]> git.saurik.com Git - apple/xnu.git/blob - tools/lldbmacros/kcdata.py
projects / apple / xnu.git / blob
? search:


66fc2e8c4d647e2b80affc36cb09ed29d370affd
[apple/xnu.git] / tools / lldbmacros / kcdata.py
1 #!/usr/bin/env python
2 import sys
3 import struct
4 import mmap
5 import json
6 import cgitb
7 import copy
8 import re
9 import base64
10 import argparse
11 import os
12 import shlex
13 import subprocess
14 import logging
15 import contextlib
16 import base64
17
18 class Globals(object):
19 pass
20 G = Globals()
21 G.accept_incomplete_data = False
22 G.data_was_incomplete = False
23
24 kcdata_type_def = {
25 'KCDATA_TYPE_INVALID': 0x0,
26 'KCDATA_TYPE_STRING_DESC': 0x1,
27 'KCDATA_TYPE_UINT32_DESC': 0x2,
28 'KCDATA_TYPE_UINT64_DESC': 0x3,
29 'KCDATA_TYPE_INT32_DESC': 0x4,
30 'KCDATA_TYPE_INT64_DESC': 0x5,
31 'KCDATA_TYPE_BINDATA_DESC': 0x6,
32 'KCDATA_TYPE_ARRAY': 0x11,
33 'KCDATA_TYPE_TYPEDEFINITION': 0x12,
34 'KCDATA_TYPE_CONTAINER_BEGIN': 0x13,
35 'KCDATA_TYPE_CONTAINER_END': 0x14,
36
37 'KCDATA_TYPE_ARRAY_PAD0': 0x20,
38 'KCDATA_TYPE_ARRAY_PAD1': 0x21,
39 'KCDATA_TYPE_ARRAY_PAD2': 0x22,
40 'KCDATA_TYPE_ARRAY_PAD3': 0x23,
41 'KCDATA_TYPE_ARRAY_PAD4': 0x24,
42 'KCDATA_TYPE_ARRAY_PAD5': 0x25,
43 'KCDATA_TYPE_ARRAY_PAD6': 0x26,
44 'KCDATA_TYPE_ARRAY_PAD7': 0x27,
45 'KCDATA_TYPE_ARRAY_PAD8': 0x28,
46 'KCDATA_TYPE_ARRAY_PAD9': 0x29,
47 'KCDATA_TYPE_ARRAY_PADa': 0x2a,
48 'KCDATA_TYPE_ARRAY_PADb': 0x2b,
49 'KCDATA_TYPE_ARRAY_PADc': 0x2c,
50 'KCDATA_TYPE_ARRAY_PADd': 0x2d,
51 'KCDATA_TYPE_ARRAY_PADe': 0x2e,
52 'KCDATA_TYPE_ARRAY_PADf': 0x2f,
53
54 'KCDATA_TYPE_LIBRARY_LOADINFO': 0x30,
55 'KCDATA_TYPE_LIBRARY_LOADINFO64': 0x31,
56 'KCDATA_TYPE_TIMEBASE': 0x32,
57 'KCDATA_TYPE_MACH_ABSOLUTE_TIME': 0x33,
58 'KCDATA_TYPE_TIMEVAL': 0x34,
59 'KCDATA_TYPE_USECS_SINCE_EPOCH': 0x35,
60 'KCDATA_TYPE_PID': 0x36,
61 'KCDATA_TYPE_PROCNAME': 0x37,
62 'KCDATA_TYPE_NESTED_KCDATA': 0x38,
63
64 'STACKSHOT_KCCONTAINER_TASK': 0x903,
65 'STACKSHOT_KCCONTAINER_THREAD': 0x904,
66 'STACKSHOT_KCTYPE_DONATING_PIDS': 0x907,
67 'STACKSHOT_KCTYPE_SHAREDCACHE_LOADINFO': 0x908,
68 'STACKSHOT_KCTYPE_KERN_STACKFRAME': 0x90A,
69 'STACKSHOT_KCTYPE_KERN_STACKFRAME64': 0x90B,
70 'STACKSHOT_KCTYPE_USER_STACKFRAME': 0x90C,
71 'STACKSHOT_KCTYPE_USER_STACKFRAME64': 0x90D,
72 'STACKSHOT_KCTYPE_BOOTARGS': 0x90E,
73 'STACKSHOT_KCTYPE_OSVERSION': 0x90F,
74 'STACKSHOT_KCTYPE_KERN_PAGE_SIZE': 0x910,
75 'STACKSHOT_KCTYPE_JETSAM_LEVEL': 0x911,
76 'STACKSHOT_KCTYPE_DELTA_SINCE_TIMESTAMP': 0x912,
77 'STACKSHOT_KCTYPE_KERN_STACKLR': 0x913,
78 'STACKSHOT_KCTYPE_KERN_STACKLR64': 0x914,
79 'STACKSHOT_KCTYPE_USER_STACKLR': 0x915,
80 'STACKSHOT_KCTYPE_USER_STACKLR64': 0x916,
81 'STACKSHOT_KCTYPE_NONRUNNABLE_TIDS': 0x917,
82 'STACKSHOT_KCTYPE_NONRUNNABLE_TASKS': 0x918,
83 'STACKSHOT_KCTYPE_CPU_TIMES': 0x919,
84 'STACKSHOT_KCTYPE_STACKSHOT_DURATION': 0x91a,
85 'STACKSHOT_KCTYPE_STACKSHOT_FAULT_STATS': 0x91b,
86 'STACKSHOT_KCTYPE_KERNELCACHE_LOADINFO': 0x91c,
87 'STACKSHOT_KCTYPE_THREAD_WAITINFO' : 0x91d,
88 'STACKSHOT_KCTYPE_THREAD_GROUP_SNAPSHOT' : 0x91e,
89 'STACKSHOT_KCTYPE_THREAD_GROUP' : 0x91f,
90 'STACKSHOT_KCTYPE_JETSAM_COALITION_SNAPSHOT' : 0x920,
91 'STACKSHOT_KCTYPE_JETSAM_COALITION' : 0x921,
92 'STACKSHOT_KCTYPE_THREAD_POLICY_VERSION': 0x922,
93 'STACKSHOT_KCTYPE_INSTRS_CYCLES' : 0x923,
94 'STACKSHOT_KCTYPE_USER_STACKTOP' : 0x924,
95 'STACKSHOT_KCTYPE_ASID' : 0x925,
96 'STACKSHOT_KCTYPE_PAGE_TABLES' : 0x926,
97 'STACKSHOT_KCTYPE_SYS_SHAREDCACHE_LAYOUT' : 0x927,
98
99 'STACKSHOT_KCTYPE_TASK_DELTA_SNAPSHOT': 0x940,
100 'STACKSHOT_KCTYPE_THREAD_DELTA_SNAPSHOT': 0x941,
101
102
103
104 'KCDATA_TYPE_BUFFER_END': 0xF19158ED,
105
106
107 'TASK_CRASHINFO_EXTMODINFO': 0x801,
108 'TASK_CRASHINFO_BSDINFOWITHUNIQID': 0x802,
109 'TASK_CRASHINFO_TASKDYLD_INFO': 0x803,
110 'TASK_CRASHINFO_UUID': 0x804,
111 'TASK_CRASHINFO_PID': 0x805,
112 'TASK_CRASHINFO_PPID': 0x806,
113
114 # Don't want anyone using this. It's struct rusage from whatever machine generated the data
115 #'TASK_CRASHINFO_RUSAGE': 0x807,
116 'Type_0x807': 0x807,
117
118 'TASK_CRASHINFO_RUSAGE_INFO': 0x808,
119 'TASK_CRASHINFO_PROC_NAME': 0x809,
120 'TASK_CRASHINFO_PROC_STARTTIME': 0x80B,
121 'TASK_CRASHINFO_USERSTACK': 0x80C,
122 'TASK_CRASHINFO_ARGSLEN': 0x80D,
123 'TASK_CRASHINFO_EXCEPTION_CODES': 0x80E,
124 'TASK_CRASHINFO_PROC_PATH': 0x80F,
125 'TASK_CRASHINFO_PROC_CSFLAGS': 0x810,
126 'TASK_CRASHINFO_PROC_STATUS': 0x811,
127 'TASK_CRASHINFO_UID': 0x812,
128 'TASK_CRASHINFO_GID': 0x813,
129 'TASK_CRASHINFO_PROC_ARGC': 0x814,
130 'TASK_CRASHINFO_PROC_FLAGS': 0x815,
131 'TASK_CRASHINFO_CPUTYPE': 0x816,
132 'TASK_CRASHINFO_WORKQUEUEINFO': 0x817,
133 'TASK_CRASHINFO_RESPONSIBLE_PID': 0x818,
134 'TASK_CRASHINFO_DIRTY_FLAGS': 0x819,
135 'TASK_CRASHINFO_CRASHED_THREADID': 0x81A,
136 'TASK_CRASHINFO_COALITION_ID': 0x81B,
137 'EXIT_REASON_SNAPSHOT': 0x1001,
138 'EXIT_REASON_USER_DESC': 0x1002,
139 'EXIT_REASON_USER_PAYLOAD': 0x1003,
140 'EXIT_REASON_CODESIGNING_INFO': 0x1004,
141 'EXIT_REASON_WORKLOOP_ID': 0x1005,
142 'EXIT_REASON_DISPATCH_QUEUE_NO': 0x1006,
143 'KCDATA_BUFFER_BEGIN_CRASHINFO': 0xDEADF157,
144 'KCDATA_BUFFER_BEGIN_DELTA_STACKSHOT': 0xDE17A59A,
145 'KCDATA_BUFFER_BEGIN_STACKSHOT': 0x59a25807,
146 'KCDATA_BUFFER_BEGIN_OS_REASON': 0x53A20900,
147 'KCDATA_BUFFER_BEGIN_XNUPOST_CONFIG': 0x1E21C09F
148 }
149 kcdata_type_def_rev = dict((v, k) for k, v in kcdata_type_def.iteritems())
150
151 KNOWN_TYPES_COLLECTION = {}
152
153 KNOWN_TOPLEVEL_CONTAINER_TYPES = ()
154
155 def enum(**args):
156 return type('enum', (), args)
157
158 KCSUBTYPE_TYPE = enum(KC_ST_CHAR=1, KC_ST_INT8=2, KC_ST_UINT8=3, KC_ST_INT16=4, KC_ST_UINT16=5, KC_ST_INT32=6, KC_ST_UINT32=7, KC_ST_INT64=8, KC_ST_UINT64=9)
159
160
161 LEGAL_OLD_STYLE_ARRAY_TYPE_NAMES = ['KCDATA_TYPE_LIBRARY_LOADINFO',
162 'KCDATA_TYPE_LIBRARY_LOADINFO64',
163 'STACKSHOT_KCTYPE_KERN_STACKFRAME',
164 'STACKSHOT_KCTYPE_USER_STACKFRAME',
165 'STACKSHOT_KCTYPE_KERN_STACKFRAME64',
166 'STACKSHOT_KCTYPE_USER_STACKFRAME64',
167 'STACKSHOT_KCTYPE_DONATING_PIDS',
168 'STACKSHOT_KCTYPE_THREAD_DELTA_SNAPSHOT']
169
170 KCDATA_FLAGS_STRUCT_PADDING_MASK = 0xf
171 KCDATA_FLAGS_STRUCT_HAS_PADDING = 0x80
172
173 class KCSubTypeElement(object):
174 """convert kcdata_subtype_descriptor to """
175 _unpack_formats = (None, 'c', 'b', 'B', 'h', 'H', 'i', 'I', 'q', 'Q')
176 _ctypes = ('Unknown', 'char', 'int8_t', 'uint8_t', 'int16_t', 'uint16_t', 'int32_t', 'uint32_t', 'int64_t', 'uint64_t')
177
178 def __init__(self, st_name, st_type, st_size, st_offset=0, st_flag=0, custom_repr=None):
179 self.name = st_name
180 self.offset = st_offset
181 self.type_id = st_type
182 if st_type <= 0 or st_type > KCSUBTYPE_TYPE.KC_ST_UINT64:
183 raise ValueError("Invalid type passed %d" % st_type)
184 self.unpack_fmt = KCSubTypeElement._unpack_formats[self.type_id]
185 self.size = st_size
186 self.totalsize = st_size
187 self.count = 1
188 self.is_array_type = False
189 self.custom_JsonRepr = custom_repr
190 if (st_flag & 0x1) == 0x1:
191 self.is_array_type = True
192 self.size = st_size & 0xffff
193 self.count = (st_size >> 16) & 0xffff
194 self.totalsize = self.size * self.count
195
196 @staticmethod
197 def GetSizeForArray(el_count, el_size):
198 return ((el_count & 0xffff) << 16) | (el_size & 0xffff)
199
200 @staticmethod
201 def FromBinaryTypeData(byte_data):
202 (st_flag, st_type, st_offset, st_size, st_name) = struct.unpack_from('=BBHI32s', byte_data)
203 st_name = st_name.rstrip('\x00')
204 return KCSubTypeElement(st_name, st_type, st_size, st_offset, st_flag)
205
206 @staticmethod
207 def FromBasicCtype(st_name, st_type, st_offset=0, legacy_size=None):
208 if st_type <= 0 or st_type > KCSUBTYPE_TYPE.KC_ST_UINT64:
209 raise ValueError("Invalid type passed %d" % st_type)
210 st_size = struct.calcsize(KCSubTypeElement._unpack_formats[st_type])
211 st_flag = 0
212 retval = KCSubTypeElement(st_name, st_type, st_size, st_offset, st_flag, KCSubTypeElement._get_naked_element_value)
