blob: cbb1181518eb8d6bcfdc689bc97a10188b9266ce [file] [log] [blame]
Josh Gaocbe70cb2016-10-18 18:17:52 -07001/*
2 * Copyright 2016, The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#include <arpa/inet.h>
18#include <dirent.h>
19#include <fcntl.h>
20#include <stdlib.h>
Josh Gao85bcaf62017-02-01 16:35:31 -080021#include <sys/prctl.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070022#include <sys/ptrace.h>
23#include <sys/types.h>
24#include <sys/un.h>
Josh Gao2b2ae0c2017-08-21 14:31:17 -070025#include <sys/wait.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070026#include <unistd.h>
27
28#include <limits>
Josh Gao57f58f82017-03-15 23:23:22 -070029#include <map>
Josh Gaocbe70cb2016-10-18 18:17:52 -070030#include <memory>
31#include <set>
32#include <vector>
33
Elliott Hughesa029d982021-06-21 12:36:47 -070034#include <android-base/errno_restorer.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070035#include <android-base/file.h>
36#include <android-base/logging.h>
Josh Gao8d44b142018-09-18 13:22:22 -070037#include <android-base/macros.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070038#include <android-base/parseint.h>
39#include <android-base/properties.h>
40#include <android-base/stringprintf.h>
Josh Gao57f58f82017-03-15 23:23:22 -070041#include <android-base/strings.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070042#include <android-base/unique_fd.h>
Mitch Phillipse4adff02021-01-21 20:41:50 -080043#include <bionic/macros.h>
Josh Gaoa48b41b2019-12-13 14:11:04 -080044#include <bionic/reserved_signals.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070045#include <cutils/sockets.h>
Vijay Venkatramana95acea2017-01-23 20:11:51 -080046#include <log/log.h>
Josh Gaob0e51e32017-06-01 12:08:10 -070047#include <private/android_filesystem_config.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070048#include <procinfo/process.h>
Josh Gaocbe70cb2016-10-18 18:17:52 -070049
Josh Gao8bb03902017-05-30 15:31:02 -070050#define ATRACE_TAG ATRACE_TAG_BIONIC
51#include <utils/Trace.h>
52
Christopher Ferris3b7b7ba2022-03-15 16:56:09 -070053#include <unwindstack/AndroidUnwinder.h>
54#include <unwindstack/Error.h>
Josh Gao2b2ae0c2017-08-21 14:31:17 -070055#include <unwindstack/Regs.h>
56
Josh Gaoc3706662017-08-29 13:08:32 -070057#include "libdebuggerd/backtrace.h"
58#include "libdebuggerd/tombstone.h"
59#include "libdebuggerd/utility.h"
Josh Gaocbe70cb2016-10-18 18:17:52 -070060
61#include "debuggerd/handler.h"
Narayan Kamath2d377cd2017-05-10 10:58:59 +010062#include "tombstoned/tombstoned.h"
Josh Gaoc3706662017-08-29 13:08:32 -070063
64#include "protocol.h"
Narayan Kamath2d377cd2017-05-10 10:58:59 +010065#include "util.h"
Josh Gaocbe70cb2016-10-18 18:17:52 -070066
Elliott Hughesa029d982021-06-21 12:36:47 -070067using android::base::ErrnoRestorer;
Josh Gaocbe70cb2016-10-18 18:17:52 -070068using android::base::StringPrintf;
Elliott Hughesa029d982021-06-21 12:36:47 -070069using android::base::unique_fd;
Josh Gao57f58f82017-03-15 23:23:22 -070070
Josh Gaofe902762017-02-01 16:31:43 -080071static bool pid_contains_tid(int pid_proc_fd, pid_t tid) {
72 struct stat st;
73 std::string task_path = StringPrintf("task/%d", tid);
74 return fstatat(pid_proc_fd, task_path.c_str(), &st, 0) == 0;
Josh Gaocbe70cb2016-10-18 18:17:52 -070075}
76
Josh Gaofd13bf02017-08-18 15:37:26 -070077static pid_t get_tracer(pid_t tracee) {
78 // Check to see if the thread is being ptraced by another process.
79 android::procinfo::ProcessInfo process_info;
80 if (android::procinfo::GetProcessInfo(tracee, &process_info)) {
81 return process_info.tracer;
82 }
83 return -1;
84}
85
Josh Gaocbe70cb2016-10-18 18:17:52 -070086// Attach to a thread, and verify that it's still a member of the given process
Josh Gao2b2ae0c2017-08-21 14:31:17 -070087static bool ptrace_seize_thread(int pid_proc_fd, pid_t tid, std::string* error, int flags = 0) {
88 if (ptrace(PTRACE_SEIZE, tid, 0, flags) != 0) {
Josh Gaofd13bf02017-08-18 15:37:26 -070089 if (errno == EPERM) {
Elliott Hughesa029d982021-06-21 12:36:47 -070090 ErrnoRestorer errno_restorer; // In case get_tracer() fails and we fall through.
