tracechild.cc revision 8108
12221SN/A/* 22221SN/A * Copyright (c) 2007 The Regents of The University of Michigan 32221SN/A * All rights reserved. 42221SN/A * 52221SN/A * Redistribution and use in source and binary forms, with or without 62221SN/A * modification, are permitted provided that the following conditions are 72221SN/A * met: redistributions of source code must retain the above copyright 82221SN/A * notice, this list of conditions and the following disclaimer; 92221SN/A * redistributions in binary form must reproduce the above copyright 102221SN/A * notice, this list of conditions and the following disclaimer in the 112221SN/A * documentation and/or other materials provided with the distribution; 122221SN/A * neither the name of the copyright holders nor the names of its 132221SN/A * contributors may be used to endorse or promote products derived from 142221SN/A * this software without specific prior written permission. 152221SN/A * 162221SN/A * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 172221SN/A * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 182221SN/A * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 192221SN/A * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 202221SN/A * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 212221SN/A * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 222221SN/A * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 232221SN/A * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 242221SN/A * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 252221SN/A * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 262221SN/A * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 272665Ssaidi@eecs.umich.edu * 282665Ssaidi@eecs.umich.edu * Authors: Gabe Black 292665Ssaidi@eecs.umich.edu */ 302221SN/A 312221SN/A#include <iostream> 323890Ssaidi@eecs.umich.edu#include <iomanip> 333890Ssaidi@eecs.umich.edu#include <errno.h> 342221SN/A#include <sys/ptrace.h> 352221SN/A#include <stdint.h> 362221SN/A#include <string.h> 372221SN/A 382221SN/A#include "tracechild_amd64.hh" 392223SN/A 402221SN/Ausing namespace std; 412221SN/A 423415Sgblack@eecs.umich.educonst char * AMD64TraceChild::regNames[numregs] = { 433415Sgblack@eecs.umich.edu //GPRs 442221SN/A "rax", "rbx", "rcx", "rdx", 453573Sgblack@eecs.umich.edu //Index registers 462221SN/A "rsi", "rdi", 472221SN/A //Base pointer and stack pointer 483576Sgblack@eecs.umich.edu "rbp", "rsp", 493576Sgblack@eecs.umich.edu //New 64 bit mode registers 503576Sgblack@eecs.umich.edu "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15", 513576Sgblack@eecs.umich.edu //Segmentation registers 523576Sgblack@eecs.umich.edu "cs", "ds", "es", "fs", "gs", "ss", "fs_base", "gs_base", 533576Sgblack@eecs.umich.edu //PC 543576Sgblack@eecs.umich.edu "rip", 553576Sgblack@eecs.umich.edu //Flags 563576Sgblack@eecs.umich.edu "eflags", 573573Sgblack@eecs.umich.edu //MMX 583573Sgblack@eecs.umich.edu "mmx0_0", "mmx0_1", "mmx1_0", "mmx1_1", 