1*8d741a5dSApple OSS Distributions#!/usr/bin/python 2*8d741a5dSApple OSS Distributions# 3*8d741a5dSApple OSS Distributions 4*8d741a5dSApple OSS Distributions#source of register info is from http://opensource.apple.com/source/gdb/gdb-962/src/gdb/arm-tdep.c 5*8d741a5dSApple OSS Distributionsimport struct 6*8d741a5dSApple OSS Distributionsimport lldb 7*8d741a5dSApple OSS Distributions 8*8d741a5dSApple OSS Distributions 9*8d741a5dSApple OSS Distributionsosplugin_target_obj = None 10*8d741a5dSApple OSS Distributions 11*8d741a5dSApple OSS Distributionsclass PluginValue(lldb.SBValue): 12*8d741a5dSApple OSS Distributions def GetChildMemberWithName(val, name): 13*8d741a5dSApple OSS Distributions val_type = val.GetType() 14*8d741a5dSApple OSS Distributions if val_type.IsPointerType(): 15*8d741a5dSApple OSS Distributions val_type = val_type.GetPointeeType() 16*8d741a5dSApple OSS Distributions for i in range(val_type.GetNumberOfFields()): 17*8d741a5dSApple OSS Distributions if name == val_type.GetFieldAtIndex(i).GetName(): 18*8d741a5dSApple OSS Distributions return PluginValue(val.GetChildAtIndex(i)) 19*8d741a5dSApple OSS Distributions return None 20*8d741a5dSApple OSS Distributions 21*8d741a5dSApple OSS Distributionsclass Armv8_RegisterSet(object): 22*8d741a5dSApple OSS Distributions """ register info set for armv8 64 bit architecture""" 23*8d741a5dSApple OSS Distributions register_info = { 'sets' : ['GPR'], 24*8d741a5dSApple OSS Distributions 'registers': [ 25*8d741a5dSApple OSS Distributions {'name': 'x0' , 'bitsize':64, 'offset': 0, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 0, 'dwarf': 0, 'alt-name':'arg1', 'generic':'arg1'}, 26*8d741a5dSApple OSS Distributions {'name': 'x1' , 'bitsize':64, 'offset': 8, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 1, 'dwarf': 1, 'alt-name':'arg2', 'generic':'arg2'}, 27*8d741a5dSApple OSS Distributions {'name': 'x2' , 'bitsize':64, 'offset': 16, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 2, 'dwarf': 2, 'alt-name':'arg3', 'generic':'arg3'}, 28*8d741a5dSApple OSS Distributions {'name': 'x3' , 'bitsize':64, 'offset': 24, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 3, 'dwarf': 3, 'alt-name':'arg4', 'generic':'arg4'}, 29*8d741a5dSApple OSS Distributions {'name': 'x4' , 'bitsize':64, 'offset': 32, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 4, 'dwarf': 4, 'alt-name':'arg5', 'generic':'arg5'}, 30*8d741a5dSApple OSS Distributions {'name': 'x5' , 'bitsize':64, 'offset': 40, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 5, 'dwarf': 5, 'alt-name':'arg6', 'generic':'arg6'}, 31*8d741a5dSApple OSS Distributions {'name': 'x6' , 'bitsize':64, 'offset': 48, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 6, 'dwarf': 6, 'alt-name':'arg7', 'generic':'arg7'}, 32*8d741a5dSApple OSS Distributions {'name': 'x7' , 'bitsize':64, 'offset': 56, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 7, 'dwarf': 7, 'alt-name':'arg8', 'generic':'arg8'}, 33*8d741a5dSApple OSS Distributions {'name': 'x8' , 'bitsize':64, 'offset': 64, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 8, 'dwarf': 8}, 34*8d741a5dSApple OSS Distributions {'name': 'x9' , 'bitsize':64, 'offset': 72, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 9, 'dwarf': 9}, 35*8d741a5dSApple OSS Distributions {'name': 'x10' , 'bitsize':64, 'offset': 80, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':10, 'dwarf':10}, 36*8d741a5dSApple OSS Distributions {'name': 'x11' , 'bitsize':64, 'offset': 88, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':11, 'dwarf':11}, 37*8d741a5dSApple OSS Distributions {'name': 'x12' , 'bitsize':64, 'offset': 96, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':12, 'dwarf':12}, 38*8d741a5dSApple OSS Distributions {'name': 'x13' , 'bitsize':64, 'offset':104, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':13, 'dwarf':13}, 39*8d741a5dSApple OSS Distributions {'name': 'x14' , 'bitsize':64, 'offset':112, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':14, 'dwarf':14}, 40*8d741a5dSApple OSS Distributions {'name': 'x15' , 'bitsize':64, 'offset':120, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':15, 'dwarf':15}, 41*8d741a5dSApple OSS Distributions {'name': 'x16' , 'bitsize':64, 'offset':128, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':16, 'dwarf':16}, 42*8d741a5dSApple OSS Distributions {'name': 'x17' , 'bitsize':64, 'offset':136, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':17, 'dwarf':17}, 43*8d741a5dSApple OSS Distributions {'name': 'x18' , 'bitsize':64, 'offset':144, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':18, 'dwarf':18}, 44*8d741a5dSApple OSS Distributions {'name': 'x19' , 'bitsize':64, 'offset':152, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':19, 'dwarf':19}, 45*8d741a5dSApple OSS Distributions {'name': 'x20' , 'bitsize':64, 'offset':160, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':20, 'dwarf':20}, 46*8d741a5dSApple OSS Distributions {'name': 'x21' , 'bitsize':64, 'offset':168, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':21, 'dwarf':21}, 47*8d741a5dSApple OSS Distributions {'name': 'x22' , 'bitsize':64, 'offset':176, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':22, 'dwarf':22}, 48*8d741a5dSApple OSS Distributions {'name': 'x23' , 'bitsize':64, 'offset':184, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':23, 'dwarf':23}, 49*8d741a5dSApple OSS Distributions {'name': 'x24' , 'bitsize':64, 'offset':192, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':24, 'dwarf':24}, 50*8d741a5dSApple OSS Distributions {'name': 'x25' , 'bitsize':64, 'offset':200, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':25, 'dwarf':25}, 51*8d741a5dSApple OSS Distributions {'name': 'x26' , 'bitsize':64, 'offset':208, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':26, 'dwarf':26}, 52*8d741a5dSApple OSS Distributions {'name': 'x27' , 'bitsize':64, 'offset':216, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':27, 'dwarf':27}, 53*8d741a5dSApple OSS Distributions {'name': 'x28' , 'bitsize':64, 'offset':224, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':28, 'dwarf':28}, 54*8d741a5dSApple OSS Distributions {'name': 'fp' , 'bitsize':64, 'offset':232, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':29, 'dwarf':29, 'alt-name': 'fp', 'generic':'fp'}, 55*8d741a5dSApple OSS Distributions {'name': 'lr' , 'bitsize':64, 'offset':240, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':30, 'dwarf':30, 'alt-name': 'lr', 'generic':'lr'}, 56*8d741a5dSApple OSS Distributions {'name': 'sp' , 'bitsize':64, 'offset':248, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':31, 'dwarf':31, 'alt-name': 'sp', 'generic':'sp'}, 57*8d741a5dSApple OSS Distributions {'name': 'pc' , 'bitsize':64, 'offset':256, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':32, 'dwarf':32, 'alt-name': 'pc', 'generic':'pc'}, 58*8d741a5dSApple OSS Distributions {'name': 'far' , 'bitsize':64, 'offset':264, 'encoding':'uint', 'format':'hex', 'set':0}, 59*8d741a5dSApple OSS Distributions {'name': 'cpsr', 'bitsize':32, 'offset':272, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':33, 'dwarf':33, 'generic':'flags'}, 60*8d741a5dSApple OSS Distributions {'name': 'esr' , 'bitsize':32, 'offset':276, 'encoding':'uint', 'format':'hex', 'set':0}, 61*8d741a5dSApple OSS Distributions ] 62*8d741a5dSApple OSS Distributions } 63*8d741a5dSApple OSS Distributions 64*8d741a5dSApple OSS Distributions def __init__(self): 65*8d741a5dSApple OSS Distributions self.switch_context_address = osplugin_target_obj.FindSymbols('Switch_context')[0].GetSymbol().GetStartAddress().GetLoadAddress(osplugin_target_obj) 66*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 67*8d741a5dSApple OSS Distributions def ResetRegisterValues(self): 68*8d741a5dSApple OSS Distributions self.x0 = 0 69*8d741a5dSApple OSS Distributions self.x1 = 0 70*8d741a5dSApple OSS Distributions self.x2 = 0 71*8d741a5dSApple OSS Distributions self.x3 = 0 72*8d741a5dSApple OSS Distributions self.x4 = 0 73*8d741a5dSApple OSS Distributions self.x5 = 0 74*8d741a5dSApple OSS Distributions self.x6 = 0 75*8d741a5dSApple OSS Distributions self.x7 = 0 76*8d741a5dSApple OSS Distributions self.x8 = 0 77*8d741a5dSApple OSS Distributions self.x9 = 0 78*8d741a5dSApple OSS Distributions self.x10 = 0 79*8d741a5dSApple OSS Distributions self.x11 = 0 80*8d741a5dSApple OSS Distributions self.x12 = 0 81*8d741a5dSApple OSS Distributions self.x13 = 0 82*8d741a5dSApple OSS Distributions self.x14 = 0 83*8d741a5dSApple OSS Distributions self.x15 = 0 84*8d741a5dSApple OSS Distributions self.x16 = 0 85*8d741a5dSApple OSS Distributions self.x17 = 0 86*8d741a5dSApple OSS Distributions self.x18 = 0 87*8d741a5dSApple OSS Distributions self.x19 = 0 88*8d741a5dSApple OSS Distributions self.x20 = 0 89*8d741a5dSApple OSS Distributions self.x21 = 0 90*8d741a5dSApple OSS Distributions self.x22 = 0 91*8d741a5dSApple OSS Distributions self.x23 = 0 92*8d741a5dSApple OSS Distributions self.x24 = 0 93*8d741a5dSApple OSS Distributions self.x25 = 0 94*8d741a5dSApple OSS Distributions self.x26 = 0 95*8d741a5dSApple OSS Distributions self.x27 = 0 96*8d741a5dSApple OSS Distributions self.x28 = 0 97*8d741a5dSApple OSS Distributions self.fp = 0 98*8d741a5dSApple OSS Distributions self.lr = 0 99*8d741a5dSApple OSS Distributions self.sp = 0 100*8d741a5dSApple OSS Distributions self.pc = 0 101*8d741a5dSApple OSS Distributions self.far = 0 102*8d741a5dSApple OSS Distributions self.cpsr = 0 103*8d741a5dSApple OSS Distributions self.esr = 0 104*8d741a5dSApple OSS Distributions 105*8d741a5dSApple OSS Distributions def __str__(self): 106*8d741a5dSApple OSS Distributions return """ pc = """ 107*8d741a5dSApple OSS Distributions 108*8d741a5dSApple OSS Distributions def GetPackedRegisterState(self): 109*8d741a5dSApple OSS Distributions return struct.pack('34QII', self.x0, self.x1, self.x2, self.x3, self.x4, self.x5, 110*8d741a5dSApple OSS Distributions self.x6, self.x7, self.x8, self.x9, self.x10, self.x11, self.x12, self.x13, 111*8d741a5dSApple OSS Distributions self.x14, self.x15, self.x16, self.x17, self.x18, self.x19, self.x20, self.x21, 112*8d741a5dSApple OSS Distributions self.x22, self.x23, self.x24, self.x25, self.x26, self.x27, self.x28, self.fp, 113*8d741a5dSApple OSS Distributions self.lr, self.sp, self.pc, self.far, self.cpsr, self.esr) 114*8d741a5dSApple OSS Distributions 115*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKDPSavedState(self, kdp_state, kernel_version): 116*8d741a5dSApple OSS Distributions """ Setup register values from KDP saved information. 