| Current File : //usr/local/lib/python3.6/site-packages/ptrace/debugger/__pycache__/process.cpython-36.pyc |
3
�d�d � @ s| d dl mZmZmZmZmZmZmZmZm Z m
Z
m Z m Z m
Z
mZ d dlmZmZmZ d dlmZ d dlmZ d dlmZmZmZmZ d dl m Z m Z m Z d dlm Z m!Z! d dl"m#Z#m$Z$ d d l%m&Z&m'Z'm(Z( d d
l)m*Z* d d l+m,Z,m-Z- d d l.m/Z/m0Z0m1Z1m2Z2m3Z3 d d
l4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z; d dl<m=Z= d dl>m?Z? d dl@mAZA d dlBmCZC d dlDmEZEmFZFmGZGmHZH d dlImJZJ e�r�d dl mKZK e�r�d dl mLZL e�r�d dl"mMZMmNZN d dl mOZOmPZPmQZQmRZR e�rd dl mSZSmTZTmUZUmVZVmWZWmXZXmYZY eVeWeXfZZe�se�r d dl m[Z[ nd dl m\Z\m]Z] e=�rFd dl<m^Z^m_Z_m`Z` e�rXd d lambZb d Zcd Zdd Zed ZfG d!d"� d"eg�Zhd#S )$� )�HAS_PTRACE_SINGLESTEP�HAS_PTRACE_EVENTS�HAS_PTRACE_SIGINFO�
HAS_PTRACE_IO�HAS_PTRACE_GETREGS�HAS_PTRACE_GETREGSET�
ptrace_attach�
ptrace_detach� ptrace_cont�ptrace_syscall�ptrace_setregs�ptrace_peektext�ptrace_poketext�REGISTER_NAMES)�HAS_PROC� RUNNING_BSD�RUNNING_PYTHON3)�dumpRegs)�
CPU_WORD_SIZE)�
bytes2word�
word2bytes�
bytes2type� bytes2array)�SIGTRAP�SIGSTOP�SIGKILL)�
formatAddress�
formatWordHex)�sizeof�c_char_p)�info�warning�error)� PtraceError)�ESRCH�EACCES)�
Breakpoint� ProcessExit�
ProcessSignal�NewProcessEvent�ProcessExecution)�kill�
WIFSTOPPED�WSTOPSIG� WIFSIGNALED�WTERMSIG� WIFEXITED� WEXITSTATUS)�HAS_DISASSEMBLER)� getBacktrace)� ProcessError)�readProcessMappings)�CPU_INSTR_POINTER�CPU_STACK_POINTER�CPU_FRAME_POINTER�CPU_SUB_REGISTERS)� SyscallState)�ptrace_singlestep)�ptrace_getsiginfo)�create_string_buffer� addressof)� ptrace_io�ptrace_io_desc� PIOD_READ_D� PIOD_WRITE_D)�ptrace_setoptions�ptrace_geteventmsg� WPTRACEEVENT�PTRACE_EVENT_FORK�PTRACE_EVENT_VFORK�PTRACE_EVENT_CLONE�PTRACE_EVENT_EXEC)�ptrace_getregs)�ptrace_peekuser�ptrace_registers_t)� disassemble�disassembleOne�MAX_INSTR_SIZE)�readProcessStat� i �
� c @ s e Zd ZdZddd�Zdd� Zdd � Zd�d
d �Zd d
� Zd�dd�Z d�dd�Z
dd� Z dd� Z dd� Z
dd� Zd�dd �Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Zd5d6� Z d�d8d9�Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!dBdC� Z"dDdE� Z#e$�r(dFdG� Z%ne&�r8dHdG� Z%ne"Z%dIdJ� Z'dKdL� Z(dMdN� Z)dOdP� Z*d�dRdS�Z+d�dTdU�Z,dVdW� Z-dXdY� Z.d�dZd[�Z/d\d]� Z0d�d^d_�Z1d�d`da�Z2dbdc� Z3ddde� Z4dfdg� Z5dhdi� Z6djdk� Z7d�dmdn�Z8d�dqdr�Z9dsdt� Z:dudv� Z;dwdx� Z<dydz� Z=d{d|� Z>d}d~� Z?dS )��
PtraceProcessa�
Process traced by a PtraceDebugger.
