mirror of
https://github.com/chromium/crashpad.git
synced 2024-12-29 08:39:44 +08:00
0758dbde9a
This makes the basics of !peb work in windbg, however, pointed-to things are not yet retrieved. For full functionality, a variety of pointers in the PEB also needs to be walked and captured. e.g. Previously: 0:000> .ecxr eax=00000007 ebx=7e383000 ecx=c3f9a943 edx=00000000 esi=006d62d0 edi=003c9280 eip=00384828 esp=005bf634 ebp=005bf638 iopl=0 nv up ei pl zr na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246 crashy_program!crashpad::`anonymous namespace'::SomeCrashyFunction+0x28: 00384828 c7002a000000 mov dword ptr [eax],2Ah ds:002b:00000007=???????? 0:000> !peb PEB at 7e383000 error 1 InitTypeRead( nt!_PEB at 7e383000)... Now: 0:000> .ecxr eax=00000007 ebx=7f958000 ecx=02102f4d edx=00000000 esi=00e162d0 edi=01389280 eip=01344828 esp=00c2fb64 ebp=00c2fb68 iopl=0 nv up ei pl zr na pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246 crashy_program!crashpad::`anonymous namespace'::SomeCrashyFunction+0x28: 01344828 c7002a000000 mov dword ptr [eax],2Ah ds:002b:00000007=???????? 0:000> !peb PEB at 7f958000 InheritedAddressSpace: No ReadImageFileExecOptions: No BeingDebugged: No ImageBaseAddress: 01340000 Ldr 77ec8b40 *** unable to read Ldr table at 77ec8b40 SubSystemData: 00000000 ProcessHeap: 00e10000 ProcessParameters: 00e114e0 CurrentDirectory: '< Name not readable >' WindowTitle: '< Name not readable >' ImageFile: '< Name not readable >' CommandLine: '< Name not readable >' DllPath: '< Name not readable >' Environment: 00000000 Unable to read Environment string. R=mark@chromium.org BUG=crashpad:46 Review URL: https://codereview.chromium.org/1364053002 .
155 lines
5.9 KiB
C++
155 lines
5.9 KiB
C++
// Copyright 2015 The Crashpad Authors. All rights reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#ifndef CRASHPAD_SNAPSHOT_WIN_PROCESS_SNAPSHOT_WIN_H_
|
|
#define CRASHPAD_SNAPSHOT_WIN_PROCESS_SNAPSHOT_WIN_H_
|
|
|
|
#include <windows.h>
|
|
#include <sys/time.h>
|
|
|
|
#include <map>
|
|
#include <string>
|
|
#include <vector>
|
|
|
|
#include "base/basictypes.h"
|
|
#include "base/memory/scoped_ptr.h"
|
|
#include "client/crashpad_info.h"
|
|
#include "snapshot/crashpad_info_client_options.h"
|
|
#include "snapshot/exception_snapshot.h"
|
|
#include "snapshot/memory_snapshot.h"
|
|
#include "snapshot/module_snapshot.h"
|
|
#include "snapshot/process_snapshot.h"
|
|
#include "snapshot/system_snapshot.h"
|
|
#include "snapshot/thread_snapshot.h"
|
|
#include "snapshot/win/exception_snapshot_win.h"
|
|
#include "snapshot/win/memory_snapshot_win.h"
|
|
#include "snapshot/win/module_snapshot_win.h"
|
|
#include "snapshot/win/system_snapshot_win.h"
|
|
#include "snapshot/win/thread_snapshot_win.h"
|
|
#include "util/misc/initialization_state_dcheck.h"
|
|
#include "util/misc/uuid.h"
|
|
#include "util/win/address_types.h"
|
|
#include "util/stdlib/pointer_container.h"
|
|
|
|
namespace crashpad {
|
|
|
|
//! \brief A ProcessSnapshot of a running (or crashed) process running on a
|
|
//! Windows system.
|
|
class ProcessSnapshotWin final : public ProcessSnapshot {
|
|
public:
|
|
ProcessSnapshotWin();
|
|
~ProcessSnapshotWin() override;
|
|
|
|
//! \brief Initializes the object.
|
|
//!
|
|
//! \param[in] process The handle to create a snapshot from.
|
|
//! \param[in] suspension_state Whether \a process has been suspended by the
|
|
//! caller.
|
|
//!
|
|
//! \return `true` if the snapshot could be created, `false` otherwise with
|
|
//! an appropriate message logged.
|
|
//!
