xref: /onnv-gate/usr/src/cmd/truss/actions.c (revision 328:01eb04557a9e)
10Sstevel@tonic-gate /*
20Sstevel@tonic-gate  * CDDL HEADER START
30Sstevel@tonic-gate  *
40Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
50Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
60Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
70Sstevel@tonic-gate  * with the License.
80Sstevel@tonic-gate  *
90Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
100Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
110Sstevel@tonic-gate  * See the License for the specific language governing permissions
120Sstevel@tonic-gate  * and limitations under the License.
130Sstevel@tonic-gate  *
140Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
150Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
160Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
170Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
180Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
190Sstevel@tonic-gate  *
200Sstevel@tonic-gate  * CDDL HEADER END
210Sstevel@tonic-gate  */
220Sstevel@tonic-gate /*
230Sstevel@tonic-gate  * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
240Sstevel@tonic-gate  * Use is subject to license terms.
250Sstevel@tonic-gate  */
260Sstevel@tonic-gate 
270Sstevel@tonic-gate /*	Copyright (c) 1988 AT&T	*/
280Sstevel@tonic-gate /*	  All Rights Reserved  	*/
290Sstevel@tonic-gate 
300Sstevel@tonic-gate 
310Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
320Sstevel@tonic-gate 
330Sstevel@tonic-gate #include <stdio.h>
340Sstevel@tonic-gate #include <stdlib.h>
350Sstevel@tonic-gate #include <unistd.h>
360Sstevel@tonic-gate #include <ctype.h>
370Sstevel@tonic-gate #include <string.h>
380Sstevel@tonic-gate #include <memory.h>
390Sstevel@tonic-gate #include <errno.h>
400Sstevel@tonic-gate #include <limits.h>
410Sstevel@tonic-gate #include <sys/types.h>
420Sstevel@tonic-gate #include <sys/stack.h>
430Sstevel@tonic-gate #include <signal.h>
440Sstevel@tonic-gate #include <sys/isa_defs.h>
450Sstevel@tonic-gate #include <libproc.h>
460Sstevel@tonic-gate #include <priv.h>
470Sstevel@tonic-gate #include "ramdata.h"
480Sstevel@tonic-gate #include "systable.h"
490Sstevel@tonic-gate #include "print.h"
500Sstevel@tonic-gate #include "proto.h"
510Sstevel@tonic-gate 
520Sstevel@tonic-gate /*
530Sstevel@tonic-gate  * Actions to take when process stops.
540Sstevel@tonic-gate  */
550Sstevel@tonic-gate 
560Sstevel@tonic-gate /*
570Sstevel@tonic-gate  * Function prototypes for static routines in this module.
580Sstevel@tonic-gate  */
590Sstevel@tonic-gate int	stopsig(private_t *);
600Sstevel@tonic-gate void	showpaths(private_t *, const struct systable *);
610Sstevel@tonic-gate void	showargs(private_t *, int);
620Sstevel@tonic-gate void	dumpargs(private_t *, long, const char *);
630Sstevel@tonic-gate 
640Sstevel@tonic-gate /*
650Sstevel@tonic-gate  * Report an lwp to be sleeping (if true).
660Sstevel@tonic-gate  */
670Sstevel@tonic-gate void
680Sstevel@tonic-gate report_sleeping(private_t *pri, int dotrace)
690Sstevel@tonic-gate {
700Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
710Sstevel@tonic-gate 	int sys = Lsp->pr_syscall;
720Sstevel@tonic-gate 
730Sstevel@tonic-gate 	if (!prismember(&trace, sys) || !dotrace ||
740Sstevel@tonic-gate 	    !(Lsp->pr_flags & (PR_ASLEEP|PR_VFORKP))) {
750Sstevel@tonic-gate 		/* Make sure we catch sysexit even if we're not tracing it. */
760Sstevel@tonic-gate 		(void) Psysexit(Proc, sys, TRUE);
770Sstevel@tonic-gate 		return;
780Sstevel@tonic-gate 	}
790Sstevel@tonic-gate 
800Sstevel@tonic-gate 	pri->length = 0;
810Sstevel@tonic-gate 	pri->Errno = 0;
820Sstevel@tonic-gate 	pri->ErrPriv = PRIV_NONE;
830Sstevel@tonic-gate 	pri->Rval1 = pri->Rval2 = 0;
840Sstevel@tonic-gate 	(void) sysentry(pri, dotrace);
850Sstevel@tonic-gate 	make_pname(pri, 0);
860Sstevel@tonic-gate 	putpname(pri);
870Sstevel@tonic-gate 	timestamp(pri);
880Sstevel@tonic-gate 	pri->length += printf("%s", pri->sys_string);
890Sstevel@tonic-gate 	pri->sys_leng = 0;
900Sstevel@tonic-gate 	*pri->sys_string = '\0';
910Sstevel@tonic-gate 	pri->length >>= 3;
920Sstevel@tonic-gate 	if (Lsp->pr_flags & PR_VFORKP)
930Sstevel@tonic-gate 		pri->length += 2;
940Sstevel@tonic-gate 	if (pri->length >= 4)
950Sstevel@tonic-gate 		(void) fputc(' ', stdout);
960Sstevel@tonic-gate 	for (; pri->length < 4; pri->length++)
970Sstevel@tonic-gate 		(void) fputc('\t', stdout);
980Sstevel@tonic-gate 	if (Lsp->pr_flags & PR_VFORKP)
990Sstevel@tonic-gate 		(void) fputs("(waiting for child to exit()/exec()...)\n",
1000Sstevel@tonic-gate 			stdout);
1010Sstevel@tonic-gate 	else
1020Sstevel@tonic-gate 		(void) fputs("(sleeping...)\n", stdout);
1030Sstevel@tonic-gate 	pri->length = 0;
1040Sstevel@tonic-gate 	if (prismember(&verbose, sys)) {
1050Sstevel@tonic-gate 		int raw = prismember(&rawout, sys);
1060Sstevel@tonic-gate 		pri->Errno = 1;
1070Sstevel@tonic-gate 		expound(pri, 0, raw);
1080Sstevel@tonic-gate 		pri->Errno = 0;
1090Sstevel@tonic-gate 	}
1100Sstevel@tonic-gate 	Flush();
1110Sstevel@tonic-gate }
1120Sstevel@tonic-gate 
1130Sstevel@tonic-gate /*
1140Sstevel@tonic-gate  * requested() gets called for these reasons:
1150Sstevel@tonic-gate  *	flag == JOBSIG:		report nothing; change state to JOBSTOP
1160Sstevel@tonic-gate  *	flag == JOBSTOP:	report "Continued ..."
1170Sstevel@tonic-gate  *	default:		report sleeping system call
1180Sstevel@tonic-gate  *
1190Sstevel@tonic-gate  * It returns a new flag:  JOBSTOP or SLEEPING or 0.
1200Sstevel@tonic-gate  */
1210Sstevel@tonic-gate int
1220Sstevel@tonic-gate requested(private_t *pri, int flag, int dotrace)
1230Sstevel@tonic-gate {
1240Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
1250Sstevel@tonic-gate 	int sig = Lsp->pr_cursig;
1260Sstevel@tonic-gate 	int newflag = 0;
1270Sstevel@tonic-gate 
1280Sstevel@tonic-gate 	switch (flag) {
1290Sstevel@tonic-gate 	case JOBSIG:
1300Sstevel@tonic-gate 		return (JOBSTOP);
1310Sstevel@tonic-gate 
1320Sstevel@tonic-gate 	case JOBSTOP:
1330Sstevel@tonic-gate 		if (dotrace && !cflag && prismember(&signals, sig)) {
1340Sstevel@tonic-gate 			pri->length = 0;
1350Sstevel@tonic-gate 			putpname(pri);
1360Sstevel@tonic-gate 			timestamp(pri);
1370Sstevel@tonic-gate 			(void) printf("    Continued with signal #%d, %s",
1380Sstevel@tonic-gate 				sig, signame(pri, sig));
1390Sstevel@tonic-gate 			if (Lsp->pr_action.sa_handler == SIG_DFL)
1400Sstevel@tonic-gate 				(void) printf(" [default]");
1410Sstevel@tonic-gate 			else if (Lsp->pr_action.sa_handler == SIG_IGN)
1420Sstevel@tonic-gate 				(void) printf(" [ignored]");
1430Sstevel@tonic-gate 			else
1440Sstevel@tonic-gate 				(void) printf(" [caught]");
1450Sstevel@tonic-gate 			(void) fputc('\n', stdout);
1460Sstevel@tonic-gate 			Flush();
1470Sstevel@tonic-gate 		}
1480Sstevel@tonic-gate 		newflag = 0;
1490Sstevel@tonic-gate 		break;
1500Sstevel@tonic-gate 
1510Sstevel@tonic-gate 	default:
1520Sstevel@tonic-gate 		newflag = SLEEPING;
1530Sstevel@tonic-gate 		if (!cflag)
1540Sstevel@tonic-gate 			report_sleeping(pri, dotrace);
1550Sstevel@tonic-gate 		break;
1560Sstevel@tonic-gate 	}
1570Sstevel@tonic-gate 
1580Sstevel@tonic-gate 	return (newflag);
1590Sstevel@tonic-gate }
1600Sstevel@tonic-gate 
1610Sstevel@tonic-gate int
1620Sstevel@tonic-gate jobcontrol(private_t *pri, int dotrace)
1630Sstevel@tonic-gate {
1640Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
1650Sstevel@tonic-gate 	int sig = stopsig(pri);
1660Sstevel@tonic-gate 
1670Sstevel@tonic-gate 	if (sig == 0)
1680Sstevel@tonic-gate 		return (0);
1690Sstevel@tonic-gate 
1700Sstevel@tonic-gate 	if (dotrace && !cflag &&		/* not just counting */
1710Sstevel@tonic-gate 	    prismember(&signals, sig)) {	/* tracing this signal */
1720Sstevel@tonic-gate 		int sys;
1730Sstevel@tonic-gate 
1740Sstevel@tonic-gate 		pri->length = 0;
1750Sstevel@tonic-gate 		putpname(pri);
1760Sstevel@tonic-gate 		timestamp(pri);
1770Sstevel@tonic-gate 		(void) printf("    Stopped by signal #%d, %s",
1780Sstevel@tonic-gate 			sig, signame(pri, sig));
1790Sstevel@tonic-gate 		if ((Lsp->pr_flags & PR_ASLEEP) &&
1800Sstevel@tonic-gate 		    (sys = Lsp->pr_syscall) > 0 && sys <= PRMAXSYS)
1810Sstevel@tonic-gate 			(void) printf(", in %s()",
1820Sstevel@tonic-gate 				sysname(pri, sys, getsubcode(pri)));
1830Sstevel@tonic-gate 		(void) fputc('\n', stdout);
1840Sstevel@tonic-gate 		Flush();
1850Sstevel@tonic-gate 	}
1860Sstevel@tonic-gate 
1870Sstevel@tonic-gate 	return (JOBSTOP);
1880Sstevel@tonic-gate }
1890Sstevel@tonic-gate 
1900Sstevel@tonic-gate /*
1910Sstevel@tonic-gate  * Return the signal the process stopped on iff process is already stopped on
1920Sstevel@tonic-gate  * PR_JOBCONTROL or is stopped on PR_SIGNALLED or PR_REQUESTED with a current
1930Sstevel@tonic-gate  * signal that will cause a JOBCONTROL stop when the process is set running.
