-
Notifications
You must be signed in to change notification settings - Fork 584
/
kernel_abi.h
2655 lines (2399 loc) · 67.2 KB
/
kernel_abi.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
/* -*- Mode: C++; tab-width: 8; c-basic-offset: 2; indent-tabs-mode: nil; -*- */
#ifndef RR_KERNEL_ABI_H
#define RR_KERNEL_ABI_H
#include <signal.h>
#include <vector>
#include "core.h"
#include "log.h"
#include "remote_ptr.h"
namespace rr {
class remote_code_ptr;
class Task;
enum SupportedArch { x86, x86_64, aarch64, SupportedArch_MAX = aarch64 };
#if defined(__i386__)
const SupportedArch RR_NATIVE_ARCH = SupportedArch::x86;
#elif defined(__x86_64__)
const SupportedArch RR_NATIVE_ARCH = SupportedArch::x86_64;
#elif defined(__aarch64__)
const SupportedArch RR_NATIVE_ARCH = SupportedArch::aarch64;
#else
#error need to define new SupportedArch enum
#endif
inline bool is_x86ish(SupportedArch arch_) {
return arch_ == x86 || arch_ == x86_64;
}
int to_audit_arch(SupportedArch arch);
template <SupportedArch a, typename system_type, typename rr_type>
struct Verifier {
// Optimistically say we are the same size.
static const bool same_size = true;
};
template <typename system_type, typename rr_type>
struct Verifier<RR_NATIVE_ARCH, system_type, rr_type> {
static const bool same_size = sizeof(system_type) == sizeof(rr_type);
};
template <typename T> struct Verifier<RR_NATIVE_ARCH, T, T> {
// Prevent us from accidentally verifying the size of rr's structure
// with itself or (unlikely) the system's structure with itself.
};
// We want verify that the types have the same size as their
// counterparts in the system header. To avoid having to include
// all system headers here, we instead make the verification macros
// a no-op unless included from kernel_abi.cc.
#ifndef RR_VERIFY_TYPE
#define RR_VERIFY_TYPE_ARCH(arch_, system_type_, rr_type_) // no-op
#define RR_VERIFY_TYPE_EXPLICIT(system_type_, rr_type_) // no-op
#define RR_VERIFY_TYPE(x) // no-op
#endif
// For structs whose native definitions only exist on x86
#ifndef RR_VERIFY_TYPE_X86
#define RR_VERIFY_TYPE_X86_ARCH(arch_, system_type_, rr_type_) // no-op
#define RR_VERIFY_TYPE_X86(x) // no-op
#endif
struct KernelConstants {
// These are the same across all architectures. The kernel defines them for
// all architectures in the uapi headers, but the libc's headers may not.
// Further, the libc headers may conflict with the kernel headers, so for
// simplicity, we just define everything here:
static const int PTRACE_TRACEME = 0;
static const int PTRACE_PEEKTEXT = 1;
static const int PTRACE_PEEKDATA = 2;
static const int PTRACE_PEEKUSR = 3;
// PEEKUSER is a libc alias.
static const int PTRACE_PEEKUSER = PTRACE_PEEKUSR;
static const int PTRACE_POKETEXT = 4;
static const int PTRACE_POKEDATA = 5;
static const int PTRACE_POKEUSR = 6;
// POKEUSER is a libc alias.
static const int PTRACE_POKEUSER = PTRACE_POKEUSR;
static const int PTRACE_CONT = 7;
static const int PTRACE_KILL = 8;
static const int PTRACE_SINGLESTEP = 9;
// PTRACE_GETREGS actually does vary but it's 12 on every arch we care about.