213 if legacy_size:
214 retval.legacy_size = legacy_size
215 return retval
216
217 @staticmethod
218 def FromKCSubTypeElement(other, name_override=''):
219 _copy = copy.copy(other)
220 if name_override:
221 _copy.name = name_override
222 return copy
223
224 def GetName(self):
225 return self.name
226
227 def GetTotalSize(self):
228 return self.totalsize
229
230 def GetValueAsString(self, base_data, array_pos=0):
231 return str(self.GetValue(base_data, array_pos))
232
233 def GetValue(self, base_data, array_pos=0):
234 return struct.unpack_from(self.unpack_fmt, base_data[self.offset + (array_pos * self.size):])[0]
235
236 @staticmethod
237 def _get_naked_element_value(elementValue, elementName):
238 return json.dumps(elementValue)
239
240 def __str__(self):
241 if self.is_array_type:
242 return '[%d,%d] %s %s[%d];' % (self.offset, self.totalsize, self.GetCTypeDesc(), self.name, self.count)
243 return '[%d,%d] %s %s;' % (self.offset, self.totalsize, self.GetCTypeDesc(), self.name)
244
245 def __repr__(self):
246 return str(self)
247
248 def GetCTypeDesc(self):
249 return KCSubTypeElement._ctypes[self.type_id]
250
251 def GetStringRepr(self, base_data):
252 if not self.is_array_type:
253 return self.GetValueAsString(base_data)
254 if self.type_id == KCSUBTYPE_TYPE.KC_ST_CHAR:
255 str_len = self.count
256 if len(base_data) < str_len:
257 str_len = len(base_data)
258 str_arr = []
259 for i in range(str_len):
260 _v = self.GetValue(base_data, i)
261 if ord(_v) == 0:
262 break
263 str_arr.append(self.GetValueAsString(base_data, i))
264 return json.dumps(''.join(str_arr))
265
266 count = self.count
267 if count > len(base_data)/self.size:
268 count = len(base_data)/self.size
269
270 o = '[' + ','.join([self.GetValueAsString(base_data, i) for i in range(count)]) + ']'
271
272 return o
273
274 def GetJsonRepr(self, base_data, flags=0):
275 if (flags & (KCDATA_FLAGS_STRUCT_HAS_PADDING | KCDATA_FLAGS_STRUCT_PADDING_MASK)) != 0:
276 padding = (flags & KCDATA_FLAGS_STRUCT_PADDING_MASK)
277 if padding:
278 base_data = base_data[:-padding]
279 if self.custom_JsonRepr:
280 if self.is_array_type:
281 e_data = [self.GetValue(base_data, i) for i in range(self.count)]
282 else:
283 e_data = self.GetValue(base_data)
284 return self.custom_JsonRepr(e_data, self.name)
285 return self.GetStringRepr(base_data)
286
287 def sizeof(self):
288 return self.totalsize
289
290 def ShouldSkip(self, data):
291 return len(data) < self.offset + self.totalsize
292
293 def ShouldMerge(self):
294 return False
295
296
297 class KCTypeDescription(object):
298 def __init__(self, t_type_id, t_elements=[], t_name='anon', custom_repr=None, legacy_size=None, merge=False, naked=False):
299 self.type_id = t_type_id
300 self.elements = t_elements
301 self.name = t_name
302 self.totalsize = 0
303 self.custom_JsonRepr = custom_repr
304 if legacy_size:
305 self.legacy_size = legacy_size
306 self.merge = merge
307 self.naked = naked
308 for e in self.elements:
309 self.totalsize += e.GetTotalSize()
310
311 def ValidateData(self, base_data):
312 if len(base_data) >= self.totalsize:
313 return True
314 return False
315
316 def GetTypeID(self):
317 return self.type_id
318
319 def GetName(self):
320 return self.name
321
322 def __str__(self):
323 o = '%s {\n\t' % self.name + "\n\t".join([str(e) for e in self.elements]) + '\n};'
324 return o
325
326 @staticmethod
327 def FromKCTypeDescription(other, t_type_id, t_name):
328 retval = KCTypeDescription(t_type_id, other.elements, t_name, other.custom_JsonRepr,
329 legacy_size=getattr(other, 'legacy_size', None))
330 return retval
331
332 def ShouldMerge(self):
333 return self.merge
334
335 def GetJsonRepr(self, base_data, flags):
336 if (flags & (KCDATA_FLAGS_STRUCT_HAS_PADDING | KCDATA_FLAGS_STRUCT_PADDING_MASK)) != 0:
337 padding = (flags & KCDATA_FLAGS_STRUCT_PADDING_MASK)
338 if padding:
339 base_data = base_data[:-padding]
340 elif hasattr(self, 'legacy_size') and len(base_data) == self.legacy_size + ((-self.legacy_size) & 0xf):
341 base_data = base_data[:self.legacy_size]
342 if self.custom_JsonRepr:
343 return self.custom_JsonRepr([e.GetValue(base_data) for e in self.elements])
344 if self.naked:
345 o = ", ".join([e.GetJsonRepr(base_data) for e in self.elements if not e.ShouldSkip(base_data)])
346 else:
347 o = ", ".join(['"%s": %s' % (e.GetName(), e.GetJsonRepr(base_data)) for e in self.elements if not e.ShouldSkip(base_data)])
348 if not self.merge:
349 o = '{' + o + '}'
350 return o
351
352 def sizeof(self):
353 return max(st.totalsize + st.offset for st in self.elements)
354
355
356 def GetTypeNameForKey(k):
357 retval = "0x%x" % k
358 if k in KNOWN_TYPES_COLLECTION:
359 retval = KNOWN_TYPES_COLLECTION[k].GetName()
360 elif k in kcdata_type_def_rev:
361 retval = kcdata_type_def_rev[k]
362 return retval
363
364
365 def GetTypeForName(n):
366 ret = 0
367 if n in kcdata_type_def:
368 ret = kcdata_type_def[n]
369 return ret
370
371
372 LEGAL_OLD_STYLE_ARRAY_TYPES = map(GetTypeForName, LEGAL_OLD_STYLE_ARRAY_TYPE_NAMES)
373
374 kcdata_type_def_rev[GetTypeForName('KCDATA_BUFFER_BEGIN_STACKSHOT')] = 'kcdata_stackshot'
375 kcdata_type_def_rev[GetTypeForName('KCDATA_BUFFER_BEGIN_DELTA_STACKSHOT')] = 'kcdata_delta_stackshot'
376 kcdata_type_def_rev[GetTypeForName('KCDATA_BUFFER_BEGIN_CRASHINFO')] = 'kcdata_crashinfo'
377 kcdata_type_def_rev[GetTypeForName('KCDATA_BUFFER_BEGIN_OS_REASON')] = 'kcdata_reason'
378 kcdata_type_def_rev[GetTypeForName('STACKSHOT_KCCONTAINER_TASK')] = 'task_snapshots'
379 kcdata_type_def_rev[GetTypeForName('STACKSHOT_KCCONTAINER_THREAD')] = 'thread_snapshots'
380 kcdata_type_def_rev[GetTypeForName('KCDATA_BUFFER_BEGIN_XNUPOST_CONFIG')] = 'xnupost_testconfig'
381
382 class Indent(object):
383 def __init__(self):
384 self.n = 0
385 def __call__(self, end=False):
386 if end:
387 return " " * (self.n-4)
388 else:
389 return " " * self.n
390 @contextlib.contextmanager
391 def indent(self):
392 self.n += 4
393 try:
394 yield
395 finally:
396 self.n -= 4
397
398 INDENT = Indent()
399
400 class KCObject(object):
401
402 def __init__(self, type_code, data, offset, flags=0):
403
404 self.i_type = type_code
405 self.i_data = data
406 self.offset = offset
407 self.i_size = len(data)
408 self.i_flags = flags
409 self.obj_collection = []
410 self.obj = {}
411 self.is_container_type = False
412 self.is_array_type = False
413 self.is_naked_type = False
414 self.nested_kcdata = None
415 self.i_name = GetTypeNameForKey(type_code)
416
417 self.ParseData()
418
419 if self.i_type == GetTypeForName('KCDATA_TYPE_CONTAINER_BEGIN'):
420 self.__class__ = KCContainerObject
421
422 if self.i_type in KNOWN_TOPLEVEL_CONTAINER_TYPES:
423 self.__class__ = KCBufferObject
424
425 self.InitAfterParse()
426
427 def __str__(self):
428 return "<KCObject at 0x%x>" % self.offset
429
430 def InitAfterParse(self):
431 pass
432
433 @staticmethod
434 def FromKCItem(kcitem):
435 return KCObject(kcitem.i_type, kcitem.i_data, kcitem.i_offset, kcitem.i_flags)
436
437 def IsContainerEnd(self):
438 return self.i_type == GetTypeForName('KCDATA_TYPE_CONTAINER_END')
439
440 def IsBufferEnd(self):
441 return self.i_type == GetTypeForName('KCDATA_TYPE_BUFFER_END')
442
443 def IsArray(self):
444 return self.is_array_type
445
446 def ShouldMerge(self):
447 if self.nested_kcdata:
448 return True
449 elif not self.is_array_type and self.i_type in KNOWN_TYPES_COLLECTION:
450 return KNOWN_TYPES_COLLECTION[self.i_type].ShouldMerge()
451 else:
452 return False
453
454 def GetJsonRepr(self):
455 if self.is_array_type:
456 return '[' + ', '.join([i.GetJsonRepr() for i in self.obj_collection]) + ']'
457 if self.i_type in KNOWN_TYPES_COLLECTION:
458 return KNOWN_TYPES_COLLECTION[self.i_type].GetJsonRepr(self.i_data, self.i_flags)
459 if self.is_naked_type:
460 return json.dumps(self.obj)
461 if self.nested_kcdata:
462 return self.nested_kcdata.GetJsonRepr()
463
464 raise NotImplementedError("Broken GetJsonRepr implementation")