593573Sgblack@eecs.umich.edu "mmx2_0", "mmx2_1", "mmx3_0", "mmx3_1", 603573Sgblack@eecs.umich.edu "mmx4_0", "mmx4_1", "mmx5_0", "mmx5_1", 613573Sgblack@eecs.umich.edu "mmx6_0", "mmx6_1", "mmx7_0", "mmx7_1", 623576Sgblack@eecs.umich.edu //XMM 633573Sgblack@eecs.umich.edu "xmm0_0", "xmm0_1", "xmm0_2", "xmm0_3", 643573Sgblack@eecs.umich.edu "xmm1_0", "xmm1_1", "xmm1_2", "xmm1_3", 652221SN/A "xmm2_0", "xmm2_1", "xmm2_2", "xmm2_3", 662680Sktlim@umich.edu "xmm3_0", "xmm3_1", "xmm3_2", "xmm3_3", 672221SN/A "xmm4_0", "xmm4_1", "xmm4_2", "xmm4_3", 683573Sgblack@eecs.umich.edu "xmm5_0", "xmm5_1", "xmm5_2", "xmm5_3", 692223SN/A "xmm6_0", "xmm6_1", "xmm6_2", "xmm6_3", 702223SN/A "xmm7_0", "xmm7_1", "xmm7_2", "xmm7_3", 712223SN/A "xmm8_0", "xmm8_1", "xmm8_2", "xmm8_3", 723576Sgblack@eecs.umich.edu "xmm9_0", "xmm9_1", "xmm9_2", "xmm9_3", 732221SN/A "xmm10_0", "xmm10_1", "xmm10_2", "xmm10_3", 742221SN/A "xmm11_0", "xmm11_1", "xmm11_2", "xmm11_3", 753573Sgblack@eecs.umich.edu "xmm12_0", "xmm12_1", "xmm12_2", "xmm12_3", 763573Sgblack@eecs.umich.edu "xmm13_0", "xmm13_1", "xmm13_2", "xmm13_3", 772221SN/A "xmm14_0", "xmm14_1", "xmm14_2", "xmm14_3", 783573Sgblack@eecs.umich.edu "xmm15_0", "xmm15_1", "xmm15_2", "xmm15_3"}; 793573Sgblack@eecs.umich.edu 802221SN/Abool 813573Sgblack@eecs.umich.eduAMD64TraceChild::sendState(int socket) 823573Sgblack@eecs.umich.edu{ 833573Sgblack@eecs.umich.edu uint64_t regVal64 = 0; 843573Sgblack@eecs.umich.edu uint32_t regVal32 = 0; 853576Sgblack@eecs.umich.edu for (int x = 0; x <= R15; x++) { 863576Sgblack@eecs.umich.edu regVal64 = getRegVal(x); 873576Sgblack@eecs.umich.edu if (write(socket, ®Val64, sizeof(regVal64)) == -1) { 883576Sgblack@eecs.umich.edu cerr << "Write failed! " << strerror(errno) << endl; 893573Sgblack@eecs.umich.edu tracing = false; 903573Sgblack@eecs.umich.edu return false; 913576Sgblack@eecs.umich.edu } 923576Sgblack@eecs.umich.edu } 933576Sgblack@eecs.umich.edu regVal64 = getRegVal(RIP); 943576Sgblack@eecs.umich.edu if (write(socket, ®Val64, sizeof(regVal64)) == -1) { 953576Sgblack@eecs.umich.edu cerr << "Write failed! " << strerror(errno) << endl; 963576Sgblack@eecs.umich.edu tracing = false; 973576Sgblack@eecs.umich.edu return false; 983576Sgblack@eecs.umich.edu } 993576Sgblack@eecs.umich.edu for (int x = MMX0_0; x <= MMX7_1; x++) { 1003576Sgblack@eecs.umich.edu regVal32 = getRegVal(x); 1013576Sgblack@eecs.umich.edu if (write(socket, ®Val32, sizeof(regVal32)) == -1) { 1023576Sgblack@eecs.umich.edu cerr << "Write failed! " << strerror(errno) << endl; 1033576Sgblack@eecs.umich.edu tracing = false; 1043576Sgblack@eecs.umich.edu return false; 1053576Sgblack@eecs.umich.edu } 1063576Sgblack@eecs.umich.edu } 1073576Sgblack@eecs.umich.edu for (int x = XMM0_0; x <= XMM15_3; x++) { 1083576Sgblack@eecs.umich.edu regVal32 = getRegVal(x); 1093576Sgblack@eecs.umich.edu if (write(socket, ®Val32, sizeof(regVal32)) == -1) { 1103576Sgblack@eecs.umich.edu cerr << "Write