117*8d741a5dSApple OSS Distributions """ 118*8d741a5dSApple OSS Distributions saved_state = kernel_version.CreateValueFromExpression(None, '(struct arm_saved_state64 *) ' + str(kdp_state.GetValueAsUnsigned())) 119*8d741a5dSApple OSS Distributions saved_state = saved_state.Dereference() 120*8d741a5dSApple OSS Distributions saved_state = PluginValue(saved_state) 121*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 122*8d741a5dSApple OSS Distributions self.x0 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(0).GetValueAsUnsigned() 123*8d741a5dSApple OSS Distributions self.x1 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(1).GetValueAsUnsigned() 124*8d741a5dSApple OSS Distributions self.x2 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(2).GetValueAsUnsigned() 125*8d741a5dSApple OSS Distributions self.x3 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(3).GetValueAsUnsigned() 126*8d741a5dSApple OSS Distributions self.x4 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(4).GetValueAsUnsigned() 127*8d741a5dSApple OSS Distributions self.x5 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(5).GetValueAsUnsigned() 128*8d741a5dSApple OSS Distributions self.x6 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(6).GetValueAsUnsigned() 129*8d741a5dSApple OSS Distributions self.x7 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(7).GetValueAsUnsigned() 130*8d741a5dSApple OSS Distributions self.x8 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(8).GetValueAsUnsigned() 131*8d741a5dSApple OSS Distributions self.x9 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(9).GetValueAsUnsigned() 132*8d741a5dSApple OSS Distributions self.x10 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(10).GetValueAsUnsigned() 133*8d741a5dSApple OSS Distributions self.x11 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(11).GetValueAsUnsigned() 134*8d741a5dSApple OSS Distributions self.x12 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(12).GetValueAsUnsigned() 135*8d741a5dSApple OSS Distributions self.x13 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(13).GetValueAsUnsigned() 136*8d741a5dSApple OSS Distributions self.x14 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(14).GetValueAsUnsigned() 137*8d741a5dSApple OSS Distributions self.x15 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(15).GetValueAsUnsigned() 138*8d741a5dSApple OSS Distributions self.x16 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(16).GetValueAsUnsigned() 139*8d741a5dSApple OSS Distributions self.x17 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(17).GetValueAsUnsigned() 140*8d741a5dSApple OSS Distributions self.x18 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(18).GetValueAsUnsigned() 141*8d741a5dSApple OSS Distributions self.x19 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(19).GetValueAsUnsigned() 142*8d741a5dSApple OSS Distributions self.x20 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(20).GetValueAsUnsigned() 143*8d741a5dSApple OSS Distributions self.x21 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(21).GetValueAsUnsigned() 144*8d741a5dSApple OSS Distributions self.x22 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(22).GetValueAsUnsigned() 145*8d741a5dSApple OSS Distributions self.x23 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(23).GetValueAsUnsigned() 146*8d741a5dSApple OSS Distributions self.x24 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(24).GetValueAsUnsigned() 147*8d741a5dSApple OSS Distributions self.x25 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(25).GetValueAsUnsigned() 148*8d741a5dSApple OSS Distributions self.x26 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(26).GetValueAsUnsigned() 149*8d741a5dSApple OSS Distributions self.x27 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(27).GetValueAsUnsigned() 150*8d741a5dSApple OSS Distributions self.x28 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(28).GetValueAsUnsigned() 151*8d741a5dSApple OSS Distributions self.fp = saved_state.GetChildMemberWithName('fp').GetValueAsUnsigned() 152*8d741a5dSApple OSS Distributions self.lr = saved_state.GetChildMemberWithName('lr').GetValueAsUnsigned() 153*8d741a5dSApple OSS Distributions self.sp = saved_state.GetChildMemberWithName('sp').GetValueAsUnsigned() 154*8d741a5dSApple OSS Distributions self.pc = saved_state.GetChildMemberWithName('pc').GetValueAsUnsigned() 155*8d741a5dSApple OSS Distributions self.far = saved_state.GetChildMemberWithName('far').GetValueAsUnsigned() 156*8d741a5dSApple OSS Distributions self.cpsr = saved_state.GetChildMemberWithName('cpsr').GetValueAsUnsigned() 157*8d741a5dSApple OSS Distributions self.esr = saved_state.GetChildMemberWithName('esr').GetValueAsUnsigned() 158*8d741a5dSApple OSS Distributions return self 159*8d741a5dSApple OSS Distributions 160*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKernelStack(self, kstack_saved_state_addr, kernel_version): 161*8d741a5dSApple OSS Distributions saved_state = kernel_version.CreateValueFromExpression(None, '(arm_kernel_saved_state_t *) '+ str(kstack_saved_state_addr)) 162*8d741a5dSApple OSS Distributions saved_state = saved_state.Dereference() 163*8d741a5dSApple OSS Distributions saved_state = PluginValue(saved_state) 164*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 165*8d741a5dSApple OSS Distributions self.x19 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(0).GetValueAsUnsigned() 166*8d741a5dSApple OSS Distributions self.x20 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(1).GetValueAsUnsigned() 167*8d741a5dSApple OSS Distributions self.x21 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(2).GetValueAsUnsigned() 168*8d741a5dSApple OSS Distributions self.x22 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(3).GetValueAsUnsigned() 169*8d741a5dSApple OSS Distributions self.x23 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(4).GetValueAsUnsigned() 170*8d741a5dSApple OSS Distributions self.x24 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(5).GetValueAsUnsigned() 171*8d741a5dSApple OSS Distributions self.x25 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(6).GetValueAsUnsigned() 172*8d741a5dSApple OSS Distributions self.x26 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(7).GetValueAsUnsigned() 173*8d741a5dSApple OSS Distributions self.x27 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(8).GetValueAsUnsigned() 174*8d741a5dSApple OSS Distributions self.x28 = saved_state.GetChildMemberWithName('x').GetChildAtIndex(9).GetValueAsUnsigned() 175*8d741a5dSApple OSS Distributions self.fp = saved_state.GetChildMemberWithName('fp').GetValueAsUnsigned() 176*8d741a5dSApple OSS Distributions self.lr = saved_state.GetChildMemberWithName('lr').GetValueAsUnsigned() 177*8d741a5dSApple OSS Distributions self.sp = saved_state.GetChildMemberWithName('sp').GetValueAsUnsigned() 178*8d741a5dSApple OSS Distributions # pc for a blocked thread is treated to be the next instruction it would run after thread switch. 179*8d741a5dSApple OSS Distributions self.pc = self.switch_context_address 180*8d741a5dSApple OSS Distributions return self 181*8d741a5dSApple OSS Distributions 182*8d741a5dSApple OSS Distributions def ReadRegisterDataFromContinuation(self, continuation_ptr): 183*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 184*8d741a5dSApple OSS Distributions self.pc = continuation_ptr 185*8d741a5dSApple OSS Distributions return self 186*8d741a5dSApple OSS Distributions 187*8d741a5dSApple OSS Distributions @classmethod 188*8d741a5dSApple OSS Distributions def GetRegisterInfo(cls, regnum): 189*8d741a5dSApple OSS Distributions if regnum < 0 or regnum > len(cls.register_info['registers']): 190*8d741a5dSApple OSS Distributions return '' 191*8d741a5dSApple OSS Distributions 192*8d741a5dSApple OSS Distributions reginfo = cls.register_info['registers'][regnum] 193*8d741a5dSApple OSS Distributions retval = '' 194*8d741a5dSApple OSS Distributions for i in list(reginfo.keys()): 195*8d741a5dSApple OSS Distributions v_str = str(reginfo[i]) 196*8d741a5dSApple OSS Distributions if i == 'set': 197*8d741a5dSApple OSS Distributions v_str = 'General Purpose Registers' 198*8d741a5dSApple OSS Distributions retval += "%s:%s;" % (str(i), v_str) 199*8d741a5dSApple OSS Distributions return retval 200*8d741a5dSApple OSS Distributions 201*8d741a5dSApple OSS Distributions 202*8d741a5dSApple OSS Distributions 203*8d741a5dSApple OSS Distributionsclass