xref: /xnu-10063.141.1/tools/cred_dump_backtraces.c (revision d8b80295118ef25ac3a784134bcf95cd8e88109f)
1*d8b80295SApple OSS Distributions /* quick and dirty hack to grab credential backtrace info from kernel via sysctl.
2*d8b80295SApple OSS Distributions  * sysctl is only defined if xnu is built with DEBUG_CRED defined.
3*d8b80295SApple OSS Distributions  * The current version of this is used to target a specific credential and gather
4*d8b80295SApple OSS Distributions  * backtrace info on all references and unreferences.
5*d8b80295SApple OSS Distributions  */
6*d8b80295SApple OSS Distributions 
7*d8b80295SApple OSS Distributions #include <stdio.h>
8*d8b80295SApple OSS Distributions #include <stdlib.h>
9*d8b80295SApple OSS Distributions #include <fcntl.h>
10*d8b80295SApple OSS Distributions #include <limits.h>
11*d8b80295SApple OSS Distributions #include <string.h>
12*d8b80295SApple OSS Distributions #include <errno.h>
13*d8b80295SApple OSS Distributions #include <unistd.h>
14*d8b80295SApple OSS Distributions #include <sys/stat.h>
15*d8b80295SApple OSS Distributions #include <sys/types.h>
16*d8b80295SApple OSS Distributions #include <sys/sysctl.h>
17*d8b80295SApple OSS Distributions #include <bsm/audit.h>
18*d8b80295SApple OSS Distributions 
19*d8b80295SApple OSS Distributions /* bad!  this is replicated in kern_credential.c.  make sure they stay in sync!
20*d8b80295SApple OSS Distributions  * Or better yet have commone header file?
21*d8b80295SApple OSS Distributions  */
22*d8b80295SApple OSS Distributions #define MAX_STACK_DEPTH 8
23*d8b80295SApple OSS Distributions struct cred_backtrace {
24*d8b80295SApple OSS Distributions 	int                             depth;
25*d8b80295SApple OSS Distributions 	uint32_t                stack[MAX_STACK_DEPTH];
26*d8b80295SApple OSS Distributions };
27*d8b80295SApple OSS Distributions typedef struct cred_backtrace cred_backtrace;
28*d8b80295SApple OSS Distributions 
29*d8b80295SApple OSS Distributions struct cred_debug_buffer {
30*d8b80295SApple OSS Distributions 	int                             next_slot;
31*d8b80295SApple OSS Distributions 	cred_backtrace  stack_buffer[1];
32*d8b80295SApple OSS Distributions };
33*d8b80295SApple OSS Distributions typedef struct cred_debug_buffer cred_debug_buffer;
34*d8b80295SApple OSS Distributions 
35*d8b80295SApple OSS Distributions 
main(int argc,char * argv[])36*d8b80295SApple OSS Distributions main( int argc, char *argv[] )
37*d8b80295SApple OSS Distributions {
38*d8b80295SApple OSS Distributions 	int                             err, i, j;
39*d8b80295SApple OSS Distributions 	size_t                  len;
40*d8b80295SApple OSS Distributions 	char                        *my_bufferp = NULL;
41*d8b80295SApple OSS Distributions 	cred_debug_buffer       *bt_buffp;
42*d8b80295SApple OSS Distributions 	cred_backtrace          *btp;
43*d8b80295SApple OSS Distributions 
44*d8b80295SApple OSS Distributions 	/* get size of buffer we will need */
45*d8b80295SApple OSS Distributions 	len = 0;
46*d8b80295SApple OSS Distributions 	err = sysctlbyname( "kern.cred_bt", NULL, &len, NULL, 0 );
47*d8b80295SApple OSS Distributions 	if (err != 0) {
48*d8b80295SApple OSS Distributions 		printf( "sysctl failed  \n" );
49*d8b80295SApple OSS Distributions 		printf( "\terrno %d - \"%s\" \n", errno, strerror( errno ));
50*d8b80295SApple OSS Distributions 		return;
51*d8b80295SApple OSS Distributions 	}
52*d8b80295SApple OSS Distributions 
53*d8b80295SApple OSS Distributions 	/* get a buffer for our back traces */
54*d8b80295SApple OSS Distributions 	my_bufferp = malloc( len );
55*d8b80295SApple OSS Distributions 	if (my_bufferp == NULL) {
56*d8b80295SApple OSS Distributions 		printf( "malloc error %d - \"%s\" \n", errno, strerror( errno ));
57*d8b80295SApple OSS Distributions 		return;
58*d8b80295SApple OSS Distributions 	}
59*d8b80295SApple OSS Distributions 	err = sysctlbyname( "kern.cred_bt", my_bufferp, &len, NULL, 0 );
60*d8b80295SApple OSS Distributions 	if (err != 0) {
61*d8b80295SApple OSS Distributions 		printf( "sysctl 2 failed  \n" );
62*d8b80295SApple OSS Distributions 		printf( "\terrno %d - \"%s\" \n", errno, strerror( errno ));
63*d8b80295SApple OSS Distributions 		return;
64*d8b80295SApple OSS Distributions 	}
65*d8b80295SApple OSS Distributions 
66*d8b80295SApple OSS Distributions 	bt_buffp = (cred_debug_buffer *) my_bufferp;
67*d8b80295SApple OSS Distributions 	btp = &bt_buffp->stack_buffer[0];
68*d8b80295SApple OSS Distributions 
69*d8b80295SApple OSS Distributions 	printf("number of traces %d \n", bt_buffp->next_slot);
70*d8b80295SApple OSS Distributions 	for (i = 0; i < bt_buffp->next_slot; i++, btp++) {
71*d8b80295SApple OSS Distributions 		printf("[%d] ", i);
72*d8b80295SApple OSS Distributions 		for (j = 0; j < btp->depth; j++) {
73*d8b80295SApple OSS Distributions 			printf("%p ", btp->stack[j]);
74*d8b80295SApple OSS Distributions 		}
75*d8b80295SApple OSS Distributions 		printf("\n");
76*d8b80295SApple OSS Distributions 	}
77*d8b80295SApple OSS Distributions 
78*d8b80295SApple OSS Distributions 	return;
79*d8b80295SApple OSS Distributions }
80