failed! " << strerror(errno) << endl; 1113576Sgblack@eecs.umich.edu tracing = false; 1123576Sgblack@eecs.umich.edu return false; 1133576Sgblack@eecs.umich.edu } 1143576Sgblack@eecs.umich.edu } 1153576Sgblack@eecs.umich.edu return true; 1163576Sgblack@eecs.umich.edu} 1173576Sgblack@eecs.umich.edu 1183576Sgblack@eecs.umich.eduint64_t 1193576Sgblack@eecs.umich.eduAMD64TraceChild::getRegs(user_regs_struct & myregs, 1203576Sgblack@eecs.umich.edu user_fpregs_struct & myfpregs, int num) 1213576Sgblack@eecs.umich.edu{ 1223576Sgblack@eecs.umich.edu assert(num < numregs && num >= 0); 1233576Sgblack@eecs.umich.edu switch (num) { 1243576Sgblack@eecs.umich.edu //GPRs 1253576Sgblack@eecs.umich.edu case RAX: return myregs.rax; 1263576Sgblack@eecs.umich.edu case RBX: return myregs.rbx; 1273576Sgblack@eecs.umich.edu case RCX: return myregs.rcx; 1283576Sgblack@eecs.umich.edu case RDX: return myregs.rdx; 1293576Sgblack@eecs.umich.edu //Index registers 1303576Sgblack@eecs.umich.edu case RSI: return myregs.rsi; 1313576Sgblack@eecs.umich.edu case RDI: return myregs.rdi; 1323573Sgblack@eecs.umich.edu //Base pointer and stack pointer 1333573Sgblack@eecs.umich.edu case RBP: return myregs.rbp; 1343573Sgblack@eecs.umich.edu case RSP: return myregs.rsp; 1353573Sgblack@eecs.umich.edu //New 64 bit mode registers 1362221SN/A case R8: return myregs.r8; 1372221SN/A case R9: return myregs.r9; 1382221SN/A case R10: return myregs.r10; 1393576Sgblack@eecs.umich.edu case R11: return myregs.r11; 1403576Sgblack@eecs.umich.edu case R12: return myregs.r12; 1413576Sgblack@eecs.umich.edu case R13: return myregs.r13; 1423576Sgblack@eecs.umich.edu case R14: return myregs.r14; 1433576Sgblack@eecs.umich.edu case R15: return myregs.r15; 1443576Sgblack@eecs.umich.edu //Segmentation registers 1453576Sgblack@eecs.umich.edu case CS: return myregs.cs; 1463576Sgblack@eecs.umich.edu case DS: return myregs.ds; 1473576Sgblack@eecs.umich.edu case ES: return myregs.es; 1483576Sgblack@eecs.umich.edu case FS: return myregs.fs; 1493576Sgblack@eecs.umich.edu case GS: return myregs.gs; 1503576Sgblack@eecs.umich.edu case SS: return myregs.ss; 1513573Sgblack@eecs.umich.edu case FS_BASE: return myregs.fs_base; 1523573Sgblack@eecs.umich.edu case GS_BASE: return myregs.gs_base; 1532221SN/A //PC 1542221SN/A case RIP: return myregs.rip; 1552221SN/A //Flags 1562221SN/A case EFLAGS: return myregs.eflags; 1572221SN/A //MMX 1583576Sgblack@eecs.umich.edu case MMX0_0: return myfpregs.st_space[0]; 1593576Sgblack@eecs.umich.edu case MMX0_1: return myfpregs.st_space[1]; 1603576Sgblack@eecs.umich.edu case MMX1_0: return myfpregs.st_space[2]; 1613576Sgblack@eecs.umich.edu case MMX1_1: return myfpregs.st_space[3]; 1623576Sgblack@eecs.umich.edu case MMX2_0: return myfpregs.st_space[4]; 1633576Sgblack@eecs.umich.edu case MMX2_1: return myfpregs.st_space[5]; 1643576Sgblack@eecs.umich.edu case MMX3_0: return myfpregs.st_space[6]; 1653576Sgblack@eecs.umich.edu case MMX3_1: return