Methods
=======
* control execution:
- singleStep(): execute one instruction
- cont(): continue the execution
- syscall(): break at next syscall
- setInstrPointer(): change the instruction pointer
- kill(): send a signal to the process
- terminate(): kill the process
* wait an event:
- waitEvent(): wait next process event
- waitSignals(): wait a signal
* get status
- getreg(): get a register
- getInstrPointer(): get the instruction pointer
- getStackPointer(): get the stack pointer
- getFramePointer(): get the stack pointer
- getregs(): get all registers, e.g. regs=getregs(); print regs.eax
- disassemble(): assembler code of the next instructions
- disassembleOne(): assembler code of the next instruction
- findStack(): get stack memory mapping
- getsiginfo(): get signal information
- getBacktrace(): get the current backtrace
* set status
- setreg(): set a register
- setregs(): set all registers
* memory access:
- readWord(): read a memory word
- readBytes(): read some bytes
- readStruct(): read a structure
- readArray(): read an array
- readCString(): read a C string
- readMappings(): get all memory mappings
- writeWord(): write a memory word
- writeBytes(): write some bytes
* display status:
- dumpCode(): display the next instructions
- dumpStack(): display some memory words around the stack pointer
- dumpMaps(): display memory mappings
- dumpRegs(): display all registers
* breakpoint:
- createBreakpoint(): set a breakpoint
- findBreakpoint(): find a breakpoint
- removeBreakpoint(): remove a breakpoint
* other:
- setoptions(): set ptrace options
See each method to get better documentation. You are responsible
to manage the process state: some methods may fail or crash your
processus if they are called when the process is in the wrong
state.
Attributes
==========
* main attributes:
- pid: identifier of the process
- debugger: PtraceDebugger instance
- breakpoints: dictionary of active breakpoints
- parent: parent PtraceProcess (None if process has no parent)
* state:
- running: if True, the process is alive, otherwise the process
doesn't exist anymore
- exited: if True, the process has exited (attributed only used
on BSD operation systems)
- is_attached: if True, the process is attached by ptrace
- was_attached: if True, the process will be detached at exit
- is_stopped: if True, the process is stopped, otherwise it's
running
- syscall_state: control syscall tracing
Sometimes, is_stopped value is wrong. You might use isTraced() to
make sure that the process is stopped.
NFc C sh || _ i | _|| _d| _d| _|| _|| _d| _d| _|| _ |sJ| j
� nd| _t rZd | _ t
| �| _d S )NTF)�debugger� breakpoints�pid�running�exited�parent� was_attached� is_attached�
is_stopped� is_thread�attachr �
read_mem_filer: Z
syscall_state)�selfrU rW r\ rZ r^ � rb �@/tmp/pip-build-in2aja_b/python-ptrace/ptrace/debugger/process.py�__init__� s
zPtraceProcess.__init__c C s t s | j� t| j�}|jdkS )N�T)r �notImplementedErrorrP rW �state)ra �statrb rb rc �isTraced� s
zPtraceProcess.isTracedc C s, | j r
d S td| j � t| j� d| _ d S )NzAttach process %sT)r\ r rW r )ra rb rb rc r_ � s
zPtraceProcess.attachc C s� |st }y | j� }W n> tk
rR } z"|d kr>|d| � d S d }W Y d d }~X nX |d kr`|}y| j|||||� W n6 tk
r� } z|dt|�|f � W Y d d }~X nX d S )Nz&Unable to read instruction pointer: %sz Unable to dump code at %s: %s)r" �getInstrPointerr# � _dumpCoder )ra �start�stop� manage_bp�log�ip�errrb rb rc �dumpCode� s zPtraceProcess.dumpCodec C s� |d k r$t ||�}t||t d �}ts�|d k r>|| d }nt}| j||�}trhdjdd� |D ��}ndjdd� |D ��}|d| � d S |d� |�rD|} x�td�D ]�}