1940Sstevel@tonic-gate  */
1950Sstevel@tonic-gate int
1960Sstevel@tonic-gate stopsig(private_t *pri)
1970Sstevel@tonic-gate {
1980Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
1990Sstevel@tonic-gate 	int sig = 0;
2000Sstevel@tonic-gate 
2010Sstevel@tonic-gate 	if (Lsp->pr_flags & PR_STOPPED) {
2020Sstevel@tonic-gate 		switch (Lsp->pr_why) {
2030Sstevel@tonic-gate 		case PR_JOBCONTROL:
2040Sstevel@tonic-gate 			sig = Lsp->pr_what;
2050Sstevel@tonic-gate 			if (sig < 0 || sig > PRMAXSIG)
2060Sstevel@tonic-gate 				sig = 0;
2070Sstevel@tonic-gate 			break;
2080Sstevel@tonic-gate 		case PR_SIGNALLED:
2090Sstevel@tonic-gate 		case PR_REQUESTED:
2100Sstevel@tonic-gate 			if (Lsp->pr_action.sa_handler == SIG_DFL) {
2110Sstevel@tonic-gate 				switch (Lsp->pr_cursig) {
2120Sstevel@tonic-gate 				case SIGSTOP:
2130Sstevel@tonic-gate 					sig = SIGSTOP;
2140Sstevel@tonic-gate 					break;
2150Sstevel@tonic-gate 				case SIGTSTP:
2160Sstevel@tonic-gate 				case SIGTTIN:
2170Sstevel@tonic-gate 				case SIGTTOU:
2180Sstevel@tonic-gate 					if (!(Lsp->pr_flags & PR_ORPHAN))
2190Sstevel@tonic-gate 						sig = Lsp->pr_cursig;
2200Sstevel@tonic-gate 					break;
2210Sstevel@tonic-gate 				}
2220Sstevel@tonic-gate 			}
2230Sstevel@tonic-gate 			break;
2240Sstevel@tonic-gate 		}
2250Sstevel@tonic-gate 	}
2260Sstevel@tonic-gate 
2270Sstevel@tonic-gate 	return (sig);
2280Sstevel@tonic-gate }
2290Sstevel@tonic-gate 
2300Sstevel@tonic-gate int
2310Sstevel@tonic-gate signalled(private_t *pri, int flag, int dotrace)
2320Sstevel@tonic-gate {
2330Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
2340Sstevel@tonic-gate 	int sig = Lsp->pr_what;
2350Sstevel@tonic-gate 
2360Sstevel@tonic-gate 	if (sig <= 0 || sig > PRMAXSIG)	/* check bounds */
2370Sstevel@tonic-gate 		return (0);
2380Sstevel@tonic-gate 
2390Sstevel@tonic-gate 	if (dotrace && cflag) {			/* just counting */
2400Sstevel@tonic-gate 		(void) mutex_lock(&count_lock);
2410Sstevel@tonic-gate 		Cp->sigcount[sig]++;
2420Sstevel@tonic-gate 		(void) mutex_unlock(&count_lock);
2430Sstevel@tonic-gate 	}
2440Sstevel@tonic-gate 
2450Sstevel@tonic-gate 	if (sig == SIGCONT && (flag == JOBSIG || flag == JOBSTOP))
2460Sstevel@tonic-gate 		flag = requested(pri, JOBSTOP, dotrace);
2470Sstevel@tonic-gate 	else if ((flag = jobcontrol(pri, dotrace)) == 0 &&
2480Sstevel@tonic-gate 	    !cflag && dotrace &&
2490Sstevel@tonic-gate 	    prismember(&signals, sig)) {
2500Sstevel@tonic-gate 		int sys;
2510Sstevel@tonic-gate 
2520Sstevel@tonic-gate 		pri->length = 0;
2530Sstevel@tonic-gate 		putpname(pri);
2540Sstevel@tonic-gate 		timestamp(pri);
2550Sstevel@tonic-gate 		(void) printf("    Received signal #%d, %s",
2560Sstevel@tonic-gate 			sig, signame(pri, sig));
2570Sstevel@tonic-gate 		if ((Lsp->pr_flags & PR_ASLEEP) &&
2580Sstevel@tonic-gate 		    (sys = Lsp->pr_syscall) > 0 && sys <= PRMAXSYS)
2590Sstevel@tonic-gate 			(void) printf(", in %s()",
2600Sstevel@tonic-gate 				sysname(pri, sys, getsubcode(pri)));
2610Sstevel@tonic-gate 		if (Lsp->pr_action.sa_handler == SIG_DFL)
2620Sstevel@tonic-gate 			(void) printf(" [default]");
2630Sstevel@tonic-gate 		else if (Lsp->pr_action.sa_handler == SIG_IGN)
2640Sstevel@tonic-gate 			(void) printf(" [ignored]");
2650Sstevel@tonic-gate 		else
2660Sstevel@tonic-gate 			(void) printf(" [caught]");
2670Sstevel@tonic-gate 		(void) fputc('\n', stdout);
2680Sstevel@tonic-gate 		if (Lsp->pr_info.si_code != 0 ||
2690Sstevel@tonic-gate 		    Lsp->pr_info.si_pid != 0)
2700Sstevel@tonic-gate 			print_siginfo(pri, &Lsp->pr_info);
2710Sstevel@tonic-gate 		Flush();
2720Sstevel@tonic-gate 	}
2730Sstevel@tonic-gate 
2740Sstevel@tonic-gate 	if (flag == JOBSTOP)
2750Sstevel@tonic-gate 		flag = JOBSIG;
2760Sstevel@tonic-gate 	return (flag);
2770Sstevel@tonic-gate }
2780Sstevel@tonic-gate 
2790Sstevel@tonic-gate int
2800Sstevel@tonic-gate faulted(private_t *pri, int dotrace)
2810Sstevel@tonic-gate {
2820Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
2830Sstevel@tonic-gate 	int flt = Lsp->pr_what;
2840Sstevel@tonic-gate 
2850Sstevel@tonic-gate 	if ((uint_t)flt > PRMAXFAULT || !prismember(&faults, flt) || !dotrace)
2860Sstevel@tonic-gate 		return (0);
2870Sstevel@tonic-gate 
2880Sstevel@tonic-gate 	(void) mutex_lock(&count_lock);
2890Sstevel@tonic-gate 	Cp->fltcount[flt]++;
2900Sstevel@tonic-gate 	(void) mutex_unlock(&count_lock);
2910Sstevel@tonic-gate 
2920Sstevel@tonic-gate 	if (cflag)		/* just counting */
2930Sstevel@tonic-gate 		return (1);
2940Sstevel@tonic-gate 
2950Sstevel@tonic-gate 	pri->length = 0;
2960Sstevel@tonic-gate 	putpname(pri);
2970Sstevel@tonic-gate 	timestamp(pri);
2980Sstevel@tonic-gate 
2990Sstevel@tonic-gate 	(void) printf("    Incurred fault #%d, %s  %%pc = 0x%.8lX",
3000Sstevel@tonic-gate 		flt, proc_fltname(flt, pri->flt_name, sizeof (pri->flt_name)),
3010Sstevel@tonic-gate 		(long)Lsp->pr_reg[R_PC]);
3020Sstevel@tonic-gate 
3030Sstevel@tonic-gate 	if (flt == FLTPAGE)
3040Sstevel@tonic-gate 		(void) printf("  addr = 0x%.8lX",
3050Sstevel@tonic-gate 			(long)Lsp->pr_info.si_addr);
3060Sstevel@tonic-gate 	(void) fputc('\n', stdout);
3070Sstevel@tonic-gate 	if (Lsp->pr_info.si_signo != 0)
3080Sstevel@tonic-gate 		print_siginfo(pri, &Lsp->pr_info);
3090Sstevel@tonic-gate 	Flush();
3100Sstevel@tonic-gate 	return (1);
3110Sstevel@tonic-gate }
3120Sstevel@tonic-gate 
3130Sstevel@tonic-gate /*
3140Sstevel@tonic-gate  * Set up pri->sys_nargs and pri->sys_args[] (syscall args).