myfpregs.st_space[7]; 1663576Sgblack@eecs.umich.edu case MMX4_0: return myfpregs.st_space[8]; 1673576Sgblack@eecs.umich.edu case MMX4_1: return myfpregs.st_space[9]; 1683576Sgblack@eecs.umich.edu case MMX5_0: return myfpregs.st_space[10]; 1693576Sgblack@eecs.umich.edu case MMX5_1: return myfpregs.st_space[11]; 1703576Sgblack@eecs.umich.edu case MMX6_0: return myfpregs.st_space[12]; 1713576Sgblack@eecs.umich.edu case MMX6_1: return myfpregs.st_space[13]; 1723576Sgblack@eecs.umich.edu case MMX7_0: return myfpregs.st_space[14]; 1733576Sgblack@eecs.umich.edu case MMX7_1: return myfpregs.st_space[15]; 1743576Sgblack@eecs.umich.edu //XMM 1753576Sgblack@eecs.umich.edu case XMM0_0: return myfpregs.xmm_space[0]; 1763576Sgblack@eecs.umich.edu case XMM0_1: return myfpregs.xmm_space[1]; 1773576Sgblack@eecs.umich.edu case XMM0_2: return myfpregs.xmm_space[2]; 1783576Sgblack@eecs.umich.edu case XMM0_3: return myfpregs.xmm_space[3]; 1793576Sgblack@eecs.umich.edu case XMM1_0: return myfpregs.xmm_space[4]; 1803576Sgblack@eecs.umich.edu case XMM1_1: return myfpregs.xmm_space[5]; 1813576Sgblack@eecs.umich.edu case XMM1_2: return myfpregs.xmm_space[6]; 1823576Sgblack@eecs.umich.edu case XMM1_3: return myfpregs.xmm_space[7]; 1833576Sgblack@eecs.umich.edu case XMM2_0: return myfpregs.xmm_space[8]; 1843576Sgblack@eecs.umich.edu case XMM2_1: return myfpregs.xmm_space[9]; 1853576Sgblack@eecs.umich.edu case XMM2_2: return myfpregs.xmm_space[10]; 1863576Sgblack@eecs.umich.edu case XMM2_3: return myfpregs.xmm_space[11]; 1873576Sgblack@eecs.umich.edu case XMM3_0: return myfpregs.xmm_space[12]; 1883576Sgblack@eecs.umich.edu case XMM3_1: return myfpregs.xmm_space[13]; 1893576Sgblack@eecs.umich.edu case XMM3_2: return myfpregs.xmm_space[14]; 1903576Sgblack@eecs.umich.edu case XMM3_3: return myfpregs.xmm_space[15]; 1913576Sgblack@eecs.umich.edu case XMM4_0: return myfpregs.xmm_space[16]; 1923576Sgblack@eecs.umich.edu case XMM4_1: return myfpregs.xmm_space[17]; 1933576Sgblack@eecs.umich.edu case XMM4_2: return myfpregs.xmm_space[18]; 1943576Sgblack@eecs.umich.edu case XMM4_3: return myfpregs.xmm_space[19]; 1953576Sgblack@eecs.umich.edu case XMM5_0: return myfpregs.xmm_space[20]; 1963576Sgblack@eecs.umich.edu case XMM5_1: return myfpregs.xmm_space[21]; 1973576Sgblack@eecs.umich.edu case XMM5_2: return myfpregs.xmm_space[22]; 1983576Sgblack@eecs.umich.edu case XMM5_3: return myfpregs.xmm_space[23]; 1993576Sgblack@eecs.umich.edu case XMM6_0: return myfpregs.xmm_space[24]; 2003576Sgblack@eecs.umich.edu case XMM6_1: return myfpregs.xmm_space[25]; 2013576Sgblack@eecs.umich.edu case XMM6_2: return myfpregs.xmm_space[26]; 2023576Sgblack@eecs.umich.edu case XMM6_3: return myfpregs.xmm_space[27]; 2033576Sgblack@eecs.umich.edu case XMM7_0: return myfpregs.xmm_space[28]; 2043576Sgblack@eecs.umich.edu case XMM7_1: return myfpregs.xmm_space[29]; 2053576Sgblack@eecs.umich.edu case XMM7_2: return myfpregs.xmm_space[30]; 2063576Sgblack@eecs.umich.edu case