static const int PTRACE_GETREGS = 12;
static const int PTRACE_GETFPREGS = 14;
static const int PTRACE_SETFPREGS = 15;
static const int PTRACE_ATTACH = 16;
static const int PTRACE_DETACH = 17;
static const int PTRACE_SYSCALL = 24;
static const int PTRACE_SETOPTIONS = 0x4200;
static const int PTRACE_GETEVENTMSG = 0x4201;
static const int PTRACE_GETSIGINFO = 0x4202;
static const int PTRACE_SETSIGINFO = 0x4203;
static const int PTRACE_GETREGSET = 0x4204;
static const int PTRACE_SETREGSET = 0x4205;
static const int PTRACE_SEIZE = 0x4206;
static const int PTRACE_INTERRUPT = 0x4207;
static const int PTRACE_LISTEN = 0x4208;
static const int PTRACE_GETSIGMASK = 0x420a;
static const int PTRACE_SETSIGMASK = 0x420b;
static const int PTRACE_GET_SYSCALL_INFO = 0x420e;
static const int PTRACE_EVENT_NONE = 0;
static const int PTRACE_EVENT_FORK = 1;
static const int PTRACE_EVENT_VFORK = 2;
static const int PTRACE_EVENT_CLONE = 3;
static const int PTRACE_EVENT_EXEC = 4;
static const int PTRACE_EVENT_VFORK_DONE = 5;
static const int PTRACE_EVENT_EXIT = 6;
static const int PTRACE_EVENT_SECCOMP = 7; // ubuntu 12.10 and future kernels
static const int PTRACE_EVENT_SECCOMP_OBSOLETE = 8; // ubuntu 12.04
static const int PTRACE_EVENT_STOP = 128;
static const int PTRACE_O_TRACESYSGOOD = 1;
static const int PTRACE_O_TRACEFORK = 1 << PTRACE_EVENT_FORK;
static const int PTRACE_O_TRACEVFORK = 1 << PTRACE_EVENT_VFORK;
static const int PTRACE_O_TRACECLONE = 1 << PTRACE_EVENT_CLONE;
static const int PTRACE_O_TRACEEXEC = 1 << PTRACE_EVENT_EXEC;
static const int PTRACE_O_TRACEVFORKDONE = 1 << PTRACE_EVENT_VFORK_DONE;
static const int PTRACE_O_TRACEEXIT = 1 << PTRACE_EVENT_EXIT;
static const int PTRACE_O_TRACESECCOMP = 1 << PTRACE_EVENT_SECCOMP;
static const int PTRACE_O_EXITKILL = 1 << 20;
static const int PTRACE_SYSCALL_INFO_NONE = 0;
static const int PTRACE_SYSCALL_INFO_ENTRY = 1;
static const int PTRACE_SYSCALL_INFO_EXIT = 2;
static const int PTRACE_SYSCALL_INFO_SECCOMP = 3;
static const ::size_t SIGINFO_MAX_SIZE = 128;
// These types are the same size everywhere.
typedef int32_t pid_t;
typedef uint32_t uid_t;
typedef uint32_t gid_t;
typedef uint32_t socklen_t;
typedef uint64_t dev_t;
typedef uint32_t mode_t;
typedef int32_t __kernel_timer_t;
};
// These duplicate the matching F_* constants for commands for fcntl, with two
// small differences: we unconditionally define the *64 variants to their values
// for 32-bit systems. This change enables us to always use our constants in
// switch cases without worrying about duplicated case values and makes dealing
// with 32-bit and 64-bit tracees in the same rr process simpler.
//
// The other small difference is that we define these constants without the F_
// prefix, so as to not run afoul of the C preprocessor.
