1/*-
2 * SPDX-License-Identifier: BSD-2-Clause
3 *
4 * Copyright 2001 Jamey Wood
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 *    notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 *    notice, this list of conditions and the following disclaimer in the
13 *    documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25 * SUCH DAMAGE.
26 */
27
28#include <sys/queue.h>
29
30#define	FOLLOWFORKS		0x00000001
31#define	RELATIVETIMESTAMPS	0x00000002
32#define	ABSOLUTETIMESTAMPS	0x00000004
33#define	NOSIGS			0x00000008
34#define	EXECVEARGS		0x00000010
35#define	EXECVEENVS		0x00000020
36#define	COUNTONLY		0x00000040
37#define	DISPLAYTIDS		0x00000080
38
39struct procinfo;
40struct syscall;
41struct trussinfo;
42
43/*
44 * The lookup of normal system calls are optimized by using a fixed
45 * array for the first 1024 system calls that can be indexed directly.
46 * Unknown system calls with other IDs are stored in a linked list.
47 */
48#define	SYSCALL_NORMAL_COUNT	1024
49
50struct extra_syscall {
51	STAILQ_ENTRY(extra_syscall) entries;
52	struct syscall *sc;
53	u_int number;
54};
55
56struct procabi {
57	const char *type;
58	enum sysdecode_abi abi;
59	size_t pointer_size;
60	const char *compat_prefix;
61	STAILQ_HEAD(, extra_syscall) extra_syscalls;
62	struct syscall *syscalls[SYSCALL_NORMAL_COUNT];
63};
64
65/*
66 * This is confusingly named.  It holds per-thread state about the
67 * currently executing system call.  syscall.h defines a struct
68 * syscall that holds metadata used to format system call arguments.
69 *
70 * NB: args[] stores the raw argument values (e.g. from registers)
71 * passed to the system call.  s_args[] stores a string representation
72 * of a system call's arguments.  These do not necessarily map one to
73 * one.  A system call description may omit individual arguments
74 * (padding) or combine adjacent arguments (e.g. when passing an off_t
75 * argument on a 32-bit system).  The nargs member contains the count
76 * of valid pointers in s_args[], not args[].
77 */
78struct current_syscall {
79	struct syscall *sc;
80	unsigned int number;
81	unsigned int nargs;
82	syscallarg_t args[10];
83	char *s_args[10];	/* the printable arguments */
84};
85
86struct threadinfo
87{
88	LIST_ENTRY(threadinfo) entries;
89	struct procinfo *proc;
90	lwpid_t tid;
91	int in_syscall;
92	struct current_syscall cs;
93	struct timespec before;
94	struct timespec after;
95};
96
97struct procinfo {
98	LIST_ENTRY(procinfo) entries;
99	pid_t pid;
100	struct procabi *abi;
101
102	LIST_HEAD(, threadinfo) threadlist;
103};
104
105struct trussinfo
106{
107	int flags;
108	int strsize;
109	FILE *outfile;
110
111	struct timespec start_time;
112
113	struct threadinfo *curthread;
114
115	LIST_HEAD(, procinfo) proclist;
116};
117