1*4f1223e8SApple OSS Distributions /* quick and dirty hack to grab credential backtrace info from kernel via sysctl.
2*4f1223e8SApple OSS Distributions * sysctl is only defined if xnu is built with DEBUG_CRED defined.
3*4f1223e8SApple OSS Distributions * The current version of this is used to target a specific credential and gather
4*4f1223e8SApple OSS Distributions * backtrace info on all references and unreferences.
5*4f1223e8SApple OSS Distributions */
6*4f1223e8SApple OSS Distributions
7*4f1223e8SApple OSS Distributions #include <stdio.h>
8*4f1223e8SApple OSS Distributions #include <stdlib.h>
9*4f1223e8SApple OSS Distributions #include <fcntl.h>
10*4f1223e8SApple OSS Distributions #include <limits.h>
11*4f1223e8SApple OSS Distributions #include <string.h>
12*4f1223e8SApple OSS Distributions #include <errno.h>
13*4f1223e8SApple OSS Distributions #include <unistd.h>
14*4f1223e8SApple OSS Distributions #include <sys/stat.h>
15*4f1223e8SApple OSS Distributions #include <sys/types.h>
16*4f1223e8SApple OSS Distributions #include <sys/sysctl.h>
17*4f1223e8SApple OSS Distributions #include <bsm/audit.h>
18*4f1223e8SApple OSS Distributions
19*4f1223e8SApple OSS Distributions /* bad! this is replicated in kern_credential.c. make sure they stay in sync!
20*4f1223e8SApple OSS Distributions * Or better yet have commone header file?
21*4f1223e8SApple OSS Distributions */
22*4f1223e8SApple OSS Distributions #define MAX_STACK_DEPTH 8
23*4f1223e8SApple OSS Distributions struct cred_backtrace {
24*4f1223e8SApple OSS Distributions int depth;
25*4f1223e8SApple OSS Distributions uint32_t stack[MAX_STACK_DEPTH];
26*4f1223e8SApple OSS Distributions };
27*4f1223e8SApple OSS Distributions typedef struct cred_backtrace cred_backtrace;
28*4f1223e8SApple OSS Distributions
29*4f1223e8SApple OSS Distributions struct cred_debug_buffer {
30*4f1223e8SApple OSS Distributions int next_slot;
31*4f1223e8SApple OSS Distributions cred_backtrace stack_buffer[1];
32*4f1223e8SApple OSS Distributions };
33*4f1223e8SApple OSS Distributions typedef struct cred_debug_buffer cred_debug_buffer;
34*4f1223e8SApple OSS Distributions
35*4f1223e8SApple OSS Distributions
main(int argc,char * argv[])36*4f1223e8SApple OSS Distributions main( int argc, char *argv[] )
37*4f1223e8SApple OSS Distributions {
38*4f1223e8SApple OSS Distributions int err, i, j;
39*4f1223e8SApple OSS Distributions size_t len;
40*4f1223e8SApple OSS Distributions char *my_bufferp = NULL;
41*4f1223e8SApple OSS Distributions cred_debug_buffer *bt_buffp;
42*4f1223e8SApple OSS Distributions cred_backtrace *btp;
43*4f1223e8SApple OSS Distributions
44*4f1223e8SApple OSS Distributions /* get size of buffer we will need */
45*4f1223e8SApple OSS Distributions len = 0;
46*4f1223e8SApple OSS Distributions err = sysctlbyname( "kern.cred_bt", NULL, &len, NULL, 0 );
47*4f1223e8SApple OSS Distributions if (err != 0) {
48*4f1223e8SApple OSS Distributions printf( "sysctl failed \n" );
49*4f1223e8SApple OSS Distributions printf( "\terrno %d - \"%s\" \n", errno, strerror( errno ));
50*4f1223e8SApple OSS Distributions return;
51*4f1223e8SApple OSS Distributions }
52*4f1223e8SApple OSS Distributions
53*4f1223e8SApple OSS Distributions /* get a buffer for our back traces */
54*4f1223e8SApple OSS Distributions my_bufferp = malloc( len );
55*4f1223e8SApple OSS Distributions if (my_bufferp == NULL) {
56*4f1223e8SApple OSS Distributions printf( "malloc error %d - \"%s\" \n", errno, strerror( errno ));
57*4f1223e8SApple OSS Distributions return;
58*4f1223e8SApple OSS Distributions }
59*4f1223e8SApple OSS Distributions err = sysctlbyname( "kern.cred_bt", my_bufferp, &len, NULL, 0 );
60*4f1223e8SApple OSS Distributions if (err != 0) {
61*4f1223e8SApple OSS Distributions printf( "sysctl 2 failed \n" );
62*4f1223e8SApple OSS Distributions printf( "\terrno %d - \"%s\" \n", errno, strerror( errno ));
63*4f1223e8SApple OSS Distributions return;
64*4f1223e8SApple OSS Distributions }
65*4f1223e8SApple OSS Distributions
66*4f1223e8SApple OSS Distributions bt_buffp = (cred_debug_buffer *) my_bufferp;
67*4f1223e8SApple OSS Distributions btp = &bt_buffp->stack_buffer[0];
68*4f1223e8SApple OSS Distributions
69*4f1223e8SApple OSS Distributions printf("number of traces %d \n", bt_buffp->next_slot);
70*4f1223e8SApple OSS Distributions for (i = 0; i < bt_buffp->next_slot; i++, btp++) {
71*4f1223e8SApple OSS Distributions printf("[%d] ", i);
72*4f1223e8SApple OSS Distributions for (j = 0; j < btp->depth; j++) {
73*4f1223e8SApple OSS Distributions printf("%p ", btp->stack[j]);
74*4f1223e8SApple OSS Distributions }
75*4f1223e8SApple OSS Distributions printf("\n");
76*4f1223e8SApple OSS Distributions }
77*4f1223e8SApple OSS Distributions
78*4f1223e8SApple OSS Distributions return;
79*4f1223e8SApple OSS Distributions }
80