struct FcntlConstants {
enum FcntlOperation {
DUPFD = 0,
GETFD = 1,
SETFD = 2,
GETFL = 3,
SETFL = 4,
GETLK = 5,
SETLK = 6,
SETLKW = 7,
SETOWN = 8,
GETOWN = 9,
SETSIG = 10,
GETSIG = 11,
GETLK64 = 12,
SETLK64 = 13,
SETLKW64 = 14,
SETOWN_EX = 15,
GETOWN_EX = 16,
// Open File descriptor locks (Linux specific)
OFD_GETLK = 36,
OFD_SETLK = 37,
OFD_SETLKW = 38,
// Other Linux-specific operations
NOTIFY = 0x400 + 2,
DUPFD_CLOEXEC = 0x400 + 6,
SETPIPE_SZ = 0x400 + 7,
GETPIPE_SZ = 0x400 + 8,
ADD_SEALS = 0x400 + 9,
GET_SEALS = 0x400 + 10,
GET_RW_HINT = 0x400 + 11,
SET_RW_HINT = 0x400 + 12,
GET_FILE_RW_HINT = 0x400 + 13,
SET_FILE_RW_HINT = 0x400 + 14,
};
};
// Various ELF constants we use. These are verified to be the same
// as those in the system headers by kernel_abi.cc
enum ELFCLASS { CLASSNONE = 0, CLASS32 = 1, CLASS64 = 2 };
enum ELFENDIAN { DATA2LSB = 1 };
enum EM {
I386 = 3,
X86_64 = 62,
AARCH64 = 183
};
struct WordSize32Defs {
static const ::size_t SIGINFO_PAD_SIZE =
(KernelConstants::SIGINFO_MAX_SIZE / sizeof(int32_t)) - 3;
typedef int16_t signed_short;
typedef uint16_t unsigned_short;
typedef int32_t signed_int;
typedef uint32_t unsigned_int;
typedef int32_t signed_long;
typedef uint32_t unsigned_long;
typedef int32_t signed_word;
typedef uint32_t unsigned_word;
typedef uint32_t size_t;
typedef int32_t ssize_t;
// These really only exist as proper abstractions so that adding x32
// (x86-64's ILP32 ABI) support is relatively easy.
typedef int32_t syscall_slong_t;
typedef uint32_t syscall_ulong_t;
typedef int32_t sigchld_clock_t;
typedef uint32_t __statfs_word;
static const size_t elfclass = ELFCLASS::CLASS32;
typedef struct {
uint8_t e_ident[16];
uint16_t e_type;
uint16_t e_machine;
uint32_t e_version;
uint32_t e_entry;
uint32_t e_phoff;
uint32_t e_shoff;
uint32_t e_flags;
uint16_t e_ehsize;
uint16_t e_phentsize;
uint16_t e_phnum;
uint16_t e_shentsize;
uint16_t e_shnum;
uint16_t e_shstrndx;
} ElfEhdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf32_Ehdr, ElfEhdr);
typedef struct {
uint32_t p_type;
uint32_t p_offset;
uint32_t p_vaddr;
uint32_t p_paddr;
uint32_t p_filesz;
uint32_t p_memsz;
uint32_t p_flags;
uint32_t p_align;
} ElfPhdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf32_Phdr, ElfPhdr);
typedef struct {
uint32_t sh_name;
uint32_t sh_type;
uint32_t sh_flags;
uint32_t sh_addr;
uint32_t sh_offset;
uint32_t sh_size;
uint32_t sh_link;
uint32_t sh_info;
uint32_t sh_addralign;
uint32_t sh_entsize;
} ElfShdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf32_Shdr, ElfShdr);
typedef struct {
uint32_t ch_type;
uint32_t ch_size;
uint32_t ch_addralign;
} ElfChdr;
typedef struct {
uint32_t st_name;
uint32_t st_value;
uint32_t st_size;
uint8_t st_info;
uint8_t st_other;
uint16_t st_shndx;
} ElfSym;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf32_Sym, ElfSym);
typedef struct {
int32_t d_tag;
uint32_t d_val;
} ElfDyn;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf32_Dyn, ElfDyn);
typedef struct {
uint32_t n_namesz;
uint32_t n_descsz;
uint32_t n_type;
} ElfNhdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf32_Nhdr, ElfNhdr);
};
struct WordSize64Defs {
static const ::size_t SIGINFO_PAD_SIZE =
(KernelConstants::SIGINFO_MAX_SIZE / sizeof(int32_t)) - 4;
typedef int16_t signed_short;
typedef uint16_t unsigned_short;
typedef int32_t signed_int;
typedef uint32_t unsigned_int;
typedef int64_t signed_long;
typedef uint64_t unsigned_long;
typedef int64_t signed_word;
typedef uint64_t unsigned_word;
typedef uint64_t size_t;
typedef int64_t ssize_t;
// These really only exist as proper abstractions so that adding x32
// (x86-64's ILP32 ABI) support is relatively easy.
