2 * Copyright (c) 2015-2016 Apple Inc. All rights reserved.
4 * @APPLE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
21 * @APPLE_LICENSE_HEADER_END@
32 #include <sys/types.h>
33 #include <sys/event.h>
35 #include <sys/proc_info.h>
36 #include <sys/param.h>
37 #include <pthread/pthread.h>
38 #include <mach/message.h>
42 #include <os/assumes.h>
43 #include <os/overflow.h>
47 #define ARRAYLEN(x) (sizeof((x))/sizeof((x[0])))
49 /* command line options */
52 static int ignore_empty
;
55 static char *self
= "lskq";
57 static inline const char *
58 filt_name(int16_t filt
)
60 static char unkn_filt
[32];
62 if (idx
>= 0 && idx
< ARRAYLEN(filt_strs
)) {
63 return filt_strs
[idx
];
65 snprintf(unkn_filt
, sizeof(unkn_filt
), "%i (?)", idx
);
70 static inline const char *
71 fdtype_str(uint32_t type
)
73 static char unkn_fdtype
[32];
74 if (type
< ARRAYLEN(fdtype_strs
)) {
75 return fdtype_strs
[type
];
77 snprintf(unkn_fdtype
, sizeof(unkn_fdtype
), "%i (?)", type
);
83 fflags_build(struct kevent_extinfo
*info
, char *str
, int len
)
85 unsigned ff
= info
->kqext_sfflags
;
87 switch (info
->kqext_kev
.filter
) {
90 snprintf(str
, len
, "%c ",
91 (ff
& NOTE_LOWAT
) ? 'l' : '-'
96 case EVFILT_MACHPORT
: {
97 snprintf(str
, len
, "%c ",
98 (ff
& MACH_RCV_MSG
) ? 'r' : '-'
104 snprintf(str
, len
, "%c%c%c%c%c%c%c",
105 (ff
& NOTE_DELETE
) ? 'd' : '-',
106 (ff
& NOTE_WRITE
) ? 'w' : '-',
107 (ff
& NOTE_EXTEND
) ? 'e' : '-',
108 (ff
& NOTE_ATTRIB
) ? 'a' : '-',
109 (ff
& NOTE_LINK
) ? 'l' : '-',
110 (ff
& NOTE_RENAME
) ? 'r' : '-',
111 (ff
& NOTE_REVOKE
) ? 'v' : '-'
117 /* NOTE_REAP is deprecated, but we still want to show if it's used */
118 #pragma clang diagnostic push
119 #pragma clang diagnostic ignored "-Wdeprecated-declarations"
120 snprintf(str
, len
, "%c%c%c%c%c%c%c",
121 (ff
& NOTE_EXIT
) ? 'x' : '-',
122 (ff
& NOTE_EXITSTATUS
) ? 't' : '-',
123 (ff
& NOTE_EXIT_DETAIL
)? 'd' : '-',
124 (ff
& NOTE_FORK
) ? 'f' : '-',
125 (ff
& NOTE_EXEC
) ? 'e' : '-',
126 (ff
& NOTE_SIGNAL
) ? 's' : '-',
127 (ff
& NOTE_REAP
) ? 'r' : '-'
130 #pragma clang diagnostic pop
134 snprintf(str
, len
, "%c%c%c%c%c ",
135 (ff
& NOTE_SECONDS
) ? 's' :
136 (ff
& NOTE_USECONDS
) ? 'u' :
137 (ff
& NOTE_NSECONDS
) ? 'n' : '?',
138 (ff
& NOTE_ABSOLUTE
) ? 'a' : '-',
139 (ff
& NOTE_CRITICAL
) ? 'c' : '-',
140 (ff
& NOTE_BACKGROUND
) ? 'b' : '-',
141 (ff
& NOTE_LEEWAY
) ? 'l' : '-'
147 snprintf(str
, len
, "%c%c%c ",
148 (ff
& NOTE_TRIGGER
) ? 't' : '-',
149 (ff
& NOTE_FFAND
) ? 'a' : '-',
150 (ff
& NOTE_FFOR
) ? 'o' : '-'
154 case EVFILT_WORKLOOP
:
155 snprintf(str
, len
, "%c%c%c%c ",
156 (ff
& NOTE_WL_THREAD_REQUEST
) ? 't' :
157 (ff
& NOTE_WL_SYNC_WAIT
) ? 'w' : '-',