Armv7_RegisterSet(object): 204*8d741a5dSApple OSS Distributions """ register info set for armv7 32 bit architecture """ 205*8d741a5dSApple OSS Distributions register_info = { 'sets' : ['GPR'], 206*8d741a5dSApple OSS Distributions 'registers': [ 207*8d741a5dSApple OSS Distributions { 'name':'r0' , 'bitsize' : 32, 'offset' : 0, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 0, 'dwarf' : 0}, 208*8d741a5dSApple OSS Distributions { 'name':'r1' , 'bitsize' : 32, 'offset' : 4, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 1, 'dwarf' : 1}, 209*8d741a5dSApple OSS Distributions { 'name':'r2' , 'bitsize' : 32, 'offset' : 8, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 2, 'dwarf' : 2}, 210*8d741a5dSApple OSS Distributions { 'name':'r3' , 'bitsize' : 32, 'offset' : 12, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 3, 'dwarf' : 3}, 211*8d741a5dSApple OSS Distributions { 'name':'r4' , 'bitsize' : 32, 'offset' : 16, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 4, 'dwarf' : 4}, 212*8d741a5dSApple OSS Distributions { 'name':'r5' , 'bitsize' : 32, 'offset' : 20, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 5, 'dwarf' : 5}, 213*8d741a5dSApple OSS Distributions { 'name':'r6' , 'bitsize' : 32, 'offset' : 24, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 6, 'dwarf' : 6}, 214*8d741a5dSApple OSS Distributions { 'name':'r7' , 'bitsize' : 32, 'offset' : 28, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 7, 'dwarf' : 7}, 215*8d741a5dSApple OSS Distributions { 'name':'r8' , 'bitsize' : 32, 'offset' : 32, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 8, 'dwarf' : 8}, 216*8d741a5dSApple OSS Distributions { 'name':'r9' , 'bitsize' : 32, 'offset' : 36, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc': 9, 'dwarf' : 9}, 217*8d741a5dSApple OSS Distributions { 'name':'r10' , 'bitsize' : 32, 'offset' : 40, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':10, 'dwarf' :10}, 218*8d741a5dSApple OSS Distributions { 'name':'r11' , 'bitsize' : 32, 'offset' : 44, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':11, 'dwarf' :11, 'alt-name': 'fp', 'generic': 'fp'}, 219*8d741a5dSApple OSS Distributions { 'name':'r12' , 'bitsize' : 32, 'offset' : 48, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':12, 'dwarf' :12}, 220*8d741a5dSApple OSS Distributions { 'name':'sp' , 'bitsize' : 32, 'offset' : 52, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':13, 'dwarf' :13, 'generic': 'sp'}, 221*8d741a5dSApple OSS Distributions { 'name':'lr' , 'bitsize' : 32, 'offset' : 56, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':14, 'dwarf' :14, 'generic': 'lr'}, 222*8d741a5dSApple OSS Distributions { 'name':'pc' , 'bitsize' : 32, 'offset' : 60, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':15, 'dwarf' :15, 'generic': 'pc'}, 223*8d741a5dSApple OSS Distributions { 'name':'cpsr' , 'bitsize' : 32, 'offset' : 64, 'encoding':'uint', 'format':'hex', 'set':0, 'gcc':16, 'dwarf' :16, 'generic':'flags'}, 224*8d741a5dSApple OSS Distributions { 'name':'fsr' , 'bitsize' : 32, 'offset' : 68, 'encoding':'uint', 'format':'hex', 'set':0}, 225*8d741a5dSApple OSS Distributions { 'name':'far' , 'bitsize' : 32, 'offset' : 72, 'encoding':'uint', 'format':'hex', 'set':0} 226*8d741a5dSApple OSS Distributions ] 227*8d741a5dSApple OSS Distributions } 228*8d741a5dSApple OSS Distributions 229*8d741a5dSApple OSS Distributions def __init__(self): 230*8d741a5dSApple OSS Distributions self.switch_context_address = osplugin_target_obj.FindSymbols('load_reg')[0].GetSymbol().GetStartAddress().GetLoadAddress(osplugin_target_obj) + 8 231*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 232*8d741a5dSApple OSS Distributions 233*8d741a5dSApple OSS Distributions @classmethod 234*8d741a5dSApple OSS Distributions def GetRegisterInfo(cls, regnum): 235*8d741a5dSApple OSS Distributions if regnum < 0 or regnum > len(cls.register_info['registers']): 236*8d741a5dSApple OSS Distributions return '' 237*8d741a5dSApple OSS Distributions 238*8d741a5dSApple OSS Distributions reginfo = cls.register_info['registers'][regnum] 239*8d741a5dSApple OSS Distributions retval = '' 240*8d741a5dSApple OSS Distributions for i in list(reginfo.keys()): 241*8d741a5dSApple OSS Distributions v_str = str(reginfo[i]) 242*8d741a5dSApple OSS Distributions if i == 'set': 243*8d741a5dSApple OSS Distributions v_str = 'General Purpose Registers' 244*8d741a5dSApple OSS Distributions retval += "%s:%s;" % (str(i), v_str) 245*8d741a5dSApple OSS Distributions return retval 246*8d741a5dSApple OSS Distributions 247*8d741a5dSApple OSS Distributions def ResetRegisterValues(self): 248*8d741a5dSApple OSS Distributions self.r0 = 0 249*8d741a5dSApple OSS Distributions self.r1 = 0 250*8d741a5dSApple OSS Distributions self.r2 = 0 251*8d741a5dSApple OSS Distributions self.r3 = 0 252*8d741a5dSApple OSS Distributions self.r4 = 0 253*8d741a5dSApple OSS Distributions self.r5 = 0 254*8d741a5dSApple OSS Distributions self.r6 = 0 255*8d741a5dSApple OSS Distributions self.r7 = 0 256*8d741a5dSApple OSS Distributions self.r8 = 0 257*8d741a5dSApple OSS Distributions self.r9 = 0 258*8d741a5dSApple OSS Distributions self.r10 = 0 259*8d741a5dSApple OSS Distributions self.r11 = 0 260*8d741a5dSApple OSS Distributions self.r12 = 0 261*8d741a5dSApple OSS Distributions self.sp = 0 262*8d741a5dSApple OSS Distributions self.lr = 0 263*8d741a5dSApple OSS Distributions self.pc = 0 264*8d741a5dSApple OSS Distributions self.cpsr = 0 265*8d741a5dSApple OSS Distributions self.fsr = 0 266*8d741a5dSApple OSS Distributions self.far = 0 267*8d741a5dSApple OSS Distributions 268*8d741a5dSApple OSS Distributions def __str__(self): 269*8d741a5dSApple OSS Distributions return """ 270*8d741a5dSApple OSS Distributions r0 = {o.r0: <#010x} 271*8d741a5dSApple OSS Distributions r1 = {o.r1: <#010x} 272*8d741a5dSApple OSS Distributions r2 = {o.r2: <#010x} 273*8d741a5dSApple OSS Distributions r3 = {o.r3: <#010x} 274*8d741a5dSApple OSS Distributions r4 = {o.r4: <#010x} 275*8d741a5dSApple OSS Distributions r5 = {o.r5: <#010x} 276*8d741a5dSApple OSS Distributions r6 = {o.r6: <#010x} 277*8d741a5dSApple OSS Distributions r7 = {o.r7: <#010x} 278*8d741a5dSApple OSS Distributions r8 = {o.r8: <#010x} 279*8d741a5dSApple OSS Distributions r9 = {o.r9: <#010x} 280*8d741a5dSApple OSS Distributions r10 = {o.r10: <#010x} 281*8d741a5dSApple OSS Distributions r11 = {o.r11: <#010x} 282*8d741a5dSApple OSS Distributions r12 = {o.r12: <#010x} 283*8d741a5dSApple OSS Distributions sp = {o.sp: <#010x} 284*8d741a5dSApple OSS Distributions lr = {o.lr: <#010x} 285*8d741a5dSApple OSS Distributions pc = {o.pc: <#010x} 286*8d741a5dSApple OSS Distributions cpsr = {o.cpsr: <#010x} 287*8d741a5dSApple OSS Distributions fsr = {o.fsr : <#010x} 288*8d741a5dSApple OSS Distributions far = {o.far : <#010x} 289*8d741a5dSApple OSS Distributions """.format(o=self) 290*8d741a5dSApple OSS Distributions 291*8d741a5dSApple OSS Distributions def GetPackedRegisterState(self): 292*8d741a5dSApple OSS Distributions return struct.pack('19I', self.r0, self.r1, self.r2, self.r3, 293*8d741a5dSApple OSS Distributions self.r4, self.r5, self.r6, self.r7, 294*8d741a5dSApple OSS Distributions self.r8, self.r9, self.r10, self.r11, 295*8d741a5dSApple OSS Distributions self.r12, self.sp, self.lr, self.pc, 296*8d741a5dSApple OSS Distributions self.cpsr, self.fsr, self.far) 297*8d741a5dSApple OSS Distributions 298*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKDPSavedState(self, kdp_state, kernel_version): 299*8d741a5dSApple OSS Distributions saved_state = kernel_version.CreateValueFromExpression(None, '(struct arm_saved_state *) ' + str(kdp_state.GetValueAsUnsigned())) 300*8d741a5dSApple OSS Distributions saved_state = saved_state.Dereference() 301*8d741a5dSApple OSS Distributions saved_state = PluginValue(saved_state) 302*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 303*8d741a5dSApple OSS Distributions self.r0 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(0).GetValueAsUnsigned() 304*8d741a5dSApple OSS Distributions self.r1 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(1).GetValueAsUnsigned() 305*8d741a5dSApple OSS Distributions self.r2 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(2).GetValueAsUnsigned() 306*8d741a5dSApple OSS Distributions self.r3 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(3).GetValueAsUnsigned() 307*8d741a5dSApple OSS Distributions self.r4 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(4).GetValueAsUnsigned() 308*8d741a5dSApple OSS Distributions self.r5 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(5).GetValueAsUnsigned() 309*8d741a5dSApple OSS Distributions self.r6 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(6).GetValueAsUnsigned() 310*8d741a5dSApple OSS Distributions self.r7 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(7).GetValueAsUnsigned() 311*8d741a5dSApple OSS Distributions self.r8 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(8).GetValueAsUnsigned() 312*8d741a5dSApple OSS Distributions self.r9 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(9).GetValueAsUnsigned() 313*8d741a5dSApple OSS Distributions self.r10 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(10).GetValueAsUnsigned() 314*8d741a5dSApple OSS Distributions self.r11 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(11).GetValueAsUnsigned() 315*8d741a5dSApple OSS Distributions self.r12 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(12).GetValueAsUnsigned() 316*8d741a5dSApple OSS Distributions self.sp = saved_state.GetChildMemberWithName('sp').GetValueAsUnsigned() 