d } | | j kr�| j | j
} t | | �}
d
} n
| j | �}
d t |
j
�|
j|
jf }|
j
|k�r |d 7 }| �r|d
7 }||� | |
j } |d k r�|| kr�P q�W nLxJ| j||�D ]:}
d t |
j
�|
j|
jf }|
j
|k�r�|d 7 }||� �qRW d S )N� � c s s | ]}d | V qdS )z%02xNrb )�.0�byterb rb rc � <genexpr>� s z*PtraceProcess._dumpCode.<locals>.<genexpr>c s s | ]}d t |� V qdS )z%02xN)�ord)ru rv rb rb rc rw � s zCODE: %szCODE:rR FTz %s| %s (%s)z <==z * BREAKPOINT *)�max�min�
MAX_CODE_SIZEr2 �
MIN_CODE_SIZE� readBytesr �join�rangerV Z old_bytesrN r �address�textZhexa�sizerM )ra rl rm rp rn ro r� �coder� r� �line�bp�bytes�instrrb rb rc rk � sN
zPtraceProcess._dumpCodec c s� t s | j� |d kr | j� }|d k r<t||�}|| d }n|d krHt}|t }| j||�}x2tt||��D ] \}}|V |rl||d krlP qlW d S )Nrs ) r2 rf rj ry �DEFAULT_NB_INSTRrO r} � enumeraterM )ra rl rm Znb_instrr� r� �indexr� rb rb rc rM s
zPtraceProcess.disassemblec C s2 t s | j� |d kr | j� }| j|t�}t||�S )N)r2 rf rj r} rO rN )ra r� r� rb rb rc rN s z PtraceProcess.disassembleOnec C s$ x | j � D ]}|jdkr
|S q
W d S )Nz[stack])� readMappings�pathname)ra �maprb rb rc � findStack s
zPtraceProcess.findStackc C s> | j s
d S d| _ | jr,td| � t| j� | jj| d� d S )NFz Detach %s)�process)r\ rX r r rW rU Z
deleteProcess)ra rb rb rc �detach# s
zPtraceProcess.detachc C s@ d| _ tr4| jr4y| jj� W n tk
r2 Y nX | j� d S )NF)rX r r` �close�IOErrorr� )ra rb rb rc � _notRunning, s
zPtraceProcess._notRunningc C s t | j|� d S )N)r+ rW )ra �signumrb rb rc r+ 5 s zPtraceProcess.killTc C s� | j s| j rdS td| � d}y | jr8| jt� n
| jt� W n6 tk
rz } z|jt krfd}n|�W Y d d }~X nX |s�|s�dS | j
� | j � dS )NTz Terminate %sF) rX r[ r! r] �contr r+ r# �errnor$ �waitExitr� )ra Z wait_exit�done�eventrb rb rc � terminate8 s$
zPtraceProcess.terminatec C sV xP| j � }|j}|tkr d S |tkr(|�|j}|ttfkrF| j|� q| j� qW d S )N)� waitEvent� __class__r' r( r� r r r� )ra r� Z event_clsr� rb rb rc r� N s zPtraceProcess.waitExitc C s� t |�r t|�}| j|�}nft|�r8t|�}| j|�}nJt|�sPt| d| ��n2trpt |�rpt |�}| j
|�}nt |�}| j |�}|S )NzUnknown process status: %r)
r0 r1 �
processExitedr. r/ �
processKilledr, r4 r rE � ptraceEventr- �
processSignal)ra �statusr� r� r� rb rb rc �
processStatusc s
zPtraceProcess.processStatusc C s | j � t| �S )N)r� r' )ra rb rb rc �processTerminated| s z PtraceProcess.processTerminatedc C s. t r| j rd| _| j� | j� t| |d�S )NT)�exitcode)r rY r� r� r' )ra r� rb rb rc r� � s
zPtraceProcess.processExitedc C s | j � t| |d�S )N)r� )r� r' )ra r� rb rb rc r� � s zPtraceProcess.processKilledc C s d| _ t|| �S )NT)r] r( )ra r� rb rb rc r� � s zPtraceProcess.processSignalc C sd t s | j� |tkrBt| j�}|tk}| jj|d| |d�}t|�S |t krRt
| �S t | d| ��d S )NT)r\ rZ r^ zUnknown ptrace event: %r) r rf �NEW_PROCESS_EVENTrD rW rH rU Z
addProcessr) rI r* r4 )ra r� Znew_pidr^ Z new_processrb rb rc r� � s
zPtraceProcess.ptraceEventc C sn t strt| j�S g }tt�t }x2t|�D ]&}t| j|t �}t |�}|j
|� q,W dj |�}t |t�S d S )N� )
r r rJ rW r rL r r rK r �appendr~ r )ra �wordsZnb_words�offset�wordr� rb rb rc �getregs� s
zPtraceProcess.getregsc C sp yt | \}}}W n tk
r. d}d }Y nX |tkrFt| d| ��| j� }t||�}||L }|rl||M }|S )Nr zUnknown register: %r)r9 �KeyErrorr r4 r� �getattr)ra �name�shift�mask�regs�valuerb rb rc �getreg� s
zPtraceProcess.getregc C s t | j|� d S )N)r rW )ra r� rb rb rc �setregs� s zPtraceProcess.setregsc C sz | j � }|tkrJt| \}}}t||�}|| M }|||@ |> O }|}|}|tkr`t| d| ��t|||� | j|� d S )NzUnknown register: %r)r� r9 r� r r4 �setattrr� )ra r� r� r� Z full_namer� r� Z