465
466 def ParseData(self):
467
468
469 if self.i_type == GetTypeForName('KCDATA_TYPE_CONTAINER_BEGIN'):
470 self.obj['uniqID'] = self.i_flags
471 self.i_name = str(self.obj['uniqID'])
472 self.obj['typeID'] = struct.unpack_from('I', self.i_data)[0]
473 logging.info("0x%08x: %sCONTAINER: %s(%x)" % (self.offset, INDENT(), GetTypeNameForKey(self.obj['typeID']), self.i_flags))
474
475 elif self.i_type in (KNOWN_TOPLEVEL_CONTAINER_TYPES):
476 self.obj['uniqID'] = self.i_name
477 self.obj['typeID'] = self.i_type
478 logging.info("0x%08x: %s%s" % (self.offset, INDENT(), self.i_name))
479
480 elif self.i_type == GetTypeForName('KCDATA_TYPE_CONTAINER_END'):
481 self.obj['uniqID'] = self.i_flags
482 logging.info("0x%08x: %sEND" % (self.offset, INDENT(end=True)))
483
484 elif self.i_type == GetTypeForName('KCDATA_TYPE_BUFFER_END'):
485 self.obj = ''
486 logging.info("0x%08x: %sEND_BUFFER" % (self.offset, INDENT(end=True)))
487
488 elif self.i_type == GetTypeForName('KCDATA_TYPE_UINT32_DESC'):
489 self.is_naked_type = True
490 u_d = struct.unpack_from('32sI', self.i_data)
491 self.i_name = u_d[0].strip(chr(0))
492 self.obj = u_d[1]
493 logging.info("0x%08x: %s%s" % (self.offset, INDENT(), self.i_name))
494
495 elif self.i_type == GetTypeForName('KCDATA_TYPE_UINT64_DESC'):
496 self.is_naked_type = True
497 u_d = struct.unpack_from('32sQ', self.i_data)
498 self.i_name = u_d[0].strip(chr(0))
499 self.obj = u_d[1]
500 logging.info("0x%08x: %s%s" % (self.offset, INDENT(), self.i_name))
501
502 elif self.i_type == GetTypeForName('KCDATA_TYPE_TYPEDEFINITION'):
503 self.is_naked_type = True
504 u_d = struct.unpack_from('II32s', self.i_data)
505 self.obj['name'] = u_d[2].split(chr(0))[0]
506 self.i_name = "typedef[%s]" % self.obj['name']
507 self.obj['typeID'] = u_d[0]
508 self.obj['numOfFields'] = u_d[1]
509 element_arr = []
510 for i in range(u_d[1]):
511 e = KCSubTypeElement.FromBinaryTypeData(self.i_data[40+(i*40):])
512 element_arr.append(e)
513 type_desc = KCTypeDescription(u_d[0], element_arr, self.obj['name'])
514 self.obj['fields'] = [str(e) for e in element_arr]
515 KNOWN_TYPES_COLLECTION[type_desc.GetTypeID()] = type_desc
516 logging.info("0x%08x: %s%s" % (self.offset, INDENT(), self.i_name))
517
518 elif self.i_type == GetTypeForName('KCDATA_TYPE_ARRAY'):
519 self.is_array_type = True
520 e_t = (self.i_flags >> 32) & 0xffffffff
521 if e_t not in LEGAL_OLD_STYLE_ARRAY_TYPES:
522 raise Exception, "illegal old-style array type: %s (0x%x)" % (GetTypeNameForKey(e_t), e_t)
523 e_c = self.i_flags & 0xffffffff
524 e_s = KNOWN_TYPES_COLLECTION[e_t].legacy_size
525 if e_s * e_c > self.i_size:
526 raise Exception("array too small for its count")
527 self.obj['typeID'] = e_t
528 self.i_name = GetTypeNameForKey(e_t)
529 self.i_type = e_t
530 self.obj['numOfElements'] = e_c
531 self.obj['sizeOfElement'] = e_s
532 logging.info("0x%08x: %sARRAY: %s" % (self.offset, INDENT(), self.i_name))
533 #populate the array here by recursive creation of KCObject
534 with INDENT.indent():
535 for _i in range(e_c):
536 _o = KCObject(e_t, self.i_data[(_i * e_s):(_i * e_s) + e_s], self.offset + _i*e_s)
537 self.obj_collection.append(_o)
538
539 elif self.i_type >= GetTypeForName('KCDATA_TYPE_ARRAY_PAD0') and self.i_type <= GetTypeForName('KCDATA_TYPE_ARRAY_PADf'):
540 self.is_array_type = True
541 e_t = (self.i_flags >> 32) & 0xffffffff
542 e_c = self.i_flags & 0xffffffff
543 e_s = (self.i_size - (self.i_type & 0xf)) / e_c if e_c != 0 else None
544 self.obj['typeID'] = e_t
545 self.i_name = GetTypeNameForKey(e_t)
546 self.i_type = e_t
547 self.obj['numOfElements'] = e_c
548 self.obj['sizeOfElement'] = e_s
549 logging.info("0x%08x: %sARRAY: %s" % (self.offset, INDENT(), self.i_name))
550 #populate the array here by recursive creation of KCObject
551 with INDENT.indent():
552 for _i in range(e_c):
553 _o = KCObject(e_t, self.i_data[(_i * e_s):(_i * e_s) + e_s], self.offset + _i*e_s)
554 self.obj_collection.append(_o)
555
556 elif self.i_type == GetTypeForName('KCDATA_TYPE_NESTED_KCDATA'):
557 logging.info("0x%08x: %sNESTED_KCDATA" % (self.offset, INDENT()))
558 with INDENT.indent():
559 nested_iterator = kcdata_item_iterator(self.i_data[:self.i_size])
560 nested_buffer = KCObject.FromKCItem(nested_iterator.next())
561 if not isinstance(nested_buffer, KCBufferObject):
562 raise Exception, "nested buffer isn't a KCBufferObject"
563 nested_buffer.ReadItems(nested_iterator)
564 self.nested_kcdata = nested_buffer
565
566 elif self.i_type in KNOWN_TYPES_COLLECTION:
567 self.i_name = KNOWN_TYPES_COLLECTION[self.i_type].GetName()
568 self.is_naked_type = True
569 logging.info("0x%08x: %s%s" % (self.offset, INDENT(), self.i_name))
570 else:
571 self.is_naked_type = True
572 #self.obj = "data of len %d" % len(self.i_data)
573 #self.obj = ''.join(["%x" % ki for ki in struct.unpack('%dB' % len(self.i_data), self.i_data)])
574 self.obj = map(ord, self.i_data)
575 logging.info("0x%08x: %s%s" % (self.offset, INDENT(), self.i_name))
576
577
578 class KCContainerObject(KCObject):
579 def __init__(self, *args, **kwargs):
580 assert False
581
582 def InitAfterParse(self):
583 self.obj_container_dict = {}
584 self.obj_nested_objs = {}
585
586 def ShouldMerge(self):
587 return True
588
589 def GetJsonRepr(self):
590 # o = '"%s"' % self.obj['uniqID'] + ' : { "typeID" : %d ,' % self.obj['typeID']
591 o = '"%s"' % self.obj['uniqID'] + ' : { '
592 for (k, v) in self.obj_container_dict.items():
593 if v.ShouldMerge():
594 o += v.GetJsonRepr() + ","
595 else:
596 o += ' "%s" : ' % k + v.GetJsonRepr() + ","
597
598 for (k, v) in self.obj_nested_objs.items():
599 o += '"%s" : {' % k + ",".join([vi.GetJsonRepr() for vi in v.values()]) + "} ,"
600
601 o = o.rstrip(',') + "}"
602
603 return o
604
605 def AddObject(self, kco):
606 assert not kco.IsContainerEnd()
607 if isinstance(kco, KCContainerObject):
608 type_name = GetTypeNameForKey(kco.obj['typeID'])
609 if type_name not in self.obj_nested_objs:
610 self.obj_nested_objs[type_name] = {}
611 self.obj_nested_objs[type_name][kco.i_name] = kco
612 return
613 if kco.i_name in self.obj_container_dict:
614 if kco.IsArray() and self.obj_container_dict[kco.i_name].IsArray():
615 self.obj_container_dict[kco.i_name].obj_collection.extend( kco.obj_collection )
616 else:
617 self.obj_container_dict[kco.i_name] = kco
618
619 def IsEndMarker(self, o):
620 if not o.IsContainerEnd():
621 return False
622 if o.i_flags != self.i_flags:
623 raise Exception, "container end marker doesn't match"
624 return True
625
626 no_end_message = "could not find container end marker"
627
628 def ReadItems(self, iterator):
629 found_end = False
630 with INDENT.indent():
631 for i in iterator:
632 o = KCObject.FromKCItem(i)
633 if self.IsEndMarker(o):
634 found_end = True
635 break
636 if o.IsBufferEnd():
637 break
638 if isinstance(o, KCContainerObject):
639 o.ReadItems(iterator)
640 self.AddObject(o)
641 if not found_end:
642 if G.accept_incomplete_data:
643 if not G.data_was_incomplete:
644 print >>sys.stderr, "kcdata.py WARNING: data is incomplete!"
645 G.data_was_incomplete = True
646 else:
647 raise Exception, self.no_end_message
648
649
650
651 class KCBufferObject(KCContainerObject):
652
653 def IsEndMarker(self,o):
654 if o.IsContainerEnd():
655 raise Exception, "container end marker at the toplevel"
656 return o.IsBufferEnd()
657
658 no_end_message = "could not find buffer end marker"
659
660
661 class KCData_item:
662 """ a basic kcdata_item type object.
663 """
664 header_size = 16 # (uint32_t + uint32_t + uint64_t)
665
666 def __init__(self, item_type, item_size, item_flags, item_data):
667 self.i_type = item_type
668 self.i_size = item_size
669 self.i_flags = item_flags
670 self.i_data = item_data
671 self.i_offset = None
672
673 def __init__(self, barray, pos=0):
674 """ create an object by parsing data from bytes array
675 returns : obj - if data is readable
676 raises ValueError if something is not ok.
