aux_data.graph, n);
RListIter *it_n;
RGraphNode *w;
if (!fmt && tn) {
r_cons_printf ("\"0x%08"PFMT64x"\" [URL=\"0x%08"PFMT64x
"\" color=\"lightgray\" label=\"0x%08"PFMT64x
" (%d)\"]\n", tn->addr, tn->addr, tn->addr, tn->refs);
}
r_list_foreach (neighbours, it_n, w) {
struct trace_node *tv = (struct trace_node *)w->data;
if (tv && tn) {
if (fmt) {
r_cons_printf ("agn 0x%08"PFMT64x"\n", tn->addr);
r_cons_printf ("agn 0x%08"PFMT64x"\n", tv->addr);
r_cons_printf ("age 0x%08"PFMT64x" 0x%08"PFMT64x"\n",
tn->addr, tv->addr);
} else {
r_cons_printf ("\"0x%08"PFMT64x"\" -> \"0x%08"PFMT64x
"\" [color=\"red\"];\n", tn->addr, tv->addr);
}
}
}
}
if (!fmt) {
r_cons_printf ("}\n");
}
r_graph_free (aux_data.graph);
sdb_free (aux_data.graphnodes);
}
/* TODO: refactor all those step_until* function into a single one
* TODO: handle when the process is dead
* TODO: handle ^C */
static int step_until(RCore *core, ut64 addr) {
ut64 off = r_debug_reg_get (core->dbg, "PC");
if (!off) {
eprintf ("Cannot 'drn PC'\n");
return false;
}
if (!addr) {
eprintf ("Cannot continue until address 0\n");
return false;
}
r_cons_break_push (NULL, NULL);
do {
if (r_cons_is_breaked ()) {
core->break_loop = true;
break;
}
if (r_debug_is_dead (core->dbg)) {
core->break_loop = true;
break;
}
r_debug_step (core->dbg, 1);
off = r_debug_reg_get (core->dbg, "PC");
// check breakpoint here
} while (off != addr);
r_cons_break_pop ();
return true;
}
static int step_until_esil(RCore *core, const char *esilstr) {
if (!core || !esilstr || !core->dbg || !core->dbg->anal \
|| !core->dbg->anal->esil) {
eprintf ("Not initialized %p. Run 'aei' first.\n", core->anal->esil);
return false;
}
r_cons_break_push (NULL, NULL);
for (;;) {
if (r_cons_is_breaked ()) {
core->break_loop = true;
break;
}
if (r_debug_is_dead (core->dbg)) {
core->break_loop = true;
break;
}
r_debug_step (core->dbg, 1);
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, false);
if (r_anal_esil_condition (core->anal->esil, esilstr)) {
eprintf ("ESIL BREAK!\n");
break;
}
}
r_cons_break_pop ();
return true;
}
static bool is_repeatable_inst(RCore *core, ut64 addr) {
// we have read the bytes already
RAnalOp *op = r_core_op_anal (core, addr, R_ANAL_OP_MASK_ALL);
bool ret = op && ((op->prefix & R_ANAL_OP_PREFIX_REP) || (op->prefix & R_ANAL_OP_PREFIX_REPNE));
r_anal_op_free (op);
return ret;
}
static int step_until_inst(RCore *core, const char *instr, bool regex) {
RAsmOp asmop;
ut8 buf[32];
ut64 pc;
int ret;
bool is_x86 = r_str_startswith (r_config_get (core->config, "asm.arch"), "x86");
instr = r_str_trim_head_ro (instr);
if (!core || !instr|| !core->dbg) {
eprintf ("Wrong state\n");
return false;
}
r_cons_break_push (NULL, NULL);
for (;;) {
if (r_cons_is_breaked ()) {
break;
}
if (r_debug_is_dead (core->dbg)) {
break;
}
pc = r_debug_reg_get (core->dbg, "PC");
if (is_x86 && is_repeatable_inst (core, pc)) {
r_debug_step_over (core->dbg, 1);
} else {
r_debug_step (core->dbg, 1);
}
pc = r_debug_reg_get (core->dbg, "PC");
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, false);
/* TODO: disassemble instruction and strstr */
r_asm_set_pc (core->rasm, pc);
// TODO: speedup if instructions are in the same block as the previous
r_io_read_at (core->io, pc, buf, sizeof (buf));
ret = r_asm_disassemble (core->rasm, &asmop, buf, sizeof (buf));
eprintf ("0x%08"PFMT64x" %d %s\n", pc, ret, r_asm_op_get_asm (&asmop)); // asmop.buf_asm);
if (ret > 0) {
const char *buf_asm = r_asm_op_get_asm (&asmop);
if (regex) {
if (r_regex_match (instr, "e", buf_asm)) {
eprintf ("Stop.\n");
break;
}
} else {
if (strstr (buf_asm, instr)) {
eprintf ("Stop.\n");
break;
}
}
}
}
r_cons_break_pop ();
return true;
}
static int step_until_optype(RCore *core, const char *_optypes) {
RAnalOp op;
ut8 buf[32];
ut64 pc;
int res = true;
RList *optypes_list = NULL;
RListIter *iter;
char *optype, *optypes = strdup (r_str_trim_head_ro ((char *) _optypes));
if (!core || !core->dbg) {
eprintf ("Wrong state\n");
res = false;
goto end;
}
if (!optypes || !*optypes) {
eprintf ("Missing optypes. Usage example: 'dsuo ucall ujmp'\n");
res = false;
goto end;
}
bool debugMode = r_config_get_i (core->config, "cfg.debug");
optypes_list = r_str_split_list (optypes, " ", 0);
r_cons_break_push (NULL, NULL);
for (;;) {
if (r_cons_is_breaked ()) {
core->break_loop = true;
break;
}
if (debugMode) {
if (r_debug_is_dead (core->dbg)) {
core->break_loop = true;
break;
}
r_debug_step (core->dbg, 1);
pc = r_debug_reg_get (core->dbg, core->dbg->reg->name[R_REG_NAME_PC]);
// 'Copy' from r_debug_step_soft
if (!core->dbg->iob.read_at) {
eprintf ("ERROR\n");
res = false;
goto cleanup_after_push;
}
if (!core->dbg->iob.read_at (core->dbg->iob.io, pc, buf, sizeof (buf))) {
eprintf ("ERROR\n");
res = false;
goto cleanup_after_push;
}
} else {
r_core_esil_step (core, UT64_MAX, NULL, NULL, false);
pc = r_reg_getv (core->anal->reg, "PC");
}
r_io_read_at (core->io, pc, buf, sizeof (buf));
if (!r_anal_op (core->dbg->anal, &op, pc, buf, sizeof (buf), R_ANAL_OP_MASK_BASIC)) {
eprintf ("Error: r_anal_op failed\n");
res = false;
goto cleanup_after_push;
}
// This is slow because we do lots of strcmp's.
// To improve this, the function r_anal_optype_string_to_int should be implemented
// I also don't check if the opcode type exists.
const char *optype_str = r_anal_optype_to_string (op.type);
r_list_foreach (optypes_list, iter, optype) {
if (!strcmp (optype_str, optype)) {
goto cleanup_after_push;
}
}
}
cleanup_after_push:
r_cons_break_pop ();
end:
free (optypes);
r_list_free (optypes_list);
return res;
}
static int step_until_flag(RCore *core, const char *instr) {
const RList *list;
RListIter *iter;
RFlagItem *f;
ut64 pc;
instr = r_str_trim_head_ro (instr);
if (!core || !instr || !core->dbg) {
eprintf ("Wrong state\n");
return false;
}
r_cons_break_push (NULL, NULL);
for (;;) {
if (r_cons_is_breaked ()) {
break;
}
if (r_debug_is_dead (core->dbg)) {
break;
}
r_debug_step (core->dbg, 1);
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, false);
pc = r_debug_reg_get (core->dbg, "PC");
list = r_flag_get_list (core->flags, pc);
r_list_foreach (list, iter, f) {
if (!instr|| !*instr || (f->realname && strstr(f->realname, instr))) {
r_cons_printf ("[ 0x%08"PFMT64x" ] %s\n",
f->offset, f->realname);
goto beach;
}
}
}
beach:
r_cons_break_pop ();
return true;
}
/* until end of frame */
static int step_until_eof(RCore *core) {
int maxLoops = 200000;
ut64 off, now = r_debug_reg_get (core->dbg, "SP");
r_cons_break_push (NULL, NULL);
do {
// XXX (HACK!)
r_debug_step_over (core->dbg, 1);
off = r_debug_reg_get (core->dbg, "SP");
// check breakpoint here
if (--maxLoops < 0) {
eprintf ("Step loop limit exceeded\n");
break;
}
} while (off <= now);
r_cons_break_pop ();
return true;
}
static int step_line(RCore *core, int times) {
char file[512], file2[512];
int find_meta, line = -1, line2 = -1;
char *tmp_ptr = NULL;
ut64 off = r_debug_reg_get (core->dbg, "PC");
if (off == 0LL) {
eprintf ("Cannot 'drn PC'\n");
return false;
}
file[0] = 0;
file2[0] = 0;
if (r_bin_addr2line (core->bin, off, file, sizeof (file), &line)) {
char* ptr = r_file_slurp_line (file, line, 0);
eprintf ("--> 0x%08"PFMT64x" %s : %d\n", off, file, line);
eprintf ("--> %s\n", ptr);
find_meta = false;
free (ptr);
} else {
eprintf ("--> Stepping until dwarf line\n");
find_meta = true;
}
do {
r_debug_step (core->dbg, 1);
off = r_debug_reg_get (core->dbg, "PC");
if (!r_bin_addr2line (core->bin, off, file2, sizeof (file2), &line2)) {
if (find_meta)
continue;
eprintf ("Cannot retrieve dwarf info at 0x%08"PFMT64x"\n", off);
return false;
}
} while (!strcmp (file, file2) && line == line2);
eprintf ("--> 0x%08"PFMT64x" %s : %d\n", off, file2, line2);
tmp_ptr = r_file_slurp_line (file2, line2, 0);
eprintf ("--> %s\n", tmp_ptr);
free (tmp_ptr);
return true;
}
static void cmd_debug_pid(RCore *core, const char *input) {
int pid, sig;
const char *ptr;
switch (input[1]) {
case '\0': // "dp"
eprintf ("Selected: %d %d\n", core->dbg->pid, core->dbg->tid);
r_debug_pid_list (core->dbg, core->dbg->pid, 0);
break;
case '-': // "dp-"
if (input[2]== ' ') {
r_debug_detach (core->dbg, r_num_math (core->num, input + 2));
} else {
r_debug_detach (core->dbg, core->dbg->pid);
}
break;
case 'c': // "dpc"
if (core->dbg->forked_pid != -1) {
if (input[2] == '*') {
eprintf ("dp %d\n", core->dbg->forked_pid);
} else {
r_debug_select (core->dbg, core->dbg->forked_pid, core->dbg->tid);
core->dbg->main_pid = core->dbg->forked_pid;
core->dbg->n_threads = 0;
core->dbg->forked_pid = -1;
}
} else {
eprintf ("No recently forked children\n");
}
break;
case 'k': // "dpk"
/* stop, print, pass -- just use flags*/
/* XXX: not for threads? signal is for a whole process!! */
/* XXX: but we want fine-grained access to process resources */
pid = atoi (input + 2);
if (pid > 0) {
ptr = r_str_trim_head_ro (input + 2);
ptr = strchr (ptr, ' ');
sig = ptr? atoi (ptr + 1): 0;
eprintf ("Sending signal '%d' to pid '%d'\n", sig, pid);
r_debug_kill (core->dbg, pid, false, sig);
} else eprintf ("cmd_debug_pid: Invalid arguments (%s)\n", input);
break;
case 'n': // "dpn"
eprintf ("TODO: debug_fork: %d\n", r_debug_child_fork (core->dbg));
break;
case 't': // "dpt"
switch (input[2]) {
case '\0': // "dpt"
r_debug_thread_list (core->dbg, core->dbg->pid, 0);
break;
case 'j': // "dptj"
if (input[3] != ' ') { // "dptj"
r_debug_thread_list (core->dbg, core->dbg->pid, 'j');
} else { // "dptj "
r_debug_thread_list (core->dbg, atoi (input + 3), 'j');
}
break;
case ' ': // "dpt "
r_debug_thread_list (core->dbg, atoi (input + 2), 0);
break;
case '=': // "dpt="
r_debug_select (core->dbg, core->dbg->pid,
(int) r_num_math (core->num, input + 3));
break;
case 'n': // "dptn"
eprintf ("TODO: debug_clone: %d\n", r_debug_child_clone (core->dbg));
break;
case '?': // "dpt?"
default:
r_core_cmd_help (core, help_msg_dp);
break;
}
break;
case 'a': // "dpa"
if (input[2]) {
r_debug_attach (core->dbg, (int) r_num_math (
core->num, input + 2));
} else {
if (core->io && core->io->desc) {
r_debug_attach (core->dbg,
r_io_fd_get_pid (core->io, core->io->desc->fd));
}
}
r_debug_select (core->dbg, core->dbg->pid, core->dbg->tid);
r_config_set_i (core->config, "dbg.swstep",
(core->dbg->h && !core->dbg->h->canstep));
r_core_cmdf (core, "=!pid %d", core->dbg->pid);
break;
case 'f': // "dpf"
if (core->io && core->io->desc) {
r_debug_select (core->dbg, r_io_fd_get_pid (core->io, core->io->desc->fd),
r_io_fd_get_tid (core->io, core->io->desc->fd));
}
break;
case '=': // "dp="
r_debug_select (core->dbg,
(int) r_num_math (core->num, input + 2), core->dbg->tid);
core->dbg->main_pid = r_num_math (core->num, input + 2);
break;
case 'l': // "dpl"
switch (input[2]) {
case '\0': // "dpl"
r_debug_pid_list (core->dbg, 0, 0);
break;
case 'j': // "dplj"
r_debug_pid_list (core->dbg, 0, 'j');
break;
}
break;
case 'j': // "dpj"
switch (input[2]) {
case '\0': // "dpj"
r_debug_pid_list (core->dbg, core->dbg->pid, 'j');
break;
case ' ': // "dpj "
r_debug_pid_list (core->dbg,
(int) R_MAX (0, (int)r_num_math (core->num, input + 2)), 'j');
break;
}
break;
case 'e': // "dpe"
{
int pid = (input[2] == ' ')? atoi (input + 2): core->dbg->pid;
char *exe = r_sys_pid_to_path (pid);
if (exe) {
r_cons_println (exe);
free (exe);
}
}
break;
case ' ': // "dp "
r_debug_pid_list (core->dbg,
(int) R_MAX (0, (int)r_num_math (core->num, input + 2)), 0);
break;
case '?': // "dp?"
default:
r_core_cmd_help (core, help_msg_dp);
break;
}
}
static void cmd_debug_backtrace(RCore *core, const char *input) {
RAnalOp analop;
ut64 addr, len = r_num_math (core->num, input);
if (!len) {
r_bp_traptrace_list (core->dbg->bp);
} else {
ut64 oaddr = 0LL;
eprintf ("Trap tracing 0x%08"PFMT64x"-0x%08"PFMT64x"\n",
core->offset, core->offset+len);
r_reg_arena_swap (core->dbg->reg, true);
r_bp_traptrace_reset (core->dbg->bp, true);
r_bp_traptrace_add (core->dbg->bp, core->offset, core->offset+len);
r_bp_traptrace_enable (core->dbg->bp, true);
do {
ut8 buf[32];
r_debug_continue (core->dbg);
addr = r_debug_reg_get (core->dbg, "PC");
if (!addr) {
eprintf ("pc=0\n");
break;
}
if (addr == oaddr) {
eprintf ("pc=opc\n");
break;
}
oaddr = addr;
/* XXX Bottleneck..we need to reuse the bytes read by traptrace */
// XXX Do asm.arch should define the max size of opcode?
r_io_read_at (core->io, addr, buf, 32); // XXX longer opcodes?