91 pid_t tracer_pid = get_tracer(tid);
92 if (tracer_pid > 0) {
Josh Gaofd13bf02017-08-18 15:37:26 -070093 *error = StringPrintf("failed to attach to thread %d, already traced by %d (%s)", tid,
Elliott Hughesa029d982021-06-21 12:36:47 -070094 tracer_pid, get_process_name(tracer_pid).c_str());
Josh Gaofd13bf02017-08-18 15:37:26 -070095 return false;
96 }
97 }
98
Josh Gao42fd74b2017-01-20 12:51:11 -080099 *error = StringPrintf("failed to attach to thread %d: %s", tid, strerror(errno));
Josh Gaocbe70cb2016-10-18 18:17:52 -0700100 return false;
101 }
102
103 // Make sure that the task we attached to is actually part of the pid we're dumping.
Josh Gaofe902762017-02-01 16:31:43 -0800104 if (!pid_contains_tid(pid_proc_fd, tid)) {
Josh Gaocbe70cb2016-10-18 18:17:52 -0700105 if (ptrace(PTRACE_DETACH, tid, 0, 0) != 0) {
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700106 PLOG(WARNING) << "failed to detach from thread " << tid;
Josh Gaocbe70cb2016-10-18 18:17:52 -0700107 }
Josh Gaofe902762017-02-01 16:31:43 -0800108 *error = StringPrintf("thread %d is not in process", tid);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700109 return false;
110 }
Josh Gao122479f2017-01-22 16:42:32 -0800111
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700112 return true;
113}
114
115static bool wait_for_stop(pid_t tid, int* received_signal) {
116 while (true) {
117 int status;
118 pid_t result = waitpid(tid, &status, __WALL);
119 if (result != tid) {
120 PLOG(ERROR) << "waitpid failed on " << tid << " while detaching";
121 return false;
122 }
123
124 if (WIFSTOPPED(status)) {
125 if (status >> 16 == PTRACE_EVENT_STOP) {
126 *received_signal = 0;
127 } else {
128 *received_signal = WSTOPSIG(status);
129 }
130 return true;
131 }
132 }
133}
134
135// Interrupt a process and wait for it to be interrupted.
136static bool ptrace_interrupt(pid_t tid, int* received_signal) {
137 if (ptrace(PTRACE_INTERRUPT, tid, 0, 0) == 0) {
138 return wait_for_stop(tid, received_signal);
Josh Gao3407d7c2017-06-13 17:21:12 +0000139 }
140
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700141 PLOG(ERROR) << "failed to interrupt " << tid << " to detach";
142 return false;
Josh Gaocbe70cb2016-10-18 18:17:52 -0700143}
144
Josh Gaob0e51e32017-06-01 12:08:10 -0700145static bool activity_manager_notify(pid_t pid, int signal, const std::string& amfd_data) {
Josh Gao8bb03902017-05-30 15:31:02 -0700146 ATRACE_CALL();
Josh Gaob0e51e32017-06-01 12:08:10 -0700147 android::base::unique_fd amfd(socket_local_client(
148 "/data/system/ndebugsocket", ANDROID_SOCKET_NAMESPACE_FILESYSTEM, SOCK_STREAM));
Josh Gaocbe70cb2016-10-18 18:17:52 -0700149 if (amfd.get() == -1) {
150 PLOG(ERROR) << "unable to connect to activity manager";
151 return false;
152 }
153
154 struct timeval tv = {
Peter Collingbournefb5eac92021-03-11 12:51:25 -0800155 .tv_sec = 1 * android::base::HwTimeoutMultiplier(),
Evgenii Stepanov2a55e1a2021-01-29 11:50:30 -0800156 .tv_usec = 0,
Josh Gaocbe70cb2016-10-18 18:17:52 -0700157 };
158 if (setsockopt(amfd.get(), SOL_SOCKET, SO_SNDTIMEO, &tv, sizeof(tv)) == -1) {
159 PLOG(ERROR) << "failed to set send timeout on activity manager socket";
160 return false;
161 }
Peter Collingbournefb5eac92021-03-11 12:51:25 -0800162 tv.tv_sec = 3 * android::base::HwTimeoutMultiplier(); // 3 seconds on handshake read
Josh Gaocbe70cb2016-10-18 18:17:52 -0700163 if (setsockopt(amfd.get(), SOL_SOCKET, SO_RCVTIMEO, &tv, sizeof(tv)) == -1) {
164 PLOG(ERROR) << "failed to set receive timeout on activity manager socket";
165 return false;
166 }
167
168 // Activity Manager protocol: binary 32-bit network-byte-order ints for the
169 // pid and signal number, followed by the raw text of the dump, culminating
170 // in a zero byte that marks end-of-data.
171 uint32_t datum = htonl(pid);
172 if (!android::base::WriteFully(amfd, &datum, 4)) {
173 PLOG(ERROR) << "AM pid write failed";
174 return false;
175 }
176 datum = htonl(signal);
177 if (!android::base::WriteFully(amfd, &datum, 4)) {
178 PLOG(ERROR) << "AM signal write failed";
179 return false;
180 }
181 if (!android::base::WriteFully(amfd, amfd_data.c_str(), amfd_data.size() + 1)) {
182 PLOG(ERROR) << "AM data write failed";
183 return false;
184 }
185
186 // 3 sec timeout reading the ack; we're fine if the read fails.
