mirror of
https://github.com/chromium/crashpad.git
synced 2025-03-10 06:36:02 +00:00
0758dbde9a
This makes the basics of !peb work in windbg, however, pointed-to things
are not yet retrieved. For full functionality, a variety of pointers in
the PEB also needs to be walked and captured.
e.g.
Previously:
0:000> .ecxr
eax=00000007 ebx=7e383000 ecx=c3f9a943 edx=00000000 esi=006d62d0 edi=003c9280
eip=00384828 esp=005bf634 ebp=005bf638 iopl=0 nv up ei pl zr na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
crashy_program!crashpad::`anonymous namespace'::SomeCrashyFunction+0x28:
00384828 c7002a000000 mov dword ptr [eax],2Ah ds:002b:00000007=????????
0:000> !peb
PEB at 7e383000
error 1 InitTypeRead( nt!_PEB at 7e383000)...
Now:
0:000> .ecxr
eax=00000007 ebx=7f958000 ecx=02102f4d edx=00000000 esi=00e162d0 edi=01389280
eip=01344828 esp=00c2fb64 ebp=00c2fb68 iopl=0 nv up ei pl zr na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
crashy_program!crashpad::`anonymous namespace'::SomeCrashyFunction+0x28:
01344828 c7002a000000 mov dword ptr [eax],2Ah ds:002b:00000007=????????
0:000> !peb
PEB at 7f958000
InheritedAddressSpace: No
ReadImageFileExecOptions: No
BeingDebugged: No
ImageBaseAddress: 01340000
Ldr 77ec8b40
*** unable to read Ldr table at 77ec8b40
SubSystemData: 00000000
ProcessHeap: 00e10000
ProcessParameters: 00e114e0
CurrentDirectory: '< Name not readable >'
WindowTitle: '< Name not readable >'
ImageFile: '< Name not readable >'
CommandLine: '< Name not readable >'
DllPath: '< Name not readable >'
Environment: 00000000
Unable to read Environment string.
R=mark@chromium.org
BUG=crashpad:46
Review URL: https://codereview.chromium.org/1364053002 .
105 lines
3.8 KiB
C++
105 lines
3.8 KiB
C++
// Copyright 2015 The Crashpad Authors. All rights reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#ifndef CRASHPAD_SNAPSHOT_MINIDUMP_PROCESS_SNAPSHOT_MINIDUMP_H_
|
|
#define CRASHPAD_SNAPSHOT_MINIDUMP_PROCESS_SNAPSHOT_MINIDUMP_H_
|
|
|
|
#include <sys/time.h>
|
|
#include <windows.h>
|
|
#include <dbghelp.h>
|
|
|
|
#include <map>
|
|
#include <string>
|
|
#include <vector>
|
|
|
|
#include "base/basictypes.h"
|
|
#include "minidump/minidump_extensions.h"
|
|
#include "snapshot/exception_snapshot.h"
|
|
#include "snapshot/minidump/module_snapshot_minidump.h"
|
|
#include "snapshot/memory_snapshot.h"
|
|
#include "snapshot/module_snapshot.h"
|
|
#include "snapshot/process_snapshot.h"
|
|
#include "snapshot/system_snapshot.h"
|
|
#include "snapshot/thread_snapshot.h"
|
|
#include "util/file/file_reader.h"
|
|
#include "util/misc/initialization_state_dcheck.h"
|
|
#include "util/misc/uuid.h"
|
|
#include "util/stdlib/pointer_container.h"
|
|
|
|
namespace crashpad {
|
|
|
|
//! \brief A ProcessSnapshot based on a minidump file.
|
|
class ProcessSnapshotMinidump final : public ProcessSnapshot {
|
|
public:
|
|
ProcessSnapshotMinidump();
|
|
~ProcessSnapshotMinidump() override;
|
|
|
|
//! \brief Initializes the object.
|
|
//!
|
|
//! \param[in] file_reader A file reader corresponding to a minidump file.
|
|
//! The file reader must support seeking.
|
|
//!
|
|
//! \return `true` if the snapshot could be created, `false` otherwise with
|
|
//! an appropriate message logged.
|
|
bool Initialize(FileReaderInterface* file_reader);
|
|
|
|
// ProcessSnapshot:
|
|
|
|
pid_t ProcessID() const override;
|
|
pid_t ParentProcessID() const override;
|
|
void SnapshotTime(timeval* snapshot_time) const override;
|
|
void ProcessStartTime(timeval* start_time) const override;
|
|
void ProcessCPUTimes(timeval* user_time, timeval* system_time) const override;
|
|
void ReportID(UUID* report_id) const override;
|
|
void ClientID(UUID* client_id) const override;
|
|
const std::map<std::string, std::string>& AnnotationsSimpleMap()
|
|
const override;
|
|
const SystemSnapshot* System() const override;
|
|
std::vector<const ThreadSnapshot*> Threads() const override;
|
|
std::vector<const ModuleSnapshot*> Modules() const override;
|
|
const ExceptionSnapshot* Exception() const override;
|
|
std::vector<const MemorySnapshot*> ExtraMemory() const override;
|
|
|
|
private:
|
|
// Initializes data carried in a MinidumpCrashpadInfo stream on behalf of
|
|
// Initialize().
|
|
bool InitializeCrashpadInfo();
|
|
|
|
// Initializes data carried in a MINIDUMP_MODULE_LIST stream on behalf of
|
|
// Initialize().
|
|
bool InitializeModules();
|
|
|
|
// Initializes data carried in a MinidumpModuleCrashpadInfoList structure on
|
|
// behalf of InitializeModules(). This makes use of MinidumpCrashpadInfo as
|
|
// well, so it must be called after InitializeCrashpadInfo().
|
|
bool InitializeModulesCrashpadInfo(
|
|
std::map<uint32_t, MINIDUMP_LOCATION_DESCRIPTOR>*
|
|
module_crashpad_info_links);
|
|
|
|
MINIDUMP_HEADER header_;
|
|
std::vector<MINIDUMP_DIRECTORY> stream_directory_;
|
|
std::map<MinidumpStreamType, const MINIDUMP_LOCATION_DESCRIPTOR*> stream_map_;
|
|
PointerVector<internal::ModuleSnapshotMinidump> modules_;
|
|
MinidumpCrashpadInfo crashpad_info_;
|
|
std::map<std::string, std::string> annotations_simple_map_;
|
|
FileReaderInterface* file_reader_; // weak
|
|
InitializationStateDcheck initialized_;
|
|
|
|
DISALLOW_COPY_AND_ASSIGN(ProcessSnapshotMinidump);
|
|
};
|
|
|
|
} // namespace crashpad
|
|
|
|
#endif // CRASHPAD_SNAPSHOT_MINIDUMP_PROCESS_SNAPSHOT_MINIDUMP_H_
|