| //===-- ProcessMachCore.cpp -----------------------------------------------===// | |
| // | |
| // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. | |
| // See https://llvm.org/LICENSE.txt for license information. | |
| // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception | |
| // | |
| //===----------------------------------------------------------------------===// | |
| #include <cerrno> | |
| #include <cstdlib> | |
| #include "lldb/Core/Debugger.h" | |
| #include "lldb/Core/Module.h" | |
| #include "lldb/Core/ModuleSpec.h" | |
| #include "lldb/Core/PluginManager.h" | |
| #include "lldb/Core/Section.h" | |
| #include "lldb/Host/Host.h" | |
| #include "lldb/Symbol/ObjectFile.h" | |
| #include "lldb/Target/MemoryRegionInfo.h" | |
| #include "lldb/Target/SectionLoadList.h" | |
| #include "lldb/Target/Target.h" | |
| #include "lldb/Target/Thread.h" | |
| #include "lldb/Utility/AppleUuidCompatibility.h" | |
| #include "lldb/Utility/DataBuffer.h" | |
| #include "lldb/Utility/LLDBLog.h" | |
| #include "lldb/Utility/Log.h" | |
| #include "lldb/Utility/State.h" | |
| #include "lldb/Utility/UUID.h" | |
| #include "llvm/Support/MathExtras.h" | |
| #include "ProcessMachCore.h" | |
| #include "Plugins/Process/Utility/StopInfoMachException.h" | |
| #include "ThreadMachCore.h" | |
| // Needed for the plug-in names for the dynamic loaders. | |
| #include "lldb/Host/SafeMachO.h" | |
| #include "Plugins/DynamicLoader/Darwin-Kernel/DynamicLoaderDarwinKernel.h" | |
| #include "Plugins/DynamicLoader/MacOSX-DYLD/DynamicLoaderMacOSXDYLD.h" | |
| #include "Plugins/DynamicLoader/Static/DynamicLoaderStatic.h" | |
| #include "Plugins/ObjectFile/Mach-O/ObjectFileMachO.h" | |
| #include "Plugins/Platform/MacOSX/PlatformDarwinKernel.h" | |
| #include <memory> | |
| using namespace lldb; | |
| using namespace lldb_private; | |
| LLDB_PLUGIN_DEFINE(ProcessMachCore) | |
| llvm::StringRef ProcessMachCore::GetPluginDescriptionStatic() { | |
| return "Mach-O core file debugging plug-in."; | |
| } | |
| void ProcessMachCore::Terminate() { | |
| PluginManager::UnregisterPlugin(ProcessMachCore::CreateInstance); | |
| } | |
| lldb::ProcessSP ProcessMachCore::CreateInstance(lldb::TargetSP target_sp, | |
| ListenerSP listener_sp, | |
| const FileSpec *crash_file, | |
| bool can_connect) { | |
| lldb::ProcessSP process_sp; | |
| if (crash_file && !can_connect) { | |
| const size_t header_size = sizeof(llvm::MachO::mach_header); | |
| auto data_sp = FileSystem::Instance().CreateDataBuffer( | |
| crash_file->GetPath(), header_size, 0); | |
| if (data_sp && data_sp->GetByteSize() == header_size) { | |
| DataExtractorSP extractor_sp = | |
| std::make_shared<DataExtractor>(data_sp, lldb::eByteOrderLittle, 4); | |
| lldb::offset_t data_offset = 0; | |
| llvm::MachO::mach_header mach_header; | |
| if (ObjectFileMachO::ParseHeader(extractor_sp, &data_offset, | |
| mach_header)) { | |
| if (mach_header.filetype == llvm::MachO::MH_CORE) | |
| process_sp = std::make_shared<ProcessMachCore>(target_sp, listener_sp, | |
| *crash_file); | |
| } | |
| } | |
| } | |
| return process_sp; | |
| } | |
| bool ProcessMachCore::CanDebug(lldb::TargetSP target_sp, | |
| bool plugin_specified_by_name) { | |
| if (plugin_specified_by_name) | |
| return true; | |
| // For now we are just making sure the file exists for a given module | |
| if (!m_core_module_sp && FileSystem::Instance().Exists(m_core_file)) { | |
| // Don't add the Target's architecture to the ModuleSpec - we may be | |
| // working with a core file that doesn't have the correct cpusubtype in the | |
| // header but we should still try to use it - | |
| // ModuleSpecList::FindMatchingModuleSpec enforces a strict arch mach. | |
| ModuleSpec core_module_spec(m_core_file); | |
| core_module_spec.SetTarget(target_sp); | |
| Status error(ModuleList::GetSharedModule(core_module_spec, m_core_module_sp, | |
| nullptr, nullptr)); | |
| if (m_core_module_sp) { | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| if (core_objfile && core_objfile->GetType() == ObjectFile::eTypeCoreFile) | |
| return true; | |
| } | |
| } | |
| return false; | |
| } | |
| // ProcessMachCore constructor | |
| ProcessMachCore::ProcessMachCore(lldb::TargetSP target_sp, | |
| ListenerSP listener_sp, | |
| const FileSpec &core_file) | |
| : PostMortemProcess(target_sp, listener_sp, core_file), m_core_aranges(), | |
| m_core_range_infos(), m_core_module_sp(), | |