317*8d741a5dSApple OSS Distributions self.lr = saved_state.GetChildMemberWithName('lr').GetValueAsUnsigned() 318*8d741a5dSApple OSS Distributions self.pc = saved_state.GetChildMemberWithName('pc').GetValueAsUnsigned() 319*8d741a5dSApple OSS Distributions self.cpsr = saved_state.GetChildMemberWithName('cpsr').GetValueAsUnsigned() 320*8d741a5dSApple OSS Distributions self.fsr = saved_state.GetChildMemberWithName('fsr').GetValueAsUnsigned() 321*8d741a5dSApple OSS Distributions self.far = saved_state.GetChildMemberWithName('far').GetValueAsUnsigned() 322*8d741a5dSApple OSS Distributions return self 323*8d741a5dSApple OSS Distributions 324*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKernelStack(self, kstack_saved_state_addr, kernel_version): 325*8d741a5dSApple OSS Distributions saved_state = kernel_version.CreateValueFromExpression(None, '(struct arm_saved_state *) '+ str(kstack_saved_state_addr)) 326*8d741a5dSApple OSS Distributions saved_state = saved_state.Dereference() 327*8d741a5dSApple OSS Distributions saved_state = PluginValue(saved_state) 328*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 329*8d741a5dSApple OSS Distributions self.r0 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(0).GetValueAsUnsigned() 330*8d741a5dSApple OSS Distributions self.r1 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(1).GetValueAsUnsigned() 331*8d741a5dSApple OSS Distributions self.r2 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(2).GetValueAsUnsigned() 332*8d741a5dSApple OSS Distributions self.r3 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(3).GetValueAsUnsigned() 333*8d741a5dSApple OSS Distributions self.r4 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(4).GetValueAsUnsigned() 334*8d741a5dSApple OSS Distributions self.r5 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(5).GetValueAsUnsigned() 335*8d741a5dSApple OSS Distributions self.r6 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(6).GetValueAsUnsigned() 336*8d741a5dSApple OSS Distributions self.r7 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(7).GetValueAsUnsigned() 337*8d741a5dSApple OSS Distributions self.r8 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(8).GetValueAsUnsigned() 338*8d741a5dSApple OSS Distributions self.r9 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(9).GetValueAsUnsigned() 339*8d741a5dSApple OSS Distributions self.r10 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(10).GetValueAsUnsigned() 340*8d741a5dSApple OSS Distributions self.r11 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(11).GetValueAsUnsigned() 341*8d741a5dSApple OSS Distributions self.r12 = saved_state.GetChildMemberWithName('r').GetChildAtIndex(12).GetValueAsUnsigned() 342*8d741a5dSApple OSS Distributions self.sp = saved_state.GetChildMemberWithName('sp').GetValueAsUnsigned() 343*8d741a5dSApple OSS Distributions self.lr = saved_state.GetChildMemberWithName('lr').GetValueAsUnsigned() 344*8d741a5dSApple OSS Distributions # pc for a blocked thread is treated to be the next instruction it would run after thread switch. 345*8d741a5dSApple OSS Distributions self.pc = self.switch_context_address 346*8d741a5dSApple OSS Distributions self.cpsr = saved_state.GetChildMemberWithName('cpsr').GetValueAsUnsigned() 347*8d741a5dSApple OSS Distributions self.fsr = saved_state.GetChildMemberWithName('fsr').GetValueAsUnsigned() 348*8d741a5dSApple OSS Distributions self.far = saved_state.GetChildMemberWithName('far').GetValueAsUnsigned() 349*8d741a5dSApple OSS Distributions return self 350*8d741a5dSApple OSS Distributions 351*8d741a5dSApple OSS Distributions def ReadRegisterDataFromContinuation(self, continuation_ptr): 352*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 353*8d741a5dSApple OSS Distributions self.pc = continuation_ptr 354*8d741a5dSApple OSS Distributions return self 355*8d741a5dSApple OSS Distributions 356*8d741a5dSApple OSS Distributions 357*8d741a5dSApple OSS Distributionsclass I386_RegisterSet(object): 358*8d741a5dSApple OSS Distributions """ register info set for i386 architecture 359*8d741a5dSApple OSS Distributions """ 360*8d741a5dSApple OSS Distributions register_info = { 'sets' : ['GPR'], 361*8d741a5dSApple OSS Distributions 'registers': [ 362*8d741a5dSApple OSS Distributions { 'name': 'eax' , 'bitsize': 32, 'offset' : 0, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 0, 'dwarf': 0}, 363*8d741a5dSApple OSS Distributions { 'name': 'ebx' , 'bitsize': 32, 'offset' : 4, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 3, 'dwarf': 3}, 364*8d741a5dSApple OSS Distributions { 'name': 'ecx' , 'bitsize': 32, 'offset' : 8, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 1, 'dwarf': 1}, 365*8d741a5dSApple OSS Distributions { 'name': 'edx' , 'bitsize': 32, 'offset' :12, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 2, 'dwarf': 2}, 366*8d741a5dSApple OSS Distributions { 'name': 'edi' , 'bitsize': 32, 'offset' :16, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 7, 'dwarf': 7}, 367*8d741a5dSApple OSS Distributions { 'name': 'esi' , 'bitsize': 32, 'offset' :20, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 6, 'dwarf': 6}, 368*8d741a5dSApple OSS Distributions { 'name': 'ebp' , 'bitsize': 32, 'offset' :24, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 4, 'dwarf': 5, 'generic': 'fp', 'alt-name': 'fp'}, 369*8d741a5dSApple OSS Distributions { 'name': 'esp' , 'bitsize': 32, 'offset' :28, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 5, 'dwarf': 4, 'generic': 'sp', 'alt-name': 'sp'}, 370*8d741a5dSApple OSS Distributions { 'name': 'ss' , 'bitsize': 32, 'offset' :32, 'encoding': 'uint' , 'format':'hex' , 'set': 0}, 371*8d741a5dSApple OSS Distributions { 'name': 'eflags', 'bitsize': 32, 'offset' :36, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' : 9, 'dwarf': 9, 'generic': 'flags'}, 372*8d741a5dSApple OSS Distributions { 'name': 'eip' , 'bitsize': 32, 'offset' :40, 'encoding': 'uint' , 'format':'hex' , 'set': 0, 'gcc' :8, 'dwarf':8, 'generic': 'pc', 'alt-name': 'pc'}, 373*8d741a5dSApple OSS Distributions { 'name': 'cs' , 'bitsize': 32, 'offset' :44, 'encoding': 'uint' , 'format':'hex' , 'set': 0}, 374*8d741a5dSApple OSS Distributions { 'name': 'ds' , 'bitsize': 32, 'offset' :48, 'encoding': 'uint' , 'format':'hex' , 'set': 0}, 375*8d741a5dSApple OSS Distributions { 'name': 'es' , 'bitsize': 32, 'offset' :52, 'encoding': 'uint' , 'format':'hex' , 'set': 0}, 376*8d741a5dSApple OSS Distributions { 'name': 'fs' , 'bitsize': 32, 'offset' :56, 'encoding': 'uint' , 'format':'hex' , 'set': 0}, 377*8d741a5dSApple OSS Distributions { 'name': 'gs' , 'bitsize': 32, 'offset' :60, 'encoding': 'uint' , 'format':'hex' , 'set': 0}, 378*8d741a5dSApple OSS Distributions ] 379*8d741a5dSApple OSS Distributions } 380*8d741a5dSApple OSS Distributions 381*8d741a5dSApple OSS Distributions def __init__(self): 382*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 383*8d741a5dSApple OSS Distributions 384*8d741a5dSApple OSS Distributions @classmethod 385*8d741a5dSApple OSS Distributions def GetRegisterInfo(cls, regnum): 386*8d741a5dSApple OSS Distributions if regnum < 0 or regnum > len(cls.register_info['registers']): 387*8d741a5dSApple OSS Distributions return '' 388*8d741a5dSApple OSS Distributions 389*8d741a5dSApple OSS Distributions reginfo = cls.register_info['registers'][regnum] 390*8d741a5dSApple OSS Distributions retval = '' 391*8d741a5dSApple OSS Distributions for i in list(reginfo.keys()): 392*8d741a5dSApple OSS Distributions v_str = str(reginfo[i]) 393*8d741a5dSApple OSS Distributions if i == 'set': 394*8d741a5dSApple OSS Distributions v_str = 'General Purpose Registers' 395*8d741a5dSApple OSS Distributions retval += "%s:%s;" % (str(i), v_str) 396*8d741a5dSApple OSS Distributions return retval 397*8d741a5dSApple OSS Distributions 398*8d741a5dSApple OSS Distributions def ResetRegisterValues(self): 399*8d741a5dSApple OSS Distributions """ set all registers to zero """ 400*8d741a5dSApple OSS Distributions self.eax = 0 401*8d741a5dSApple OSS Distributions self.ebx = 0 402*8d741a5dSApple OSS Distributions self.ecx = 0 403*8d741a5dSApple OSS Distributions self.edx = 0 404*8d741a5dSApple OSS Distributions self.edi = 0 405*8d741a5dSApple OSS Distributions self.esi = 0 406*8d741a5dSApple OSS Distributions self.ebp = 0 407*8d741a5dSApple OSS Distributions self.esp = 0 408*8d741a5dSApple OSS Distributions self.ss = 0 409*8d741a5dSApple OSS Distributions self.eflags = 0 410*8d741a5dSApple OSS Distributions self.eip = 0 411*8d741a5dSApple OSS Distributions self.cs = 0 412*8d741a5dSApple OSS Distributions self.ds = 0 413*8d741a5dSApple OSS Distributions self.es = 0 414*8d741a5dSApple OSS Distributions self.fs = 0 415*8d741a5dSApple OSS Distributions self.gs = 0 416*8d741a5dSApple OSS Distributions 417*8d741a5dSApple OSS Distributions def __str__(self): 418*8d741a5dSApple OSS Distributions return """ 419*8d741a5dSApple OSS Distributions eax = {o.eax: #010x} 420*8d741a5dSApple OSS Distributions ebx = {o.ebx: #010x} 421*8d741a5dSApple OSS Distributions ecx = {o.ecx: #010x} 422*8d741a5dSApple OSS Distributions edx = {o.edx: #010x} 423*8d741a5dSApple OSS Distributions edi = {o.edi: #010x} 424*8d741a5dSApple OSS Distributions esi = {o.esi: #010x} 425*8d741a5dSApple OSS Distributions ebp = {o.ebp: #010x} 426*8d741a5dSApple OSS Distributions esp = {o.esp: #010x} 427*8d741a5dSApple OSS Distributions ss = {o.ss: #010x} 428*8d741a5dSApple OSS Distributions eflags = {o.eflags: #010x} 429*8d741a5dSApple OSS Distributions eip = {o.eip: #010x} 