ptrace.c 10.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373
  1. /* ptrace.c */
  2. /* By Ross Biro 1/23/92 */
  3. /* edited by Linus Torvalds */
  4. /* mangled further by Bob Manson (manson@santafe.edu) */
  5. /* more mutilation by David Mosberger (davidm@azstarnet.com) */
  6. #include <linux/kernel.h>
  7. #include <linux/sched.h>
  8. #include <linux/mm.h>
  9. #include <linux/smp.h>
  10. #include <linux/smp_lock.h>
  11. #include <linux/errno.h>
  12. #include <linux/ptrace.h>
  13. #include <linux/user.h>
  14. #include <linux/slab.h>
  15. #include <linux/security.h>
  16. #include <linux/signal.h>
  17. #include <asm/uaccess.h>
  18. #include <asm/pgtable.h>
  19. #include <asm/system.h>
  20. #include <asm/fpu.h>
  21. #include "proto.h"
  22. #define DEBUG DBG_MEM
  23. #undef DEBUG
  24. #ifdef DEBUG
  25. enum {
  26. DBG_MEM = (1<<0),
  27. DBG_BPT = (1<<1),
  28. DBG_MEM_ALL = (1<<2)
  29. };
  30. #define DBG(fac,args) {if ((fac) & DEBUG) printk args;}
  31. #else
  32. #define DBG(fac,args)
  33. #endif
  34. #define BREAKINST 0x00000080 /* call_pal bpt */
  35. /*
  36. * does not yet catch signals sent when the child dies.
  37. * in exit.c or in signal.c.
  38. */
  39. /*
  40. * Processes always block with the following stack-layout:
  41. *
  42. * +================================+ <---- task + 2*PAGE_SIZE
  43. * | PALcode saved frame (ps, pc, | ^
  44. * | gp, a0, a1, a2) | |
  45. * +================================+ | struct pt_regs
  46. * | | |
  47. * | frame generated by SAVE_ALL | |
  48. * | | v
  49. * +================================+
  50. * | | ^
  51. * | frame saved by do_switch_stack | | struct switch_stack
  52. * | | v
  53. * +================================+
  54. */
  55. /*
  56. * The following table maps a register index into the stack offset at
  57. * which the register is saved. Register indices are 0-31 for integer
  58. * regs, 32-63 for fp regs, and 64 for the pc. Notice that sp and
  59. * zero have no stack-slot and need to be treated specially (see
  60. * get_reg/put_reg below).
  61. */
  62. enum {
  63. REG_R0 = 0, REG_F0 = 32, REG_FPCR = 63, REG_PC = 64
  64. };
  65. #define PT_REG(reg) \
  66. (PAGE_SIZE*2 - sizeof(struct pt_regs) + offsetof(struct pt_regs, reg))
  67. #define SW_REG(reg) \
  68. (PAGE_SIZE*2 - sizeof(struct pt_regs) - sizeof(struct switch_stack) \
  69. + offsetof(struct switch_stack, reg))
  70. static int regoff[] = {
  71. PT_REG( r0), PT_REG( r1), PT_REG( r2), PT_REG( r3),
  72. PT_REG( r4), PT_REG( r5), PT_REG( r6), PT_REG( r7),
  73. PT_REG( r8), SW_REG( r9), SW_REG( r10), SW_REG( r11),
  74. SW_REG( r12), SW_REG( r13), SW_REG( r14), SW_REG( r15),
  75. PT_REG( r16), PT_REG( r17), PT_REG( r18), PT_REG( r19),
  76. PT_REG( r20), PT_REG( r21), PT_REG( r22), PT_REG( r23),
  77. PT_REG( r24), PT_REG( r25), PT_REG( r26), PT_REG( r27),
  78. PT_REG( r28), PT_REG( gp), -1, -1,
  79. SW_REG(fp[ 0]), SW_REG(fp[ 1]), SW_REG(fp[ 2]), SW_REG(fp[ 3]),
  80. SW_REG(fp[ 4]), SW_REG(fp[ 5]), SW_REG(fp[ 6]), SW_REG(fp[ 7]),
  81. SW_REG(fp[ 8]), SW_REG(fp[ 9]), SW_REG(fp[10]), SW_REG(fp[11]),
  82. SW_REG(fp[12]), SW_REG(fp[13]), SW_REG(fp[14]), SW_REG(fp[15]),
  83. SW_REG(fp[16]), SW_REG(fp[17]), SW_REG(fp[18]), SW_REG(fp[19]),
  84. SW_REG(fp[20]), SW_REG(fp[21]), SW_REG(fp[22]), SW_REG(fp[23]),
  85. SW_REG(fp[24]), SW_REG(fp[25]), SW_REG(fp[26]), SW_REG(fp[27]),
  86. SW_REG(fp[28]), SW_REG(fp[29]), SW_REG(fp[30]), SW_REG(fp[31]),
  87. PT_REG( pc)
  88. };
  89. static unsigned long zero;
  90. /*
  91. * Get address of register REGNO in task TASK.