| m_dyld_addr(LLDB_INVALID_ADDRESS), | |
| m_dyld_all_image_infos_addr(LLDB_INVALID_ADDRESS), | |
| m_mach_kernel_addr(LLDB_INVALID_ADDRESS) {} | |
| // Destructor | |
| ProcessMachCore::~ProcessMachCore() { | |
| Clear(); | |
| // We need to call finalize on the process before destroying ourselves to | |
| // make sure all of the broadcaster cleanup goes as planned. If we destruct | |
| // this class, then Process::~Process() might have problems trying to fully | |
| // destroy the broadcaster. | |
| Finalize(true /* destructing */); | |
| } | |
| bool ProcessMachCore::CheckAddressForDyldOrKernel(lldb::addr_t addr, | |
| addr_t &dyld, | |
| addr_t &kernel) { | |
| Log *log(GetLog(LLDBLog::DynamicLoader | LLDBLog::Process)); | |
| llvm::MachO::mach_header header; | |
| Status error; | |
| dyld = kernel = LLDB_INVALID_ADDRESS; | |
| if (DoReadMemory(addr, &header, sizeof(header), error) != sizeof(header)) | |
| return false; | |
| if (header.magic == llvm::MachO::MH_CIGAM || | |
| header.magic == llvm::MachO::MH_CIGAM_64) { | |
| header.magic = llvm::byteswap<uint32_t>(header.magic); | |
| header.cputype = llvm::byteswap<uint32_t>(header.cputype); | |
| header.cpusubtype = llvm::byteswap<uint32_t>(header.cpusubtype); | |
| header.filetype = llvm::byteswap<uint32_t>(header.filetype); | |
| header.ncmds = llvm::byteswap<uint32_t>(header.ncmds); | |
| header.sizeofcmds = llvm::byteswap<uint32_t>(header.sizeofcmds); | |
| header.flags = llvm::byteswap<uint32_t>(header.flags); | |
| } | |
| if (header.magic == llvm::MachO::MH_MAGIC || | |
| header.magic == llvm::MachO::MH_MAGIC_64) { | |
| // Check MH_EXECUTABLE to see if we can find the mach image that contains | |
| // the shared library list. The dynamic loader (dyld) is what contains the | |
| // list for user applications, and the mach kernel contains a global that | |
| // has the list of kexts to load | |
| switch (header.filetype) { | |
| case llvm::MachO::MH_DYLINKER: | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s found a user " | |
| "process dyld binary image at 0x%" PRIx64, | |
| __FUNCTION__, addr); | |
| dyld = addr; | |
| return true; | |
| case llvm::MachO::MH_EXECUTE: | |
| // Check MH_EXECUTABLE file types to see if the dynamic link object flag | |
| // is NOT set. If it isn't, then we have a mach_kernel. | |
| if ((header.flags & llvm::MachO::MH_DYLDLINK) == 0) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s found a mach " | |
| "kernel binary image at 0x%" PRIx64, | |
| __FUNCTION__, addr); | |
| // Address of the mach kernel "struct mach_header" in the core file. | |
| kernel = addr; | |
| return true; | |
| } | |
| break; | |
| } | |
| } | |
| return false; | |
| } | |
| void ProcessMachCore::CreateMemoryRegions() { | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| SectionList *section_list = core_objfile->GetSectionList(); | |
| const uint32_t num_sections = section_list->GetNumSections(0); | |
| bool ranges_are_sorted = true; | |
| addr_t vm_addr = 0; | |
| for (uint32_t i = 0; i < num_sections; ++i) { | |
| Section *section = section_list->GetSectionAtIndex(i).get(); | |
| if (section && section->GetFileSize() > 0) { | |
| lldb::addr_t section_vm_addr = section->GetFileAddress(); | |
| FileRange file_range(section->GetFileOffset(), section->GetFileSize()); | |
| VMRangeToFileOffset::Entry range_entry( | |
| section_vm_addr, section->GetByteSize(), file_range); | |
| if (vm_addr > section_vm_addr) | |
| ranges_are_sorted = false; | |
| vm_addr = section->GetFileAddress(); | |
| VMRangeToFileOffset::Entry *last_entry = m_core_aranges.Back(); | |
| if (last_entry && | |
| last_entry->GetRangeEnd() == range_entry.GetRangeBase() && | |
| last_entry->data.GetRangeEnd() == range_entry.data.GetRangeBase()) { | |
| last_entry->SetRangeEnd(range_entry.GetRangeEnd()); | |
| last_entry->data.SetRangeEnd(range_entry.data.GetRangeEnd()); | |
| } else { | |
| m_core_aranges.Append(range_entry); | |
| } | |
| // Some core files don't fill in the permissions correctly. If that is | |
| // the case assume read + execute so clients don't think the memory is | |
| // not readable, or executable. The memory isn't writable since this | |
| // plug-in doesn't implement DoWriteMemory. | |
| uint32_t permissions = section->GetPermissions(); | |
| if (permissions == 0) | |
| permissions = lldb::ePermissionsReadable | lldb::ePermissionsExecutable; | |