XMM7_3: return myfpregs.xmm_space[31]; 2073576Sgblack@eecs.umich.edu case XMM8_0: return myfpregs.xmm_space[32]; 2083576Sgblack@eecs.umich.edu case XMM8_1: return myfpregs.xmm_space[33]; 2093576Sgblack@eecs.umich.edu case XMM8_2: return myfpregs.xmm_space[34]; 2103576Sgblack@eecs.umich.edu case XMM8_3: return myfpregs.xmm_space[35]; 2113576Sgblack@eecs.umich.edu case XMM9_0: return myfpregs.xmm_space[36]; 2123576Sgblack@eecs.umich.edu case XMM9_1: return myfpregs.xmm_space[37]; 2133893Shsul@eecs.umich.edu case XMM9_2: return myfpregs.xmm_space[38]; 2143576Sgblack@eecs.umich.edu case XMM9_3: return myfpregs.xmm_space[39]; 2153576Sgblack@eecs.umich.edu case XMM10_0: return myfpregs.xmm_space[40]; 2163576Sgblack@eecs.umich.edu case XMM10_1: return myfpregs.xmm_space[41]; 2173576Sgblack@eecs.umich.edu case XMM10_2: return myfpregs.xmm_space[42]; 2183576Sgblack@eecs.umich.edu case XMM10_3: return myfpregs.xmm_space[43]; 2193576Sgblack@eecs.umich.edu case XMM11_0: return myfpregs.xmm_space[44]; 2203576Sgblack@eecs.umich.edu case XMM11_1: return myfpregs.xmm_space[45]; 2213576Sgblack@eecs.umich.edu case XMM11_2: return myfpregs.xmm_space[46]; 2223576Sgblack@eecs.umich.edu case XMM11_3: return myfpregs.xmm_space[47]; 2233576Sgblack@eecs.umich.edu case XMM12_0: return myfpregs.xmm_space[48]; 2243576Sgblack@eecs.umich.edu case XMM12_1: return myfpregs.xmm_space[49]; 2253576Sgblack@eecs.umich.edu case XMM12_2: return myfpregs.xmm_space[50]; 2263576Sgblack@eecs.umich.edu case XMM12_3: return myfpregs.xmm_space[51]; 2273576Sgblack@eecs.umich.edu case XMM13_0: return myfpregs.xmm_space[52]; 2283576Sgblack@eecs.umich.edu case XMM13_1: return myfpregs.xmm_space[53]; 2293576Sgblack@eecs.umich.edu case XMM13_2: return myfpregs.xmm_space[54]; 2303576Sgblack@eecs.umich.edu case XMM13_3: return myfpregs.xmm_space[55]; 2313576Sgblack@eecs.umich.edu case XMM14_0: return myfpregs.xmm_space[56]; 2323576Sgblack@eecs.umich.edu case XMM14_1: return myfpregs.xmm_space[57]; 2333576Sgblack@eecs.umich.edu case XMM14_2: return myfpregs.xmm_space[58]; 2343576Sgblack@eecs.umich.edu case XMM14_3: return myfpregs.xmm_space[59]; 2353576Sgblack@eecs.umich.edu case XMM15_0: return myfpregs.xmm_space[60]; 2363576Sgblack@eecs.umich.edu case XMM15_1: return myfpregs.xmm_space[61]; 2373576Sgblack@eecs.umich.edu case XMM15_2: return myfpregs.xmm_space[62]; 2383576Sgblack@eecs.umich.edu case XMM15_3: return myfpregs.xmm_space[63]; 2393576Sgblack@eecs.umich.edu default: 2403576Sgblack@eecs.umich.edu assert(0); 2413576Sgblack@eecs.umich.edu return 0; 2423576Sgblack@eecs.umich.edu } 2433576Sgblack@eecs.umich.edu} 2443576Sgblack@eecs.umich.edu 2453576Sgblack@eecs.umich.edubool 2463576Sgblack@eecs.umich.eduAMD64TraceChild::update(int pid) 2473576Sgblack@eecs.umich.edu{ 2483576Sgblack@eecs.umich.edu oldregs = regs; 2493576Sgblack@eecs.umich.edu oldfpregs = fpregs; 2503576Sgblack@eecs.umich.edu if (ptrace(PTRACE_GETREGS, pid, 0, ®s) != 0) { 2513576Sgblack@eecs.umich.edu