187 char ack;
188 android::base::ReadFully(amfd, &ack, 1);
189 return true;
190}
191
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700192// Globals used by the abort handler.
193static pid_t g_target_thread = -1;
194static bool g_tombstoned_connected = false;
195static unique_fd g_tombstoned_socket;
196static unique_fd g_output_fd;
Josh Gao76e1e302021-01-26 15:53:11 -0800197static unique_fd g_proto_fd;
Josh Gao57594112017-01-22 17:41:15 -0800198
Josh Gao38ac45d2018-04-27 13:31:47 -0700199static void DefuseSignalHandlers() {
200 // Don't try to dump ourselves.
201 struct sigaction action = {};
202 action.sa_handler = SIG_DFL;
203 debuggerd_register_handlers(&action);
204
205 sigset_t mask;
206 sigemptyset(&mask);
207 if (sigprocmask(SIG_SETMASK, &mask, nullptr) != 0) {
208 PLOG(FATAL) << "failed to set signal mask";
209 }
210}
211
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700212static void Initialize(char** argv) {
Josh Gaocbe70cb2016-10-18 18:17:52 -0700213 android::base::InitLogging(argv);
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700214 android::base::SetAborter([](const char* abort_msg) {
215 // If we abort before we get an output fd, contact tombstoned to let any
216 // potential listeners know that we failed.
217 if (!g_tombstoned_connected) {
Josh Gao76e1e302021-01-26 15:53:11 -0800218 if (!tombstoned_connect(g_target_thread, &g_tombstoned_socket, &g_output_fd, &g_proto_fd,
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700219 kDebuggerdAnyIntercept)) {
220 // We failed to connect, not much we can do.
221 LOG(ERROR) << "failed to connected to tombstoned to report failure";
222 _exit(1);
223 }
224 }
225
226 dprintf(g_output_fd.get(), "crash_dump failed to dump process");
227 if (g_target_thread != 1) {
228 dprintf(g_output_fd.get(), " %d: %s\n", g_target_thread, abort_msg);
229 } else {
230 dprintf(g_output_fd.get(), ": %s\n", abort_msg);
231 }
232
233 _exit(1);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700234 });
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700235}
Josh Gaoe7402502017-06-01 11:55:25 -0700236
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700237static void ParseArgs(int argc, char** argv, pid_t* pseudothread_tid, DebuggerdDumpType* dump_type) {
Narayan Kamatha73df602017-05-24 15:07:25 +0100238 if (argc != 4) {
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700239 LOG(FATAL) << "wrong number of args: " << argc << " (expected 4)";
Josh Gaocbe70cb2016-10-18 18:17:52 -0700240 }
241
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700242 if (!android::base::ParseInt(argv[1], &g_target_thread, 1, std::numeric_limits<pid_t>::max())) {
243 LOG(FATAL) << "invalid target tid: " << argv[1];
Josh Gaocbe70cb2016-10-18 18:17:52 -0700244 }
245
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700246 if (!android::base::ParseInt(argv[2], pseudothread_tid, 1, std::numeric_limits<pid_t>::max())) {
Josh Gaof6ad5852017-02-15 12:21:11 -0800247 LOG(FATAL) << "invalid pseudothread tid: " << argv[2];
Josh Gao2f11a252017-02-13 14:46:19 -0800248 }
249
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700250 int dump_type_int;
Josh Gao76e1e302021-01-26 15:53:11 -0800251 if (!android::base::ParseInt(argv[3], &dump_type_int, 0)) {
Narayan Kamatha73df602017-05-24 15:07:25 +0100252 LOG(FATAL) << "invalid requested dump type: " << argv[3];
253 }
Josh Gao76e1e302021-01-26 15:53:11 -0800254
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700255 *dump_type = static_cast<DebuggerdDumpType>(dump_type_int);
Josh Gao76e1e302021-01-26 15:53:11 -0800256 switch (*dump_type) {
257 case kDebuggerdNativeBacktrace:
258 case kDebuggerdTombstone:
259 case kDebuggerdTombstoneProto:
260 break;
261
262 default:
263 LOG(FATAL) << "invalid requested dump type: " << dump_type_int;
264 }
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700265}
Narayan Kamatha73df602017-05-24 15:07:25 +0100266
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700267static void ReadCrashInfo(unique_fd& fd, siginfo_t* siginfo,
