Edit File: process.cpython-36.pyc
3 � e�d � @ s| d dl mZmZmZmZmZmZmZmZm Z m Z m Z m Z m Z mZ d dlmZmZmZ d dlmZ d dlmZ d dlmZmZmZmZ d dl m Z m Z m Z d dlm Z m!Z! d dl"m#Z#m$Z$ d d l%m&Z&m'Z'm(Z( d d l)m*Z* d d l+m,Z,m-Z- d d l.m/Z/m0Z0m1Z1m2Z2m3Z3 d d l4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z; d dl<m=Z= d dl>m?Z? d dl@mAZA d dlBmCZC d dlDmEZEmFZFmGZGmHZH d dlImJZJ e�r�d dl mKZK e�r�d dl mLZL e�r�d dl"mMZMmNZN d dl mOZOmPZPmQZQmRZR e�rd dl mSZSmTZTmUZUmVZVmWZWmXZXmYZY eVeWeXfZZe�se�r d dl m[Z[ nd dl m\Z\m]Z] e=�rFd dl<m^Z^m_Z_m`Z` e�rXd d lambZb d Zcd Zdd Zed ZfG d!d"� d"eg�Zhd#S )$� )�HAS_PTRACE_SINGLESTEP�HAS_PTRACE_EVENTS�HAS_PTRACE_SIGINFO� HAS_PTRACE_IO�HAS_PTRACE_GETREGS�HAS_PTRACE_GETREGSET� ptrace_attach� ptrace_detach� ptrace_cont�ptrace_syscall�ptrace_setregs�ptrace_peektext�ptrace_poketext�REGISTER_NAMES)�HAS_PROC� RUNNING_BSD�RUNNING_PYTHON3)�dumpRegs)� CPU_WORD_SIZE)� bytes2word� word2bytes� bytes2type� bytes2array)�SIGTRAP�SIGSTOP�SIGKILL)� formatAddress� formatWordHex)�sizeof�c_char_p)�info�warning�error)� PtraceError)�ESRCH�EACCES)� Breakpoint� ProcessExit� ProcessSignal�NewProcessEvent�ProcessExecution)�kill� WIFSTOPPED�WSTOPSIG� WIFSIGNALED�WTERMSIG� WIFEXITED� WEXITSTATUS)�HAS_DISASSEMBLER)� getBacktrace)� ProcessError)�readProcessMappings)�CPU_INSTR_POINTER�CPU_STACK_POINTER�CPU_FRAME_POINTER�CPU_SUB_REGISTERS)� SyscallState)�ptrace_singlestep)�ptrace_getsiginfo)�create_string_buffer� addressof)� ptrace_io�ptrace_io_desc� PIOD_READ_D� PIOD_WRITE_D)�ptrace_setoptions�ptrace_geteventmsg� WPTRACEEVENT�PTRACE_EVENT_FORK�PTRACE_EVENT_VFORK�PTRACE_EVENT_CLONE�PTRACE_EVENT_EXEC)�ptrace_getregs)�ptrace_peekuser�ptrace_registers_t)� disassemble�disassembleOne�MAX_INSTR_SIZE)�readProcessStat� i � � c @ s e Zd ZdZddd�Zdd� Zdd � Zd�d d �Zd d � Zd�dd�Z d�dd�Z dd� Z dd� Z dd� Z dd� Zd�dd �Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Zd5d6� Z d�d8d9�Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!dBdC� Z"dDdE� Z#e$�r(dFdG� Z%ne&�r8dHdG� Z%ne"Z%dIdJ� Z'dKdL� Z(dMdN� Z)dOdP� Z*d�dRdS�Z+d�dTdU�Z,dVdW� Z-dXdY� Z.d�dZd[�Z/d\d]� Z0d�d^d_�Z1d�d`da�Z2dbdc� Z3ddde� Z4dfdg� Z5dhdi� Z6djdk� Z7d�dmdn�Z8d�dqdr�Z9dsdt� Z:dudv� Z;dwdx� Z<dydz� Z=d{d|� Z>d}d~� Z?dS )�� PtraceProcessa� Process traced by a PtraceDebugger. Methods ======= * control execution: - singleStep(): execute one instruction - cont(): continue the execution - syscall(): break at next syscall - setInstrPointer(): change the instruction pointer - kill(): send a signal to the process - terminate(): kill the process * wait an event: - waitEvent(): wait next process event - waitSignals(): wait a signal * get status - getreg(): get a register - getInstrPointer(): get the instruction pointer - getStackPointer(): get the stack pointer - getFramePointer(): get the stack pointer - getregs(): get all registers, e.g. regs=getregs(); print regs.eax - disassemble(): assembler code of the next instructions - disassembleOne(): assembler code of the next instruction - findStack(): get stack