3150Sstevel@tonic-gate  */
3160Sstevel@tonic-gate void
3170Sstevel@tonic-gate setupsysargs(private_t *pri, int what)
3180Sstevel@tonic-gate {
3190Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
3200Sstevel@tonic-gate 	int nargs;
3210Sstevel@tonic-gate 	int i;
3220Sstevel@tonic-gate 
3230Sstevel@tonic-gate #if sparc
3240Sstevel@tonic-gate 	/* determine whether syscall is indirect */
3250Sstevel@tonic-gate 	pri->sys_indirect = (Lsp->pr_reg[R_G1] == SYS_syscall)? 1 : 0;
3260Sstevel@tonic-gate #else
3270Sstevel@tonic-gate 	pri->sys_indirect = 0;
3280Sstevel@tonic-gate #endif
3290Sstevel@tonic-gate 
3300Sstevel@tonic-gate 	(void) memset(pri->sys_args, 0, sizeof (pri->sys_args));
3310Sstevel@tonic-gate 	if (what != Lsp->pr_syscall) {	/* assertion */
3320Sstevel@tonic-gate 		(void) printf("%s\t*** Inconsistent syscall: %d vs %d ***\n",
3330Sstevel@tonic-gate 			pri->pname, what, Lsp->pr_syscall);
3340Sstevel@tonic-gate 	}
3350Sstevel@tonic-gate 	nargs = Lsp->pr_nsysarg;
3360Sstevel@tonic-gate 	for (i = 0;
3370Sstevel@tonic-gate 	    i < nargs && i < sizeof (pri->sys_args) / sizeof (pri->sys_args[0]);
3380Sstevel@tonic-gate 	    i++)
3390Sstevel@tonic-gate 		pri->sys_args[i] = Lsp->pr_sysarg[i];
3400Sstevel@tonic-gate 	pri->sys_nargs = nargs;
3410Sstevel@tonic-gate }
3420Sstevel@tonic-gate 
3430Sstevel@tonic-gate #define	ISREAD(code) \
3440Sstevel@tonic-gate 	((code) == SYS_read || (code) == SYS_pread || \
3450Sstevel@tonic-gate 	(code) == SYS_pread64 || (code) == SYS_readv || \
3460Sstevel@tonic-gate 	(code) == SYS_recv || (code) == SYS_recvfrom)
3470Sstevel@tonic-gate #define	ISWRITE(code) \
3480Sstevel@tonic-gate 	((code) == SYS_write || (code) == SYS_pwrite || \
3490Sstevel@tonic-gate 	(code) == SYS_pwrite64 || (code) == SYS_writev || \
3500Sstevel@tonic-gate 	(code) == SYS_send || (code) == SYS_sendto)
3510Sstevel@tonic-gate 
3520Sstevel@tonic-gate /*
3530Sstevel@tonic-gate  * Return TRUE iff syscall is being traced.
3540Sstevel@tonic-gate  */
3550Sstevel@tonic-gate int
3560Sstevel@tonic-gate sysentry(private_t *pri, int dotrace)
3570Sstevel@tonic-gate {
3580Sstevel@tonic-gate 	pid_t pid = Pstatus(Proc)->pr_pid;
3590Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
3600Sstevel@tonic-gate 	long arg;
3610Sstevel@tonic-gate 	int nargs;
3620Sstevel@tonic-gate 	int i;
3630Sstevel@tonic-gate 	int x;
3640Sstevel@tonic-gate 	int len;
3650Sstevel@tonic-gate 	char *s;
3660Sstevel@tonic-gate 	const struct systable *stp;
3670Sstevel@tonic-gate 	int what = Lsp->pr_what;
3680Sstevel@tonic-gate 	int subcode;
3690Sstevel@tonic-gate 	int istraced;
3700Sstevel@tonic-gate 	int raw;
3710Sstevel@tonic-gate 
3720Sstevel@tonic-gate 	/* for reporting sleeping system calls */
3730Sstevel@tonic-gate 	if (what == 0 && (Lsp->pr_flags & (PR_ASLEEP|PR_VFORKP)))
3740Sstevel@tonic-gate 		what = Lsp->pr_syscall;
3750Sstevel@tonic-gate 
3760Sstevel@tonic-gate 	/* protect ourself from operating system error */
3770Sstevel@tonic-gate 	if (what <= 0 || what > PRMAXSYS)
3780Sstevel@tonic-gate 		what = 0;
3790Sstevel@tonic-gate 
3800Sstevel@tonic-gate 	/*
3810Sstevel@tonic-gate 	 * Set up the system call arguments (pri->sys_nargs & pri->sys_args[]).
3820Sstevel@tonic-gate 	 */
3830Sstevel@tonic-gate 	setupsysargs(pri, what);
3840Sstevel@tonic-gate 	nargs = pri->sys_nargs;
3850Sstevel@tonic-gate 
3860Sstevel@tonic-gate 	/* get systable entry for this syscall */
3870Sstevel@tonic-gate 	subcode = getsubcode(pri);
3880Sstevel@tonic-gate 	stp = subsys(what, subcode);
3890Sstevel@tonic-gate 
3900Sstevel@tonic-gate 	if (nargs > stp->nargs)
3910Sstevel@tonic-gate 		nargs = stp->nargs;
3920Sstevel@tonic-gate 	pri->sys_nargs = nargs;
3930Sstevel@tonic-gate 
3940Sstevel@tonic-gate 	/* fetch and remember first argument if it's a string */
3950Sstevel@tonic-gate 	pri->sys_valid = FALSE;
3960Sstevel@tonic-gate 	if (nargs > 0 && stp->arg[0] == STG) {
3970Sstevel@tonic-gate 		long offset;
3980Sstevel@tonic-gate 		uint32_t offset32;
3990Sstevel@tonic-gate 
4000Sstevel@tonic-gate 		/*
4010Sstevel@tonic-gate 		 * Special case for exit from exec().
4020Sstevel@tonic-gate 		 * The address in pri->sys_args[0] refers to the old process
4030Sstevel@tonic-gate 		 * image.  We must fetch the string from the new image.