| m_core_range_infos.Append(VMRangeToPermissions::Entry( | |
| section_vm_addr, section->GetByteSize(), permissions)); | |
| } | |
| } | |
| if (!ranges_are_sorted) { | |
| m_core_aranges.Sort(); | |
| m_core_range_infos.Sort(); | |
| } | |
| } | |
| // Some corefiles have a UUID stored in a low memory | |
| // address. We inspect a set list of addresses for | |
| // the characters 'uuid' and 16 bytes later there will | |
| // be a uuid_t UUID. If we can find a binary that | |
| // matches the UUID, it is loaded with no slide in the target. | |
| bool ProcessMachCore::LoadBinaryViaLowmemUUID() { | |
| Log *log(GetLog(LLDBLog::DynamicLoader | LLDBLog::Process)); | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| uint64_t lowmem_uuid_addresses[] = {0x2000204, 0x1000204, 0x1000020, 0x4204, | |
| 0x1204, 0x1020, 0x4020, 0xc00, | |
| 0xC0, 0}; | |
| for (uint64_t addr : lowmem_uuid_addresses) { | |
| const VMRangeToFileOffset::Entry *core_memory_entry = | |
| m_core_aranges.FindEntryThatContains(addr); | |
| if (core_memory_entry) { | |
| const addr_t offset = addr - core_memory_entry->GetRangeBase(); | |
| const addr_t bytes_left = core_memory_entry->GetRangeEnd() - addr; | |
| // (4-bytes 'uuid' + 12 bytes pad for align + 16 bytes uuid_t) == 32 bytes | |
| if (bytes_left >= 32) { | |
| char strbuf[4]; | |
| if (core_objfile->CopyData( | |
| core_memory_entry->data.GetRangeBase() + offset, 4, &strbuf) && | |
| strncmp("uuid", (char *)&strbuf, 4) == 0) { | |
| uuid_t uuid_bytes; | |
| if (core_objfile->CopyData(core_memory_entry->data.GetRangeBase() + | |
| offset + 16, | |
| sizeof(uuid_t), uuid_bytes)) { | |
| UUID uuid(uuid_bytes, sizeof(uuid_t)); | |
| if (uuid.IsValid()) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::LoadBinaryViaLowmemUUID: found " | |
| "binary uuid %s at low memory address 0x%" PRIx64, | |
| uuid.GetAsString().c_str(), addr); | |
| // We have no address specified, only a UUID. Load it at the file | |
| // address. | |
| DynamicLoader::BinarySpec bin_spec; | |
| bin_spec.uuid = uuid; | |
| bin_spec.value = 0; | |
| bin_spec.value_is_offset = true; | |
| bin_spec.force_symbol_search = true; | |
| bin_spec.notify = true; | |
| bin_spec.set_address_in_target = true; | |
| bin_spec.is_main_executable = true; | |
| llvm::Expected<ModuleSP> module = | |
| DynamicLoader::LocateAndLoadBinary(this, bin_spec); | |
| if (module) | |
| m_dyld_plugin_name = DynamicLoaderStatic::GetPluginNameStatic(); | |
| else | |
| *GetTarget().GetDebugger().GetAsyncErrorStream() | |
| << llvm::toString(module.takeError()) << "\n"; | |
| // We found metadata saying which binary should be loaded; don't | |
| // try an exhaustive search. | |
| return true; | |
| } | |
| } | |
| } | |
| } | |
| } | |
| } | |
| return false; | |
| } | |
| bool ProcessMachCore::LoadBinariesViaMetadata() { | |
| Log *log(GetLog(LLDBLog::DynamicLoader | LLDBLog::Process)); | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| addr_t objfile_binary_value; | |
| bool objfile_binary_value_is_offset; | |
| UUID objfile_binary_uuid; | |
| ObjectFile::BinaryType type; | |
| // This will be set to true if we had a metadata hint | |
| // specifying a UUID or address -- and we should not fall back | |
| // to doing an exhaustive search. | |
| bool found_binary_spec_in_metadata = false; | |
| if (core_objfile->GetCorefileMainBinaryInfo(objfile_binary_value, | |
| objfile_binary_value_is_offset, | |
| objfile_binary_uuid, type)) { | |
| if (log) { | |
| log->Printf("ProcessMachCore::LoadBinariesViaMetadata: using binary hint " | |
| "from 'main bin spec' " | |
| "LC_NOTE with UUID %s value 0x%" PRIx64 | |
| " value is offset %d and type %d", | |
| objfile_binary_uuid.GetAsString().c_str(), | |
| objfile_binary_value, objfile_binary_value_is_offset, type); | |
| } | |
| found_binary_spec_in_metadata = true; | |
| // If this is the xnu kernel, don't load it now. Note the correct | |
| // DynamicLoader plugin to use, and the address of the kernel, and | |
| // let the DynamicLoader handle the finding & loading of the binary. | |
| if (type == ObjectFile::eBinaryTypeKernel) { | |
| m_mach_kernel_addr = objfile_binary_value; | |
| m_dyld_plugin_name = DynamicLoaderDarwinKernel::GetPluginNameStatic(); | |
| } else if (type == ObjectFile::eBinaryTypeUser) { | |
| m_dyld_addr = objfile_binary_value; | |
| m_dyld_plugin_name = DynamicLoaderMacOSXDYLD::GetPluginNameStatic(); | |