430*8d741a5dSApple OSS Distributions cs = {o.cs: #010x} 431*8d741a5dSApple OSS Distributions ds = {o.ds: #010x} 432*8d741a5dSApple OSS Distributions es = {o.es: #010x} 433*8d741a5dSApple OSS Distributions fs = {o.fs: #010x} 434*8d741a5dSApple OSS Distributions gs = {o.gs: #010x} 435*8d741a5dSApple OSS Distributions """.format(o=self) 436*8d741a5dSApple OSS Distributions 437*8d741a5dSApple OSS Distributions def GetPackedRegisterState(self): 438*8d741a5dSApple OSS Distributions """ get a struct.pack register data """ 439*8d741a5dSApple OSS Distributions return struct.pack('16I', self.eax, self.ebx, self.ecx, 440*8d741a5dSApple OSS Distributions self.edx, self.edi, self.esi, 441*8d741a5dSApple OSS Distributions self.ebp, self.esp, self.ss, 442*8d741a5dSApple OSS Distributions self.eflags, self.eip, self.cs, 443*8d741a5dSApple OSS Distributions self.ds, self.es, self.fs, self.gs 444*8d741a5dSApple OSS Distributions ) 445*8d741a5dSApple OSS Distributions 446*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKDPSavedState(self, kdp_state, kernel_version): 447*8d741a5dSApple OSS Distributions """ to be implemented""" 448*8d741a5dSApple OSS Distributions return None 449*8d741a5dSApple OSS Distributions 450*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKernelStack(self, kstack_saved_state_addr, kernel_version): 451*8d741a5dSApple OSS Distributions """ to be implemented """ 452*8d741a5dSApple OSS Distributions return None 453*8d741a5dSApple OSS Distributions 454*8d741a5dSApple OSS Distributions def ReadRegisterDataFromContinuation(self, continuation_ptr): 455*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 456*8d741a5dSApple OSS Distributions self.eip = continuation_ptr 457*8d741a5dSApple OSS Distributions return self 458*8d741a5dSApple OSS Distributions 459*8d741a5dSApple OSS Distributions 460*8d741a5dSApple OSS Distributionsclass X86_64RegisterSet(object): 461*8d741a5dSApple OSS Distributions """ register info set for x86_64 architecture """ 462*8d741a5dSApple OSS Distributions register_info = { 'sets' : ['GPR'], 463*8d741a5dSApple OSS Distributions 'registers': [ 464*8d741a5dSApple OSS Distributions { 'name':'rax' , 'bitsize' : 64, 'offset' : 0, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 0, 'dwarf' : 0}, 465*8d741a5dSApple OSS Distributions { 'name':'rbx' , 'bitsize' : 64, 'offset' : 8, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 3, 'dwarf' : 3}, 466*8d741a5dSApple OSS Distributions { 'name':'rcx' , 'bitsize' : 64, 'offset' : 16, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 2, 'dwarf' : 2, 'generic':'arg4', 'alt-name':'arg4', }, 467*8d741a5dSApple OSS Distributions { 'name':'rdx' , 'bitsize' : 64, 'offset' : 24, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 1, 'dwarf' : 1, 'generic':'arg3', 'alt-name':'arg3', }, 468*8d741a5dSApple OSS Distributions { 'name':'rdi' , 'bitsize' : 64, 'offset' : 32, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 5, 'dwarf' : 5, 'generic':'arg1', 'alt-name':'arg1', }, 469*8d741a5dSApple OSS Distributions { 'name':'rsi' , 'bitsize' : 64, 'offset' : 40, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 4, 'dwarf' : 4, 'generic':'arg2', 'alt-name':'arg2', }, 470*8d741a5dSApple OSS Distributions { 'name':'rbp' , 'bitsize' : 64, 'offset' : 48, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 6, 'dwarf' : 6, 'generic':'fp' , 'alt-name':'fp', }, 471*8d741a5dSApple OSS Distributions { 'name':'rsp' , 'bitsize' : 64, 'offset' : 56, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 7, 'dwarf' : 7, 'generic':'sp' , 'alt-name':'sp', }, 472*8d741a5dSApple OSS Distributions { 'name':'r8' , 'bitsize' : 64, 'offset' : 64, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 8, 'dwarf' : 8, 'generic':'arg5', 'alt-name':'arg5', }, 473*8d741a5dSApple OSS Distributions { 'name':'r9' , 'bitsize' : 64, 'offset' : 72, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 9, 'dwarf' : 9, 'generic':'arg6', 'alt-name':'arg6', }, 474*8d741a5dSApple OSS Distributions { 'name':'r10' , 'bitsize' : 64, 'offset' : 80, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 10, 'dwarf' : 10}, 475*8d741a5dSApple OSS Distributions { 'name':'r11' , 'bitsize' : 64, 'offset' : 88, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 11, 'dwarf' : 11}, 476*8d741a5dSApple OSS Distributions { 'name':'r12' , 'bitsize' : 64, 'offset' : 96, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 12, 'dwarf' : 12}, 477*8d741a5dSApple OSS Distributions { 'name':'r13' , 'bitsize' : 64, 'offset' : 104, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 13, 'dwarf' : 13}, 478*8d741a5dSApple OSS Distributions { 'name':'r14' , 'bitsize' : 64, 'offset' : 112, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 14, 'dwarf' : 14}, 479*8d741a5dSApple OSS Distributions { 'name':'r15' , 'bitsize' : 64, 'offset' : 120, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 15, 'dwarf' : 15}, 480*8d741a5dSApple OSS Distributions { 'name':'rip' , 'bitsize' : 64, 'offset' : 128, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'gcc' : 16, 'dwarf' : 16, 'generic':'pc', 'alt-name':'pc' }, 481*8d741a5dSApple OSS Distributions { 'name':'rflags' , 'bitsize' : 64, 'offset' : 136, 'encoding':'uint' , 'format':'hex' , 'set': 0, 'generic':'flags', 'alt-name':'flags' }, 482*8d741a5dSApple OSS Distributions { 'name':'cs' , 'bitsize' : 64, 'offset' : 144, 'encoding':'uint' , 'format':'hex' , 'set': 0 }, 483*8d741a5dSApple OSS Distributions { 'name':'fs' , 'bitsize' : 64, 'offset' : 152, 'encoding':'uint' , 'format':'hex' , 'set': 0 }, 484*8d741a5dSApple OSS Distributions { 'name':'gs' , 'bitsize' : 64, 'offset' : 160, 'encoding':'uint' , 'format':'hex' , 'set': 0 }, 485*8d741a5dSApple OSS Distributions ] 486*8d741a5dSApple OSS Distributions } 487*8d741a5dSApple OSS Distributions def __init__(self): 488*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 489*8d741a5dSApple OSS Distributions 490*8d741a5dSApple OSS Distributions @classmethod 491*8d741a5dSApple OSS Distributions def GetRegisterInfo(cls, regnum): 492*8d741a5dSApple OSS Distributions if regnum < 0 or regnum > len(cls.register_info['registers']): 493*8d741a5dSApple OSS Distributions return '' 494*8d741a5dSApple OSS Distributions 495*8d741a5dSApple OSS Distributions reginfo = cls.register_info['registers'][regnum] 496*8d741a5dSApple OSS Distributions retval = '' 497*8d741a5dSApple OSS Distributions for i in list(reginfo.keys()): 498*8d741a5dSApple OSS Distributions v_str = str(reginfo[i]) 499*8d741a5dSApple OSS Distributions if i == 'set': 500*8d741a5dSApple OSS Distributions v_str = 'General Purpose Registers' 501*8d741a5dSApple OSS Distributions retval += "%s:%s;" % (str(i), v_str) 502*8d741a5dSApple OSS Distributions return retval 503*8d741a5dSApple OSS Distributions 504*8d741a5dSApple OSS Distributions 505*8d741a5dSApple OSS Distributions def ResetRegisterValues(self): 506*8d741a5dSApple OSS Distributions """ set all the registers to zero. """ 507*8d741a5dSApple OSS Distributions self.rax = 0 508*8d741a5dSApple OSS Distributions self.rbx = 0 509*8d741a5dSApple OSS Distributions self.rcx = 0 510*8d741a5dSApple OSS Distributions self.rdx = 0 511*8d741a5dSApple OSS Distributions self.rdi = 0 512*8d741a5dSApple OSS Distributions self.rsi = 0 513*8d741a5dSApple OSS Distributions self.rbp = 0 514*8d741a5dSApple OSS Distributions self.rsp = 0 515*8d741a5dSApple OSS Distributions self.r8 = 0 516*8d741a5dSApple OSS Distributions self.r9 = 0 517*8d741a5dSApple OSS Distributions self.r10 = 0 518*8d741a5dSApple OSS Distributions self.r11 = 0 519*8d741a5dSApple OSS Distributions self.r12 = 0 520*8d741a5dSApple OSS Distributions self.r13 = 0 521*8d741a5dSApple OSS Distributions self.r14 = 0 522*8d741a5dSApple OSS Distributions self.r15 = 0 523*8d741a5dSApple OSS Distributions self.rip = 0 524*8d741a5dSApple OSS Distributions self.rflags = 0 525*8d741a5dSApple OSS Distributions self.cs = 0 526*8d741a5dSApple OSS Distributions self.fs = 0 527*8d741a5dSApple OSS Distributions self.gs = 0 528*8d741a5dSApple OSS Distributions 529*8d741a5dSApple OSS Distributions def __str__(self): 530*8d741a5dSApple OSS Distributions return """ 531*8d741a5dSApple OSS Distributions rax = {o.rax: <#018x} 532*8d741a5dSApple OSS Distributions rbx = {o.rbx: <#018x} 533*8d741a5dSApple OSS Distributions rcx = {o.rcx: <#018x} 534*8d741a5dSApple OSS Distributions rdx = {o.rdx: <#018x} 535*8d741a5dSApple OSS Distributions rdi = {o.rdi: <#018x} 536*8d741a5dSApple OSS Distributions rsi = {o.rsi: <#018x} 537*8d741a5dSApple OSS Distributions rbp = {o.rbp: <#018x} 538*8d741a5dSApple OSS Distributions rsp = {o.rsp: <#018x} 539*8d741a5dSApple OSS Distributions r8 = {o.r8: <#018x} 540*8d741a5dSApple OSS Distributions r9 = {o.r9: <#018x} 541*8d741a5dSApple OSS Distributions r10 = {o.r10: <#018x} 542*8d741a5dSApple OSS Distributions r11 = {o.r11: <#018x} 543*8d741a5dSApple OSS Distributions r12 = {o.r12: <#018x} 544*8d741a5dSApple OSS Distributions r13 = {o.r13: <#018x} 545*8d741a5dSApple OSS Distributions r14 = {o.r14: <#018x} 546*8d741a5dSApple OSS Distributions r15 = {o.r15: <#018x} 547*8d741a5dSApple OSS Distributions rip = {o.rip: <#018x} 548*8d741a5dSApple OSS Distributions rflags = {o.rflags: <#018x} 549*8d741a5dSApple OSS Distributions cs = {o.cs: <#018x} 550*8d741a5dSApple OSS Distributions fs = {o.fs: <#018x} 551*8d741a5dSApple OSS Distributions gs = {o.gs: <#018x} 552*8d741a5dSApple OSS Distributions """.format(o=self) 553*8d741a5dSApple OSS Distributions 554*8d741a5dSApple OSS Distributions def GetPackedRegisterState(self): 555*8d741a5dSApple