Home | History | Annotate | Download | only in mdb
      1     0   stevel /*
      2     0   stevel  * CDDL HEADER START
      3     0   stevel  *
      4     0   stevel  * The contents of this file are subject to the terms of the
      5  5084  johnlev  * Common Development and Distribution License (the "License").
      6  5084  johnlev  * You may not use this file except in compliance with the License.
      7     0   stevel  *
      8     0   stevel  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
      9     0   stevel  * or http://www.opensolaris.org/os/licensing.
     10     0   stevel  * See the License for the specific language governing permissions
     11     0   stevel  * and limitations under the License.
     12     0   stevel  *
     13     0   stevel  * When distributing Covered Code, include this CDDL HEADER in each
     14     0   stevel  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     15     0   stevel  * If applicable, add the following below this CDDL HEADER, with the
     16     0   stevel  * fields enclosed by brackets "[]" replaced with your own identifying
     17     0   stevel  * information: Portions Copyright [yyyy] [name of copyright owner]
     18     0   stevel  *
     19     0   stevel  * CDDL HEADER END
     20     0   stevel  */
     21     0   stevel /*
     22  5084  johnlev  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
     23     0   stevel  * Use is subject to license terms.
     24     0   stevel  */
     25     0   stevel 
     26     0   stevel #pragma ident	"%Z%%M%	%I%	%E% SMI"
     27     0   stevel 
     28     0   stevel #include <sys/types.h>
     29     0   stevel #include <sys/reg.h>
     30     0   stevel #include <sys/privregs.h>
     31     0   stevel #include <sys/stack.h>
     32     0   stevel #include <sys/frame.h>
     33     0   stevel 
     34     0   stevel #include <mdb/mdb_ia32util.h>
     35     0   stevel #include <mdb/mdb_target_impl.h>
     36     0   stevel #include <mdb/mdb_kreg_impl.h>
     37     0   stevel #include <mdb/mdb_debug.h>
     38     0   stevel #include <mdb/mdb_modapi.h>
     39     0   stevel #include <mdb/mdb_err.h>
     40     0   stevel #include <mdb/mdb.h>
     41     0   stevel 
     42     0   stevel /*
     43     0   stevel  * We also define an array of register names and their corresponding
     44     0   stevel  * array indices.  This is used by the getareg and putareg entry points,
     45     0   stevel  * and also by our register variable discipline.
     46     0   stevel  */
     47     0   stevel const mdb_tgt_regdesc_t mdb_ia32_kregs[] = {
     48     0   stevel 	{ "savfp", KREG_SAVFP, MDB_TGT_R_EXPORT },
     49     0   stevel 	{ "savpc", KREG_SAVPC, MDB_TGT_R_EXPORT },
     50     0   stevel 	{ "eax", KREG_EAX, MDB_TGT_R_EXPORT },
     51     0   stevel 	{ "ebx", KREG_EBX, MDB_TGT_R_EXPORT },
     52     0   stevel 	{ "ecx", KREG_ECX, MDB_TGT_R_EXPORT },
     53     0   stevel 	{ "edx", KREG_EDX, MDB_TGT_R_EXPORT },
     54     0   stevel 	{ "esi", KREG_ESI, MDB_TGT_R_EXPORT },
     55     0   stevel 	{ "edi", KREG_EDI, MDB_TGT_R_EXPORT },
     56     0   stevel 	{ "ebp", KREG_EBP, MDB_TGT_R_EXPORT },
     57     0   stevel 	{ "esp", KREG_ESP, MDB_TGT_R_EXPORT },
     58     0   stevel 	{ "cs", KREG_CS, MDB_TGT_R_EXPORT },
     59     0   stevel 	{ "ds", KREG_DS, MDB_TGT_R_EXPORT },
