radare2/libr/io/p/io_gdb.c
2017-09-17 23:27:43 +02:00

369 lines
8.5 KiB
C

/* radare - LGPL - Copyright 2010-2017 pancake */
#include <r_io.h>
#include <r_lib.h>
#include <r_socket.h>
#include <r_util.h>
#include <ctype.h>
#define IRAPI static inline
#include <libgdbr.h>
#include <gdbclient/commands.h>
typedef struct {
libgdbr_t desc;
} RIOGdb;
#define R_GDB_MAGIC r_str_hash ("gdb")
static libgdbr_t *desc = NULL;
static RIODesc *riogdb = NULL;
static bool __plugin_open(RIO *io, const char *file, bool many) {
return (!strncmp (file, "gdb://", 6));
}
static int debug_gdb_read_at(ut8 *buf, int sz, ut64 addr) {
ut32 size_max;
ut32 packets;
ut32 last;
ut32 x;
int ret = 0;
if (sz < 1 || addr >= UT64_MAX || !desc) {
return -1;
}
size_max = desc->data_max / 2;
if (size_max < 1) {
size_max = sz;
}
packets = sz / size_max;
last = sz % size_max;
for (x = 0; x < packets; x++) {
if (gdbr_read_memory (desc, addr + (x * size_max), size_max) < 0) {
return ret;
}
memcpy ((buf + (x * size_max)), desc->data + (x * size_max), R_MIN (sz, size_max));
ret += desc->data_len;
}
if (last) {
if (gdbr_read_memory (desc, addr + x * size_max, last) < 0) {
return ret;
}
memcpy ((buf + x * size_max), desc->data + (x * size_max), last);
ret += desc->data_len;
}
return ret;
}
static int debug_gdb_write_at(const ut8 *buf, int sz, ut64 addr) {
ut32 x, size_max;
ut32 packets;
ut32 last;
if (sz < 1 || addr >= UT64_MAX || !desc) {
return -1;
}
size_max = desc->read_max;
packets = sz / size_max;
last = sz % size_max;
for (x = 0; x < packets; x++) {
gdbr_write_memory (desc, addr + x * size_max,
(const uint8_t*)(buf + x * size_max), size_max);
}
if (last) {
gdbr_write_memory (desc, addr + x * size_max,
(buf + x * size_max), last);
}
return sz;
}
static RIODesc *__open(RIO *io, const char *file, int rw, int mode) {
RIOGdb *riog;
char host[128], *port, *pid;
int i_port = -1;
bool isdev = false;
if (!__plugin_open (io, file, 0)) {
return NULL;
}
if (riogdb) {
// FIX: Don't allocate more than one gdb RIODesc
return riogdb;
}
strncpy (host, file + 6, sizeof (host) - 1);
host [sizeof (host) - 1] = '\0';
if (host[0] == '/') {
isdev = true;
}
rw |= R_IO_WRITE;
if (isdev) {
port = strchr (host, '@');
if (port) {
*port = '\0';
port++;
pid = strchr (port, ':');
} else {
pid = strchr (host, ':');
}
} else {
if (r_sandbox_enable (0)) {
eprintf ("sandbox: Cannot use network\n");
return NULL;
}
port = strchr (host , ':');
if (!port) {
eprintf ("Invalid debugger URI. Port missing?\nPlease use either\n"
" - gdb://host:port[/pid] for a network gdbserver.\n"
" - gdb:///dev/DEVICENAME[@speed][:pid] for a serial gdbserver.\n");
return NULL;
}
*port = '\0';
port++;
pid = strchr (port, '/');
}
int i_pid = -1;
if (pid) {
*pid = 0;
pid++;
i_pid = atoi (pid);
}
if (port) {
i_port = atoi (port);
}
if (!(riog = R_NEW0 (RIOGdb))) {
return NULL;
}
gdbr_init (&riog->desc, false);
if (gdbr_connect (&riog->desc, host, i_port) == 0) {
desc = &riog->desc;
if (pid) { // FIXME this is here for now because RDebug's pid and libgdbr's aren't properly synced.