Mitch Phillips8fe51272023-02-07 17:02:30 -0800268 std::unique_ptr<unwindstack::Regs>* regs, ProcessInfo* process_info,
269 bool* recoverable_gwp_asan_crash) {
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700270 std::aligned_storage<sizeof(CrashInfo) + 1, alignof(CrashInfo)>::type buf;
Josh Gao9da1f512018-08-06 15:38:29 -0700271 CrashInfo* crash_info = reinterpret_cast<CrashInfo*>(&buf);
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700272 ssize_t rc = TEMP_FAILURE_RETRY(read(fd.get(), &buf, sizeof(buf)));
Mitch Phillips8fe51272023-02-07 17:02:30 -0800273 *recoverable_gwp_asan_crash = false;
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700274 if (rc == -1) {
275 PLOG(FATAL) << "failed to read target ucontext";
Josh Gao9da1f512018-08-06 15:38:29 -0700276 } else {
277 ssize_t expected_size = 0;
278 switch (crash_info->header.version) {
279 case 1:
Josh Gao9da1f512018-08-06 15:38:29 -0700280 case 2:
Peter Collingbournef3d542f2020-03-05 16:46:15 -0800281 case 3:
282 expected_size = sizeof(CrashInfoHeader) + sizeof(CrashInfoDataStatic);
Josh Gao9da1f512018-08-06 15:38:29 -0700283 break;
284
Peter Collingbournef3d542f2020-03-05 16:46:15 -0800285 case 4:
286 expected_size = sizeof(CrashInfoHeader) + sizeof(CrashInfoDataDynamic);
Mitch Phillipse0b4bb12020-02-14 14:54:31 -0800287 break;
288
Josh Gao9da1f512018-08-06 15:38:29 -0700289 default:
290 LOG(FATAL) << "unexpected CrashInfo version: " << crash_info->header.version;
291 break;
292 };
293
Peter Collingbournef3d542f2020-03-05 16:46:15 -0800294 if (rc < expected_size) {
Josh Gao9da1f512018-08-06 15:38:29 -0700295 LOG(FATAL) << "read " << rc << " bytes when reading target crash information, expected "
296 << expected_size;
297 }
Josh Gaoc7fe0602017-03-13 14:13:29 -0700298 }
299
Josh Gao9da1f512018-08-06 15:38:29 -0700300 switch (crash_info->header.version) {
Peter Collingbournef3d542f2020-03-05 16:46:15 -0800301 case 4:
302 process_info->fdsan_table_address = crash_info->data.d.fdsan_table_address;
303 process_info->gwp_asan_state = crash_info->data.d.gwp_asan_state;
304 process_info->gwp_asan_metadata = crash_info->data.d.gwp_asan_metadata;
Peter Collingbournef8622522020-04-07 14:07:32 -0700305 process_info->scudo_stack_depot = crash_info->data.d.scudo_stack_depot;
306 process_info->scudo_region_info = crash_info->data.d.scudo_region_info;
Peter Collingbournebb4b49c2021-01-06 21:02:19 -0800307 process_info->scudo_ring_buffer = crash_info->data.d.scudo_ring_buffer;
Florian Mayerbd49c382022-12-22 16:15:23 -0800308 process_info->scudo_ring_buffer_size = crash_info->data.d.scudo_ring_buffer_size;
Mitch Phillips8fe51272023-02-07 17:02:30 -0800309 *recoverable_gwp_asan_crash = crash_info->data.d.recoverable_gwp_asan_crash;
Josh Gao8d44b142018-09-18 13:22:22 -0700310 FALLTHROUGH_INTENDED;
Josh Gao9da1f512018-08-06 15:38:29 -0700311 case 1:
Peter Collingbournef3d542f2020-03-05 16:46:15 -0800312 case 2:
313 case 3:
314 process_info->abort_msg_address = crash_info->data.s.abort_msg_address;
315 *siginfo = crash_info->data.s.siginfo;
Peter Collingbournef03af882020-03-20 18:09:00 -0700316 if (signal_has_si_addr(siginfo)) {
Peter Collingbournef03af882020-03-20 18:09:00 -0700317 process_info->has_fault_address = true;
Mitch Phillipse4adff02021-01-21 20:41:50 -0800318 process_info->maybe_tagged_fault_address = reinterpret_cast<uintptr_t>(siginfo->si_addr);
319 process_info->untagged_fault_address =
320 untag_address(reinterpret_cast<uintptr_t>(siginfo->si_addr));
Peter Collingbournef03af882020-03-20 18:09:00 -0700321 }
Christopher Ferris60eb1972019-01-15 15:18:43 -0800322 regs->reset(unwindstack::Regs::CreateFromUcontext(unwindstack::Regs::CurrentArch(),
Peter Collingbournef3d542f2020-03-05 16:46:15 -0800323 &crash_info->data.s.ucontext));
Josh Gao9da1f512018-08-06 15:38:29 -0700324 break;
Josh Gaocbe70cb2016-10-18 18:17:52 -0700325
Josh Gao9da1f512018-08-06 15:38:29 -0700326 default:
327 __builtin_unreachable();
328 }
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700329}
330
331// Wait for a process to clone and return the child's pid.
332// Note: this leaves the parent in PTRACE_EVENT_STOP.