r_anal_op (core->anal, &analop, addr, buf, sizeof (buf), R_ANAL_OP_MASK_BASIC);
} while (r_bp_traptrace_at (core->dbg->bp, addr, analop.size));
r_bp_traptrace_enable (core->dbg->bp, false);
}
}
static int grab_bits(RCore *core, const char *arg, int *pcbits2) {
int pcbits = atoi (arg);
if (pcbits2) {
*pcbits2 = 0;
}
if (pcbits < 1) {
int rpbits = r_reg_default_bits (core->anal->reg);
if (rpbits) {
pcbits = rpbits;
if (pcbits2) {
*pcbits2 = 32;
}
} else if (!strcmp (r_config_get (core->config, "asm.arch"), "avr")) {
pcbits = 8;
if (pcbits2) {
*pcbits2 = 32;
}
} else {
const char *pcname = r_reg_get_name (core->anal->reg, R_REG_NAME_PC);
RRegItem *reg = r_reg_get (core->anal->reg, pcname, 0);
if (reg) {
if (core->rasm->bits != reg->size)
pcbits = reg->size;
}
}
}
return pcbits ? pcbits : core->anal->bits;
}
#define MAX_MAP_SIZE 1024*1024*512
static int dump_maps(RCore *core, int perm, const char *filename) {
RDebugMap *map;
RListIter *iter;
r_debug_map_sync (core->dbg); // update process memory maps
ut64 addr = core->offset;
int do_dump = false;
int ret = !r_list_empty (core->dbg->maps);
r_list_foreach (core->dbg->maps, iter, map) {
do_dump = false;
if (perm == -1) {
if (addr >= map->addr && addr < map->addr_end) {
do_dump = true;
}
} else if (perm == 0) {
do_dump = true;
} else if (perm == (map->perm & perm)) {
do_dump = true;
}
if (do_dump) {
ut8 *buf = malloc (map->size);
//TODO: use mmap here. we need a portable implementation
if (!buf) {
eprintf ("Cannot allocate 0x%08"PFMT64x" bytes\n", map->size);
free (buf);
/// XXX: TODO: read by blocks!!1
continue;
}
if (map->size > MAX_MAP_SIZE) {
eprintf ("Do not dumping 0x%08"PFMT64x" because it's too big\n", map->addr);
free (buf);
continue;
}
r_io_read_at (core->io, map->addr, buf, map->size);
char *file = filename
? strdup (filename)
: r_str_newf ("0x%08"PFMT64x"-0x%08"PFMT64x"-%s.dmp",
map->addr, map->addr_end, r_str_rwx_i (map->perm));
if (!r_file_dump (file, buf, map->size, 0)) {
eprintf ("Cannot write '%s'\n", file);
ret = 0;
} else {
eprintf ("Dumped %d byte(s) into %s\n", (int)map->size, file);
}
free (file);
free (buf);
}
}
//eprintf ("No debug region found here\n");
return ret;
}
static void cmd_debug_modules(RCore *core, int mode) { // "dmm"
ut64 addr = core->offset;
RDebugMap *map;
RList *list;
RListIter *iter;
/* avoid processing the list if the user only wants help */
if (mode == '?') {
show_help:
r_core_cmd_help (core, help_msg_dmm);
return;
}
PJ *pj = NULL;
if (mode == 'j') {
pj = r_core_pj_new (core);
if (!pj) {
return;
}
pj_a (pj);
}
// TODO: honor mode
list = r_debug_modules_list (core->dbg);
r_list_foreach (list, iter, map) {
switch (mode) {
case 0:
r_cons_printf ("0x%08"PFMT64x" 0x%08"PFMT64x" %s\n", map->addr, map->addr_end, map->file);
break;
case '.':
if (addr >= map->addr && addr < map->addr_end) {
r_cons_printf ("0x%08"PFMT64x" 0x%08"PFMT64x" %s\n", map->addr, map->addr_end, map->file);
goto beach;
}
break;
case 'j':
{
/* Escape backslashes (e.g. for Windows). */
pj_o (pj);
pj_kn (pj, "addr", map->addr);
pj_kn (pj, "addr_end", map->addr_end);
pj_ks (pj, "file", map->file);
pj_ks (pj, "name", map->name);
pj_end (pj);
}
break;
case ':':
case '*':
if (mode == '*' || (mode == ':' && \
addr>=map->addr && addr < map->addr_end)) {
/* Escape backslashes (e.g. for Windows). */
char *escaped_path = r_str_escape (map->file);
char *filtered_name = strdup (map->name);
r_name_filter (filtered_name, 0);
r_cons_printf ("f mod.%s = 0x%08"PFMT64x"\n",
filtered_name, map->addr);
r_cons_printf ("oba 0x%08"PFMT64x" %s\n", map->addr, escaped_path);
// r_cons_printf (".!rabin2 -rsB 0x%08"PFMT64x" \"%s\"\n", map->addr, escaped_path);
free (escaped_path);
free (filtered_name);
}
break;
default:
pj_free (pj);
r_list_free (list);
goto show_help;
/* not reached */
}
}
beach:
if (mode == 'j') {
pj_end (pj);
r_cons_println (pj_string (pj));
}
pj_free (pj);
r_list_free (list);
}
#if __linux__ && __GNU_LIBRARY__ && __GLIBC__ && __GLIBC_MINOR__
static int cmd_dbg_map_heap_glibc_32(RCore *core, const char *input);
static int cmd_dbg_map_heap_glibc_64(RCore *core, const char *input);
#endif // __linux__ && __GNU_LIBRARY__ && __GLIBC__ && __GLIBC_MINOR__
#if __WINDOWS__
static int cmd_debug_map_heap_win(RCore *core, const char *input);
#endif // __WINDOWS__
static ut64 addroflib(RCore *core, const char *libname) {
RListIter *iter;
RDebugMap *map;
if (!core || !libname) {
return UT64_MAX;
}
r_debug_map_sync (core->dbg);
// RList *list = r_debug_native_modules_get (core->dbg);
RList *list = r_debug_modules_list (core->dbg);
r_list_foreach (list, iter, map) {
if (strstr (r_file_basename(map->name), libname)) {
return map->addr;
}
}
r_list_foreach (core->dbg->maps, iter, map) {
if (strstr (r_file_basename(map->name), libname)) {
return map->addr;
}
}
return UT64_MAX;
}
static RDebugMap *get_closest_map(RCore *core, ut64 addr) {
RListIter *iter;
RDebugMap *map;
r_debug_map_sync (core->dbg);
RList *list = r_debug_modules_list (core->dbg);
r_list_foreach (list, iter, map) {
if (addr != UT64_MAX && (addr >= map->addr && addr < map->addr_end)) {
return map;
}
}
r_list_foreach (core->dbg->maps, iter, map) {
if (addr != UT64_MAX && (addr >= map->addr && addr < map->addr_end)) {
return map;
}
}
return NULL;
}
static int r_debug_heap(RCore *core, const char *input) {
const char *m = r_config_get (core->config, "dbg.malloc");
if (m && !strcmp ("glibc", m)) {
#if __linux__ && __GNU_LIBRARY__ && __GLIBC__ && __GLIBC_MINOR__
if (core->rasm->bits == 64) {
cmd_dbg_map_heap_glibc_64 (core, input + 1);
} else {
cmd_dbg_map_heap_glibc_32 (core, input + 1);
}
#else
eprintf ("glibc not supported for this platform\n");
#endif
#if HAVE_JEMALLOC
} else if (m && !strcmp ("jemalloc", m)) {
if (core->rasm->bits == 64) {
cmd_dbg_map_jemalloc_64 (core, input + 1);
} else {
cmd_dbg_map_jemalloc_32 (core, input + 1);
}
#endif
} else {
#if __WINDOWS__
cmd_debug_map_heap_win (core, input + 1);
#else
eprintf ("MALLOC algorithm not supported\n");
return false;
#endif
}
return true;
}
static bool get_bin_info(RCore *core, const char *file, ut64 baseaddr, PJ *pj, int mode, bool symbols_only, RCoreBinFilter *filter) {
#if __APPLE__
switch (mode) {
case R_MODE_SET:
r_core_cmdf (core, ".dmi* 0x%08"PFMT64x" %s", baseaddr, file);
break;
case R_MODE_RADARE:
r_core_cmdf (core, "!!rabin2 -rsEB 0x%08"PFMT64x" %s", baseaddr, file);
break;
default:
r_core_cmdf (core, "!!rabin2 -E -B 0x%08"PFMT64x" %s", baseaddr, file);
break;
}
return true;
#else
int fd;
if ((fd = r_io_fd_open (core->io, file, R_PERM_R, 0)) == -1) {
return false;
}
RBinOptions opt = { 0 };
opt.fd = fd;
opt.sz = r_io_fd_size (core->io, fd);
opt.baseaddr = baseaddr;
RBinFile *obf = r_bin_cur (core->bin);
if (!r_bin_open_io (core->bin, &opt)) {
r_io_fd_close (core->io, fd);
return false;
}
int action = R_CORE_BIN_ACC_ALL & ~R_CORE_BIN_ACC_INFO;
if (symbols_only || filter->name) {
action = R_CORE_BIN_ACC_SYMBOLS;
} else if (mode == R_MODE_SET || mode == R_MODE_RADARE) {
action &= ~R_CORE_BIN_ACC_ENTRIES & ~R_CORE_BIN_ACC_MAIN;
}
r_core_bin_info (core, action, pj, mode, 1, filter, NULL);
RBinFile *bf = r_bin_cur (core->bin);
r_bin_file_delete (core->bin, bf->id);
r_bin_file_set_cur_binfile (core->bin, obf);
r_io_fd_close (core->io, fd);
return true;
#endif
}
static int cmd_debug_map(RCore *core, const char *input) {
RListIter *iter;
RDebugMap *map;
ut64 addr = core->offset;
switch (input[0]) {
case '.': // "dm."
r_debug_map_list (core->dbg, addr, input);
break;
case 'm': // "dmm"
if (!strcmp (input + 1, ".*")) {
cmd_debug_modules (core, ':');
} else cmd_debug_modules (core, input[1]);
break;
case '?': // "dm?"
r_core_cmd_help (core, help_msg_dm);
break;
case 'p': // "dmp"
if (input[1] == '?') {
r_core_cmd_help (core, help_msg_dmp);
} else if (input[1] == ' ') {
int perms;
char *p, *q;
ut64 size = 0, addr;
p = strchr (input + 2, ' ');
if (p) {
*p++ = 0;
q = strchr (p, ' ');
if (q) {
*q++ = 0;
addr = r_num_math (core->num, input + 2);
size = r_num_math (core->num, p);
perms = r_str_rwx (q);
// eprintf ("(%s)(%s)(%s)\n", input + 2, p, q);
// eprintf ("0x%08"PFMT64x" %d %o\n", addr, (int) size, perms);
r_debug_map_protect (core->dbg, addr, size, perms);
} else eprintf ("See dmp?\n");
} else {
r_debug_map_sync (core->dbg); // update process memory maps
addr = UT64_MAX;
r_list_foreach (core->dbg->maps, iter, map) {
if (core->offset >= map->addr && core->offset < map->addr_end) {
addr = map->addr;
size = map->size;
break;
}
}
perms = r_str_rwx (input + 2);
if (addr != UT64_MAX && perms >= 0) {
r_debug_map_protect (core->dbg, addr, size, perms);
} else {
eprintf ("See dmp?\n");
}
}
} else {
eprintf ("See dmp?\n");
}
break;
case 'd': // "dmd"
switch (input[1]) {
case 'a': return dump_maps (core, 0, NULL);
case 'w': return dump_maps (core, R_PERM_RW, NULL);
case ' ': return dump_maps (core, -1, input + 2);
case 0: return dump_maps (core, -1, NULL);
case '?':
default:
eprintf ("Usage: dmd[aw] - dump (all-or-writable) debug maps\n");
break;
}
break;
case 'l': // "dml"
if (input[1] != ' ') {
eprintf ("Usage: dml [file]\n");
return false;
}
r_debug_map_sync (core->dbg); // update process memory maps
r_list_foreach (core->dbg->maps, iter, map) {
if (addr >= map->addr && addr < map->addr_end) {
size_t sz;
char *buf = r_file_slurp (input + 2, &sz);
//TODO: use mmap here. we need a portable implementation
if (!buf) {
eprintf ("Cannot allocate 0x%08"PFMT64x" byte(s)\n", map->size);
return false;
}
r_io_write_at (core->io, map->addr, (const ut8*)buf, sz);
if (sz != map->size)
eprintf ("File size differs from region size (%"PFMT64u" vs %"PFMT64d")\n",
(ut64)sz, map->size);
eprintf ("Loaded %"PFMT64u" byte(s) into the map region at 0x%08"PFMT64x"\n",
(ut64)sz, map->addr);
free (buf);
return true;
}
}
eprintf ("No debug region found here\n");
return false;
case 'i': // "dmi"
switch (input[1]) {
case '\0': // "dmi" alias of "dmm"
r_core_cmd (core, "dmm", 0);
break;
case 's': // "dmis"
r_core_cmdf (core, ".dmi* %s", input + 2);
break;
case ' ': // "dmi "
case '*': // "dmi*"
case 'v': // "dmiv"
case 'j': // "dmij"
case 'q': // "dmiq"
case 'a': // "dmia"
{
const char *libname = NULL, *symname = NULL, *a0;
int mode;
ut64 baddr = 0LL;
char *ptr;
int i = 1;
bool symbols_only = true;
if (input[1] == 'a') {
symbols_only = false;
input++;
}
PJ *pj = NULL;
switch (input[1]) {
case 's':
mode = R_MODE_SET;
break;
case '*':
mode = R_MODE_RADARE;
break;
case 'j':
mode = R_MODE_JSON;
pj = r_core_pj_new (core);
if (!pj) {
return false;
}
break;
case 'q':
mode = input[2] == 'q' ? input++, R_MODE_SIMPLEST : R_MODE_SIMPLE;
break;
default:
mode = R_MODE_PRINT;
break;
}
ptr = r_str_trim_dup (input + 2);
if (!ptr || !*ptr) {
r_core_cmd (core, "dmm", 0);
free (ptr);
break;
}
if (symbols_only) {
i = r_str_word_set0 (ptr);
}
switch (i) {
case 2:
symname = r_str_word_get0 (ptr, 1);
// fall through
case 1:
a0 = r_str_word_get0 (ptr, 0);
addr = r_num_get (core->num, a0);
if (!addr || addr == UT64_MAX) {
libname = r_str_word_get0 (ptr, 0);
}
break;
}
if (libname && !addr) {
addr = addroflib (core, r_file_basename (libname));
if (addr == UT64_MAX) {
eprintf ("Unknown library, or not found in dm\n");
}
}
map = get_closest_map (core, addr);
if (map) {
RCoreBinFilter filter;
filter.offset = 0LL;
filter.name = (char *)symname;
baddr = map->addr;
if (libname) {
const char *file = map->file? map->file: map->name;
char *newfile = NULL;
if (!r_file_exists (file)) {
newfile = r_file_temp ("memlib");
if (newfile) {
file = newfile;
r_core_cmdf (core, "wtf %s 0x%"PFMT64x" @ 0x%"PFMT64x" 2> %s",
file, map->size, baddr, R_SYS_DEVNULL);
}
}
get_bin_info (core, file, baddr, pj, mode, symbols_only, &filter);
if (newfile) {
if (!r_file_rm (newfile)) {
eprintf ("Error when removing %s\n", newfile);
}
free (newfile);
}
} else {
r_bin_set_baddr (core->bin, map->addr);
r_core_bin_info (core, R_CORE_BIN_ACC_SYMBOLS, pj, input[1] == '*', true, &filter, NULL);
r_bin_set_baddr (core->bin, baddr);
}
}
if (mode == R_MODE_JSON) {
r_cons_println (pj_string (pj));
pj_free (pj);
}
free (ptr);
}
break;
case '.': // "dmi."
if (r_config_get_b (core->config, "cfg.debug")) {
ut64 addr = core->offset;
r_list_foreach (core->dbg->maps, iter, map) {
if (!map->shared) {
continue;
}
if (addr >= map->addr && addr < map->addr_end) {
r_cons_printf ("%s\n", map->name);
// break;
}
}
} else {
map = get_closest_map (core, addr);
if (map) {
ut64 closest_addr = UT64_MAX;
RList *symbols = r_bin_get_symbols (core->bin);
RBinSymbol *symbol, *closest_symbol = NULL;
r_list_foreach (symbols, iter, symbol) {
if (symbol->vaddr > addr) {
if (symbol->vaddr - addr < closest_addr) {
closest_addr = symbol->vaddr - addr;
closest_symbol = symbol;
}
} else {
if (addr - symbol->vaddr < closest_addr) {
closest_addr = addr - symbol->vaddr;
closest_symbol = symbol;
}
}
}
if (closest_symbol) {
RCoreBinFilter filter;
filter.offset = 0LL;
filter.name = (char *) closest_symbol->name;
r_bin_set_baddr (core->bin, map->addr);
r_core_bin_info (core, R_CORE_BIN_ACC_SYMBOLS, NULL, false, true, &filter, NULL);
}
}
}
break;
default:
r_core_cmd_help (core, help_msg_dmi);
break;
}
break;
case 'S': // "dmS"
{ // Move to a separate function
const char *libname = NULL, *sectname = NULL, *mode = "";
ut64 baddr = 0LL;
char *ptr;
int i;
if (input[1]=='*') {
ptr = strdup (r_str_trim_head_ro ((char*)input + 2));
mode = "-r ";
} else {
ptr = strdup (r_str_trim_head_ro ((char*)input + 1));
}
i = r_str_word_set0 (ptr);
addr = UT64_MAX;
switch (i) {
case 2: // get section name
sectname = r_str_word_get0 (ptr, 1);
/* fallthrou */
case 1: // get addr|libname
if (IS_DIGIT (*ptr)) {
const char *a0 = r_str_word_get0 (ptr, 0);
addr = r_num_math (core->num, a0);
} else {
addr = UT64_MAX;
}
if (!addr || addr == UT64_MAX) {
libname = r_str_word_get0 (ptr, 0);
}
break;
}
r_debug_map_sync (core->dbg); // update process memory maps
RList *list = r_debug_modules_list (core->dbg);
r_list_foreach (list, iter, map) {
if ((!libname ||
(addr != UT64_MAX && (addr >= map->addr && addr < map->addr_end)) ||
(libname != NULL && (strstr (map->name, libname))))) {
baddr = map->addr;
char *res;
const char *file = map->file? map->file: map->name;
char *name = r_str_escape ((char *)r_file_basename (file));
char *filesc = r_str_escape (file);
/* TODO: do not spawn. use RBin API */
if (sectname) {
char *sect = r_str_escape (sectname);
res = r_sys_cmd_strf ("env RABIN2_PREFIX=\"%s\" rabin2 %s-B 0x%08"
PFMT64x" -S \"%s\" | grep \"%s\"", name, mode, baddr, filesc, sect);
free (sect);
} else {
res = r_sys_cmd_strf ("env RABIN2_PREFIX=\"%s\" rabin2 %s-B 0x%08"
PFMT64x" -S \"%s\"", name, mode, baddr, filesc);
}
free (filesc);
r_cons_println (res);
free(name);
free (res);
if (libname || addr != UT64_MAX) { //only single match requested
break;
}
}
}
free (ptr);
}
break;
case ' ': // "dm "
{
int size;
char *p = strchr (input + 2, ' ');
if (p) {
*p++ = 0;
addr = r_num_math (core->num, input + 1);
size = r_num_math (core->num, p);
r_debug_map_alloc (core->dbg, addr, size, false);
} else {
eprintf ("Usage: dm addr size\n");
return false;
}
}
break;
case '-': // "dm-"
if (input[1] != ' ') {
eprintf ("|ERROR| Usage: dm- [addr]\n");
break;
}
addr = r_num_math (core->num, input + 2);
r_list_foreach (core->dbg->maps, iter, map) {
if (addr >= map->addr && addr < map->addr_end) {
r_debug_map_dealloc(core->dbg, map);
r_debug_map_sync (core->dbg);
return true;
}
}
eprintf ("The address doesn't match with any map.\n");
break;
case 'L': // "dmL"
{
int size;
char *p = strchr (input + 2, ' ');
if (p) {
*p++ = 0;
addr = r_num_math (core->num, input + 1);
size = r_num_math (core->num, p);
r_debug_map_alloc (core->dbg, addr, size, true);
} else {
eprintf ("Usage: dmL addr size\n");
return false;
}
}
break;
case '\0': // "dm"
case '*': // "dm*"
case 'j': // "dmj"
case 'q': // "dmq"
r_debug_map_sync (core->dbg); // update process memory maps
r_debug_map_list (core->dbg, core->offset, input);
break;
case '=': // "dm="
r_debug_map_sync (core->dbg);
r_debug_map_list_visual (core->dbg, core->offset, input,
r_config_get_i (core->config, "scr.color"));
break;
case 'h': // "dmh"
(void)r_debug_heap (core, input);
break;
}
return true;
}
#if __linux__ && __GNU_LIBRARY__ && __GLIBC__ && __GLIBC_MINOR__
#include "linux_heap_glibc.c"
#elif __WINDOWS__
#include "windows_heap.c"
#endif
HEAPTYPE(ut64);
static int regcmp(const void *a, const void *b) {
const ut64 *A = (const ut64*)a;
const ut64 *B = (const ut64*)b;
if (*A > *B) {
return 1;
}
if (*A == *B) {
return 0;
}
return -1;
}
static bool regcb(void *u, const ut64 k, const void *v) {
RList *sorted = (RList*) u;
ut64 *n = ut64_new (k);
r_list_add_sorted (sorted, n, regcmp);
return true;
}
R_API void r_core_debug_ri(RCore *core, RReg *reg, int mode) {
RList *list = r_reg_get_list (reg, R_REG_TYPE_GPR);
RListIter *iter;
RRegItem *r;
HtUP *db = ht_up_new0 ();
r_list_foreach (list, iter, r) {
if (r->size != core->rasm->bits) {
continue;
}
ut64 value = r_reg_get_value (reg, r);
RList *list = ht_up_find (db, value, NULL);
if (!list) {
list = r_list_newf (NULL);
ht_up_update (db, value, list);
}
r_list_append (list, r->name);
}
RList *sorted = r_list_newf (free);
ht_up_foreach (db, regcb, sorted);
ut64 *addr;
r_list_foreach (sorted, iter, addr) {
int rwx = 0;
RDebugMap *map = r_debug_map_get (core->dbg, *addr);
if (map) {
rwx = map->perm;
}
r_cons_printf (" %s ", r_str_rwx_i (rwx));
r_cons_printf ("0x%08"PFMT64x" ", *addr);
RList *list = ht_up_find (db, *addr, NULL);
if (list) {
RListIter *iter;
const char *r;
r_cons_strcat (Color_YELLOW);
r_list_foreach (list, iter, r) {
r_cons_printf (" %s", r);
}
r_cons_strcat (Color_RESET);
char *rrstr = r_core_anal_hasrefs (core, *addr, true);
if (rrstr && *rrstr && strchr (rrstr, 'R')) {
r_cons_printf (" ;%s"Color_RESET, rrstr);
}
r_cons_newline ();
}
}
r_list_free (sorted);
ht_up_free (db);
}
R_API void r_core_debug_rr(RCore *core, RReg *reg, int mode) {
char *color = "";
char *colorend = "";
int had_colors = r_config_get_i (core->config, "scr.color");
bool use_colors = had_colors != 0;
int delta = 0;
ut64 diff, value;
int bits = core->rasm->bits;
//XXX: support other RRegisterType
RList *list = r_reg_get_list (reg, R_REG_TYPE_GPR);
RListIter *iter;
RRegItem *r;
RTable *t = r_core_table (core, "regs");
if (mode == 'j') {
r_config_set_i (core->config, "scr.color", false);
use_colors = 0;
}
if (use_colors) {
#undef ConsP
#define ConsP(x) (core->cons && core->cons->context->pal.x) ? core->cons->context->pal.x
color = ConsP(creg): Color_BWHITE;
colorend = Color_RESET;
}
r_table_set_columnsf (t, "ssss", "role", "reg", "value", "refstr");
r_list_foreach (list, iter, r) {
if (r->size != bits) {
continue;
}
value = r_reg_get_value (core->dbg->reg, r);
delta = 0;
int regSize = r->size;
//XXX: support larger regSize
if (regSize < 80) {
r_reg_arena_swap (core->dbg->reg, false);
diff = r_reg_get_value (core->dbg->reg, r);
r_reg_arena_swap (core->dbg->reg, false);
delta = value-diff;
}
const char *role = "";
int i;
for (i = 0; i < R_REG_NAME_LAST; i++) {
const char *t = r_reg_get_name (reg, i);
if (t && !strcmp (t, r->name)) {
role = r_reg_get_role (i);
}
}
char *namestr = NULL;
char *valuestr = NULL;
if (delta && use_colors) {
namestr = r_str_newf ("%s%s%s", color, r->name, colorend);
valuestr = r_str_newf ("%s%"PFMT64x"%s", color, value, colorend);
} else {
namestr = r_str_new (r->name);
valuestr = r_str_newf ("%"PFMT64x, value);
}
char *rrstr = r_core_anal_hasrefs (core, value, true);
if (!rrstr) {
rrstr = strdup ("");
}
r_table_add_rowf (t, "ssss", role, namestr, valuestr, rrstr);
free (namestr);
free (valuestr);
free (rrstr);
}
char *s = (mode == 'j')? r_table_tojson (t): r_table_tostring (t);
r_cons_print (s);
free (s);
r_table_free (t);
if (had_colors) {
r_config_set_i (core->config, "scr.color", had_colors);
}
}
static void show_drpi(RCore *core) {
int i;
RListIter *iter;
RRegItem *ri;
r_cons_printf ("Aliases (Reg->name)\n");
for (i = 0; i < R_REG_NAME_LAST; i++) {
const char *v = r_str_get_fail (core->anal->reg->name[i], "?");
r_cons_printf ("%d %s %s\n", i, r_reg_get_role (i), v);
}
for (i = 0; i < R_REG_TYPE_LAST; i++) {
const char *nmi = r_reg_get_type (i);
r_cons_printf ("regset %d (%s)\n", i, nmi);
RRegSet *rs = &core->anal->reg->regset[i];
if (!rs || !rs->arena) {
r_cons_printf ("* arena %s no\n", r_reg_get_type (i));
continue;
}
r_cons_printf ("* arena %s size %d\n", r_reg_get_type (i), rs->arena->size);
r_list_foreach (rs->regs, iter, ri) {
const char *tpe = r_reg_get_type (ri->type);
const char *arn = r_reg_get_type (ri->arena);
r_cons_printf (" %s %s @ %s (offset: %d size: %d)", ri->name, tpe, arn, ri->offset / 8, ri->size / 8);
if ((ri->offset / 8) + (ri->size / 8) > rs->arena->size) {
r_cons_printf (" *OVERFLOW*");
}
r_cons_newline ();
}
}
}
static void cmd_reg_profile(RCore *core, char from, const char *str) { // "arp" and "drp"
const char *ptr;
RReg *r = r_config_get_i (core->config, "cfg.debug")? core->dbg->reg: core->anal->reg;
switch (str[1]) {
case '\0': // "drp" "arp"
if (r->reg_profile_str) {
r_cons_println (r->reg_profile_str);
} else {
eprintf ("No register profile defined. Try 'dr.'\n");
}
break;
case 'c': // "drpc" "arpc"
if (core->dbg->reg->reg_profile_cmt) {
r_cons_println (r->reg_profile_cmt);
}
break;
case 'g': // "drpg" "arpg"
ptr = r_str_trim_head_ro (str + 2);
if (!R_STR_ISEMPTY (ptr)) {
char *r2profile = r_reg_parse_gdb_profile (ptr);
if (r2profile) {
r_cons_println (r2profile);
core->num->value = 0;
free (r2profile);
} else {
core->num->value = 1;
eprintf ("Warning: Cannot parse gdb profile.\n");
}
} else {
eprintf ("Usage: arpg [gdb-reg-profile]\n");
}
break;
case ' ': // "drp " "arp "
ptr = r_str_trim_head_ro (str + 2);
r_reg_set_profile (r, ptr);
r_debug_plugin_set_reg_profile (core->dbg, ptr);
break;
case '.': { // "drp."