typedef int64_t syscall_slong_t;
typedef uint64_t syscall_ulong_t;
typedef int64_t sigchld_clock_t;
typedef signed_long __statfs_word;
static const size_t elfclass = ELFCLASS::CLASS64;
typedef struct {
uint8_t e_ident[16];
uint16_t e_type;
uint16_t e_machine;
uint32_t e_version;
uint64_t e_entry;
uint64_t e_phoff;
uint64_t e_shoff;
uint32_t e_flags;
uint16_t e_ehsize;
uint16_t e_phentsize;
uint16_t e_phnum;
uint16_t e_shentsize;
uint16_t e_shnum;
uint16_t e_shstrndx;
} ElfEhdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf64_Ehdr, ElfEhdr);
typedef struct {
uint32_t p_type;
uint32_t p_flags;
uint64_t p_offset;
uint64_t p_vaddr;
uint64_t p_paddr;
uint64_t p_filesz;
uint64_t p_memsz;
uint64_t p_align;
} ElfPhdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf64_Phdr, ElfPhdr);
typedef struct {
uint32_t sh_name;
uint32_t sh_type;
uint64_t sh_flags;
uint64_t sh_addr;
uint64_t sh_offset;
uint64_t sh_size;
uint32_t sh_link;
uint32_t sh_info;
uint64_t sh_addralign;
uint64_t sh_entsize;
} ElfShdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf64_Shdr, ElfShdr);
typedef struct {
uint32_t ch_type;
uint32_t ch_reserved;
uint64_t ch_size;
uint64_t ch_addralign;
} ElfChdr;
typedef struct {
uint32_t st_name;
uint8_t st_info;
uint8_t st_other;
uint16_t st_shndx;
uint64_t st_value;
uint64_t st_size;
} ElfSym;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf64_Sym, ElfSym);
typedef struct {
uint64_t d_tag;
uint64_t d_val;
} ElfDyn;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf64_Dyn, ElfDyn);
typedef struct {
uint32_t n_namesz;
uint32_t n_descsz;
uint32_t n_type;
} ElfNhdr;
RR_VERIFY_TYPE_ARCH(RR_NATIVE_ARCH, ::Elf64_Nhdr, ElfNhdr);
};
/**
* Structs defined in BaseArch and its derivatives should not contain any
* holes. Holes can cause divergence if such structs are copied from rr to
* the tracee.
*/
template <SupportedArch arch_, typename wordsize>
struct BaseArch : public wordsize,
public FcntlConstants,
public KernelConstants {
static SupportedArch arch() { return arch_; }
static bool is_x86ish() {
return rr::is_x86ish(arch_);
}
typedef typename wordsize::syscall_slong_t syscall_slong_t;
typedef typename wordsize::syscall_ulong_t syscall_ulong_t;
typedef typename wordsize::signed_int signed_int;
typedef typename wordsize::unsigned_int unsigned_int;
typedef typename wordsize::signed_short signed_short;
typedef typename wordsize::unsigned_short unsigned_short;
typedef typename wordsize::signed_long signed_long;
typedef typename wordsize::unsigned_long unsigned_long;
typedef typename wordsize::unsigned_word unsigned_word;
typedef typename wordsize::size_t size_t;
typedef typename wordsize::ssize_t ssize_t;
typedef typename wordsize::sigchld_clock_t sigchld_clock_t;
typedef typename wordsize::__statfs_word __statfs_word;
typedef syscall_slong_t time_t;
typedef syscall_slong_t off_t;
typedef syscall_slong_t blkcnt_t;
typedef syscall_slong_t blksize_t;
typedef syscall_ulong_t rlim_t;
typedef syscall_ulong_t fsblkcnt_t;
typedef syscall_ulong_t fsfilcnt_t;
typedef syscall_ulong_t ino_t;
typedef syscall_ulong_t nlink_t;
typedef int64_t off64_t;
typedef int64_t loff_t;
typedef uint64_t rlim64_t;
typedef uint64_t ino64_t;
typedef int64_t blkcnt64_t;
typedef syscall_slong_t clock_t;
typedef signed_int __kernel_key_t;
typedef signed_int __kernel_uid32_t;
typedef signed_int __kernel_gid32_t;
typedef unsigned_int __kernel_mode_t;
typedef unsigned_long __kernel_ulong_t;
typedef signed_long __kernel_long_t;
typedef __kernel_long_t __kernel_time_t;
typedef __kernel_long_t __kernel_suseconds_t;
typedef signed_int __kernel_pid_t;
typedef int64_t __kernel_loff_t;
typedef uint32_t __u32;
typedef uint64_t __u64;
typedef __u64 aligned_u64 __attribute((aligned(8)));
// If they are defined in the header, undef them now.