333static pid_t wait_for_clone(pid_t pid, bool resume_child) {
334 int status;
335 pid_t result = TEMP_FAILURE_RETRY(waitpid(pid, &status, __WALL));
336 if (result == -1) {
337 PLOG(FATAL) << "failed to waitpid";
Josh Gaocbe70cb2016-10-18 18:17:52 -0700338 }
339
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700340 if (WIFEXITED(status)) {
341 LOG(FATAL) << "traced process exited with status " << WEXITSTATUS(status);
342 } else if (WIFSIGNALED(status)) {
343 LOG(FATAL) << "traced process exited with signal " << WTERMSIG(status);
344 } else if (!WIFSTOPPED(status)) {
345 LOG(FATAL) << "process didn't stop? (status = " << status << ")";
346 }
347
348 if (status >> 8 != (SIGTRAP | (PTRACE_EVENT_CLONE << 8))) {
349 LOG(FATAL) << "process didn't stop due to PTRACE_O_TRACECLONE (status = " << status << ")";
350 }
351
352 pid_t child;
353 if (ptrace(PTRACE_GETEVENTMSG, pid, 0, &child) != 0) {
354 PLOG(FATAL) << "failed to get child pid via PTRACE_GETEVENTMSG";
355 }
356
357 int stop_signal;
358 if (!wait_for_stop(child, &stop_signal)) {
359 PLOG(FATAL) << "failed to waitpid on child";
360 }
361
362 CHECK_EQ(0, stop_signal);
363
364 if (resume_child) {
365 if (ptrace(PTRACE_CONT, child, 0, 0) != 0) {
366 PLOG(FATAL) << "failed to resume child (pid = " << child << ")";
367 }
368 }
369
370 return child;
371}
372
373static pid_t wait_for_vm_process(pid_t pseudothread_tid) {
374 // The pseudothread will double-fork, we want its grandchild.
375 pid_t intermediate = wait_for_clone(pseudothread_tid, true);
376 pid_t vm_pid = wait_for_clone(intermediate, false);
377 if (ptrace(PTRACE_DETACH, intermediate, 0, 0) != 0) {
378 PLOG(FATAL) << "failed to detach from intermediate vm process";
379 }
380
381 return vm_pid;
382}
383
Jinguang Dong8ac2f272018-11-24 17:12:33 +0800384static void InstallSigPipeHandler() {
385 struct sigaction action = {};
386 action.sa_handler = SIG_IGN;
387 action.sa_flags = SA_RESTART;
388 sigaction(SIGPIPE, &action, nullptr);
389}
390
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700391int main(int argc, char** argv) {
Josh Gao38ac45d2018-04-27 13:31:47 -0700392 DefuseSignalHandlers();
Jinguang Dong8ac2f272018-11-24 17:12:33 +0800393 InstallSigPipeHandler();
Josh Gao38ac45d2018-04-27 13:31:47 -0700394
Josh Gao18cb6812019-04-16 13:17:08 -0700395 // There appears to be a bug in the kernel where our death causes SIGHUP to
396 // be sent to our process group if we exit while it has stopped jobs (e.g.
Elliott Hughese4781d52021-03-17 09:15:15 -0700397 // because of wait_for_debugger). Use setsid to create a new process group to
Josh Gao18cb6812019-04-16 13:17:08 -0700398 // avoid hitting this.
399 setsid();
400
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700401 atrace_begin(ATRACE_TAG, "before reparent");
402 pid_t target_process = getppid();
403
404 // Open /proc/`getppid()` before we daemonize.
405 std::string target_proc_path = "/proc/" + std::to_string(target_process);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700406 int target_proc_fd = open(target_proc_path.c_str(), O_DIRECTORY | O_RDONLY);
407 if (target_proc_fd == -1) {
408 PLOG(FATAL) << "failed to open " << target_proc_path;
409 }
410
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700411 // Make sure getppid() hasn't changed.
412 if (getppid() != target_process) {
413 LOG(FATAL) << "parent died";
Josh Gao2a18b822017-02-16 19:17:28 -0800414 }
Josh Gao8bb03902017-05-30 15:31:02 -0700415 atrace_end(ATRACE_TAG);
416
Josh Gaocbe70cb2016-10-18 18:17:52 -0700417 // Reparent ourselves to init, so that the signal handler can waitpid on the
418 // original process to avoid leaving a zombie for non-fatal dumps.
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700419 // Move the input/output pipes off of stdout/stderr, out of paranoia.
420 unique_fd output_pipe(dup(STDOUT_FILENO));
421 unique_fd input_pipe(dup(STDIN_FILENO));
422
423 unique_fd fork_exit_read, fork_exit_write;
424 if (!Pipe(&fork_exit_read, &fork_exit_write)) {
425 PLOG(FATAL) << "failed to create pipe";
426 }
427
Josh Gaocbe70cb2016-10-18 18:17:52 -0700428 pid_t forkpid = fork();
429 if (forkpid == -1) {
430 PLOG(FATAL) << "fork failed";
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700431 } else if (forkpid == 0) {
432 fork_exit_read.reset();
433 } else {
434 // We need the pseudothread to live until we get around to verifying the vm pid against it.
435 // The last thing it does is block on a waitpid on us, so wait until our child tells us to die.