full_valuerb rb rc �setreg� s
zPtraceProcess.setregc C s t s | j� t| j� d S )N)r rf r; rW )ra rb rb rc �
singleStep� s zPtraceProcess.singleStepc C s |t kr dS |S d S )Nr )r )ra r� rb rb rc � filterSignal� s zPtraceProcess.filterSignalr c C s | j |�}t| j|� d| _d S )NF)r� r rW r] )ra r� rb rb rc �syscall� s
zPtraceProcess.syscallc C s t r| jt |� n
t| d��d S )Nz+Instruction pointer register is not defined)r6 r� r4 )ra rp rb rb rc �setInstrPointer� s z PtraceProcess.setInstrPointerc C s t r| jt �S t| d��d S )Nz+Instruction pointer register is not defined)r6 r� r4 )ra rb rb rc rj � s
z PtraceProcess.getInstrPointerc C s t r| jt �S t| d��d S )Nz%Stack pointer register is not defined)r7 r� r4 )ra rb rb rc �getStackPointer� s
z PtraceProcess.getStackPointerc C s t r| jt �S t| d��d S )Nz%Stack pointer register is not defined)r8 r� r4 )ra rb rb rc �getFramePointer� s
z PtraceProcess.getFramePointerc C s� |t }|rV||8 }| j|�}t|�}tt | |�}|||| � }||8 }|t 7 }nd}xL|r�| j|�}t|�}|t k r�||d |� 7 }P ||7 }|t 8 }|t 7 }q\W |S )N� )r �readWordr rz )ra r� r� r� r� r� Zsubsize�datarb rb rc �
_readBytes� s(
zPtraceProcess._readBytesc C s t | j|�}|S )zAddress have to be aligned!)r
rW )ra r� r� rb rb rc r� s zPtraceProcess.readWordc C s. t |�}tt|t|�|d�}t| j|� |jS )N)�piod_op� piod_offs� piod_addr�piod_len)r= r@ rA r> r? rW �raw)ra r� r� �buffer�io_descrb rb rc r} s zPtraceProcess.readBytesc C s | j sxd| j }yt|dd�| _ W nT tk
rv } z8d| }|jtkrPt|� nt|� | j| _ | j ||�S d }~X nX y | j }|j
|� |j |�}W n> tt fk
r� } z t
| dt|�||f ��W Y d d }~X nX t|�dko�|� r�| j| _ | j ||�S |S )Nz /proc/%u/mem�rbr z4Unable to open %s: fallback to ptrace implementationzreadBytes(%s, %s) error: %s)r` rW �openr� r� r% r" r r� r} �seek�read�
ValueErrorr4 r �len)ra r� r� �filenamerq �messageZmemr� rb rb rc r} * s,
$ c C s t s | j� t| j�S )N)r rf r< rW )ra rb rb rc �
getsiginfoM s zPtraceProcess.getsiginfoc C sd t r8t|�}t|�}tt|t|�|d�}t| j|� �n(|t }|r�||8 }t| }| j |t�}t|�|k r�t|�}|d |� |d |� ||| d � }n|d |� |d |� }| j
|t |�� ||d � }|t7 }xFtt|�k�r |d t� }t |�}| j
||� |td � }|t7 }q�W |�s,d S t|�}| j |t�}|||d � }| j
|t |�� d S )N)r� r� r� r� ) r r� r= r@ rB r> r? rW r r} � writeWordr )ra r� r� r� r� r� r� rb rb rc �
writeBytesR sD zPtraceProcess.writeBytesc C s" | j |t|��}t|�}t||�S )N)r} r r r )ra r� �structr� rb rb rc �
readStruct� s zPtraceProcess.readStructc C s( | j |t|�| �}t|�}t|||�S )N)r} r r r )ra r� Zbasetype�countr� rb rb rc � readArray� s zPtraceProcess.readArray� c
C s� g }d}d}x�d}| j ||�}|jd�} | dkr@d}|d | � }||| krl|d || � }|j|� d}P |j|� |r|P ||7 }||7 }qW dj|�|fS )Nr F� rs Tr� ���)r} �findr� r~ )
ra r� �max_sizeZ chunk_length�stringr� Z truncatedr� r� �posrb rb rc � readCString� s*
zPtraceProcess.readCStringc C s. |st }| j� }|r |d| � | j|� d S )Nz STACK: %s)r" r� �
_dumpStack)ra ro �stackrb rb rc � dumpStack� s zPtraceProcess.dumpStackc C s� | j � }d}x^tdd�D ]P}|t }y.| j|| �}|d|t|�f � |d7 }W q tk
rf Y qX qW |s�|dt|� � d S )Nr � rs zSTACK%+ 3i: %sz'ERROR: unable to read the stack (SP=%s)���� )r� r r r� r r# r )ra ro �spZ displayedr� �deltar� rb rb rc r� � s
zPtraceProcess._dumpStackc C s t | �S )N)r5 )ra rb rb rc r� � s zPtraceProcess.readMappingsc C s* |st }x | j� D ]}|d| � qW d S )NzMAPS: %s)r" r� )ra ro r� rb rb rc �dumpMaps� s zPtraceProcess.dumpMapsc C s t | j||� dS )z-
Address have to be aligned!