memory mapping - getsiginfo(): get signal information - getBacktrace(): get the current backtrace * set status - setreg(): set a register - setregs(): set all registers * memory access: - readWord(): read a memory word - readBytes(): read some bytes - readStruct(): read a structure - readArray(): read an array - readCString(): read a C string - readMappings(): get all memory mappings - writeWord(): write a memory word - writeBytes(): write some bytes * display status: - dumpCode(): display the next instructions - dumpStack(): display some memory words around the stack pointer - dumpMaps(): display memory mappings - dumpRegs(): display all registers * breakpoint: - createBreakpoint(): set a breakpoint - findBreakpoint(): find a breakpoint - removeBreakpoint(): remove a breakpoint * other: - setoptions(): set ptrace options See each method to get better documentation. You are responsible to manage the process state: some methods may fail or crash your processus if they are called when the process is in the wrong state. Attributes ========== * main attributes: - pid: identifier of the process - debugger: PtraceDebugger instance - breakpoints: dictionary of active breakpoints - parent: parent PtraceProcess (None if process has no parent) * state: - running: if True, the process is alive, otherwise the process doesn't exist anymore - exited: if True, the process has exited (attributed only used on BSD operation systems) - is_attached: if True, the process is attached by ptrace - was_attached: if True, the process will be detached at exit - is_stopped: if True, the process is stopped, otherwise it's running - syscall_state: control syscall tracing Sometimes, is_stopped value is wrong. You might use isTraced() to make sure that the process is stopped. NFc C sh || _ i | _|| _d| _d| _|| _|| _d| _d| _|| _ |sJ| j � nd| _t rZd | _ t | �| _d S )NTF)�debugger� breakpoints�pid�running�exited�parent� was_attached� is_attached� is_stopped� is_thread�attachr � read_mem_filer: Z syscall_state)�selfrU rW r\ rZ r^ � rb �@/tmp/pip-build-uv1wutoy/python-ptrace/ptrace/debugger/process.py�__init__� s zPtraceProcess.__init__c C s t s | j� t| j�}|jdkS )N�T)r �notImplementedErrorrP rW �state)ra �statrb rb rc �isTraced� s zPtraceProcess.isTracedc C s, | j r d S td| j � t| j� d| _ d S )NzAttach process %sT)r\ r rW r )ra rb rb rc r_ � s zPtraceProcess.attachc C s� |st }y | j� }W n> tk rR } z"|d kr>|d| � d S d }W Y d d }~X nX |d kr`|}y| j|||||� W n6 tk r� } z|dt|�|f � W Y d d }~X nX d S )Nz&Unable to read instruction pointer: %sz Unable to dump code at %s: %s)r" �getInstrPointerr# � _dumpCoder )ra �start�stop� manage_bp�log�ip�errrb rb rc �dumpCode� s zPtraceProcess.dumpCodec C s� |d k r$t ||�}t||t d �}ts�|d k r>|| d }nt}| j||�}trhdjdd� |D ��}ndjdd� |D ��}|d| � d S |d� |�rD|} x�td�D ]�} d } | | j kr�| j | j } t | | �} d } n | j | �} d t | j �| j| jf }| j |k�r |d 7 }| �r|d 7 }||� | | j } |d k r�|| kr�P q�W nLxJ| j||�D ]:} d t | j �| j| jf }| j |k�r�|d 7 }||� �qRW d S )N� � c s s | ]}d | V qdS )z%02xNrb )�.0�byterb rb rc � <genexpr>� s z*PtraceProcess._dumpCode.