+#include <sys/cdefs.h>
+#include <stdint.h>
+#include <uuid/uuid.h>
+#include <mach/boolean.h>
+
+#ifndef XNU_KERNEL_PRIVATE
+#include <TargetConditionals.h>
+#endif
+
+#ifdef __APPLE_API_PRIVATE
+#ifdef __APPLE_API_UNSTABLE
+
+/* This value must always match IO_NUM_PRIORITIES defined in thread_info.h */
+#define STACKSHOT_IO_NUM_PRIORITIES 4
+/* This value must always match MAXTHREADNAMESIZE used in bsd */
+#define STACKSHOT_MAX_THREAD_NAME_SIZE 64
+
+struct thread_snapshot {
+ uint32_t snapshot_magic;
+ uint32_t nkern_frames;
+ uint32_t nuser_frames;
+ uint64_t wait_event;
+ uint64_t continuation;
+ uint64_t thread_id;
+ uint64_t user_time;
+ uint64_t system_time;
+ int32_t state;
+ int32_t priority; /* static priority */
+ int32_t sched_pri; /* scheduled (current) priority */
+ int32_t sched_flags; /* scheduler flags */
+ char ss_flags;
+ char ts_qos; /* effective qos */
+ char ts_rqos; /* requested qos */
+ char ts_rqos_override; /* requested qos override */
+ char io_tier;
+ char _reserved[3]; /* pad for 4 byte alignement packing */
+
+ /*
+ * I/O Statistics
+ * XXX: These fields must be together
+ */
+ uint64_t disk_reads_count;
+ uint64_t disk_reads_size;
+ uint64_t disk_writes_count;
+ uint64_t disk_writes_size;
+ uint64_t io_priority_count[STACKSHOT_IO_NUM_PRIORITIES];
+ uint64_t io_priority_size[STACKSHOT_IO_NUM_PRIORITIES];
+ uint64_t paging_count;
+ uint64_t paging_size;
+ uint64_t non_paging_count;
+ uint64_t non_paging_size;
+ uint64_t data_count;
+ uint64_t data_size;
+ uint64_t metadata_count;
+ uint64_t metadata_size;
+ /* XXX: I/O Statistics end */
+
+ uint64_t voucher_identifier; /* obfuscated voucher identifier */
+ uint64_t total_syscalls;
+ char pth_name[STACKSHOT_MAX_THREAD_NAME_SIZE];
+
+} __attribute__ ((packed));
+
+struct thread_snapshot_v2 {
+ uint64_t ths_thread_id;
+ uint64_t ths_wait_event;
+ uint64_t ths_continuation;
+ uint64_t ths_total_syscalls;
+ uint64_t ths_voucher_identifier;
+ uint64_t ths_dqserialnum;
+ uint64_t ths_user_time;
+ uint64_t ths_sys_time;
+ uint64_t ths_ss_flags;
+ uint64_t ths_last_run_time;
+ uint64_t ths_last_made_runnable_time;
+ uint32_t ths_state;
+ uint32_t ths_sched_flags;
+ int16_t ths_base_priority;
+ int16_t ths_sched_priority;
+ uint8_t ths_eqos;
+ uint8_t ths_rqos;
+ uint8_t ths_rqos_override;
+ uint8_t ths_io_tier;
+} __attribute__ ((packed));
+
+struct task_snapshot {
+ uint32_t snapshot_magic;
+ int32_t pid;
+ uint64_t uniqueid;
+ uint64_t user_time_in_terminated_threads;
+ uint64_t system_time_in_terminated_threads;
+ uint8_t shared_cache_identifier[16];
+ uint64_t shared_cache_slide;
+ uint32_t nloadinfos;
+ int suspend_count;
+ int task_size; /* pages */
+ int faults; /* number of page faults */
+ int pageins; /* number of actual pageins */
+ int cow_faults; /* number of copy-on-write faults */
+ uint32_t ss_flags;
+ uint64_t p_start_sec; /* from the bsd proc struct */
+ uint64_t p_start_usec; /* from the bsd proc struct */
+
+ /*
+ * We restrict ourselves to a statically defined
+ * (current as of 2009) length for the
+ * p_comm string, due to scoping issues (osfmk/bsd and user/kernel
+ * binary compatibility).
+ */
+ char p_comm[17];
+ uint32_t was_throttled;
+ uint32_t did_throttle;
+ uint32_t latency_qos;
+ /*
+ * I/O Statistics
+ * XXX: These fields must be together.
+ */
+ uint64_t disk_reads_count;
+ uint64_t disk_reads_size;
+ uint64_t disk_writes_count;
+ uint64_t disk_writes_size;
+ uint64_t io_priority_count[STACKSHOT_IO_NUM_PRIORITIES];
+ uint64_t io_priority_size[STACKSHOT_IO_NUM_PRIORITIES];
+ uint64_t paging_count;
+ uint64_t paging_size;
+ uint64_t non_paging_count;
+ uint64_t non_paging_size;
+ uint64_t data_count;
+ uint64_t data_size;
+ uint64_t metadata_count;
+ uint64_t metadata_size;
+ /* XXX: I/O Statistics end */
+
+ uint32_t donating_pid_count;
+
+} __attribute__ ((packed));
+
+struct io_stats_snapshot
+{
+ /*
+ * I/O Statistics
+ * XXX: These fields must be together.
