| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 1 | /* | 
|  | 2 | * Copyright 2016, The Android Open Source Project | 
|  | 3 | * | 
|  | 4 | * Licensed under the Apache License, Version 2.0 (the "License"); | 
|  | 5 | * you may not use this file except in compliance with the License. | 
|  | 6 | * You may obtain a copy of the License at | 
|  | 7 | * | 
|  | 8 | *     http://www.apache.org/licenses/LICENSE-2.0 | 
|  | 9 | * | 
|  | 10 | * Unless required by applicable law or agreed to in writing, software | 
|  | 11 | * distributed under the License is distributed on an "AS IS" BASIS, | 
|  | 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | 
|  | 13 | * See the License for the specific language governing permissions and | 
|  | 14 | * limitations under the License. | 
|  | 15 | */ | 
|  | 16 |  | 
|  | 17 | #include <arpa/inet.h> | 
|  | 18 | #include <dirent.h> | 
|  | 19 | #include <fcntl.h> | 
|  | 20 | #include <stdlib.h> | 
| Josh Gao | 85bcaf6 | 2017-02-01 16:35:31 -0800 | [diff] [blame] | 21 | #include <sys/prctl.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 22 | #include <sys/ptrace.h> | 
|  | 23 | #include <sys/types.h> | 
|  | 24 | #include <sys/un.h> | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 25 | #include <sys/wait.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 26 | #include <unistd.h> | 
|  | 27 |  | 
|  | 28 | #include <limits> | 
| Josh Gao | 57f58f8 | 2017-03-15 23:23:22 -0700 | [diff] [blame] | 29 | #include <map> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 30 | #include <memory> | 
|  | 31 | #include <set> | 
|  | 32 | #include <vector> | 
|  | 33 |  | 
| Elliott Hughes | a029d98 | 2021-06-21 12:36:47 -0700 | [diff] [blame] | 34 | #include <android-base/errno_restorer.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 35 | #include <android-base/file.h> | 
|  | 36 | #include <android-base/logging.h> | 
| Josh Gao | 8d44b14 | 2018-09-18 13:22:22 -0700 | [diff] [blame] | 37 | #include <android-base/macros.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 38 | #include <android-base/parseint.h> | 
|  | 39 | #include <android-base/properties.h> | 
|  | 40 | #include <android-base/stringprintf.h> | 
| Josh Gao | 57f58f8 | 2017-03-15 23:23:22 -0700 | [diff] [blame] | 41 | #include <android-base/strings.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 42 | #include <android-base/unique_fd.h> | 
| Mitch Phillips | e4adff0 | 2021-01-21 20:41:50 -0800 | [diff] [blame] | 43 | #include <bionic/macros.h> | 
| Josh Gao | a48b41b | 2019-12-13 14:11:04 -0800 | [diff] [blame] | 44 | #include <bionic/reserved_signals.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 45 | #include <cutils/sockets.h> | 
| Vijay Venkatraman | a95acea | 2017-01-23 20:11:51 -0800 | [diff] [blame] | 46 | #include <log/log.h> | 
| Josh Gao | b0e51e3 | 2017-06-01 12:08:10 -0700 | [diff] [blame] | 47 | #include <private/android_filesystem_config.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 48 | #include <procinfo/process.h> | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 49 |  | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 50 | #define ATRACE_TAG ATRACE_TAG_BIONIC | 
|  | 51 | #include <utils/Trace.h> | 
|  | 52 |  | 
| Christopher Ferris | 3b7b7ba | 2022-03-15 16:56:09 -0700 | [diff] [blame] | 53 | #include <unwindstack/AndroidUnwinder.h> | 
|  | 54 | #include <unwindstack/Error.h> | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 55 | #include <unwindstack/Regs.h> | 
|  | 56 |  | 
| Josh Gao | c370666 | 2017-08-29 13:08:32 -0700 | [diff] [blame] | 57 | #include "libdebuggerd/backtrace.h" | 
|  | 58 | #include "libdebuggerd/tombstone.h" | 
|  | 59 | #include "libdebuggerd/utility.h" | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 60 |  | 
|  | 61 | #include "debuggerd/handler.h" | 
| Narayan Kamath | 2d377cd | 2017-05-10 10:58:59 +0100 | [diff] [blame] | 62 | #include "tombstoned/tombstoned.h" | 
| Josh Gao | c370666 | 2017-08-29 13:08:32 -0700 | [diff] [blame] | 63 |  | 
|  | 64 | #include "protocol.h" | 
| Narayan Kamath | 2d377cd | 2017-05-10 10:58:59 +0100 | [diff] [blame] | 65 | #include "util.h" | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 66 |  | 
| Elliott Hughes | a029d98 | 2021-06-21 12:36:47 -0700 | [diff] [blame] | 67 | using android::base::ErrnoRestorer; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 68 | using android::base::StringPrintf; | 
| Elliott Hughes | a029d98 | 2021-06-21 12:36:47 -0700 | [diff] [blame] | 69 | using android::base::unique_fd; | 
| Josh Gao | 57f58f8 | 2017-03-15 23:23:22 -0700 | [diff] [blame] | 70 |  | 
| Josh Gao | fe90276 | 2017-02-01 16:31:43 -0800 | [diff] [blame] | 71 | static bool pid_contains_tid(int pid_proc_fd, pid_t tid) { | 
|  | 72 | struct stat st; | 
|  | 73 | std::string task_path = StringPrintf("task/%d", tid); | 
|  | 74 | return fstatat(pid_proc_fd, task_path.c_str(), &st, 0) == 0; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 75 | } | 
|  | 76 |  | 
| Josh Gao | fd13bf0 | 2017-08-18 15:37:26 -0700 | [diff] [blame] | 77 | static pid_t get_tracer(pid_t tracee) { | 
|  | 78 | // Check to see if the thread is being ptraced by another process. | 
|  | 79 | android::procinfo::ProcessInfo process_info; | 
|  | 80 | if (android::procinfo::GetProcessInfo(tracee, &process_info)) { | 
|  | 81 | return process_info.tracer; | 
|  | 82 | } | 
|  | 83 | return -1; | 
|  | 84 | } | 