436 fork_exit_write.reset();
437 char buf;
438 TEMP_FAILURE_RETRY(read(fork_exit_read.get(), &buf, sizeof(buf)));
439 _exit(0);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700440 }
441
Josh Gao8bb03902017-05-30 15:31:02 -0700442 ATRACE_NAME("after reparent");
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700443 pid_t pseudothread_tid;
444 DebuggerdDumpType dump_type;
Peter Collingbourne843f7e62020-02-28 19:07:33 -0800445 ProcessInfo process_info;
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700446
447 Initialize(argv);
448 ParseArgs(argc, argv, &pseudothread_tid, &dump_type);
Josh Gao8bb03902017-05-30 15:31:02 -0700449
Josh Gao7c6e3132017-01-22 17:59:02 -0800450 // Die if we take too long.
Andreas Gampeb02851a2017-06-22 19:45:53 -0700451 //
452 // Note: processes with many threads and minidebug-info can take a bit to
453 // unwind, do not make this too small. b/62828735
Peter Collingbournefb5eac92021-03-11 12:51:25 -0800454 alarm(30 * android::base::HwTimeoutMultiplier());
Josh Gao7c6e3132017-01-22 17:59:02 -0800455
Josh Gao2f11a252017-02-13 14:46:19 -0800456 // Collect the list of open files.
457 OpenFilesList open_files;
Josh Gao8bb03902017-05-30 15:31:02 -0700458 {
459 ATRACE_NAME("open files");
Josh Gaoce841d92018-08-06 18:26:42 -0700460 populate_open_files_list(&open_files, g_target_thread);
Josh Gao8bb03902017-05-30 15:31:02 -0700461 }
Josh Gao2f11a252017-02-13 14:46:19 -0800462
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700463 // In order to reduce the duration that we pause the process for, we ptrace
464 // the threads, fetch their registers and associated information, and then
465 // fork a separate process as a snapshot of the process's address space.
466 std::set<pid_t> threads;
467 if (!android::procinfo::GetProcessTids(g_target_thread, &threads)) {
468 PLOG(FATAL) << "failed to get process threads";
469 }
Josh Gao3407d7c2017-06-13 17:21:12 +0000470
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700471 std::map<pid_t, ThreadInfo> thread_info;
472 siginfo_t siginfo;
473 std::string error;
Mitch Phillips8fe51272023-02-07 17:02:30 -0800474 bool recoverable_gwp_asan_crash = false;
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700475
476 {
477 ATRACE_NAME("ptrace");
478 for (pid_t thread : threads) {
479 // Trace the pseudothread separately, so we can use different options.
480 if (thread == pseudothread_tid) {
481 continue;
482 }
483
484 if (!ptrace_seize_thread(target_proc_fd, thread, &error)) {
485 bool fatal = thread == g_target_thread;
486 LOG(fatal ? FATAL : WARNING) << error;
487 }
488
489 ThreadInfo info;
490 info.pid = target_process;
491 info.tid = thread;
Josh Gao5df504c2019-05-09 12:48:17 -0700492 info.uid = getuid();
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700493 info.thread_name = get_thread_name(thread);
494
Josh Gao76e1e302021-01-26 15:53:11 -0800495 unique_fd attr_fd(openat(target_proc_fd, "attr/current", O_RDONLY | O_CLOEXEC));
496 if (!android::base::ReadFdToString(attr_fd, &info.selinux_label)) {
497 PLOG(WARNING) << "failed to read selinux label";
498 }
499
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700500 if (!ptrace_interrupt(thread, &info.signo)) {
501 PLOG(WARNING) << "failed to ptrace interrupt thread " << thread;
502 ptrace(PTRACE_DETACH, thread, 0, 0);
503 continue;
504 }
505
Elliott Hughesd13ea522022-01-13 09:20:26 -0800506 struct iovec tagged_addr_iov = {
Peter Collingbourne864f15d2020-09-14 20:27:36 -0700507 &info.tagged_addr_ctrl,
508 sizeof(info.tagged_addr_ctrl),
509 };
510 if (ptrace(PTRACE_GETREGSET, thread, NT_ARM_TAGGED_ADDR_CTRL,
Elliott Hughesd13ea522022-01-13 09:20:26 -0800511 reinterpret_cast<void*>(&tagged_addr_iov)) == -1) {
Peter Collingbourne864f15d2020-09-14 20:27:36 -0700512 info.tagged_addr_ctrl = -1;
513 }
Peter Collingbourne864f15d2020-09-14 20:27:36 -0700514
Elliott Hughesd13ea522022-01-13 09:20:26 -0800515 struct iovec pac_enabled_keys_iov = {
516 &info.pac_enabled_keys,
517 sizeof(info.pac_enabled_keys),
518 };
519 if (ptrace(PTRACE_GETREGSET, thread, NT_ARM_PAC_ENABLED_KEYS,
520 reinterpret_cast<void*>(&pac_enabled_keys_iov)) == -1) {
521 info.pac_enabled_keys = -1;
522 }
523
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700524 if (thread == g_target_thread) {
525 // Read the thread's registers along with the rest of the crash info out of the pipe.