158 (ff
& NOTE_WL_SYNC_WAKE
) ? '!' : '-',
159 (ff
& NOTE_WL_UPDATE_QOS
) ? 'q' : '-',
160 (ff
& NOTE_WL_UPDATE_OWNER
) ? 'O' :
161 (ff
& NOTE_WL_DISCOVER_OWNER
) ? 'o' : '-'
166 snprintf(str
, len
, "");
175 filter_is_fd_type(int filter
)
178 case EVFILT_VNODE
... EVFILT_READ
:
180 case EVFILT_NW_CHANNEL
:
188 thread_qos_name(uint8_t th_qos
)
199 default: return "??";
204 * find index of fd in a list of fdinfo of length nfds
207 fd_list_getfd(struct proc_fdinfo
*fds
, int nfds
, int fd
)
210 for (i
= 0; i
< nfds
; i
++) {
211 if (fds
[i
].proc_fd
== fd
) {
220 * left truncate URL-form process names
223 shorten_procname(const char *proc
, int width
)
225 if (strcasestr(proc
, "com.") == proc
) {
226 long len
= strlen(proc
);
228 return &proc
[len
- width
];
238 * stringify knote ident where possible (signals, processes)
241 print_ident(uint64_t ident
, int16_t filter
, int width
)
244 printf("%#*llx ", width
, ident
);
255 int numlen
= sprintf(num
, "%llu", ident
);
256 int strwidth
= width
- numlen
- 1; // add room for a space
258 if (filter
== EVFILT_SIGNAL
) {
259 if (ident
< ARRAYLEN(sig_strs
)) {
260 snprintf(str
, strwidth
+ 1, "%s", sig_strs
[ident
]);
263 /* FIXME: this should be cached */
264 struct proc_bsdinfo bsdinfo
;
265 int ret
= proc_pidinfo((int)ident
, PROC_PIDTBSDINFO
, 0, &bsdinfo
, sizeof(bsdinfo
));
266 if (ret
== sizeof(bsdinfo
)) {
267 char *procname
= bsdinfo
.pbi_name
;
268 if (strlen(procname
) == 0) {
269 procname
= bsdinfo
.pbi_comm
;
271 snprintf(str
, strwidth
+ 1, "%s", shorten_procname(procname
, strwidth
));
275 if (str
[0] != '\0') {
276 snprintf(out
, width
+ 1, "%-*s %s", strwidth
, str
, num
);
278 snprintf(out
, width
+ 1, "%s", num
);
281 printf("%*s ", width
, out
);
285 case EVFILT_MACHPORT
:
287 /* hex, to match lsmp */
288 printf("%#*llx ", width
, ident
);
291 case EVFILT_WORKLOOP
:
292 printf("%#*llx ", width
, ident
);
296 printf("%*llu ", width
, ident
);
303 print_kqid(int state
, uint64_t kqid
)
305 if (state
& KQ_WORKQ
) {
306 printf("%18s ", "wq");
307 } else if (state
& KQ_WORKLOOP
) {
308 printf("%#18" PRIx64
" ", kqid
);
310 printf("fd %15" PRIi64
" ", kqid
);
314 #define PROCNAME_WIDTH 20
317 print_kq_info(int pid
, const char *procname
, uint64_t kqid
, int state
)
321 print_kqid(state
, kqid
);
322 printf("%#10x ", state
);
324 char tmpstr
[PROCNAME_WIDTH
+1];
325 strlcpy(tmpstr
, shorten_procname(procname
, PROCNAME_WIDTH
), PROCNAME_WIDTH
+1);
326 printf("%-*s ", PROCNAME_WIDTH
, tmpstr
);
328 print_kqid(state
, kqid
);
330 (state
& KQ_SLEEP
) ? 'k' : '-',
331 (state
& KQ_SEL
) ? 's' : '-',
332 (state
& KQ_WORKQ
) ? 'q' :
333 (state
& KQ_WORKLOOP
) ? 'l' : '-'
344 process_kqueue(int pid
