8 * The maximum number of bytes that may be buffered before writing the buffered
9 * output to the underlying file. This is a performance optimization only.
10 * Writing more than this number of bytes at once will be handled correctly.
12 #define OUTPUT_BUFSZ 512
15 static char out_buf
[OUTPUT_BUFSZ
];
19 static pid_t last_pid
; /* not a trace_proc pointer; it could become invalid! */
20 static unsigned int line_off
;
21 static unsigned int prefix_off
;
23 static int print_susp
;
27 * Initialize the output channel. Called before any other output functions,
28 * but after a child process (to be traced) has already been spawned. If the
29 * given file string is not NULL, it is the path to a file that is to be used
30 * to write output to. If it is NULL, output is written to standard error.
33 output_init(const char * file
)
36 /* Initialize state. */
48 * Ignore signals resulting from writing to a closed pipe. We can
49 * handle write errors properly ourselves. Setting O_NOSIGPIPE is an
50 * alternative, but that would affect other processes writing to the
51 * same file object, even after we have terminated.
53 signal(SIGPIPE
, SIG_IGN
);
55 /* Initialize the output file descriptor. */
57 /* No output file given? Use standard error. */
58 out_fd
= STDERR_FILENO
;
63 * Use a restrictive mask for the output file. Traces may
64 * contain sensitive information (for security and otherwise),
65 * and the user might not always be careful about the location
68 /* The file descriptor is not closed explicitly. */
69 out_fd
= open(file
, O_WRONLY
| O_CREAT
| O_TRUNC
| O_APPEND
,
72 return (out_fd
< 0) ? -1 : 0;
77 * Write the given data to the given file descriptor, taking into account the
78 * possibility of partial writes and write errors.
81 write_fd(int fd
, const char *buf
, size_t len
)
85 /* If we got a write error before, do not try to write more. */
89 /* Write all output, in chunks if we have to. */
91 r
= write(fd
, buf
, len
);
94 * A write error (and that includes EOF) causes the program to
95 * terminate with an error code. For obvious reasons we cannot
96 * print an error about this. Do not even report to standard
97 * error if the output was redirected, because that may mess
98 * with the actual programs being run right now.
111 * Return TRUE iff an output error occurred and the program should terminate.
121 * Print the given null-terminated string to the output channel. Return the
122 * number of characters printed, for alignment purposes. In the future, this
123 * number may end up being different from the number of bytes given to print,
124 * due to multibyte encoding or colors or whatnot.
127 output_write(const char * text
)
133 if (out_len
+ len
> sizeof(out_buf
)) {
134 write_fd(out_fd
, out_buf
, out_len
);
138 /* Write large buffers right away. */
139 if (len
> sizeof(out_buf
)) {
140 write_fd(out_fd
, text
, len
);
146 memcpy(&out_buf
[out_len
], text
, len
);
154 * Flush any pending output to the output channel.
161 write_fd(out_fd
, out_buf
, out_len
);
168 * Print a prefix for a line of output. Possibly print a timestamp first.
169 * Then, if applicable, print a PID prefix for the given process, or an info
170 * prefix if no process (NULL) is given.
172 * PIDs are relevant only when multiple processes are traced. As long as there
173 * are multiple processes, each line is prefixed with the PID of the process.
174 * As soon as the number of processes has been reduced back to one, one more
175 * line is prefixed with the PID of the remaining process (with a "'" instead
176 * of a "|") to help the user identify which process remains. In addition,
177 * whenever a preempted call is about to be resumed, a "*" is printed instead
178 * of a space, so as to show that it is a continuation of a previous line. An
179 * example of all these cases:
182 * 3| Tracing test (pid 3)
185 * 2| waitpid(-1, <..>
186 * INFO| This is an example info line.
