/* * Copryight 1997 Sean Eric Fagan * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. All advertising materials mentioning features or use of this software * must display the following acknowledgement: * This product includes software developed by Sean Eric Fagan * 4. Neither the name of the author may be used to endorse or promote * products derived from this software without specific prior written * permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * * $FreeBSD: src/usr.bin/truss/setup.c,v 1.10.2.2 2002/02/15 11:43:51 des Exp $ * $DragonFly: src/usr.bin/truss/setup.c,v 1.3 2003/11/04 15:34:41 eirikn Exp $ */ /* * Various setup functions for truss. Not the cleanest-written code, * I'm afraid. */ #include #include #include #include #include #include #include #include #include #include #include #include #include "extern.h" static int evflags = 0; /* * setup_and_wait() is called to start a process. All it really does * is fork(), set itself up to stop on exec or exit, and then exec * the given command. At that point, the child process stops, and * the parent can wake up and deal with it. */ int setup_and_wait(char *command[]) { struct procfs_status pfs; char *buf; int fd; int pid; int flags; pid = fork(); if (pid == -1) { err(1, "fork failed"); } if (pid == 0) { /* Child */ int mask = S_EXEC | S_EXIT; asprintf(&buf, "%s/curproc/mem", procfs_path); if (buf == NULL) err(1, "Out of memory"); fd = open(buf, O_WRONLY); free(buf); if (fd == -1) err(2, "cannot open %s", buf); fcntl(fd, F_SETFD, 1); if (ioctl(fd, PIOCBIS, mask) == -1) err(3, "PIOCBIS"); flags = PF_LINGER; /* * The PF_LINGER flag tells procfs not to wake up the * process on last close; normally, this is the behaviour * we want. */ if (ioctl(fd, PIOCSFL, flags) == -1) warn("cannot set PF_LINGER"); execvp(command[0], command); mask = ~0; ioctl(fd, PIOCBIC, ~0); err(4, "execvp %s", command[0]); } /* Only in the parent here */ if (waitpid(pid, NULL, WNOHANG) != 0) { /* * Process exited before it got to us -- meaning the exec failed * miserably -- so we just quietly exit. */ exit(1); } asprintf(&buf, "%s/%d/mem", procfs_path, pid); if (buf == NULL) err(1, "Out of memory"); fd = open(buf, O_RDWR); free(buf); if (fd == -1) err(5, "cannot open %s", buf); if (ioctl(fd, PIOCWAIT, &pfs) == -1) err(6, "PIOCWAIT"); if (pfs.why == S_EXIT) { fprintf(stderr, "process exited before exec'ing\n"); ioctl(fd, PIOCCONT, 0); wait(0); exit(7); } close(fd); return pid; } /* * start_tracing picks up where setup_and_wait() dropped off -- namely, * it sets the event mask for the given process id. Called for both * monitoring an existing process and when we create our own. */ int start_tracing(int pid, int flags) { int fd; char *buf; struct procfs_status tmp; asprintf(&buf, "%s/%d/mem", procfs_path, pid); if (buf == NULL) err(1, "Out of memory"); fd = open(buf, O_RDWR); free(buf); if (fd == -1) { /* * The process may have run away before we could start -- this * happens with SUGID programs. So we need to see if it still * exists before we complain bitterly. */ if (kill(pid, 0) == -1) return -1; err(8, "cannot open %s", buf); } if (ioctl(fd, PIOCSTATUS, &tmp) == -1) { err(10, "cannot get procfs status struct"); } evflags = tmp.events; if (ioctl(fd, PIOCBIS, flags) == -1) err(9, "cannot set procfs event bit mask"); /* * This clears the PF_LINGER set above in setup_and_wait(); * if truss happens to die before this, then the process * needs to be woken up via procctl. */ if (ioctl(fd, PIOCSFL, 0) == -1) warn("cannot clear PF_LINGER"); return fd; } /* * Restore a process back to it's pre-truss state. * Called for SIGINT, SIGTERM, SIGQUIT. This only * applies if truss was told to monitor an already-existing * process. */ void restore_proc(int signo __unused) { extern int Procfd; ioctl(Procfd, PIOCBIC, ~0); if (evflags) ioctl(Procfd, PIOCBIS, evflags); exit(0); }