4040Sstevel@tonic-gate 		 */
4050Sstevel@tonic-gate 		if (Lsp->pr_why == PR_SYSEXIT &&
4060Sstevel@tonic-gate 		    (Lsp->pr_what == SYS_execve ||
4070Sstevel@tonic-gate 		    Lsp->pr_what == SYS_exec)) {
4080Sstevel@tonic-gate 			psinfo_t psinfo;
4090Sstevel@tonic-gate 			long argv;
4100Sstevel@tonic-gate 			auxv_t auxv[32];
4110Sstevel@tonic-gate 			int naux;
4120Sstevel@tonic-gate 
4130Sstevel@tonic-gate 			offset = 0;
4140Sstevel@tonic-gate 			naux = proc_get_auxv(pid, auxv, 32);
4150Sstevel@tonic-gate 			for (i = 0; i < naux; i++) {
4160Sstevel@tonic-gate 				if (auxv[i].a_type == AT_SUN_EXECNAME) {
4170Sstevel@tonic-gate 					offset = (long)auxv[i].a_un.a_ptr;
4180Sstevel@tonic-gate 					break;
4190Sstevel@tonic-gate 				}
4200Sstevel@tonic-gate 			}
4210Sstevel@tonic-gate 			if (offset == 0 &&
4220Sstevel@tonic-gate 			    proc_get_psinfo(pid, &psinfo) == 0) {
4230Sstevel@tonic-gate 				argv = (long)psinfo.pr_argv;
4240Sstevel@tonic-gate 				if (data_model == PR_MODEL_LP64)
4250Sstevel@tonic-gate 					(void) Pread(Proc, &offset,
4260Sstevel@tonic-gate 						sizeof (offset), argv);
4270Sstevel@tonic-gate 				else {
4280Sstevel@tonic-gate 					offset32 = 0;
4290Sstevel@tonic-gate 					(void) Pread(Proc, &offset32,
4300Sstevel@tonic-gate 						sizeof (offset32), argv);
4310Sstevel@tonic-gate 					offset = offset32;
4320Sstevel@tonic-gate 				}
4330Sstevel@tonic-gate 			}
4340Sstevel@tonic-gate 		} else {
4350Sstevel@tonic-gate 			offset = pri->sys_args[0];
4360Sstevel@tonic-gate 		}
4370Sstevel@tonic-gate 		if ((s = fetchstring(pri, offset, PATH_MAX)) != NULL) {
4380Sstevel@tonic-gate 			pri->sys_valid = TRUE;
4390Sstevel@tonic-gate 			len = strlen(s);
4400Sstevel@tonic-gate 			/* reallocate if necessary */
4410Sstevel@tonic-gate 			while (len >= pri->sys_psize) {
4420Sstevel@tonic-gate 				free(pri->sys_path);
4430Sstevel@tonic-gate 				pri->sys_path = my_malloc(pri->sys_psize *= 2,
4440Sstevel@tonic-gate 					"pathname buffer");
4450Sstevel@tonic-gate 			}
4460Sstevel@tonic-gate 			(void) strcpy(pri->sys_path, s); /* remember pathname */
4470Sstevel@tonic-gate 		}
4480Sstevel@tonic-gate 	}
4490Sstevel@tonic-gate 
4500Sstevel@tonic-gate 	istraced = dotrace && prismember(&trace, what);
4510Sstevel@tonic-gate 	raw = prismember(&rawout, what);
4520Sstevel@tonic-gate 
4530Sstevel@tonic-gate 	/* force tracing of read/write buffer dump syscalls */
4540Sstevel@tonic-gate 	if (!istraced && nargs > 2) {
4550Sstevel@tonic-gate 		int fdp1 = (int)pri->sys_args[0] + 1;
4560Sstevel@tonic-gate 
4570Sstevel@tonic-gate 		if (ISREAD(what)) {
4580Sstevel@tonic-gate 			if (prismember(&readfd, fdp1))
4590Sstevel@tonic-gate 				istraced = TRUE;
4600Sstevel@tonic-gate 		} else if (ISWRITE(what)) {
4610Sstevel@tonic-gate 			if (prismember(&writefd, fdp1))
4620Sstevel@tonic-gate 				istraced = TRUE;
4630Sstevel@tonic-gate 		}
4640Sstevel@tonic-gate 	}
4650Sstevel@tonic-gate 
4660Sstevel@tonic-gate 	pri->sys_leng = 0;
4670Sstevel@tonic-gate 	if (cflag || !istraced)		/* just counting */
4680Sstevel@tonic-gate 		*pri->sys_string = 0;
4690Sstevel@tonic-gate 	else {
4700Sstevel@tonic-gate 		int argprinted = FALSE;
4710Sstevel@tonic-gate 		const char *name;
4720Sstevel@tonic-gate 
4730Sstevel@tonic-gate 		name = sysname(pri, what, raw ? -1 : subcode);
4740Sstevel@tonic-gate 		grow(pri, strlen(name) + 1);
4750Sstevel@tonic-gate 		pri->sys_leng = snprintf(pri->sys_string, pri->sys_ssize,
4760Sstevel@tonic-gate 			"%s(", name);
4770Sstevel@tonic-gate 		for (i = 0; i < nargs; i++) {
4780Sstevel@tonic-gate 			arg = pri->sys_args[i];
4790Sstevel@tonic-gate 			x = stp->arg[i];
4800Sstevel@tonic-gate 
4810Sstevel@tonic-gate 			if (x == STG && !raw &&
4820Sstevel@tonic-gate 			    i == 0 && pri->sys_valid) {	/* already fetched */
4830Sstevel@tonic-gate 				escape_string(pri, pri->sys_path);
4840Sstevel@tonic-gate 				argprinted = TRUE;
4850Sstevel@tonic-gate 			} else if (x != HID || raw) {
4860Sstevel@tonic-gate 				if (argprinted)
4870Sstevel@tonic-gate 					outstring(pri, ", ");
4880Sstevel@tonic-gate 				if (x == LLO)
4890Sstevel@tonic-gate 					(*Print[x])(pri, raw, arg,
4900Sstevel@tonic-gate 						pri->sys_args[++i]);
4910Sstevel@tonic-gate 				else
4920Sstevel@tonic-gate 					(*Print[x])(pri, raw, arg);
4930Sstevel@tonic-gate 				/*
4940Sstevel@tonic-gate 				 * if nothing printed, then don't print ", "
4950Sstevel@tonic-gate 				 */
4960Sstevel@tonic-gate 				if (x == NOV)
4970Sstevel@tonic-gate 					argprinted = FALSE;
4980Sstevel@tonic-gate 				else
4990Sstevel@tonic-gate 					argprinted = TRUE;
5000Sstevel@tonic-gate 			}
5010Sstevel@tonic-gate 		}
5020Sstevel@tonic-gate 		outstring(pri, ")");
5030Sstevel@tonic-gate 	}
5040Sstevel@tonic-gate 
5050Sstevel@tonic-gate 	return (istraced);
5060Sstevel@tonic-gate }
5070Sstevel@tonic-gate #undef	ISREAD
5080Sstevel@tonic-gate #undef	ISWRITE
5090Sstevel@tonic-gate 
5100Sstevel@tonic-gate /*
5110Sstevel@tonic-gate  * sysexit() returns non-zero if anything was printed.
5120Sstevel@tonic-gate  */
5130Sstevel@tonic-gate int
5140Sstevel@tonic-gate sysexit(private_t *pri, int dotrace)
5150Sstevel@tonic-gate {
5160Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
5170Sstevel@tonic-gate 	int what = Lsp->pr_what;
5180Sstevel@tonic-gate 	struct syscount *scp;
5190Sstevel@tonic-gate 	const struct systable *stp;
5200Sstevel@tonic-gate 	int subcode;
5210Sstevel@tonic-gate 	int istraced;
5220Sstevel@tonic-gate 	int raw;
5230Sstevel@tonic-gate 
5240Sstevel@tonic-gate 	/* protect ourself from operating system error */
5250Sstevel@tonic-gate 	if (what <= 0 || what > PRMAXSYS)
5260Sstevel@tonic-gate 		return (0);
5270Sstevel@tonic-gate 
5280Sstevel@tonic-gate 	/*
5290Sstevel@tonic-gate 	 * If we aren't supposed to be tracing this one, then
5300Sstevel@tonic-gate 	 * delete it from the traced signal set.  We got here
5310Sstevel@tonic-gate 	 * because the process was sleeping in an untraced syscall.
5320Sstevel@tonic-gate 	 */
5330Sstevel@tonic-gate 	if (!prismember(&traceeven, what)) {
5340Sstevel@tonic-gate 		(void) Psysexit(Proc, what, FALSE);
5350Sstevel@tonic-gate 		return (0);
5360Sstevel@tonic-gate 	}
5370Sstevel@tonic-gate 
5380Sstevel@tonic-gate 	/* pick up registers & set pri->Errno before anything else */
5390Sstevel@tonic-gate 	pri->Errno = Lsp->pr_errno;
5400Sstevel@tonic-gate 	pri->ErrPriv = Lsp->pr_errpriv;
5410Sstevel@tonic-gate 	pri->Rval1 = Lsp->pr_rval1;
5420Sstevel@tonic-gate 	pri->Rval2 = Lsp->pr_rval2;
5430Sstevel@tonic-gate 
5440Sstevel@tonic-gate 	switch (what) {
5450Sstevel@tonic-gate 	case SYS_exit:		/* these are traced on entry */
5460Sstevel@tonic-gate 	case SYS_lwp_exit:
5470Sstevel@tonic-gate 	case SYS_evtrapret:
5480Sstevel@tonic-gate 	case SYS_context:
5490Sstevel@tonic-gate 		istraced = dotrace && prismember(&trace, what);
5500Sstevel@tonic-gate 		break;
5510Sstevel@tonic-gate 	case SYS_exec:		/* these are normally traced on entry */
5520Sstevel@tonic-gate 	case SYS_execve:
5530Sstevel@tonic-gate 		istraced = dotrace && prismember(&trace, what);
5540Sstevel@tonic-gate 		if (pri->exec_string && *pri->exec_string) {
5550Sstevel@tonic-gate 			if (!cflag && istraced) { /* print exec() string now */
5560Sstevel@tonic-gate 				if (pri->exec_pname[0] != '\0')
5570Sstevel@tonic-gate 					(void) fputs(pri->exec_pname, stdout);
5580Sstevel@tonic-gate 				timestamp(pri);
5590Sstevel@tonic-gate 				(void) fputs(pri->exec_string, stdout);
5600Sstevel@tonic-gate 			}
5610Sstevel@tonic-gate 			pri->exec_pname[0] = '\0';
5620Sstevel@tonic-gate 			pri->exec_string[0] = '\0';
5630Sstevel@tonic-gate 			break;
5640Sstevel@tonic-gate 		}
5650Sstevel@tonic-gate 		/* FALLTHROUGH */
5660Sstevel@tonic-gate 	default:
5670Sstevel@tonic-gate 		/* we called sysentry() in main() for these */
5680Sstevel@tonic-gate 		if (what == SYS_open || what == SYS_open64)
5690Sstevel@tonic-gate 			istraced = dotrace && prismember(&trace, what);
5700Sstevel@tonic-gate 		else
5710Sstevel@tonic-gate 			istraced = sysentry(pri, dotrace) && dotrace;
5720Sstevel@tonic-gate 		pri->length = 0;
5730Sstevel@tonic-gate 		if (!cflag && istraced) {
5740Sstevel@tonic-gate 			putpname(pri);
5750Sstevel@tonic-gate 			timestamp(pri);
5760Sstevel@tonic-gate 			pri->length += printf("%s", pri->sys_string);
5770Sstevel@tonic-gate 		}
5780Sstevel@tonic-gate 		pri->sys_leng = 0;
5790Sstevel@tonic-gate 		*pri->sys_string = '\0';
5800Sstevel@tonic-gate 		break;
5810Sstevel@tonic-gate 	}
5820Sstevel@tonic-gate 
5830Sstevel@tonic-gate 	/* get systable entry for this syscall */
5840Sstevel@tonic-gate 	subcode = getsubcode(pri);
5850Sstevel@tonic-gate 	stp = subsys(what, subcode);
5860Sstevel@tonic-gate 
5870Sstevel@tonic-gate 	if (cflag && istraced) {
5880Sstevel@tonic-gate 		(void) mutex_lock(&count_lock);
5890Sstevel@tonic-gate 		scp = Cp->syscount[what];
5900Sstevel@tonic-gate 		if (subcode != -1 &&
5910Sstevel@tonic-gate 		    (what != SYS_open && what != SYS_open64 &&
5920Sstevel@tonic-gate 		    what != SYS_lwp_create))
5930Sstevel@tonic-gate 			scp += subcode;
5940Sstevel@tonic-gate 		scp->count++;
5950Sstevel@tonic-gate 		accumulate(&scp->stime, &Lsp->pr_stime, &pri->syslast);
5960Sstevel@tonic-gate 		accumulate(&Cp->usrtotal, &Lsp->pr_utime, &pri->usrlast);
5970Sstevel@tonic-gate 		pri->syslast = Lsp->pr_stime;
5980Sstevel@tonic-gate 		pri->usrlast = Lsp->pr_utime;
5990Sstevel@tonic-gate 		(void) mutex_unlock(&count_lock);
6000Sstevel@tonic-gate 	}
6010Sstevel@tonic-gate 
6020Sstevel@tonic-gate 	if (!cflag && istraced) {
6030Sstevel@tonic-gate 		if ((what == SYS_forkall ||
6040Sstevel@tonic-gate 		    what == SYS_vfork ||
6050Sstevel@tonic-gate 		    what == SYS_fork1) &&
6060Sstevel@tonic-gate 		    pri->Errno == 0 && pri->Rval2 != 0) {
6070Sstevel@tonic-gate 			pri->length &= ~07;
6080Sstevel@tonic-gate 			if (what == SYS_forkall)
6090Sstevel@tonic-gate 				pri->length -= 8;
6100Sstevel@tonic-gate 			else
6110Sstevel@tonic-gate 				(void) fputc('\t', stdout);
6120Sstevel@tonic-gate 			pri->length +=
6130Sstevel@tonic-gate 				15 + printf("\t(returning as child ...)");
6140Sstevel@tonic-gate 		}
6150Sstevel@tonic-gate 		if (what == SYS_lwp_create &&
6160Sstevel@tonic-gate 		    pri->Errno == 0 && pri->Rval1 == 0) {
6170Sstevel@tonic-gate 			pri->length &= ~07;
6180Sstevel@tonic-gate 			pri->length +=
6190Sstevel@tonic-gate 				7 + printf("\t(returning as new lwp ...)");
6200Sstevel@tonic-gate 		}
6210Sstevel@tonic-gate 		if (pri->Errno != 0 ||
6220Sstevel@tonic-gate 		    (what != SYS_exec && what != SYS_execve)) {
6230Sstevel@tonic-gate 			/* prepare to print the return code */
6240Sstevel@tonic-gate 			pri->length >>= 3;
6250Sstevel@tonic-gate 			if (pri->length >= 6)
6260Sstevel@tonic-gate 				(void) fputc(' ', stdout);
6270Sstevel@tonic-gate 			for (; pri->length < 6; pri->length++)
6280Sstevel@tonic-gate 				(void) fputc('\t', stdout);
6290Sstevel@tonic-gate 		}
6300Sstevel@tonic-gate 	}
6310Sstevel@tonic-gate 	pri->length = 0;
6320Sstevel@tonic-gate 
6330Sstevel@tonic-gate 	raw = prismember(&rawout, what);
6340Sstevel@tonic-gate 
6350Sstevel@tonic-gate 	if (pri->Errno != 0) {		/* error in syscall */
6360Sstevel@tonic-gate 		if (istraced) {
6370Sstevel@tonic-gate 			if (cflag)
6380Sstevel@tonic-gate 				scp->error++;
6390Sstevel@tonic-gate 			else {
6400Sstevel@tonic-gate 				const char *ename = errname(pri->Errno);
6410Sstevel@tonic-gate 				const char *privname;
6420Sstevel@tonic-gate 
6430Sstevel@tonic-gate 				(void) printf("Err#%d", pri->Errno);
6440Sstevel@tonic-gate 				if (ename != NULL) {
6450Sstevel@tonic-gate 					(void) fputc(' ', stdout);
6460Sstevel@tonic-gate 					(void) fputs(ename, stdout);
6470Sstevel@tonic-gate 				}
6480Sstevel@tonic-gate 				switch (pri->ErrPriv) {
6490Sstevel@tonic-gate 				case PRIV_NONE:
6500Sstevel@tonic-gate 					privname = NULL;
6510Sstevel@tonic-gate 					break;
6520Sstevel@tonic-gate 				case PRIV_ALL:
6530Sstevel@tonic-gate 					privname = "ALL";
6540Sstevel@tonic-gate 					break;
6550Sstevel@tonic-gate 				case PRIV_MULTIPLE:
6560Sstevel@tonic-gate 					privname = "MULTIPLE";
6570Sstevel@tonic-gate 					break;
6580Sstevel@tonic-gate 				case PRIV_ALLZONE:
6590Sstevel@tonic-gate 					privname = "ZONE";
6600Sstevel@tonic-gate 					break;
6610Sstevel@tonic-gate 				default:
6620Sstevel@tonic-gate 					privname = priv_getbynum(pri->ErrPriv);
6630Sstevel@tonic-gate 					break;
6640Sstevel@tonic-gate 				}
6650Sstevel@tonic-gate 				if (privname != NULL)
6660Sstevel@tonic-gate 					(void) printf(" [%s]", privname);
6670Sstevel@tonic-gate 
6680Sstevel@tonic-gate 				(void) fputc('\n', stdout);
6690Sstevel@tonic-gate 			}
6700Sstevel@tonic-gate 		}
6710Sstevel@tonic-gate 	} else {
6720Sstevel@tonic-gate 		/* show arguments on successful exec */
6730Sstevel@tonic-gate 		if (what == SYS_exec || what == SYS_execve) {
6740Sstevel@tonic-gate 			if (!cflag && istraced)
6750Sstevel@tonic-gate 				showargs(pri, raw);
6760Sstevel@tonic-gate 		} else if (!cflag && istraced) {
6770Sstevel@tonic-gate 			const char *fmt = NULL;
6780Sstevel@tonic-gate 			long rv1 = pri->Rval1;
6790Sstevel@tonic-gate 			long rv2 = pri->Rval2;
6800Sstevel@tonic-gate 
6810Sstevel@tonic-gate #ifdef _LP64
6820Sstevel@tonic-gate 			/*
6830Sstevel@tonic-gate 			 * 32-bit system calls return 32-bit values. We
6840Sstevel@tonic-gate 			 * later mask out the upper bits if we want to
6850Sstevel@tonic-gate 			 * print these as unsigned values.