RRegSet *rs = r_reg_regset_get (r, R_REG_TYPE_GPR);
if (rs) {
eprintf ("size = %d\n", rs->arena->size);
}
}
break;
case 'i': // "drpi" "arpi"
show_drpi (core);
break;
case 's': // "drps" "arps"
if (str[2] == ' ') {
ut64 n = r_num_math (core->num, str+2);
// TODO: move this thing into the r_reg API
RRegSet *rs = r_reg_regset_get (core->dbg->reg, R_REG_TYPE_GPR);
if (rs && n>0) {
RListIter *iter;
RRegArena *arena;
r_list_foreach (rs->pool, iter, arena) {
ut8 *newbytes = calloc (1, n);
if (newbytes) {
free (arena->bytes);
arena->bytes = newbytes;
arena->size = n;
} else {
eprintf ("Cannot allocate %d\n", (int)n);
}
}
} else {
eprintf ("Invalid arena size\n");
}
} else {
RRegSet *rs = r_reg_regset_get (core->dbg->reg, R_REG_TYPE_GPR);
if (rs) {
r_cons_printf ("%d\n", rs->arena->size);
} else {
eprintf ("Cannot find GPR register arena.\n");
}
}
break;
case 'j': // "drpj" "arpj"
{
// "drpj" .. dup from "arpj"
RListIter *iter;
RRegItem *r;
int i;
PJ *pj = r_core_pj_new (core);
if (!pj) {
return;
}
pj_o (pj);
pj_k (pj, "alias_info");
pj_a (pj);
for (i = 0; i < R_REG_NAME_LAST; i++) {
if (core->dbg->reg->name[i]) {
pj_o (pj);
pj_kn (pj, "role", i);
pj_ks (pj, "role_str", r_reg_get_role (i));
pj_ks (pj, "reg", core->dbg->reg->name[i]);
pj_end (pj);
}
}
pj_end (pj);
pj_k (pj, "reg_info");
pj_a (pj);
for (i = 0; i < R_REG_TYPE_LAST; i++) {
r_list_foreach (core->dbg->reg->regset[i].regs, iter, r) {
pj_o (pj);
pj_kn (pj, "type", r->type);
pj_ks (pj, "type_str", r_reg_get_type (r->type));
pj_ks (pj, "name", r->name);
pj_kn (pj, "size", r->size);
pj_kn (pj, "offset", r->offset);
pj_end (pj);
}
}
pj_end (pj); // "]"
pj_end (pj); // "}"
r_cons_printf ("%s", pj_string (pj));
pj_free (pj);
}
break;
case '?': // "drp?" "arp?"
default:
{
const char *from_a[] = { "arp", "arpi", "arpg", "arp.", "arpj", "arps" };
// TODO #7967 help refactor
const char **help_msg = help_msg_drp;
if (from == 'a') {
help_msg[1] = help_msg[3] = help_msg[6] = help_msg[9] = from_a[0];
help_msg[12] = from_a[1];
help_msg[15] = from_a[2];
help_msg[18] = from_a[3];
help_msg[21] = from_a[4];
}
r_core_cmd_help (core, help_msg);
break;
}
}
}
#if 0
static int showreg(RCore *core, const char *str, bool use_color) {
ut64 off;
utX value;
int err;
int bits = atoi (str);
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, false); //R_REG_TYPE_GPR, false);
if (bits) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, bits, str[0], use_color? Color_GREEN: NULL);
} else {
off = r_debug_reg_get_err (core->dbg, str + 1, &err, &value);
core->num->value = off;
switch (err) {
case 0:
r_cons_printf ("0x%08"PFMT64x"\n", off);
break;
case 1:
r_cons_printf ("Unknown register '%s'\n", str + 1);
break;
case 80:
r_cons_printf ("0x%04x%016"PFMT64x"\n", value.v80.High, value.v80.Low);
break;
case 96:
r_cons_printf ("0x%08x%016"PFMT64x"\n", value.v96.High, value.v96.Low);
break;
case 128:
r_cons_printf ("0x%016"PFMT64x"%016"PFMT64x"\n", value.v128.High, value.v128.Low);
break;
default:
r_cons_printf ("Error %i while retrieving '%s' \n", err, str + 1);
core->num->value = 0;
}
}
return bits;
}
#endif
// helpers for packed registers
#define NUM_PACK_TYPES 6
#define NUM_INT_PACK_TYPES 4
int pack_sizes[NUM_PACK_TYPES] = { 8, 16, 32, 64, 32, 64 };
char *pack_format[NUM_PACK_TYPES] = { "%s0x%02" PFMT64x, "%s0x%04" PFMT64x, "%s0x%08" PFMT64x,
"%s0x%016" PFMT64x, "%s%lf" , "%s%lf" };
#define pack_print(i, reg, pack_type_index) r_cons_printf (pack_format[pack_type_index], i != 0 ? " " : "", reg);
static void cmd_debug_reg_print_packed_reg(RCore *core, RRegItem *item, char explicit_size, char* pack_show) {
int pi, i;
for (pi = 0; pi < NUM_PACK_TYPES; pi++) {
if (!explicit_size || pack_show[pi]) {
for (i = 0; i < item->packed_size / pack_sizes[pi]; i++) {
ut64 res = r_reg_get_pack(core->dbg->reg, item, i, pack_sizes[pi]);
if( pi > NUM_INT_PACK_TYPES-1) { // are we printing int or double?
if (pack_sizes[pi] == 64) {
double dres;
memcpy ((void*)&dres, (void*)&res, 8);
pack_print (i, dres, pi);
} else if (pack_sizes[pi] == 32) {
float fres;
memcpy ((void*)&fres, (void*)&res, 4);
pack_print (i, fres, pi);
}
} else {
pack_print (i, res, pi);
}
}
r_cons_newline ();
}
}
}
static char *__table_format_string(RTable *t, int fmt) {
switch (fmt) {
case 'j': return r_table_tojson (t);
case 's': return r_table_tostring (t);
}
return r_table_tofancystring (t);
}
static void __tableRegList (RCore *core, RReg *reg, const char *str) {
int i;
RRegItem *e;
RTable *t = r_core_table (core, "regprofile");
RTableColumnType *typeString = r_table_type ("string");
RTableColumnType *typeNumber = r_table_type ("number");
RTableColumnType *typeBoolean = r_table_type ("boolean");
r_table_add_column (t, typeNumber, "offset", 0);
r_table_add_column (t, typeNumber, "size", 0);
r_table_add_column (t, typeNumber, "psize", 0);
r_table_add_column (t, typeNumber, "index", 0);
r_table_add_column (t, typeNumber, "arena", 0);
r_table_add_column (t, typeBoolean, "float", 0);
r_table_add_column (t, typeString, "name", 0);
r_table_add_column (t, typeString, "flags", 0);
r_table_add_column (t, typeString, "comment", 0);
for (i = 0; i < R_REG_TYPE_LAST; i++) {
RList *list = r_reg_get_list (reg, i);
RListIter *iter;
r_list_foreach (list, iter, e) {
// sdb_fmt is not thread safe
r_table_add_row (t,
sdb_fmt ("%d", e->offset),
sdb_fmt ("%d", e->size),
sdb_fmt ("%d", e->packed_size),
sdb_fmt ("%d", e->index),
sdb_fmt ("%d", i),
r_str_bool (e->is_float),
r_str_get (e->name),
r_str_get (e->flags),
r_str_get (e->comment),
NULL
);
}
}
const char fmt = *str++;
const char *q = str;
if (r_table_query (t, q)) {
char *s = __table_format_string (t, fmt);
r_cons_printf ("%s\n", s);
free (s);
}
r_table_free (t);
}
static void cmd_debug_reg(RCore *core, const char *str) {
char *arg;
struct r_reg_item_t *r;
const char *name, *use_color;
size_t i;
int size, type = R_REG_TYPE_GPR;
int bits = (core->dbg->bits & R_SYS_BITS_64)? 64: 32;
int use_colors = r_config_get_i (core->config, "scr.color");
int newbits = atoi ((str&&*str)? str + 1: "");
if (newbits > 0) {
bits = newbits;
}
if (use_colors) {
#undef ConsP
#define ConsP(x) (core->cons && core->cons->context->pal.x)? core->cons->context->pal.x
use_color = ConsP(creg): Color_BWHITE;
} else {
use_color = NULL;
}
if (!str) {
str = "";
}
switch (str[0]) {
case 'C': // "drC"
{
const bool json_out = str[1] == 'j';
name = r_str_trim_head_ro (json_out ? str + 3 : str + 2);
if (name) {
r = r_reg_get (core->dbg->reg, name , -1);
if (r) {
if (json_out) {
PJ *pj = r_core_pj_new (core);
if (!pj) {
return;
}
pj_o (pj);
if (r->comment) {
pj_ks (pj, r->name, r->comment);
} else {
pj_knull (pj, r->name);
}
pj_end (pj);
const char *s = pj_string (pj);
r_cons_println (s);
pj_free (pj);
} else {
if (r->comment) {
r_cons_printf ("%s\n", r->comment);
} else {
eprintf ("Register %s doesn't have any comments\n", name);
}
}
} else {
eprintf ("Register %s not found\n", name);
}
} else {
eprintf ("usage: drC [register]\n");
}
}
break;
case '-': // "dr-"
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, bits, NULL, '-', 0);
break;
case '?': // "dr?"
if (str[1]) {
RListIter *iter;
char *all = (char *)r_str_trim_head_ro (str + 1);
if (!strcmp (all, "?")) { // "dr??"
all = r_core_cmd_str (core, "drp~=[0]");
all = r_str_replace (all, "\n", " ", 1);
} else {
all = strdup (all);
}
char *arg;
RList *args = r_str_split_list (all, " ", 0);
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, false); //R_REG_TYPE_GPR, false);
int count = r_list_length (args);
r_list_foreach (args, iter, arg) {
r = r_reg_get (core->dbg->reg, arg, -1);
if (!r) {
continue;
}
ut64 off = r_debug_reg_get (core->dbg, arg);
if (count == 1) {
r_cons_printf ("0x%08"PFMT64x"\n", off);
} else {
int type = r_reg_get_name_idx (arg);
const char *r = arg;
if (type != -1) {
r = r_reg_get_name (core->dbg->reg, type);
}
r_cons_printf ("%3s %3s 0x%08"PFMT64x"\n", arg, r, off);
}
core->num->value = off;
}
free (all);
r_list_free (args);
} else {
r_core_cmd_help (core, help_msg_dr);
}
break;
case 'l': // "drl[j]"
{
const bool json_out = str[1] == 'j';
RRegSet *rs = r_reg_regset_get (core->dbg->reg, R_REG_TYPE_GPR);
if (rs) {
RRegItem *r;
RListIter *iter;
i = 0;
PJ *pj = NULL;
if (json_out) {
pj = r_core_pj_new (core);
if (!pj) {
return;
}
pj_a (pj);
}
r_list_foreach (rs->regs, iter, r) {
if (json_out) {
pj_s (pj, r->name);
i++;
} else {
r_cons_println (r->name);
}
}
if (json_out) {
pj_end (pj);
const char *s = pj_string (pj);
r_cons_println (s);
pj_free (pj);
}
}
}
break;
case '8': // "dr8"
case 'b': // "drb"
{
int len, type = R_REG_TYPE_GPR;
arg = strchr (str, ' ');
if (arg) {
char *string = r_str_trim_dup (arg + 1);
if (string) {
type = r_reg_type_by_name (string);
if (type == -1 && string[0] != 'a') {
type = R_REG_TYPE_GPR;
}
free (string);
}
}
ut8 *buf = r_reg_get_bytes (core->dbg->reg, type, &len);
if (str[0] == '8') {
r_print_bytes (core->print, buf, len, "%02x");
} else {
switch (str[1]) {
case '1':
r_print_hexdump (core->print, 0ll, buf, len, 8, 1, 1);
break;
case '2':
r_print_hexdump (core->print, 0ll, buf, len, 16, 2, 1);
break;
case '4':
r_print_hexdump (core->print, 0ll, buf, len, 32, 4, 1);
break;
case '8':
r_print_hexdump (core->print, 0ll, buf, len, 64, 8, 1);
break;
default:
if (core->rasm->bits == 64) {
r_print_hexdump (core->print, 0ll, buf, len, 64, 8, 1);
} else {
r_print_hexdump (core->print, 0ll, buf, len, 32, 4, 1);
}
break;
}
}
free (buf);
}
break;
case 'c': // "drc"
// todo: set flag values with drc zf=1
if (str[1] == 'q') { // "drcq"
RRegFlags *rf = r_reg_cond_retrieve (core->dbg->reg, NULL);
if (rf) {
r_cons_printf ("s:%d z:%d c:%d o:%d p:%d\n",
rf->s, rf->z, rf->c, rf->o, rf->p);
free (rf);
}
break;
}
if (str[1] == '=') { // "drc="
RRegFlags *rf = r_reg_cond_retrieve (core->dbg->reg, NULL);
if (rf) {
r_cons_printf ("s:%d z:%d c:%d o:%d p:%d\n",
rf->s, rf->z, rf->c, rf->o, rf->p);
free (rf);
}
} else if (strchr (str, '=')) {
char *a = strdup (r_str_trim_head_ro (str + 1));
char *eq = strchr (a, '=');
if (eq) {
*eq++ = 0;
char *k = a;
r_str_trim (a);
bool v = !strcmp (eq, "true") || atoi (eq);
int type = r_reg_cond_from_string (k);
if (type != -1) {
RRegFlags *rf = r_reg_cond_retrieve (core->dbg->reg, NULL);
if (rf) {
r_reg_cond_bits_set (core->dbg->reg, type, rf, v);
r_reg_cond_apply (core->dbg->reg, rf);
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, true);
free (rf);
}
} else {
eprintf ("Unknown condition register\n");
}
}
free (a);
} else {
RRegItem *r;
const char *name = r_str_trim_head_ro (str + 1);
if (*name && name[1]) {
r = r_reg_cond_get (core->dbg->reg, name);
if (r) {
r_cons_println (r->name);
} else {
int id = r_reg_cond_from_string (name);
RRegFlags* rf = r_reg_cond_retrieve (core->dbg->reg, NULL);
if (rf) {
int o = r_reg_cond_bits (core->dbg->reg, id, rf);
core->num->value = o;
// orly?