     60     0   stevel 	{ "ss", KREG_SS, MDB_TGT_R_EXPORT },
     61     0   stevel 	{ "es", KREG_ES, MDB_TGT_R_EXPORT },
     62     0   stevel 	{ "fs", KREG_FS, MDB_TGT_R_EXPORT },
     63     0   stevel 	{ "gs", KREG_GS, MDB_TGT_R_EXPORT },
     64     0   stevel 	{ "eflags", KREG_EFLAGS, MDB_TGT_R_EXPORT },
     65     0   stevel 	{ "eip", KREG_EIP, MDB_TGT_R_EXPORT },
     66     0   stevel 	{ "uesp", KREG_UESP, MDB_TGT_R_EXPORT | MDB_TGT_R_PRIV },
     67     0   stevel 	{ "trapno", KREG_TRAPNO, MDB_TGT_R_EXPORT | MDB_TGT_R_PRIV },
     68     0   stevel 	{ "err", KREG_ERR, MDB_TGT_R_EXPORT | MDB_TGT_R_PRIV },
     69     0   stevel 	{ NULL, 0, 0 }
     70     0   stevel };
     71     0   stevel 
     72     0   stevel void
     73     0   stevel mdb_ia32_printregs(const mdb_tgt_gregset_t *gregs)
     74     0   stevel {
     75     0   stevel 	const kreg_t *kregs = &gregs->kregs[0];
     76     0   stevel 	kreg_t eflags = kregs[KREG_EFLAGS];
     77     0   stevel 
     78     0   stevel 	mdb_printf("%%cs = 0x%04x\t\t%%eax = 0x%0?p %A\n",
     79     0   stevel 	    kregs[KREG_CS], kregs[KREG_EAX], kregs[KREG_EAX]);
     80     0   stevel 
     81     0   stevel 	mdb_printf("%%ds = 0x%04x\t\t%%ebx = 0x%0?p %A\n",
     82     0   stevel 	    kregs[KREG_DS], kregs[KREG_EBX], kregs[KREG_EBX]);
     83     0   stevel 
     84     0   stevel 	mdb_printf("%%ss = 0x%04x\t\t%%ecx = 0x%0?p %A\n",
     85     0   stevel 	    kregs[KREG_SS], kregs[KREG_ECX], kregs[KREG_ECX]);
     86     0   stevel 
     87     0   stevel 	mdb_printf("%%es = 0x%04x\t\t%%edx = 0x%0?p %A\n",
     88     0   stevel 	    kregs[KREG_ES], kregs[KREG_EDX], kregs[KREG_EDX]);
     89     0   stevel 
     90     0   stevel 	mdb_printf("%%fs = 0x%04x\t\t%%esi = 0x%0?p %A\n",
     91     0   stevel 	    kregs[KREG_FS], kregs[KREG_ESI], kregs[KREG_ESI]);
     92     0   stevel 
     93     0   stevel 	mdb_printf("%%gs = 0x%04x\t\t%%edi = 0x%0?p %A\n\n",
     94     0   stevel 	    kregs[KREG_GS], kregs[KREG_EDI], kregs[KREG_EDI]);
     95     0   stevel 
     96     0   stevel 	mdb_printf("%%eip = 0x%0?p %A\n", kregs[KREG_EIP], kregs[KREG_EIP]);
     97     0   stevel 	mdb_printf("%%ebp = 0x%0?p\n", kregs[KREG_EBP]);
     98     0   stevel 	mdb_printf("%%esp = 0x%0?p\n\n", kregs[KREG_ESP]);
     99     0   stevel 	mdb_printf("%%eflags = 0x%08x\n", eflags);
    100     0   stevel 
    101     0   stevel 	mdb_printf("  id=%u vip=%u vif=%u ac=%u vm=%u rf=%u nt=%u iopl=0x%x\n",
    102     0   stevel 	    (eflags & KREG_EFLAGS_ID_MASK) >> KREG_EFLAGS_ID_SHIFT,
    103     0   stevel 	    (eflags & KREG_EFLAGS_VIP_MASK) >> KREG_EFLAGS_VIP_SHIFT,
    104     0   stevel 	    (eflags & KREG_EFLAGS_VIF_MASK) >> KREG_EFLAGS_VIF_SHIFT,
    105     0   stevel 	    (eflags & KREG_EFLAGS_AC_MASK) >> KREG_EFLAGS_AC_SHIFT,
    106     0   stevel 	    (eflags & KREG_EFLAGS_VM_MASK) >> KREG_EFLAGS_VM_SHIFT,
    107     0   stevel 	    (eflags & KREG_EFLAGS_RF_MASK) >> KREG_EFLAGS_RF_SHIFT,
    108     0   stevel 	    (eflags & KREG_EFLAGS_NT_MASK) >> KREG_EFLAGS_NT_SHIFT,
    109     0   stevel 	    (eflags & KREG_EFLAGS_IOPL_MASK) >> KREG_EFLAGS_IOPL_SHIFT);
    110     0   stevel 
    111     0   stevel 	mdb_printf("  status=<%s,%s,%s,%s,%s,%s,%s,%s,%s>\n\n",
    112     0   stevel 	    (eflags & KREG_EFLAGS_OF_MASK) ? "OF" : "of",