677 """
678 self.i_type = struct.unpack('I', barray[pos:pos+4])[0] # int.from_bytes(barray[pos:pos+4])
679 self.i_size = struct.unpack('I', barray[pos+4:pos+8])[0] # int.from_bytes(barray[pos+4:pos+8])
680 self.i_flags = struct.unpack('Q', barray[pos+8:pos+16])[0] # int.from_bytes(barray[pos+8:pos+16])
681 self.i_data = barray[pos+16: (pos + 16 + self.i_size)]
682 self.i_offset = pos
683
684 def __len__(self):
685 return self.i_size + KCData_item.header_size
686
687 def GetHeaderDescription(self):
688 outs = "type: 0x%x size: 0x%x flags: 0x%x (%s)" % (self.i_type, self.i_size, self.i_flags, GetTypeNameForKey(self.i_type))
689 if not self.i_offset is None:
690 outs = "pos: 0x%x" % self.i_offset + outs
691 return outs
692
693 def __str__(self):
694 return self.GetHeaderDescription()
695
696 def kcdata_item_iterator(data):
697 file_len = len(data)
698 curpos = 0
699 while curpos < file_len:
700 item = KCData_item(data, curpos)
701 yield item
702 curpos += len(item)
703
704 def _get_data_element(elementValues):
705 return json.dumps(elementValues[-1])
706
707 KNOWN_TOPLEVEL_CONTAINER_TYPES = map(GetTypeForName, ('KCDATA_BUFFER_BEGIN_CRASHINFO', 'KCDATA_BUFFER_BEGIN_STACKSHOT', 'KCDATA_BUFFER_BEGIN_DELTA_STACKSHOT', 'KCDATA_BUFFER_BEGIN_OS_REASON','KCDATA_BUFFER_BEGIN_XNUPOST_CONFIG'))
708
709 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_UINT32_DESC')] = KCTypeDescription(GetTypeForName('KCDATA_TYPE_UINT32_DESC'), (
710 KCSubTypeElement('desc', KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(32, 1), 0, 1),
711 KCSubTypeElement('data', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 32, 0)
712 ),
713 'KCDATA_TYPE_UINT32_DESC',
714 _get_data_element
715 )
716
717 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_UINT64_DESC')] = KCTypeDescription(GetTypeForName('KCDATA_TYPE_UINT64_DESC'), (
718 KCSubTypeElement('desc', KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(32, 1), 0, 1),
719 KCSubTypeElement('data', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 32, 0)
720 ),
721 'KCDATA_TYPE_UINT64_DESC',
722 _get_data_element
723 )
724
725 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_TIMEBASE')] = KCTypeDescription(GetTypeForName('KCDATA_TYPE_TIMEBASE'), (
726 KCSubTypeElement('numer', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0),
727 KCSubTypeElement('denom', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4, 0)
728 ),
729 'mach_timebase_info'
730 )
731
732
733 STACKSHOT_IO_NUM_PRIORITIES = 4
734 KNOWN_TYPES_COLLECTION[0x901] = KCTypeDescription(0x901, (
735 KCSubTypeElement.FromBasicCtype('ss_disk_reads_count', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
736 KCSubTypeElement.FromBasicCtype('ss_disk_reads_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
737 KCSubTypeElement.FromBasicCtype('ss_disk_writes_count', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
738 KCSubTypeElement.FromBasicCtype('ss_disk_writes_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
739 KCSubTypeElement('ss_io_priority_count', KCSUBTYPE_TYPE.KC_ST_UINT64, KCSubTypeElement.GetSizeForArray(STACKSHOT_IO_NUM_PRIORITIES, 8), 32, 1),
740 KCSubTypeElement('ss_io_priority_size', KCSUBTYPE_TYPE.KC_ST_UINT64, KCSubTypeElement.GetSizeForArray(STACKSHOT_IO_NUM_PRIORITIES, 8), 32 + (STACKSHOT_IO_NUM_PRIORITIES * 8), 1),
741 KCSubTypeElement.FromBasicCtype('ss_paging_count', KCSUBTYPE_TYPE.KC_ST_UINT64, 32 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
742 KCSubTypeElement.FromBasicCtype('ss_paging_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 40 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
743 KCSubTypeElement.FromBasicCtype('ss_non_paging_count', KCSUBTYPE_TYPE.KC_ST_UINT64, 48 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
744 KCSubTypeElement.FromBasicCtype('ss_non_paging_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 56 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
745 KCSubTypeElement.FromBasicCtype('ss_data_count', KCSUBTYPE_TYPE.KC_ST_UINT64, 64 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
746 KCSubTypeElement.FromBasicCtype('ss_data_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 72 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
747 KCSubTypeElement.FromBasicCtype('ss_metadata_count', KCSUBTYPE_TYPE.KC_ST_UINT64, 80 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8)),
748 KCSubTypeElement.FromBasicCtype('ss_metadata_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 88 + 2 * (STACKSHOT_IO_NUM_PRIORITIES * 8))
749 ),
750 'io_statistics'
751 )
752
753 KNOWN_TYPES_COLLECTION[0x902] = KCTypeDescription(0x902, (
754 KCSubTypeElement('snapshot_magic', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 0, 0),
755 KCSubTypeElement('free_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 1, 0),
756 KCSubTypeElement('active_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 2, 0),
757 KCSubTypeElement('inactive_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 3, 0),
758 KCSubTypeElement('purgeable_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 4, 0),
759 KCSubTypeElement('wired_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 5, 0),
760 KCSubTypeElement('speculative_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 6, 0),
761 KCSubTypeElement('throttled_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 7, 0),
762 KCSubTypeElement('filebacked_pages', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 8, 0),
763 KCSubTypeElement('compressions', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 9, 0),
764 KCSubTypeElement('decompressions', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 10, 0),
765 KCSubTypeElement('compressor_size', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 11, 0),
766 KCSubTypeElement('busy_buffer_count', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 4 * 12, 0),
767 KCSubTypeElement('pages_wanted', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 13, 0),
768 KCSubTypeElement('pages_reclaimed', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 4 * 14, 0),
769 KCSubTypeElement('pages_wanted_reclaimed_valid', KCSUBTYPE_TYPE.KC_ST_UINT8, 1, 4 * 15, 0)
770 ),
771 'mem_and_io_snapshot'
772 )
773
774
775 KNOWN_TYPES_COLLECTION[0x905] = KCTypeDescription(0x905, (
776 KCSubTypeElement.FromBasicCtype('ts_unique_pid', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
777 KCSubTypeElement.FromBasicCtype('ts_ss_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
778 KCSubTypeElement.FromBasicCtype('ts_user_time_in_terminated_thre', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
779 KCSubTypeElement.FromBasicCtype('ts_system_time_in_terminated_th', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
780 KCSubTypeElement.FromBasicCtype('ts_p_start_sec', KCSUBTYPE_TYPE.KC_ST_UINT64, 32),
781 KCSubTypeElement.FromBasicCtype('ts_task_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 40),
782 KCSubTypeElement.FromBasicCtype('ts_max_resident_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 48),
783 KCSubTypeElement.FromBasicCtype('ts_suspend_count', KCSUBTYPE_TYPE.KC_ST_UINT32, 56),
784 KCSubTypeElement.FromBasicCtype('ts_faults', KCSUBTYPE_TYPE.KC_ST_UINT32, 60),
785 KCSubTypeElement.FromBasicCtype('ts_pageins', KCSUBTYPE_TYPE.KC_ST_UINT32, 64),
786 KCSubTypeElement.FromBasicCtype('ts_cow_faults', KCSUBTYPE_TYPE.KC_ST_UINT32, 68),
787 KCSubTypeElement.FromBasicCtype('ts_was_throttled', KCSUBTYPE_TYPE.KC_ST_UINT32, 72),
788 KCSubTypeElement.FromBasicCtype('ts_did_throttle', KCSUBTYPE_TYPE.KC_ST_UINT32, 76),
789 KCSubTypeElement.FromBasicCtype('ts_latency_qos', KCSUBTYPE_TYPE.KC_ST_UINT32, 80),
790 KCSubTypeElement.FromBasicCtype('ts_pid', KCSUBTYPE_TYPE.KC_ST_INT32, 84),
791 KCSubTypeElement('ts_p_comm', KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(32, 1), 88, 1)
792 ),
793 'task_snapshot'
794 )
795
796 KNOWN_TYPES_COLLECTION[0x906] = KCTypeDescription(0x906, (
797 KCSubTypeElement.FromBasicCtype('ths_thread_id', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
798 KCSubTypeElement.FromBasicCtype('ths_wait_event', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
799 KCSubTypeElement.FromBasicCtype('ths_continuation', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
800 KCSubTypeElement.FromBasicCtype('ths_total_syscalls', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
801 KCSubTypeElement.FromBasicCtype('ths_voucher_identifier', KCSUBTYPE_TYPE.KC_ST_UINT64, 32),
802 KCSubTypeElement.FromBasicCtype('ths_dqserialnum', KCSUBTYPE_TYPE.KC_ST_UINT64, 40),
803 KCSubTypeElement.FromBasicCtype('ths_user_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 48),
804 KCSubTypeElement.FromBasicCtype('ths_sys_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 56),
805 KCSubTypeElement.FromBasicCtype('ths_ss_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 64),
806 KCSubTypeElement.FromBasicCtype('ths_last_run_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 72),
807 KCSubTypeElement.FromBasicCtype('ths_last_made_runnable_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 80),
808 KCSubTypeElement.FromBasicCtype('ths_state', KCSUBTYPE_TYPE.KC_ST_UINT32, 88),
809 KCSubTypeElement.FromBasicCtype('ths_sched_flags', KCSUBTYPE_TYPE.KC_ST_UINT32, 92),
810 KCSubTypeElement.FromBasicCtype('ths_base_priority', KCSUBTYPE_TYPE.KC_ST_INT16, 96),
811 KCSubTypeElement.FromBasicCtype('ths_sched_priority', KCSUBTYPE_TYPE.KC_ST_INT16, 98),
812 KCSubTypeElement.FromBasicCtype('ths_eqos', KCSUBTYPE_TYPE.KC_ST_UINT8, 100),
813 KCSubTypeElement.FromBasicCtype('ths_rqos', KCSUBTYPE_TYPE.KC_ST_UINT8, 101),
814 KCSubTypeElement.FromBasicCtype('ths_rqos_override', KCSUBTYPE_TYPE.KC_ST_UINT8, 102),
815 KCSubTypeElement.FromBasicCtype('ths_io_tier', KCSUBTYPE_TYPE.KC_ST_UINT8, 103),
816 KCSubTypeElement.FromBasicCtype('ths_thread_t', KCSUBTYPE_TYPE.KC_ST_UINT64, 104),
817 KCSubTypeElement.FromBasicCtype('ths_requested_policy', KCSUBTYPE_TYPE.KC_ST_UINT64, 112),
818 KCSubTypeElement.FromBasicCtype('ths_effective_policy', KCSUBTYPE_TYPE.KC_ST_UINT64, 120),
819 ),
820 'thread_snapshot',
821 legacy_size = 0x68
822 )
823
824 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_THREAD_DELTA_SNAPSHOT')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_THREAD_DELTA_SNAPSHOT'), (
825 KCSubTypeElement.FromBasicCtype('tds_thread_id', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
826 KCSubTypeElement.FromBasicCtype('tds_voucher_identifier', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
827 KCSubTypeElement.FromBasicCtype('tds_ss_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
828 KCSubTypeElement.FromBasicCtype('tds_last_made_runnable_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
829 KCSubTypeElement.FromBasicCtype('tds_state', KCSUBTYPE_TYPE.KC_ST_UINT32, 32),
830 KCSubTypeElement.FromBasicCtype('tds_sched_flags', KCSUBTYPE_TYPE.KC_ST_UINT32, 36),
831 KCSubTypeElement.FromBasicCtype('tds_base_priority', KCSUBTYPE_TYPE.KC_ST_INT16, 40),
832 KCSubTypeElement.FromBasicCtype('tds_sched_priority', KCSUBTYPE_TYPE.KC_ST_INT16, 42),
833 KCSubTypeElement.FromBasicCtype('tds_eqos', KCSUBTYPE_TYPE.KC_ST_UINT8, 44),