cerr << "update: " << strerror(errno) << endl; 2523576Sgblack@eecs.umich.edu return false; 2533576Sgblack@eecs.umich.edu } 2542800Ssaidi@eecs.umich.edu if (ptrace(PTRACE_GETFPREGS, pid, 0, &fpregs) != 0) { 2553573Sgblack@eecs.umich.edu cerr << "update: " << strerror(errno) << endl; 2562800Ssaidi@eecs.umich.edu return false; 2572800Ssaidi@eecs.umich.edu } 2582800Ssaidi@eecs.umich.edu for (unsigned int x = 0; x < numregs; x++) 2592800Ssaidi@eecs.umich.edu regDiffSinceUpdate[x] = (getRegVal(x) != getOldRegVal(x)); 2603573Sgblack@eecs.umich.edu return true; 2612800Ssaidi@eecs.umich.edu} 2622800Ssaidi@eecs.umich.edu 2632800Ssaidi@eecs.umich.eduAMD64TraceChild::AMD64TraceChild() 2642800Ssaidi@eecs.umich.edu{ 2652800Ssaidi@eecs.umich.edu for (unsigned int x = 0; x < numregs; x++) 2662800Ssaidi@eecs.umich.edu regDiffSinceUpdate[x] = false; 2672800Ssaidi@eecs.umich.edu} 2682800Ssaidi@eecs.umich.edu 2692800Ssaidi@eecs.umich.eduint64_t 2702221SN/AAMD64TraceChild::getRegVal(int num) 2712221SN/A{ 2722223SN/A return getRegs(regs, fpregs, num); 2732221SN/A} 2742221SN/A 2752221SN/Aint64_t 2762221SN/AAMD64TraceChild::getOldRegVal(int num) 2772223SN/A{ 2782221SN/A return getRegs(oldregs, oldfpregs, num); 2792221SN/A} 2802800Ssaidi@eecs.umich.edu 2812223SN/Achar * 2822221SN/AAMD64TraceChild::printReg(int num) 2833890Ssaidi@eecs.umich.edu{ 284 sprintf(printBuffer, "0x%016lX", getRegVal(num)); 285 return printBuffer; 286} 287 288ostream & 289AMD64TraceChild::outputStartState(ostream & os) 290{ 291 uint64_t sp = getSP(); 292 uint64_t pc = getPC(); 293 uint64_t highestInfo = 0; 294 char obuf[1024]; 295 sprintf(obuf, "Initial stack pointer = 0x%016lx\n", sp); 296 os << obuf; 297 sprintf(obuf, "Initial program counter = 0x%016lx\n", pc); 298 os << obuf; 299 300 //Output the argument count 301 uint64_t cargc = ptrace(PTRACE_PEEKDATA, pid, sp, 0); 302 sprintf(obuf, "0x%016lx: Argc = 0x%016lx\n", sp, cargc); 303 os << obuf; 304 sp += 8; 305 306 //Output argv pointers 307 int argCount = 0; 308 uint64_t cargv; 309 do { 310 cargv = ptrace(PTRACE_PEEKDATA, pid, sp, 0); 311 sprintf(obuf, "0x%016lx: argv[%d] = 0x%016lx\n", 312 sp, argCount++, cargv); 313 if (cargv) 314 if (highestInfo < cargv) 315 highestInfo = cargv; 316 os << obuf; 317 sp += 8; 318 } while(cargv); 319 320 //Output the envp pointers 321 int envCount = 0; 322 uint64_t cenvp; 323 do { 324 cenvp = ptrace(PTRACE_PEEKDATA, pid, sp, 0); 325 sprintf(obuf, "0x%016lx: envp[%d] = 0x%016lx\n", 326 sp, envCount++, cenvp); 327 os << obuf; 328 sp += 8; 329 } while(cenvp); 330 uint64_t auxType, auxVal; 331 do { 332 auxType = ptrace(PTRACE_PEEKDATA, pid, sp, 0); 333 sp += 8; 334 auxVal = ptrace(PTRACE_PEEKDATA, pid, sp, 0); 335 sp += 8; 336 sprintf(obuf, "0x%016lx: Auxiliary vector = {0x%016lx, 0x%016lx}\n", 337 sp - 16, auxType, auxVal); 338 os << obuf; 339 } while(auxType != 0 || auxVal != 0); 340 //Print out the argument strings, environment strings, and file name. 