    113     0   stevel 	    (eflags & KREG_EFLAGS_DF_MASK) ? "DF" : "df",
    114     0   stevel 	    (eflags & KREG_EFLAGS_IF_MASK) ? "IF" : "if",
    115     0   stevel 	    (eflags & KREG_EFLAGS_TF_MASK) ? "TF" : "tf",
    116     0   stevel 	    (eflags & KREG_EFLAGS_SF_MASK) ? "SF" : "sf",
    117     0   stevel 	    (eflags & KREG_EFLAGS_ZF_MASK) ? "ZF" : "zf",
    118     0   stevel 	    (eflags & KREG_EFLAGS_AF_MASK) ? "AF" : "af",
    119     0   stevel 	    (eflags & KREG_EFLAGS_PF_MASK) ? "PF" : "pf",
    120     0   stevel 	    (eflags & KREG_EFLAGS_CF_MASK) ? "CF" : "cf");
    121     0   stevel 
    122     0   stevel #ifndef _KMDB
    123     0   stevel 	mdb_printf("  %%uesp = 0x%0?x\n", kregs[KREG_UESP]);
    124     0   stevel #endif
    125     0   stevel 	mdb_printf("%%trapno = 0x%x\n", kregs[KREG_TRAPNO]);
    126     0   stevel 	mdb_printf("   %%err = 0x%x\n", kregs[KREG_ERR]);
    127     0   stevel }
    128     0   stevel 
    129     0   stevel /*
    130     0   stevel  * Given a return address (%eip), determine the likely number of arguments
    131     0   stevel  * that were pushed on the stack prior to its execution.  We do this by
    132     0   stevel  * expecting that a typical call sequence consists of pushing arguments on
    133     0   stevel  * the stack, executing a call instruction, and then performing an add
    134     0   stevel  * on %esp to restore it to the value prior to pushing the arguments for
    135     0   stevel  * the call.  We attempt to detect such an add, and divide the addend
    136     0   stevel  * by the size of a word to determine the number of pushed arguments.
    137     0   stevel  */
    138     0   stevel static uint_t
    139     0   stevel kvm_argcount(mdb_tgt_t *t, uintptr_t eip, ssize_t size)
    140     0   stevel {
    141     0   stevel 	uint8_t ins[6];
    142     0   stevel 	ulong_t n;
    143     0   stevel 
    144     0   stevel 	enum {
    145     0   stevel 		M_MODRM_ESP = 0xc4,	/* Mod/RM byte indicates %esp */
    146     0   stevel 		M_ADD_IMM32 = 0x81,	/* ADD imm32 to r/m32 */
    147     0   stevel 		M_ADD_IMM8  = 0x83	/* ADD imm8 to r/m32 */
    148     0   stevel 	};
    149     0   stevel 
    150     0   stevel 	if (mdb_tgt_vread(t, ins, sizeof (ins), eip) != sizeof (ins))
    151     0   stevel 		return (0);
    152     0   stevel 
    153     0   stevel 	if (ins[1] != M_MODRM_ESP)
    154     0   stevel 		return (0);
    155     0   stevel 
    156     0   stevel 	switch (ins[0]) {
    157     0   stevel 	case M_ADD_IMM32:
    158     0   stevel 		n = ins[2] + (ins[3] << 8) + (ins[4] << 16) + (ins[5] << 24);
    159     0   stevel 		break;
    160     0   stevel 
    161     0   stevel 	case M_ADD_IMM8:
    162     0   stevel 		n = ins[2];
    163     0   stevel 		break;
    164     0   stevel 
    165     0   stevel 	default:
    166     0   stevel 		n = 0;
    167     0   stevel 	}
    168     0   stevel 
    169     0   stevel 	return (MIN((ssize_t)n, size) / sizeof (long));
    170     0   stevel }
    171     0   stevel 
    172     0   stevel int
    173     0   stevel mdb_ia32_kvm_stack_iter(mdb_tgt_t *t, const mdb_tgt_gregset_t *gsp,
    174     0   stevel     mdb_tgt_stack_f *func, void *arg)
    175     0   stevel {
    176     0   stevel 	mdb_tgt_gregset_t gregs;
    177     0   stevel 	kreg_t *kregs = &gregs.kregs[0];