desc->pid = i_pid;
if (gdbr_attach (desc, i_pid) < 0) {
eprintf ("gdbr: Failed to attach to PID %i\n", i_pid);
return NULL;
}
} else if ((i_pid = desc->pid) < 0) {
i_pid = -1;
}
riogdb = r_io_desc_new (io, &r_io_plugin_gdb, file, R_IO_RWX, mode, riog);
}
// Get name
if (riogdb) {
riogdb->name = gdbr_exec_file_read (desc, i_pid);
} else {
eprintf ("gdb.io.open: Cannot connect to host.\n");
free (riog);
}
return riogdb;
}
static int __write(RIO *io, RIODesc *fd, const ut8 *buf, int count) {
ut64 addr = io->off;
if (!desc || !desc->data) return -1;
return debug_gdb_write_at(buf, count, addr);
}
static ut64 __lseek(RIO *io, RIODesc *fd, ut64 offset, int whence) {
switch (whence) {
case R_IO_SEEK_SET:
io->off = offset;
break;
case R_IO_SEEK_CUR:
io->off += offset;
break;
case R_IO_SEEK_END:
io->off = UT64_MAX;
}
return io->off;
}
static int __read(RIO *io, RIODesc *fd, ut8 *buf, int count) {
if (!io || !fd || !buf || count < 1) {
return -1;
}
memset (buf, 0xff, count);
ut64 addr = io->off;
if (!desc || !desc->data) {
return -1;
}
return debug_gdb_read_at (buf, count, addr);
}
static int __close(RIODesc *fd) {
if (fd) {
R_FREE (fd->name);
}
gdbr_disconnect (desc);
gdbr_cleanup (desc);
free (desc);
return -1;
}
static int __getpid(RIODesc *fd) {
return desc ? desc->pid : -1;
#if 0
// dupe for ? r_io_desc_get_pid (desc);
if (!desc || !desc->data) {
return -1;
}
RIODescData *iodd = desc->data;
if (iodd) {
if (iodd->magic != R_GDB_MAGIC) {
return -1;
}
return iodd->pid;
}
return -1;
#endif
}
static int __gettid(RIODesc *fd) {
return desc ? desc->tid : -1;
}
int send_msg(libgdbr_t* g, const char* command);
int read_packet(libgdbr_t* instance);
static int __system(RIO *io, RIODesc *fd, const char *cmd) {
//printf("ptrace io command (%s)\n", cmd);
/* XXX ugly hack for testing purposes */
if (!cmd[0] || cmd[0] == '?' || !strcmp (cmd, "help")) {
eprintf ("Usage: =!cmd args\n"
" =!pid - show targeted pid\n"
" =!pkt s - send packet 's'\n"
" =!monitor cmd - hex-encode monitor command and pass"
" to target interpreter\n"
" =!detach [pid] - detach from remote/detach specific pid\n"
" =!inv.reg - invalidate reg cache\n"
" =!pktsz - get max packet size used\n"
" =!pktsz bytes - set max. packet size as 'bytes' bytes\n"
" =!exec_file [pid] - get file which was executed for"
" current/specified pid\n");
return true;
}
if (!strncmp (cmd, "pktsz", 5)) {
const char *ptr = r_str_chop_ro (cmd + 5);
if (!isdigit (*ptr)) {
io->cb_printf ("packet size: %u bytes\n",
desc->stub_features.pkt_sz);
return true;
}
ut32 pktsz;
if (!(pktsz = (ut32) strtoul (ptr, NULL, 10))) {
// pktsz = 0 doesn't make sense
return false;
}
desc->stub_features.pkt_sz = R_MAX (pktsz, 64); // min = 64
return true;
}
if (!strncmp (cmd, "detach", 6)) {
int pid;
if (!isspace (cmd[6]) || !desc->stub_features.multiprocess) {
return gdbr_detach (desc) >= 0;
}
cmd = r_str_chop_ro (cmd + 6);
if (!*cmd || !(pid = strtoul (cmd, NULL, 10))) {
return gdbr_detach (desc) >= 0;
}
return gdbr_detach_pid (desc, pid) >= 0;
}
if (!strncmp (cmd, "pkt ", 4)) {
if (send_msg (desc, cmd + 4) == -1) {
return false;
}
int r = read_packet (desc);
desc->data[desc->data_len] = '\0';
io->cb_printf ("reply:\n%s\n", desc->data);
if (!desc->no_ack) {
eprintf ("[waiting for ack]\n");
}
return r >= 0;
}
if (!strncmp (cmd, "pid", 3)) {
int pid = desc ? desc->pid : -1;
if (!cmd[3]) {
io->cb_printf ("%d\n", pid);
}
return pid;
}
if (!strncmp (cmd, "monitor", 7)) {
const char *qrcmd = cmd + 8;
if (!isspace (cmd[7])) {
qrcmd = "help";
}
if (gdbr_send_qRcmd (desc, qrcmd, io->cb_printf) < 0) {
eprintf ("remote error\n");
return false;
}
return true;
}
if (!strncmp (cmd, "inv.reg", 7)) {
gdbr_invalidate_reg_cache ();
return true;
}
if (r_str_startswith (cmd, "exec_file")) {
const char *ptr = cmd + strlen ("exec_file");
char *file;
int pid;
if (!isspace (*ptr)) {
if (!(file = gdbr_exec_file_read (desc, 0))) {
return false;
}
} else {
while (isspace (*ptr)) {
ptr++;
}
if (isdigit (*ptr)) {
pid = atoi (ptr);
if (!(file = gdbr_exec_file_read (desc, pid))) {
return false;
}
} else {
if (!(file = gdbr_exec_file_read (desc, 0))) {
return false;
}
}
}
io->cb_printf ("%s\n", file);
free (file);
return true;
}
// This is internal, not available to user. Sets a flag that next call to
// get memmap will be for getting baddr
if (!strcmp (cmd, "baddr")) {
desc->get_baddr = true;
return true;
}
eprintf ("Try: '=!?'\n");
return true;
}
RIOPlugin r_io_plugin_gdb = {
//void *plugin;
.name = "gdb",
.license = "LGPL3",
.desc = "Attach to gdbserver, 'qemu -s', gdb://localhost:1234",
.open = __open,
.close = __close,
.read = __read,
.write = __write,
.check = __plugin_open,
.lseek = __lseek,
.system = __system,
.getpid = __getpid,
.gettid = __gettid,
.isdbg = true
};
#ifndef CORELIB
RLibStruct radare_plugin = {
.type = R_LIB_TYPE_IO,
.data = &r_io_plugin_gdb,
.version = R2_VERSION
};
#endif