187 * 3|*read(0, "", 1024) = 0
189 * 3| Process exited normally with code 1
190 * 2'*waitpid(-1, W_EXITED(1), 0) = 3
192 * Process exited normally with code 0
195 put_prefix(struct trace_proc
* proc
, int resuming
)
200 unsigned int off
, count
;
202 assert(line_off
== 0);
206 if (timestamps
> 0) {
207 gettimeofday(&tv
, NULL
);
209 tm
= gmtime(&tv
.tv_sec
);
211 off
= strftime(prefix
, sizeof(prefix
), "%T", tm
);
214 off
+= snprintf(&prefix
[off
], sizeof(prefix
) - off
,
215 ".%06u", tv
.tv_usec
);
217 assert(off
< sizeof(prefix
) - 2);
221 off
= output_write(prefix
);
224 count
= proc_count();
226 /* TODO: add a command line option for always printing the pid. */
227 if (print_pid
|| count
> 1 || proc
== NULL
) {
229 * TODO: we currently rely on the highest PID having at most
230 * five digits, but this will eventually change. There are
231 * several ways to deal with that, but none are great.
234 snprintf(prefix
, sizeof(prefix
), "%5s| ", "INFO");
236 snprintf(prefix
, sizeof(prefix
), "%5d%c%c",
237 proc
->pid
, (count
> 1) ? '|' : '\'',
238 resuming
? '*' : ' ');
240 off
+= output_write(prefix
);
242 last_pid
= (proc
!= NULL
? proc
->pid
: 0);
249 /* Remember whether the next line should get prefixed regardless. */
250 print_pid
= (count
> 1 || proc
== NULL
);
254 * Add a string to the end of the text recording for the given process.
255 * This is used only to record the call-enter output of system calls.
258 record_add(struct trace_proc
* proc
, const char * text
)
262 assert(proc
->recording
);
264 /* If the recording buffer is already full, do not record more. */
265 if (proc
->outlen
== sizeof(proc
->outbuf
))
270 /* If nonempty, the recording buffer is always null terminated. */
271 if (len
< sizeof(proc
->outbuf
) - proc
->outlen
- 1) {
272 strcpy(&proc
->outbuf
[proc
->outlen
], text
);
276 proc
->outlen
= sizeof(proc
->outbuf
); /* buffer exhausted */
280 * Start recording text for the given process. Since this marks the start of
281 * a call, remember to print a preemption marker when the call gets preempted.
284 record_start(struct trace_proc
* proc
)
287 proc
->recording
= TRUE
;
293 * Stop recording text for the given process.
296 record_stop(struct trace_proc
* proc
)
299 proc
->recording
= FALSE
;
303 * Clear recorded text for the given process. Since this also marks the end of
304 * the entire call, no longer print a supension marker before the next newline.
307 record_clear(struct trace_proc
* proc
)
310 assert(!proc
->recording
);
313 if (proc
->pid
== last_pid
)
318 * Replay the record for the given process on a new line, if the current line
319 * does not already have output for this process. If it does, do nothing.
320 * If the process has no recorded output, just start a new line. Return TRUE
321 * iff the caller must print its own replay text due to a recording overflow.
324 record_replay(struct trace_proc
* proc
)
328 assert(!proc
->recording
);
331 * If there is output on the current line, and it is for the current
332 * process, we must assume that it is the original, recorded text, and
333 * thus, we should do nothing. If output on the current line is for
334 * another process, we must force a new line before replaying.
337 if (proc
->pid
== last_pid
)
344 * If there is nothing to replay, do nothing further. This case may
345 * occur when printing signals, in which case the caller still expects
346 * a new line to be started. This line must not be prefixed with a
347 * "resuming" marker though--after all, nothing is being resumed here.
349 if (proc
->outlen
== 0)
353 * If there is text to replay, then this does mean we are in effect
354 * resuming the recorded call, even if it is just to print a signal.
355 * Thus, we must print a prefix that shows the call is being resumed.
356 * Similarly, unless the recording is cleared before a newline, we must
357 * suspend the line again, too.
359 put_prefix(proc
, TRUE
/*resuming*/);
364 * If the recording buffer was exhausted during recording, the caller
365 * must generate the replay text instead.
367 if (proc
->outlen
== sizeof(proc
->outbuf
))
371 * Replay the recording. If it ends with a space, turn it into a soft
372 * space, because the recording may be followed immediately by a
373 * newline; an example of this is the exit() exception.