    178     0   stevel 	int got_pc = (gsp->kregs[KREG_EIP] != 0);
    179     0   stevel 
    180     0   stevel 	struct {
    181     0   stevel 		uintptr_t fr_savfp;
    182     0   stevel 		uintptr_t fr_savpc;
    183     0   stevel 		long fr_argv[32];
    184     0   stevel 	} fr;
    185     0   stevel 
    186     0   stevel 	uintptr_t fp = gsp->kregs[KREG_EBP];
    187     0   stevel 	uintptr_t pc = gsp->kregs[KREG_EIP];
    188  5084  johnlev 	uintptr_t lastfp;
    189     0   stevel 
    190     0   stevel 	ssize_t size;
    191     0   stevel 	uint_t argc;
    192  5084  johnlev 	int detect_exception_frames = 0;
    193  5084  johnlev #ifndef	_KMDB
    194  5084  johnlev 	int xp;
    195  5084  johnlev 
    196  5084  johnlev 	if ((mdb_readsym(&xp, sizeof (xp), "xpv_panicking") != -1) && (xp > 0))
    197  5084  johnlev 		detect_exception_frames = 1;
    198  5084  johnlev #endif
    199     0   stevel 
    200     0   stevel 	bcopy(gsp, &gregs, sizeof (gregs));
    201     0   stevel 
    202     0   stevel 	while (fp != 0) {
    203     0   stevel 
    204     0   stevel 		if (fp & (STACK_ALIGN - 1))
    205     0   stevel 			return (set_errno(EMDB_STKALIGN));
    206     0   stevel 
    207     0   stevel 		if ((size = mdb_tgt_vread(t, &fr, sizeof (fr), fp)) >=
    208     0   stevel 		    (ssize_t)(2 * sizeof (uintptr_t))) {
    209     0   stevel 			size -= (ssize_t)(2 * sizeof (uintptr_t));
    210     0   stevel 			argc = kvm_argcount(t, fr.fr_savpc, size);
    211     0   stevel 		} else {
    212     0   stevel 			bzero(&fr, sizeof (fr));
    213     0   stevel 			argc = 0;
    214     0   stevel 		}
    215     0   stevel 
    216     0   stevel 		if (got_pc && func(arg, pc, argc, fr.fr_argv, &gregs) != 0)
    217     0   stevel 			break;
    218     0   stevel 
    219     0   stevel 		kregs[KREG_ESP] = kregs[KREG_EBP];
    220     0   stevel 
    221  5084  johnlev 		lastfp = fp;
    222  5084  johnlev 		fp = fr.fr_savfp;
    223  5084  johnlev 		/*
    224  5084  johnlev 		 * The Xen hypervisor marks a stack frame as belonging to
    225  5084  johnlev 		 * an exception by inverting the bits of the pointer to
    226  5084  johnlev 		 * that frame.  We attempt to identify these frames by
    227  5084  johnlev 		 * inverting the pointer and seeing if it is within 0xfff
    228  5084  johnlev 		 * bytes of the last frame.
    229  5084  johnlev 		 */
    230  5084  johnlev 		if (detect_exception_frames)
    231  5084  johnlev 			if ((fp != 0) && (fp < lastfp) &&
    232  5084  johnlev 			    ((lastfp ^ ~fp) < 0xfff))
    233  5084  johnlev 				fp = ~fp;
    234  5084  johnlev 
    235  5084  johnlev 		kregs[KREG_EBP] = fp;
    236     0   stevel 		kregs[KREG_EIP] = pc = fr.fr_savpc;
    237     0   stevel 
    238     0   stevel 		got_pc = (pc != 0);
    239     0   stevel 	}
    240     0   stevel 
    241     0   stevel 	return (0);
    242     0   stevel }
    243     0   stevel 
    244     0   stevel /*
    245     0   stevel  * Determine the return address for the current frame.  Typically this is the
    246     0   stevel  * fr_savpc value from the current frame, but we also perform some special
    247     0   stevel  * handling to see if we are stopped on one of the first two instructions of a
    248     0   stevel  * typical function prologue, in which case %ebp will not be set up yet.