|  | 85 |  | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 86 | // Attach to a thread, and verify that it's still a member of the given process | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 87 | static bool ptrace_seize_thread(int pid_proc_fd, pid_t tid, std::string* error, int flags = 0) { | 
|  | 88 | if (ptrace(PTRACE_SEIZE, tid, 0, flags) != 0) { | 
| Josh Gao | fd13bf0 | 2017-08-18 15:37:26 -0700 | [diff] [blame] | 89 | if (errno == EPERM) { | 
| Elliott Hughes | a029d98 | 2021-06-21 12:36:47 -0700 | [diff] [blame] | 90 | ErrnoRestorer errno_restorer;  // In case get_tracer() fails and we fall through. | 
|  | 91 | pid_t tracer_pid = get_tracer(tid); | 
|  | 92 | if (tracer_pid > 0) { | 
| Josh Gao | fd13bf0 | 2017-08-18 15:37:26 -0700 | [diff] [blame] | 93 | *error = StringPrintf("failed to attach to thread %d, already traced by %d (%s)", tid, | 
| Elliott Hughes | a029d98 | 2021-06-21 12:36:47 -0700 | [diff] [blame] | 94 | tracer_pid, get_process_name(tracer_pid).c_str()); | 
| Josh Gao | fd13bf0 | 2017-08-18 15:37:26 -0700 | [diff] [blame] | 95 | return false; | 
|  | 96 | } | 
|  | 97 | } | 
|  | 98 |  | 
| Josh Gao | 42fd74b | 2017-01-20 12:51:11 -0800 | [diff] [blame] | 99 | *error = StringPrintf("failed to attach to thread %d: %s", tid, strerror(errno)); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 100 | return false; | 
|  | 101 | } | 
|  | 102 |  | 
|  | 103 | // Make sure that the task we attached to is actually part of the pid we're dumping. | 
| Josh Gao | fe90276 | 2017-02-01 16:31:43 -0800 | [diff] [blame] | 104 | if (!pid_contains_tid(pid_proc_fd, tid)) { | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 105 | if (ptrace(PTRACE_DETACH, tid, 0, 0) != 0) { | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 106 | PLOG(WARNING) << "failed to detach from thread " << tid; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 107 | } | 
| Josh Gao | fe90276 | 2017-02-01 16:31:43 -0800 | [diff] [blame] | 108 | *error = StringPrintf("thread %d is not in process", tid); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 109 | return false; | 
|  | 110 | } | 
| Josh Gao | 122479f | 2017-01-22 16:42:32 -0800 | [diff] [blame] | 111 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 112 | return true; | 
|  | 113 | } | 
|  | 114 |  | 
|  | 115 | static bool wait_for_stop(pid_t tid, int* received_signal) { | 
|  | 116 | while (true) { | 
|  | 117 | int status; | 
|  | 118 | pid_t result = waitpid(tid, &status, __WALL); | 
|  | 119 | if (result != tid) { | 
|  | 120 | PLOG(ERROR) << "waitpid failed on " << tid << " while detaching"; | 
|  | 121 | return false; | 
|  | 122 | } | 
|  | 123 |  | 
|  | 124 | if (WIFSTOPPED(status)) { | 
|  | 125 | if (status >> 16 == PTRACE_EVENT_STOP) { | 
|  | 126 | *received_signal = 0; | 
|  | 127 | } else { | 
|  | 128 | *received_signal = WSTOPSIG(status); | 
|  | 129 | } | 
|  | 130 | return true; | 
|  | 131 | } | 
|  | 132 | } | 
|  | 133 | } | 
|  | 134 |  | 
|  | 135 | // Interrupt a process and wait for it to be interrupted. | 
|  | 136 | static bool ptrace_interrupt(pid_t tid, int* received_signal) { | 
|  | 137 | if (ptrace(PTRACE_INTERRUPT, tid, 0, 0) == 0) { | 
|  | 138 | return wait_for_stop(tid, received_signal); | 
| Josh Gao | 3407d7c | 2017-06-13 17:21:12 +0000 | [diff] [blame] | 139 | } | 
|  | 140 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 141 | PLOG(ERROR) << "failed to interrupt " << tid << " to detach"; | 
|  | 142 | return false; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 143 | } | 
|  | 144 |  | 
| Josh Gao | b0e51e3 | 2017-06-01 12:08:10 -0700 | [diff] [blame] | 145 | static bool activity_manager_notify(pid_t pid, int signal, const std::string& amfd_data) { | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 146 | ATRACE_CALL(); | 
| Josh Gao | b0e51e3 | 2017-06-01 12:08:10 -0700 | [diff] [blame] | 147 | android::base::unique_fd amfd(socket_local_client( | 
|  | 148 | "/data/system/ndebugsocket", ANDROID_SOCKET_NAMESPACE_FILESYSTEM, SOCK_STREAM)); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 149 | if (amfd.get() == -1) { | 
|  | 150 | PLOG(ERROR) << "unable to connect to activity manager"; | 
|  | 151 | return false; | 
|  | 152 | } | 
|  | 153 |  | 
|  | 154 | struct timeval tv = { | 
| Peter Collingbourne | fb5eac9 | 2021-03-11 12:51:25 -0800 | [diff] [blame] | 155 | .tv_sec = 1 * android::base::HwTimeoutMultiplier(), | 
| Evgenii Stepanov | 2a55e1a | 2021-01-29 11:50:30 -0800 | [diff] [blame] | 156 | .tv_usec = 0, | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 157 | }; | 
|  | 158 | if (setsockopt(amfd.get(), SOL_SOCKET, SO_SNDTIMEO, &tv, sizeof(tv)) == -1) { | 
|  | 159 | PLOG(ERROR) << "failed to set send timeout on activity manager socket"; | 
|  | 160 | return false; | 
|  | 161 | } | 
| Peter Collingbourne | fb5eac9 | 2021-03-11 12:51:25 -0800 | [diff] [blame] | 162 | tv.tv_sec = 3 * android::base::HwTimeoutMultiplier();  // 3 seconds on handshake read | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 163 | if (setsockopt(amfd.get(), SOL_SOCKET, SO_RCVTIMEO, &tv, sizeof(tv)) == -1) { | 
|  | 164 | PLOG(ERROR) << "failed to set receive timeout on activity manager socket"; | 
|  | 165 | return false; | 
|  | 166 | } | 
|  | 167 |  | 
|  | 168 | // Activity Manager protocol: binary 32-bit network-byte-order ints for the | 
|  | 169 | // pid and signal number, followed by the raw text of the dump, culminating | 