Mitch Phillips8fe51272023-02-07 17:02:30 -0800526 ReadCrashInfo(input_pipe, &siginfo, &info.registers, &process_info,
527 &recoverable_gwp_asan_crash);
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700528 info.siginfo = &siginfo;
529 info.signo = info.siginfo->si_signo;
Josh Gao31348a72021-03-29 21:53:42 -0700530
531 info.command_line = get_command_line(g_target_thread);
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700532 } else {
Christopher Ferris60eb1972019-01-15 15:18:43 -0800533 info.registers.reset(unwindstack::Regs::RemoteGet(thread));
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700534 if (!info.registers) {
535 PLOG(WARNING) << "failed to fetch registers for thread " << thread;
536 ptrace(PTRACE_DETACH, thread, 0, 0);
537 continue;
538 }
539 }
540
541 thread_info[thread] = std::move(info);
542 }
543 }
544
545 // Trace the pseudothread with PTRACE_O_TRACECLONE and tell it to fork.
546 if (!ptrace_seize_thread(target_proc_fd, pseudothread_tid, &error, PTRACE_O_TRACECLONE)) {
547 LOG(FATAL) << "failed to seize pseudothread: " << error;
548 }
549
550 if (TEMP_FAILURE_RETRY(write(output_pipe.get(), "\1", 1)) != 1) {
551 PLOG(FATAL) << "failed to write to pseudothread";
552 }
553
554 pid_t vm_pid = wait_for_vm_process(pseudothread_tid);
555 if (ptrace(PTRACE_DETACH, pseudothread_tid, 0, 0) != 0) {
556 PLOG(FATAL) << "failed to detach from pseudothread";
557 }
558
559 // The pseudothread can die now.
560 fork_exit_write.reset();
561
562 // Defer the message until later, for readability.
Elliott Hughese4781d52021-03-17 09:15:15 -0700563 bool wait_for_debugger = android::base::GetBoolProperty(
564 "debug.debuggerd.wait_for_debugger",
565 android::base::GetBoolProperty("debug.debuggerd.wait_for_gdb", false));
Josh Gaoa48b41b2019-12-13 14:11:04 -0800566 if (siginfo.si_signo == BIONIC_SIGNAL_DEBUGGER) {
Elliott Hughese4781d52021-03-17 09:15:15 -0700567 wait_for_debugger = false;
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700568 }
569
570 // Detach from all of our attached threads before resuming.
571 for (const auto& [tid, thread] : thread_info) {
Josh Gaoa48b41b2019-12-13 14:11:04 -0800572 int resume_signal = thread.signo == BIONIC_SIGNAL_DEBUGGER ? 0 : thread.signo;
Elliott Hughese4781d52021-03-17 09:15:15 -0700573 if (wait_for_debugger) {
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700574 resume_signal = 0;
575 if (tgkill(target_process, tid, SIGSTOP) != 0) {
576 PLOG(WARNING) << "failed to send SIGSTOP to " << tid;
577 }
578 }
579
580 LOG(DEBUG) << "detaching from thread " << tid;
581 if (ptrace(PTRACE_DETACH, tid, 0, resume_signal) != 0) {
582 PLOG(ERROR) << "failed to detach from thread " << tid;
583 }
584 }
585
586 // Drop our capabilities now that we've fetched all of the information we need.
Josh Gao2f11a252017-02-13 14:46:19 -0800587 drop_capabilities();
Josh Gaocbe70cb2016-10-18 18:17:52 -0700588
Josh Gao8bb03902017-05-30 15:31:02 -0700589 {
590 ATRACE_NAME("tombstoned_connect");
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700591 LOG(INFO) << "obtaining output fd from tombstoned, type: " << dump_type;
Josh Gao76e1e302021-01-26 15:53:11 -0800592 g_tombstoned_connected = tombstoned_connect(g_target_thread, &g_tombstoned_socket, &g_output_fd,
593 &g_proto_fd, dump_type);
Josh Gao8bb03902017-05-30 15:31:02 -0700594 }
Josh Gaocbe70cb2016-10-18 18:17:52 -0700595
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700596 if (g_tombstoned_connected) {
597 if (TEMP_FAILURE_RETRY(dup2(g_output_fd.get(), STDOUT_FILENO)) == -1) {
598 PLOG(ERROR) << "failed to dup2 output fd (" << g_output_fd.get() << ") to STDOUT_FILENO";
Josh Gaocbe70cb2016-10-18 18:17:52 -0700599 }
600 } else {
601 unique_fd devnull(TEMP_FAILURE_RETRY(open("/dev/null", O_RDWR)));
602 TEMP_FAILURE_RETRY(dup2(devnull.get(), STDOUT_FILENO));
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700603 g_output_fd = std::move(devnull);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700604 }
605
Josh Gao9da1f512018-08-06 15:38:29 -0700606 LOG(INFO) << "performing dump of process " << target_process
607 << " (target tid = " << g_target_thread << ")";
Josh Gaocbe70cb2016-10-18 18:17:52 -0700608
609 int signo = siginfo.si_signo;
Josh Gaoa48b41b2019-12-13 14:11:04 -0800610 bool fatal_signal = signo != BIONIC_SIGNAL_DEBUGGER;
Josh Gaocbe70cb2016-10-18 18:17:52 -0700611 bool backtrace = false;
Josh Gaocbe70cb2016-10-18 18:17:52 -0700612
Josh Gaoa48b41b2019-12-13 14:11:04 -0800613 // si_value is special when used with BIONIC_SIGNAL_DEBUGGER.