6860Sstevel@tonic-gate 			 */
6870Sstevel@tonic-gate 			if (data_model == PR_MODEL_ILP32) {
6880Sstevel@tonic-gate 				rv1 = (int)rv1;
6890Sstevel@tonic-gate 				rv2 = (int)rv2;
6900Sstevel@tonic-gate 			}
6910Sstevel@tonic-gate #endif
6920Sstevel@tonic-gate 
6930Sstevel@tonic-gate 			switch (what) {
6940Sstevel@tonic-gate 			case SYS_llseek:
6950Sstevel@tonic-gate 				rv1 &= 0xffffffff;
6960Sstevel@tonic-gate 				rv2 &= 0xffffffff;
6970Sstevel@tonic-gate #ifdef _LONG_LONG_LTOH	/* first long of a longlong is the low order */
6980Sstevel@tonic-gate 				if (rv2 != 0) {
6990Sstevel@tonic-gate 					long temp = rv1;
7000Sstevel@tonic-gate 					fmt = "= 0x%lX%.8lX";
7010Sstevel@tonic-gate 					rv1 = rv2;
7020Sstevel@tonic-gate 					rv2 = temp;
7030Sstevel@tonic-gate 					break;
7040Sstevel@tonic-gate 				}
7050Sstevel@tonic-gate #else	/* the other way around */
7060Sstevel@tonic-gate 				if (rv1 != 0) {
7070Sstevel@tonic-gate 					fmt = "= 0x%lX%.8lX";
7080Sstevel@tonic-gate 					break;
7090Sstevel@tonic-gate 				}
7100Sstevel@tonic-gate 				rv1 = rv2;	/* ugly */
7110Sstevel@tonic-gate #endif
7120Sstevel@tonic-gate 				/* FALLTHROUGH */
7130Sstevel@tonic-gate 			case SYS_lseek:
7140Sstevel@tonic-gate 			case SYS_ulimit:
7150Sstevel@tonic-gate 				if (rv1 & 0xff000000) {
7160Sstevel@tonic-gate #ifdef _LP64
7170Sstevel@tonic-gate 					if (data_model == PR_MODEL_ILP32)
7180Sstevel@tonic-gate 						rv1 &= 0xffffffff;
7190Sstevel@tonic-gate #endif
7200Sstevel@tonic-gate 					fmt = "= 0x%.8lX";
7210Sstevel@tonic-gate 				}
7220Sstevel@tonic-gate 				break;
7230Sstevel@tonic-gate 			case SYS_signal:
7240Sstevel@tonic-gate 				if (raw)
7250Sstevel@tonic-gate 					/* EMPTY */;
7260Sstevel@tonic-gate 				else if (rv1 == (int)SIG_DFL)
7270Sstevel@tonic-gate 					fmt = "= SIG_DFL";
7280Sstevel@tonic-gate 				else if (rv1 == (int)SIG_IGN)
7290Sstevel@tonic-gate 					fmt = "= SIG_IGN";
7300Sstevel@tonic-gate 				else if (rv1 == (int)SIG_HOLD)
7310Sstevel@tonic-gate 					fmt = "= SIG_HOLD";
7320Sstevel@tonic-gate 				break;
7330Sstevel@tonic-gate 			case SYS_sigtimedwait:
7340Sstevel@tonic-gate 				if (raw)
7350Sstevel@tonic-gate 					/* EMPTY */;
7360Sstevel@tonic-gate 				else if ((fmt = rawsigname(pri, rv1)) != NULL) {
7370Sstevel@tonic-gate 					rv1 = (long)fmt;	/* filthy */
7380Sstevel@tonic-gate 					fmt = "= %s";
7390Sstevel@tonic-gate 				}
7400Sstevel@tonic-gate 				break;
7410Sstevel@tonic-gate 			case SYS_port:
7420Sstevel@tonic-gate #ifdef _LP64
7430Sstevel@tonic-gate 				if (data_model == PR_MODEL_LP64) {
7440Sstevel@tonic-gate 					rv2 = rv1 & 0xffffffff;
7450Sstevel@tonic-gate 					rv1 = rv1 >> 32;
7460Sstevel@tonic-gate 				}
7470Sstevel@tonic-gate #endif
7480Sstevel@tonic-gate 				break;
7490Sstevel@tonic-gate 			}
7500Sstevel@tonic-gate 
7510Sstevel@tonic-gate 			if (fmt == NULL) {
7520Sstevel@tonic-gate 				switch (stp->rval[0]) {
7530Sstevel@tonic-gate 				case HEX:
7540Sstevel@tonic-gate #ifdef _LP64
7550Sstevel@tonic-gate 					if (data_model == PR_MODEL_ILP32)
7560Sstevel@tonic-gate 						rv1 &= 0xffffffff;
7570Sstevel@tonic-gate #endif
7580Sstevel@tonic-gate 					fmt = "= 0x%.8lX";
7590Sstevel@tonic-gate 					break;
7600Sstevel@tonic-gate 				case HHX:
7610Sstevel@tonic-gate #ifdef _LP64
7620Sstevel@tonic-gate 					if (data_model == PR_MODEL_ILP32)
7630Sstevel@tonic-gate 						rv1 &= 0xffffffff;
7640Sstevel@tonic-gate #endif
7650Sstevel@tonic-gate 					fmt = "= 0x%.4lX";
7660Sstevel@tonic-gate 					break;
7670Sstevel@tonic-gate 				case OCT:
7680Sstevel@tonic-gate #ifdef _LP64
7690Sstevel@tonic-gate 					if (data_model == PR_MODEL_ILP32)
7700Sstevel@tonic-gate 						rv1 &= 0xffffffff;
7710Sstevel@tonic-gate #endif
7720Sstevel@tonic-gate 					fmt = "= %#lo";
7730Sstevel@tonic-gate 					break;
7740Sstevel@tonic-gate 				default:
7750Sstevel@tonic-gate 					fmt = "= %ld";
7760Sstevel@tonic-gate 					break;
7770Sstevel@tonic-gate 				}
7780Sstevel@tonic-gate 			}
7790Sstevel@tonic-gate 
7800Sstevel@tonic-gate 			(void) printf(fmt, rv1, rv2);
7810Sstevel@tonic-gate 
7820Sstevel@tonic-gate 			switch (stp->rval[1]) {
7830Sstevel@tonic-gate 			case NOV:
7840Sstevel@tonic-gate 				fmt = NULL;
7850Sstevel@tonic-gate 				break;
7860Sstevel@tonic-gate 			case HEX:
7870Sstevel@tonic-gate #ifdef _LP64
7880Sstevel@tonic-gate 				if (data_model == PR_MODEL_ILP32)
7890Sstevel@tonic-gate 					rv2 &= 0xffffffff;
7900Sstevel@tonic-gate #endif
7910Sstevel@tonic-gate 				fmt = " [0x%.8lX]";
7920Sstevel@tonic-gate 				break;
7930Sstevel@tonic-gate 			case HHX:
7940Sstevel@tonic-gate #ifdef _LP64
7950Sstevel@tonic-gate 				if (data_model == PR_MODEL_ILP32)
7960Sstevel@tonic-gate 					rv2 &= 0xffffffff;
7970Sstevel@tonic-gate #endif
7980Sstevel@tonic-gate 				fmt = " [0x%.4lX]";
7990Sstevel@tonic-gate 				break;
8000Sstevel@tonic-gate 			case OCT:
8010Sstevel@tonic-gate #ifdef _LP64
8020Sstevel@tonic-gate 				if (data_model == PR_MODEL_ILP32)
8030Sstevel@tonic-gate 					rv2 &= 0xffffffff;
8040Sstevel@tonic-gate #endif
8050Sstevel@tonic-gate 				fmt = " [%#lo]";
8060Sstevel@tonic-gate 				break;
8070Sstevel@tonic-gate 			default:
8080Sstevel@tonic-gate 				fmt = " [%ld]";
8090Sstevel@tonic-gate 				break;
8100Sstevel@tonic-gate 			}
8110Sstevel@tonic-gate 
8120Sstevel@tonic-gate 			if (fmt != NULL)
8130Sstevel@tonic-gate 				(void) printf(fmt, rv2);
8140Sstevel@tonic-gate 			(void) fputc('\n', stdout);
8150Sstevel@tonic-gate 		}
8160Sstevel@tonic-gate 
8170Sstevel@tonic-gate 		if (what == SYS_forkall ||
8180Sstevel@tonic-gate 		    what == SYS_vfork ||
8190Sstevel@tonic-gate 		    what == SYS_fork1) {
8200Sstevel@tonic-gate 			if (pri->Rval2 == 0)		/* child was created */
8210Sstevel@tonic-gate 				pri->child = pri->Rval1;
8220Sstevel@tonic-gate 			else if (cflag && istraced)	/* this is the child */
8230Sstevel@tonic-gate 				scp->count--;
8240Sstevel@tonic-gate 		}
8250Sstevel@tonic-gate 		if (what == SYS_lwp_create && pri->Rval1 == 0 &&
8260Sstevel@tonic-gate 		    cflag && istraced)		/* this is the created lwp */
8270Sstevel@tonic-gate 			scp->count--;
8280Sstevel@tonic-gate 	}
8290Sstevel@tonic-gate 
8300Sstevel@tonic-gate #define	ISREAD(code) \
8310Sstevel@tonic-gate 	((code) == SYS_read || (code) == SYS_pread || (code) == SYS_pread64 || \
8320Sstevel@tonic-gate 	(code) == SYS_recv || (code) == SYS_recvfrom)
8330Sstevel@tonic-gate #define	ISWRITE(code) \
8340Sstevel@tonic-gate 	((code) == SYS_write || (code) == SYS_pwrite || \
8350Sstevel@tonic-gate 	(code) == SYS_pwrite64 || (code) == SYS_send || (code) == SYS_sendto)
8360Sstevel@tonic-gate 
8370Sstevel@tonic-gate 	if (!cflag && istraced) {
8380Sstevel@tonic-gate 		int fdp1 = (int)pri->sys_args[0] + 1; /* filedescriptor + 1 */
8390Sstevel@tonic-gate 
8400Sstevel@tonic-gate 		if (raw) {
8410Sstevel@tonic-gate 			if (what != SYS_exec && what != SYS_execve)
8420Sstevel@tonic-gate 				showpaths(pri, stp);
8430Sstevel@tonic-gate 			if (ISREAD(what) || ISWRITE(what)) {
8440Sstevel@tonic-gate 				if (pri->iob_buf[0] != '\0')
8450Sstevel@tonic-gate 					(void) printf("%s     0x%.8lX: %s\n",
8460Sstevel@tonic-gate 						pri->pname, pri->sys_args[1],
8470Sstevel@tonic-gate 						pri->iob_buf);
8480Sstevel@tonic-gate 			}
8490Sstevel@tonic-gate 		}
8500Sstevel@tonic-gate 
8510Sstevel@tonic-gate 		/*
8520Sstevel@tonic-gate 		 * Show buffer contents for read()/pread() or write()/pwrite().