OSS Distributions """ get a struct.pack register data for passing to C constructs """ 556*8d741a5dSApple OSS Distributions return struct.pack('21Q', self.rax, self.rbx, self.rcx, self.rdx, self.rdi, 557*8d741a5dSApple OSS Distributions self.rsi, self.rbp, self.rsp, self.r8, self.r9, 558*8d741a5dSApple OSS Distributions self.r10, self.r11, self.r12, self.r13, self.r14, 559*8d741a5dSApple OSS Distributions self.r15, self.rip, self.rflags, self.cs, self.fs, self.gs) 560*8d741a5dSApple OSS Distributions 561*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKDPSavedState(self, kdp_state, kernel_version): 562*8d741a5dSApple OSS Distributions saved_state = kernel_version.CreateValueFromExpression(None, '(struct x86_saved_state64 *) '+ str(kdp_state.GetValueAsUnsigned())) 563*8d741a5dSApple OSS Distributions saved_state = saved_state.Dereference() 564*8d741a5dSApple OSS Distributions saved_state = PluginValue(saved_state) 565*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 566*8d741a5dSApple OSS Distributions self.rdi = saved_state.GetChildMemberWithName('rdi').GetValueAsUnsigned() 567*8d741a5dSApple OSS Distributions self.rsi = saved_state.GetChildMemberWithName('rsi').GetValueAsUnsigned() 568*8d741a5dSApple OSS Distributions self.rdx = saved_state.GetChildMemberWithName('rdx').GetValueAsUnsigned() 569*8d741a5dSApple OSS Distributions self.r10 = saved_state.GetChildMemberWithName('r10').GetValueAsUnsigned() 570*8d741a5dSApple OSS Distributions self.r8 = saved_state.GetChildMemberWithName('r8').GetValueAsUnsigned() 571*8d741a5dSApple OSS Distributions self.r9 = saved_state.GetChildMemberWithName('r9').GetValueAsUnsigned() 572*8d741a5dSApple OSS Distributions self.r15 = saved_state.GetChildMemberWithName('r15').GetValueAsUnsigned() 573*8d741a5dSApple OSS Distributions self.r14 = saved_state.GetChildMemberWithName('r14').GetValueAsUnsigned() 574*8d741a5dSApple OSS Distributions self.r13 = saved_state.GetChildMemberWithName('r13').GetValueAsUnsigned() 575*8d741a5dSApple OSS Distributions self.r12 = saved_state.GetChildMemberWithName('r12').GetValueAsUnsigned() 576*8d741a5dSApple OSS Distributions self.r11 = saved_state.GetChildMemberWithName('r11').GetValueAsUnsigned() 577*8d741a5dSApple OSS Distributions self.rbp = saved_state.GetChildMemberWithName('rbp').GetValueAsUnsigned() 578*8d741a5dSApple OSS Distributions self.rbx = saved_state.GetChildMemberWithName('rbx').GetValueAsUnsigned() 579*8d741a5dSApple OSS Distributions self.rcx = saved_state.GetChildMemberWithName('rcx').GetValueAsUnsigned() 580*8d741a5dSApple OSS Distributions self.rax = saved_state.GetChildMemberWithName('rax').GetValueAsUnsigned() 581*8d741a5dSApple OSS Distributions self.rip = saved_state.GetChildMemberWithName('isf').GetChildMemberWithName('rip').GetValueAsUnsigned() 582*8d741a5dSApple OSS Distributions self.rflags = saved_state.GetChildMemberWithName('isf').GetChildMemberWithName('rflags').GetValueAsUnsigned() 583*8d741a5dSApple OSS Distributions self.rsp = saved_state.GetChildMemberWithName('isf').GetChildMemberWithName('rsp').GetValueAsUnsigned() 584*8d741a5dSApple OSS Distributions return self 585*8d741a5dSApple OSS Distributions 586*8d741a5dSApple OSS Distributions def ReadRegisterDataFromKernelStack(self, kstack_saved_state_addr, kernel_version): 587*8d741a5dSApple OSS Distributions saved_state = kernel_version.CreateValueFromExpression(None, '(struct x86_kernel_state *) '+ str(kstack_saved_state_addr)) 588*8d741a5dSApple OSS Distributions saved_state = saved_state.Dereference() 589*8d741a5dSApple OSS Distributions saved_state = PluginValue(saved_state) 590*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 591*8d741a5dSApple OSS Distributions self.rbx = saved_state.GetChildMemberWithName('k_rbx').GetValueAsUnsigned() 592*8d741a5dSApple OSS Distributions self.rsp = saved_state.GetChildMemberWithName('k_rsp').GetValueAsUnsigned() 593*8d741a5dSApple OSS Distributions self.rbp = saved_state.GetChildMemberWithName('k_rbp').GetValueAsUnsigned() 594*8d741a5dSApple OSS Distributions self.r12 = saved_state.GetChildMemberWithName('k_r12').GetValueAsUnsigned() 595*8d741a5dSApple OSS Distributions self.r13 = saved_state.GetChildMemberWithName('k_r13').GetValueAsUnsigned() 596*8d741a5dSApple OSS Distributions self.r14 = saved_state.GetChildMemberWithName('k_r14').GetValueAsUnsigned() 597*8d741a5dSApple OSS Distributions self.r15 = saved_state.GetChildMemberWithName('k_r15').GetValueAsUnsigned() 598*8d741a5dSApple OSS Distributions self.rip = saved_state.GetChildMemberWithName('k_rip').GetValueAsUnsigned() 599*8d741a5dSApple OSS Distributions return self 600*8d741a5dSApple OSS Distributions 601*8d741a5dSApple OSS Distributions def ReadRegisterDataFromContinuation(self, continuation_ptr): 602*8d741a5dSApple OSS Distributions self.ResetRegisterValues() 603*8d741a5dSApple OSS Distributions self.rip = continuation_ptr 604*8d741a5dSApple OSS Distributions return self 605*8d741a5dSApple OSS Distributions 606*8d741a5dSApple OSS Distributions 607*8d741a5dSApple OSS Distributions 608*8d741a5dSApple OSS Distributions 609*8d741a5dSApple OSS Distributionsdef IterateQueue(queue_head: lldb.SBValue, element_ptr_type: lldb.SBType, element_field_name: str): 610*8d741a5dSApple OSS Distributions """ iterate over a queue in kernel of type queue_head_t. refer to osfmk/kern/queue.h 611*8d741a5dSApple OSS Distributions params: 612*8d741a5dSApple OSS Distributions queue_head - lldb.SBValue : Value object for queue_head. 613*8d741a5dSApple OSS Distributions element_type - lldb.SBType : a pointer type of the element 'next' points to. Typically its structs like thread, task etc.. 614*8d741a5dSApple OSS Distributions element_field_name - str : name of the field in target struct. 615*8d741a5dSApple OSS Distributions returns: 616*8d741a5dSApple OSS Distributions A generator does not return. It is used for iterating. 617*8d741a5dSApple OSS Distributions SBValue : an object thats of type (element_type) queue_head->next. Always a pointer object 618*8d741a5dSApple OSS Distributions """ 619*8d741a5dSApple OSS Distributions queue_head_addr = 0x0 620*8d741a5dSApple OSS Distributions if queue_head.TypeIsPointerType(): 621*8d741a5dSApple OSS Distributions queue_head_addr = queue_head.GetValueAsUnsigned() 622*8d741a5dSApple OSS Distributions else: 623*8d741a5dSApple OSS Distributions queue_head_addr = queue_head.GetAddress().GetLoadAddress(osplugin_target_obj) 624*8d741a5dSApple OSS Distributions cur_elt: lldb.SBValue = queue_head.GetChildMemberWithName('next') 625*8d741a5dSApple OSS Distributions while True: 626*8d741a5dSApple OSS Distributions if not (cur_elt.IsValid() and cur_elt.error.success) or cur_elt.GetValueAsUnsigned() == 0 or cur_elt.GetValueAsUnsigned() == queue_head_addr: 627*8d741a5dSApple OSS Distributions break 628*8d741a5dSApple OSS Distributions elt = cur_elt.Cast(element_ptr_type) 629*8d741a5dSApple OSS Distributions yield elt 630*8d741a5dSApple OSS Distributions cur_elt = elt.GetChildMemberWithName(element_field_name).GetChildMemberWithName('next') 631*8d741a5dSApple OSS Distributions 632*8d741a5dSApple OSS Distributionsdef GetUniqueSessionID(process_obj): 633*8d741a5dSApple OSS Distributions """ Create a unique session identifier. 634*8d741a5dSApple OSS Distributions params: 635*8d741a5dSApple OSS Distributions process_obj: lldb.SBProcess object refering to connected process. 636*8d741a5dSApple OSS Distributions returns: 637*8d741a5dSApple OSS Distributions int - a unique number identified by processid and stopid. 638*8d741a5dSApple OSS Distributions """ 639*8d741a5dSApple OSS Distributions session_key_str = "" 640*8d741a5dSApple OSS Distributions if hasattr(process_obj, "GetUniqueID"): 641*8d741a5dSApple OSS Distributions session_key_str += str(process_obj.GetUniqueID()) + ":" 642*8d741a5dSApple OSS Distributions else: 643*8d741a5dSApple OSS Distributions session_key_str += "0:" 644*8d741a5dSApple OSS Distributions 645*8d741a5dSApple OSS Distributions if hasattr(process_obj, "GetStopID"): 646*8d741a5dSApple OSS Distributions session_key_str += str(process_obj.GetStopID()) 647*8d741a5dSApple OSS Distributions else: 648*8d741a5dSApple OSS Distributions session_key_str +="1" 649*8d741a5dSApple OSS Distributions 650*8d741a5dSApple OSS Distributions return hash(session_key_str) 651*8d741a5dSApple OSS Distributions 652*8d741a5dSApple OSS Distributions 653*8d741a5dSApple OSS Distributions(archX86_64, archARMv7, archI386, archARMv8) = ("x86_64", "armv7", "i386", "arm64") 654*8d741a5dSApple OSS Distributions 655*8d741a5dSApple OSS Distributionsclass OperatingSystemPlugIn(object): 656*8d741a5dSApple OSS Distributions """Class that provides data for an instance of a LLDB 'OperatingSystemPython' plug-in class""" 657*8d741a5dSApple OSS Distributions 658*8d741a5dSApple OSS Distributions def __init__(self, process): 659*8d741a5dSApple OSS Distributions '''Initialization needs a valid.SBProcess object''' 660*8d741a5dSApple OSS Distributions self.process = None 661*8d741a5dSApple OSS Distributions self.registers = None 662*8d741a5dSApple OSS Distributions self.threads = None 663*8d741a5dSApple OSS Distributions self.thread_cache = {} 664*8d741a5dSApple OSS Distributions self.current_session_id = 0 665*8d741a5dSApple OSS Distributions self.kdp_thread = None 666*8d741a5dSApple OSS Distributions if type(process) is lldb.SBProcess and process.IsValid(): 667*8d741a5dSApple OSS Distributions global osplugin_target_obj 668*8d741a5dSApple OSS Distributions self.process = process 669*8d741a5dSApple OSS Distributions self._target = process.target 