r_cons_printf ("%d\n", o);
free (rf);
} else eprintf ("unknown conditional or flag register\n");
}
} else {
RRegFlags *rf = r_reg_cond_retrieve (core->dbg->reg, NULL);
if (rf) {
if (*name=='=') {
for (i=0; i<R_REG_COND_LAST; i++) {
r_cons_printf ("%s:%d ",
r_reg_cond_to_string (i),
r_reg_cond_bits (core->dbg->reg, i, rf));
}
r_cons_newline ();
} else {
for (i=0; i<R_REG_COND_LAST; i++) {
r_cons_printf ("%d %s\n",
r_reg_cond_bits (core->dbg->reg, i, rf),
r_reg_cond_to_string (i));
}
}
free (rf);
}
}
}
break;
case 'x': // "drx"
switch (str[1]) {
case '\0':
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, false);
r_debug_drx_list (core->dbg);
break;
case '-':
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, false);
r_debug_drx_unset (core->dbg, atoi (str + 2));
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, true);
break;
case ' ': {
char *s = strdup (str+2);
char sl, n, perm;
int len;
ut64 off;
sl = r_str_word_set0 (s);
if (sl == 4) {
#define arg(x) r_str_word_get0(s,x)
n = (char)r_num_math (core->num, arg(0));
off = r_num_math (core->num, arg(1));
len = (int)r_num_math (core->num, arg(2));
perm = (char)r_str_rwx (arg (3));
if (len == -1) {
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, false);
r_debug_drx_set (core->dbg, n, 0, 0, 0, 0);
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, true);
} else {
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, false);
r_debug_drx_set (core->dbg, n, off, len, perm, 0);
r_debug_reg_sync (core->dbg, R_REG_TYPE_DRX, true);
}
} else {
eprintf ("|usage: drx n [address] [length] [perm]\n");
}
free (s);
} break;
case '?':
default:
r_core_cmd_help (core, help_msg_drx);
break;
}
break;
case 's': // "drs"
switch (str[1]) {
case '\0': // "drs"
r_cons_printf ("%d\n", r_list_length (
core->dbg->reg->regset[0].pool));
break;
case '-': // "drs-"
r_reg_arena_pop (core->dbg->reg);
// restore debug registers if in debugger mode
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, true);
break;
case '+': // "drs+"
r_reg_arena_push (core->dbg->reg);
break;
case '?': // "drs?"
default:
r_core_cmd_help (core, help_msg_drs);
break;
}
break;
case 'm': // "drm"
if (str[1]=='?') {
r_core_cmd_help (core, help_msg_drm);
} else if (str[1] == ' ' || str[1] == 'b' || str[1] == 'd' || str[1] == 'w' || str[1] == 'q' || str[1] == 'l'
|| str[1] == 'f' || (str[1] == 'y' && str[2] != '\x00')) {
char explicit_index = 0;
char explicit_size = 0;
char explicit_name = 0;
char pack_show[NUM_PACK_TYPES] = { 0, 0, 0, 0, 0, 0};
int index = 0;
int size = 0; // auto
char *q, *p, *name;
char *eq = NULL;
RRegisterType reg_type = R_REG_TYPE_XMM;
if ((str[1] == ' ' && str[2] != '\x00') || (str[1] == 'y' && str[2] == ' ' && str[3] != '\x00')) {
if (str[1] == 'y') { // support `drmy ymm0` and `drm ymm0`
str = str + 1;
}
name = strdup (str + 2);
explicit_name = 1;
eq = strchr (name, '=');
if (eq) {
*eq++ = 0;
}
p = strchr (name, ' ');
if (p) {
*p++ = 0;
q = strchr (p, ' ');
if (p[0] != '*') {
// do not show whole register
explicit_index = 1;
index = r_num_math (core->num, p);
}
if (q) {
*q++ = 0;
size = r_num_math (core->num, q);
for (i = 0; i < NUM_PACK_TYPES; i++) {
if (size == pack_sizes[i]) {
explicit_size = 1;
pack_show[i] = 1;
}
}
if (!explicit_size) {
eprintf ("Unsupported wordsize %d\n", size);
break;
}
}
}
} else {
explicit_size = 1;
if (str[1] == 'y') {
reg_type = R_REG_TYPE_YMM;
str = str + 1;
}
if (str[2] == ' ' && str[3] != '\x00') {
name = strdup (str + 3);
explicit_name = 1;
}
switch (str[1]) {
case 'b': // "drmb"
size = pack_sizes[0];
pack_show[0] = 1;
break;
case 'w': // "drmw"
size = pack_sizes[1];
pack_show[1] = 1;
break;
case 'd': // "drmd"
size = pack_sizes[2];
pack_show[2] = 1;
break;
case 'q': // "drmq"
size = pack_sizes[3];
pack_show[3] = 1;
break;
case 'f': // "drmf"
size = pack_sizes[4];
pack_show[4] = 1;
break;
case 'l': // "drml"
size = pack_sizes[5];
pack_show[5] = 1;
break;
default:
eprintf ("Unkown comamnd");
return;
}
}
if (explicit_name) {
RRegItem *item = r_reg_get (core->dbg->reg, name, -1);
if (item) {
if (eq) {
// TODO: support setting YMM registers
if (reg_type == R_REG_TYPE_YMM) {
eprintf ("Setting ymm registers not supported yet!\n");
} else {
ut64 val = r_num_math (core->num, eq);
r_reg_set_pack (core->dbg->reg, item, index, size, val);
r_debug_reg_sync (core->dbg, reg_type, true);
}
} else {
r_debug_reg_sync (core->dbg, reg_type, false);
if (!explicit_index) {
cmd_debug_reg_print_packed_reg (core, item, explicit_size, pack_show);
} else {
ut64 res = r_reg_get_pack (core->dbg->reg, item, index, size);
// print selected index / wordsize
r_cons_printf ("0x%08" PFMT64x "\n", res);
}
}
} else {
eprintf ("cannot find multimedia register '%s'\n", name);
}
free (name);
} else {
// explicit size no name
RListIter *iter;
RRegItem *item;
RList *head;
r_debug_reg_sync (core->dbg, reg_type, false);
head = r_reg_get_list (core->dbg->reg, reg_type);
if (head) {
r_list_foreach (head, iter, item) {
if (item->type != reg_type) {
continue;
}
r_cons_printf ("%-5s = ", item->name);
cmd_debug_reg_print_packed_reg (core, item, explicit_size, pack_show);
}
}
}
} else { // drm # no arg
if (str[1] == 'y') { // drmy
r_debug_reg_sync (core->dbg, R_REG_TYPE_YMM, false);
r_debug_reg_list (core->dbg, R_REG_TYPE_YMM, 256, NULL, 0, 0);
} else { // drm
r_debug_reg_sync (core->dbg, R_REG_TYPE_XMM, false);
r_debug_reg_list (core->dbg, R_REG_TYPE_XMM, 128, NULL, 0, 0);
}
}
//r_debug_drx_list (core->dbg);
break;
case 'f': // "drf"
//r_debug_drx_list (core->dbg);
if (str[1]=='?') {
eprintf ("usage: drf [fpureg] [= value]\n");
} else if (str[1]==' ') {
char *p, *name = strdup (str + 2);
char *eq = strchr (name, '=');
if (eq) {
*eq++ = 0;
}
p = strchr (name, ' ');
if (p) {
*p++ = 0;
}
RRegItem *item = r_reg_get (core->dbg->reg, name, -1);
if (item) {
if (eq) {
long double val = 0.0f;
#if __windows__
double dval = 0.0f;
sscanf (eq, "%lf", (double*)&dval);
val = dval;
#else
sscanf (eq, "%Lf", &val);
#endif
r_reg_set_double (core->dbg->reg, item, val);
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, true);
r_debug_reg_sync (core->dbg, R_REG_TYPE_FPU, true);
} else {
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
r_debug_reg_sync (core->dbg, R_REG_TYPE_FPU, false);
long double res = r_reg_get_longdouble (core->dbg->reg, item);
r_cons_printf ("%Lf\n", res);
}
} else {
/* note, that negative type forces sync to print the regs from the backend */
eprintf ("cannot find multimedia register '%s'\n", name);
}
free (name);
} else {
//TODO: Do not use this hack to print fpu register
r_debug_reg_sync (core->dbg, -R_REG_TYPE_FPU, false);
}
break;
case 'p': // "drp"
cmd_reg_profile (core, 'd', str);
break;
case 't': { // "drt"
char rad = 0;
switch (str[1]) {
case '\0': // "drt"
for (i = 0; (name = r_reg_get_type (i)); i++) {
r_cons_println (name);
}
break;
case 'j': // "drtj"
case '*': // "drt*"
rad = str[1];
str++;
if (rad == 'j' && !str[1]) {
PJ *pj = r_core_pj_new (core);
if (!pj) {
break;
}
pj_a (pj);
for (i = 0; (name = r_reg_get_type (i)); i++) {
pj_s (pj, name);
}
pj_end (pj);
r_cons_println (pj_string (pj));
pj_free (pj);
break;
}
// fallthrough
case ' ': // "drt "
{
int role = r_reg_get_name_idx (str+2);
const char *regname = r_reg_get_name (core->dbg->reg, role);
if (!regname) {
regname = str + 2;
}
size = atoi (regname);
if (size < 1) {
char *arg = strchr (str + 2, ' ');
size = 0;
if (arg) {
*arg++ = 0;
size = atoi (arg);
}
type = r_reg_type_by_name (str + 2);
r_debug_reg_sync (core->dbg, type, false);
PJ *pj = (tolower (rad) == 'j')? r_core_pj_new (core): NULL;
r_debug_reg_list (core->dbg, type, size, pj, rad, use_color);
if (pj) {
char *s = pj_drain (pj);
r_cons_printf ("%s\n", s);
free (s);
}
} else {
if (type != R_REG_TYPE_LAST) {
r_debug_reg_sync (core->dbg, type, false);
r_debug_reg_list (core->dbg, type, size, NULL, rad, use_color);
} else {
eprintf ("cmd_debug_reg: unknown type\n");
}
}
break;
}
case '?': // "drt?"
default:
r_core_cmd_help (core, help_msg_drt);
break;
}
}
break;
case 'n': // "drn"
{
char *foo = strdup (str+2);
r_str_case (foo, true);
name = r_reg_get_name (core->dbg->reg, r_reg_get_name_idx (foo));
if (name && *name) {
r_cons_println (name);
} else eprintf ("oops. try drn [pc|sp|bp|a0|a1|a2|a3|a4|r0|r1|zf|sf|nf|of]\n");
free (foo);
}
break;
case 'd': // "drd"
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, bits, NULL, 3, use_color); // xxx detect which one is current usage
break;
case 'o': // "dro"
r_reg_arena_swap (core->dbg->reg, false);
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, bits, NULL, 0, use_color); // xxx detect which one is current usage
r_reg_arena_swap (core->dbg->reg, false);
break;
case ',': // "dr,"
if (r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false)) {
__tableRegList (core, core->dbg->reg, str + 1);
} else {
eprintf ("cannot retrieve registers from pid %d\n", core->dbg->pid);
}
break;
case '=': // "dr="
{
int pcbits2, pcbits = grab_bits (core, str + 1, &pcbits2);
if (r_config_get_i (core->config, "cfg.debug")) {
if (r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false)) {
if (pcbits && pcbits != bits) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits, NULL, '=', use_color); // xxx detect which one is current usage
}
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, bits, NULL, '=', use_color); // xxx detect which one is current usage
if (pcbits2) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits2, NULL, '=', use_color); // xxx detect which one is current usage
}
} //else eprintf ("cannot retrieve registers from pid %d\n", core->dbg->pid);
} else {
RReg *orig = core->dbg->reg;
core->dbg->reg = core->anal->reg;
if (pcbits && pcbits != bits) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits, NULL, '=', use_color); // xxx detect which one is current usage
}
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, bits, NULL, '=', use_color); // xxx detect which one is current usage
core->dbg->reg = orig;
}
}
break;
case '.':
if (r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false)) {
int pcbits2, pcbits = grab_bits (core, str + 1, &pcbits2);
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits, NULL, '.', use_color);
if (pcbits2) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits2, NULL, '.', use_color);
}
}
break;
case '*': // "dr*"
if (r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false)) {
int pcbits2, pcbits = grab_bits (core, str + 1, &pcbits2);
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits, NULL, '*', use_color);
if (pcbits2) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits2, NULL, '*', use_color);
}
r_flag_space_pop (core->flags);
}
break;
case 'i': // "dri"
r_core_debug_ri (core, core->dbg->reg, 0);
break;
case 'r': // "drr"
switch (str[1]) {
case 'j': // "drrj"
r_core_debug_rr (core, core->dbg->reg, 'j');
break;
default:
r_core_debug_rr (core, core->dbg->reg, 0);
break;
}
break;
case 'j': // "drj"
case '\0': // "dr"
if (r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false)) {
int pcbits = core->anal->bits;
const char *pcname = r_reg_get_name (core->anal->reg, R_REG_NAME_PC);
RRegItem *reg = r_reg_get (core->anal->reg, pcname, 0);
if (reg) {
if (core->rasm->bits != reg->size) {
pcbits = reg->size;
}
}
if (str[0] == 'j') {
PJ *pj = r_core_pj_new (core);
if (!pj) {
return;
}
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits, pj, 'j', use_color);
} else {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, pcbits, NULL, 0, use_color);
}
} else {
eprintf ("cannot retrieve registers from pid %d\n", core->dbg->pid);
}
break;
case ' ': // "dr"
arg = strchr (str + 1, '=');
if (arg) {
*arg = 0;
char *string = r_str_trim_dup (str + 1);
const char *regname = r_reg_get_name (core->dbg->reg, r_reg_get_name_idx (string));
if (!regname) {
regname = string;
}
r = r_reg_get (core->dbg->reg, regname, -1); //R_REG_TYPE_GPR);
if (r) {
if (r->flags) {
r_cons_printf ("0x%08"PFMT64x" ->",
r_reg_get_value (core->dbg->reg, r));
r_reg_set_bvalue (core->dbg->reg, r, arg+1);
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, true);
r_cons_printf ("0x%08"PFMT64x"\n",
r_reg_get_value (core->dbg->reg, r));
} else {
r_cons_printf ("0x%08"PFMT64x" ->",
r_reg_get_value (core->dbg->reg, r));
r_reg_set_value (core->dbg->reg, r,
r_num_math (core->num, arg+1));
r_debug_reg_sync (core->dbg, R_REG_TYPE_ALL, true);
r_cons_printf ("0x%08"PFMT64x"\n",
r_reg_get_value (core->dbg->reg, r));
}
} else {
eprintf ("unknown register '%s'\n", string);
}
free (string);
// update flags here
r_core_cmdf (core, ".dr*%d", bits);
return;
}
size = atoi (str + 1);
if (size) {
r_debug_reg_list (core->dbg, R_REG_TYPE_GPR, size, NULL, str[0], use_color);
} else {
char *comma = strchr (str + 1, ',');
if (comma) {
char *args = strdup (str + 1);
char argc = r_str_split (args, ',');
for (i = 0; i < argc; i++) {
showreg (core, r_str_word_get0 (args, i));
}
free (args);
} else {
showreg (core, str + 1);
}
}
}
}
static void backtrace_vars(RCore *core, RList *frames) {
RDebugFrame *f;
RListIter *iter;
// anal vs debug ?
const char *sp = r_reg_get_name (core->anal->reg, R_REG_NAME_SP);
const char *bp = r_reg_get_name (core->anal->reg, R_REG_NAME_BP);
if (!sp) {
sp = "SP";
}
if (!bp) {
bp = "BP";
}
RReg *r = core->anal->reg;
ut64 dsp = r_reg_getv (r, sp);
ut64 dbp = r_reg_getv (r, bp);
int n = 0;
r_list_foreach (frames, iter, f) {
ut64 s = f->sp ? f->sp : dsp;
ut64 b = f->bp ? f->bp : dbp;
r_reg_setv (r, bp, s);
r_reg_setv (r, sp, b);
//////////
char flagdesc[1024], flagdesc2[1024];
RFlagItem *fi = r_flag_get_at (core->flags, f->addr, true);
flagdesc[0] = flagdesc2[0] = 0;
if (fi) {
if (fi->offset != f->addr) {
int delta = (int)(f->addr - fi->offset);
if (delta > 0) {
snprintf (flagdesc, sizeof (flagdesc),
"%s+%d", fi->name, delta);
} else if (delta < 0) {
snprintf (flagdesc, sizeof (flagdesc),
"%s%d", fi->name, delta);
} else {
snprintf (flagdesc, sizeof (flagdesc),
"%s", fi->name);
}
} else {
snprintf (flagdesc, sizeof (flagdesc),
"%s", fi->name);
}
}
//////////
RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, f->addr, 0);
// char *str = r_str_newf ("[frame %d]", n);
r_cons_printf ("%d 0x%08"PFMT64x" sp: 0x%08"PFMT64x" %-5d"
"[%s] %s %s\n", n, f->addr, f->sp, (int)f->size,
fcn ? fcn->name : "??", flagdesc, flagdesc2);
eprintf ("afvd @ 0x%"PFMT64x"\n", f->addr);
r_cons_push();
char *res = r_core_cmd_strf (core, "afvd@0x%"PFMT64x, f->addr);
r_cons_pop();
r_cons_printf ("%s", res);
free (res);
n++;
}
r_reg_setv (r, bp, dbp);
r_reg_setv (r, sp, dsp);
}
static void asciiart_backtrace(RCore *core, RList *frames) {
// TODO: show local variables
// TODO: show function/flags/symbols related
// TODO: show contents of stack
// TODO: honor scr.color
RDebugFrame *f;
RListIter *iter;
bool mymap = false;
// anal vs debug ?