| } else if (type == ObjectFile::eBinaryTypeUserAllImageInfos) { | |
| m_dyld_all_image_infos_addr = objfile_binary_value; | |
| m_dyld_plugin_name = DynamicLoaderMacOSXDYLD::GetPluginNameStatic(); | |
| } else { | |
| DynamicLoader::BinarySpec bin_spec; | |
| bin_spec.uuid = objfile_binary_uuid; | |
| bin_spec.value = objfile_binary_value; | |
| bin_spec.value_is_offset = objfile_binary_value_is_offset; | |
| bin_spec.force_symbol_search = true; | |
| bin_spec.notify = true; | |
| bin_spec.set_address_in_target = true; | |
| bin_spec.is_main_executable = true; | |
| llvm::Expected<ModuleSP> module = | |
| DynamicLoader::LocateAndLoadBinary(this, bin_spec); | |
| if (module) | |
| m_dyld_plugin_name = DynamicLoaderStatic::GetPluginNameStatic(); | |
| else | |
| *GetTarget().GetDebugger().GetAsyncErrorStream() | |
| << llvm::toString(module.takeError()) << "\n"; | |
| } | |
| } | |
| // This checks for the presence of an LC_IDENT string in a core file; | |
| // LC_IDENT is very obsolete and should not be used in new code, but if the | |
| // load command is present, let's use the contents. | |
| UUID ident_uuid; | |
| addr_t ident_binary_addr = LLDB_INVALID_ADDRESS; | |
| std::string corefile_identifier = core_objfile->GetIdentifierString(); | |
| // Search for UUID= and stext= strings in the identifier str. | |
| if (corefile_identifier.find("UUID=") != std::string::npos) { | |
| size_t p = corefile_identifier.find("UUID=") + strlen("UUID="); | |
| std::string uuid_str = corefile_identifier.substr(p, 36); | |
| ident_uuid.SetFromStringRef(uuid_str); | |
| if (log) | |
| log->Printf("Got a UUID from LC_IDENT/kern ver str LC_NOTE: %s", | |
| ident_uuid.GetAsString().c_str()); | |
| found_binary_spec_in_metadata = true; | |
| } | |
| if (corefile_identifier.find("stext=") != std::string::npos) { | |
| size_t p = corefile_identifier.find("stext=") + strlen("stext="); | |
| if (corefile_identifier[p] == '0' && corefile_identifier[p + 1] == 'x') { | |
| ident_binary_addr = | |
| ::strtoul(corefile_identifier.c_str() + p, nullptr, 16); | |
| if (log) | |
| log->Printf("Got a load address from LC_IDENT/kern ver str " | |
| "LC_NOTE: 0x%" PRIx64, | |
| ident_binary_addr); | |
| found_binary_spec_in_metadata = true; | |
| } | |
| } | |
| // Search for a "Darwin Kernel" str indicating kernel; else treat as | |
| // standalone | |
| if (corefile_identifier.find("Darwin Kernel") != std::string::npos && | |
| ident_uuid.IsValid() && ident_binary_addr != LLDB_INVALID_ADDRESS) { | |
| if (log) | |
| log->Printf( | |
| "ProcessMachCore::LoadBinariesViaMetadata: Found kernel binary via " | |
| "LC_IDENT/kern ver str LC_NOTE"); | |
| m_mach_kernel_addr = ident_binary_addr; | |
| found_binary_spec_in_metadata = true; | |
| } else if (ident_uuid.IsValid()) { | |
| // We have no address specified, only a UUID. Load it at the file | |
| // address. | |
| DynamicLoader::BinarySpec bin_spec; | |
| bin_spec.uuid = ident_uuid; | |
| bin_spec.value = ident_binary_addr; | |
| bin_spec.force_symbol_search = true; | |
| bin_spec.notify = true; | |
| bin_spec.set_address_in_target = true; | |
| bin_spec.is_main_executable = true; | |
| llvm::Expected<ModuleSP> module = | |
| DynamicLoader::LocateAndLoadBinary(this, bin_spec); | |
| if (module) { | |
| found_binary_spec_in_metadata = true; | |
| m_dyld_plugin_name = DynamicLoaderStatic::GetPluginNameStatic(); | |
| } else { | |
| *GetTarget().GetDebugger().GetAsyncErrorStream() | |
| << llvm::toString(module.takeError()) << "\n"; | |
| } | |
| } | |
| // Finally, load any binaries noted by "load binary" LC_NOTEs in the | |
| // corefile | |
| if (core_objfile->LoadCoreFileImages(*this)) { | |
| found_binary_spec_in_metadata = true; | |
| m_dyld_plugin_name = DynamicLoaderStatic::GetPluginNameStatic(); | |
| } | |
| if (!found_binary_spec_in_metadata && LoadBinaryViaLowmemUUID()) | |
| found_binary_spec_in_metadata = true; | |
| // LoadCoreFileImges may have set the dynamic loader, e.g. in | |
| // PlatformDarwinKernel::LoadPlatformBinaryAndSetup(). | |
| // If we now have a dynamic loader, save its name so we don't | |
| // un-set it later. | |
| if (m_dyld_up) | |
| m_dyld_plugin_name = GetDynamicLoader()->GetPluginName(); | |
| return found_binary_spec_in_metadata; | |
| } | |
| void ProcessMachCore::LoadBinariesViaExhaustiveSearch() { | |
| Log *log(GetLog(LLDBLog::DynamicLoader | LLDBLog::Process)); | |