<locals>.<genexpr>c s s | ]}d t |� V qdS )z%02xN)�ord)ru rv rb rb rc rw � s zCODE: %szCODE:rR FTz %s| %s (%s)z <==z * BREAKPOINT *)�max�min� MAX_CODE_SIZEr2 � MIN_CODE_SIZE� readBytesr �join�rangerV Z old_bytesrN r �address�textZhexa�sizerM )ra rl rm rp rn ro r� �coder� r� �line�bp�bytes�instrrb rb rc rk � sN zPtraceProcess._dumpCodec c s� t s | j� |d kr | j� }|d k r<t||�}|| d }n|d krHt}|t }| j||�}x2tt||��D ] \}}|V |rl||d krlP qlW d S )Nrs ) r2 rf rj ry �DEFAULT_NB_INSTRrO r} � enumeraterM )ra rl rm Znb_instrr� r� �indexr� rb rb rc rM s zPtraceProcess.disassemblec C s2 t s | j� |d kr | j� }| j|t�}t||�S )N)r2 rf rj r} rO rN )ra r� r� rb rb rc rN s z PtraceProcess.disassembleOnec C s$ x | j � D ]}|jdkr |S q W d S )Nz[stack])� readMappings�pathname)ra �maprb rb rc � findStack s zPtraceProcess.findStackc C s> | j s d S d| _ | jr,td| � t| j� | jj| d� d S )NFz Detach %s)�process)r\ rX r r rW rU Z deleteProcess)ra rb rb rc �detach# s zPtraceProcess.detachc C s@ d| _ tr4| jr4y| jj� W n tk r2 Y nX | j� d S )NF)rX r r` �close�IOErrorr� )ra rb rb rc � _notRunning, s zPtraceProcess._notRunningc C s t | j|� d S )N)r+ rW )ra �signumrb rb rc r+ 5 s zPtraceProcess.killTc C s� | j s| j rdS td| � d}y | jr8| jt� n | jt� W n6 tk rz } z|jt krfd}n|�W Y d d }~X nX |s�|s�dS | j � | j � dS )NTz Terminate %sF) rX r[ r! r] �contr r+ r# �errnor$ �waitExitr� )ra Z wait_exit�done�eventrb rb rc � terminate8 s$ zPtraceProcess.terminatec C sV xP| j � }|j}|tkr d S |tkr(|�|j}|ttfkrF| j|� q| j� qW d S )N)� waitEvent� __class__r' r( r� r r r� )ra r� Z event_clsr� rb rb rc r� N s zPtraceProcess.waitExitc C s� t |�r t|�}| j|�}nft|�r8t|�}| j|�}nJt|�sPt| d| ��n2trpt |�rpt |�}| j |�}nt |�}| j |�}|S )NzUnknown process status: %r) r0 r1 � processExitedr. r/ � processKilledr, r4 r rE � ptraceEventr- � processSignal)ra �statusr� r� r� rb rb rc � processStatusc s zPtraceProcess.processStatusc C s | j � t| �S )N)r� r' )ra rb rb rc �processTerminated| s z PtraceProcess.processTerminatedc C s. t r| j rd| _| j� | j� t| |d�S )NT)�exitcode)r rY r� r� r' )ra r� rb rb rc r� � s zPtraceProcess.processExitedc C s | j � t| |d�S )N)r� )r� r' )ra r� rb rb rc r� � s zPtraceProcess.processKilledc C s d| _ t|| �S )NT)r] r( )ra r� rb rb rc r� � s zPtraceProcess.processSignalc C sd t s | j� |tkrBt| j�}|tk}| jj|d| |d�}t|�S |t krRt | �S t | d| ��d S )NT)r\ rZ r^ zUnknown ptrace event: %r) r rf �NEW_PROCESS_EVENTrD rW rH rU Z addProcessr) rI r* r4 )ra r� Znew_pidr^ Z new_processrb rb rc r� � s zPtraceProcess.ptraceEventc C sn t strt| j�S g }tt�t }x2t|�D ]&}t| j|t �}t |�}|j |� q,W dj |�}t |t�S d S )N� ) r r rJ rW r rL r r rK r �appendr~ r )ra �wordsZnb_words�offset�wordr� rb rb rc �getregs� s zPtraceProcess.getregsc C sp yt | \}}}W n tk r. d}d }Y nX |tkrFt| d| ��| j� }t||�}||L }|rl||M }|S )Nr zUnknown register: %r)r9 �KeyErrorr r4 r� �getattr)ra �name�shift�mask�regs�valuerb rb rc �getreg� s zPtraceProcess.getregc C s t | j|� d S )N)r rW )ra r� rb rb rc �setregs� s zPtraceProcess.setregsc C sz | j � }|tkrJt| \}}}t||�}|| M }|||@ |> O }|}|}|tkr`t| d| ��t|||� | j|� d S )NzUnknown register: %r)r� r9 r� r r4 �setattrr� )ra r� r� r� Z full_namer� r� Z full_valuerb rb rc �setreg� s zPtraceProcess.setregc C s t s | j� t| j� d S )N)r rf r; rW )ra rb rb rc � singleStep� s zPtraceProcess.singleStepc C s |t kr dS |S d S )Nr )r )ra r� rb rb rc � filterSignal� s zPtraceProcess.filterSignalr c C s | j |�}t| j|� d| _d S )NF)r� r rW r] )ra r� rb rb rc �syscall� s zPtraceProcess.syscallc C s t r| jt |� n t| d��d S )Nz+Instruction pointer register is not defined)r6 r� r4 )ra rp rb rb rc �setInstrPointer� s z PtraceProcess.setInstrPointerc C s t r| jt �S t| d��d S )Nz+Instruction pointer register is not defined)r6 r� r4 )ra rb rb rc rj � s z PtraceProcess.getInstrPointerc C s t r| jt �S t| d��d S )Nz%Stack pointer register is not defined)r7 r� r4 )ra rb rb rc �getStackPointer� s z PtraceProcess.getStackPointerc C s t r| jt �S t| d��d S )Nz%Stack pointer register is not defined)r8 r� r4 )ra rb rb rc �getFramePointer� s z PtraceProcess.getFramePointerc C s� |t }|rV||8 }| j|�}t|�}tt | |�}|||| � }||8 }|t 7 }nd}xL|r�| j|�}t|�}|t k r�||d |� 7 }P ||7 }|t 8 }|t 7 }q\W |S )N� )r �readWordr rz )ra r� r� r� r� r� Zsubsize�datarb rb rc � _readBytes� s( zPtraceProcess._readBytesc C s t | j|�}|S )zAddress have to be aligned!)r rW )ra r� r� rb rb rc r� s zPtraceProcess.readWordc C s. t |�}tt|t|�|d�}t| j|� |jS )N)�piod_op� piod_offs� piod_addr�piod_len)r= r@ rA r> r? rW �raw)ra r� r� �buffer�io_descrb rb rc r} s zPtraceProcess.readBytesc C s | j sxd| j }yt|dd�| _ W nT tk rv } z8d| }|jtkrPt|� nt|� | j| _ | j ||�S d }~X nX y | j }|j |� |j |�}W n> tt fk r� } z t | dt|�||f ��W Y d d }~X nX t|�dko�|� r�| j| _ | j ||�S |S )Nz /proc/%u/mem�rbr z4Unable to open %s: fallback to ptrace implementationzreadBytes(%s, %s) error: %s)r` rW �openr� r� r% r" r r� r} �seek�read� ValueErrorr4 r �len)ra r� r� �filenamerq �messageZmemr� rb rb rc r} * s, $ c C s t s | j� t| j�S )N)r rf r< rW )ra rb rb rc � getsiginfoM s zPtraceProcess.getsiginfoc C sd t r8t|�}t|�}tt|t|�|d�}t| j|� �n(|t }|r�||8 }t| }| j |t�}t|�|k r�t|�}|d |� |d |� ||| d � }n|d |� |d |� }| j |t |�� ||d � }|t7 }xFtt|�k�r |d t� }t |�}| j ||� |td � }|t7 }q�W |�s,d S t|�}| j |t�}|||d � }| j |t |�� d S )N)r� r� r� r� ) r r� r= r@ rB r> r? rW r r} � writeWordr )ra r� r� r� r� r� r� rb rb rc � writeBytesR sD zPtraceProcess.writeBytesc C s" | j |t|��}t|�}t||�S )N)r} r r r )ra r� �structr� rb rb rc � readStruct� s zPtraceProcess.readStructc C s( | j |t|�| �}t|�}t|||�S )N)r} r r r )ra r� Zbasetype�countr� rb rb rc � readArray� s zPtraceProcess.readArray� c C s� g }d}d}x�d}| j ||�}|jd�} | dkr@d}|d | � }||| krl|d || � }|j|� d}P |j|� |r|P ||7 }||7 }qW dj|�|fS )Nr F� rs Tr� ���)r} �findr� r~ ) ra r� �max_sizeZ chunk_length�stringr� Z truncatedr� r� �posrb rb rc � readCString� s* zPtraceProcess.readCStringc C s. |st }| j� }|r |d| � | j|� d S )Nz STACK: %s)r" r� � _dumpStack)ra ro �stackrb rb rc � dumpStack� s zPtraceProcess.dumpStackc C s� | j � }d}x^tdd�D ]P}|t }y.