const char *sp = r_reg_get_name (core->anal->reg, R_REG_NAME_SP);
const char *bp = r_reg_get_name (core->anal->reg, R_REG_NAME_BP);
if (!sp) {
sp = "SP";
}
if (!bp) {
bp = "BP";
}
ut64 dsp = r_reg_getv (core->anal->reg, sp);
ut64 dbp = r_reg_getv (core->anal->reg, bp);
RDebugMap *map = r_debug_map_get (core->dbg, dsp);
if (!map) {
mymap = true;
map = R_NEW0 (RDebugMap);
map->addr = UT64_MAX;
map->addr_end = UT64_MAX;
}
r_cons_printf ("0x%016"PFMT64x" STACK END ^^^\n", map->addr);
r_cons_printf ("0x%016"PFMT64x" STACK POINTER: %s\n", dsp, sp);
r_cons_printf (" .------------------------.\n");
int n = 0;
r_list_foreach (frames, iter, f) {
ut64 s = f->sp ? f->sp : dsp;
ut64 b = f->bp ? f->bp : dbp;
char *str = r_str_newf ("[frame %d]", n);
r_cons_printf ("0x%016"PFMT64x" |%4s %10s | ; size %" PFMTDPTR "\n", s, sp, str, (ptrdiff_t)(s - b));
free (str);
r_cons_printf (" | ... |\n");
r_cons_printf ("0x%016"PFMT64x" |%4s 0x%016"PFMT64x" | %s\n", b, bp, f->addr, "; return address");
r_cons_printf (" )------------------------(\n");
// eprintf ("0x%08llx 0x%08llx 0x%08llx\n", f->addr, s, b);
n++;
}
r_cons_printf (" | ... |\n");
r_cons_printf (" `------------------------'\n");
r_cons_printf ("0x%016"PFMT64x" STACK BOTTOM\n", map->addr_end);
if (mymap) {
r_debug_map_free (map);
}
}
static void get_backtrace_info(RCore* core, RDebugFrame* frame, ut64 addr, char** flagdesc, char** flagdesc2, char** pcstr, char** spstr) {
RFlagItem *f = r_flag_get_at (core->flags, frame->addr, true);
*flagdesc = NULL;
*flagdesc2 = NULL;
if (f) {
if (f->offset != addr) {
int delta = (int)(frame->addr - f->offset);
if (delta > 0) {
*flagdesc = r_str_newf ("%s+%d", f->name, delta);
} else if (delta < 0) {
*flagdesc = r_str_newf ("%s%d", f->name, delta);
} else {
*flagdesc = r_str_newf ("%s", f->name);
}
} else {
*flagdesc = r_str_newf ("%s", f->name);
}
}
f = r_flag_get_at (core->flags, frame->addr, true);
if (f && !strchr (f->name, '.')) {
f = r_flag_get_at (core->flags, frame->addr - 1, true);
}
if (f) {
if (f->offset != addr) {
int delta = (int)(frame->addr - 1 - f->offset);
if (delta > 0) {
*flagdesc2 = r_str_newf ("%s+%d", f->name, delta + 1);
} else if (delta < 0) {
*flagdesc2 = r_str_newf ("%s%d", f->name, delta + 1);
} else {
*flagdesc2 = r_str_newf ("%s+1", f->name);
}
} else {
*flagdesc2 = r_str_newf ("%s", f->name);
}
}
if (!r_str_cmp (*flagdesc, *flagdesc2, -1)) {
free (*flagdesc2);
*flagdesc2 = NULL;
}
if (pcstr && spstr) {
if (core->dbg->bits & R_SYS_BITS_64) {
*pcstr = r_str_newf ("0x%-16" PFMT64x, frame->addr);
*spstr = r_str_newf ("0x%-16" PFMT64x, frame->sp);
} else if (core->dbg->bits & R_SYS_BITS_32) {
*pcstr = r_str_newf ("0x%-8" PFMT64x, frame->addr);
*spstr = r_str_newf ("0x%-8" PFMT64x, frame->sp);
} else {
*pcstr = r_str_newf ("0x%" PFMT64x, frame->addr);
*spstr = r_str_newf ("0x%" PFMT64x, frame->sp);
}
}
}
static void static_debug_stop(void *u) {
RDebug *dbg = (RDebug *)u;
r_debug_stop (dbg);
}
static void core_cmd_dbi(RCore *core, const char *input, const ut64 idx) {
int i;
char *p;
RBreakpointItem *bpi;
switch (input[2]) {
case ' ': // "dbi."
{
const int index = r_bp_get_index_at (core->dbg->bp, idx);
if (index != -1) {
r_cons_printf ("%d\n", index);
}
}
break;
case '-': // "dbi-"
{
if (!r_bp_del_index (core->dbg->bp, idx)) {
eprintf ("Breakpoint with index %d not found\n", (int)idx);
}
}
break;
case '.': // "dbi."
{
const int index = r_bp_get_index_at (core->dbg->bp, core->offset);
if (index != -1) {
r_cons_printf ("%d\n", index);
}
}
break;
case 0: // "dbi"
for (i = 0; i < core->dbg->bp->bps_idx_count; i++) {
if ((bpi = core->dbg->bp->bps_idx[i])) {
r_cons_printf ("%d 0x%08"PFMT64x" E:%d T:%d\n",
i, bpi->addr, bpi->enabled, bpi->trace);
}
}
break;
case 'x': // "dbix"
if (input[3] == ' ') {
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
char *expr = strchr (input + 4, ' ');
if (expr) {
free (bpi->expr);
bpi->expr = strdup (expr);
}
}
r_cons_printf ("%d\n", (int)idx);
} else {
for (i = 0; i < core->dbg->bp->bps_idx_count; i++) {
RBreakpointItem *bp = core->dbg->bp->bps_idx[i];
if (bp) {
r_cons_printf ("%d 0x%08"PFMT64x" %s\n", i, bp->addr, bp->expr);
}
}
}
break;
case 'c': // "dbic"
p = strchr (input + 3, ' ');
if (p) {
char *q = strchr (p + 1, ' ');
if (q) {
*q++ = 0;
ut64 addr = r_num_math (core->num, p);
bpi = r_bp_get_index (core->dbg->bp, addr);
if (bpi) {
bpi->data = strdup (q);
} else {
eprintf ("Cannot set command\n");
}
} else {
eprintf ("|Usage: dbic # cmd\n");
}
} else {
eprintf ("|Usage: dbic # cmd\n");
}
break;
case 'e': // "dbie"
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
bpi->enabled = true;
} else {
eprintf ("Cannot unset tracepoint\n");
}
break;
case 'd': // "dbid"
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
bpi->enabled = false;
} else {
eprintf ("Cannot unset tracepoint\n");
}
break;
case 's': // "dbis"
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
bpi->enabled = !!!bpi->enabled;
} else {
eprintf ("Cannot unset tracepoint\n");
}
break;
case 't': // "dbite" "dbitd" ...
switch (input[3]) {
case 'e':
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
bpi->trace = true;
} else {
eprintf ("Cannot unset tracepoint\n");
}
break;
case 'd':
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
bpi->trace = false;
} else eprintf ("Cannot unset tracepoint\n");
break;
case 's':
if ((bpi = r_bp_get_index (core->dbg->bp, idx))) {
bpi->trace = !!!bpi->trace;
} else {
eprintf ("Cannot unset tracepoint\n");
}
break;
}
break;
}
}
#if __WINDOWS__
#include "..\debug\p\native\windows\windows_message.h"
#endif
#define DB_ARG(x) r_str_word_get0(str, x)
static void add_breakpoint(RCore *core, const char *input, bool hwbp, bool watch) {
RBreakpointItem *bpi;
ut64 addr;
int i = 0;
char *str = strdup (r_str_trim_head_ro (input + 1));
int sl = r_str_word_set0 (str);
// For dbw every second argument is 'rw', so we need to skip it.
for (; i < sl; i += 1 + (watch ? 1 : 0)) {
if (*DB_ARG (i) == '-') {
r_bp_del (core->dbg->bp, r_num_math (core->num, DB_ARG (i) + 1));
} else {
int rw = 0;
if (watch) {
if (sl % 2 == 0) {
if (!strcmp (DB_ARG (i + 1), "r")) {
rw = R_BP_PROT_READ;
} else if (!strcmp (DB_ARG (i + 1), "w")) {
rw = R_BP_PROT_WRITE;
} else if (!strcmp (DB_ARG (i + 1), "rw")) {
rw = R_BP_PROT_ACCESS;
} else {
r_core_cmd_help (core, help_msg_dbw);
break;
}
} else {
r_core_cmd_help (core, help_msg_dbw);
break;
}
}
addr = r_num_math (core->num, DB_ARG (i));
bpi = r_debug_bp_add (core->dbg, addr, hwbp, watch, rw, NULL, 0);
if (bpi) {
free (bpi->name);
if (!strcmp (DB_ARG (i), "$$")) {
RFlagItem *f = r_core_flag_get_by_spaces (core->flags, addr);
if (f) {
if (addr > f->offset) {
bpi->name = r_str_newf ("%s+0x%" PFMT64x, f->name, addr - f->offset);
} else {
bpi->name = strdup (f->name);
}
} else {
bpi->name = r_str_newf ("0x%08" PFMT64x, addr);
}
} else {
bpi->name = strdup (DB_ARG (i));
}
} else {
eprintf ("Cannot set breakpoint at '%s'\n", DB_ARG (i));
}
}
}
free (str);
}
static void r_core_cmd_bp(RCore *core, const char *input) {
RBreakpointItem *bpi;
int i, hwbp = r_config_get_i (core->config, "dbg.hwbp");
RDebugFrame *frame;
RListIter *iter;
const char *p;
bool watch = false;
RList *list;
ut64 addr, idx;
p = strchr (input, ' ');
addr = p? r_num_math (core->num, p + 1): UT64_MAX;
idx = addr; // 0 is valid index
if (!addr) {
addr = UT64_MAX;
}
char *str = NULL;
switch (input[1]) {
case '.':
if (input[2]) {
ut64 addr = r_num_tail (core->num, core->offset, input + 2);
bpi = r_debug_bp_add (core->dbg, addr, hwbp, false, 0, NULL, 0);
if (!bpi) {
eprintf ("Unable to add breakpoint (%s)\n", input + 2);
}
} else {
bpi = r_bp_get_at (core->dbg->bp, core->offset);
if (bpi) {
r_cons_printf ("breakpoint %s %s %s\n",
r_str_rwx_i (bpi->perm),
bpi->enabled ? "enabled" : "disabled",
r_str_get (bpi->name));
}
}
break;
case 'f':
{
RList *symbols = r_bin_get_symbols (core->bin);
RBinSymbol *symbol;
r_list_foreach (symbols, iter, symbol) {
if (symbol->type && !strcmp (symbol->type, R_BIN_TYPE_FUNC_STR)) {
if (r_anal_noreturn_at (core->anal, symbol->vaddr)) {
bpi = r_debug_bp_add (core->dbg, symbol->vaddr, hwbp, false, 0, NULL, 0);
if (bpi) {
bpi->name = r_str_newf ("%s.%s", "sym", symbol->name);
} else {
eprintf ("Unable to add a breakpoint"
"into a noreturn function %s at addr 0x%"PFMT64x"\n",
symbol->name, symbol->vaddr);
}
}
}
}
}
break;
case 'x': // "dbx"
if (input[2] == ' ') {
if (addr == UT64_MAX) {
addr = core->offset;
}
bpi = r_bp_get_at (core->dbg->bp, addr);
if (bpi) {
free (bpi->expr);
bpi->expr = strdup (input + 3);
}
} else {
RBreakpointItem *bp;
r_list_foreach (core->dbg->bp->bps, iter, bp) {
r_cons_printf ("0x%08"PFMT64x" %s\n", bp->addr, r_str_get (bp->expr));
}
}
break;
case 't': // "dbt"
switch (input[2]) {
case 'v': // "dbtv"
list = r_debug_frames (core->dbg, addr);
backtrace_vars (core, list);
r_list_free (list);
break;
case 'a': // "dbta"
list = r_debug_frames (core->dbg, addr);
asciiart_backtrace (core, list);
r_list_free (list);
break;
case 'e': // "dbte"
for (p = input + 3; *p == ' '; p++) {
/* nothing to do here */
}
if (*p == '*') {
r_bp_set_trace_all (core->dbg->bp,true);
} else if (!r_bp_set_trace (core->dbg->bp, addr, true)) {
eprintf ("Cannot set tracepoint\n");
}
break;
case 'd': // "dbtd"
for (p = input + 3; *p==' ';p++) {
//nothing to see here
}
if (*p == '*') {
r_bp_set_trace_all (core->dbg->bp, false);
} else if (!r_bp_set_trace (core->dbg->bp, addr, false)) {
eprintf ("Cannot unset tracepoint\n");
}
break;
case 's': // "dbts"
bpi = r_bp_get_at (core->dbg->bp, addr);
if (bpi) {
bpi->trace = !!!bpi->trace;
} else {
eprintf ("Cannot unset tracepoint\n");
}
break;
case 'j': { // "dbtj"
PJ *pj = r_core_pj_new (core);
if (!pj) {
return;
}
addr = UT64_MAX;
if (input[2] == ' ' && input[3]) {
addr = r_num_math (core->num, input + 2);
}
i = 0;
list = r_debug_frames (core->dbg, addr);
pj_a (pj);
r_list_foreach (list, iter, frame) {
char *flagdesc, *flagdesc2, *desc;
get_backtrace_info (core, frame, addr, &flagdesc, &flagdesc2, NULL, NULL);
RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, frame->addr, 0);
desc = r_str_newf ("%s%s", r_str_get (flagdesc), r_str_get (flagdesc2));
pj_o (pj);
pj_ki (pj, "idx", i);
pj_kn (pj, "pc", frame->addr);
pj_kn (pj, "sp", frame->sp);
pj_ki (pj, "frame_size", frame->size);
pj_ks (pj, "fname", fcn ? fcn->name : "");
pj_ks (pj, "desc", desc);
pj_end (pj);
i++;
free (flagdesc);
free (flagdesc2);
free (desc);
}
pj_end (pj);
r_cons_println (pj_string (pj));
pj_free (pj);
r_list_free (list);
break;
}
case '=': // dbt=
addr = UT64_MAX;
if (input[2] == ' ' && input[3]) {
addr = r_num_math (core->num, input + 2);
}
i = 0;
list = r_debug_frames (core->dbg, addr);
r_list_reverse (list);
r_list_foreach (list, iter, frame) {
switch (input[3]) {
case 0:
r_cons_printf ("%s0x%08"PFMT64x,
(i ? " " : ""), frame->addr);
break;
case 's':
r_cons_printf ("%s0x%08"PFMT64x,
(i ? " " : ""), frame->sp);
break;
case 'b':
r_cons_printf ("%s0x%08"PFMT64x,
(i ? " " : ""), frame->bp);
break;
case '?':
default:
r_core_cmd0 (core, "db?~dbt");
break;
}
i++;
}
r_cons_newline ();
r_list_free (list);
break;
case '*': // dbt*
addr = UT64_MAX;
if (input[2] == ' ' && input[3]) {
addr = r_num_math (core->num, input + 2);
}
i = 0;
list = r_debug_frames (core->dbg, addr);
r_list_reverse (list);
r_cons_printf ("f-bt.*\n");
r_list_foreach (list, iter, frame) {
r_cons_printf ("f bt.frame%d = 0x%08"PFMT64x"\n", i, frame->addr);
r_cons_printf ("f bt.frame%d.stack %d 0x%08"PFMT64x"\n", i, frame->size, frame->sp);
i++;
}
r_list_free (list);
break;
case 0: // "dbt" -- backtrace
addr = UT64_MAX;
if (input[2] == ' ' && input[3]) {
addr = r_num_math (core->num, input + 2);
}
i = 0;
list = r_debug_frames (core->dbg, addr);
r_list_foreach (list, iter, frame) {
char *flagdesc, *flagdesc2, *pcstr, *spstr;
get_backtrace_info (core, frame, addr, &flagdesc, &flagdesc2, &pcstr, &spstr);
RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, frame->addr, 0);
r_cons_printf ("%d %s sp: %s %-5d"
"[%s] %s %s\n", i++,
pcstr, spstr,
(int)frame->size,
fcn ? fcn->name : "??",
r_str_get (flagdesc),
r_str_get (flagdesc2));
free (flagdesc);
free (flagdesc2);
free (pcstr);
free (spstr);
}
r_list_free (list);
break;
case '?':
default:
r_core_cmd_help (core, help_msg_dbt);
break;
}
break;
case 'b': // "dbb"
if (input[2]) {
core->dbg->bp->delta = (st64)r_num_math (core->num, input + 2);
} else {
r_cons_printf ("%"PFMT64d"\n", core->dbg->bp->delta);
}
break;
case 'm': // "dbm"
if (input[2] && input[3]) {
char *module = r_str_trim_dup (input + 3);
st64 delta = 0;
char *sdelta = (char *)r_str_lchr (module, ' ');
if (!sdelta) {
eprintf ("Usage: dbm [modulename] [delta]\n");
free (module);
break;
}
*sdelta++ = 0;
delta = (ut64)r_num_math (core->num, sdelta);
bpi = r_debug_bp_add (core->dbg, 0, hwbp, false, 0, module, delta);
if (!bpi) {
eprintf ("Cannot set breakpoint.\n");
}
free (module);
}
break;
case 'j': r_bp_list (core->dbg->bp, 'j'); break;
case '*': r_bp_list (core->dbg->bp, 1); break;
case '\0': r_bp_list (core->dbg->bp, 0); break;
case '-': // "db-"
if (input[2] == '*') {
r_bp_del_all (core->dbg->bp);
} else {
#define DB_ARG(x) r_str_word_get0(str, x)
char *str = strdup (r_str_trim_head_ro (input +2));
int i = 0;
int sl = r_str_word_set0 (str);
for ( ; i < sl; i++) {
const ut64 addr = r_num_math (core->num, DB_ARG (i));
r_bp_del (core->dbg->bp, addr);
}
free (str);
}
break;
case 'c': // "dbc"
if (input[2] == ' ') {
char *inp = strdup (input + 3);
if (inp) {
char *arg = strchr (inp, ' ');
if (arg) {
*arg++ = 0;
addr = r_num_math (core->num, inp);
bpi = r_bp_get_at (core->dbg->bp, addr);
if (bpi) {
free (bpi->data);
bpi->data = strdup (arg);
} else {
eprintf ("No breakpoint defined at 0x%08"PFMT64x"\n", addr);
}
} else {
eprintf ("- Missing argument\n");
}
free (inp);
} else {
eprintf ("Cannot strdup. Your heap is fucked up\n");
}
} else {
eprintf ("Use: dbc [addr] [command]\n");
}
break;
case 'C': // "dbC"
if (input[2] == ' ') {
char *inp = strdup (input + 3);
if (inp) {
char *arg = strchr (inp, ' ');
if (arg) {
*arg++ = 0;
addr = r_num_math (core->num, inp);
bpi = r_bp_get_at (core->dbg->bp, addr);
if (bpi) {
free (bpi->cond);
bpi->cond = strdup (arg);
} else {
eprintf ("No breakpoint defined at 0x%08"PFMT64x"\n", addr);
}
} else {
eprintf ("1 Missing argument\n");
}
free (inp);
} else {
eprintf ("Cannot strdup. Your heap is fucked up\n");
}
} else {
eprintf ("Use: dbC [addr] [command]\n");
}
break;
case 's': // "dbs"
addr = r_num_math (core->num, input + 2);
bpi = r_bp_get_at (core->dbg->bp, addr);
if (bpi) {
//bp->enabled = !bp->enabled;
// XXX(jjd): this ^^ is what I would think toggling means...
r_bp_del (core->dbg->bp, addr);
} else {
// XXX(jjd): does t his need an address validity check??