// In rr, we always refer to them as these constants.
#undef PTRACE_GETREGS
#undef PTRACE_SETREGS
#undef PTRACE_GETFPREGS
#undef PTRACE_SETFPREGS
#undef PTRACE_GETFPXREGS
#undef PTRACE_SETFPXREGS
#undef PTRACE_OLDSETOPTIONS
#undef PTRACE_GET_THREAD_AREA
#undef PTRACE_SET_THREAD_AREA
#undef PTRACE_ARCH_PRCTL
#undef PTRACE_SYSEMU
#undef PTRACE_SYSEMU_SINGLESTEP
// These are architecture specific and may not exist on any given
// architecture or the number assigned on the architecture may vary.
// Here we give each of these a unique negative number that makes writing
// architecture generic code easier (the same approach is used for
// architecture specific syscalls).
static const int PTRACE_GETREGS = -1;
static const int PTRACE_SETREGS = -2;
static const int PTRACE_GETFPREGS = -3;
static const int PTRACE_SETFPREGS = -4;
static const int PTRACE_GETFPXREGS = -5;
static const int PTRACE_SETFPXREGS = -6;
static const int PTRACE_OLDSETOPTIONS = -7;
static const int PTRACE_GET_THREAD_AREA = -8;
static const int PTRACE_SET_THREAD_AREA = -9;
static const int PTRACE_ARCH_PRCTL = -10;
static const int PTRACE_SYSEMU = -11;
static const int PTRACE_SYSEMU_SINGLESTEP = -12;
template <typename T> struct ptr {
typedef T Referent;
unsigned_word val;
template <typename U> operator remote_ptr<U>() const { return rptr(); }
/**
* Sometimes you need to call rptr() directly to resolve ambiguous
* overloading.
*/
remote_ptr<T> rptr() const { return remote_ptr<T>(val); }
template <typename U> ptr<T>& operator=(remote_ptr<U> p) {
remote_ptr<T> pt = p;
val = pt.as_int();
DEBUG_ASSERT(val == pt.as_int());
return *this;
}
operator bool() const { return val; }
static size_t referent_size() { return sizeof(T); }
};
template <typename T> struct ptr64 {
typedef T Referent;
aligned_u64 val;
template <typename U> operator remote_ptr<U>() const { return rptr(); }
/**
* Sometimes you need to call rptr() directly to resolve ambiguous
* overloading.
*/
remote_ptr<T> rptr() const { return remote_ptr<T>(val); }
template <typename U> ptr64<T>& operator=(remote_ptr<U> p) {
remote_ptr<T> pt = p;
val = pt.as_int();
DEBUG_ASSERT(val == pt.as_int());
return *this;
}
operator bool() const { return val; }
static size_t referent_size() { return sizeof(T); }
};
union sigval_t {
signed_int sival_int;
ptr<void> sival_ptr;
};
struct sockaddr {
unsigned_short sa_family;
char sa_data[14];
};
RR_VERIFY_TYPE(sockaddr);
struct sockaddr_storage {
char sa_data[128];
};
RR_VERIFY_TYPE(sockaddr_storage);
struct sockaddr_un {
unsigned_short sun_family;
char sun_path[108];
};
RR_VERIFY_TYPE(sockaddr_un);
struct timeval {
__kernel_time_t tv_sec;
__kernel_suseconds_t tv_usec;
};
RR_VERIFY_TYPE(timeval);
struct timespec {
__kernel_time_t tv_sec;
syscall_slong_t tv_nsec;
};
RR_VERIFY_TYPE(timespec);
struct pollfd {
signed_int fd;
signed_short events;
signed_short revents;
};
RR_VERIFY_TYPE(pollfd);
struct iovec {
ptr<void> iov_base;
size_t iov_len;
};
RR_VERIFY_TYPE(iovec);
struct msghdr {
ptr<void> msg_name;
socklen_t msg_namelen;
char _padding[sizeof(ptr<void>) - sizeof(socklen_t)];
ptr<iovec> msg_iov;
size_t msg_iovlen;
ptr<void> msg_control;
size_t msg_controllen;
signed_int msg_flags;
};
RR_VERIFY_TYPE(msghdr);
struct cmsghdr {
size_t cmsg_len;
int cmsg_level;
int cmsg_type;
};
RR_VERIFY_TYPE(cmsghdr);
struct mmsghdr {
msghdr msg_hdr;
unsigned_int msg_len;
};
RR_VERIFY_TYPE(mmsghdr);
// x86-64 is the only architecture to pack this structure, and it does
// so to make the x86 and x86-64 definitions identical. So even if
// we're compiling on an x86-64 host that will support recording
// 32-bit and 64-bit programs, this is the correct way to declare
// epoll_event for both kinds of recordees.