834 KCSubTypeElement.FromBasicCtype('tds_rqos', KCSUBTYPE_TYPE.KC_ST_UINT8, 45),
835 KCSubTypeElement.FromBasicCtype('tds_rqos_override', KCSUBTYPE_TYPE.KC_ST_UINT8, 46),
836 KCSubTypeElement.FromBasicCtype('tds_io_tier', KCSUBTYPE_TYPE.KC_ST_UINT8, 47),
837 KCSubTypeElement.FromBasicCtype('tds_requested_policy', KCSUBTYPE_TYPE.KC_ST_UINT64, 48),
838 KCSubTypeElement.FromBasicCtype('tds_effective_policy', KCSUBTYPE_TYPE.KC_ST_UINT64, 56),
839 ),
840 'thread_delta_snapshot',
841 legacy_size = 48
842 )
843
844 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_TASK_DELTA_SNAPSHOT')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_TASK_DELTA_SNAPSHOT'), (
845 KCSubTypeElement.FromBasicCtype('tds_unique_pid', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
846 KCSubTypeElement.FromBasicCtype('tds_ss_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
847 KCSubTypeElement.FromBasicCtype('tds_user_time_in_terminated_thr', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
848 KCSubTypeElement.FromBasicCtype('tds_system_time_in_terminated_t', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
849 KCSubTypeElement.FromBasicCtype('tds_task_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 32),
850 KCSubTypeElement.FromBasicCtype('tds_max_resident_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 40),
851 KCSubTypeElement.FromBasicCtype('tds_suspend_count', KCSUBTYPE_TYPE.KC_ST_UINT32, 48),
852 KCSubTypeElement.FromBasicCtype('tds_faults', KCSUBTYPE_TYPE.KC_ST_UINT32, 52),
853 KCSubTypeElement.FromBasicCtype('tds_pageins', KCSUBTYPE_TYPE.KC_ST_UINT32, 56),
854 KCSubTypeElement.FromBasicCtype('tds_cow_faults', KCSUBTYPE_TYPE.KC_ST_UINT32, 60),
855 KCSubTypeElement.FromBasicCtype('tds_was_throttled', KCSUBTYPE_TYPE.KC_ST_UINT32, 64),
856 KCSubTypeElement.FromBasicCtype('tds_did_throttle', KCSUBTYPE_TYPE.KC_ST_UINT32, 68),
857 KCSubTypeElement.FromBasicCtype('tds_latency_qos', KCSUBTYPE_TYPE.KC_ST_UINT32, 72),
858 ),
859 'task_delta_snapshot'
860 )
861
862
863 KNOWN_TYPES_COLLECTION[0x909] = KCSubTypeElement('pth_name', KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(64, 1), 0, 1)
864
865 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_SYS_SHAREDCACHE_LAYOUT')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_SYS_SHAREDCACHE_LAYOUT'), (
866 KCSubTypeElement('imageLoadAddress', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0),
867 KCSubTypeElement('imageUUID', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 8, 1)
868 ),
869 'system_shared_cache_layout'
870 )
871
872 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_LIBRARY_LOADINFO64')] = KCTypeDescription(GetTypeForName('KCDATA_TYPE_LIBRARY_LOADINFO64'), (
873 KCSubTypeElement('imageLoadAddress', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0),
874 KCSubTypeElement('imageUUID', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 8, 1)
875 ),
876 'dyld_load_info',
877 legacy_size = 24
878 )
879
880 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_LIBRARY_LOADINFO')] = KCTypeDescription(GetTypeForName('KCDATA_TYPE_LIBRARY_LOADINFO'), (
881 KCSubTypeElement('imageLoadAddress', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0),
882 KCSubTypeElement('imageUUID', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 4, 1)
883 ),
884 'dyld_load_info',
885 legacy_size = 20
886 )
887
888 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_SHAREDCACHE_LOADINFO')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_SHAREDCACHE_LOADINFO'), (
889 KCSubTypeElement('imageLoadAddress', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0),
890 KCSubTypeElement('imageUUID', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 8, 1),
891 KCSubTypeElement('imageSlidBaseAddress', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 24, 0),
892 ),
893 'shared_cache_dyld_load_info',
894 legacy_size = 0x18
895 )
896
897 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERNELCACHE_LOADINFO')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_KERNELCACHE_LOADINFO'), (
898 KCSubTypeElement('imageLoadAddress', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0),
899 KCSubTypeElement('imageUUID', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 8, 1),
900 ),
901 'kernelcache_load_info'
902 )
903
904 KNOWN_TYPES_COLLECTION[0x33] = KCSubTypeElement('mach_absolute_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value)
905 KNOWN_TYPES_COLLECTION[0x907] = KCSubTypeElement.FromBasicCtype('donating_pids', KCSUBTYPE_TYPE.KC_ST_INT32, legacy_size=4)
906
907 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_USECS_SINCE_EPOCH')] = KCSubTypeElement('usecs_since_epoch', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value)
908
909 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKFRAME')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKFRAME'), (
910 KCSubTypeElement.FromBasicCtype('lr', KCSUBTYPE_TYPE.KC_ST_UINT32),
911 KCSubTypeElement.FromBasicCtype('sp', KCSUBTYPE_TYPE.KC_ST_UINT32, 4)
912 ),
913 'kernel_stack_frames',
914 legacy_size = 8
915 )
916
917 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKLR')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKLR'), (
918 KCSubTypeElement.FromBasicCtype('lr', KCSUBTYPE_TYPE.KC_ST_UINT32),
919 ),
920 'kernel_stack_frames'
921 )
922
923
924 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_USER_STACKFRAME')] = KCTypeDescription.FromKCTypeDescription(
925 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKFRAME')],
926 GetTypeForName('STACKSHOT_KCTYPE_USER_STACKFRAME'),
927 'user_stack_frames'
928 )
929
930 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_USER_STACKLR')] = KCTypeDescription.FromKCTypeDescription(
931 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKLR')],
932 GetTypeForName('STACKSHOT_KCTYPE_USER_STACKLR'),
933 'user_stack_frames'
934 )
935
936 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKFRAME64')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKFRAME64'), (
937 KCSubTypeElement.FromBasicCtype('lr', KCSUBTYPE_TYPE.KC_ST_UINT64),
938 KCSubTypeElement.FromBasicCtype('sp', KCSUBTYPE_TYPE.KC_ST_UINT64, 8)
939 ),
940 'kernel_stack_frames',
941 legacy_size = 16
942 )
943
944 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_USER_STACKFRAME64')] = KCTypeDescription.FromKCTypeDescription(
945 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKFRAME64')],
946 GetTypeForName('STACKSHOT_KCTYPE_USER_STACKFRAME64'),
947 'user_stack_frames'
948 )
949
950
951 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKLR64')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKLR64'), (
952 KCSubTypeElement.FromBasicCtype('lr', KCSUBTYPE_TYPE.KC_ST_UINT64),
953 ),
954 'kernel_stack_frames'
955 )
956
957 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_USER_STACKLR64')] = KCTypeDescription.FromKCTypeDescription(
958 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_STACKLR64')],
959 GetTypeForName('STACKSHOT_KCTYPE_USER_STACKLR64'),
960 'user_stack_frames'
961 )
962
963
964 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_NONRUNNABLE_TIDS')] = KCSubTypeElement.FromBasicCtype('nonrunnable_threads', KCSUBTYPE_TYPE.KC_ST_INT64)
965
966 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_NONRUNNABLE_TASKS')] = KCSubTypeElement.FromBasicCtype('nonrunnable_tasks', KCSUBTYPE_TYPE.KC_ST_INT64)
967
968 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_OSVERSION')] = KCSubTypeElement('osversion', KCSUBTYPE_TYPE.KC_ST_CHAR,
969 KCSubTypeElement.GetSizeForArray(256, 1), 0, 1)
970
971 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_BOOTARGS')] = KCSubTypeElement('boot_args', KCSUBTYPE_TYPE.KC_ST_CHAR,
972 KCSubTypeElement.GetSizeForArray(256, 1), 0, 1)
973
974 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_KERN_PAGE_SIZE')] = KCSubTypeElement('kernel_page_size', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0, KCSubTypeElement._get_naked_element_value)
975
976 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_THREAD_POLICY_VERSION')] = KCSubTypeElement('thread_policy_version', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0, KCSubTypeElement._get_naked_element_value)
977
978 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_JETSAM_LEVEL')] = KCSubTypeElement('jetsam_level', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0, KCSubTypeElement._get_naked_element_value)
979
980 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_DELTA_SINCE_TIMESTAMP')] = KCSubTypeElement("stackshot_delta_since_timestamp", KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value)
981
982 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_STACKSHOT_FAULT_STATS')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_STACKSHOT_FAULT_STATS'),
983 (
984 KCSubTypeElement.FromBasicCtype('sfs_pages_faulted_in', KCSUBTYPE_TYPE.KC_ST_UINT32, 0),
985 KCSubTypeElement.FromBasicCtype('sfs_time_spent_faulting', KCSUBTYPE_TYPE.KC_ST_UINT64, 4),
986 KCSubTypeElement.FromBasicCtype('sfs_system_max_fault_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 12),
987 KCSubTypeElement.FromBasicCtype('sfs_stopped_faulting', KCSUBTYPE_TYPE.KC_ST_UINT8, 20)
988 ),
989 'stackshot_fault_stats')
990
991 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_THREAD_WAITINFO')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_THREAD_WAITINFO'),
992 (
993 KCSubTypeElement.FromBasicCtype('owner', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
994 KCSubTypeElement.FromBasicCtype('waiter', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
995 KCSubTypeElement.FromBasicCtype('context', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
996 KCSubTypeElement.FromBasicCtype('wait_type', KCSUBTYPE_TYPE.KC_ST_UINT8, 24)
997 ),
998 'thread_waitinfo')
999
1000 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_THREAD_GROUP_SNAPSHOT')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_THREAD_GROUP'),
1001 (
1002 KCSubTypeElement.FromBasicCtype('tgs_id', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1003 KCSubTypeElement('tgs_name', KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(16, 1),
1004 8, 1),
1005 KCSubTypeElement.FromBasicCtype('tgs_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
1006 ),
1007 'thread_group_snapshot')
1008
1009
1010 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_THREAD_GROUP')] = KCSubTypeElement('thread_group', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value)
1011
1012 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_JETSAM_COALITION_SNAPSHOT')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_JETSAM_COALITION_SNAPSHOT'),
1013 (
1014 KCSubTypeElement.FromBasicCtype('jcs_id', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1015 KCSubTypeElement.FromBasicCtype('jcs_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
1016 KCSubTypeElement.FromBasicCtype('jcs_thread_group', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
1017 KCSubTypeElement.FromBasicCtype('jcs_leader_task_uniqueid', KCSUBTYPE_TYPE.KC_ST_UINT64, 24)
1018 ),
1019 'jetsam_coalition_snapshot')
1020