bpi = r_debug_bp_add (core->dbg, addr, hwbp, false, 0, NULL, 0);
if (!bpi) {
eprintf ("Cannot set breakpoint (%s)\n", input + 2);
}
}
r_bp_enable (core->dbg->bp, r_num_math (core->num, input + 2), true, 0);
break;
case 'n': // "dbn"
bpi = r_bp_get_at (core->dbg->bp, core->offset);
if (input[2] == ' ') {
if (bpi) {
free (bpi->name);
bpi->name = strdup (input + 3);
} else {
eprintf ("Cannot find breakpoint at "
"0x%08"PFMT64x"\n", core->offset);
}
} else {
if (bpi && bpi->name) {
r_cons_println (bpi->name);
}
}
break;
case 'e': // "dbe"
for (p = input + 2; *p == ' '; p++);
if (*p == '*') r_bp_enable_all (core->dbg->bp,true);
else {
for (; *p && *p != ' '; p++);
r_bp_enable (core->dbg->bp, r_num_math (core->num, input + 2), true, r_num_math (core->num, p));
}
break;
case 'd': // "dbd"
for (p = input + 2; *p == ' '; p++);
if (*p == '*') r_bp_enable_all (core->dbg->bp, false);
else {
for (; *p && *p != ' '; p++);
r_bp_enable (core->dbg->bp, r_num_math (core->num, input + 2), false, r_num_math (core->num, p));
}
break;
case 'h': // "dbh"
switch (input[2]) {
case 0:
r_bp_plugin_list (core->dbg->bp);
break;
case ' ':
if (input[3]) {
if (!r_bp_use (core->dbg->bp, input + 3, core->anal->bits)) {
eprintf ("Invalid name: '%s'.\n", input + 3);
}
}
break;
case '-':
if (input[3]) {
if (!r_bp_plugin_del (core->dbg->bp, input + 3)) {
eprintf ("Invalid name: '%s'.\n", input + 3);
}
}
break;
case '?':
default:
eprintf ("Usage: dh [plugin-name] # select a debug handler plugin\n");
break;
}
break;
#if __WINDOWS__
case 'W': // "dbW"
if (input[2] == ' ') {
if (r_w32_add_winmsg_breakpoint (core->dbg, input + 3)) {
r_cons_print ("Breakpoint set.\n");
} else {
r_cons_print ("Breakpoint not set.\n");
}
}
break;
#endif
case 'w': // "dbw"
add_breakpoint (core, input + 1, hwbp, true);
break;
case 'H': // "dbH"
add_breakpoint (core, input + 1, true, watch);
break;
case ' ': // "db"
add_breakpoint (core, input + 1, hwbp, watch);
break;
case 'i':
core_cmd_dbi (core, input, idx);
break;
case '?':
default:
r_core_cmd_help (core, help_msg_db);
break;
}
free (str);
}
static RTreeNode *add_trace_tree_child (Sdb *db, RTree *t, RTreeNode *cur, ut64 addr) {
struct trace_node *t_node;
char dbkey[TN_KEY_LEN];
snprintf (dbkey, TN_KEY_LEN, TN_KEY_FMT, addr);
t_node = (struct trace_node *)(size_t)sdb_num_get (db, dbkey, NULL);
if (!t_node) {
t_node = R_NEW0 (struct trace_node);
t_node->addr = addr;
t_node->refs = 1;
sdb_num_set (db, dbkey, (ut64)(size_t)t_node, 0);
} else {
t_node->refs++;
}
return r_tree_add_node (t, cur, t_node);
}
static RCore *_core = NULL;
static void trace_traverse_pre (RTreeNode *n, RTreeVisitor *vis) {
const char *name = "";
struct trace_node *tn = n->data;
unsigned int i;
if (!tn) return;
for (i = 0; i < n->depth - 1; i++) {
r_cons_printf (" ");
}
if (_core) {
RFlagItem *f = r_flag_get_at (_core->flags, tn->addr, true);
if (f) {
name = f->name;
}
}
r_cons_printf (" 0x%08"PFMT64x" refs %d %s\n", tn->addr, tn->refs, name);
}
static void trace_traverse (RTree *t) {
RTreeVisitor vis = { 0 };
/* clear the line on stderr, because somebody has written there */
fprintf (stderr, "\x1b[2K\r");
fflush (stderr);
vis.pre_visit = (RTreeNodeVisitCb)trace_traverse_pre;
r_tree_dfs (t, &vis);
}
static void do_debug_trace_calls(RCore *core, ut64 from, ut64 to, ut64 final_addr) {
bool trace_libs = r_config_get_i (core->config, "dbg.trace.libs");
bool shallow_trace = r_config_get_i (core->config, "dbg.trace.inrange");
Sdb *tracenodes = core->dbg->tracenodes;
RTree *tr = core->dbg->tree;
RDebug *dbg = core->dbg;
ut64 debug_to = UT64_MAX;
RTreeNode *cur;
ut64 addr = 0;
int n = 0;
if (!trace_libs) {
#if NOOP
RList *bounds = r_core_get_boundaries_prot (core, -1, "dbg.program", "search");
r_list_free (bounds);
#endif
}
/* set root if not already present */
r_tree_add_node (tr, NULL, NULL);
cur = tr->root;
while (true) {
ut8 buf[32];
RAnalOp aop;
int addr_in_range;
if (r_cons_is_breaked()) {
break;
}
if (r_debug_is_dead (dbg)) {
break;
}
if (debug_to != UT64_MAX && !r_debug_continue_until (dbg, debug_to)) {
break;
}
if (!r_debug_step (dbg, 1)) {
break;
}
debug_to = UT64_MAX;
if (!r_debug_reg_sync (dbg, R_REG_TYPE_GPR, false)) {
break;
}
addr = r_debug_reg_get (dbg, "PC");
if (addr == final_addr) {
//we finished the tracing so break the loop
break;
}
addr_in_range = addr >= from && addr < to;
r_io_read_at (core->io, addr, buf, sizeof (buf));
r_anal_op (core->anal, &aop, addr, buf, sizeof (buf), R_ANAL_OP_MASK_BASIC);
eprintf ("%d %"PFMT64x"\r", n++, addr);
switch (aop.type) {
case R_ANAL_OP_TYPE_UCALL:
case R_ANAL_OP_TYPE_ICALL:
case R_ANAL_OP_TYPE_RCALL:
case R_ANAL_OP_TYPE_IRCALL:
{
ut64 called_addr;
int called_in_range;
// store regs
// step into
// get pc
r_debug_step (dbg, 1);
r_debug_reg_sync (dbg, R_REG_TYPE_GPR, false);
called_addr = r_debug_reg_get (dbg, "PC");
called_in_range = called_addr >= from && called_addr < to;
if (!called_in_range && addr_in_range && !shallow_trace) {
debug_to = addr + aop.size;
}
if (addr_in_range || shallow_trace) {
cur = add_trace_tree_child (tracenodes, tr, cur, addr);
if (debug_to != UT64_MAX) {
cur = cur->parent;
}
}
// TODO: push pc+aop.length into the call path stack
break;
}
case R_ANAL_OP_TYPE_CALL:
{
int called_in_range = aop.jump >= from && aop.jump < to;
if (!called_in_range && addr_in_range && !shallow_trace) {
debug_to = aop.addr + aop.size;
}
if (addr_in_range || shallow_trace) {
cur = add_trace_tree_child (tracenodes, tr, cur, addr);
if (debug_to != UT64_MAX) {
cur = cur->parent;
}
}
break;
}
case R_ANAL_OP_TYPE_RET:
#if 0
// TODO: we must store ret value for each call in the graph path to do this check
r_debug_step (dbg, 1);
r_debug_reg_sync (dbg, R_REG_TYPE_GPR, false);
addr = r_debug_reg_get (dbg, "PC");
// TODO: step into and check return address if correct
// if not correct we are hijacking the control flow (exploit!)
#endif
if (cur != tr->root) {
cur = cur->parent;
}
#if 0
if (addr != gn->addr) {
eprintf ("Oops. invalid return address 0x%08"PFMT64x
"\n0x%08"PFMT64x"\n", addr, gn->addr);
}
#endif
break;
}
}
}
static void debug_trace_calls(RCore *core, const char *input) {
RBreakpointItem *bp_final = NULL;
int t = core->dbg->trace->enabled;
ut64 from = 0, to = UT64_MAX, final_addr = UT64_MAX;
if (r_debug_is_dead (core->dbg)) {
eprintf ("No process to debug.");
return;
}
if (*input == ' ') {
input = r_str_trim_head_ro (input);
ut64 first_n = r_num_math (core->num, input);
input = strchr (input, ' ');
if (input) {
input = r_str_trim_head_ro (input);
from = first_n;
to = r_num_math (core->num, input);
input = strchr (input, ' ');
if (input) {
input = r_str_trim_head_ro (input);
final_addr = r_num_math (core->num, input);
}
} else {
final_addr = first_n;
}
}
core->dbg->trace->enabled = 0;
r_cons_break_push (static_debug_stop, core->dbg);
r_reg_arena_swap (core->dbg->reg, true);
if (final_addr != UT64_MAX) {
int hwbp = r_config_get_i (core->config, "dbg.hwbp");
bp_final = r_debug_bp_add (core->dbg, final_addr, hwbp, false, 0, NULL, 0);
if (!bp_final) {
eprintf ("Cannot set breakpoint at final address (%"PFMT64x")\n", final_addr);
}
}
do_debug_trace_calls (core, from, to, final_addr);
if (bp_final) {
r_bp_del (core->dbg->bp, final_addr);
}
_core = core;
trace_traverse (core->dbg->tree);
core->dbg->trace->enabled = t;
r_cons_break_pop ();
}
static void r_core_debug_esil (RCore *core, const char *input) {
switch (input[0]) {
case '\0': // "de"
// list
r_debug_esil_watch_list (core->dbg);
break;
case ' ': // "de "
{
char *line = strdup (input + 1);
char *p, *q;
int done = 0;
int perm = 0, dev = 0;
p = strchr (line, ' ');
if (p) {
*p++ = 0;
if (strchr (line, 'r')) perm |= R_PERM_R;
if (strchr (line, 'w')) perm |= R_PERM_W;
if (strchr (line, 'x')) perm |= R_PERM_X;
q = strchr (p, ' ');
if (q) {
*q++ = 0;
dev = p[0];
r_debug_esil_watch (core->dbg, perm, dev, q);
done = 1;
}
}
if (!done) {
const char *help_de_msg[] = {
"Usage:", "de", " [perm] [reg|mem] [expr]",
NULL
};
r_core_cmd_help (core, help_de_msg);
}
free (line);
}
break;
case '-': // "de-"
r_debug_esil_watch_reset (core->dbg);
break;
case 'c': // "dec"
if (r_debug_esil_watch_empty (core->dbg)) {
eprintf ("Error: no esil watchpoints defined\n");
} else {
r_core_cmd0 (core, "aei");
r_debug_esil_prestep (core->dbg, r_config_get_i (core->config, "esil.prestep"));
r_debug_esil_continue (core->dbg);
}
break;
case 's': // "des"
if (input[1] == 'u' && input[2] == ' ') { // "desu"
ut64 addr, naddr, fin = r_num_math (core->num, input + 2);
r_core_cmd0 (core, "aei");
addr = r_debug_reg_get (core->dbg, "PC");
while (addr != fin) {
r_debug_esil_prestep (core->dbg, r_config_get_i (
core->config, "esil.prestep"));
r_debug_esil_step (core->dbg, 1);
naddr = r_debug_reg_get (core->dbg, "PC");
if (naddr == addr) {
eprintf ("Detected loophole\n");
break;
}
addr = naddr;
}
} else if (input[1] == '?' || !input[1]) {
r_core_cmd_help (core, help_msg_des);
} else {
r_core_cmd0 (core, "aei");
r_debug_esil_prestep (core->dbg, r_config_get_i (core->config, "esil.prestep"));
// continue
r_debug_esil_step (core->dbg, r_num_math (core->num, input + 1));
}
break;
case '?': // "de?"
default:
{
r_core_cmd_help (core, help_msg_de);
// TODO #7967 help refactor: move to detail
r_cons_printf ("Examples:\n"
" de r r rip # stop when reads rip\n"
" de rw m ADDR # stop when read or write in ADDR\n"
" de w r rdx # stop when rdx register is modified\n"
" de x m FROM..TO # stop when rip in range\n");
}
break;
}
}
static void r_core_debug_kill(RCore *core, const char *input) {
if (!input || *input == '?') {
if (input && input[1]) {
const char *signame, *arg = input + 1;
int signum = atoi (arg);
if (signum > 0) {
signame = r_signal_to_string (signum);
if (signame)
r_cons_println (signame);
} else {
signum = r_signal_from_string (arg);
if (signum > 0) {
r_cons_printf ("%d\n", signum);
}
}
} else {
r_core_cmd_help (core, help_msg_dk);
}
} else if (*input=='o') {
switch (input[1]) {
case 0: // "dko" - list signal skip/conts
r_debug_signal_list (core->dbg, 1);
break;
case ' ': // dko SIGNAL
if (input[2]) {
char *p, *name = strdup (input + 2);
int signum = atoi (name);
p = strchr (name, ' ');
if (p) *p++ = 0; /* got SIGNAL and an action */
// Actions:
// - pass
// - trace
// - stop
if (signum<1) signum = r_signal_from_string (name);
if (signum>0) {
if (!p || !p[0]) { // stop (the usual)
r_debug_signal_setup (core->dbg, signum, 0);
} else if (*p == 's') { // skip
r_debug_signal_setup (core->dbg, signum, R_DBG_SIGNAL_SKIP);
} else if (*p == 'c') { // cont
r_debug_signal_setup (core->dbg, signum, R_DBG_SIGNAL_CONT);
} else {
eprintf ("Invalid option: %s\n", p);
}
} else {
eprintf ("Invalid signal: %s\n", input + 2);
}
free (name);
break;
}
/* fall through */
case '?':
default:
{
r_core_cmd_help (core, help_msg_dko);
// TODO #7967 help refactor: move to detail
r_cons_println ("NOTE: [signal] can be a number or a string that resolves with dk?\n"
" skip means do not enter into the signal handler\n"
" continue means enter into the signal handler");
}
}
} else if (*input == 'j') {
core->dbg->pj = r_core_pj_new (core);
r_debug_signal_list (core->dbg, 2);
pj_free (core->dbg->pj);
core->dbg->pj = NULL;
} else if (!*input) {
r_debug_signal_list (core->dbg, 0);
#if 0
RListIter *iter;
RDebugSignal *ds;
eprintf ("TODO: list signal handlers of child\n");
RList *list = r_debug_kill_list (core->dbg);
r_list_foreach (list, iter, ds) {
// TODO: resolve signal name by number and show handler offset
eprintf ("--> %d\n", ds->num);
}
r_list_free (list);
#endif
} else {
int sig = atoi (input);
char *p = strchr (input, '=');
if (p) {
r_debug_kill_setup (core->dbg, sig, r_num_math (core->num, p+1));
} else {
r_debug_kill (core->dbg, core->dbg->pid, core->dbg->tid, sig);
}
}
}
static bool is_x86_call(RDebug *dbg, ut64 addr) {
ut8 buf[3];
ut8 *op = buf;
(void)dbg->iob.read_at (dbg->iob.io, addr, buf, R_ARRAY_SIZE (buf));
switch (buf[0]) { /* Segment override prefixes */
case 0x65:
case 0x64:
case 0x26:
case 0x3e:
case 0x36:
case 0x2e:
op++;
}
if (op[0] == 0xe8) {
return true;
}
if (op[0] == 0xff /* bits 4-5 (from right) of next byte must be 01 */
&& (op[1] & 0x30) == 0x10) {
return true;
}
/* ... */
return false;
}
static bool is_x86_ret(RDebug *dbg, ut64 addr) {
ut8 buf[1];
(void)dbg->iob.read_at (dbg->iob.io, addr, buf, R_ARRAY_SIZE (buf));
switch (buf[0]) {
case 0xc3:
case 0xcb:
case 0xc2:
case 0xca:
return true;
default:
return false;
}
/* Possibly incomplete with regard to instruction prefixes */
}
static bool cmd_dcu(RCore *core, const char *input) {
const char *ptr = NULL;
ut64 from, to, pc;
bool dcu_range = false;
bool invalid = (!input[0] || !input[1] || !input[2]);
if (invalid || (input[2] != ' ' && input[2] != '.')) {
r_core_cmd_help (core, help_msg_dcu);
return false;
}
to = UT64_MAX;
if (input[2] == '.') {
ptr = (input[3])? strchr (input + 3, ' '): NULL;
if (ptr) { // TODO: put '\0' in *ptr to avoid
from = r_num_tail (core->num, core->offset, input + 2);
if (ptr[1] == '.') {
to = r_num_tail (core->num, core->offset, ptr+2);
} else {
to = r_num_math (core->num, ptr+1);
}
dcu_range = true;
} else {
from = r_num_tail (core->num, core->offset, input + 2);
}
} else {
ptr = (input[2] && input[3])? strchr (input + 3, ' '): NULL;
if (ptr) { // TODO: put '\0' in *ptr to avoid
from = r_num_math (core->num, input + 3);
if (ptr[1]=='.') {
to = r_num_tail (core->num, core->offset, ptr+2);
} else {
to = r_num_math (core->num, ptr+1);
}
dcu_range = true;
} else {
from = r_num_math (core->num, input + 3);
}
}
if (core->num->nc.errors && r_cons_is_interactive ()) {
eprintf ("Cannot continue until unknown address '%s'\n", core->num->nc.calc_buf);
return false;
}
if (to == UT64_MAX) {
to = from;
}
if (dcu_range) {
r_cons_break_push (NULL, NULL);
do {
if (r_cons_is_breaked ()) {
break;
}
r_debug_step (core->dbg, 1);
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
pc = r_debug_reg_get (core->dbg, "PC");
eprintf ("Continue 0x%08"PFMT64x" > 0x%08"PFMT64x" < 0x%08"PFMT64x"\n",
from, pc, to);
} while (pc < from || pc > to);
r_cons_break_pop ();
} else {
ut64 addr = from;
if (!strcmp (core->dbg->btalgo, "trace") && core->dbg->arch
&& !strcmp (core->dbg->arch, "x86") && core->dbg->bits == 4) {
unsigned long steps = 0;
long level = 0;
const char *pc_name = core->dbg->reg->name[R_REG_NAME_PC];
ut64 prev_pc = UT64_MAX;
bool prev_call = false;
bool prev_ret = false;
const char *sp_name = core->dbg->reg->name[R_REG_NAME_SP];
ut64 old_sp, cur_sp;
r_cons_break_push (NULL, NULL);
r_list_free (core->dbg->call_frames);
core->dbg->call_frames = r_list_new ();
core->dbg->call_frames->free = free;
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
old_sp = r_debug_reg_get (core->dbg, sp_name);
while (true) {
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
pc = r_debug_reg_get (core->dbg, pc_name);
if (prev_call) {
ut32 ret_addr;
RDebugFrame *frame = R_NEW0 (RDebugFrame);
cur_sp = r_debug_reg_get (core->dbg, sp_name);
(void)core->dbg->iob.read_at (core->dbg->iob.io, cur_sp, (ut8 *)&ret_addr,
sizeof (ret_addr));
frame->addr = ret_addr;
frame->size = old_sp - cur_sp;
frame->sp = cur_sp;
frame->bp = old_sp;
r_list_prepend (core->dbg->call_frames, frame);
eprintf ("%ld Call from 0x%08"PFMT64x" to 0x%08"PFMT64x" ret 0x%08"PFMT32x"\n",
level, prev_pc, pc, ret_addr);
level++;
old_sp = cur_sp;
prev_call = false;
} else if (prev_ret) {
RDebugFrame *head = r_list_get_bottom (core->dbg->call_frames);
if (head && head->addr != pc) {
eprintf ("*");
} else {
r_list_pop_head (core->dbg->call_frames);
eprintf ("%ld", level);
level--;
}
eprintf (" Ret from 0x%08"PFMT64x" to 0x%08"PFMT64x"\n",
prev_pc, pc);
prev_ret = false;
}
if (steps % 500 == 0 || pc == addr) {
eprintf ("At 0x%08"PFMT64x" after %lu steps\n", pc, steps);
}
if (r_cons_is_breaked () || r_debug_is_dead (core->dbg) || pc == addr) {
break;
}
if (is_x86_call (core->dbg, pc)) {
prev_pc = pc;
prev_call = true;
} else if (is_x86_ret (core->dbg, pc)) {
prev_pc = pc;
prev_ret = true;
}
r_debug_step (core->dbg, 1);
steps++;
}
r_cons_break_pop ();
return true;
}
eprintf ("Continue until 0x%08"PFMT64x" using %d bpsize\n", addr, core->dbg->bpsize);
r_reg_arena_swap (core->dbg->reg, true);
if (r_bp_add_sw (core->dbg->bp, addr, core->dbg->bpsize, R_BP_PROT_EXEC)) {
if (r_debug_is_dead (core->dbg)) {
eprintf ("Cannot continue, run ood?\n");
} else {
r_debug_continue (core->dbg);
}
r_bp_del (core->dbg->bp, addr);
} else {
eprintf ("Cannot set breakpoint of size %d at 0x%08"PFMT64x"\n",
core->dbg->bpsize, addr);
}
}
return true;
}
static int cmd_debug_continue (RCore *core, const char *input) {
int pid, old_pid, signum;
char *ptr;
// TODO: we must use this for step 'ds' too maybe...
