X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/3e170ce000f1506b7b5d2c5c7faec85ceabb573d..4ba76501152d51ccb5647018f3192c6096367d48:/tools/lldbmacros/core/operating_system.py diff --git a/tools/lldbmacros/core/operating_system.py b/tools/lldbmacros/core/operating_system.py old mode 100644 new mode 100755 index 38ee0b4fc..c1fc18cc3 --- a/tools/lldbmacros/core/operating_system.py +++ b/tools/lldbmacros/core/operating_system.py @@ -649,6 +649,32 @@ def IterateQueue(queue_head, element_ptr_type, element_field_name): yield elt cur_elt = elt.GetChildMemberWithName(element_field_name).GetChildMemberWithName('next') +def IterateCircleQueue(queue_head, element_ptr_type, element_field_name): + """ iterate over a circle queue in kernel of type circle_queue_head_t. refer to osfmk/kern/circle_queue.h + params: + queue_head - lldb.SBValue : Value object for queue_head. + element_type - lldb.SBType : a pointer type of the element 'next' points to. Typically its structs like thread, task etc.. + element_field_name - str : name of the field in target struct. + returns: + A generator does not return. It is used for iterating. + SBValue : an object thats of type (element_type) queue_head->next. Always a pointer object + """ + head = queue_head.head + queue_head_addr = 0x0 + if head.TypeIsPointerType(): + queue_head_addr = head.GetValueAsUnsigned() + else: + queue_head_addr = head.GetAddress().GetLoadAddress(osplugin_target_obj) + cur_elt = head + while True: + if not cur_elt.IsValid() or cur_elt.GetValueAsUnsigned() == 0: + break + elt = cur_elt.Cast(element_ptr_type) + yield elt + cur_elt = elt.GetChildMemberWithName(element_field_name).GetChildMemberWithName('next') + if cur_elt.GetValueAsUnsigned() == queue_head_addr: + break + def GetUniqueSessionID(process_obj): """ Create a unique session identifier. params: @@ -670,7 +696,7 @@ def GetUniqueSessionID(process_obj): return hash(session_key_str) -(archX86_64, archARMv7_family, archI386, archARMv8) = ("x86_64", ("armv7", "armv7s", "armv7k") , "i386", "arm64") +(archX86_64, archARMv7, archI386, archARMv8) = ("x86_64", "armv7", "i386", "arm64") class OperatingSystemPlugIn(object): """Class that provides data for an instance of a LLDB 'OperatingSystemPython' plug-in class""" @@ -712,11 +738,12 @@ class OperatingSystemPlugIn(object): print "Target arch: x86_64" self.register_set = X86_64RegisterSet() self.kernel_context_size = self._target.FindFirstType('x86_kernel_state').GetByteSize() - elif arch in archARMv7_family : + self.kernel_thread_state_size = self._target.FindFirstType('struct thread_kernel_state').GetByteSize() + elif arch.startswith(archARMv7) : self.target_arch = arch print "Target arch: " + self.target_arch self.register_set = Armv7_RegisterSet() - elif arch == archARMv8: + elif arch.startswith(archARMv8): self.target_arch = arch print "Target arch: " + self.target_arch self.register_set = Armv8_RegisterSet() @@ -734,7 +761,7 @@ class OperatingSystemPlugIn(object): print "Instantiating threads completely from saved state in memory." def create_thread(self, tid, context): - # if tid is deadbeef means its a custom thread which kernel does not know of. + # tid == deadbeef means its a custom thread which kernel does not know of. if tid == 0xdeadbeef : # tid manipulation should be the same as in "switchtoregs" code in lldbmacros/process.py . tid = 0xdead0000 | (context & ~0xffff0000) @@ -872,21 +899,21 @@ class OperatingSystemPlugIn(object): if int(PluginValue(thobj).GetChildMemberWithName('kernel_stack').GetValueAsUnsigned()) != 0 : if self.target_arch == archX86_64 : # we do have a stack so lets get register information - saved_state_addr = PluginValue(thobj).GetChildMemberWithName('kernel_stack').GetValueAsUnsigned() + self.kernel_stack_size - self.kernel_context_size + saved_state_addr = PluginValue(thobj).GetChildMemberWithName('kernel_stack').GetValueAsUnsigned() + self.kernel_stack_size - self.kernel_thread_state_size regs.ReadRegisterDataFromKernelStack(saved_state_addr, self.version) return regs.GetPackedRegisterState() - elif self.target_arch in archARMv7_family and int(PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned()) != 0: + elif self.target_arch.startswith(archARMv7) and int(PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned()) != 0: #we have stack on the machine.kstackptr. saved_state_addr = PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned() regs.ReadRegisterDataFromKernelStack(saved_state_addr, self.version) return regs.GetPackedRegisterState() - elif self.target_arch == archARMv8 and int(PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned()) != 0: + elif self.target_arch.startswith(archARMv8) and int(PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned()) != 0: saved_state_addr = PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned() arm_ctx = PluginValue(self.version.CreateValueFromExpression(None, '(struct arm_context *) ' + str(saved_state_addr))) ss_64_addr = arm_ctx.GetChildMemberWithName('ss').GetChildMemberWithName('uss').GetChildMemberWithName('ss_64').GetLoadAddress() regs.ReadRegisterDataFromKernelStack(ss_64_addr, self.version) return regs.GetPackedRegisterState() - elif self.target_arch == archX86_64 or self.target_arch in archARMv7_family or self.target_arch == archARMv8: + elif self.target_arch == archX86_64 or self.target_arch.startswith(archARMv7) or self.target_arch.startswith(archARMv8): regs.ReadRegisterDataFromContinuation( PluginValue(thobj).GetChildMemberWithName('continuation').GetValueAsUnsigned()) return regs.GetPackedRegisterState() #incase we failed very miserably @@ -896,4 +923,3 @@ class OperatingSystemPlugIn(object): print "FATAL ERROR: Failed to get register state for thread id 0x%x " % tid print thobj return regs.GetPackedRegisterState() -