8530Sstevel@tonic-gate 		 * IOBSIZE bytes have already been shown;
8540Sstevel@tonic-gate 		 * don't show them again unless there's more.
8550Sstevel@tonic-gate 		 */
8560Sstevel@tonic-gate 		if ((ISREAD(what) && pri->Errno == 0 &&
8570Sstevel@tonic-gate 		    prismember(&readfd, fdp1)) ||
8580Sstevel@tonic-gate 		    (ISWRITE(what) && prismember(&writefd, fdp1))) {
8590Sstevel@tonic-gate 			long nb = ISWRITE(what) ? pri->sys_args[2] : pri->Rval1;
8600Sstevel@tonic-gate 
8610Sstevel@tonic-gate 			if (nb > IOBSIZE) {
8620Sstevel@tonic-gate 				/* enter region of lengthy output */
8630Sstevel@tonic-gate 				if (nb > MYBUFSIZ / 4)
8640Sstevel@tonic-gate 					Eserialize();
8650Sstevel@tonic-gate 
8660Sstevel@tonic-gate 				showbuffer(pri, pri->sys_args[1], nb);
8670Sstevel@tonic-gate 
8680Sstevel@tonic-gate 				/* exit region of lengthy output */
8690Sstevel@tonic-gate 				if (nb > MYBUFSIZ / 4)
8700Sstevel@tonic-gate 					Xserialize();
8710Sstevel@tonic-gate 			}
8720Sstevel@tonic-gate 		}
8730Sstevel@tonic-gate #undef	ISREAD
8740Sstevel@tonic-gate #undef	ISWRITE
8750Sstevel@tonic-gate 		/*
8760Sstevel@tonic-gate 		 * Do verbose interpretation if requested.
8770Sstevel@tonic-gate 		 * If buffer contents for read or write have been requested and
8780Sstevel@tonic-gate 		 * this is a readv() or writev(), force verbose interpretation.
8790Sstevel@tonic-gate 		 */
8800Sstevel@tonic-gate 		if (prismember(&verbose, what) ||
881*328Sja97890 		    ((what == SYS_readv || what == SYS_recvmsg) &&
882*328Sja97890 		    pri->Errno == 0 && prismember(&readfd, fdp1)) ||
883*328Sja97890 		    ((what == SYS_writev || what == SYS_sendfilev ||
884*328Sja97890 		    what == SYS_sendmsg) &&
8850Sstevel@tonic-gate 		    prismember(&writefd, fdp1)))
8860Sstevel@tonic-gate 			expound(pri, pri->Rval1, raw);
8870Sstevel@tonic-gate 	}
8880Sstevel@tonic-gate 
8890Sstevel@tonic-gate 	return (!cflag && istraced);
8900Sstevel@tonic-gate }
8910Sstevel@tonic-gate 
8920Sstevel@tonic-gate void
8930Sstevel@tonic-gate showpaths(private_t *pri, const struct systable *stp)
8940Sstevel@tonic-gate {
8950Sstevel@tonic-gate 	int i;
8960Sstevel@tonic-gate 
8970Sstevel@tonic-gate 	for (i = 0; i < pri->sys_nargs; i++) {
8980Sstevel@tonic-gate 		if ((stp->arg[i] == STG) ||
8990Sstevel@tonic-gate 		    (stp->arg[i] == RST && !pri->Errno) ||
9000Sstevel@tonic-gate 		    (stp->arg[i] == RLK && !pri->Errno && pri->Rval1 > 0)) {
9010Sstevel@tonic-gate 			long addr = pri->sys_args[i];
9020Sstevel@tonic-gate 			int maxleng =
9030Sstevel@tonic-gate 			    (stp->arg[i] == RLK)? (int)pri->Rval1 : PATH_MAX;
9040Sstevel@tonic-gate 			char *s;
9050Sstevel@tonic-gate 
9060Sstevel@tonic-gate 			if (i == 0 && pri->sys_valid)	/* already fetched */
9070Sstevel@tonic-gate 				s = pri->sys_path;
9080Sstevel@tonic-gate 			else
9090Sstevel@tonic-gate 				s = fetchstring(pri, addr,
9100Sstevel@tonic-gate 				    maxleng > PATH_MAX ? PATH_MAX : maxleng);
9110Sstevel@tonic-gate 
9120Sstevel@tonic-gate 			if (s != (char *)NULL)
9130Sstevel@tonic-gate 				(void) printf("%s     0x%.8lX: \"%s\"\n",
9140Sstevel@tonic-gate 					pri->pname, addr, s);
9150Sstevel@tonic-gate 		}
9160Sstevel@tonic-gate 	}
9170Sstevel@tonic-gate }
9180Sstevel@tonic-gate 
9190Sstevel@tonic-gate /*
9200Sstevel@tonic-gate  * Display arguments to successful exec().
9210Sstevel@tonic-gate  */
9220Sstevel@tonic-gate void
9230Sstevel@tonic-gate showargs(private_t *pri, int raw)
9240Sstevel@tonic-gate {
9250Sstevel@tonic-gate 	const lwpstatus_t *Lsp = pri->lwpstat;
9260Sstevel@tonic-gate 	int nargs;
9270Sstevel@tonic-gate 	long ap;
9280Sstevel@tonic-gate 	int ptrsize;
9290Sstevel@tonic-gate 	int fail;
9300Sstevel@tonic-gate 
9310Sstevel@tonic-gate 	pri->length = 0;
9320Sstevel@tonic-gate 	ptrsize = (data_model == PR_MODEL_LP64)? 8 : 4;
9330Sstevel@tonic-gate 
9340Sstevel@tonic-gate #if defined(__i386) || defined(__amd64)	/* XX64 */
9350Sstevel@tonic-gate 	ap = (long)Lsp->pr_reg[R_SP];
9360Sstevel@tonic-gate 	fail = (Pread(Proc, &nargs, sizeof (nargs), ap) != sizeof (nargs));
9370Sstevel@tonic-gate 	ap += ptrsize;
9380Sstevel@tonic-gate #endif /* i386 */
9390Sstevel@tonic-gate 
9400Sstevel@tonic-gate #if sparc
9410Sstevel@tonic-gate 	if (data_model == PR_MODEL_LP64) {
9420Sstevel@tonic-gate 		int64_t xnargs;
9430Sstevel@tonic-gate 		ap = (long)(Lsp->pr_reg[R_SP]) + 16 * sizeof (int64_t)
9440Sstevel@tonic-gate 			+ STACK_BIAS;
9450Sstevel@tonic-gate 		fail = (Pread(Proc, &xnargs, sizeof (xnargs), ap) !=
9460Sstevel@tonic-gate 			sizeof (xnargs));
9470Sstevel@tonic-gate 		nargs = (int)xnargs;
9480Sstevel@tonic-gate 	} else {
9490Sstevel@tonic-gate 		ap = (long)(Lsp->pr_reg[R_SP]) + 16 * sizeof (int32_t);
9500Sstevel@tonic-gate 		fail = (Pread(Proc, &nargs, sizeof (nargs), ap) !=
9510Sstevel@tonic-gate 			sizeof (nargs));
9520Sstevel@tonic-gate 	}
9530Sstevel@tonic-gate 	ap += ptrsize;
9540Sstevel@tonic-gate #endif /* sparc */
9550Sstevel@tonic-gate 
9560Sstevel@tonic-gate 	if (fail) {
9570Sstevel@tonic-gate 		(void) printf("\n%s\t*** Bad argument list? ***\n", pri->pname);
9580Sstevel@tonic-gate 		return;
9590Sstevel@tonic-gate 	}
9600Sstevel@tonic-gate 
9610Sstevel@tonic-gate 	(void) printf("  argc = %d\n", nargs);
9620Sstevel@tonic-gate 	if (raw)
9630Sstevel@tonic-gate 		showpaths(pri, &systable[SYS_exec]);
9640Sstevel@tonic-gate 
9650Sstevel@tonic-gate 	show_cred(pri, FALSE);
9660Sstevel@tonic-gate 
9670Sstevel@tonic-gate 	if (aflag || eflag) {		/* dump args or environment */
9680Sstevel@tonic-gate 
9690Sstevel@tonic-gate 		/* enter region of (potentially) lengthy output */
9700Sstevel@tonic-gate 		Eserialize();
9710Sstevel@tonic-gate 
9720Sstevel@tonic-gate 		if (aflag)		/* dump the argument list */
9730Sstevel@tonic-gate 			dumpargs(pri, ap, "argv:");
9740Sstevel@tonic-gate 		ap += (nargs+1) * ptrsize;
9750Sstevel@tonic-gate 		if (eflag)		/* dump the environment */
9760Sstevel@tonic-gate 			dumpargs(pri, ap, "envp:");
9770Sstevel@tonic-gate 
9780Sstevel@tonic-gate 		/* exit region of lengthy output */
9790Sstevel@tonic-gate 		Xserialize();
9800Sstevel@tonic-gate 	}