// See <linux/eventpoll.h>.
#if defined(__x86_64__)
#define RR_EPOLL_PACKED __attribute__((packed))
#else
#define RR_EPOLL_PACKED
#endif
struct epoll_event {
union epoll_data {
ptr<void> ptr_;
signed_int fd;
uint32_t u32;
uint64_t u64;
};
uint32_t events;
epoll_data data;
} RR_EPOLL_PACKED;
RR_VERIFY_TYPE(epoll_event);
#undef RR_EPOLL_PACKED
struct rusage {
timeval ru_utime;
timeval ru_stime;
signed_long ru_maxrss;
signed_long ru_ixrss;
signed_long ru_idrss;
signed_long ru_isrss;
signed_long ru_minflt;
signed_long ru_majflt;
signed_long ru_nswap;
signed_long ru_inblock;
signed_long ru_oublock;
signed_long ru_msgnsd;
signed_long ru_msgrcv;
signed_long ru_nsignals;
signed_long ru_nvcsw;
signed_long ru_nivcsw;
};
RR_VERIFY_TYPE(rusage);
struct siginfo_t {
signed_int si_signo;
signed_int si_errno;
signed_int si_code;
union {
signed_int padding[wordsize::SIGINFO_PAD_SIZE];
// <bits/siginfo.h> #defines all the field names belong due to X/Open
// requirements, so we append '_'.
struct {
pid_t si_pid_;
uid_t si_uid_;
} _kill;
struct {
signed_int si_tid_;
signed_int si_overrun_;
sigval_t si_sigval_;
} _timer;
struct {
pid_t si_pid_;
uid_t si_uid_;
sigval_t si_sigval_;
} _rt;
struct {
pid_t si_pid_;
uid_t si_uid_;
signed_int si_status_;
sigchld_clock_t si_utime_;
sigchld_clock_t si_stime_;
} _sigchld;
struct {
ptr<void> si_addr_;
signed_short si_addr_lsb_;
union {
struct {
ptr<void> _lower;
ptr<void> _upper;
} _addr_bnds;
uint32_t _pkey;
} _bounds;
} _sigfault;
struct {
signed_long si_band_;
signed_int si_fd_;
} _sigpoll;
struct {
ptr<void> _call_addr;
signed_int _syscall;
unsigned_int _arch;
} _sigsys;
} _sifields;
};
RR_VERIFY_TYPE_EXPLICIT(siginfo_t, ::siginfo_t)
typedef unsigned char cc_t;
typedef unsigned_int speed_t;
typedef unsigned_int tcflag_t;
struct termios {
tcflag_t c_iflag;
tcflag_t c_oflag;
tcflag_t c_cflag;
tcflag_t c_lflag;
cc_t c_line;
cc_t c_cc[19];
};
/* We don't verify termios because the kernel and glibc don't agree on its
* layout and ensuring that we only have the kernel termios visible here is
* a pain.