|  | 170 | // in a zero byte that marks end-of-data. | 
|  | 171 | uint32_t datum = htonl(pid); | 
|  | 172 | if (!android::base::WriteFully(amfd, &datum, 4)) { | 
|  | 173 | PLOG(ERROR) << "AM pid write failed"; | 
|  | 174 | return false; | 
|  | 175 | } | 
|  | 176 | datum = htonl(signal); | 
|  | 177 | if (!android::base::WriteFully(amfd, &datum, 4)) { | 
|  | 178 | PLOG(ERROR) << "AM signal write failed"; | 
|  | 179 | return false; | 
|  | 180 | } | 
|  | 181 | if (!android::base::WriteFully(amfd, amfd_data.c_str(), amfd_data.size() + 1)) { | 
|  | 182 | PLOG(ERROR) << "AM data write failed"; | 
|  | 183 | return false; | 
|  | 184 | } | 
|  | 185 |  | 
|  | 186 | // 3 sec timeout reading the ack; we're fine if the read fails. | 
|  | 187 | char ack; | 
|  | 188 | android::base::ReadFully(amfd, &ack, 1); | 
|  | 189 | return true; | 
|  | 190 | } | 
|  | 191 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 192 | // Globals used by the abort handler. | 
|  | 193 | static pid_t g_target_thread = -1; | 
|  | 194 | static bool g_tombstoned_connected = false; | 
|  | 195 | static unique_fd g_tombstoned_socket; | 
|  | 196 | static unique_fd g_output_fd; | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 197 | static unique_fd g_proto_fd; | 
| Josh Gao | 5759411 | 2017-01-22 17:41:15 -0800 | [diff] [blame] | 198 |  | 
| Josh Gao | 38ac45d | 2018-04-27 13:31:47 -0700 | [diff] [blame] | 199 | static void DefuseSignalHandlers() { | 
|  | 200 | // Don't try to dump ourselves. | 
|  | 201 | struct sigaction action = {}; | 
|  | 202 | action.sa_handler = SIG_DFL; | 
|  | 203 | debuggerd_register_handlers(&action); | 
|  | 204 |  | 
|  | 205 | sigset_t mask; | 
|  | 206 | sigemptyset(&mask); | 
|  | 207 | if (sigprocmask(SIG_SETMASK, &mask, nullptr) != 0) { | 
|  | 208 | PLOG(FATAL) << "failed to set signal mask"; | 
|  | 209 | } | 
|  | 210 | } | 
|  | 211 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 212 | static void Initialize(char** argv) { | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 213 | android::base::InitLogging(argv); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 214 | android::base::SetAborter([](const char* abort_msg) { | 
|  | 215 | // If we abort before we get an output fd, contact tombstoned to let any | 
|  | 216 | // potential listeners know that we failed. | 
|  | 217 | if (!g_tombstoned_connected) { | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 218 | if (!tombstoned_connect(g_target_thread, &g_tombstoned_socket, &g_output_fd, &g_proto_fd, | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 219 | kDebuggerdAnyIntercept)) { | 
|  | 220 | // We failed to connect, not much we can do. | 
|  | 221 | LOG(ERROR) << "failed to connected to tombstoned to report failure"; | 
|  | 222 | _exit(1); | 
|  | 223 | } | 
|  | 224 | } | 
|  | 225 |  | 
|  | 226 | dprintf(g_output_fd.get(), "crash_dump failed to dump process"); | 
|  | 227 | if (g_target_thread != 1) { | 
|  | 228 | dprintf(g_output_fd.get(), " %d: %s\n", g_target_thread, abort_msg); | 
|  | 229 | } else { | 
|  | 230 | dprintf(g_output_fd.get(), ": %s\n", abort_msg); | 
|  | 231 | } | 
|  | 232 |  | 
|  | 233 | _exit(1); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 234 | }); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 235 | } | 
| Josh Gao | e740250 | 2017-06-01 11:55:25 -0700 | [diff] [blame] | 236 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 237 | static void ParseArgs(int argc, char** argv, pid_t* pseudothread_tid, DebuggerdDumpType* dump_type) { | 
| Narayan Kamath | a73df60 | 2017-05-24 15:07:25 +0100 | [diff] [blame] | 238 | if (argc != 4) { | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 239 | LOG(FATAL) << "wrong number of args: " << argc << " (expected 4)"; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 240 | } | 
|  | 241 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 242 | if (!android::base::ParseInt(argv[1], &g_target_thread, 1, std::numeric_limits<pid_t>::max())) { | 
|  | 243 | LOG(FATAL) << "invalid target tid: " << argv[1]; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 244 | } | 
|  | 245 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 246 | if (!android::base::ParseInt(argv[2], pseudothread_tid, 1, std::numeric_limits<pid_t>::max())) { | 
| Josh Gao | f6ad585 | 2017-02-15 12:21:11 -0800 | [diff] [blame] | 247 | LOG(FATAL) << "invalid pseudothread tid: " << argv[2]; | 
| Josh Gao | 2f11a25 | 2017-02-13 14:46:19 -0800 | [diff] [blame] | 248 | } | 
|  | 249 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 250 | int dump_type_int; | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 251 | if (!android::base::ParseInt(argv[3], &dump_type_int, 0)) { | 
| Narayan Kamath | a73df60 | 2017-05-24 15:07:25 +0100 | [diff] [blame] | 252 | LOG(FATAL) << "invalid requested dump type: " << argv[3]; | 
|  | 253 | } | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 254 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 255 | *dump_type = static_cast<DebuggerdDumpType>(dump_type_int); | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 256 | switch (*dump_type) { | 
|  | 257 | case kDebuggerdNativeBacktrace: | 
|  | 258 | case kDebuggerdTombstone: | 
|  | 259 | case kDebuggerdTombstoneProto: | 
|  | 260 | break; | 
|  | 261 |  | 
|  | 262 | default: | 
|  | 263 | LOG(FATAL) << "invalid requested dump type: " << dump_type_int; | 
|  | 264 | } | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 265 | } | 