| // Search the pages of the corefile for dyld or mach kernel | |
| // binaries. There may be multiple things that look like a kernel | |
| // in the corefile; disambiguating to the correct one can be difficult. | |
| std::vector<addr_t> dylds_found; | |
| std::vector<addr_t> kernels_found; | |
| // To do an exhaustive search, we'll need to create data extractors | |
| // to get correctly sized/endianness fields. If we had a main binary | |
| // already, we would have set the Target to that - so here we'll use | |
| // the corefile's cputype/cpusubtype as the best guess. | |
| if (!GetTarget().GetArchitecture().IsValid()) { | |
| // The corefile's architecture is our best starting point. | |
| ArchSpec arch(m_core_module_sp->GetArchitecture()); | |
| if (arch.IsValid()) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Setting target ArchSpec based on " | |
| "corefile mach-o cputype/cpusubtype", | |
| __FUNCTION__); | |
| GetTarget().SetArchitecture(arch); | |
| } | |
| } | |
| const size_t num_core_aranges = m_core_aranges.GetSize(); | |
| for (size_t i = 0; i < num_core_aranges; ++i) { | |
| const VMRangeToFileOffset::Entry *entry = m_core_aranges.GetEntryAtIndex(i); | |
| lldb::addr_t section_vm_addr_start = entry->GetRangeBase(); | |
| lldb::addr_t section_vm_addr_end = entry->GetRangeEnd(); | |
| for (lldb::addr_t section_vm_addr = section_vm_addr_start; | |
| section_vm_addr < section_vm_addr_end; section_vm_addr += 0x1000) { | |
| addr_t dyld, kernel; | |
| if (CheckAddressForDyldOrKernel(section_vm_addr, dyld, kernel)) { | |
| if (dyld != LLDB_INVALID_ADDRESS) | |
| dylds_found.push_back(dyld); | |
| if (kernel != LLDB_INVALID_ADDRESS) | |
| kernels_found.push_back(kernel); | |
| } | |
| } | |
| } | |
| // If we found more than one dyld mach-o header in the corefile, | |
| // pick the first one. | |
| if (dylds_found.size() > 0) | |
| m_dyld_addr = dylds_found[0]; | |
| if (kernels_found.size() > 0) | |
| m_mach_kernel_addr = kernels_found[0]; | |
| // Zero or one kernels found, we're done. | |
| if (kernels_found.size() < 2) | |
| return; | |
| // In the case of multiple kernel images found in the core file via | |
| // exhaustive search, we may not pick the correct one. See if the | |
| // DynamicLoaderDarwinKernel's search heuristics might identify the correct | |
| // one. | |
| // SearchForDarwinKernel will call this class' GetImageInfoAddress method | |
| // which will give it the addresses we already have. | |
| // Save those aside and set | |
| // m_mach_kernel_addr/m_dyld_addr to an invalid address temporarily so | |
| // DynamicLoaderDarwinKernel does a real search for the kernel using its | |
| // own heuristics. | |
| addr_t saved_mach_kernel_addr = m_mach_kernel_addr; | |
| addr_t saved_user_dyld_addr = m_dyld_addr; | |
| m_mach_kernel_addr = LLDB_INVALID_ADDRESS; | |
| m_dyld_addr = LLDB_INVALID_ADDRESS; | |
| m_dyld_all_image_infos_addr = LLDB_INVALID_ADDRESS; | |
| addr_t better_kernel_address = | |
| DynamicLoaderDarwinKernel::SearchForDarwinKernel(this); | |
| m_mach_kernel_addr = saved_mach_kernel_addr; | |
| m_dyld_addr = saved_user_dyld_addr; | |
| if (better_kernel_address != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using " | |
| "the kernel address " | |
| "from DynamicLoaderDarwinKernel", | |
| __FUNCTION__); | |
| m_mach_kernel_addr = better_kernel_address; | |
| } | |
| } | |
| void ProcessMachCore::LoadBinariesAndSetDYLD() { | |
| Log *log(GetLog(LLDBLog::DynamicLoader | LLDBLog::Process)); | |
| bool found_binary_spec_in_metadata = LoadBinariesViaMetadata(); | |
| if (!found_binary_spec_in_metadata) | |
| LoadBinariesViaExhaustiveSearch(); | |
| if (m_dyld_plugin_name.empty()) { | |
| // If we found both a user-process dyld and a kernel binary, we need to | |
| // decide which to prefer. | |
| if (GetCorefilePreference() == eKernelCorefile) { | |
| if (m_mach_kernel_addr != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using kernel " | |
| "corefile image " | |
| "at 0x%" PRIx64, | |
| __FUNCTION__, m_mach_kernel_addr); | |
| m_dyld_plugin_name = DynamicLoaderDarwinKernel::GetPluginNameStatic(); | |
| } else if (m_dyld_addr != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using user process dyld " | |
| "image at 0x%" PRIx64, | |
| __FUNCTION__, m_dyld_addr); | |
| m_dyld_plugin_name = DynamicLoaderMacOSXDYLD::GetPluginNameStatic(); | |