670*8d741a5dSApple OSS Distributions osplugin_target_obj = self._target 671*8d741a5dSApple OSS Distributions self.current_session_id = GetUniqueSessionID(self.process) 672*8d741a5dSApple OSS Distributions self.version = self._target.FindGlobalVariables('version', 1).GetValueAtIndex(0) 673*8d741a5dSApple OSS Distributions 674*8d741a5dSApple OSS Distributions # Configure explicit pointer stripping 675*8d741a5dSApple OSS Distributions is_tagged = self._target.FindFirstGlobalVariable('kasan_tbi_enabled').GetValueAsUnsigned() 676*8d741a5dSApple OSS Distributions 677*8d741a5dSApple OSS Distributions if is_tagged: 678*8d741a5dSApple OSS Distributions 679*8d741a5dSApple OSS Distributions def strip_ptr(ptr): 680*8d741a5dSApple OSS Distributions if ptr != 0: 681*8d741a5dSApple OSS Distributions ptr |= (0xFF << 56) 682*8d741a5dSApple OSS Distributions return ptr 683*8d741a5dSApple OSS Distributions self._strip_ptr = strip_ptr 684*8d741a5dSApple OSS Distributions 685*8d741a5dSApple OSS Distributions def strip_thread_sbval(th): 686*8d741a5dSApple OSS Distributions addr = th.GetValueAsAddress() 687*8d741a5dSApple OSS Distributions return self.version.CreateValueFromExpression(str(addr), '(struct thread *)' + str(addr)) 688*8d741a5dSApple OSS Distributions self._strip_thread_sbval = strip_thread_sbval 689*8d741a5dSApple OSS Distributions 690*8d741a5dSApple OSS Distributions else: 691*8d741a5dSApple OSS Distributions self._strip_ptr = lambda ptr: ptr 692*8d741a5dSApple OSS Distributions self._strip_thread_sbval = lambda val: val 693*8d741a5dSApple OSS Distributions 694*8d741a5dSApple OSS Distributions self.kernel_stack_size = self._target.FindGlobalVariables('kernel_stack_size', 1).GetValueAtIndex(0).GetValueAsUnsigned() 695*8d741a5dSApple OSS Distributions self.kernel_context_size = 0 696*8d741a5dSApple OSS Distributions self.connected_over_kdp = False 697*8d741a5dSApple OSS Distributions # connected_to_debugserver signifies if we are connected to astris or other gdbserver instance 698*8d741a5dSApple OSS Distributions # that has the correct thread state for on core threads. For kdp and coredumps we rely on in memory 699*8d741a5dSApple OSS Distributions # state of threads. 700*8d741a5dSApple OSS Distributions self.connected_to_debugserver = True 701*8d741a5dSApple OSS Distributions plugin_string = self.process.GetPluginName().lower() 702*8d741a5dSApple OSS Distributions if plugin_string.find("kdp") >=0: 703*8d741a5dSApple OSS Distributions self.connected_over_kdp = True 704*8d741a5dSApple OSS Distributions self.connected_to_debugserver = False 705*8d741a5dSApple OSS Distributions #print "version", self.version, "kernel_stack_size", self.kernel_stack_size, "context_size", self.kernel_context_size 706*8d741a5dSApple OSS Distributions self.threads = None # Will be an dictionary containing info for each thread 707*8d741a5dSApple OSS Distributions triple = self.process.target.triple 708*8d741a5dSApple OSS Distributions arch = triple.split('-')[0].lower() 709*8d741a5dSApple OSS Distributions self.target_arch = "" 710*8d741a5dSApple OSS Distributions self.kernel_context_size = 0 711*8d741a5dSApple OSS Distributions if arch == archX86_64 : 712*8d741a5dSApple OSS Distributions self.target_arch = archX86_64 713*8d741a5dSApple OSS Distributions print("Target arch: x86_64") 714*8d741a5dSApple OSS Distributions self.register_set = X86_64RegisterSet() 715*8d741a5dSApple OSS Distributions self.kernel_context_size = self._target.FindFirstType('x86_kernel_state').GetByteSize() 716*8d741a5dSApple OSS Distributions self.kernel_thread_state_size = self._target.FindFirstType('struct thread_kernel_state').GetByteSize() 717*8d741a5dSApple OSS Distributions elif arch.startswith(archARMv7) : 718*8d741a5dSApple OSS Distributions self.target_arch = arch 719*8d741a5dSApple OSS Distributions print("Target arch: " + self.target_arch) 720*8d741a5dSApple OSS Distributions self.register_set = Armv7_RegisterSet() 721*8d741a5dSApple OSS Distributions elif arch.startswith(archARMv8): 722*8d741a5dSApple OSS Distributions self.target_arch = arch 723*8d741a5dSApple OSS Distributions print("Target arch: " + self.target_arch) 724*8d741a5dSApple OSS Distributions self.register_set = Armv8_RegisterSet() 725*8d741a5dSApple OSS Distributions # connection intel arm 726*8d741a5dSApple OSS Distributions # kdp Memory Memory 727*8d741a5dSApple OSS Distributions # gdb Server Server 728*8d741a5dSApple OSS Distributions # coredump Memory Server 729*8d741a5dSApple OSS Distributions if not self.connected_over_kdp : 730*8d741a5dSApple OSS Distributions if plugin_string.find('core') >= 0 and self.target_arch == archX86_64: 731*8d741a5dSApple OSS Distributions self.connected_to_debugserver = False 732*8d741a5dSApple OSS Distributions self.registers = self.register_set.register_info 733*8d741a5dSApple OSS Distributions if self.connected_to_debugserver: 734*8d741a5dSApple OSS Distributions print("Connected to live debugserver or arm core. Will associate on-core threads to registers reported by server.") 735*8d741a5dSApple OSS Distributions else: 736*8d741a5dSApple OSS Distributions print("Instantiating threads completely from saved state in memory.") 737*8d741a5dSApple OSS Distributions 738*8d741a5dSApple OSS Distributions def create_thread(self, tid, context): 739*8d741a5dSApple OSS Distributions 740*8d741a5dSApple OSS Distributions # Strip TBI explicitly in case create_thread() is called externally. 741*8d741a5dSApple OSS Distributions context = self._strip_ptr(context) 742*8d741a5dSApple OSS Distributions 743*8d741a5dSApple OSS Distributions # tid == deadbeef means its a custom thread which kernel does not know of. 744*8d741a5dSApple OSS Distributions if tid == 0xdeadbeef : 745*8d741a5dSApple OSS Distributions # tid manipulation should be the same as in "switchtoregs" code in lldbmacros/process.py . 746*8d741a5dSApple OSS Distributions tid = 0xdead0000 | (context & ~0xffff0000) 747*8d741a5dSApple OSS Distributions tid = tid & 0xdeadffff 748*8d741a5dSApple OSS Distributions thread_obj = { 'tid' : tid, 749*8d741a5dSApple OSS Distributions 'ptr' : context, 750*8d741a5dSApple OSS Distributions 'name' : 'switchtoregs' + hex(context), 751*8d741a5dSApple OSS Distributions 'queue' : 'None', 752*8d741a5dSApple OSS Distributions 'state' : 'stopped', 753*8d741a5dSApple OSS Distributions 'stop_reason' : 'none' 754*8d741a5dSApple OSS Distributions } 755*8d741a5dSApple OSS Distributions self.thread_cache[tid] = thread_obj 756*8d741a5dSApple OSS Distributions return thread_obj 757*8d741a5dSApple OSS Distributions 758*8d741a5dSApple OSS Distributions th_ptr = context 759*8d741a5dSApple OSS Distributions th = self.version.CreateValueFromExpression(str(th_ptr), '(struct thread *)' + str(th_ptr)) 760*8d741a5dSApple OSS Distributions thread_id = th.GetChildMemberWithName('thread_id').GetValueAsUnsigned() 761*8d741a5dSApple OSS Distributions if tid != thread_id: 762*8d741a5dSApple OSS Distributions print("FATAL ERROR: Creating thread from memory 0x%x with tid in mem=%d when requested tid = %d " % (context, thread_id, tid)) 763*8d741a5dSApple OSS Distributions return None 764*8d741a5dSApple OSS Distributions 765*8d741a5dSApple OSS Distributions wait_queue = self._strip_ptr(th.GetChildMemberWithName('wait_queue').GetValueAsUnsigned()) 766*8d741a5dSApple OSS Distributions thread_obj = { 'tid' : thread_id, 767*8d741a5dSApple OSS Distributions 'ptr' : th.GetValueAsUnsigned(), 768*8d741a5dSApple OSS Distributions 'name' : hex(th.GetValueAsUnsigned()).rstrip('L'), 769*8d741a5dSApple OSS Distributions 'queue' : hex(wait_queue).rstrip('L'), 770*8d741a5dSApple OSS Distributions 'state' : 'stopped', 771*8d741a5dSApple OSS Distributions 'stop_reason' : 'none' 772*8d741a5dSApple OSS Distributions } 773*8d741a5dSApple OSS Distributions 774*8d741a5dSApple OSS Distributions if self.current_session_id != GetUniqueSessionID(self.process): 775*8d741a5dSApple OSS Distributions self.thread_cache = {} 776*8d741a5dSApple OSS Distributions self.current_session_id = GetUniqueSessionID(self.process) 777*8d741a5dSApple OSS Distributions 778*8d741a5dSApple OSS Distributions self.thread_cache[tid] = thread_obj 779*8d741a5dSApple OSS Distributions return thread_obj 780*8d741a5dSApple OSS Distributions 781*8d741a5dSApple OSS Distributions def get_thread_info(self): 782*8d741a5dSApple OSS Distributions self.kdp_thread = None 783*8d741a5dSApple OSS Distributions self.kdp_state = None 784*8d741a5dSApple OSS Distributions if self.connected_over_kdp : 785*8d741a5dSApple OSS Distributions kdp = self._target.FindGlobalVariables('kdp',1).GetValueAtIndex(0) 786*8d741a5dSApple OSS Distributions kdp_state = kdp.GetChildMemberWithName('saved_state') 787*8d741a5dSApple OSS Distributions kdp_thread = self._strip_thread_sbval(kdp.GetChildMemberWithName('kdp_thread')) 788*8d741a5dSApple OSS Distributions if kdp_thread and kdp_thread.GetValueAsUnsigned() != 0: 789*8d741a5dSApple OSS Distributions self.kdp_thread = kdp_thread 790*8d741a5dSApple OSS Distributions self.kdp_state = kdp_state 791*8d741a5dSApple OSS Distributions kdp_thid = kdp_thread.GetChildMemberWithName('thread_id').GetValueAsUnsigned() 792*8d741a5dSApple OSS Distributions self.create_thread(kdp_thid, kdp_thread.GetValueAsUnsigned()) 793*8d741a5dSApple OSS Distributions self.thread_cache[kdp_thid]['core']=0 794*8d741a5dSApple OSS Distributions retval = [self.thread_cache[kdp_thid]] 795*8d741a5dSApple OSS Distributions return retval 796*8d741a5dSApple OSS Distributions else: 797*8d741a5dSApple OSS Distributions print("FATAL FAILURE: Unable to find kdp_thread state for this connection.") 