| Narayan Kamath | a73df60 | 2017-05-24 15:07:25 +0100 | [diff] [blame] | 266 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 267 | static void ReadCrashInfo(unique_fd& fd, siginfo_t* siginfo, | 
| Mitch Phillips | 8fe5127 | 2023-02-07 17:02:30 -0800 | [diff] [blame] | 268 | std::unique_ptr<unwindstack::Regs>* regs, ProcessInfo* process_info, | 
|  | 269 | bool* recoverable_gwp_asan_crash) { | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 270 | std::aligned_storage<sizeof(CrashInfo) + 1, alignof(CrashInfo)>::type buf; | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 271 | CrashInfo* crash_info = reinterpret_cast<CrashInfo*>(&buf); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 272 | ssize_t rc = TEMP_FAILURE_RETRY(read(fd.get(), &buf, sizeof(buf))); | 
| Mitch Phillips | 8fe5127 | 2023-02-07 17:02:30 -0800 | [diff] [blame] | 273 | *recoverable_gwp_asan_crash = false; | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 274 | if (rc == -1) { | 
|  | 275 | PLOG(FATAL) << "failed to read target ucontext"; | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 276 | } else { | 
|  | 277 | ssize_t expected_size = 0; | 
|  | 278 | switch (crash_info->header.version) { | 
|  | 279 | case 1: | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 280 | case 2: | 
| Peter Collingbourne | f3d542f | 2020-03-05 16:46:15 -0800 | [diff] [blame] | 281 | case 3: | 
|  | 282 | expected_size = sizeof(CrashInfoHeader) + sizeof(CrashInfoDataStatic); | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 283 | break; | 
|  | 284 |  | 
| Peter Collingbourne | f3d542f | 2020-03-05 16:46:15 -0800 | [diff] [blame] | 285 | case 4: | 
|  | 286 | expected_size = sizeof(CrashInfoHeader) + sizeof(CrashInfoDataDynamic); | 
| Mitch Phillips | e0b4bb1 | 2020-02-14 14:54:31 -0800 | [diff] [blame] | 287 | break; | 
|  | 288 |  | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 289 | default: | 
|  | 290 | LOG(FATAL) << "unexpected CrashInfo version: " << crash_info->header.version; | 
|  | 291 | break; | 
|  | 292 | }; | 
|  | 293 |  | 
| Peter Collingbourne | f3d542f | 2020-03-05 16:46:15 -0800 | [diff] [blame] | 294 | if (rc < expected_size) { | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 295 | LOG(FATAL) << "read " << rc << " bytes when reading target crash information, expected " | 
|  | 296 | << expected_size; | 
|  | 297 | } | 
| Josh Gao | c7fe060 | 2017-03-13 14:13:29 -0700 | [diff] [blame] | 298 | } | 
|  | 299 |  | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 300 | switch (crash_info->header.version) { | 
| Peter Collingbourne | f3d542f | 2020-03-05 16:46:15 -0800 | [diff] [blame] | 301 | case 4: | 
|  | 302 | process_info->fdsan_table_address = crash_info->data.d.fdsan_table_address; | 
|  | 303 | process_info->gwp_asan_state = crash_info->data.d.gwp_asan_state; | 
|  | 304 | process_info->gwp_asan_metadata = crash_info->data.d.gwp_asan_metadata; | 
| Peter Collingbourne | f862252 | 2020-04-07 14:07:32 -0700 | [diff] [blame] | 305 | process_info->scudo_stack_depot = crash_info->data.d.scudo_stack_depot; | 
|  | 306 | process_info->scudo_region_info = crash_info->data.d.scudo_region_info; | 
| Peter Collingbourne | bb4b49c | 2021-01-06 21:02:19 -0800 | [diff] [blame] | 307 | process_info->scudo_ring_buffer = crash_info->data.d.scudo_ring_buffer; | 
| Florian Mayer | bd49c38 | 2022-12-22 16:15:23 -0800 | [diff] [blame] | 308 | process_info->scudo_ring_buffer_size = crash_info->data.d.scudo_ring_buffer_size; | 
| Mitch Phillips | 8fe5127 | 2023-02-07 17:02:30 -0800 | [diff] [blame] | 309 | *recoverable_gwp_asan_crash = crash_info->data.d.recoverable_gwp_asan_crash; | 
| Josh Gao | 8d44b14 | 2018-09-18 13:22:22 -0700 | [diff] [blame] | 310 | FALLTHROUGH_INTENDED; | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 311 | case 1: | 
| Peter Collingbourne | f3d542f | 2020-03-05 16:46:15 -0800 | [diff] [blame] | 312 | case 2: | 
|  | 313 | case 3: | 
|  | 314 | process_info->abort_msg_address = crash_info->data.s.abort_msg_address; | 
|  | 315 | *siginfo = crash_info->data.s.siginfo; | 
| Peter Collingbourne | f03af88 | 2020-03-20 18:09:00 -0700 | [diff] [blame] | 316 | if (signal_has_si_addr(siginfo)) { | 
| Peter Collingbourne | f03af88 | 2020-03-20 18:09:00 -0700 | [diff] [blame] | 317 | process_info->has_fault_address = true; | 
| Mitch Phillips | e4adff0 | 2021-01-21 20:41:50 -0800 | [diff] [blame] | 318 | process_info->maybe_tagged_fault_address = reinterpret_cast<uintptr_t>(siginfo->si_addr); | 
|  | 319 | process_info->untagged_fault_address = | 
|  | 320 | untag_address(reinterpret_cast<uintptr_t>(siginfo->si_addr)); | 
| Peter Collingbourne | f03af88 | 2020-03-20 18:09:00 -0700 | [diff] [blame] | 321 | } | 
| Christopher Ferris | 60eb197 | 2019-01-15 15:18:43 -0800 | [diff] [blame] | 322 | regs->reset(unwindstack::Regs::CreateFromUcontext(unwindstack::Regs::CurrentArch(), | 
| Peter Collingbourne | f3d542f | 2020-03-05 16:46:15 -0800 | [diff] [blame] | 323 | &crash_info->data.s.ucontext)); | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 324 | break; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 325 |  | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 326 | default: | 
|  | 327 | __builtin_unreachable(); | 
|  | 328 | } | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 329 | } | 
|  | 330 |  | 
|  | 331 | // Wait for a process to clone and return the child's pid. | 