    249     0   stevel  */
    250     0   stevel int
    251     0   stevel mdb_ia32_step_out(mdb_tgt_t *t, uintptr_t *p, kreg_t pc, kreg_t fp, kreg_t sp,
    252     0   stevel     mdb_instr_t curinstr)
    253     0   stevel {
    254     0   stevel 	struct frame fr;
    255     0   stevel 	GElf_Sym s;
    256     0   stevel 	char buf[1];
    257     0   stevel 
    258     0   stevel 	enum {
    259     0   stevel 		M_PUSHL_EBP	= 0x55, /* pushl %ebp */
    260     0   stevel 		M_MOVL_EBP	= 0x8b  /* movl %esp, %ebp */
    261     0   stevel 	};
    262     0   stevel 
    263     0   stevel 	if (mdb_tgt_lookup_by_addr(t, pc, MDB_TGT_SYM_FUZZY,
    264     0   stevel 	    buf, 0, &s, NULL) == 0) {
    265     0   stevel 		if (pc == s.st_value && curinstr == M_PUSHL_EBP)
    266     0   stevel 			fp = sp - 4;
    267     0   stevel 		else if (pc == s.st_value + 1 && curinstr == M_MOVL_EBP)
    268     0   stevel 			fp = sp;
    269     0   stevel 	}
    270     0   stevel 
    271     0   stevel 	if (mdb_tgt_vread(t, &fr, sizeof (fr), fp) == sizeof (fr)) {
    272     0   stevel 		*p = fr.fr_savpc;
    273     0   stevel 		return (0);
    274     0   stevel 	}
    275     0   stevel 
    276     0   stevel 	return (-1); /* errno is set for us */
    277     0   stevel }
    278     0   stevel 
    279     0   stevel /*
    280     0   stevel  * Return the address of the next instruction following a call, or return -1
    281     0   stevel  * and set errno to EAGAIN if the target should just single-step.  We perform
    282     0   stevel  * a bit of disassembly on the current instruction in order to determine if it
    283     0   stevel  * is a call and how many bytes should be skipped, depending on the exact form
    284     0   stevel  * of the call instruction that is being used.
    285     0   stevel  */
    286     0   stevel int
    287     0   stevel mdb_ia32_next(mdb_tgt_t *t, uintptr_t *p, kreg_t pc, mdb_instr_t curinstr)
    288     0   stevel {
    289     0   stevel 	uint8_t m;
    290     0   stevel 
    291     0   stevel 	enum {
    292     0   stevel 		M_CALL_REL = 0xe8, /* call near with relative displacement */
    293     0   stevel 		M_CALL_REG = 0xff, /* call near indirect or call far register */
    294     0   stevel 
    295     0   stevel 		M_MODRM_MD = 0xc0, /* mask for Mod/RM byte Mod field */
    296     0   stevel 		M_MODRM_OP = 0x38, /* mask for Mod/RM byte opcode field */
    297     0   stevel 		M_MODRM_RM = 0x07, /* mask for Mod/RM byte R/M field */
    298     0   stevel 
    299     0   stevel 		M_MD_IND   = 0x00, /* Mod code for [REG] */
    300     0   stevel 		M_MD_DSP8  = 0x40, /* Mod code for disp8[REG] */
    301     0   stevel 		M_MD_DSP32 = 0x80, /* Mod code for disp32[REG] */
    302     0   stevel 		M_MD_REG   = 0xc0, /* Mod code for REG */
    303     0   stevel 
    304     0   stevel 		M_OP_IND   = 0x10, /* Opcode for call near indirect */
    305     0   stevel 		M_RM_DSP32 = 0x05  /* R/M code for disp32 */
    306     0   stevel 	};
    307     0   stevel 
    308     0   stevel 	/*
    309     0   stevel 	 * If the opcode is a near call with relative displacement, assume the
    310     0   stevel 	 * displacement is a rel32 from the next instruction.
