sys-rs 0.1.1

ptrace-based Linux system tool reimplementations: strace, gcov, addr2line, debugger
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76

use libc::PTRACE_SYSCALL_INFO_EXIT;
use nix::{
    sys::{
        ptrace,
        signal::Signal,
        wait::{wait, WaitStatus},
    },
    unistd::Pid,
};
use std::process::exit;

use sys_rs::{
    diag::Result,
    input::{args, env},
    syscall, trace,
};

struct Tracer;

impl trace::Tracer for Tracer {
    fn trace(&self, pid: Pid) -> Result<i32> {
        let ret;
        let syscalls = syscall::Entries::new()?;

        let mut status = wait()?;
        ptrace::setoptions(
            pid,
            ptrace::Options::PTRACE_O_TRACESYSGOOD
                | ptrace::Options::PTRACE_O_TRACEEXEC
                | ptrace::Options::PTRACE_O_TRACEEXIT,
        )?;

        loop {
            match status {
                WaitStatus::PtraceSyscall(_) => {
                    if u8::try_from(ptrace::getevent(pid)?)?
                        == PTRACE_SYSCALL_INFO_EXIT
                    {
                        eprintln!("{}", syscall::Repr::build(pid, &syscalls)?);
                    }
                    ptrace::syscall(pid, None)?;
                }
                WaitStatus::PtraceEvent(_, _, event) => {
                    if event == ptrace::Event::PTRACE_EVENT_EXIT as i32 {
                        let syscall = syscall::Repr::build(pid, &syscalls)?;
                        if syscall.is_exit() {
                            eprintln!("{syscall}");
                        }
                    }
                    ptrace::syscall(pid, None)?;
                }
                WaitStatus::Stopped(_, Signal::SIGTRAP) => {
                    eprintln!("{}", syscall::Repr::build(pid, &syscalls)?);
                    ptrace::syscall(pid, None)?;
                }
                WaitStatus::Stopped(_, signal) => {
                    eprintln!("--- {signal:?} ---");
                    ptrace::cont(pid, signal)?;
                }
                _ => {
                    if let Some(code) = trace::terminated(status) {
                        ret = code;
                        break;
                    }
                }
            }
            status = wait()?;
        }

        Ok(ret)
    }
}

fn main() -> Result<()> {
    exit(trace::run::<Tracer>(&Tracer, &args()?, &env()?)?)
}