+ */
+ uint64_t ss_disk_reads_count;
+ uint64_t ss_disk_reads_size;
+ uint64_t ss_disk_writes_count;
+ uint64_t ss_disk_writes_size;
+ uint64_t ss_io_priority_count[STACKSHOT_IO_NUM_PRIORITIES];
+ uint64_t ss_io_priority_size[STACKSHOT_IO_NUM_PRIORITIES];
+ uint64_t ss_paging_count;
+ uint64_t ss_paging_size;
+ uint64_t ss_non_paging_count;
+ uint64_t ss_non_paging_size;
+ uint64_t ss_data_count;
+ uint64_t ss_data_size;
+ uint64_t ss_metadata_count;
+ uint64_t ss_metadata_size;
+ /* XXX: I/O Statistics end */
+
+} __attribute__ ((packed));
+
+struct task_snapshot_v2 {
+ uint64_t ts_unique_pid;
+ uint64_t ts_ss_flags;
+ uint64_t ts_user_time_in_terminated_threads;
+ uint64_t ts_system_time_in_terminated_threads;
+ uint64_t ts_p_start_sec;
+ uint64_t ts_task_size;
+ uint64_t ts_max_resident_size;
+ uint32_t ts_suspend_count;
+ uint32_t ts_faults;
+ uint32_t ts_pageins;
+ uint32_t ts_cow_faults;
+ uint32_t ts_was_throttled;
+ uint32_t ts_did_throttle;
+ uint32_t ts_latency_qos;
+ int32_t ts_pid;
+ char ts_p_comm[32];
+} __attribute__ ((packed));
+
+struct micro_snapshot {
+ uint32_t snapshot_magic;
+ uint32_t ms_cpu; /* cpu number this snapshot was recorded on */
+ uint64_t ms_time; /* time at sample (seconds) */
+ uint64_t ms_time_microsecs;
+ uint8_t ms_flags;
+ uint16_t ms_opaque_flags; /* managed by external entity, e.g. fdrmicrod */
+} __attribute__ ((packed));
+
+struct mem_and_io_snapshot {
+ uint32_t snapshot_magic;
+ uint32_t free_pages;
+ uint32_t active_pages;
+ uint32_t inactive_pages;
+ uint32_t purgeable_pages;
+ uint32_t wired_pages;
+ uint32_t speculative_pages;
+ uint32_t throttled_pages;
+ uint32_t filebacked_pages;
+ uint32_t compressions;
+ uint32_t decompressions;
+ uint32_t compressor_size;
+ int busy_buffer_count;
+ uint32_t pages_wanted;
+ uint32_t pages_reclaimed;
+ uint8_t pages_wanted_reclaimed_valid; // did mach_vm_pressure_monitor succeed?
+} __attribute__((packed));
+
+struct stack_snapshot_frame32 {
+ uint32_t lr;
+ uint32_t sp;
+};
+
+struct stack_snapshot_frame64 {
+ uint64_t lr;
+ uint64_t sp;
+};
+
+struct _dyld_cache_header
+{
+ char magic[16]; // e.g. "dyld_v0 i386"
+ uint32_t mappingOffset; // file offset to first dyld_cache_mapping_info
+ uint32_t mappingCount; // number of dyld_cache_mapping_info entries
+ uint32_t imagesOffset; // file offset to first dyld_cache_image_info
+ uint32_t imagesCount; // number of dyld_cache_image_info entries
+ uint64_t dyldBaseAddress; // base address of dyld when cache was built
+ uint64_t codeSignatureOffset; // file offset of code signature blob
+ uint64_t codeSignatureSize; // size of code signature blob (zero means to end of file)
+ uint64_t slideInfoOffset; // file offset of kernel slid info
+ uint64_t slideInfoSize; // size of kernel slid info
+ uint64_t localSymbolsOffset; // file offset of where local symbols are stored
+ uint64_t localSymbolsSize; // size of local symbols information
+ uint8_t uuid[16]; // unique value for each shared cache file
+};
+
+struct dyld_uuid_info_32 {
+ uint32_t imageLoadAddress; /* base address image is mapped at */
+ uuid_t imageUUID;
+};
+
+struct dyld_uuid_info_64 {
+ uint64_t imageLoadAddress; /* base address image is mapped at */
+ uuid_t imageUUID;
+};
+
+enum micro_snapshot_flags {
+ kInterruptRecord = 0x1,
+ kTimerArmingRecord = 0x2,
+ kUserMode = 0x4, /* interrupted usermode, or armed by usermode */
+};
+
+/*
+ * Flags used in the following assortment of snapshots.
+ */
+enum generic_snapshot_flags {
+ kUser64_p = 0x1,
+ kKernel64_p = 0x2
+};
+
+enum task_snapshot_flags {
+ kTaskRsrcFlagged = 0x4, // In the EXC_RESOURCE danger zone?
+ kTerminatedSnapshot = 0x8,
+ kPidSuspended = 0x10, // true for suspended task
+ kFrozen = 0x20, // true for hibernated task (along with pidsuspended)
+ kTaskDarwinBG = 0x40,
+ kTaskExtDarwinBG = 0x80,
+ kTaskVisVisible = 0x100,
+ kTaskVisNonvisible = 0x200,
+ kTaskIsForeground = 0x400,
+ kTaskIsBoosted = 0x800,
+ kTaskIsSuppressed = 0x1000,
+ kTaskIsTimerThrottled = 0x2000, /* deprecated */
+ kTaskIsImpDonor = 0x4000,
+ kTaskIsLiveImpDonor = 0x8000
+};