|  | 332 | // Note: this leaves the parent in PTRACE_EVENT_STOP. | 
|  | 333 | static pid_t wait_for_clone(pid_t pid, bool resume_child) { | 
|  | 334 | int status; | 
|  | 335 | pid_t result = TEMP_FAILURE_RETRY(waitpid(pid, &status, __WALL)); | 
|  | 336 | if (result == -1) { | 
|  | 337 | PLOG(FATAL) << "failed to waitpid"; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 338 | } | 
|  | 339 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 340 | if (WIFEXITED(status)) { | 
|  | 341 | LOG(FATAL) << "traced process exited with status " << WEXITSTATUS(status); | 
|  | 342 | } else if (WIFSIGNALED(status)) { | 
|  | 343 | LOG(FATAL) << "traced process exited with signal " << WTERMSIG(status); | 
|  | 344 | } else if (!WIFSTOPPED(status)) { | 
|  | 345 | LOG(FATAL) << "process didn't stop? (status = " << status << ")"; | 
|  | 346 | } | 
|  | 347 |  | 
|  | 348 | if (status >> 8 != (SIGTRAP | (PTRACE_EVENT_CLONE << 8))) { | 
|  | 349 | LOG(FATAL) << "process didn't stop due to PTRACE_O_TRACECLONE (status = " << status << ")"; | 
|  | 350 | } | 
|  | 351 |  | 
|  | 352 | pid_t child; | 
|  | 353 | if (ptrace(PTRACE_GETEVENTMSG, pid, 0, &child) != 0) { | 
|  | 354 | PLOG(FATAL) << "failed to get child pid via PTRACE_GETEVENTMSG"; | 
|  | 355 | } | 
|  | 356 |  | 
|  | 357 | int stop_signal; | 
|  | 358 | if (!wait_for_stop(child, &stop_signal)) { | 
|  | 359 | PLOG(FATAL) << "failed to waitpid on child"; | 
|  | 360 | } | 
|  | 361 |  | 
|  | 362 | CHECK_EQ(0, stop_signal); | 
|  | 363 |  | 
|  | 364 | if (resume_child) { | 
|  | 365 | if (ptrace(PTRACE_CONT, child, 0, 0) != 0) { | 
|  | 366 | PLOG(FATAL) << "failed to resume child (pid = " << child << ")"; | 
|  | 367 | } | 
|  | 368 | } | 
|  | 369 |  | 
|  | 370 | return child; | 
|  | 371 | } | 
|  | 372 |  | 
|  | 373 | static pid_t wait_for_vm_process(pid_t pseudothread_tid) { | 
|  | 374 | // The pseudothread will double-fork, we want its grandchild. | 
|  | 375 | pid_t intermediate = wait_for_clone(pseudothread_tid, true); | 
|  | 376 | pid_t vm_pid = wait_for_clone(intermediate, false); | 
|  | 377 | if (ptrace(PTRACE_DETACH, intermediate, 0, 0) != 0) { | 
|  | 378 | PLOG(FATAL) << "failed to detach from intermediate vm process"; | 
|  | 379 | } | 
|  | 380 |  | 
|  | 381 | return vm_pid; | 
|  | 382 | } | 
|  | 383 |  | 
| Jinguang Dong | 8ac2f27 | 2018-11-24 17:12:33 +0800 | [diff] [blame] | 384 | static void InstallSigPipeHandler() { | 
|  | 385 | struct sigaction action = {}; | 
|  | 386 | action.sa_handler = SIG_IGN; | 
|  | 387 | action.sa_flags = SA_RESTART; | 
|  | 388 | sigaction(SIGPIPE, &action, nullptr); | 
|  | 389 | } | 
|  | 390 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 391 | int main(int argc, char** argv) { | 
| Josh Gao | 38ac45d | 2018-04-27 13:31:47 -0700 | [diff] [blame] | 392 | DefuseSignalHandlers(); | 
| Jinguang Dong | 8ac2f27 | 2018-11-24 17:12:33 +0800 | [diff] [blame] | 393 | InstallSigPipeHandler(); | 
| Josh Gao | 38ac45d | 2018-04-27 13:31:47 -0700 | [diff] [blame] | 394 |  | 
| Josh Gao | 18cb681 | 2019-04-16 13:17:08 -0700 | [diff] [blame] | 395 | // There appears to be a bug in the kernel where our death causes SIGHUP to | 
|  | 396 | // be sent to our process group if we exit while it has stopped jobs (e.g. | 
| Elliott Hughes | e4781d5 | 2021-03-17 09:15:15 -0700 | [diff] [blame] | 397 | // because of wait_for_debugger). Use setsid to create a new process group to | 
| Josh Gao | 18cb681 | 2019-04-16 13:17:08 -0700 | [diff] [blame] | 398 | // avoid hitting this. | 
|  | 399 | setsid(); | 
|  | 400 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 401 | atrace_begin(ATRACE_TAG, "before reparent"); | 
|  | 402 | pid_t target_process = getppid(); | 
|  | 403 |  | 
|  | 404 | // Open /proc/`getppid()` before we daemonize. | 
|  | 405 | std::string target_proc_path = "/proc/" + std::to_string(target_process); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 406 | int target_proc_fd = open(target_proc_path.c_str(), O_DIRECTORY | O_RDONLY); | 
|  | 407 | if (target_proc_fd == -1) { | 
|  | 408 | PLOG(FATAL) << "failed to open " << target_proc_path; | 
|  | 409 | } | 
|  | 410 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 411 | // Make sure getppid() hasn't changed. | 
|  | 412 | if (getppid() != target_process) { | 
|  | 413 | LOG(FATAL) << "parent died"; | 
| Josh Gao | 2a18b82 | 2017-02-16 19:17:28 -0800 | [diff] [blame] | 414 | } | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 415 | atrace_end(ATRACE_TAG); | 
|  | 416 |  | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 417 | // Reparent ourselves to init, so that the signal handler can waitpid on the | 
|  | 418 | // original process to avoid leaving a zombie for non-fatal dumps. | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 419 | // Move the input/output pipes off of stdout/stderr, out of paranoia. | 
|  | 420 | unique_fd output_pipe(dup(STDOUT_FILENO)); | 
|  | 421 | unique_fd input_pipe(dup(STDIN_FILENO)); | 
|  | 422 |  | 
|  | 423 | unique_fd fork_exit_read, fork_exit_write; | 
|  | 424 | if (!Pipe(&fork_exit_read, &fork_exit_write)) { | 
|  | 425 | PLOG(FATAL) << "failed to create pipe"; | 
|  | 426 | } | 
|  | 427 |  | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 428 | pid_t forkpid = fork(); | 
|  | 429 | if (forkpid == -1) { | 
|  | 430 | PLOG(FATAL) << "fork failed"; | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 431 | } else if (forkpid == 0) { | 