| j|| �}|d|t|�f � |d7 }W q tk rf Y qX qW |s�|dt|� � d S )Nr � rs zSTACK%+ 3i: %sz'ERROR: unable to read the stack (SP=%s)���� )r� r r r� r r# r )ra ro �spZ displayedr� �deltar� rb rb rc r� � s zPtraceProcess._dumpStackc C s t | �S )N)r5 )ra rb rb rc r� � s zPtraceProcess.readMappingsc C s* |st }x | j� D ]}|d| � qW d S )NzMAPS: %s)r" r� )ra ro r� rb rb rc �dumpMaps� s zPtraceProcess.dumpMapsc C s t | j||� dS )z- Address have to be aligned! N)r rW )ra r� r� rb rb rc r� � s zPtraceProcess.writeWordc C sR |st }y| j� }t||� W n. tk rL } z|d| � W Y d d }~X nX d S )Nz Unable to read registers: %s)r" r� r r# )ra ro r� rq rb rb rc r � s zPtraceProcess.dumpRegsc C s | j |�}t| j|� d| _d S )NF)r� r rW r] )ra r� rb rb rc r� � s zPtraceProcess.contc C s, t s | j� td| |f � t| j|� d S )NzSet %s options to %s)r rf r rC rW )ra �optionsrb rb rc � setoptions� s zPtraceProcess.setoptionsc C s | j j| jd�S )N)rW )rU ZwaitProcessEventrW )ra rb rb rc r� � s zPtraceProcess.waitEventc G s | j j|d| ji�S )NrW )rU � waitSignalsrW )ra Zsignalsrb rb rc r� � s zPtraceProcess.waitSignalsc C s | j j| � d S )N)rU � waitSyscall)ra rb rb rc r� � s zPtraceProcess.waitSyscallc C s> x8| j j� D ]*}|j| ko,|j|j k n r |S q W d S )N)rV �valuesr� r� )ra r� r� rb rb rc �findBreakpoint� s "z PtraceProcess.findBreakpointrs c C s6 | j |�}|r t| d| ��t| ||�}|| j|< |S )Nz A breakpoint is already set: %s)r� r4 r& rV )ra r� r� r� rb rb rc �createBreakpoint� s z PtraceProcess.createBreakpointr� � c C s t | ||d�S )N)�max_args� max_depth)r3 )ra r� r� rb rb rc r3 � s zPtraceProcess.getBacktracec C s | j |j= d S )N)rV r� )ra Z breakpointrb rb rc �removeBreakpoint� s z PtraceProcess.removeBreakpointc C s& y | j � W n tk r Y nX d S )N)r� r# )ra rb rb rc �__del__� s zPtraceProcess.__del__c C s | j � S )N)�__repr__)ra rb rb rc �__str__� s zPtraceProcess.__str__c C s d| j S )Nz<PtraceProcess #%s>)rW )ra rb rb rc r� s zPtraceProcess.__repr__c C s t | j�S )N)�hashrW )ra rb rb rc �__hash__ s zPtraceProcess.__hash__c C s t � �d S )N)�NotImplementedError)ra rb rb rc rf s z!PtraceProcess.notImplementedError)NF)NNFN)NNN)N)T)r )r� )N)N)N)r )rs )r� r� )@�__name__� __module__� __qualname__�__doc__rd ri r_ rr rk rM rN r� r� r� r+ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rj r� r� r� r� r r} r r� r� r� r� r� r� r� r� r� r� r r� r� r� r� r� r� r� r3 r� r� r� r� r� rf rb rb rb rc rT @ s~ ^ / " !0 rT N)iZptrace.bindingr r r r r r r r r r r r r r Zptrace.os_toolsr r r Z ptrace.toolsr Zptrace.cpu_infor Zptrace.ctypes_toolsr r r r �signalr r r r r �ctypesr r �loggingr r! r" Z ptrace.errorr# r� r$ r% Zptrace.debuggerr& r' r( r) r* �osr+ r, r- r. r/ r0 r1 Z ptrace.disasmr2 Zptrace.debugger.backtracer3 Z ptrace.debugger.process_errorr4 Z ptrace.debugger.memory_mappingr5 Zptrace.binding.cpur6 r7 r8 r9 Z ptrace.debugger.syscall_stater: r; r< r= r> r? r@ rA rB rC rD rE rF rG rH rI r� rJ rK rL rM rN rO Zptrace.linux_procrP r| r{ r� ZDEFAULT_CODE_SIZE�objectrT rb rb rb rc �<module> sP @ $ $