, const char *procname
, enum kqtype type
, uint64_t kqid
,
345 struct proc_fdinfo
*fdlist
, int nfds
)
349 int maxknotes
= 256; /* arbitrary starting point */
351 bool is_kev_64
, is_kev_qos
;
353 bool overflow
= false;
355 bool dynkq_printed
= false;
358 * get the basic kqueue info
360 struct kqueue_fdinfo kqfdinfo
= {};
361 struct kqueue_dyninfo kqinfo
= {};
364 ret
= proc_pidfdinfo(pid
, (int)kqid
, PROC_PIDFDKQUEUEINFO
, &kqfdinfo
, sizeof(kqfdinfo
));
368 ret
= proc_piddynkqueueinfo(pid
, PROC_PIDDYNKQUEUE_INFO
, kqid
, &kqinfo
, sizeof(kqinfo
));
371 os_crash("invalid kqueue type");
374 if (type
== KQTYPE_FD
&& (int)kqid
!= -1) {
375 if (ret
!= sizeof(kqfdinfo
)) {
376 /* every proc has an implicit workq kqueue, dont warn if its unused */
377 fprintf(stderr
, "WARN: FD table changed (pid %i, kq %i)\n", pid
,
380 } else if (type
== KQTYPE_DYNAMIC
) {
381 if (ret
< sizeof(struct kqueue_info
)) {
382 fprintf(stderr
, "WARN: kqueue missing (pid %i, kq %#" PRIx64
")\n",
385 kqfdinfo
.kqueueinfo
= kqinfo
.kqdi_info
;
387 if (verbose
&& ret
>= sizeof(struct kqueue_dyninfo
)) {
388 print_kq_info(pid
, procname
, kqid
, kqinfo
.kqdi_info
.kq_state
);
390 printf("%18s ", " "); // ident
391 printf("%-9s ", " "); // filter
392 dynkq_printed
= true;
395 printf("%-10s ", " "); // fflags
396 printf("%-10s ", " "); // flags
397 printf("%-10s ", " "); // evst
399 printf("%-8s ", " "); // fdtype
400 printf("%-7s ", " "); // fflags
401 printf("%-15s ", " "); // flags
402 printf("%-17s ", " "); // evst
405 int qos
= MAX(MAX(kqinfo
.kqdi_events_qos
, kqinfo
.kqdi_async_qos
),
406 kqinfo
.kqdi_sync_waiter_qos
);
407 printf("%3s ", thread_qos_name(qos
));
408 printf("%-18s ", " "); // data
409 printf("%-18s ", " "); // udata
410 printf("%#18llx ", kqinfo
.kqdi_servicer
); // ext0
411 printf("%#18llx ", kqinfo
.kqdi_owner
); // ext1
417 * get extended kqueue info
419 struct kevent_extinfo
*kqextinfo
= NULL
;
422 kqextinfo
= malloc(sizeof(struct kevent_extinfo
) * maxknotes
);
426 perror("failed allocating memory");
433 nknotes
= proc_pidfdinfo(pid
, fd
, PROC_PIDFDKQUEUE_EXTINFO
,
434 kqextinfo
, sizeof(struct kevent_extinfo
) * maxknotes
);
437 nknotes
= proc_piddynkqueueinfo(pid
, PROC_PIDDYNKQUEUE_EXTINFO
, kqid
,
438 kqextinfo
, sizeof(struct kevent_extinfo
) * maxknotes
);
441 os_crash("invalid kqueue type");
446 /* proc_*() can't distinguish between error and empty list */
447 } else if (errno
== EAGAIN
) {
449 } else if (errno
== EBADF
) {
450 fprintf(stderr
, "WARN: FD table changed (pid %i, kq %#" PRIx64
")\n", pid
, kqid
);
454 perror("failed to get extended kqueue info");
459 if (nknotes
> maxknotes
) {
460 maxknotes
= nknotes