|  | 432 | fork_exit_read.reset(); | 
|  | 433 | } else { | 
|  | 434 | // We need the pseudothread to live until we get around to verifying the vm pid against it. | 
|  | 435 | // The last thing it does is block on a waitpid on us, so wait until our child tells us to die. | 
|  | 436 | fork_exit_write.reset(); | 
|  | 437 | char buf; | 
|  | 438 | TEMP_FAILURE_RETRY(read(fork_exit_read.get(), &buf, sizeof(buf))); | 
|  | 439 | _exit(0); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 440 | } | 
|  | 441 |  | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 442 | ATRACE_NAME("after reparent"); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 443 | pid_t pseudothread_tid; | 
|  | 444 | DebuggerdDumpType dump_type; | 
| Peter Collingbourne | 843f7e6 | 2020-02-28 19:07:33 -0800 | [diff] [blame] | 445 | ProcessInfo process_info; | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 446 |  | 
|  | 447 | Initialize(argv); | 
|  | 448 | ParseArgs(argc, argv, &pseudothread_tid, &dump_type); | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 449 |  | 
| Josh Gao | 7c6e313 | 2017-01-22 17:59:02 -0800 | [diff] [blame] | 450 | // Die if we take too long. | 
| Andreas Gampe | b02851a | 2017-06-22 19:45:53 -0700 | [diff] [blame] | 451 | // | 
|  | 452 | // Note: processes with many threads and minidebug-info can take a bit to | 
|  | 453 | //       unwind, do not make this too small. b/62828735 | 
| Peter Collingbourne | fb5eac9 | 2021-03-11 12:51:25 -0800 | [diff] [blame] | 454 | alarm(30 * android::base::HwTimeoutMultiplier()); | 
| Josh Gao | 7c6e313 | 2017-01-22 17:59:02 -0800 | [diff] [blame] | 455 |  | 
| Josh Gao | 2f11a25 | 2017-02-13 14:46:19 -0800 | [diff] [blame] | 456 | // Collect the list of open files. | 
|  | 457 | OpenFilesList open_files; | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 458 | { | 
|  | 459 | ATRACE_NAME("open files"); | 
| Josh Gao | ce841d9 | 2018-08-06 18:26:42 -0700 | [diff] [blame] | 460 | populate_open_files_list(&open_files, g_target_thread); | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 461 | } | 
| Josh Gao | 2f11a25 | 2017-02-13 14:46:19 -0800 | [diff] [blame] | 462 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 463 | // In order to reduce the duration that we pause the process for, we ptrace | 
|  | 464 | // the threads, fetch their registers and associated information, and then | 
|  | 465 | // fork a separate process as a snapshot of the process's address space. | 
|  | 466 | std::set<pid_t> threads; | 
|  | 467 | if (!android::procinfo::GetProcessTids(g_target_thread, &threads)) { | 
|  | 468 | PLOG(FATAL) << "failed to get process threads"; | 
|  | 469 | } | 
| Josh Gao | 3407d7c | 2017-06-13 17:21:12 +0000 | [diff] [blame] | 470 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 471 | std::map<pid_t, ThreadInfo> thread_info; | 
|  | 472 | siginfo_t siginfo; | 
|  | 473 | std::string error; | 
| Mitch Phillips | 8fe5127 | 2023-02-07 17:02:30 -0800 | [diff] [blame] | 474 | bool recoverable_gwp_asan_crash = false; | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 475 |  | 
|  | 476 | { | 
|  | 477 | ATRACE_NAME("ptrace"); | 
|  | 478 | for (pid_t thread : threads) { | 
|  | 479 | // Trace the pseudothread separately, so we can use different options. | 
|  | 480 | if (thread == pseudothread_tid) { | 
|  | 481 | continue; | 
|  | 482 | } | 
|  | 483 |  | 
|  | 484 | if (!ptrace_seize_thread(target_proc_fd, thread, &error)) { | 
|  | 485 | bool fatal = thread == g_target_thread; | 
|  | 486 | LOG(fatal ? FATAL : WARNING) << error; | 
|  | 487 | } | 
|  | 488 |  | 
|  | 489 | ThreadInfo info; | 
|  | 490 | info.pid = target_process; | 
|  | 491 | info.tid = thread; | 
| Josh Gao | 5df504c | 2019-05-09 12:48:17 -0700 | [diff] [blame] | 492 | info.uid = getuid(); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 493 | info.thread_name = get_thread_name(thread); | 
|  | 494 |  | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 495 | unique_fd attr_fd(openat(target_proc_fd, "attr/current", O_RDONLY | O_CLOEXEC)); | 
|  | 496 | if (!android::base::ReadFdToString(attr_fd, &info.selinux_label)) { | 
|  | 497 | PLOG(WARNING) << "failed to read selinux label"; | 
|  | 498 | } | 
|  | 499 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 500 | if (!ptrace_interrupt(thread, &info.signo)) { | 
|  | 501 | PLOG(WARNING) << "failed to ptrace interrupt thread " << thread; | 
|  | 502 | ptrace(PTRACE_DETACH, thread, 0, 0); | 
|  | 503 | continue; | 
|  | 504 | } | 
|  | 505 |  | 
| Elliott Hughes | d13ea52 | 2022-01-13 09:20:26 -0800 | [diff] [blame] | 506 | struct iovec tagged_addr_iov = { | 
| Peter Collingbourne | 864f15d | 2020-09-14 20:27:36 -0700 | [diff] [blame] | 507 | &info.tagged_addr_ctrl, | 
|  | 508 | sizeof(info.tagged_addr_ctrl), | 
|  | 509 | }; | 
|  | 510 | if (ptrace(PTRACE_GETREGSET, thread, NT_ARM_TAGGED_ADDR_CTRL, | 
| Elliott Hughes | d13ea52 | 2022-01-13 09:20:26 -0800 | [diff] [blame] | 511 | reinterpret_cast<void*>(&tagged_addr_iov)) == -1) { | 
| Peter Collingbourne | 864f15d | 2020-09-14 20:27:36 -0700 | [diff] [blame] | 512 | info.tagged_addr_ctrl = -1; | 
|  | 513 | } | 
| Peter Collingbourne | 864f15d | 2020-09-14 20:27:36 -0700 | [diff] [blame] | 514 |  | 
| Elliott Hughes | d13ea52 | 2022-01-13 09:20:26 -0800 | [diff] [blame] | 515 | struct iovec pac_enabled_keys_iov = { | 
|  | 516 | &info.pac_enabled_keys, | 
|  | 517 | sizeof(info.pac_enabled_keys), | 
|  | 518 | }; | 