|
|
//! \sa ScopedProcessSuspend
|
|
bool Initialize(HANDLE process, ProcessSuspensionState suspension_state);
|
|
|
|
//! \brief Initializes the object's exception.
|
|
//!
|
|
//! This populates the data to be returned by Exception().
|
|
//!
|
|
//! This method must not be called until after a successful call to
|
|
//! Initialize().
|
|
//!
|
|
//! \param[in] exception_information_address The address in the client
|
|
//! process's address space of an ExceptionInformation structure.
|
|
//!
|
|
//! \return `true` if the exception information could be initialized, `false`
|
|
//! otherwise with an appropriate message logged. When this method returns
|
|
//! `false`, the ProcessSnapshotWin object's validity remains unchanged.
|
|
bool InitializeException(WinVMAddress exception_information_address);
|
|
|
|
//! \brief Sets the value to be returned by ReportID().
|
|
//!
|
|
//! The crash report ID is under the control of the snapshot producer, which
|
|
//! may call this method to set the report ID. If this is not done, ReportID()
|
|
//! will return an identifier consisting entirely of zeroes.
|
|
void SetReportID(const UUID& report_id) { report_id_ = report_id; }
|
|
|
|
//! \brief Sets the value to be returned by ClientID().
|
|
//!
|
|
//! The client ID is under the control of the snapshot producer, which may
|
|
//! call this method to set the client ID. If this is not done, ClientID()
|
|
//! will return an identifier consisting entirely of zeroes.
|
|
void SetClientID(const UUID& client_id) { client_id_ = client_id; }
|
|
|
|
//! \brief Sets the value to be returned by AnnotationsSimpleMap().
|
|
//!
|
|
//! All process annotations are under the control of the snapshot producer,
|
|
//! which may call this method to establish these annotations. Contrast this
|
|
//! with module annotations, which are under the control of the process being
|
|
//! snapshotted.
|
|
void SetAnnotationsSimpleMap(
|
|
const std::map<std::string, std::string>& annotations_simple_map) {
|
|
annotations_simple_map_ = annotations_simple_map;
|
|
}
|
|
|
|
//! \brief Returns options from CrashpadInfo structures found in modules in
|
|
//! the process.
|
|
//!
|
|
//! \param[out] options Options set in CrashpadInfo structures in modules in
|
|
//! the process.
|
|
void GetCrashpadOptions(CrashpadInfoClientOptions* options);
|
|
|
|
// ProcessSnapshot:
|
|
|
|
pid_t ProcessID() const override;
|
|
pid_t ParentProcessID() const override;
|
|
void SnapshotTime(timeval* snapshot_time) const override;
|
|
void ProcessStartTime(timeval* start_time) const override;
|
|
void ProcessCPUTimes(timeval* user_time, timeval* system_time) const override;
|
|
void ReportID(UUID* report_id) const override;
|
|
void ClientID(UUID* client_id) const override;
|
|
const std::map<std::string, std::string>& AnnotationsSimpleMap()
|
|
const override;
|
|
const SystemSnapshot* System() const override;
|
|
std::vector<const ThreadSnapshot*> Threads() const override;
|
|
std::vector<const ModuleSnapshot*> Modules() const override;
|
|
const ExceptionSnapshot* Exception() const override;
|
|
std::vector<const MemorySnapshot*> ExtraMemory() const override;
|
|
|
|
private:
|
|
// Initializes threads_ on behalf of Initialize().
|
|
void InitializeThreads();
|
|
|
|
// Initializes modules_ on behalf of Initialize().
|
|
void InitializeModules();
|
|
|
|
internal::SystemSnapshotWin system_;
|
|
internal::MemorySnapshotWin peb_;
|
|
PointerVector<internal::ThreadSnapshotWin> threads_;
|
|
PointerVector<internal::ModuleSnapshotWin> modules_;
|
|
scoped_ptr<internal::ExceptionSnapshotWin> exception_;
|
|
ProcessReaderWin process_reader_;
|
|
UUID report_id_;
|
|
UUID client_id_;
|
|
std::map<std::string, std::string> annotations_simple_map_;
|
|
timeval snapshot_time_;
|
|
InitializationStateDcheck initialized_;
|
|
|
|
DISALLOW_COPY_AND_ASSIGN(ProcessSnapshotWin);
|
|
};
|
|
|
|
} // namespace crashpad
|
|
|
|
#endif // CRASHPAD_SNAPSHOT_WIN_PROCESS_SNAPSHOT_WIN_H_
|