341 string current; 342 uint64_t buf; 343 uint64_t currentStart = sp; 344 bool clearedInitialPadding = false; 345 do { 346 buf = ptrace(PTRACE_PEEKDATA, pid, sp, 0); 347 char * cbuf = (char *)&buf; 348 for (int x = 0; x < sizeof(uint64_t); x++) { 349 if (cbuf[x]) 350 current += cbuf[x]; 351 else { 352 sprintf(obuf, "0x%016lx: \"%s\"\n", 353 currentStart, current.c_str()); 354 os << obuf; 355 current = ""; 356 currentStart = sp + x + 1; 357 } 358 } 359 sp += 8; 360 clearedInitialPadding = clearedInitialPadding || buf != 0; 361 } while (!clearedInitialPadding || buf != 0 || sp <= highestInfo); 362 return os; 363} 364 365uint64_t 366AMD64TraceChild::findSyscall() 367{ 368 uint64_t rip = getPC(); 369 bool foundOpcode = false; 370 bool twoByteOpcode = false; 371 for (;;) { 372 uint64_t buf = ptrace(PTRACE_PEEKDATA, pid, rip, 0); 373 for (int i = 0; i < sizeof(uint64_t); i++) { 374 unsigned char byte = buf & 0xFF; 375 if (!foundOpcode) { 376 if(!(byte == 0x66 || //operand override 377 byte == 0x67 || //address override 378 byte == 0x2E || //cs 379 byte == 0x3E || //ds 380 byte == 0x26 || //es 381 byte == 0x64 || //fs 382 byte == 0x65 || //gs 383 byte == 0x36 || //ss 384 byte == 0xF0 || //lock 385 byte == 0xF2 || //repe 386 byte == 0xF3 || //repne 387 (byte >= 0x40 && byte <= 0x4F) // REX 388 )) { 389 foundOpcode = true; 390 } 391 } 392 if (foundOpcode) { 393 if (twoByteOpcode) { 394 //SYSCALL or SYSENTER 395 if (byte == 0x05 || byte == 0x34) 396 return rip + 1; 397 else 398 return 0; 399 } 400 if (!twoByteOpcode) { 401 if (byte == 0xCC) // INT3 402 return rip + 1; 403 else if (byte == 0xCD) // INT with byte immediate 404 return rip + 2; 405 else if (byte == 0x0F) // two byte opcode prefix 406 twoByteOpcode = true; 407 else 408 return 0; 409 } 410 } 411 buf >>= 8; 412 rip++; 413 } 414 } 415} 416 417bool 418AMD64TraceChild::step() 419{ 420 uint64_t ripAfterSyscall = findSyscall(); 421 if (ripAfterSyscall) { 422 //Get the original contents of memory 423 uint64_t buf = ptrace(PTRACE_PEEKDATA, pid, ripAfterSyscall, 0); 424 //Patch the first two bytes of the memory immediately after this with 425 //jmp -2. Either single stepping will take over before this 426 //instruction, leaving the rip where it should be, or it will take 427 //over after this instruction, -still- leaving the rip where it should 428 //be. 429 uint64_t newBuf = (buf & ~0xFFFF) | 0xFEEB; 430 //Write the patched memory to the processes address space 431 ptrace(PTRACE_POKEDATA, pid, ripAfterSyscall, newBuf); 432 //Step and hit it 433 ptraceSingleStep(); 434 //Put things back to the way they started 435 ptrace(PTRACE_POKEDATA, pid, ripAfterSyscall, buf); 436 } else { 437 //Get all the way past repe and repne string instructions in one shot. 438 uint64_t newPC, origPC = getPC(); 439 do { 440 ptraceSingleStep(); 441 newPC = getPC(); 442 } while(newPC == origPC); 443 } 444} 445 446TraceChild * genTraceChild() 447{ 448 return new AMD64TraceChild; 449} 450