9810Sstevel@tonic-gate }
9820Sstevel@tonic-gate 
9830Sstevel@tonic-gate void
9840Sstevel@tonic-gate dumpargs(private_t *pri, long ap, const char *str)
9850Sstevel@tonic-gate {
9860Sstevel@tonic-gate 	char *string;
9870Sstevel@tonic-gate 	unsigned int leng = 0;
9880Sstevel@tonic-gate 	int ptrsize;
9890Sstevel@tonic-gate 	long arg = 0;
9900Sstevel@tonic-gate 	char *argaddr;
9910Sstevel@tonic-gate 	char badaddr[32];
9920Sstevel@tonic-gate 
9930Sstevel@tonic-gate 	if (interrupt)
9940Sstevel@tonic-gate 		return;
9950Sstevel@tonic-gate 
9960Sstevel@tonic-gate #ifdef _LP64
9970Sstevel@tonic-gate 	if (data_model == PR_MODEL_LP64) {
9980Sstevel@tonic-gate 		argaddr = (char *)&arg;
9990Sstevel@tonic-gate 		ptrsize = 8;
10000Sstevel@tonic-gate 	} else {
10010Sstevel@tonic-gate #if defined(_LITTLE_ENDIAN)
10020Sstevel@tonic-gate 		argaddr = (char *)&arg;
10030Sstevel@tonic-gate #else
10040Sstevel@tonic-gate 		argaddr = (char *)&arg + 4;
10050Sstevel@tonic-gate #endif
10060Sstevel@tonic-gate 		ptrsize = 4;
10070Sstevel@tonic-gate 	}
10080Sstevel@tonic-gate #else
10090Sstevel@tonic-gate 	argaddr = (char *)&arg;
10100Sstevel@tonic-gate 	ptrsize = 4;
10110Sstevel@tonic-gate #endif
10120Sstevel@tonic-gate 	putpname(pri);
10130Sstevel@tonic-gate 	(void) fputc(' ', stdout);
10140Sstevel@tonic-gate 	(void) fputs(str, stdout);
10150Sstevel@tonic-gate 	leng += 1 + strlen(str);
10160Sstevel@tonic-gate 
10170Sstevel@tonic-gate 	while (!interrupt) {
10180Sstevel@tonic-gate 		if (Pread(Proc, argaddr, ptrsize, ap) != ptrsize) {
10190Sstevel@tonic-gate 			(void) printf("\n%s\t*** Bad argument list? ***\n",
10200Sstevel@tonic-gate 				pri->pname);
10210Sstevel@tonic-gate 			return;
10220Sstevel@tonic-gate 		}
10230Sstevel@tonic-gate 		ap += ptrsize;
10240Sstevel@tonic-gate 
10250Sstevel@tonic-gate 		if (arg == 0)
10260Sstevel@tonic-gate 			break;
10270Sstevel@tonic-gate 		string = fetchstring(pri, arg, PATH_MAX);
10280Sstevel@tonic-gate 		if (string == NULL) {
10290Sstevel@tonic-gate 			(void) sprintf(badaddr, "BadAddress:0x%.8lX", arg);
10300Sstevel@tonic-gate 			string = badaddr;
10310Sstevel@tonic-gate 		}
10320Sstevel@tonic-gate 		if ((leng += strlen(string)) < 63) {
10330Sstevel@tonic-gate 			(void) fputc(' ', stdout);
10340Sstevel@tonic-gate 			leng++;
10350Sstevel@tonic-gate 		} else {
10360Sstevel@tonic-gate 			(void) fputc('\n', stdout);
10370Sstevel@tonic-gate 			leng = 0;
10380Sstevel@tonic-gate 			putpname(pri);
10390Sstevel@tonic-gate 			(void) fputs("  ", stdout);
10400Sstevel@tonic-gate 			leng += 2 + strlen(string);
10410Sstevel@tonic-gate 		}
10420Sstevel@tonic-gate 		(void) fputs(string, stdout);
10430Sstevel@tonic-gate 	}
10440Sstevel@tonic-gate 	(void) fputc('\n', stdout);
10450Sstevel@tonic-gate }
10460Sstevel@tonic-gate 
10470Sstevel@tonic-gate /*
10480Sstevel@tonic-gate  * Display contents of read() or write() buffer.
10490Sstevel@tonic-gate  */
10500Sstevel@tonic-gate void
10510Sstevel@tonic-gate showbuffer(private_t *pri, long offset, long count)
10520Sstevel@tonic-gate {
10530Sstevel@tonic-gate 	char buffer[320];
10540Sstevel@tonic-gate 	int nbytes;
10550Sstevel@tonic-gate 	char *buf;
10560Sstevel@tonic-gate 	int n;
10570Sstevel@tonic-gate 
10580Sstevel@tonic-gate 	while (count > 0 && !interrupt) {
10590Sstevel@tonic-gate 		nbytes = (count < sizeof (buffer))? count : sizeof (buffer);
10600Sstevel@tonic-gate 		if ((nbytes = Pread(Proc, buffer, nbytes, offset)) <= 0)
10610Sstevel@tonic-gate 			break;
10620Sstevel@tonic-gate 		count -= nbytes;
10630Sstevel@tonic-gate 		offset += nbytes;
10640Sstevel@tonic-gate 		buf = buffer;
10650Sstevel@tonic-gate 		while (nbytes > 0 && !interrupt) {
10660Sstevel@tonic-gate 			char obuf[65];
10670Sstevel@tonic-gate 
10680Sstevel@tonic-gate 			n = (nbytes < 32)? nbytes : 32;
10690Sstevel@tonic-gate 			showbytes(buf, n, obuf);
10700Sstevel@tonic-gate 
10710Sstevel@tonic-gate 			putpname(pri);
10720Sstevel@tonic-gate 			(void) fputs("  ", stdout);
10730Sstevel@tonic-gate 			(void) fputs(obuf, stdout);
10740Sstevel@tonic-gate 			(void) fputc('\n', stdout);
10750Sstevel@tonic-gate 			nbytes -= n;
10760Sstevel@tonic-gate 			buf += n;
10770Sstevel@tonic-gate 		}
10780Sstevel@tonic-gate 	}
10790Sstevel@tonic-gate }
10800Sstevel@tonic-gate 
10810Sstevel@tonic-gate void
10820Sstevel@tonic-gate showbytes(const char *buf, int n, char *obuf)
10830Sstevel@tonic-gate {
10840Sstevel@tonic-gate 	int c;
10850Sstevel@tonic-gate 
10860Sstevel@tonic-gate 	while (--n >= 0) {
10870Sstevel@tonic-gate 		int c1 = '\\';
10880Sstevel@tonic-gate 		int c2;
10890Sstevel@tonic-gate 
10900Sstevel@tonic-gate 		switch (c = (*buf++ & 0xff)) {
10910Sstevel@tonic-gate 		case '\0':
10920Sstevel@tonic-gate 			c2 = '0';
10930Sstevel@tonic-gate 			break;
10940Sstevel@tonic-gate 		case '\b':
10950Sstevel@tonic-gate 			c2 = 'b';
10960Sstevel@tonic-gate 			break;
10970Sstevel@tonic-gate 		case '\t':
10980Sstevel@tonic-gate 			c2 = 't';
10990Sstevel@tonic-gate 			break;
11000Sstevel@tonic-gate 		case '\n':
11010Sstevel@tonic-gate 			c2 = 'n';
11020Sstevel@tonic-gate 			break;
11030Sstevel@tonic-gate 		case '\v':
11040Sstevel@tonic-gate 			c2 = 'v';
11050Sstevel@tonic-gate 			break;
11060Sstevel@tonic-gate 		case '\f':
11070Sstevel@tonic-gate 			c2 = 'f';
11080Sstevel@tonic-gate 			break;
11090Sstevel@tonic-gate 		case '\r':
11100Sstevel@tonic-gate 			c2 = 'r';
11110Sstevel@tonic-gate 			break;
11120Sstevel@tonic-gate 		default:
11130Sstevel@tonic-gate 			if (isprint(c)) {
11140Sstevel@tonic-gate 				c1 = ' ';
11150Sstevel@tonic-gate 				c2 = c;
11160Sstevel@tonic-gate 			} else {
11170Sstevel@tonic-gate 				c1 = c>>4;
11180Sstevel@tonic-gate 				c1 += (c1 < 10)? '0' : 'A'-10;
11190Sstevel@tonic-gate 				c2 = c&0xf;
11200Sstevel@tonic-gate 				c2 += (c2 < 10)? '0' : 'A'-10;
11210Sstevel@tonic-gate 			}
11220Sstevel@tonic-gate 			break;
11230Sstevel@tonic-gate 		}
11240Sstevel@tonic-gate 		*obuf++ = (char)c1;
11250Sstevel@tonic-gate 		*obuf++ = (char)c2;
11260Sstevel@tonic-gate 	}
11270Sstevel@tonic-gate 
11280Sstevel@tonic-gate 	*obuf = '\0';
11290Sstevel@tonic-gate }
1130