N)r rW )ra r� r� rb rb rc r� � s zPtraceProcess.writeWordc C sR |st }y| j� }t||� W n. tk
rL } z|d| � W Y d d }~X nX d S )Nz Unable to read registers: %s)r" r� r r# )ra ro r� rq rb rb rc r � s zPtraceProcess.dumpRegsc C s | j |�}t| j|� d| _d S )NF)r� r
rW r] )ra r� rb rb rc r� � s
zPtraceProcess.contc C s, t s | j� td| |f � t| j|� d S )NzSet %s options to %s)r rf r rC rW )ra �optionsrb rb rc �
setoptions� s zPtraceProcess.setoptionsc C s | j j| jd�S )N)rW )rU ZwaitProcessEventrW )ra rb rb rc r� � s zPtraceProcess.waitEventc G s | j j|d| ji�S )NrW )rU � waitSignalsrW )ra Zsignalsrb rb rc r� � s zPtraceProcess.waitSignalsc C s | j j| � d S )N)rU � waitSyscall)ra rb rb rc r� � s zPtraceProcess.waitSyscallc C s> x8| j j� D ]*}|j| ko,|j|j k n r |S q W d S )N)rV �valuesr� r� )ra r� r� rb rb rc �findBreakpoint� s "z PtraceProcess.findBreakpointrs c C s6 | j |�}|r t| d| ��t| ||�}|| j|< |S )Nz A breakpoint is already set: %s)r� r4 r& rV )ra r� r� r� rb rb rc �createBreakpoint� s
z PtraceProcess.createBreakpointr� � c C s t | ||d�S )N)�max_args� max_depth)r3 )ra r� r� rb rb rc r3 � s zPtraceProcess.getBacktracec C s | j |j= d S )N)rV r� )ra Z
breakpointrb rb rc �removeBreakpoint� s z PtraceProcess.removeBreakpointc C s& y | j � W n tk
r Y nX d S )N)r� r# )ra rb rb rc �__del__� s zPtraceProcess.__del__c C s | j � S )N)�__repr__)ra rb rb rc �__str__� s zPtraceProcess.__str__c C s
d| j S )Nz<PtraceProcess #%s>)rW )ra rb rb rc r� s zPtraceProcess.__repr__c C s
t | j�S )N)�hashrW )ra rb rb rc �__hash__ s zPtraceProcess.__hash__c C s
t � �d S )N)�NotImplementedError)ra rb rb rc rf s z!PtraceProcess.notImplementedError)NF)NNFN)NNN)N)T)r )r� )N)N)N)r )rs )r� r� )@�__name__�
__module__� __qualname__�__doc__rd ri r_ rr rk rM rN r� r� r� r+ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rj r� r� r� r� r r} r r� r� r� r� r� r� r� r� r� r� r r� r� r� r� r� r� r� r3 r� r� r� r� r� rf rb rb rb rc rT @ s~ ^
/
"
!0
rT N)iZptrace.bindingr r r r r r r r r
r r r
r r Zptrace.os_toolsr r r Z ptrace.toolsr Zptrace.cpu_infor Zptrace.ctypes_toolsr r r r �signalr r r r r �ctypesr r �loggingr r! r" Z ptrace.errorr# r� r$ r% Zptrace.debuggerr& r' r( r) r* �osr+ r, r- r. r/ r0 r1 Z
ptrace.disasmr2 Zptrace.debugger.backtracer3 Z ptrace.debugger.process_errorr4 Z ptrace.debugger.memory_mappingr5 Zptrace.binding.cpur6 r7 r8 r9 Z ptrace.debugger.syscall_stater: r; r< r= r> r? r@ rA rB rC rD rE rF rG rH rI r� rJ rK rL rM rN rO Zptrace.linux_procrP r| r{ r� ZDEFAULT_CODE_SIZE�objectrT rb rb rb rc �<module> sP @ $ $