+ 16; /* arbitrary safety margin */
466 if (nknotes
>= PROC_PIDFDKQUEUE_KNOTES_MAX
) {
470 kq_state
= kqfdinfo
.kqueueinfo
.kq_state
;
471 is_kev_64
= (kq_state
& PROC_KQUEUE_64
);
472 is_kev_qos
= (kq_state
& PROC_KQUEUE_QOS
);
475 if (!ignore_empty
&& !dynkq_printed
) {
476 /* for empty kqueues, print a single empty entry */
477 print_kq_info(pid
, procname
, kqid
, kq_state
);
478 printf("%18s \n", "-");
483 for (i
= 0; i
< nknotes
; i
++) {
484 struct kevent_extinfo
*info
= &kqextinfo
[i
];
486 print_kq_info(pid
, procname
, kqid
, kqfdinfo
.kqueueinfo
.kq_state
);
487 print_ident(info
->kqext_kev
.ident
, info
->kqext_kev
.filter
, 18);
488 printf("%-9s ", filt_name(info
->kqext_kev
.filter
));
491 printf("%#10x ", info
->kqext_sfflags
);
492 printf("%#10x ", info
->kqext_kev
.flags
);
493 printf("%#10x ", info
->kqext_status
);
495 /* for kevents attached to file descriptors, print the type of FD (file, socket, etc) */
496 const char *fdstr
= "";
497 if (filter_is_fd_type(info
->kqext_kev
.filter
)) {
499 int knfd
= fd_list_getfd(fdlist
, nfds
, (int)info
->kqext_kev
.ident
);
501 fdstr
= fdtype_str(fdlist
[knfd
].proc_fdtype
);
504 printf("%-8s ", fdstr
);
506 /* print filter flags */
507 printf("%7s ", fflags_build(info
, tmpstr
, sizeof(tmpstr
)));
509 /* print generic flags */
510 unsigned flg
= info
->kqext_kev
.flags
;
511 printf("%c%c%c%c %c%c%c%c %c%c%c%c%c ",
512 (flg
& EV_ADD
) ? 'a' : '-',
513 (flg
& EV_ENABLE
) ? 'n' : '-',
514 (flg
& EV_DISABLE
) ? 'd' : '-',
515 (flg
& EV_DELETE
) ? 'x' : '-',
517 (flg
& EV_RECEIPT
) ? 'r' : '-',
518 (flg
& EV_ONESHOT
) ? '1' : '-',
519 (flg
& EV_CLEAR
) ? 'c' : '-',
520 (flg
& EV_DISPATCH
) ? 's' : '-',
522 (flg
& EV_UDATA_SPECIFIC
) ? 'u' : '-',
523 (flg
& EV_FLAG0
) ? 'p' : '-',
524 (flg
& EV_FLAG1
) ? 'b' : '-',
525 (flg
& EV_EOF
) ? 'o' : '-',
526 (flg
& EV_ERROR
) ? 'e' : '-'
529 unsigned st
= info
->kqext_status
;
530 printf("%c%c%c%c %c%c%c%c %c%c%c%c %c%c ",
531 (st
& KN_ACTIVE
) ? 'a' : '-',
532 (st
& KN_QUEUED
) ? 'q' : '-',
533 (st
& KN_DISABLED
) ? 'd' : '-',
534 (st
& KN_STAYACTIVE
) ? 's' : '-',
536 (st
& KN_DROPPING
) ? 'd' : '-',
537 (st
& KN_USEWAIT
) ? 'w' : '-',
538 (st
& KN_ATTACHING
) ? 'c' : '-',
539 (st
& KN_ATTACHED
) ? 'a' : '-',
541 (st
& KN_DISPATCH
) ? 's' : '-',
542 (st
& KN_UDATA_SPECIFIC
) ? 'u' : '-',
543 (st
& KN_SUPPRESSED
) ? 'p' : '-',
544 (st
& KN_STOLENDROP
) ? 't' : '-',
546 (st
& KN_REQVANISH
) ? 'v' : '-',
547 (st
& KN_VANISHED
) ? 'n' : '-'
551 printf("%3s ", thread_qos_name(info
->kqext_kev
.qos
));
553 printf("%#18llx ", (unsigned long long)info
->kqext_kev
.data
);
556 printf("%#18llx ", (unsigned long long)info
->kqext_kev
.udata
);
557 if (is_kev_qos