  92. */
  93. static unsigned long *
  94. get_reg_addr(struct task_struct * task, unsigned long regno)
  95. {
  96. unsigned long *addr;
  97. if (regno == 30) {
  98. addr = &task_thread_info(task)->pcb.usp;
  99. } else if (regno == 65) {
  100. addr = &task_thread_info(task)->pcb.unique;
  101. } else if (regno == 31 || regno > 65) {
  102. zero = 0;
  103. addr = &zero;
  104. } else {
  105. addr = task_stack_page(task) + regoff[regno];
  106. }
  107. return addr;
  108. }
  109. /*
  110. * Get contents of register REGNO in task TASK.
  111. */
  112. static unsigned long
  113. get_reg(struct task_struct * task, unsigned long regno)
  114. {
  115. /* Special hack for fpcr -- combine hardware and software bits. */
  116. if (regno == 63) {
  117. unsigned long fpcr = *get_reg_addr(task, regno);
  118. unsigned long swcr
  119. = task_thread_info(task)->ieee_state & IEEE_SW_MASK;
  120. swcr = swcr_update_status(swcr, fpcr);
  121. return fpcr | swcr;
  122. }
  123. return *get_reg_addr(task, regno);
  124. }
  125. /*
  126. * Write contents of register REGNO in task TASK.
  127. */
  128. static int
  129. put_reg(struct task_struct *task, unsigned long regno, unsigned long data)
  130. {
  131. if (regno == 63) {
  132. task_thread_info(task)->ieee_state
  133. = ((task_thread_info(task)->ieee_state & ~IEEE_SW_MASK)
  134. | (data & IEEE_SW_MASK));
  135. data = (data & FPCR_DYN_MASK) | ieee_swcr_to_fpcr(data);
  136. }
  137. *get_reg_addr(task, regno) = data;
  138. return 0;
  139. }
  140. static inline int
  141. read_int(struct task_struct *task, unsigned long addr, int * data)
  142. {
  143. int copied = access_process_vm(task, addr, data, sizeof(int), 0);
  144. return (copied == sizeof(int)) ? 0 : -EIO;
  145. }
  146. static inline int
  147. write_int(struct task_struct *task, unsigned long addr, int data)
  148. {
  149. int copied = access_process_vm(task, addr, &data, sizeof(int), 1);
  150. return (copied == sizeof(int)) ? 0 : -EIO;
  151. }
  152. /*
  153. * Set breakpoint.
  154. */
  155. int
  156. ptrace_set_bpt(struct task_struct * child)
  157. {
  158. int displ, i, res, reg_b, nsaved = 0;
  159. unsigned int insn, op_code;
  160. unsigned long pc;
  161. pc = get_reg(child, REG_PC);
  162. res = read_int(child, pc, (int *) &insn);
  163. if (res < 0)
  164. return res;
  165. op_code = insn >> 26;
  166. if (op_code >= 0x30) {
  167. /*
  168. * It's a branch: instead of trying to figure out
  169. * whether the branch will be taken or not, we'll put
  170. * a breakpoint at either location. This is simpler,
  171. * more reliable, and probably not a whole lot slower
  172. * than the alternative approach of emulating the
  173. * branch (emulation can be tricky for fp branches).
  174. */
  175. displ = ((s32)(insn << 11)) >> 9;
  176. task_thread_info(child)->bpt_addr[nsaved++] = pc + 4;
  177. if (displ) /* guard against unoptimized code */
  178. task_thread_info(child)->bpt_addr[nsaved++]
  179. = pc + 4 + displ;
  180. DBG(DBG_BPT, ("execing branch\n"));
  181. } else if (op_code == 0x1a) {
  182. reg_b = (insn >> 16) & 0x1f;
  183. task_thread_info(child)->bpt_addr[nsaved++] = get_reg(child, reg_b);
  184. DBG(DBG_BPT, ("execing jump\n"));
  185. } else {
  186. task_thread_info(child)->bpt_addr[nsaved++] = pc + 4;
  187. DBG(DBG_BPT, ("execing normal insn\n"));
  188. }
  189. /* install breakpoints: */
  190. for (i = 0; i < nsaved; ++i) {
  191. res = read_int(child, task_thread_info(child)->bpt_addr[i],
  192. (int *) &insn);
  193. if (res < 0)
  194. return res;
  195. task_thread_info(child)->bpt_insn[i] = insn;
  196. DBG(DBG_BPT, (" -> next_pc=%lx\n",
  197. task_thread_info(child)->bpt_addr[i]));
  198. res = write_int(child, task_thread_info(child)->bpt_addr[i],
  199. BREAKINST);
  200. if (res < 0)
  201. return res;
  202. }
  203. task_thread_info(child)->bpt_nsaved = nsaved;
  204. return 0;
  205. }
  206. /*
  207. * Ensure no single-step breakpoint is pending. Returns non-zero
  208. * value if child was being single-stepped.