|  | 519 | if (ptrace(PTRACE_GETREGSET, thread, NT_ARM_PAC_ENABLED_KEYS, | 
|  | 520 | reinterpret_cast<void*>(&pac_enabled_keys_iov)) == -1) { | 
|  | 521 | info.pac_enabled_keys = -1; | 
|  | 522 | } | 
|  | 523 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 524 | if (thread == g_target_thread) { | 
|  | 525 | // Read the thread's registers along with the rest of the crash info out of the pipe. | 
| Mitch Phillips | 8fe5127 | 2023-02-07 17:02:30 -0800 | [diff] [blame] | 526 | ReadCrashInfo(input_pipe, &siginfo, &info.registers, &process_info, | 
|  | 527 | &recoverable_gwp_asan_crash); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 528 | info.siginfo = &siginfo; | 
|  | 529 | info.signo = info.siginfo->si_signo; | 
| Josh Gao | 31348a7 | 2021-03-29 21:53:42 -0700 | [diff] [blame] | 530 |  | 
|  | 531 | info.command_line = get_command_line(g_target_thread); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 532 | } else { | 
| Christopher Ferris | 60eb197 | 2019-01-15 15:18:43 -0800 | [diff] [blame] | 533 | info.registers.reset(unwindstack::Regs::RemoteGet(thread)); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 534 | if (!info.registers) { | 
|  | 535 | PLOG(WARNING) << "failed to fetch registers for thread " << thread; | 
|  | 536 | ptrace(PTRACE_DETACH, thread, 0, 0); | 
|  | 537 | continue; | 
|  | 538 | } | 
|  | 539 | } | 
|  | 540 |  | 
|  | 541 | thread_info[thread] = std::move(info); | 
|  | 542 | } | 
|  | 543 | } | 
|  | 544 |  | 
|  | 545 | // Trace the pseudothread with PTRACE_O_TRACECLONE and tell it to fork. | 
|  | 546 | if (!ptrace_seize_thread(target_proc_fd, pseudothread_tid, &error, PTRACE_O_TRACECLONE)) { | 
|  | 547 | LOG(FATAL) << "failed to seize pseudothread: " << error; | 
|  | 548 | } | 
|  | 549 |  | 
|  | 550 | if (TEMP_FAILURE_RETRY(write(output_pipe.get(), "\1", 1)) != 1) { | 
|  | 551 | PLOG(FATAL) << "failed to write to pseudothread"; | 
|  | 552 | } | 
|  | 553 |  | 
|  | 554 | pid_t vm_pid = wait_for_vm_process(pseudothread_tid); | 
|  | 555 | if (ptrace(PTRACE_DETACH, pseudothread_tid, 0, 0) != 0) { | 
|  | 556 | PLOG(FATAL) << "failed to detach from pseudothread"; | 
|  | 557 | } | 
|  | 558 |  | 
|  | 559 | // The pseudothread can die now. | 
|  | 560 | fork_exit_write.reset(); | 
|  | 561 |  | 
|  | 562 | // Defer the message until later, for readability. | 
| Elliott Hughes | e4781d5 | 2021-03-17 09:15:15 -0700 | [diff] [blame] | 563 | bool wait_for_debugger = android::base::GetBoolProperty( | 
|  | 564 | "debug.debuggerd.wait_for_debugger", | 
|  | 565 | android::base::GetBoolProperty("debug.debuggerd.wait_for_gdb", false)); | 
| Josh Gao | a48b41b | 2019-12-13 14:11:04 -0800 | [diff] [blame] | 566 | if (siginfo.si_signo == BIONIC_SIGNAL_DEBUGGER) { | 
| Elliott Hughes | e4781d5 | 2021-03-17 09:15:15 -0700 | [diff] [blame] | 567 | wait_for_debugger = false; | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 568 | } | 
|  | 569 |  | 
|  | 570 | // Detach from all of our attached threads before resuming. | 
|  | 571 | for (const auto& [tid, thread] : thread_info) { | 
| Josh Gao | a48b41b | 2019-12-13 14:11:04 -0800 | [diff] [blame] | 572 | int resume_signal = thread.signo == BIONIC_SIGNAL_DEBUGGER ? 0 : thread.signo; | 
| Elliott Hughes | e4781d5 | 2021-03-17 09:15:15 -0700 | [diff] [blame] | 573 | if (wait_for_debugger) { | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 574 | resume_signal = 0; | 
|  | 575 | if (tgkill(target_process, tid, SIGSTOP) != 0) { | 
|  | 576 | PLOG(WARNING) << "failed to send SIGSTOP to " << tid; | 
|  | 577 | } | 
|  | 578 | } | 
|  | 579 |  | 
|  | 580 | LOG(DEBUG) << "detaching from thread " << tid; | 
|  | 581 | if (ptrace(PTRACE_DETACH, tid, 0, resume_signal) != 0) { | 
|  | 582 | PLOG(ERROR) << "failed to detach from thread " << tid; | 
|  | 583 | } | 
|  | 584 | } | 
|  | 585 |  | 
|  | 586 | // Drop our capabilities now that we've fetched all of the information we need. | 
| Josh Gao | 2f11a25 | 2017-02-13 14:46:19 -0800 | [diff] [blame] | 587 | drop_capabilities(); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 588 |  | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 589 | { | 
|  | 590 | ATRACE_NAME("tombstoned_connect"); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 591 | LOG(INFO) << "obtaining output fd from tombstoned, type: " << dump_type; | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 592 | g_tombstoned_connected = tombstoned_connect(g_target_thread, &g_tombstoned_socket, &g_output_fd, | 
|  | 593 | &g_proto_fd, dump_type); | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 594 | } | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 595 |  | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 596 | if (g_tombstoned_connected) { | 
|  | 597 | if (TEMP_FAILURE_RETRY(dup2(g_output_fd.get(), STDOUT_FILENO)) == -1) { | 
|  | 598 | PLOG(ERROR) << "failed to dup2 output fd (" << g_output_fd.get() << ") to STDOUT_FILENO"; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 599 | } | 
|  | 600 | } else { | 
|  | 601 | unique_fd devnull(TEMP_FAILURE_RETRY(open("/dev/null", O_RDWR))); | 
|  | 602 | TEMP_FAILURE_RETRY(dup2(devnull.get(), STDOUT_FILENO)); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 603 | g_output_fd = std::move(devnull); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 604 | } | 
|  | 605 |  | 
| Josh Gao | 9da1f51 | 2018-08-06 15:38:29 -0700 | [diff] [blame] | 606 | LOG(INFO) << "performing dump of process " << target_process | 