|| is_kev_64
) {
558 printf("%#18llx ", (unsigned long long)info
->kqext_kev
.ext
[0]);
559 printf("%#18llx ", (unsigned long long)info
->kqext_kev
.ext
[1]);
562 printf("%#18llx ", (unsigned long long)info
->kqext_kev
.ext
[2]);
563 printf("%#18llx ", (unsigned long long)info
->kqext_kev
.ext
[3]);
564 printf("%#10lx ", (unsigned long)info
->kqext_kev
.xflags
);
573 printf(" ***** output truncated (>=%i knotes on kq %" PRIu64
", proc %i) *****\n",
587 pid_kqids(pid_t pid
, kqueue_id_t
**kqids_out
)
589 static int kqids_len
= 256;
590 static kqueue_id_t
*kqids
= NULL
;
591 static uint32_t kqids_size
;
596 if (os_mul_overflow(sizeof(kqueue_id_t
), kqids_len
, &kqids_size
)) {
597 assert(kqids_len
> PROC_PIDDYNKQUEUES_MAX
);
598 kqids_len
= PROC_PIDDYNKQUEUES_MAX
;
602 kqids
= malloc(kqids_size
);
603 os_assert(kqids
!= NULL
);
606 nkqids
= proc_list_dynkqueueids(pid
, kqids
, kqids_size
);
607 if (nkqids
> kqids_len
&& kqids_len
< PROC_PIDDYNKQUEUES_MAX
) {
609 if (kqids_len
> PROC_PIDDYNKQUEUES_MAX
) {
610 kqids_len
= PROC_PIDDYNKQUEUES_MAX
;
618 return MIN(nkqids
, kqids_len
);
622 process_pid(pid_t pid
)
627 int maxfds
= 256; /* arbitrary starting point */
628 struct proc_fdinfo
*fdlist
= NULL
;
630 /* enumerate file descriptors */
633 fdlist
= malloc(sizeof(struct proc_fdinfo
) * maxfds
);
637 perror("failed to allocate");
641 nfds
= proc_pidinfo(pid
, PROC_PIDLISTFDS
, 0, fdlist
,
642 sizeof(struct proc_fdinfo
) * maxfds
);
645 fprintf(stderr
, "%s: failed enumerating file descriptors of process %i: %s",
646 self
, pid
, strerror(ret
));
647 if (ret
== EPERM
&& geteuid() != 0) {
648 fprintf(stderr
, " (are you root?)");
650 fprintf(stderr
, "\n");
654 nfds
/= sizeof(struct proc_fdinfo
);
655 if (nfds
>= maxfds
) {
662 /* get bsdinfo for the process name */
663 struct proc_bsdinfo bsdinfo
;
664 ret
= proc_pidinfo(pid
, PROC_PIDTBSDINFO
, 0, &bsdinfo
, sizeof(bsdinfo
));
665 if (ret
!= sizeof(bsdinfo
)) {
666 perror("failed retrieving process info");
671 char *procname
= bsdinfo
.pbi_name
;
672 if (strlen(procname
) == 0) {
673 procname
= bsdinfo
.pbi_comm
;
676 /* handle the special workq kq */
677 ret
= process_kqueue(pid
, procname
, KQTYPE_FD
, -1, fdlist
, nfds
);
682 for (i
= 0; i
< nfds
; i
++) {
683 if (fdlist
[i
].proc_fdtype
== PROX_FDTYPE_KQUEUE
) {
684 ret
= process_kqueue(pid
, procname
, KQTYPE_FD
,
685 (uint64_t)fdlist
[i
].proc_fd
, fdlist
, nfds
);
692 nkqids
= pid_kqids(pid
, &kqids
);
694 for (i
= 0; i
< nkqids
; i
++) {
695 ret
= process_kqueue(pid
, procname
, KQTYPE_DYNAMIC
, kqids
[i
], fdlist
, nfds
);
701 if (nkqids
>= PROC_PIDDYNKQUEUES_MAX
) {
702 printf(" ***** output truncated (>=%i dynamic kqueues in proc %i) *****\n",