375 space
= proc
->outbuf
[proc
->outlen
- 1] == ' ';
377 proc
->outbuf
[proc
->outlen
- 1] = 0;
379 put_text(proc
, proc
->outbuf
);
384 /* Restore the space, in case another replay takes place. */
385 proc
->outbuf
[proc
->outlen
- 1] = ' ';
392 * Start a new line, and adjust the local state accordingly. If nothing has
393 * been printed on the current line yet, this function is a no-op. Otherwise,
394 * the output so far may have to be marked as preempted with the "<..>"
406 (void)output_write(" ");
408 (void)output_write("<..>");
412 (void)output_write("|");
415 (void)output_write("\n");
425 * Print a string as part of the output associated with a process. If the
426 * current line contains output for another process, a newline will be printed
427 * first. If the current line contains output for the same process, then the
428 * text will simply continue on the same line. If the current line is empty,
429 * a process PID prefix may have to be printed first. Either way, after this
430 * operation, the current line will contain text for the given process. If
431 * requested, the text may also be recorded for the process, for later replay.
432 * As an exception, proc may be NULL when printing general information lines.
435 put_text(struct trace_proc
* proc
, const char * text
)
438 if (line_off
> 0 && (proc
== NULL
|| proc
->pid
!= last_pid
)) {
440 * The current line has not been terminated with a newline yet.
441 * Start a new line. Note that this means that for lines not
442 * associated to a process, the whole line must be printed at
443 * once. This can be fixed but is currently not an issue.
448 /* See if we must add a prefix at the start of the line. */
450 put_prefix(proc
, FALSE
/*resuming*/);
452 /* If needed, record the given text. */
453 if (proc
!= NULL
&& proc
->recording
)
454 record_add(proc
, text
);
457 * If we delayed printing a space, print one now. This is never part
458 * of text that must be saved. In fact, we support these soft spaces
459 * for exactly one case; see put_space() for details.
462 line_off
+= output_write(" ");
467 /* Finally, print the actual text. */
468 line_off
+= output_write(text
);
470 last_pid
= (proc
!= NULL
) ? proc
->pid
: 0;
474 * Add a space to the output for the given process, but only if and once more
475 * text is printed for the process afterwards. The aim is to ensure that no
476 * lines ever end with a space, to prevent needless line wrapping on terminals.
477 * The space may have to be remembered for the current line (for preemption,
478 * which does not have a process pointer to work with) as well as recorded for
479 * later replay, if recording is enabled. Consider the following example:
481 * [A] 3| execve(..) <..>
482 * 2| getpid(0) = 2 (ppid=1)
483 * [B] 3| execve(..) = -1 [ENOENT]
484 * [A] 3| exit(1) <..>
485 * 2| getpid(0) = 2 (ppid=1)
487 * 3| Process exited normally with code 1
489 * On the [A] lines, the space between the call's closing parenthesis and the
490 * "<..>" preemption marker is the result of add_space being set to TRUE; on
491 * the [B] line, the space between the closing parenthesis and the equals sign
492 * is the result of the space being recorded.
495 put_space(struct trace_proc
* proc
)
498 /* This call must only be used after output for the given process. */
499 assert(last_pid
== proc
->pid
);
501 /* In case the call does not get preempted. */
504 /* In case the call does get preempted. */
506 record_add(proc
, " ");
510 * Indent the remainders of the text on the line for this process, such that
511 * similar remainders are similarly aligned. In particular, the remainder is
512 * the equals sign of a call, and everything after it. Of course, alignment
513 * can only be used if the call has not already printed beyond the alignment
514 * position. Also, the prefix must not be counted toward the alignment, as it
515 * is possible that a line without prefix may be preempted and later continued
516 * with prefix. All things considered, the result would look like this:
518 * getuid() = 1 (euid=1)
519 * setuid(0) = -1 [EPERM]
520 * write(2, "Permission denied\n", 18) = 18
522 * 3| Tracing test (pid 3)
525 * 3| Process exited normally with code 0
526 * 2' waitpid(-1, W_EXITED(0), 0) = 3
529 void put_align(struct trace_proc
* __unused proc
)
533 * TODO: add actual support for this. The following code works,
534 * although not so efficiently. The difficulty is the default
535 * configuration and corresponding options.
537 while (line_off - prefix_off < 20)