| } else if (m_dyld_all_image_infos_addr != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using user process dyld " | |
| "dyld_all_image_infos at 0x%" PRIx64, | |
| __FUNCTION__, m_dyld_all_image_infos_addr); | |
| m_dyld_plugin_name = DynamicLoaderMacOSXDYLD::GetPluginNameStatic(); | |
| } | |
| } else { | |
| if (m_dyld_addr != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using user process dyld " | |
| "image at 0x%" PRIx64, | |
| __FUNCTION__, m_dyld_addr); | |
| m_dyld_plugin_name = DynamicLoaderMacOSXDYLD::GetPluginNameStatic(); | |
| } else if (m_dyld_all_image_infos_addr != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using user process dyld " | |
| "dyld_all_image_infos at 0x%" PRIx64, | |
| __FUNCTION__, m_dyld_all_image_infos_addr); | |
| } else if (m_mach_kernel_addr != LLDB_INVALID_ADDRESS) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Using kernel " | |
| "corefile image " | |
| "at 0x%" PRIx64, | |
| __FUNCTION__, m_mach_kernel_addr); | |
| m_dyld_plugin_name = DynamicLoaderDarwinKernel::GetPluginNameStatic(); | |
| } | |
| } | |
| } | |
| } | |
| void ProcessMachCore::CleanupMemoryRegionPermissions() { | |
| if (m_dyld_plugin_name != DynamicLoaderMacOSXDYLD::GetPluginNameStatic()) { | |
| // For non-user process core files, the permissions on the core file | |
| // segments are usually meaningless, they may be just "read", because we're | |
| // dealing with kernel coredumps or early startup coredumps and the dumper | |
| // is grabbing pages of memory without knowing what they are. If they | |
| // aren't marked as "executable", that can break the unwinder which will | |
| // check a pc value to see if it is in an executable segment and stop the | |
| // backtrace early if it is not ("executable" and "unknown" would both be | |
| // fine, but "not executable" will break the unwinder). | |
| size_t core_range_infos_size = m_core_range_infos.GetSize(); | |
| for (size_t i = 0; i < core_range_infos_size; i++) { | |
| VMRangeToPermissions::Entry *ent = | |
| m_core_range_infos.GetMutableEntryAtIndex(i); | |
| ent->data = lldb::ePermissionsReadable | lldb::ePermissionsExecutable; | |
| } | |
| } | |
| } | |
| // Process Control | |
| Status ProcessMachCore::DoLoadCore() { | |
| Status error; | |
| if (!m_core_module_sp) { | |
| error = Status::FromErrorString("invalid core module"); | |
| return error; | |
| } | |
| Log *log(GetLog(LLDBLog::DynamicLoader | LLDBLog::Target)); | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| if (core_objfile == nullptr) { | |
| error = Status::FromErrorString("invalid core object file"); | |
| return error; | |
| } | |
| SetCanJIT(false); | |
| // If we have an executable binary in the Target already, | |
| // use that to set the Target's ArchSpec. | |
| // | |
| // Don't initialize the ArchSpec based on the corefile's cputype/cpusubtype | |
| // here, the corefile creator may not know the correct subtype of the code | |
| // that is executing, initialize the Target to that, and if the | |
| // main binary has Python code which initializes based on the Target arch, | |
| // get the wrong subtype value. | |
| ModuleSP exe_module_sp = GetTarget().GetExecutableModule(); | |
| if (exe_module_sp && exe_module_sp->GetArchitecture().IsValid()) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Was given binary + corefile, setting " | |
| "target ArchSpec to binary to start", | |
| __FUNCTION__); | |
| GetTarget().SetArchitecture(exe_module_sp->GetArchitecture()); | |
| } | |
| CreateMemoryRegions(); | |
| LoadBinariesAndSetDYLD(); | |
| CleanupMemoryRegionPermissions(); | |
| exe_module_sp = GetTarget().GetExecutableModule(); | |
| if (exe_module_sp && exe_module_sp->GetArchitecture().IsValid()) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: have executable binary in the Target " | |
| "after metadata/scan. Setting Target's ArchSpec based on " | |
| "that.", | |
| __FUNCTION__); | |
| GetTarget().SetArchitecture(exe_module_sp->GetArchitecture()); | |
| } else { | |
| // The corefile's architecture is our best starting point. | |
| ArchSpec arch(m_core_module_sp->GetArchitecture()); | |
| if (arch.IsValid()) { | |
| LLDB_LOGF(log, | |
| "ProcessMachCore::%s: Setting target ArchSpec based on " | |
| "corefile mach-o cputype/cpusubtype", | |
| __FUNCTION__); | |
| GetTarget().SetArchitecture(arch); | |
| } | |
| } | |
| AddressableBits addressable_bits = core_objfile->GetAddressableBits(); | |