|  | 607 | << " (target tid = " << g_target_thread << ")"; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 608 |  | 
|  | 609 | int signo = siginfo.si_signo; | 
| Josh Gao | a48b41b | 2019-12-13 14:11:04 -0800 | [diff] [blame] | 610 | bool fatal_signal = signo != BIONIC_SIGNAL_DEBUGGER; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 611 | bool backtrace = false; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 612 |  | 
| Josh Gao | a48b41b | 2019-12-13 14:11:04 -0800 | [diff] [blame] | 613 | // si_value is special when used with BIONIC_SIGNAL_DEBUGGER. | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 614 | //   0: dump tombstone | 
|  | 615 | //   1: dump backtrace | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 616 | if (!fatal_signal) { | 
|  | 617 | int si_val = siginfo.si_value.sival_int; | 
|  | 618 | if (si_val == 0) { | 
|  | 619 | backtrace = false; | 
|  | 620 | } else if (si_val == 1) { | 
|  | 621 | backtrace = true; | 
|  | 622 | } else { | 
|  | 623 | LOG(WARNING) << "unknown si_value value " << si_val; | 
|  | 624 | } | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 625 | } | 
|  | 626 |  | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 627 | // TODO: Use seccomp to lock ourselves down. | 
| Christopher Ferris | 3b7b7ba | 2022-03-15 16:56:09 -0700 | [diff] [blame] | 628 |  | 
|  | 629 | unwindstack::AndroidRemoteUnwinder unwinder(vm_pid, unwindstack::Regs::CurrentArch()); | 
|  | 630 | unwindstack::ErrorData error_data; | 
|  | 631 | if (!unwinder.Initialize(error_data)) { | 
|  | 632 | LOG(FATAL) << "Failed to initialize unwinder object: " | 
|  | 633 | << unwindstack::GetErrorCodeString(error_data.code); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 634 | } | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 635 |  | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 636 | std::string amfd_data; | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 637 | if (backtrace) { | 
| Josh Gao | 8bb0390 | 2017-05-30 15:31:02 -0700 | [diff] [blame] | 638 | ATRACE_NAME("dump_backtrace"); | 
| Christopher Ferris | 60eb197 | 2019-01-15 15:18:43 -0800 | [diff] [blame] | 639 | dump_backtrace(std::move(g_output_fd), &unwinder, thread_info, g_target_thread); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 640 | } else { | 
| Josh Gao | ce841d9 | 2018-08-06 18:26:42 -0700 | [diff] [blame] | 641 | { | 
|  | 642 | ATRACE_NAME("fdsan table dump"); | 
| Peter Collingbourne | 843f7e6 | 2020-02-28 19:07:33 -0800 | [diff] [blame] | 643 | populate_fdsan_table(&open_files, unwinder.GetProcessMemory(), | 
|  | 644 | process_info.fdsan_table_address); | 
| Josh Gao | ce841d9 | 2018-08-06 18:26:42 -0700 | [diff] [blame] | 645 | } | 
|  | 646 |  | 
|  | 647 | { | 
|  | 648 | ATRACE_NAME("engrave_tombstone"); | 
| Josh Gao | 76e1e30 | 2021-01-26 15:53:11 -0800 | [diff] [blame] | 649 | engrave_tombstone(std::move(g_output_fd), std::move(g_proto_fd), &unwinder, thread_info, | 
|  | 650 | g_target_thread, process_info, &open_files, &amfd_data); | 
| Josh Gao | ce841d9 | 2018-08-06 18:26:42 -0700 | [diff] [blame] | 651 | } | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 652 | } | 
|  | 653 |  | 
| Mitch Phillips | 8fe5127 | 2023-02-07 17:02:30 -0800 | [diff] [blame] | 654 | if (fatal_signal && !recoverable_gwp_asan_crash) { | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 655 | // Don't try to notify ActivityManager if it just crashed, or we might hang until timeout. | 
|  | 656 | if (thread_info[target_process].thread_name != "system_server") { | 
|  | 657 | activity_manager_notify(target_process, signo, amfd_data); | 
| Josh Gao | 7c6e313 | 2017-01-22 17:59:02 -0800 | [diff] [blame] | 658 | } | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 659 | } | 
|  | 660 |  | 
| Elliott Hughes | e4781d5 | 2021-03-17 09:15:15 -0700 | [diff] [blame] | 661 | if (wait_for_debugger) { | 
| Josh Gao | 7c6e313 | 2017-01-22 17:59:02 -0800 | [diff] [blame] | 662 | // Use ALOGI to line up with output from engrave_tombstone. | 
|  | 663 | ALOGI( | 
| dimitry | 6429e20 | 2017-09-12 10:46:20 +0200 | [diff] [blame] | 664 | "***********************************************************\n" | 
|  | 665 | "* Process %d has been suspended while crashing.\n" | 
| Elliott Hughes | e4781d5 | 2021-03-17 09:15:15 -0700 | [diff] [blame] | 666 | "* To attach the debugger, run this on the host:\n" | 
| dimitry | 6429e20 | 2017-09-12 10:46:20 +0200 | [diff] [blame] | 667 | "*\n" | 
| Elliott Hughes | 5a4e625 | 2023-02-28 22:16:19 +0000 | [diff] [blame] | 668 | "*     lldbclient.py -p %d\n" | 
| dimitry | 6429e20 | 2017-09-12 10:46:20 +0200 | [diff] [blame] | 669 | "*\n" | 
|  | 670 | "***********************************************************", | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 671 | target_process, target_process); | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 672 | } | 
|  | 673 |  | 
|  | 674 | // Close stdout before we notify tombstoned of completion. | 
|  | 675 | close(STDOUT_FILENO); | 
| Josh Gao | 2b2ae0c | 2017-08-21 14:31:17 -0700 | [diff] [blame] | 676 | if (g_tombstoned_connected && !tombstoned_notify_completion(g_tombstoned_socket.get())) { | 
| Josh Gao | cbe70cb | 2016-10-18 18:17:52 -0700 | [diff] [blame] | 677 | LOG(ERROR) << "failed to notify tombstoned of completion"; | 
|  | 678 | } | 
|  | 679 |  | 
|  | 680 | return 0; | 
|  | 681 | } |