798*8d741a5dSApple OSS Distributions return [] 799*8d741a5dSApple OSS Distributions 800*8d741a5dSApple OSS Distributions num_threads = self._target.FindGlobalVariables('threads_count',1).GetValueAtIndex(0).GetValueAsUnsigned() 801*8d741a5dSApple OSS Distributions #In case we are caught before threads are initialized. Fallback to threads known by astris/gdb server. 802*8d741a5dSApple OSS Distributions if num_threads <=0 : 803*8d741a5dSApple OSS Distributions return [] 804*8d741a5dSApple OSS Distributions 805*8d741a5dSApple OSS Distributions self.current_session_id = GetUniqueSessionID(self.process) 806*8d741a5dSApple OSS Distributions self.threads = [] 807*8d741a5dSApple OSS Distributions self.thread_cache = {} 808*8d741a5dSApple OSS Distributions self.processors = [] 809*8d741a5dSApple OSS Distributions try: 810*8d741a5dSApple OSS Distributions processor_list_val = PluginValue(self._target.FindGlobalVariables('processor_list',1).GetValueAtIndex(0)) 811*8d741a5dSApple OSS Distributions while processor_list_val.IsValid() and processor_list_val.error.success and processor_list_val.GetValueAsUnsigned() !=0: 812*8d741a5dSApple OSS Distributions th = self._strip_thread_sbval(processor_list_val.GetChildMemberWithName('active_thread')) 813*8d741a5dSApple OSS Distributions th_id = th.GetChildMemberWithName('thread_id').GetValueAsUnsigned() 814*8d741a5dSApple OSS Distributions cpu_id = processor_list_val.GetChildMemberWithName('cpu_id').GetValueAsUnsigned() 815*8d741a5dSApple OSS Distributions self.processors.append({'active_thread': th.GetValueAsUnsigned(), 'cpu_id': cpu_id}) 816*8d741a5dSApple OSS Distributions self.create_thread(th_id, th.GetValueAsUnsigned()) 817*8d741a5dSApple OSS Distributions if self.connected_to_debugserver: 818*8d741a5dSApple OSS Distributions self.thread_cache[th_id]['core'] = cpu_id 819*8d741a5dSApple OSS Distributions self.thread_cache[th_id]['queue'] = "cpu-%d" % int(cpu_id) 820*8d741a5dSApple OSS Distributions nth = self.thread_cache[th_id] 821*8d741a5dSApple OSS Distributions self.threads.append(nth) 822*8d741a5dSApple OSS Distributions self.thread_cache[nth['tid']] = nth 823*8d741a5dSApple OSS Distributions processor_list_val = processor_list_val.GetChildMemberWithName('processor_list') 824*8d741a5dSApple OSS Distributions except KeyboardInterrupt as ke: 825*8d741a5dSApple OSS Distributions print("OS Plugin Interrupted during thread loading process. \nWARNING:Thread registers and backtraces may not be accurate.") 826*8d741a5dSApple OSS Distributions return self.threads 827*8d741a5dSApple OSS Distributions 828*8d741a5dSApple OSS Distributions if hasattr(self.process, 'CreateOSPluginThread'): 829*8d741a5dSApple OSS Distributions return self.threads 830*8d741a5dSApple OSS Distributions 831*8d741a5dSApple OSS Distributions # FIXME remove legacy code 832*8d741a5dSApple OSS Distributions try: 833*8d741a5dSApple OSS Distributions thread_q_head = self._target.FindGlobalVariables('threads', 1).GetValueAtIndex(0) 834*8d741a5dSApple OSS Distributions thread_type = self._target.FindFirstType('thread') 835*8d741a5dSApple OSS Distributions thread_ptr_type = thread_type.GetPointerType() 836*8d741a5dSApple OSS Distributions for th in IterateQueue(thread_q_head, thread_ptr_type, 'threads'): 837*8d741a5dSApple OSS Distributions th = self._strip_thread_sbval(th) 838*8d741a5dSApple OSS Distributions th_id = th.GetChildMemberWithName('thread_id').GetValueAsUnsigned() 839*8d741a5dSApple OSS Distributions self.create_thread(th_id, th.GetValueAsUnsigned()) 840*8d741a5dSApple OSS Distributions nth = self.thread_cache[th_id] 841*8d741a5dSApple OSS Distributions for cputhread in self.processors: 842*8d741a5dSApple OSS Distributions if cputhread['active_thread'] == nth['ptr']: 843*8d741a5dSApple OSS Distributions nth['core'] = cputhread['cpu_id'] 844*8d741a5dSApple OSS Distributions self.threads.append( nth ) 845*8d741a5dSApple OSS Distributions except KeyboardInterrupt as ke: 846*8d741a5dSApple OSS Distributions print("OS Plugin Interrupted during thread loading process. \nWARNING:Thread registers and backtraces may not be accurate.") 847*8d741a5dSApple OSS Distributions return self.threads 848*8d741a5dSApple OSS Distributions # end legacy code 849*8d741a5dSApple OSS Distributions return self.threads 850*8d741a5dSApple OSS Distributions 851*8d741a5dSApple OSS Distributions def get_register_info(self): 852*8d741a5dSApple OSS Distributions if self.registers == None: 853*8d741a5dSApple OSS Distributions print("Register Information not found ") 854*8d741a5dSApple OSS Distributions return self.register_set.register_info 855*8d741a5dSApple OSS Distributions 856*8d741a5dSApple OSS Distributions def get_register_data(self, tid): 857*8d741a5dSApple OSS Distributions thobj = None 858*8d741a5dSApple OSS Distributions try: 859*8d741a5dSApple OSS Distributions regs = self.register_set 860*8d741a5dSApple OSS Distributions if self.current_session_id != GetUniqueSessionID(self.process): 861*8d741a5dSApple OSS Distributions self.thread_cache = {} 862*8d741a5dSApple OSS Distributions self.current_session_id = GetUniqueSessionID(self.process) 863*8d741a5dSApple OSS Distributions if tid in self.thread_cache: 864*8d741a5dSApple OSS Distributions 865*8d741a5dSApple OSS Distributions #Check if the thread is a fake one. Then create and return registers directly 866*8d741a5dSApple OSS Distributions if self.thread_cache[tid]['name'].find('switchtoregs') == 0: 867*8d741a5dSApple OSS Distributions savedstateobj = self.version.CreateValueFromExpression(None, '(uintptr_t *) ' + str(self.thread_cache[tid]['ptr'])) 868*8d741a5dSApple OSS Distributions regs.ReadRegisterDataFromKDPSavedState(savedstateobj, self.version) 869*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 870*8d741a5dSApple OSS Distributions 871*8d741a5dSApple OSS Distributions thobj = self.version.CreateValueFromExpression(self.thread_cache[tid]['name'], '(struct thread *)' + str(self.thread_cache[tid]['ptr'])) 872*8d741a5dSApple OSS Distributions 873*8d741a5dSApple OSS Distributions if thobj == None : 874*8d741a5dSApple OSS Distributions print("FATAL ERROR: Could not find thread with id %d" % tid) 875*8d741a5dSApple OSS Distributions regs.ResetRegisterValues() 876*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 877*8d741a5dSApple OSS Distributions 878*8d741a5dSApple OSS Distributions if self.kdp_thread and self.kdp_thread.GetValueAsUnsigned() == thobj.GetValueAsUnsigned(): 879*8d741a5dSApple OSS Distributions regs.ReadRegisterDataFromKDPSavedState(self.kdp_state, self.version) 880*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 881*8d741a5dSApple OSS Distributions if int(PluginValue(thobj).GetChildMemberWithName('kernel_stack').GetValueAsUnsigned()) != 0 : 882*8d741a5dSApple OSS Distributions if self.target_arch == archX86_64 : 883*8d741a5dSApple OSS Distributions # we do have a stack so lets get register information 884*8d741a5dSApple OSS Distributions saved_state_addr = PluginValue(thobj).GetChildMemberWithName('kernel_stack').GetValueAsUnsigned() + self.kernel_stack_size - self.kernel_thread_state_size 885*8d741a5dSApple OSS Distributions regs.ReadRegisterDataFromKernelStack(saved_state_addr, self.version) 886*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 887*8d741a5dSApple OSS Distributions elif self.target_arch.startswith(archARMv7) and int(PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned()) != 0: 888*8d741a5dSApple OSS Distributions #we have stack on the machine.kstackptr. 889*8d741a5dSApple OSS Distributions saved_state_addr = PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned() 890*8d741a5dSApple OSS Distributions regs.ReadRegisterDataFromKernelStack(saved_state_addr, self.version) 891*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 892*8d741a5dSApple OSS Distributions elif self.target_arch.startswith(archARMv8) and int(PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsUnsigned()) != 0: 893*8d741a5dSApple OSS Distributions saved_state_addr = PluginValue(thobj).GetChildMemberWithName('machine').GetChildMemberWithName('kstackptr').GetValueAsAddress() 894*8d741a5dSApple OSS Distributions arm_ctx = PluginValue(self.version.CreateValueFromExpression(None, '(struct arm_kernel_context *) ' + str(saved_state_addr))) 895*8d741a5dSApple OSS Distributions arm_ss_addr = arm_ctx.GetChildMemberWithName('ss').GetLoadAddress() 896*8d741a5dSApple OSS Distributions regs.ReadRegisterDataFromKernelStack(arm_ss_addr, self.version) 897*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 898*8d741a5dSApple OSS Distributions elif self.target_arch == archX86_64 or self.target_arch.startswith(archARMv7) or self.target_arch.startswith(archARMv8): 899*8d741a5dSApple OSS Distributions regs.ReadRegisterDataFromContinuation( PluginValue(thobj).GetChildMemberWithName('continuation').GetValueAsAddress()) 900*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 901*8d741a5dSApple OSS Distributions #incase we failed very miserably 902*8d741a5dSApple OSS Distributions except KeyboardInterrupt as ke: 903*8d741a5dSApple OSS Distributions print("OS Plugin Interrupted during thread register load. \nWARNING:Thread registers and backtraces may not be accurate. for tid = %d" % tid) 904*8d741a5dSApple OSS Distributions regs.ResetRegisterValues() 905*8d741a5dSApple OSS Distributions print("FATAL ERROR: Failed to get register state for thread id 0x%x " % tid) 906*8d741a5dSApple OSS Distributions print(thobj) 907*8d741a5dSApple OSS Distributions return regs.GetPackedRegisterState() 908