| SetAddressableBitMasks(addressable_bits); | |
| return error; | |
| } | |
| lldb_private::DynamicLoader *ProcessMachCore::GetDynamicLoader() { | |
| if (m_dyld_up.get() == nullptr) | |
| m_dyld_up.reset(DynamicLoader::FindPlugin(this, m_dyld_plugin_name)); | |
| return m_dyld_up.get(); | |
| } | |
| bool ProcessMachCore::DoUpdateThreadList(ThreadList &old_thread_list, | |
| ThreadList &new_thread_list) { | |
| if (old_thread_list.GetSize(false) == 0) { | |
| // Make up the thread the first time this is called so we can setup our one | |
| // and only core thread state. | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| if (core_objfile) { | |
| const uint32_t num_threads = core_objfile->GetNumThreadContexts(); | |
| std::vector<lldb::tid_t> tids; | |
| if (core_objfile->GetCorefileThreadExtraInfos(tids)) { | |
| assert(tids.size() == num_threads); | |
| // Find highest tid value. | |
| lldb::tid_t highest_tid = 0; | |
| for (uint32_t i = 0; i < num_threads; i++) { | |
| if (tids[i] != LLDB_INVALID_THREAD_ID && tids[i] > highest_tid) | |
| highest_tid = tids[i]; | |
| } | |
| lldb::tid_t current_unused_tid = highest_tid + 1; | |
| for (uint32_t i = 0; i < num_threads; i++) { | |
| if (tids[i] == LLDB_INVALID_THREAD_ID) { | |
| tids[i] = current_unused_tid++; | |
| } | |
| } | |
| } else { | |
| // No metadata, insert numbers sequentially from 0. | |
| for (uint32_t i = 0; i < num_threads; i++) { | |
| tids.push_back(i); | |
| } | |
| } | |
| for (uint32_t i = 0; i < num_threads; i++) { | |
| ThreadSP thread_sp = | |
| std::make_shared<ThreadMachCore>(*this, tids[i], i); | |
| new_thread_list.AddThread(thread_sp); | |
| } | |
| } | |
| } else { | |
| const uint32_t num_threads = old_thread_list.GetSize(false); | |
| for (uint32_t i = 0; i < num_threads; ++i) | |
| new_thread_list.AddThread(old_thread_list.GetThreadAtIndex(i, false)); | |
| } | |
| return new_thread_list.GetSize(false) > 0; | |
| } | |
| void ProcessMachCore::RefreshStateAfterStop() { | |
| // Let all threads recover from stopping and do any clean up based on the | |
| // previous thread state (if any). | |
| m_thread_list.RefreshStateAfterStop(); | |
| // SetThreadStopInfo (m_last_stop_packet); | |
| } | |
| Status ProcessMachCore::DoDestroy() { return Status(); } | |
| // Process Queries | |
| bool ProcessMachCore::IsAlive() { return true; } | |
| bool ProcessMachCore::WarnBeforeDetach() const { return false; } | |
| // Process Memory | |
| size_t ProcessMachCore::ReadMemory(const ProcessAddress &process_addr, | |
| void *buf, size_t size, Status &error) { | |
| lldb::addr_t addr = process_addr.GetValue(); | |
| // Don't allow the caching that lldb_private::Process::ReadMemory does since | |
| // in core files we have it all cached our our core file anyway. | |
| return DoReadMemory(FixAnyAddress(addr), buf, size, error); | |
| } | |
| size_t ProcessMachCore::DoReadMemory(const ProcessAddress &process_addr, | |
| void *buf, size_t size, Status &error) { | |
| lldb::addr_t addr = process_addr.GetValue(); | |
| ObjectFile *core_objfile = m_core_module_sp->GetObjectFile(); | |
| size_t bytes_read = 0; | |
| if (core_objfile) { | |
| // Segments are not always contiguous in mach-o core files. We have core | |
| // files that have segments like: | |
| // Address Size File off File size | |
| // ---------- ---------- ---------- ---------- | |
| // LC_SEGMENT 0x000f6000 0x00001000 0x1d509ee8 0x00001000 --- --- 0 | |
| // 0x00000000 __TEXT LC_SEGMENT 0x0f600000 0x00100000 0x1d50aee8 0x00100000 | |
| // --- --- 0 0x00000000 __TEXT LC_SEGMENT 0x000f7000 0x00001000 | |
| // 0x1d60aee8 0x00001000 --- --- 0 0x00000000 __TEXT | |
| // | |
| // Any if the user executes the following command: | |
| // | |
| // (lldb) mem read 0xf6ff0 | |
| // | |
| // We would attempt to read 32 bytes from 0xf6ff0 but would only get 16 | |
| // unless we loop through consecutive memory ranges that are contiguous in | |
| // the address space, but not in the file data. | |
| while (bytes_read < size) { | |
| const addr_t curr_addr = addr + bytes_read; | |
| const VMRangeToFileOffset::Entry *core_memory_entry = | |
| m_core_aranges.FindEntryThatContains(curr_addr); | |
| if (core_memory_entry) { | |
| const addr_t offset = curr_addr - core_memory_entry->GetRangeBase(); | |
| const addr_t bytes_left = core_memory_entry->GetRangeEnd() - curr_addr; | |
| const size_t bytes_to_read = | |