  209. */
  210. int
  211. ptrace_cancel_bpt(struct task_struct * child)
  212. {
  213. int i, nsaved = task_thread_info(child)->bpt_nsaved;
  214. task_thread_info(child)->bpt_nsaved = 0;
  215. if (nsaved > 2) {
  216. printk("ptrace_cancel_bpt: bogus nsaved: %d!\n", nsaved);
  217. nsaved = 2;
  218. }
  219. for (i = 0; i < nsaved; ++i) {
  220. write_int(child, task_thread_info(child)->bpt_addr[i],
  221. task_thread_info(child)->bpt_insn[i]);
  222. }
  223. return (nsaved != 0);
  224. }
  225. /*
  226. * Called by kernel/ptrace.c when detaching..
  227. *
  228. * Make sure the single step bit is not set.
  229. */
  230. void ptrace_disable(struct task_struct *child)
  231. {
  232. ptrace_cancel_bpt(child);
  233. }
  234. long arch_ptrace(struct task_struct *child, long request, long addr, long data)
  235. {
  236. unsigned long tmp;
  237. size_t copied;
  238. long ret;
  239. switch (request) {
  240. /* When I and D space are separate, these will need to be fixed. */
  241. case PTRACE_PEEKTEXT: /* read word at location addr. */
  242. case PTRACE_PEEKDATA:
  243. copied = access_process_vm(child, addr, &tmp, sizeof(tmp), 0);
  244. ret = -EIO;
  245. if (copied != sizeof(tmp))
  246. break;
  247. force_successful_syscall_return();
  248. ret = tmp;
  249. break;
  250. /* Read register number ADDR. */
  251. case PTRACE_PEEKUSR:
  252. force_successful_syscall_return();
  253. ret = get_reg(child, addr);
  254. DBG(DBG_MEM, ("peek $%ld->%#lx\n", addr, ret));
  255. break;
  256. /* When I and D space are separate, this will have to be fixed. */
  257. case PTRACE_POKETEXT: /* write the word at location addr. */
  258. case PTRACE_POKEDATA:
  259. ret = generic_ptrace_pokedata(child, addr, data);
  260. break;
  261. case PTRACE_POKEUSR: /* write the specified register */
  262. DBG(DBG_MEM, ("poke $%ld<-%#lx\n", addr, data));
  263. ret = put_reg(child, addr, data);
  264. break;
  265. case PTRACE_SYSCALL:
  266. /* continue and stop at next (return from) syscall */
  267. case PTRACE_CONT: /* restart after signal. */
  268. ret = -EIO;
  269. if (!valid_signal(data))
  270. break;
  271. if (request == PTRACE_SYSCALL)
  272. set_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
  273. else
  274. clear_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
  275. child->exit_code = data;
  276. /* make sure single-step breakpoint is gone. */
  277. ptrace_cancel_bpt(child);
  278. wake_up_process(child);
  279. ret = 0;
  280. break;
  281. /*
  282. * Make the child exit. Best I can do is send it a sigkill.
  283. * perhaps it should be put in the status that it wants to
  284. * exit.
  285. */
  286. case PTRACE_KILL:
  287. ret = 0;
  288. if (child->exit_state == EXIT_ZOMBIE)
  289. break;
  290. child->exit_code = SIGKILL;
  291. /* make sure single-step breakpoint is gone. */
  292. ptrace_cancel_bpt(child);
  293. wake_up_process(child);
  294. break;
  295. case PTRACE_SINGLESTEP: /* execute single instruction. */
  296. ret = -EIO;
  297. if (!valid_signal(data))
  298. break;
  299. /* Mark single stepping. */
  300. task_thread_info(child)->bpt_nsaved = -1;
  301. clear_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
  302. child->exit_code = data;
  303. wake_up_process(child);
  304. /* give it a chance to run. */
  305. ret = 0;
  306. break;
  307. default:
  308. ret = ptrace_request(child, request, addr, data);
  309. break;
  310. }
  311. return ret;
  312. }
  313. asmlinkage void
  314. syscall_trace(void)
  315. {
  316. if (!test_thread_flag(TIF_SYSCALL_TRACE))
  317. return;
  318. if (!(current->ptrace & PT_PTRACED))
  319. return;
  320. /* The 0x80 provides a way for the tracing parent to distinguish
  321. between a syscall stop and SIGTRAP delivery */
  322. ptrace_notify(SIGTRAP | ((current->ptrace & PT_TRACESYSGOOD)
  323. ? 0x80 : 0));
  324. /*
  325. * This isn't the same as continuing with a signal, but it will do
  326. * for normal use. strace only continues with a signal if the
  327. * stopping signal is not SIGTRAP. -brl
  328. */
  329. if (current->exit_code) {
  330. send_sig(current->exit_code, current, 1);
  331. current->exit_code = 0;
  332. }
  333. }