*/
struct termio {
unsigned_short c_iflag;
unsigned_short c_oflag;
unsigned_short c_cflag;
unsigned_short c_lflag;
unsigned char c_line;
unsigned char c_cc[8];
};
RR_VERIFY_TYPE(termio);
struct seccomp_notif_sizes {
uint16_t seccomp_notif;
uint16_t seccomp_notif_resp;
uint16_t seccomp_data;
};
// seccomp_notif_sizes is not present in older kernels
// RR_VERIFY_TYPE(seccomp_notif_sizes);
struct serial_struct {
signed_int type;
signed_int line;
unsigned_int port;
signed_int irq;
signed_int flags;
signed_int xmit_fifo_size;
signed_int custom_divisor;
signed_int baud_base;
unsigned_short close_delay;
char io_type;
char reserved_char[1];
signed_int hub6;
unsigned_short closing_wait;
unsigned_short closing_wait2;
ptr<unsigned char> iomem_base;
unsigned_short iomem_reg_shift;
unsigned_int port_high;
unsigned_long iomap_base;
};
RR_VERIFY_TYPE(serial_struct);
struct winsize {
unsigned_short ws_row;
unsigned_short ws_col;
unsigned_short ws_xpixel;
unsigned_short ws_ypixel;
};
RR_VERIFY_TYPE(winsize);
struct ipc64_perm {
__kernel_key_t key;
__kernel_uid32_t uid;
__kernel_gid32_t gid;
__kernel_uid32_t cuid;
__kernel_gid32_t cgid;
__kernel_mode_t mode;
unsigned_short seq;
unsigned_short __pad2;
char __pad3[sizeof(__kernel_ulong_t) - 2 * sizeof(unsigned_short)];
__kernel_ulong_t unused1;
__kernel_ulong_t unused2;
};
RR_VERIFY_TYPE(ipc64_perm);
struct msqid64_ds {
ipc64_perm msg_perm;
// These msg*time fields are really __kernel_time_t plus
// appropriate padding. We don't touch the fields, though.
//
// We do, however, suffix them with _only_little_endian to
// urge anybody who does touch them to make sure the right
// thing is done for big-endian systems.
uint64_t msg_stime_only_little_endian;
uint64_t msg_rtime_only_little_endian;
uint64_t msg_ctime_only_little_endian;
__kernel_ulong_t msg_cbytes;
__kernel_ulong_t msg_qnum;
__kernel_ulong_t msg_qbytes;
__kernel_pid_t msg_lspid;
__kernel_pid_t msg_lrpid;
__kernel_ulong_t unused1;
__kernel_ulong_t unused2;
};
RR_VERIFY_TYPE(msqid64_ds);
struct msginfo {
signed_int msgpool;
signed_int msgmap;
signed_int msgmax;
signed_int msgmnb;
signed_int msgmni;
signed_int msgssz;
signed_int msgtql;
unsigned_short msgseg;
};
RR_VERIFY_TYPE(msginfo);
/* Don't align for the 64-bit values on 32-bit x86 */
struct __attribute__((packed)) shmid64_ds {
ipc64_perm shm_perm;
size_t shm_segsz;
uint64_t shm_atime_only_little_endian;
uint64_t shm_dtime_only_little_endian;
uint64_t shm_ctime_only_little_endian;
__kernel_pid_t shm_cpid;
__kernel_pid_t shm_lpid;
__kernel_ulong_t shm_nattch;
__kernel_ulong_t unused4;
__kernel_ulong_t unused5;
};
RR_VERIFY_TYPE(shmid64_ds);
struct shminfo64 {
__kernel_ulong_t shmmax;
__kernel_ulong_t shmmin;
__kernel_ulong_t shmmni;
__kernel_ulong_t shmseg;
__kernel_ulong_t shmall;
__kernel_ulong_t unused1;
__kernel_ulong_t unused2;
__kernel_ulong_t unused3;
__kernel_ulong_t unused4;
};
RR_VERIFY_TYPE(shminfo64);
struct shm_info {
int used_ids;
char __pad[sizeof(__kernel_ulong_t) - sizeof(int)];
__kernel_ulong_t shm_tot;
__kernel_ulong_t shm_rss;
__kernel_ulong_t shm_swp;
__kernel_ulong_t swap_attempts;
__kernel_ulong_t swap_successes;
};
RR_VERIFY_TYPE(shm_info);
struct seminfo {
int semmap;
int semmni;
int semmns;
int semmnu;
int semmsl;
int semopm;
int semume;
int semusz;
int semvmx;
int semaem;
};
RR_VERIFY_TYPE(seminfo);
// The clone(2) syscall has four (!) different calling conventions,
// depending on what architecture it's being compiled for. We describe
// the orderings for x86oids here.