716 process_all_pids(void)
725 pids
= malloc(sizeof(int) * maxpids
);
728 perror("failed allocating pids[]");
733 npids
= proc_listpids(PROC_ALL_PIDS
, 0, pids
, sizeof(int) * maxpids
);
737 } else if (errno
== EAGAIN
) {
741 perror("failed enumerating pids");
746 npids
/= sizeof(int);
747 if (npids
>= maxpids
) {
748 maxpids
= npids
+ 16;
754 for (i
= 0; i
< npids
; i
++) {
755 /* listpids gives us pid 0 for some reason */
757 ret
= process_pid(pids
[i
]);
758 /* ignore races with processes exiting */
759 if (ret
&& ret
!= ESRCH
) {
777 fprintf(stderr
, "\nFilter-independent flags:\n\n\
779 command pid kq kqst ident filter fdtype fflags flags evst\033[0m\n\
781 -------------------- ----- ------------------ ---- ------------------ --------- -------- ------- --------------- -----------------\033[0m\n\
782 ┌ EV_UDATA_SPECIFIC\n\
783 EV_DISPATCH ┐ │┌ EV_FLAG0 (EV_POLL)\n\
784 EV_CLEAR ┐│ ││┌ EV_FLAG1 (EV_OOBAND)\n\
785 EV_ONESHOT ┐││ │││┌ EV_EOF\n\
786 EV_RECEIPT ┐│││ ││││┌ EV_ERROR\n\
789 launchd 1 4 ks- netbiosd 250 PROC ------- andx r1cs upboe aqds dwca supt vn\033[0m \n\
790 │ │││ ││││ ││││ ││││ ││││ ││\n\
791 kqueue file descriptor/dynamic ID ┘ │││ EV_ADD ┘│││ KN_ACTIVE ┘│││ ││││ ││││ ││\n\
792 KQ_SLEEP ┘││ EV_ENABLE ┘││ KN_QUEUED ┘││ ││││ ││││ ││\n\
793 KQ_SEL ┘│ EV_DISABLE ┘│ KN_DISABLED ┘│ ││││ ││││ │└ KN_VANISHED\n\
794 KQ_WORKQ (q) ┤ EV_DELETE ┘ KN_STAYACTIVE ┘ ││││ ││││ └ KN_REQVANISH\n\
795 KQ_WORKLOOP (l) ┘ ││││ ││││\n\
796 KN_DROPPING ┘│││ │││└ KN_STOLENDROP\n\
797 KN_USEWAIT ┘││ ││└ KN_SUPPRESSED\n\
798 KN_ATTACHING ┘│ │└ KN_UDATA_SPECIFIC\n\
799 KN_ATTACHED ┘ └ KN_DISPATCH\n\
806 fprintf(stderr
, "usage: %s [-vher] [-a | -p <pid>]\n", self
);
813 printf(" pid kq kqst knid filter fflags flags evst qos data");
815 printf("command pid kq kqst knid filter fdtype fflags flags evst qos data");
819 printf(" udata servicer / ext0 owner / ext1 ext2 ext3 xflags");
825 printf("----- ------------------ ---------- ------------------ --------- ---------- ---------- ---------- --- ------------------");
827 printf("-------------------- ----- ------------------ ---- ------------------ --------- -------- ------- --------------- ----------------- --- ------------------");
831 printf(" ------------------ ------------------ ------------------ ------------------ ------------------ ----------");
837 main(int argc
, char *argv
[])
848 while ((opt
= getopt(argc
, argv
, "eahvrp:")) != -1) {
880 /* also allow lskq <pid> */
881 if (pid
|| all_pids
) {
887 } else if (argc
> 1) {
892 /* exactly one of -p or -a is required */
893 if (!pid
&& !all_pids
) {
896 } else if (pid
&& all_pids
) {
904 return process_all_pids();
906 return process_pid(pid
);