Josh Gaocbe70cb2016-10-18 18:17:52 -0700614 // 0: dump tombstone
615 // 1: dump backtrace
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700616 if (!fatal_signal) {
617 int si_val = siginfo.si_value.sival_int;
618 if (si_val == 0) {
619 backtrace = false;
620 } else if (si_val == 1) {
621 backtrace = true;
622 } else {
623 LOG(WARNING) << "unknown si_value value " << si_val;
624 }
Josh Gaocbe70cb2016-10-18 18:17:52 -0700625 }
626
Josh Gaocbe70cb2016-10-18 18:17:52 -0700627 // TODO: Use seccomp to lock ourselves down.
Christopher Ferris3b7b7ba2022-03-15 16:56:09 -0700628
629 unwindstack::AndroidRemoteUnwinder unwinder(vm_pid, unwindstack::Regs::CurrentArch());
630 unwindstack::ErrorData error_data;
631 if (!unwinder.Initialize(error_data)) {
632 LOG(FATAL) << "Failed to initialize unwinder object: "
633 << unwindstack::GetErrorCodeString(error_data.code);
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700634 }
Josh Gaocbe70cb2016-10-18 18:17:52 -0700635
Josh Gaocbe70cb2016-10-18 18:17:52 -0700636 std::string amfd_data;
Josh Gaocbe70cb2016-10-18 18:17:52 -0700637 if (backtrace) {
Josh Gao8bb03902017-05-30 15:31:02 -0700638 ATRACE_NAME("dump_backtrace");
Christopher Ferris60eb1972019-01-15 15:18:43 -0800639 dump_backtrace(std::move(g_output_fd), &unwinder, thread_info, g_target_thread);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700640 } else {
Josh Gaoce841d92018-08-06 18:26:42 -0700641 {
642 ATRACE_NAME("fdsan table dump");
Peter Collingbourne843f7e62020-02-28 19:07:33 -0800643 populate_fdsan_table(&open_files, unwinder.GetProcessMemory(),
644 process_info.fdsan_table_address);
Josh Gaoce841d92018-08-06 18:26:42 -0700645 }
646
647 {
648 ATRACE_NAME("engrave_tombstone");
Josh Gao76e1e302021-01-26 15:53:11 -0800649 engrave_tombstone(std::move(g_output_fd), std::move(g_proto_fd), &unwinder, thread_info,
650 g_target_thread, process_info, &open_files, &amfd_data);
Josh Gaoce841d92018-08-06 18:26:42 -0700651 }
Josh Gaocbe70cb2016-10-18 18:17:52 -0700652 }
653
Mitch Phillips8fe51272023-02-07 17:02:30 -0800654 if (fatal_signal && !recoverable_gwp_asan_crash) {
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700655 // Don't try to notify ActivityManager if it just crashed, or we might hang until timeout.
656 if (thread_info[target_process].thread_name != "system_server") {
657 activity_manager_notify(target_process, signo, amfd_data);
Josh Gao7c6e3132017-01-22 17:59:02 -0800658 }
Josh Gaocbe70cb2016-10-18 18:17:52 -0700659 }
660
Elliott Hughese4781d52021-03-17 09:15:15 -0700661 if (wait_for_debugger) {
Josh Gao7c6e3132017-01-22 17:59:02 -0800662 // Use ALOGI to line up with output from engrave_tombstone.
663 ALOGI(
dimitry6429e202017-09-12 10:46:20 +0200664 "***********************************************************\n"
665 "* Process %d has been suspended while crashing.\n"
Elliott Hughese4781d52021-03-17 09:15:15 -0700666 "* To attach the debugger, run this on the host:\n"
dimitry6429e202017-09-12 10:46:20 +0200667 "*\n"
668 "* gdbclient.py -p %d\n"
669 "*\n"
670 "***********************************************************",
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700671 target_process, target_process);
Josh Gaocbe70cb2016-10-18 18:17:52 -0700672 }
673
674 // Close stdout before we notify tombstoned of completion.
675 close(STDOUT_FILENO);
Josh Gao2b2ae0c2017-08-21 14:31:17 -0700676 if (g_tombstoned_connected && !tombstoned_notify_completion(g_tombstoned_socket.get())) {
Josh Gaocbe70cb2016-10-18 18:17:52 -0700677 LOG(ERROR) << "failed to notify tombstoned of completion";
678 }
679
680 return 0;
681}