1021 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_JETSAM_COALITION')] = KCSubTypeElement('jetsam_coalition', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value)
1022
1023 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_INSTRS_CYCLES')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_INSTRS_CYCLES'),
1024 (
1025 KCSubTypeElement.FromBasicCtype('ics_instructions', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1026 KCSubTypeElement.FromBasicCtype('ics_cycles', KCSUBTYPE_TYPE.KC_ST_UINT64, 8)
1027 ),
1028 'instrs_cycles_snapshot')
1029
1030 def set_type(name, *args):
1031 typ = GetTypeForName(name)
1032 KNOWN_TYPES_COLLECTION[typ] = KCTypeDescription(GetTypeForName(typ), *args)
1033
1034
1035 set_type('STACKSHOT_KCTYPE_USER_STACKTOP',
1036 (
1037 KCSubTypeElement.FromBasicCtype('sp', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1038 KCSubTypeElement('stack_contents', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(8, 1), 8, 1),
1039 ),
1040 'user_stacktop')
1041
1042 #KNOWN_TYPES_COLLECTION[0x907] = KCSubTypeElement('donating_pids', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0, KCSubTypeElement._get_naked_element_value)
1043 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PID')] = KCSubTypeElement('pid', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1044 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PPID')] = KCSubTypeElement('ppid', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1045 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_NAME')] = KCSubTypeElement('p_comm', KCSUBTYPE_TYPE.KC_ST_CHAR,
1046 KCSubTypeElement.GetSizeForArray(32, 1), 0, 1)
1047 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_USERSTACK')] = KCSubTypeElement('userstack_ptr', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0)
1048 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_ARGSLEN')] = KCSubTypeElement('p_argslen', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1049
1050 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_PATH')] = KCSubTypeElement('p_path', KCSUBTYPE_TYPE.KC_ST_CHAR,
1051 KCSubTypeElement.GetSizeForArray(1024, 1), 0, 1)
1052 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_CSFLAGS')] = KCSubTypeElement('p_csflags', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1053 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_UID')] = KCSubTypeElement('uid', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1054 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_GID')] = KCSubTypeElement('gid', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1055 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_ARGC')] = KCSubTypeElement('argc', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1056 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_FLAGS')] = KCSubTypeElement('p_flags', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1057 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_CPUTYPE')] = KCSubTypeElement('cputype', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1058 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_RESPONSIBLE_PID')] = KCSubTypeElement('responsible_pid', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1059 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_DIRTY_FLAGS')] = KCSubTypeElement('dirty_flags', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0)
1060 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_CRASHED_THREADID')] = KCSubTypeElement('crashed_threadid', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0)
1061 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_COALITION_ID')] = KCSubTypeElement('coalition_id', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0)
1062
1063 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_STATUS')] = KCSubTypeElement('p_status', KCSUBTYPE_TYPE.KC_ST_UINT8, 1, 0, 0)
1064
1065 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_BSDINFOWITHUNIQID')] = KCTypeDescription(GetTypeForName('TASK_CRASHINFO_BSDINFOWITHUNIQID'),
1066 ( KCSubTypeElement('p_uuid', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 0, 1),
1067 KCSubTypeElement.FromBasicCtype('p_uniqueid', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
1068 KCSubTypeElement.FromBasicCtype('p_puniqueid', KCSUBTYPE_TYPE.KC_ST_UINT64, 24)
1069 ),
1070 'proc_uniqidentifierinfo')
1071
1072 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_EXCEPTION_CODES')] = (
1073 KCTypeDescription(GetTypeForName('TASK_CRASHINFO_EXCEPTION_CODES'),
1074 (KCSubTypeElement.FromBasicCtype('code_0', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1075 KCSubTypeElement.FromBasicCtype('code_1', KCSUBTYPE_TYPE.KC_ST_UINT64, 8)),
1076 'mach_exception_data_t'))
1077
1078
1079 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_PROC_STARTTIME')] = (
1080 KCTypeDescription(GetTypeForName('TASK_CRASHINFO_PROC_STARTTIME'),
1081 (KCSubTypeElement.FromBasicCtype('tv_sec', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1082 KCSubTypeElement.FromBasicCtype('tv_usec', KCSUBTYPE_TYPE.KC_ST_UINT64, 8)),
1083 'proc_starttime'))
1084
1085
1086 KNOWN_TYPES_COLLECTION[GetTypeForName('TASK_CRASHINFO_RUSAGE_INFO')] = KCTypeDescription(GetTypeForName('TASK_CRASHINFO_RUSAGE_INFO'),
1087 (
1088 KCSubTypeElement('ri_uuid', KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(16, 1), 0, 1),
1089 KCSubTypeElement.FromBasicCtype('ri_user_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
1090 KCSubTypeElement.FromBasicCtype('ri_system_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 24),
1091 KCSubTypeElement.FromBasicCtype('ri_pkg_idle_wkups', KCSUBTYPE_TYPE.KC_ST_UINT64, 32),
1092 KCSubTypeElement.FromBasicCtype('ri_interrupt_wkups', KCSUBTYPE_TYPE.KC_ST_UINT64, 40),
1093 KCSubTypeElement.FromBasicCtype('ri_pageins', KCSUBTYPE_TYPE.KC_ST_UINT64, 48),
1094 KCSubTypeElement.FromBasicCtype('ri_wired_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 56),
1095 KCSubTypeElement.FromBasicCtype('ri_resident_size', KCSUBTYPE_TYPE.KC_ST_UINT64, 64),
1096 KCSubTypeElement.FromBasicCtype('ri_phys_footprint', KCSUBTYPE_TYPE.KC_ST_UINT64, 72),
1097 KCSubTypeElement.FromBasicCtype('ri_proc_start_abstime', KCSUBTYPE_TYPE.KC_ST_UINT64, 80),
1098 KCSubTypeElement.FromBasicCtype('ri_proc_exit_abstime', KCSUBTYPE_TYPE.KC_ST_UINT64, 88),
1099 KCSubTypeElement.FromBasicCtype('ri_child_user_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 96),
1100 KCSubTypeElement.FromBasicCtype('ri_child_system_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 104),
1101 KCSubTypeElement.FromBasicCtype('ri_child_pkg_idle_wkups', KCSUBTYPE_TYPE.KC_ST_UINT64, 112),
1102 KCSubTypeElement.FromBasicCtype('ri_child_interrupt_wkups', KCSUBTYPE_TYPE.KC_ST_UINT64, 120),
1103 KCSubTypeElement.FromBasicCtype('ri_child_pageins', KCSUBTYPE_TYPE.KC_ST_UINT64, 128),
1104 KCSubTypeElement.FromBasicCtype('ri_child_elapsed_abstime', KCSUBTYPE_TYPE.KC_ST_UINT64, 136),
1105 KCSubTypeElement.FromBasicCtype('ri_diskio_bytesread', KCSUBTYPE_TYPE.KC_ST_UINT64, 144),
1106 KCSubTypeElement.FromBasicCtype('ri_diskio_byteswritten', KCSUBTYPE_TYPE.KC_ST_UINT64, 152),
1107 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_default', KCSUBTYPE_TYPE.KC_ST_UINT64, 160),
1108 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_maintenance', KCSUBTYPE_TYPE.KC_ST_UINT64, 168),
1109 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_background', KCSUBTYPE_TYPE.KC_ST_UINT64, 176),
1110 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_utility', KCSUBTYPE_TYPE.KC_ST_UINT64, 184),
1111 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_legacy', KCSUBTYPE_TYPE.KC_ST_UINT64, 192),
1112 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_user_initiated', KCSUBTYPE_TYPE.KC_ST_UINT64, 200),
1113 KCSubTypeElement.FromBasicCtype('ri_cpu_time_qos_user_interactiv', KCSUBTYPE_TYPE.KC_ST_UINT64, 208),
1114 KCSubTypeElement.FromBasicCtype('ri_billed_system_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 216),
1115 KCSubTypeElement.FromBasicCtype('ri_serviced_system_time', KCSUBTYPE_TYPE.KC_ST_UINT64, 224)
1116 ),
1117 'rusage_info')
1118
1119 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_CPU_TIMES')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_CPU_TIMES'),
1120 (
1121 KCSubTypeElement.FromBasicCtype('user_usec', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1122 KCSubTypeElement.FromBasicCtype('system_usec', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
1123 KCSubTypeElement.FromBasicCtype('runnable_usec', KCSUBTYPE_TYPE.KC_ST_UINT64, 16),
1124 ), 'cpu_times')
1125
1126 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_STACKSHOT_DURATION')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_STACKSHOT_DURATION'),
1127 (
1128 KCSubTypeElement.FromBasicCtype('stackshot_duration', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1129 KCSubTypeElement.FromBasicCtype('stackshot_duration_outer', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
1130 ), 'stackshot_duration', merge=True
1131 )
1132
1133 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_PROCNAME')] = (
1134 KCSubTypeElement("proc_name", KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(-1, 1), 0, 1))
1135
1136 KNOWN_TYPES_COLLECTION[GetTypeForName('KCDATA_TYPE_PID')] = (
1137 KCSubTypeElement('pid', KCSUBTYPE_TYPE.KC_ST_INT32, 4, 0, 0))
1138
1139 KNOWN_TYPES_COLLECTION[GetTypeForName('EXIT_REASON_SNAPSHOT')] = KCTypeDescription(GetTypeForName('EXIT_REASON_SNAPSHOT'),
1140 (
1141 KCSubTypeElement.FromBasicCtype('ers_namespace', KCSUBTYPE_TYPE.KC_ST_UINT32, 0),
1142 KCSubTypeElement.FromBasicCtype('ers_code', KCSUBTYPE_TYPE.KC_ST_UINT64, 4),
1143 KCSubTypeElement.FromBasicCtype('ers_flags', KCSUBTYPE_TYPE.KC_ST_UINT64, 12),
1144 ), 'exit_reason_basic_info')
1145
1146 KNOWN_TYPES_COLLECTION[GetTypeForName('EXIT_REASON_USER_DESC')] = (
1147 KCSubTypeElement("exit_reason_user_description", KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(-1, 1), 0, 1))
1148
1149 KNOWN_TYPES_COLLECTION[GetTypeForName('EXIT_REASON_USER_PAYLOAD')] = KCSubTypeElement('exit_reason_user_payload',
1150 KCSUBTYPE_TYPE.KC_ST_UINT8, KCSubTypeElement.GetSizeForArray(-1, 1), 0, 1)
1151
1152 KNOWN_TYPES_COLLECTION[GetTypeForName('EXIT_REASON_CODESIGNING_INFO')] = KCTypeDescription(GetTypeForName('EXIT_REASON_CODESIGNING_INFO'),
1153 (
1154 KCSubTypeElement.FromBasicCtype('ceri_virt_addr', KCSUBTYPE_TYPE.KC_ST_UINT64, 0),
1155 KCSubTypeElement.FromBasicCtype('ceri_file_offset', KCSUBTYPE_TYPE.KC_ST_UINT64, 8),
1156 KCSubTypeElement("ceri_pathname", KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(1024, 1), 16, 1),
1157 KCSubTypeElement("ceri_filename", KCSUBTYPE_TYPE.KC_ST_CHAR, KCSubTypeElement.GetSizeForArray(1024, 1), 1040, 1),
1158 KCSubTypeElement.FromBasicCtype('ceri_codesig_modtime_secs', KCSUBTYPE_TYPE.KC_ST_UINT64, 2064),
1159 KCSubTypeElement.FromBasicCtype('ceri_codesig_modtime_nsecs', KCSUBTYPE_TYPE.KC_ST_UINT64, 2072),
1160 KCSubTypeElement.FromBasicCtype('ceri_page_modtime_secs', KCSUBTYPE_TYPE.KC_ST_UINT64, 2080),
1161 KCSubTypeElement.FromBasicCtype('ceri_page_modtime_nsecs', KCSUBTYPE_TYPE.KC_ST_UINT64, 2088),