enum CloneParameterOrdering {
FlagsStackParentTLSChild,
FlagsStackParentChildTLS,
};
// Despite the clone(2) manpage describing the clone syscall as taking a
// pointer to |struct user_desc*|, the actual kernel interface treats the
// TLS value as a opaque cookie, which architectures are then free to do
// whatever they like with. See for instance the definition of TLS_VALUE
// in nptl/sysdeps/pthread/createthread.c in the glibc source. We need to
// describe what the architecture uses so we can record things accurately.
enum CloneTLSType {
// |struct user_desc*|
UserDescPointer,
// This is the default choice for TLS_VALUE in the glibc source.
PthreadStructurePointer,
};
struct user_desc {
unsigned_int entry_number;
unsigned_int base_addr;
unsigned_int limit;
unsigned_int seg_32bit : 1;
unsigned_int contents : 2;
unsigned_int read_exec_only : 1;
unsigned_int limit_in_pages : 1;
unsigned_int seg_not_present : 1;
unsigned_int useable : 1;
unsigned_int lm : 1;
};
RR_VERIFY_TYPE_X86(user_desc);
struct __user_cap_header_struct {
__u32 version;
int pid;
};
RR_VERIFY_TYPE(__user_cap_header_struct);
struct __user_cap_data_struct {
__u32 effective;
__u32 permitted;
__u32 inheritable;
};
RR_VERIFY_TYPE(__user_cap_data_struct);
// This structure uses fixed-size fields, but the padding rules
// for 32-bit vs. 64-bit architectures dictate that it be
// defined in full.
struct dqblk {
uint64_t dqb_bhardlimit;
uint64_t dqb_bsoftlimit;
uint64_t dqb_curspace;
uint64_t dqb_ihardlimit;
uint64_t dqb_isoftlimit;
uint64_t dqb_curinodes;
uint64_t dqb_btime;
uint64_t dqb_itime;
uint32_t dqb_valid;
};
RR_VERIFY_TYPE(dqblk);
struct dqinfo {
uint64_t dqi_bgrace;
uint64_t dqi_igrace;
uint32_t dqi_flags;
uint32_t dqi_valid;
};
RR_VERIFY_TYPE(dqinfo);
struct ifmap {
unsigned_long mem_start;
unsigned_long mem_end;
unsigned_short base_addr;
unsigned char irq;
unsigned char dma;
unsigned char port;
};
RR_VERIFY_TYPE(ifmap);
struct if_settings {
unsigned_int type;
unsigned_int size;
union {
ptr<void> raw_hdlc;
ptr<void> cisco;
ptr<void> fr;
ptr<void> fr_pvc;
ptr<void> fr_pvc_info;
ptr<void> sync;
ptr<void> tel;
} ifs_ifsu;
};
RR_VERIFY_TYPE(if_settings);
struct ifreq {
union {
char ifrn_name[16];
} ifr_ifrn;
union {
sockaddr ifru_addr;
sockaddr ifru_dstaddr;
sockaddr ifru_broadaddr;
sockaddr ifru_netmask;
sockaddr ifru_hwaddr;
signed_short ifru_flags;
signed_int ifru_ivalue;
signed_int ifru_mtu;
ifmap ifru_map;
char ifru_slave[16];
char ifru_newname[16];
ptr<void> ifru_data;
if_settings ifru_settings;
} ifr_ifru;
};
RR_VERIFY_TYPE(ifreq);
struct ifconf {
signed_int ifc_len;
char __pad[sizeof(ptr<void>) - sizeof(int)];
union {
ptr<char> ifcu_buf;
ptr<ifreq> ifcu_req;
} ifc_ifcu;
};
RR_VERIFY_TYPE(ifconf);
struct iw_param {
int32_t value;
uint8_t fixed;
uint8_t disabled;
uint16_t flags;
};
RR_VERIFY_TYPE(iw_param);
struct iw_point {
ptr<void> pointer;