switch (input[1]) {
case 0: // "dc"
r_reg_arena_swap (core->dbg->reg, true);
#if __linux__
core->dbg->continue_all_threads = true;
#endif
if (r_debug_is_dead (core->dbg)) {
eprintf ("Cannot continue, run ood?\n");
break;
}
r_debug_continue (core->dbg);
break;
case 'a': // "dca"
eprintf ("TODO: dca\n");
break;
case 'b': // "dcb"
{
if (!core->dbg->session) {
eprintf ("Error: Session has not started\n");
break;
}
if (!r_debug_continue_back (core->dbg)) {
eprintf ("cannot continue back\n");
}
break;
}
#if __WINDOWS__
case 'e': // "dce"
r_reg_arena_swap (core->dbg->reg, true);
r_debug_continue_pass_exception (core->dbg);
break;
#endif
case 'f': // "dcf"
eprintf ("[+] Running 'dcs vfork fork clone' behind the scenes...\n");
// we should stop in fork and vfork syscalls
//TODO: multiple syscalls not handled yet
// r_core_cmd0 (core, "dcs vfork fork");
r_core_cmd0 (core, "dcs vfork fork clone");
break;
case 'c': // "dcc"
r_reg_arena_swap (core->dbg->reg, true);
if (input[2] == 'u') {
r_debug_continue_until_optype (core->dbg, R_ANAL_OP_TYPE_UCALL, 0);
} else {
r_debug_continue_until_optype (core->dbg, R_ANAL_OP_TYPE_CALL, 0);
}
break;
case 'r':
r_reg_arena_swap (core->dbg->reg, true);
r_debug_continue_until_optype (core->dbg, R_ANAL_OP_TYPE_RET, 1);
break;
case 'k':
// select pid and r_debug_continue_kill (core->dbg,
r_reg_arena_swap (core->dbg->reg, true);
signum = r_num_math (core->num, input + 2);
ptr = strchr (input + 3, ' ');
if (ptr) {
int old_pid = core->dbg->pid;
int old_tid = core->dbg->tid;
int pid = atoi (ptr+1);
int tid = pid; // XXX
*ptr = 0;
r_debug_select (core->dbg, pid, tid);
r_debug_continue_kill (core->dbg, signum);
r_debug_select (core->dbg, old_pid, old_tid);
} else {
r_debug_continue_kill (core->dbg, signum);
}
break;
case 's': // "dcs"
switch (input[2]) {
case '*':
cmd_debug_cont_syscall (core, "-1");
break;
case ' ':
cmd_debug_cont_syscall (core, input + 3);
break;
case '\0':
cmd_debug_cont_syscall (core, NULL);
break;
default:
case '?':
r_core_cmd_help (core, help_msg_dcs);
break;
}
break;
case 'p': // "dcp"
{ // XXX: this is very slow
RIOMap *s;
ut64 pc;
int n = 0;
bool t = core->dbg->trace->enabled;
core->dbg->trace->enabled = false;
r_cons_break_push (static_debug_stop, core->dbg);
do {
r_debug_step (core->dbg, 1);
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
pc = r_debug_reg_get (core->dbg, "PC");
eprintf (" %d %"PFMT64x"\r", n++, pc);
s = r_io_map_get_at (core->io, pc);
if (r_cons_is_breaked ()) {
break;
}
} while (!s);
eprintf ("\n");
core->dbg->trace->enabled = t;
r_cons_break_pop ();
return 1;
}
case 'u': // "dcu"
if (input[2] == '?') {
r_core_cmd_help (core, help_msg_dcu);
} else if (input[2] == '.') {
cmd_dcu (core, "cu $$");
} else {
cmd_dcu (core, input);
}
break;
case ' ':
old_pid = core->dbg->pid;
pid = atoi (input + 2);
r_reg_arena_swap (core->dbg->reg, true);
r_debug_select (core->dbg, pid, core->dbg->tid);
r_debug_continue (core->dbg);
r_debug_select (core->dbg, old_pid, core->dbg->tid);
break;
case 't':
cmd_debug_backtrace (core, input + 2);
break;
case '?': // "dc?"
default:
r_core_cmd_help (core, help_msg_dc);
return 0;
}
return 1;
}
static char *get_corefile_name (const char *raw_name, int pid) {
return (!*raw_name)?
r_str_newf ("core.%u", pid) :
r_str_trim_dup (raw_name);
}
static int cmd_debug_step (RCore *core, const char *input) {
ut64 addr = core->offset;;
ut8 buf[64];
RAnalOp aop;
int i, times = 1;
char *ptr = strchr (input, ' ');
if (ptr) {
times = r_num_math (core->num, ptr + 1);
}
if (times < 1) {
times = 1;
}
switch (input[1]) {
case 0: // "ds"
case ' ':
if (r_config_get_i (core->config, "cfg.debug")) {
r_reg_arena_swap (core->dbg->reg, true);
// sync registers for BSD PT_STEP/PT_CONT
// XXX(jjd): is this necessary?
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
ut64 pc = r_debug_reg_get (core->dbg, "PC");
r_debug_trace_pc (core->dbg, pc);
if (!r_debug_step (core->dbg, times)) {
eprintf ("Step failed\n");
core->break_loop = true;
}
} else {
r_core_cmdf (core, "%daes", R_MAX (1, times));
}
break;
case 'i': // "dsi"
if (input[2] == ' ') {
int n = 0;
r_cons_break_push (static_debug_stop, core->dbg);
do {
if (r_cons_is_breaked ()) {
break;
}
r_debug_step (core->dbg, 1);
if (r_debug_is_dead (core->dbg)) {
core->break_loop = true;
break;
}
r_core_cmd0 (core, ".dr*");
n++;
} while (!r_num_conditional (core->num, input + 3));
r_cons_break_pop ();
eprintf ("Stopped after %d instructions\n", n);
} else {
eprintf ("3 Missing argument\n");
}
break;
case 'f': // "dsf"
step_until_eof (core);
break;
case 'u': // "dsu"
switch (input[2]) {
case 'f': // dsuf
step_until_flag (core, input + 3);
break;
case 'i': // dsui
if (input[3] == 'r') {
step_until_inst (core, input + 4, true);
} else {
step_until_inst (core, input + 3, false);
}
break;
case 'e': // dsue
step_until_esil (core, input + 3);
break;
case 'o': // dsuo
step_until_optype (core, input + 3);
break;
case ' ': // dsu <address>
r_reg_arena_swap (core->dbg->reg, true);
step_until (core, r_num_math (core->num, input + 2)); // XXX dupped by times
break;
default:
r_core_cmd_help (core, help_msg_dsu);
return 0;
}
break;
case 'p': // "dsp"
r_reg_arena_swap (core->dbg->reg, true);
for (i = 0; i < times; i++) {
ut8 buf[64];
ut64 addr;
RAnalOp aop;
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
addr = r_debug_reg_get (core->dbg, "PC");
r_io_read_at (core->io, addr, buf, sizeof (buf));
r_anal_op (core->anal, &aop, addr, buf, sizeof (buf), R_ANAL_OP_MASK_BASIC);
if (aop.type == R_ANAL_OP_TYPE_CALL) {
RBinObject *o = r_bin_cur_object (core->bin);
RBinSection *s = r_bin_get_section_at (o, aop.jump, true);
if (!s) {
r_debug_step_over (core->dbg, times);
continue;
}
}
r_debug_step (core->dbg, 1);
}
break;
case 's': // "dss"
{
char delb[128] = R_EMPTY;
addr = r_debug_reg_get (core->dbg, "PC");
RBreakpointItem *bpi = r_bp_get_at (core->dbg->bp, addr);
sprintf(delb, "db 0x%"PFMT64x"", addr);
r_reg_arena_swap (core->dbg->reg, true);
for (i = 0; i < times; i++) {
r_debug_reg_sync (core->dbg, R_REG_TYPE_GPR, false);
r_io_read_at (core->io, addr, buf, sizeof (buf));
r_anal_op (core->anal, &aop, addr, buf, sizeof (buf), R_ANAL_OP_MASK_BASIC);
#if 0
if (aop.jump != UT64_MAX && aop.fail != UT64_MAX) {
eprintf ("Don't know how to skip this instruction\n");
if (bpi) r_core_cmd0 (core, delb);
break;
}
#endif
addr += aop.size;
}
r_debug_reg_set (core->dbg, "PC", addr);
r_reg_setv (core->anal->reg, "PC", addr);
r_core_cmd0 (core, ".dr*");
if (bpi) {
r_core_cmd0 (core, delb);
}
break;
}
case 'o': // "dso"
if (r_config_get_i (core->config, "dbg.skipover")) {
r_core_cmdf (core, "dss%s", input + 2);
} else {
if (r_config_get_i (core->config, "cfg.debug")) {
char delb[128] = R_EMPTY;
addr = r_debug_reg_get (core->dbg, "PC");
RBreakpointItem *bpi = r_bp_get_at (core->dbg->bp, addr);
sprintf(delb, "db 0x%"PFMT64x"", addr);
r_bp_del (core->dbg->bp, addr);
r_reg_arena_swap (core->dbg->reg, true);
r_debug_step_over (core->dbg, times);
if (bpi) r_core_cmd0 (core, delb);
} else {
r_core_cmdf (core, "aeso%s", input + 2);
}
}
break;
case 'b': // "dsb"
if (r_config_get_i (core->config, "cfg.debug")) {
if (!core->dbg->session) {
eprintf ("Session has not started\n");
} else if (r_debug_step_back (core->dbg, times) < 0) {
eprintf ("Error: stepping back failed\n");
}
} else {
if (r_core_esil_step_back (core)) {
r_core_cmd0 (core, ".dr*");
} else {
eprintf ("cannot step back\n");
}
}
break;
case 'l': // "dsl"
r_reg_arena_swap (core->dbg->reg, true);
step_line (core, times);
break;
case '?': // "ds?"
default:
r_core_cmd_help (core, help_msg_ds);
return 0;
}
return 1;
}
static ut8*getFileData(RCore *core, const char *arg) {
if (*arg == '$') {
return (ut8*) r_cmd_alias_get (core->rcmd, arg, 1);
}
return (ut8*)r_file_slurp (arg, NULL);
}
static void consumeBuffer(RBuffer *buf, const char *cmd, const char *errmsg) {
if (!buf) {
if (errmsg) {
r_cons_printf ("%s\n", errmsg);
}
return;
}
if (cmd) {
r_cons_printf ("%s", cmd);
}
int i;
r_buf_seek (buf, 0, R_BUF_SET);
for (i = 0; i < r_buf_size (buf); i++) {
r_cons_printf ("%02x", r_buf_read8 (buf));
}
r_cons_printf ("\n");
}
static int cmd_debug(void *data, const char *input) {
RCore *core = (RCore *)data;
RDebugTracepoint *t;
int follow = 0;
const char *ptr;
ut64 addr;
int min;
RListIter *iter;
RList *list;
RDebugPid *p;
RDebugTracepoint *trace;
RAnalOp *op;
if (r_sandbox_enable (0)) {
eprintf ("Debugger commands disabled in sandbox mode\n");
return 0;
}
if (!strncmp (input, "ate", 3)) {
char str[128];
str[0] = 0;
r_print_date_get_now (core->print, str);
r_cons_println (str);
return 0;
}
switch (input[0]) {
case 't':
// TODO: define ranges? to display only some traces, allow to scroll on this disasm? ~.. ?
switch (input[1]) {
case '\0': // "dt"
r_debug_trace_list (core->dbg, 0, core->offset);
break;
case '=': // "dt="
r_debug_trace_list (core->dbg, '=', core->offset);
break;
case 'q': // "dtq"
r_debug_trace_list (core->dbg, 'q', core->offset);
break;
case '*': // "dt*"
r_debug_trace_list (core->dbg, 1, core->offset);
break;
case ' ': // "dt [addr]"
if ((t = r_debug_trace_get (core->dbg,
r_num_math (core->num, input + 3)))) {
r_cons_printf ("offset = 0x%" PFMT64x "\n", t->addr);
r_cons_printf ("opsize = %d\n", t->size);
r_cons_printf ("times = %d\n", t->times);
r_cons_printf ("count = %d\n", t->count);
//TODO cons_printf("time = %d\n", t->tm);
}
break;
case 'a': // "dta"
r_debug_trace_at (core->dbg, input + 3);
break;
case 't': // "dtt"
r_debug_trace_tag (core->dbg, atoi (input + 3));
break;
case 'c': // "dtc"
if (input[2] == '?') {
r_cons_println ("Usage: dtc [addr] ([from] [to] [addr]) - trace calls in debugger");
} else {
debug_trace_calls (core, input + 2);
}
break;
case 'd': // "dtd"
min = r_num_math (core->num, input + 3);
if (input[2] == 'q') { // "dtdq"
int n = 0;
r_list_foreach (core->dbg->trace->traces, iter, trace) {
if (n >= min) {
r_cons_printf ("%d ", trace->count);
r_cons_printf ("0x%08"PFMT64x"\n", trace->addr);
break;
}
n++;
}
} else if (input[2] == 'i') {
int n = 0;
r_list_foreach (core->dbg->trace->traces, iter, trace) {
op = r_core_anal_op (core, trace->addr, R_ANAL_OP_MASK_BASIC | R_ANAL_OP_MASK_DISASM);
if (n >= min) {
r_cons_printf ("%d %s\n", trace->count, op->mnemonic);
}
n++;
r_anal_op_free (op);
}
} else if (input[2] == ' ') {
int n = 0;
r_list_foreach (core->dbg->trace->traces, iter, trace) {
op = r_core_anal_op (core, trace->addr, R_ANAL_OP_MASK_BASIC | R_ANAL_OP_MASK_DISASM);
if (n >= min) {
r_cons_printf ("0x%08"PFMT64x" %s\n", trace->addr, op->mnemonic);
}
n++;
r_anal_op_free (op);
}
} else {
// TODO: reimplement using the api
//r_core_cmd0 (core, "pd 1 @@= `dtq`");
r_list_foreach (core->dbg->trace->traces, iter, trace) {
op = r_core_anal_op (core, trace->addr, R_ANAL_OP_MASK_BASIC | R_ANAL_OP_MASK_DISASM);
r_cons_printf ("0x%08"PFMT64x" %s\n", trace->addr, op->mnemonic);
r_anal_op_free (op);
}
}
break;
case 'g': // "dtg"
dot_trace_traverse (core, core->dbg->tree, input[2]);
break;
case '-': // "dt-"
r_tree_reset (core->dbg->tree);
r_debug_trace_free (core->dbg->trace);
r_debug_tracenodes_reset (core->dbg);
core->dbg->trace = r_debug_trace_new ();
break;
case '+': // "dt+"
if (input[2] == '+') { // "dt++"
char *a, *s = r_str_trim_dup (input + 3);
RList *args = r_str_split_list (s, " ", 0);
RListIter *iter;
r_list_foreach (args, iter, a) {
ut64 addr = r_num_get (NULL, a);
(void)r_debug_trace_add (core->dbg, addr, 1);
}
r_list_free (args);
free (s);
} else {
ptr = input + 2;
addr = r_num_math (core->num, ptr);
ptr = strchr (ptr, ' ');
int count = 1;
if (ptr) {
count = r_num_math (core->num, ptr + 1);
}
RAnalOp *op = r_core_op_anal (core, addr, R_ANAL_OP_MASK_HINT);
if (op) {
RDebugTracepoint *tp = r_debug_trace_add (core->dbg, addr, op->size);
if (!tp) {
r_anal_op_free (op);
break;
}
tp->count = count;
r_anal_trace_bb (core->anal, addr);
r_anal_op_free (op);
} else {
eprintf ("Cannot analyze opcode at 0x%08" PFMT64x "\n", addr);
}
}
break;
case 'e': // "dte"
if (!core->anal->esil) {
int stacksize = r_config_get_i (core->config, "esil.stack.depth");
int romem = r_config_get_i (core->config, "esil.romem");
int stats = r_config_get_i (core->config, "esil.stats");
int iotrap = r_config_get_i (core->config, "esil.iotrap");
int nonull = r_config_get_i (core->config, "esil.nonull");
unsigned int addrsize = r_config_get_i (core->config, "esil.addr.size");
if (!(core->anal->esil = r_anal_esil_new (stacksize, iotrap, addrsize))) {
return 0;
}
r_anal_esil_setup (core->anal->esil, core->anal, romem, stats, nonull);
}
switch (input[2]) {
case 0: // "dte"
r_anal_esil_trace_list (core->anal->esil);
break;
case 'i': { // "dtei"
ut64 addr = r_num_math (core->num, input + 3);
if (!addr) {
addr = core->offset;
}
RAnalOp *op = r_core_anal_op (core, addr, R_ANAL_OP_MASK_ESIL);
if (op) {
r_anal_esil_trace_op (core->anal->esil, op);
}
r_anal_op_free (op);
} break;
case '-': // "dte-"
if (!strcmp (input + 3, "*")) {
if (core->anal->esil) {
sdb_free (core->anal->esil->trace->db);
core->anal->esil->trace->db = sdb_new0 ();
}
} else {
eprintf ("TODO: dte- cannot delete specific logs. Use dte-*\n");
}
break;
case ' ': { // "dte "
int idx = atoi (input + 3);
r_anal_esil_trace_show (
core->anal->esil, idx);
} break;
case 'k': // "dtek"
if (input[3] == ' ') {
char *s = sdb_querys (core->anal->esil->trace->db,
NULL, 0, input + 4);
r_cons_println (s);
free (s);
} else {
eprintf ("Usage: dtek [query]\n");
}
break;
default:
r_core_cmd_help (core, help_msg_dte);
}
break;
case 's': // "dts"
switch (input[2]) {
case '+': // "dts+"
if (r_debug_is_dead (core->dbg)) {
eprintf ("Cannot start session outside of debug mode, run ood?\n");
break;
}
if (core->dbg->session) {
eprintf ("Session already started\n");
break;
}
core->dbg->session = r_debug_session_new ();
r_debug_add_checkpoint (core->dbg);
break;
case '-': // "dts-"
if (!core->dbg->session) {
eprintf ("No session started\n");
break;
}