1162 KCSubTypeElement.FromBasicCtype('ceri_path_truncated', KCSUBTYPE_TYPE.KC_ST_UINT8, 2096),
1163 KCSubTypeElement.FromBasicCtype('ceri_object_codesigned', KCSUBTYPE_TYPE.KC_ST_UINT8, 2097),
1164 KCSubTypeElement.FromBasicCtype('ceri_page_codesig_validated', KCSUBTYPE_TYPE.KC_ST_UINT8, 2098),
1165 KCSubTypeElement.FromBasicCtype('ceri_page_codesig_tainted', KCSUBTYPE_TYPE.KC_ST_UINT8, 2099),
1166 KCSubTypeElement.FromBasicCtype('ceri_page_codesig_nx', KCSUBTYPE_TYPE.KC_ST_UINT8, 2100),
1167 KCSubTypeElement.FromBasicCtype('ceri_page_wpmapped', KCSUBTYPE_TYPE.KC_ST_UINT8, 2101),
1168 KCSubTypeElement.FromBasicCtype('ceri_page_slid', KCSUBTYPE_TYPE.KC_ST_UINT8, 2102),
1169 KCSubTypeElement.FromBasicCtype('ceri_page_dirty', KCSUBTYPE_TYPE.KC_ST_UINT8, 2103),
1170 KCSubTypeElement.FromBasicCtype('ceri_page_shadow_depth', KCSUBTYPE_TYPE.KC_ST_UINT32, 2104),
1171 ), 'exit_reason_codesigning_info')
1172
1173 KNOWN_TYPES_COLLECTION[GetTypeForName('EXIT_REASON_WORKLOOP_ID')] = (
1174 KCSubTypeElement('exit_reason_workloop_id', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value))
1175
1176 KNOWN_TYPES_COLLECTION[GetTypeForName('EXIT_REASON_DISPATCH_QUEUE_NO')] = (
1177 KCSubTypeElement('exit_reason_dispatch_queue_no', KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value))
1178
1179 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_ASID')] = (
1180 KCSubTypeElement('ts_asid', KCSUBTYPE_TYPE.KC_ST_UINT32, 4, 0, 0))
1181
1182 KNOWN_TYPES_COLLECTION[GetTypeForName('STACKSHOT_KCTYPE_PAGE_TABLES')] = KCTypeDescription(GetTypeForName('STACKSHOT_KCTYPE_PAGE_TABLES'), (
1183 KCSubTypeElement(None, KCSUBTYPE_TYPE.KC_ST_UINT64, 8, 0, 0, KCSubTypeElement._get_naked_element_value), ),
1184 'ts_pagetable',
1185 merge=True,
1186 naked=True
1187 )
1188
1189 def GetSecondsFromMATime(mat, tb):
1190 return (float(mat) * tb['numer']) / tb['denom']
1191
1192 def FindLibraryForAddress(liblist, address):
1193 current_lib = None
1194 for l in liblist:
1195 if address >= l[1]:
1196 current_lib = l
1197 return current_lib
1198
1199 def FindIndexOfLibInCatalog(catalog, lib):
1200 index = None
1201 i = 0
1202 for l in catalog:
1203 if l[0] == lib[0] and l[1] == lib[1]:
1204 index = i
1205 break
1206 i += 1
1207
1208 if index is None:
1209 catalog.append(lib)
1210 index = len(catalog) - 1
1211
1212 return index
1213
1214 def GetOffsetOfAddressForLib(lib, address):
1215 return (address - lib[1])
1216
1217 def GetSymbolInfoForFrame(catalog, liblist, address):
1218 lib = FindLibraryForAddress(liblist, address)
1219 if not lib:
1220 lib = ["00000000000000000000000000000000",0,"A"]
1221 offset = GetOffsetOfAddressForLib(lib, address)
1222 index = FindIndexOfLibInCatalog(catalog, lib)
1223 return [index, offset]
1224
1225 def GetStateDescription(s):
1226 retval = []
1227 TH_WAIT = 0x01
1228 TH_SUSP = 0x02
1229 TH_RUN = 0x04
1230 TH_UNINT = 0x08
1231 TH_TERMINATE = 0x10
1232 TH_TERMINATE2 = 0x20
1233 TH_WAIT_REPORT = 0x40
1234 TH_IDLE = 0x80
1235 if (s & TH_WAIT):
1236 retval.append("TH_WAIT")
1237 if (s & TH_SUSP):
1238 retval.append("TH_SUSP")
1239 if (s & TH_RUN):
1240 retval.append("TH_RUN")
1241 if (s & TH_UNINT):
1242 retval.append("TH_UNINT")
1243 if (s & TH_TERMINATE):
1244 retval.append("TH_TERMINATE")
1245 if (s & TH_TERMINATE2):
1246 retval.append("TH_TERMINATE2")
1247 if (s & TH_WAIT_REPORT):
1248 retval.append("TH_WAIT_REPORT")
1249 if (s & TH_IDLE):
1250 retval.append("TH_IDLE")
1251 return retval
1252
1253
1254 def format_uuid(elementValues):
1255 return ''.join("%02x" % i for i in elementValues)
1256
1257 kThreadWaitNone = 0x00
1258 kThreadWaitKernelMutex = 0x01
1259 kThreadWaitPortReceive = 0x02
1260 kThreadWaitPortSetReceive = 0x03
1261 kThreadWaitPortSend = 0x04
1262 kThreadWaitPortSendInTransit = 0x05
1263 kThreadWaitSemaphore = 0x06
1264 kThreadWaitKernelRWLockRead = 0x07
1265 kThreadWaitKernelRWLockWrite = 0x08
1266 kThreadWaitKernelRWLockUpgrade = 0x09
1267 kThreadWaitUserLock = 0x0a
1268 kThreadWaitPThreadMutex = 0x0b
1269 kThreadWaitPThreadRWLockRead = 0x0c
1270 kThreadWaitPThreadRWLockWrite = 0x0d
1271 kThreadWaitPThreadCondVar = 0x0e
1272 kThreadWaitParkedWorkQueue = 0x0f
1273 kThreadWaitWorkloopSyncWait = 0x10
1274 kThreadWaitOnProcess = 0x11
1275
1276
1277 UINT64_MAX = 0xffffffffffffffff
1278 STACKSHOT_WAITOWNER_KERNEL = (UINT64_MAX - 1)
1279 STACKSHOT_WAITOWNER_PORT_LOCKED = (UINT64_MAX - 2)
1280 STACKSHOT_WAITOWNER_PSET_LOCKED = (UINT64_MAX - 3)
1281 STACKSHOT_WAITOWNER_INTRANSIT = (UINT64_MAX - 4)
1282 STACKSHOT_WAITOWNER_MTXSPIN = (UINT64_MAX - 5)
1283 STACKSHOT_WAITOWNER_THREQUESTED = (UINT64_MAX - 6)
1284 STACKSHOT_WAITOWNER_SUSPENDED = (UINT64_MAX - 7)
1285
1286 def formatWaitInfo(info):
1287 s = 'thread %d: ' % info['waiter'];
1288 type = info['wait_type']
1289 context = info['context']
1290 owner = info['owner']
1291 if type == kThreadWaitKernelMutex:
1292 s += 'kernel mutex %x' % context
1293 if owner == STACKSHOT_WAITOWNER_MTXSPIN:
1294 s += " in spin mode"
1295 elif owner:
1296 s += " owned by thread %u" % owner
1297 else:
1298 s += "with unknown owner"
1299 elif type == kThreadWaitPortReceive:
1300 s += "mach_msg receive on "
1301 if owner == STACKSHOT_WAITOWNER_PORT_LOCKED:
1302 s += "locked port %x" % context
1303 elif owner == STACKSHOT_WAITOWNER_INTRANSIT:
1304 s += "intransit port %x" % context
1305 elif owner:
1306 s += "port %x name %x" % (context, owner)
1307 else:
1308 s += "port %x" % context
1309 elif type == kThreadWaitPortSetReceive:
1310 if owner == STACKSHOT_WAITOWNER_PSET_LOCKED:
1311 s += "mach_msg receive on locked port set %x" % context
1312 else:
1313 s += "mach_msg receive on port set %x" % context
1314 elif type == kThreadWaitPortSend:
1315 s += "mach_msg send on "
1316 if owner == STACKSHOT_WAITOWNER_PORT_LOCKED:
1317 s += "locked port %x" % context
1318 elif owner == STACKSHOT_WAITOWNER_INTRANSIT:
1319 s += "intransit port %x" % context
1320 elif owner == STACKSHOT_WAITOWNER_KERNEL:
1321 s += "port %x owned by kernel" % context
1322 elif owner:
1323 s += "port %x owned by pid %d" % (context, owner)
1324 else:
1325 s += "port %x with unknown owner" % context
1326 elif type == kThreadWaitPortSendInTransit:
1327 s += "mach_msg send on port %x in transit to " % context
1328 if owner:
1329 s += "port %x" % owner
1330 else:
1331 s += "unknown port"
1332 elif type == kThreadWaitSemaphore:
1333 s += "semaphore port %x " % context
1334 if owner:
1335 s += "owned by pid %d" % owner
1336 else:
1337 s += "with unknown owner"
1338 elif type == kThreadWaitKernelRWLockRead:
1339 s += "krwlock %x for reading" % context
1340 elif type == kThreadWaitKernelRWLockWrite:
1341 s += "krwlock %x for writing" % context
1342 elif type == kThreadWaitKernelRWLockUpgrade:
1343 s += "krwlock %x for upgrading" % context
1344 elif type == kThreadWaitUserLock:
1345 if owner:
1346 s += "unfair lock %x owned by thread %d" % (context, owner)
1347 else:
1348 s += "spin lock %x" % context
1349 elif type == kThreadWaitPThreadMutex:
1350 s += "pthread mutex %x" % context
1351 if owner:
1352 s += " owned by thread %d" % owner
1353 else:
1354 s += " with unknown owner"
1355 elif type == kThreadWaitPThreadRWLockRead:
1356 s += "pthread rwlock %x for reading" % context
1357 elif type == kThreadWaitPThreadRWLockWrite:
1358 s += "pthread rwlock %x for writing" % context
1359 elif type == kThreadWaitPThreadCondVar:
1360 s += "pthread condvar %x" % context
1361 elif type == kThreadWaitWorkloopSyncWait:
1362 s += "workloop sync wait"
1363 if owner == STACKSHOT_WAITOWNER_SUSPENDED:
1364 s += ", suspended"
1365 elif owner == STACKSHOT_WAITOWNER_THREQUESTED:
1366 s += ", thread requested"
1367 elif owner != 0:
1368 s += ", owned by thread %u" % owner
1369 else:
1370 s += ", unknown owner"
1371 s += ", workloop id %x" % context
1372 elif type == kThreadWaitOnProcess:
1373 s += "waitpid, for pid %d" % owner
1374
1375 else:
1376 s += "unknown type %d (owner %d, context %x)" % (type, owner, context)
1377
1378 return s
1379
1380
1381 def SaveStackshotReport(j, outfile_name, incomplete):
1382 import time
1383 from operator import itemgetter, attrgetter
1384 ss = j.get('kcdata_stackshot')
1385 if not ss:
1386 print "No KCDATA_BUFFER_BEGIN_STACKSHOT object found. Skipping writing report."
1387 return
1388
1389 timestamp = ss.get('usecs_since_epoch', int(time.time()))
1390 try:
1391 timestamp = time.strftime("%Y-%m-%d %H:%M:%S %z",time.gmtime(timestamp))
1392 except ValueError, e:
1393 print "couldn't convert timestamp:", str(e)
1394 timestamp = None
1395
1396 os_version = ss.get('osversion', 'Unknown')
1397 timebase = ss.get('mach_timebase_info', {"denom": 1, "numer": 1})
1398
1399 dsc_common = None
1400 shared_cache_info = ss.get('shared_cache_dyld_load_info')
1401 if shared_cache_info:
1402 shared_cache_base_addr = shared_cache_info['imageSlidBaseAddress']
1403 dsc_common = [format_uuid(shared_cache_info['imageUUID']), shared_cache_info['imageSlidBaseAddress'], "S" ]
1404 print "Shared cache UUID found from the binary data is <%s> " % str(dsc_common[0])
1405
1406 dsc_layout = ss.get('system_shared_cache_layout')
1407
1408 dsc_libs = []
1409 if dsc_layout:
1410 print "Found in memory system shared cache layout with {} images".format(len(dsc_layout))
1411 slide = ss.get('shared_cache_dyld_load_info')['imageLoadAddress']
1412
1413 for image in dsc_layout:
1414 dsc_libs.append([format_uuid(image['imageUUID']), image['imageLoadAddress'] + slide, "C"])
1415
1416 AllImageCatalog = []
1417 obj = {}
1418 obj["kernel"] = os_version
1419 if timestamp is not None:
1420 obj["date"] = timestamp
1421 obj["reason"] = "kernel panic stackshot"
1422 obj["incident"] = "ABCDEFGH-1234-56IJ-789K-0LMNOPQRSTUV"
1423 obj["crashReporterKey"] = "12ab34cd45aabbccdd6712ab34cd45aabbccdd67"
1424 obj["bootArgs"] = ss.get('boot_args','')
1425 obj["frontmostPids"] = [0]
1426 obj["exception"] = "0xDEADF157"
1427 obj["processByPid"] = {}
1428
1429 if incomplete:
1430 obj["reason"] = "!!!INCOMPLETE!!! kernel panic stackshot"
1431 obj["notes"] = "This stackshot report generated from incomplete data! Some information is missing! "
1432
1433 processByPid = obj["processByPid"]
1434 ssplist = ss.get('task_snapshots', {})
1435 kern_load_info = []
1436 if "0" in ssplist:
1437 kc_uuid = ssplist["0"].get('kernelcache_load_info', None)
1438 if kc_uuid:
1439 kernelcache_uuid = [format_uuid(kc_uuid['imageUUID']), kc_uuid['imageLoadAddress'], "U" ]
1440 kern_load_info.append(kernelcache_uuid)
1441
1442 kl_infos = ssplist["0"].get("dyld_load_info", [])
1443 for dlinfo in kl_infos:
1444 kern_load_info.append([format_uuid(dlinfo['imageUUID']), dlinfo['imageLoadAddress'], "K"])
1445 for pid,piddata in ssplist.iteritems():
1446 processByPid[str(pid)] = {}
1447 tsnap = processByPid[str(pid)]
1448 pr_lib_dsc = dsc_common
1449 if 'shared_cache_dyld_load_info' in tsnap:
1450 if 'imageSlidBaseAddress' in tsnap.get('shared_cache_dyld_load_info'):
1451 shared_cache_base_addr = tsnap.get('shared_cache_dyld_load_info')['imageSlidBaseAddress']
1452 else:
1453 print "Specific task shared cache format does not include slid shared cache base address. Skipping writing report."