    311     0   stevel 	 */
    312     0   stevel 	if (curinstr == M_CALL_REL) {
    313     0   stevel 		*p = pc + sizeof (mdb_instr_t) + sizeof (uint32_t);
    314     0   stevel 		return (0);
    315     0   stevel 	}
    316     0   stevel 
    317     0   stevel 	/*
    318     0   stevel 	 * If the opcode is a call near indirect or call far register opcode,
    319     0   stevel 	 * read the subsequent Mod/RM byte to perform additional decoding.
    320     0   stevel 	 */
    321     0   stevel 	if (curinstr == M_CALL_REG) {
    322     0   stevel 		if (mdb_tgt_vread(t, &m, sizeof (m), pc + 1) != sizeof (m))
    323     0   stevel 			return (-1); /* errno is set for us */
    324     0   stevel 
    325     0   stevel 		/*
    326     0   stevel 		 * If the Mod/RM opcode extension indicates a near indirect
    327     0   stevel 		 * call, then skip the appropriate number of additional
    328     0   stevel 		 * bytes depending on the addressing form that is used.
    329     0   stevel 		 */
    330     0   stevel 		if ((m & M_MODRM_OP) == M_OP_IND) {
    331     0   stevel 			switch (m & M_MODRM_MD) {
    332     0   stevel 			case M_MD_DSP8:
    333     0   stevel 				*p = pc + 3; /* skip pr_instr, m, disp8 */
    334     0   stevel 				break;
    335     0   stevel 			case M_MD_DSP32:
    336     0   stevel 				*p = pc + 6; /* skip pr_instr, m, disp32 */
    337     0   stevel 				break;
    338     0   stevel 			case M_MD_IND:
    339     0   stevel 				if ((m & M_MODRM_RM) == M_RM_DSP32) {
    340     0   stevel 					*p = pc + 6;
    341     0   stevel 					break; /* skip pr_instr, m, disp32 */
    342     0   stevel 				}
    343     0   stevel 				/* FALLTHRU */
    344     0   stevel 			case M_MD_REG:
    345     0   stevel 				*p = pc + 2; /* skip pr_instr, m */
    346     0   stevel 				break;
    347     0   stevel 			}
    348     0   stevel 			return (0);
    349     0   stevel 		}
    350     0   stevel 	}
    351     0   stevel 
    352     0   stevel 	return (set_errno(EAGAIN));
    353     0   stevel }
    354     0   stevel 
    355     0   stevel /*ARGSUSED*/
    356     0   stevel int
    357     0   stevel mdb_ia32_kvm_frame(void *arglim, uintptr_t pc, uint_t argc, const long *argv,
    358     0   stevel     const mdb_tgt_gregset_t *gregs)
    359     0   stevel {
    360     0   stevel 	argc = MIN(argc, (uint_t)arglim);
    361     0   stevel 	mdb_printf("%a(", pc);
    362     0   stevel 
    363     0   stevel 	if (argc != 0) {
    364     0   stevel 		mdb_printf("%lr", *argv++);
    365     0   stevel 		for (argc--; argc != 0; argc--)
    366     0   stevel 			mdb_printf(", %lr", *argv++);
    367     0   stevel 	}
    368     0   stevel 
    369     0   stevel 	mdb_printf(")\n");
    370     0   stevel 	return (0);
    371     0   stevel }
    372     0   stevel 
    373     0   stevel int
    374     0   stevel mdb_ia32_kvm_framev(void *arglim, uintptr_t pc, uint_t argc, const long *argv,
    375     0   stevel     const mdb_tgt_gregset_t *gregs)
    376     0   stevel {
    377     0   stevel 	argc = MIN(argc, (uint_t)arglim);
    378     0   stevel 	mdb_printf("%0?lr %a(", gregs->kregs[KREG_EBP], pc);
    379     0   stevel 
    380     0   stevel 	if (argc != 0) {
    381     0   stevel 		mdb_printf("%lr", *argv++);
    382     0   stevel 		for (argc--; argc != 0; argc--)
    383     0   stevel 			mdb_printf(", %lr", *argv++);
    384     0   stevel 	}
    385     0   stevel 
    386     0   stevel 	mdb_printf(")\n");
    387     0   stevel 	return (0);
    388     0   stevel }
    389