r_debug_session_free (core->dbg->session);
core->dbg->session = NULL;
break;
case 't': // "dtst"
if (!core->dbg->session) {
eprintf ("No session started\n");
break;
}
r_debug_session_save (core->dbg->session, input + 4);
break;
case 'f': // "dtsf"
if (core->dbg->session) {
r_debug_session_free (core->dbg->session);
core->dbg->session = NULL;
}
core->dbg->session = r_debug_session_new ();
r_debug_session_load (core->dbg, input + 4);
break;
case 'm': // "dtsm"
if (core->dbg->session) {
r_debug_session_list_memory (core->dbg);
}
break;
default:
r_core_cmd_help (core, help_msg_dts);
}
break;
case '?':
default:
{
r_core_cmd_help (core, help_msg_dt);
r_cons_printf ("Current Tag: %d\n", core->dbg->trace->tag);
}
break;
}
break;
case 'd': // "ddd"
switch (input[1]) {
case '\0': // "ddd"
r_debug_desc_list (core->dbg, 0);
break;
case '*': // "dtd*"
r_debug_desc_list (core->dbg, 1);
break;
case 's': // "dtds"
{
ut64 off = UT64_MAX;
int fd = atoi (input + 2);
char *str = strchr (input + 2, ' ');
if (str) off = r_num_math (core->num, str+1);
if (off == UT64_MAX || !r_debug_desc_seek (core->dbg, fd, off)) {
RBuffer *buf = r_core_syscallf (core, "lseek", "%d, 0x%"PFMT64x", %d", fd, off, 0);
consumeBuffer (buf, "dx ", "Cannot seek");
}
}
break;
case 't': // "ddt" <ttypath>
r_core_cmdf (core, "dd-0");
break;
case 'd': // "ddd"
{
ut64 newfd = UT64_MAX;
int fd = atoi (input + 2);
char *str = strchr (input + 3, ' ');
if (str) newfd = r_num_math (core->num, str+1);
if (newfd == UT64_MAX || !r_debug_desc_dup (core->dbg, fd, newfd)) {
RBuffer *buf = r_core_syscallf (core, "dup2", "%d, %d", fd, (int)newfd);
if (buf) {
consumeBuffer (buf, "dx ", NULL);
} else {
eprintf ("Cannot dup %d %d\n", fd, (int)newfd);
}
}
}
break;
case 'r':
{
ut64 off = UT64_MAX;
ut64 len = UT64_MAX;
int fd = atoi (input + 2);
char *str = strchr (input + 2, ' ');
if (str) off = r_num_math (core->num, str+1);
if (str) str = strchr (str+1, ' ');
if (str) len = r_num_math (core->num, str+1);
if (len == UT64_MAX || off == UT64_MAX || \
!r_debug_desc_read (core->dbg, fd, off, len)) {
consumeBuffer (r_core_syscallf (core, "read", "%d, 0x%"PFMT64x", %d",
fd, off, (int)len), "dx ", "Cannot read");
}
}
break;
case 'w':
{
ut64 off = UT64_MAX;
ut64 len = UT64_MAX;
int fd = atoi (input + 2);
char *str = strchr (input + 2, ' ');
if (str) off = r_num_math (core->num, str+1);
if (str) str = strchr (str+1, ' ');
if (str) len = r_num_math (core->num, str+1);
if (len == UT64_MAX || off == UT64_MAX || \
!r_debug_desc_write (core->dbg, fd, off, len)) {
RBuffer *buf = r_core_syscallf (core, "write", "%d, 0x%"PFMT64x", %d", fd, off, (int)len);
consumeBuffer (buf, "dx ", "Cannot write");
}
}
break;
case '-': // "dd-"
// close file
//r_core_syscallf (core, "close", "%d", atoi (input + 2));
{
int fd = atoi (input + 2);
//r_core_cmdf (core, "dxs close %d", (int)r_num_math ( core->num, input + 2));
RBuffer *buf = r_core_syscallf (core, "close", "%d", fd);
consumeBuffer (buf, "dx ", "Cannot close");
}
break;
case ' ': // "dd"
// TODO: handle read, readwrite, append
{
RBuffer *buf = r_core_syscallf (core, "open", "%s, %d, %d", input + 2, 2, 0644);
consumeBuffer (buf, "dx ", "Cannot open");
}
// open file
break;
case '?':
default:
r_core_cmd_help (core, help_msg_dd);
break;
}
break;
case 's':
if (cmd_debug_step (core, input)) {
follow = r_config_get_i (core->config, "dbg.follow");
}
break;
case 'b':
r_core_cmd_bp (core, input);
break;
case 'H':
eprintf ("TODO: transplant process\n");
break;
case 'c': // "dc"
r_cons_break_push (static_debug_stop, core->dbg);
(void)cmd_debug_continue (core, input);
follow = r_config_get_i (core->config, "dbg.follow");
r_cons_break_pop ();
break;
case 'm': // "dm"
cmd_debug_map (core, input + 1);
break;
case 'r': // "dr"
if (r_config_get_i (core->config, "cfg.debug") || input[1] == '?') {
cmd_debug_reg (core, input + 1);
} else {
cmd_anal_reg (core, input + 1);
}
//r_core_cmd (core, "|reg", 0);
break;
case 'p': // "dp"
cmd_debug_pid (core, input);
break;
case 'L': // "dL"
switch (input[1]) {
case 'q':
r_debug_plugin_list (core->dbg, input[1]);
break;
case 'j':
core->dbg->pj = r_core_pj_new (core);
r_debug_plugin_list (core->dbg, 'j');
pj_free (core->dbg->pj);
core->dbg->pj = NULL;
break;
case '?':
r_core_cmd_help (core, help_msg_dL);
break;
case ' ': {
char *str = r_str_trim_dup (input + 2);
r_config_set (core->config, "dbg.backend", str);
// implicit by config.set r_debug_use (core->dbg, str);
free (str);
}
break;
default:
r_debug_plugin_list (core->dbg, 0);
break;
}
break;
case 'i': // "di"
{
RDebugInfo *rdi = r_debug_info (core->dbg, input + 2);
RDebugReasonType stop = r_debug_stop_reason (core->dbg);
char *escaped_str;
switch (input[1]) {
case '\0': // "di"
#define P r_cons_printf
#define PS(X, Y) {escaped_str = r_str_escape (Y);r_cons_printf(X, escaped_str);free(escaped_str);}
if (rdi) {
const char *s = r_signal_to_string (core->dbg->reason.signum);
P ("type=%s\n", r_debug_reason_to_string (core->dbg->reason.type));
P ("signal=%s\n", r_str_get_fail (s, "none"));
P ("signum=%d\n", core->dbg->reason.signum);
P ("sigpid=%d\n", core->dbg->reason.tid);
P ("addr=0x%"PFMT64x"\n", core->dbg->reason.addr);
P ("bp_addr=0x%"PFMT64x"\n", core->dbg->reason.bp_addr);
P ("inbp=%s\n", r_str_bool (core->dbg->reason.bp_addr));
P ("baddr=0x%"PFMT64x"\n", r_debug_get_baddr (core->dbg, NULL));
P ("pid=%d\n", rdi->pid);
P ("tid=%d\n", rdi->tid);
P ("stopaddr=0x%"PFMT64x"\n", core->dbg->stopaddr);
if (rdi->uid != -1) {
P ("uid=%d\n", rdi->uid);
}
if (rdi->gid != -1) {
P ("gid=%d\n", rdi->gid);
}
if (rdi->usr) {
P ("usr=%s\n", rdi->usr);
}
if (rdi->exe && *rdi->exe) {
P ("exe=%s\n", rdi->exe);
}
if (rdi->cmdline && *rdi->cmdline) {
P ("cmdline=%s\n", rdi->cmdline);
}
if (rdi->cwd && *rdi->cwd) {
P ("cwd=%s\n", rdi->cwd);
}
if (rdi->kernel_stack && *rdi->kernel_stack) {
P ("kernel_stack=\n%s\n", rdi->kernel_stack);
}
}
if (stop != -1) {
P ("stopreason=%s\n", r_debug_reason_to_string (stop));
}
break;
case 'f': // "dif" "diff"
if (input[1] == '?') {
eprintf ("Usage: dif $a $b # diff two alias files\n");
} else {
char *arg = strchr (input, ' ');
if (arg) {
arg = strdup (r_str_trim_head_ro (arg + 1));
char *arg2 = strchr (arg, ' ');
if (arg2) {
*arg2++ = 0;
ut8 *a = getFileData (core, arg);
ut8 *b = getFileData (core, arg2);
if (a && b) {
int al = strlen ((const char*)a);
int bl = strlen ((const char*)b);
RDiff *d = r_diff_new ();
char *uni = r_diff_buffers_to_string (d, a, al, b, bl);
r_cons_printf ("%s\n", uni);
r_diff_free (d);
free (uni);
} else {
eprintf ("Cannot open those alias files\n");
}
}
free (arg);
} else {
eprintf ("Usage: dif $a $b # diff two alias files\n");
}
}
break;
case '*': // "di*"
if (rdi) {
r_cons_printf ("f dbg.signal = %d\n", core->dbg->reason.signum);
r_cons_printf ("f dbg.sigpid = %d\n", core->dbg->reason.tid);
r_cons_printf ("f dbg.inbp = %d\n", core->dbg->reason.bp_addr? 1: 0);
r_cons_printf ("f dbg.sigaddr = 0x%"PFMT64x"\n", core->dbg->reason.addr);
r_cons_printf ("f dbg.baddr = 0x%"PFMT64x"\n", r_debug_get_baddr (core->dbg, NULL));
r_cons_printf ("f dbg.pid = %d\n", rdi->pid);
r_cons_printf ("f dbg.tid = %d\n", rdi->tid);
r_cons_printf ("f dbg.uid = %d\n", rdi->uid);
r_cons_printf ("f dbg.gid = %d\n", rdi->gid);
}
break;
case 'j': // "dij"
P ("{");
if (rdi) {
const char *s = r_signal_to_string (core->dbg->reason.signum);
P ("\"type\":\"%s\",", r_debug_reason_to_string (core->dbg->reason.type));
P ("\"signal\":\"%s\",", r_str_get_fail (s, "none"));
P ("\"signum\":%d,", core->dbg->reason.signum);
P ("\"sigpid\":%d,", core->dbg->reason.tid);
P ("\"addr\":%"PFMT64d",", core->dbg->reason.addr);
P ("\"inbp\":%s,", r_str_bool (core->dbg->reason.bp_addr));
P ("\"baddr\":%"PFMT64d",", r_debug_get_baddr (core->dbg, NULL));
P ("\"stopaddr\":%"PFMT64d",", core->dbg->stopaddr);
P ("\"pid\":%d,", rdi->pid);
P ("\"tid\":%d,", rdi->tid);
P ("\"uid\":%d,", rdi->uid);
P ("\"gid\":%d,", rdi->gid);
if (rdi->usr) {
PS("\"usr\":\"%s\",", rdi->usr);
}
if (rdi->exe) {
PS("\"exe\":\"%s\",", rdi->exe);
}
if (rdi->cmdline) {
PS ("\"cmdline\":\"%s\",", rdi->cmdline);
}
if (rdi->cwd) {
PS ("\"cwd\":\"%s\",", rdi->cwd);
}
}
P ("\"stopreason\":%d}\n", stop);
break;
#undef P
#undef PS
case 'q':
{
const char *r = r_debug_reason_to_string (core->dbg->reason.type);
if (!r) {
r = "none";
}
r_cons_printf ("%s at 0x%08"PFMT64x"\n", r, core->dbg->stopaddr);
}
break;
case '?': // "di?"
default:
r_core_cmd_help (core, help_msg_di);
break;
}
r_debug_info_free (rdi);
}
break;
case 'e': // "de"
r_core_debug_esil (core, input + 1);
break;
case 'g': // "dg"
if (core->dbg->h && core->dbg->h->gcore) {
if (core->dbg->pid == -1) {
eprintf ("Not debugging, can't write core.\n");
break;
}
char *corefile = get_corefile_name (input + 1, core->dbg->pid);
eprintf ("Writing to file '%s'\n", corefile);
r_file_rm (corefile);
RBuffer *dst = r_buf_new_file (corefile, O_RDWR | O_CREAT, 0644);
if (dst) {
if (!core->dbg->h->gcore (core->dbg, dst)) {
eprintf ("dg: coredump failed\n");
}
r_buf_free (dst);
} else {
perror ("r_buf_new_file");
}
free (corefile);
}
break;
case 'k': // "dk"
r_core_debug_kill (core, input + 1);
break;
case 'o': // "do"
switch (input[1]) {
case '\0': // "do"
r_core_file_reopen (core, input[1] ? input + 2: NULL, 0, 1);
break;
case 'e': // "doe"
switch (input[2]) {
case '\0': // "doe"
if (core->io->envprofile) {
r_cons_println (core->io->envprofile);
}
break;
case '!': // "doe!"
{
char *out = r_core_editor (core, NULL, core->io->envprofile);
if (out) {
free (core->io->envprofile);
core->io->envprofile = out;
eprintf ("%s\n", core->io->envprofile);
}
} break;
default:
break;
}
break;
case 'r': // "dor" : rarun profile
if (input[2] == ' ') {
setRarunProfileString (core, input + 3);
} else {
// TODO use the api
r_sys_cmd ("rarun2 -h");
}
break;
case 'o': // "doo" : reopen in debug mode
if (input[2] == 'f') { // "doof" : reopen in debug mode from the given file
r_config_set_i (core->config, "cfg.debug", true);
r_core_cmd0 (core, sdb_fmt ("oodf %s", input + 3));
} else {
r_core_file_reopen_debug (core, input + 2);
}
break;
case 'c': // "doc" : close current debug session
if (!core || !core->io || !core->io->desc || !r_config_get_i (core->config, "cfg.debug")) {
eprintf ("No open debug session\n");
break;
}
// Stop trace session
if (core->dbg->session) {
r_debug_session_free (core->dbg->session);
core->dbg->session = NULL;
}
// Kill debugee and all child processes
if (core->dbg && core->dbg->h && core->dbg->h->pids && core->dbg->pid != -1) {
list = core->dbg->h->pids (core->dbg, core->dbg->pid);
if (list) {
r_list_foreach (list, iter, p) {
r_debug_kill (core->dbg, p->pid, p->pid, SIGKILL);
r_debug_detach (core->dbg, p->pid);
}
} else {
r_debug_kill (core->dbg, core->dbg->pid, core->dbg->pid, SIGKILL);
r_debug_detach (core->dbg, core->dbg->pid);
}
}
// Remove registers from the flag list
r_core_cmd0 (core, ".dr-*");
// Reopen and rebase the original file
r_core_cmd0 (core, "oo");
break;
case '?': // "do?"
default:
r_core_cmd_help (core, help_msg_do);
break;
}
break;
#if __WINDOWS__
case 'W': // "dW"
if (input[1] == 'i') {
r_w32_identify_window ();
} else {
r_w32_print_windows (core->dbg);
}
break;
#endif
case 'w': // "dw"
r_cons_break_push (static_debug_stop, core->dbg);
for (;!r_cons_is_breaked ();) {
int pid = atoi (input + 1);
//int opid = core->dbg->pid = pid;
int res = r_debug_kill (core->dbg, pid, 0, 0);
if (!res) {
break;
}
r_sys_usleep (200);
}
r_cons_break_pop ();
break;
case 'x': // "dx"
switch (input[1]) {
case ' ': { // "dx "
ut8 bytes[4096];
if (strlen (input + 2) < 4096){
int bytes_len = r_hex_str2bin (input + 2, bytes);
if (bytes_len > 0) {
r_debug_execute (core->dbg, bytes, bytes_len, 0);
} else {
eprintf ("Invalid hexpairs\n");
}
} else {
eprintf ("Injection opcodes so long\n");
}
break;
}
case 'a': { // "dxa"
RAsmCode *acode;
r_asm_set_pc (core->rasm, core->offset);
acode = r_asm_massemble (core->rasm, input + 2);
if (acode) {
r_reg_arena_push (core->dbg->reg);
r_debug_execute (core->dbg, acode->bytes, acode->len, 0);
r_reg_arena_pop (core->dbg->reg);
}
r_asm_code_free (acode);
break;
}
case 'e':
if (input[2] == '?') {
r_core_cmd_help (core, help_msg_dxe);
} else { // "dxe"
const char *program = r_str_trim_head_ro (input + 2);
REgg *egg = core->egg;
const char *asm_arch = r_config_get (core->config, "asm.arch");
int asm_bits = r_config_get_i (core->config, "asm.bits");
const char *asm_os = r_config_get (core->config, "asm.os");
r_egg_setup (egg, asm_arch, asm_bits, 0, asm_os);
r_egg_reset (egg);
r_egg_load (egg, program, 0);
if (!r_egg_compile (egg)) {
eprintf ("Failed to compile.\n");
}
RBuffer *b = r_egg_get_bin (egg);
r_asm_set_pc (core->rasm, core->offset);
r_reg_arena_push (core->dbg->reg);
ut64 tmpsz;
const ut8 *tmp = r_buf_data (b, &tmpsz);
if (tmpsz > 0) {
r_debug_execute (core->dbg, tmp, tmpsz, 0);
} else {
eprintf ("No egg program compiled to execute.\n");
}
r_reg_arena_pop (core->dbg->reg);
}
break;
case 'r': // "dxr"
r_reg_arena_push (core->dbg->reg);
if (input[2] == ' ') {
ut8 bytes[4096];
if (strlen (input + 2) < 4096){
int bytes_len = r_hex_str2bin (input + 2,
bytes);
if (bytes_len > 0) {
r_debug_execute (core->dbg,
bytes, bytes_len,
0);
} else {
eprintf ("Invalid hexpairs\n");
}
} else eprintf ("Injection opcodes so long\n");
}
r_reg_arena_pop (core->dbg->reg);
break;
case 's': // "dxs"
if (input[2]) {
char *str;
r_cons_push ();
str = r_core_cmd_str (core, sdb_fmt ("gs %s", input + 2));
r_cons_pop ();
r_core_cmdf (core, "dx %s", str); //`gs %s`", input + 2);
free (str);
} else {
eprintf ("Missing parameter used in gs by dxs\n");
}
break;
case '?': // "dx?"
default:
r_core_cmd_help (core, help_msg_dx);
break;
}
break;
case '?': // "d?"
default:
r_core_cmd_help (core, help_msg_d);
break;
}
if (follow > 0) {
ut64 pc = r_debug_reg_get (core->dbg, "PC");
if ((pc < core->offset) || (pc > (core->offset + follow))) {
r_core_cmd0 (core, "sr PC");
}
}
return 0;
}