1454 return
1455
1456 pr_lib_dsc = [format_uuid(tsnap.get('shared_cache_dyld_load_info')['imageUUID']),
1457 tsnap.get('shared_cache_dyld_load_info')['imageSlidBaseAddress'],
1458 "S"]
1459
1460 pr_libs = []
1461 if len(dsc_libs) == 0 and pr_lib_dsc:
1462 pr_libs.append(pr_lib_dsc)
1463 _lib_type = "P"
1464 if int(pid) == 0:
1465 _lib_type = "K"
1466 pr_libs = []
1467 else:
1468 for dlinfo in piddata.get('dyld_load_info',[]):
1469 pr_libs.append([format_uuid(dlinfo['imageUUID']), dlinfo['imageLoadAddress'], _lib_type])
1470
1471 pr_libs.extend(kern_load_info)
1472 pr_libs.extend(dsc_libs)
1473
1474 pr_libs.sort(key=itemgetter(1))
1475
1476 if 'task_snapshot' not in piddata:
1477 continue
1478 tasksnap = piddata['task_snapshot']
1479 tsnap["pid"] = tasksnap["ts_pid"]
1480 if 'ts_asid' in piddata:
1481 tsnap["asid"] = piddata["ts_asid"]
1482
1483 if 'ts_pagetable' in piddata:
1484 pagetables = []
1485 for tte in piddata["ts_pagetable"]:
1486 pagetables.append(tte)
1487 tsnap["pageTables"] = pagetables
1488
1489 tsnap["residentMemoryBytes"] = tasksnap["ts_task_size"]
1490 tsnap["timesDidThrottle"] = tasksnap["ts_did_throttle"]
1491 tsnap["systemTimeTask"] = GetSecondsFromMATime(tasksnap["ts_system_time_in_terminated_th"], timebase)
1492 tsnap["pageIns"] = tasksnap["ts_pageins"]
1493 tsnap["pageFaults"] = tasksnap["ts_faults"]
1494 tsnap["userTimeTask"] = GetSecondsFromMATime(tasksnap[ "ts_user_time_in_terminated_thre"], timebase)
1495 tsnap["procname"] = tasksnap["ts_p_comm"]
1496 tsnap["copyOnWriteFaults"] = tasksnap["ts_cow_faults"]
1497 tsnap["timesThrottled"] = tasksnap["ts_was_throttled"]
1498 tsnap["threadById"] = {}
1499 threadByID = tsnap["threadById"]
1500 thlist = piddata.get('thread_snapshots', {})
1501 for tid,thdata in thlist.iteritems():
1502 threadByID[str(tid)] = {}
1503 thsnap = threadByID[str(tid)]
1504 if "thread_snapshot" not in thdata:
1505 print "Found broken thread state for thread ID: %s." % tid
1506 break
1507 threadsnap = thdata["thread_snapshot"]
1508 thsnap["userTime"] = GetSecondsFromMATime(threadsnap["ths_user_time"], timebase)
1509 thsnap["id"] = threadsnap["ths_thread_id"]
1510 thsnap["basePriority"] = threadsnap["ths_base_priority"]
1511 thsnap["systemTime"] = threadsnap["ths_sys_time"]
1512 thsnap["schedPriority"] = threadsnap["ths_sched_priority"]
1513 thsnap["state"] = GetStateDescription(threadsnap['ths_state'])
1514 thsnap["qosEffective"] = threadsnap["ths_eqos"]
1515 thsnap["qosRequested"] = threadsnap["ths_rqos"]
1516
1517 if threadsnap['ths_continuation']:
1518 thsnap["continuation"] = GetSymbolInfoForFrame(AllImageCatalog, pr_libs, threadsnap['ths_continuation'])
1519 if "kernel_stack_frames" in thdata:
1520 kuserframes = []
1521 for f in thdata["kernel_stack_frames"]:
1522 kuserframes.append(GetSymbolInfoForFrame(AllImageCatalog, pr_libs, f['lr']))
1523 thsnap["kernelFrames"] = kuserframes
1524
1525 if "user_stack_frames" in thdata:
1526 uframes = []
1527 for f in thdata["user_stack_frames"]:
1528 uframes.append(GetSymbolInfoForFrame(AllImageCatalog, pr_libs, f['lr']))
1529 thsnap["userFrames"] = uframes
1530
1531 if "user_stacktop" in thdata:
1532 (address,) = struct.unpack("<Q", struct.pack("B"*8, *thdata["user_stacktop"]["stack_contents"]))
1533 thsnap["userStacktop"] = GetSymbolInfoForFrame(AllImageCatalog, pr_libs, address)
1534
1535 if threadsnap['ths_wait_event']:
1536 thsnap["waitEvent"] = GetSymbolInfoForFrame(AllImageCatalog, pr_libs, threadsnap['ths_wait_event'])
1537
1538 if 'thread_waitinfo' in piddata:
1539 tsnap['waitInfo'] = map(formatWaitInfo, piddata['thread_waitinfo'])
1540
1541 obj['binaryImages'] = AllImageCatalog
1542 if outfile_name == '-':
1543 fh = sys.stdout
1544 else:
1545 fh = open(outfile_name, "w")
1546
1547 header = {}
1548 header['bug_type'] = 288
1549 if timestamp is not None:
1550 header['timestamp'] = timestamp
1551 header['os_version'] = os_version
1552 fh.write(json.dumps(header))
1553 fh.write("\n")
1554
1555 fh.write(json.dumps(obj, sort_keys=False, indent=2, separators=(',', ': ')))
1556 fh.close()
1557
1558 ## Base utils for interacting with shell ##
1559 def RunCommand(bash_cmd_string, get_stderr = True):
1560 """
1561 returns: (int,str) : exit_code and output_str
1562 """
1563 print "RUNNING: %s" % bash_cmd_string
1564 cmd_args = shlex.split(bash_cmd_string)
1565 output_str = ""
1566 exit_code = 0
1567 try:
1568 if get_stderr:
1569 output_str = subprocess.check_output(cmd_args, stderr=subprocess.STDOUT)
1570 else:
1571 output_str = subprocess.check_output(cmd_args, stderr=None)
1572 except subprocess.CalledProcessError, e:
1573 exit_code = e.returncode
1574 finally:
1575 return (exit_code, output_str)
1576
1577
1578 parser = argparse.ArgumentParser(description="Decode a kcdata binary file.")
1579 parser.add_argument("-l", "--listtypes", action="store_true", required=False, default=False,
1580 help="List all known types",
1581 dest="list_known_types")
1582
1583 parser.add_argument("-s", "--stackshot", required=False, default=False,
1584 help="Generate a stackshot report file",
1585 dest="stackshot_file")
1586
1587 parser.add_argument("--multiple", help="look for multiple stackshots in a single file", action='store_true')
1588
1589 parser.add_argument("-p", "--plist", required=False, default=False,
1590 help="output as plist", action="store_true")
1591
1592 parser.add_argument("-S", "--sdk", required=False, default="", help="sdk property passed to xcrun command to find the required tools. Default is empty string.", dest="sdk")
1593 parser.add_argument("--pretty", default=False, action='store_true', help="make the output a little more human readable")
1594 parser.add_argument("--incomplete", action='store_true', help="accept incomplete data")
1595 parser.add_argument("kcdata_file", type=argparse.FileType('r'), help="Path to a kcdata binary file.")
1596
1597 class VerboseAction(argparse.Action):
1598 def __call__(self, parser, namespace, values, option_string=None):
1599 logging.basicConfig(level=logging.INFO, stream=sys.stderr, format='%(message)s')
1600 parser.add_argument('-v', "--verbose", action=VerboseAction, nargs=0)
1601
1602 @contextlib.contextmanager
1603 def data_from_stream(stream):
1604 try:
1605 fmap = mmap.mmap(stream.fileno(), 0, mmap.MAP_SHARED, mmap.PROT_READ)
1606 except:
1607 yield stream.read()
1608 else:
1609 try:
1610 yield fmap
1611 finally:
1612 fmap.close()
1613
1614 def iterate_kcdatas(kcdata_file):
1615 with data_from_stream(kcdata_file) as data:
1616 iterator = kcdata_item_iterator(data)
1617 kcdata_buffer = KCObject.FromKCItem(iterator.next())
1618 if not isinstance(kcdata_buffer, KCBufferObject):
1619 try:
1620 decoded = base64.b64decode(data)
1621 except:
1622 pass
1623 else:
1624 iterator = kcdata_item_iterator(decoded)
1625 kcdata_buffer = KCObject.FromKCItem(iterator.next())
1626 if not isinstance(kcdata_buffer, KCBufferObject):
1627 import gzip
1628 from io import BytesIO
1629 try:
1630 decompressed = gzip.GzipFile(fileobj=BytesIO(data[:])).read()
1631 except:
1632 pass
1633 else:
1634 iterator = kcdata_item_iterator(decompressed)
1635 kcdata_buffer = KCObject.FromKCItem(iterator.next())
1636 if not isinstance(kcdata_buffer, KCBufferObject):
1637 raise Exception, "unknown file type"
1638
1639 kcdata_buffer.ReadItems(iterator)
1640 yield kcdata_buffer
1641
1642 for magic in iterator:
1643 kcdata_buffer = KCObject.FromKCItem(magic)
1644 if not isinstance(kcdata_buffer, KCBufferObject):
1645 raise Exception, "unknown file type"
1646 kcdata_buffer.ReadItems(iterator)
1647 yield kcdata_buffer
1648
1649
1650 def prettify(data):
1651 if isinstance(data, list):
1652 return map(prettify, data);
1653
1654 elif isinstance(data, dict):
1655 newdata = dict()
1656 for key, value in data.items():
1657 if 'uuid' in key.lower() and isinstance(value, list) and len(value) == 16:
1658 value = '%02X%02X%02X%02X-%02X%02X-%02X%02X-%02X%02X-%02X%02X%02X%02X%02X%02X' % tuple(value)
1659 elif 'address' in key.lower() and isinstance(value, (int, long)):
1660 value = '0x%X' % value
1661 elif key == 'lr':
1662 value = '0x%X' % value
1663 elif key == 'thread_waitinfo':
1664 value = map(formatWaitInfo, value)
1665 elif key == 'stack_contents':
1666 print value
1667 (address,) = struct.unpack("<Q", struct.pack("B"*8, *value))
1668 value = '0x%X' % address
1669 else:
1670 value = prettify(value);
1671 newdata[key] = value
1672
1673 return newdata
1674
1675 else:
1676 return data
1677
1678
1679 if __name__ == '__main__':
1680 args = parser.parse_args()
1681
1682 if args.multiple and args.stackshot_file:
1683 raise NotImplementedError
1684
1685 if args.list_known_types:
1686 for (n, t) in KNOWN_TYPES_COLLECTION.items():
1687 print "%d : %s " % (n, str(t))
1688 sys.exit(1)
1689
1690 if args.incomplete or args.stackshot_file:
1691 G.accept_incomplete_data = True
1692
1693 for i,kcdata_buffer in enumerate(iterate_kcdatas(args.kcdata_file)):
1694 if i > 0 and not args.multiple:
1695 break
1696
1697 str_data = "{" + kcdata_buffer.GetJsonRepr() + "}"
1698 str_data = str_data.replace("\t", " ")
1699
1700 try:
1701 json_obj = json.loads(str_data)
1702 except:
1703 print >>sys.stderr, "JSON reparsing failed! Printing string data!\n"
1704 import textwrap
1705 print textwrap.fill(str_data, 100)
1706 raise
1707
1708 if args.pretty:
1709 json_obj = prettify(json_obj)
1710
1711 if args.stackshot_file:
1712 SaveStackshotReport(json_obj, args.stackshot_file, G.data_was_incomplete)
1713 elif args.plist:
1714 import Foundation
1715 plist = Foundation.NSPropertyListSerialization.dataWithPropertyList_format_options_error_(
1716 json_obj, Foundation.NSPropertyListXMLFormat_v1_0, 0, None)[0].bytes().tobytes()
1717 #sigh. on some pythons long integers are getting output with L's in the plist.
1718 plist = re.sub(r'^(\s*<integer>\d+)L(</integer>\s*)$', r"\1\2", plist, flags=re.MULTILINE)
1719 print plist,
1720 else:
1721 print json.dumps(json_obj, sort_keys=True, indent=4, separators=(',', ': '))
mirror of XNU