| std::min(size - bytes_read, (size_t)bytes_left); | |
| const size_t curr_bytes_read = core_objfile->CopyData( | |
| core_memory_entry->data.GetRangeBase() + offset, bytes_to_read, | |
| (char *)buf + bytes_read); | |
| if (curr_bytes_read == 0) | |
| break; | |
| bytes_read += curr_bytes_read; | |
| } else { | |
| // Only set the error if we didn't read any bytes | |
| if (bytes_read == 0) | |
| error = Status::FromErrorStringWithFormat( | |
| "core file does not contain 0x%" PRIx64, curr_addr); | |
| break; | |
| } | |
| } | |
| } | |
| return bytes_read; | |
| } | |
| Status ProcessMachCore::DoGetMemoryRegionInfo(addr_t load_addr, | |
| MemoryRegionInfo ®ion_info) { | |
| region_info.Clear(); | |
| const VMRangeToPermissions::Entry *permission_entry = | |
| m_core_range_infos.FindEntryThatContainsOrFollows(load_addr); | |
| if (permission_entry) { | |
| if (permission_entry->Contains(load_addr)) { | |
| region_info.GetRange().SetRangeBase(permission_entry->GetRangeBase()); | |
| region_info.GetRange().SetRangeEnd(permission_entry->GetRangeEnd()); | |
| const Flags permissions(permission_entry->data); | |
| region_info.SetReadable( | |
| permissions.Test(ePermissionsReadable) ? eLazyBoolYes : eLazyBoolNo); | |
| region_info.SetWritable( | |
| permissions.Test(ePermissionsWritable) ? eLazyBoolYes : eLazyBoolNo); | |
| region_info.SetExecutable(permissions.Test(ePermissionsExecutable) | |
| ? eLazyBoolYes | |
| : eLazyBoolNo); | |
| region_info.SetMapped(eLazyBoolYes); | |
| } else if (load_addr < permission_entry->GetRangeBase()) { | |
| region_info.GetRange().SetRangeBase(load_addr); | |
| region_info.GetRange().SetRangeEnd(permission_entry->GetRangeBase()); | |
| region_info.SetReadable(eLazyBoolNo); | |
| region_info.SetWritable(eLazyBoolNo); | |
| region_info.SetExecutable(eLazyBoolNo); | |
| region_info.SetMapped(eLazyBoolNo); | |
| } | |
| return Status(); | |
| } else { | |
| // The corefile has no LC_SEGMENT at this virtual address, | |
| // but see if there is a binary whose Section has been | |
| // loaded at that address in the current Target. | |
| Address addr; | |
| if (GetTarget().ResolveLoadAddress(load_addr, addr)) { | |
| SectionSP section_sp(addr.GetSection()); | |
| if (section_sp) { | |
| region_info.GetRange().SetRangeBase( | |
| section_sp->GetLoadBaseAddress(&GetTarget())); | |
| region_info.GetRange().SetByteSize(section_sp->GetByteSize()); | |
| if (region_info.GetRange().Contains(load_addr)) { | |
| region_info.SetLLDBPermissions(section_sp->GetPermissions()); | |
| return Status(); | |
| } | |
| } | |
| } | |
| } | |
| region_info.GetRange().SetRangeBase(load_addr); | |
| region_info.GetRange().SetRangeEnd(LLDB_INVALID_ADDRESS); | |
| region_info.SetReadable(eLazyBoolNo); | |
| region_info.SetWritable(eLazyBoolNo); | |
| region_info.SetExecutable(eLazyBoolNo); | |
| region_info.SetMapped(eLazyBoolNo); | |
| return Status(); | |
| } | |
| void ProcessMachCore::Clear() { m_thread_list.Clear(); } | |
| void ProcessMachCore::Initialize() { | |
| PluginManager::RegisterPlugin(GetPluginNameStatic(), | |
| GetPluginDescriptionStatic(), CreateInstance); | |
| } | |
| addr_t ProcessMachCore::GetImageInfoAddress() { | |
| // The DynamicLoader plugin will call back in to this Process | |
| // method to find the virtual address of one of these: | |
| // 1. The xnu mach kernel binary Mach-O header | |
| // 2. The dyld binary Mach-O header | |
| // 3. dyld's dyld_all_image_infos object | |
| // | |
| // DynamicLoaderMacOSX will accept either the dyld Mach-O header | |
| // address or the dyld_all_image_infos interchangably, no need | |
| // to distinguish between them. It disambiguates by the Mach-O | |
| // file magic number at the start. | |
| if (GetCorefilePreference() == eKernelCorefile) { | |
| if (m_mach_kernel_addr != LLDB_INVALID_ADDRESS) | |
| return m_mach_kernel_addr; | |
| if (m_dyld_addr != LLDB_INVALID_ADDRESS) | |
| return m_dyld_addr; | |
| } else { | |
| if (m_dyld_addr != LLDB_INVALID_ADDRESS) | |
| return m_dyld_addr; | |
| if (m_mach_kernel_addr != LLDB_INVALID_ADDRESS) | |
| return m_mach_kernel_addr; | |
| } | |
| // m_dyld_addr and m_mach_kernel_addr both | |
| // invalid, return m_dyld_all_image_infos_addr | |
| // in case it has a useful value. | |
| return m_dyld_all_image_infos_addr; | |
| } | |
| lldb_private::ObjectFile *ProcessMachCore::GetCoreObjectFile() { | |
| return m_core_module_sp->GetObjectFile(); | |
| } |