Home | History | Annotate | Line # | Download | only in savecore
savecore.c revision 1.75
      1 /*	$NetBSD: savecore.c,v 1.75 2008/10/09 13:59:50 joerg Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 1986, 1992, 1993
      5  *	The Regents of the University of California.  All rights reserved.
      6  *
      7  * Redistribution and use in source and binary forms, with or without
      8  * modification, are permitted provided that the following conditions
      9  * are met:
     10  * 1. Redistributions of source code must retain the above copyright
     11  *    notice, this list of conditions and the following disclaimer.
     12  * 2. Redistributions in binary form must reproduce the above copyright
     13  *    notice, this list of conditions and the following disclaimer in the
     14  *    documentation and/or other materials provided with the distribution.
     15  * 3. Neither the name of the University nor the names of its contributors
     16  *    may be used to endorse or promote products derived from this software
     17  *    without specific prior written permission.
     18  *
     19  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     29  * SUCH DAMAGE.
     30  */
     31 
     32 #include <sys/cdefs.h>
     33 #ifndef lint
     34 __COPYRIGHT("@(#) Copyright (c) 1986, 1992, 1993\
     35  The Regents of the University of California.  All rights reserved.");
     36 #endif /* not lint */
     37 
     38 #ifndef lint
     39 #if 0
     40 static char sccsid[] = "@(#)savecore.c	8.5 (Berkeley) 4/28/95";
     41 #else
     42 __RCSID("$NetBSD: savecore.c,v 1.75 2008/10/09 13:59:50 joerg Exp $");
     43 #endif
     44 #endif /* not lint */
     45 
     46 #include <sys/param.h>
     47 #include <sys/mount.h>
     48 #include <sys/msgbuf.h>
     49 #include <sys/syslog.h>
     50 #include <sys/time.h>
     51 
     52 #include <dirent.h>
     53 #include <errno.h>
     54 #include <fcntl.h>
     55 #include <nlist.h>
     56 #include <paths.h>
     57 #include <stddef.h>
     58 #include <stdio.h>
     59 #include <stdlib.h>
     60 #include <string.h>
     61 #include <time.h>
     62 #include <tzfile.h>
     63 #include <unistd.h>
     64 #include <util.h>
     65 #include <limits.h>
     66 #include <kvm.h>
     67 
     68 extern FILE *zopen(const char *fname, const char *mode);
     69 
     70 #define	KREAD(kd, addr, p)\
     71 	(kvm_read(kd, addr, (char *)(p), sizeof(*(p))) != sizeof(*(p)))
     72 
     73 struct nlist current_nl[] = {	/* Namelist for currently running system. */
     74 #define	X_DUMPDEV	0
     75 	{ .n_name = "_dumpdev" },
     76 #define	X_DUMPLO	1
     77 	{ .n_name = "_dumplo" },
     78 #define	X_TIME_SECOND	2
     79 	{ .n_name = "_time_second" },
     80 #define X_TIME		3
     81 	{ .n_name = "_time" },
     82 #define	X_DUMPSIZE	4
     83 	{ .n_name = "_dumpsize" },
     84 #define	X_VERSION	5
     85 	{ .n_name = "_version" },
     86 #define	X_DUMPMAG	6
     87 	{ .n_name = "_dumpmag" },
     88 #define	X_PANICSTR	7
     89 	{ .n_name = "_panicstr" },
     90 #define	X_PANICSTART	8
     91 	{ .n_name = "_panicstart" },
     92 #define	X_PANICEND	9
     93 	{ .n_name = "_panicend" },
     94 #define	X_MSGBUF	10
     95 	{ .n_name = "_msgbufp" },
     96 #define	X_DUMPCDEV	11
     97 	{ .n_name = "_dumpcdev" },
     98 	{ .n_name = NULL },
     99 };
    100 int cursyms[] = { X_DUMPDEV, X_DUMPLO, X_VERSION, X_DUMPMAG, X_DUMPCDEV, -1 };
    101 int dumpsyms[] = { X_TIME_SECOND, X_TIME, X_DUMPSIZE, X_VERSION, X_PANICSTR,
    102     X_DUMPMAG, -1 };
    103 
    104 struct nlist dump_nl[] = {	/* Name list for dumped system. */
    105 	{ .n_name = "_dumpdev" },	/* Entries MUST be the same as */
    106 	{ .n_name = "_dumplo" },	/*	those in current_nl[].  */
    107 	{ .n_name = "_time_second" },
    108 	{ .n_name = "_time" },
    109 	{ .n_name = "_dumpsize" },
    110 	{ .n_name = "_version" },
    111 	{ .n_name = "_dumpmag" },
    112 	{ .n_name = "_panicstr" },
    113 	{ .n_name = "_panicstart" },
    114 	{ .n_name = "_panicend" },
    115 	{ .n_name = "_msgbufp" },
    116 	{ .n_name = "_dumpcdev" },
    117 	{ .n_name = NULL },
    118 };
    119 
    120 /* Types match kernel declarations. */
    121 off_t	dumplo;				/* where dump starts on dumpdev */
    122 u_int32_t dumpmag;			/* magic number in dump */
    123 int	dumpsize;			/* amount of memory dumped */
    124 off_t dumpbytes;			/* in bytes */
    125 
    126 const char	*kernel;		/* name of used kernel */
    127 char	*dirname;			/* directory to save dumps in */
    128 char	*ddname;			/* name of dump device */
    129 dev_t	dumpdev;			/* dump device */
    130 dev_t	dumpcdev = NODEV;		/* dump device (char equivalent) */
    131 int	dumpfd;				/* read/write descriptor on dev */
    132 kvm_t	*kd_dump;			/* kvm descriptor on dev	*/
    133 time_t	now;				/* current date */
    134 char	panic_mesg[1024];
    135 long	panicstr;
    136 char	vers[1024];
    137 char	gzmode[3];
    138 
    139 static int	clear, compress, force, verbose;	/* flags */
    140 
    141 void	check_kmem(void);
    142 int	check_space(void);
    143 void	clear_dump(void);
    144 int	Create(char *, int);
    145 int	dump_exists(void);
    146 char	*find_dev(dev_t, int);
    147 int	get_crashtime(void);
    148 void	kmem_setup(void);
    149 void	Lseek(int, off_t, int);
    150 int	main(int, char *[]);
    151 int	Open(const char *, int rw);
    152 char	*rawname(char *s);
    153 void	save_core(void);
    154 void	usage(void);
    155 void	Write(int, void *, int);
    156 
    157 int
    158 main(int argc, char *argv[])
    159 {
    160 	int ch, level, testonly;
    161 	char *ep;
    162 
    163 	dirname = NULL;
    164 	kernel = NULL;
    165 	level = 1;		/* default to fastest gzip compression */
    166 	testonly = 0;
    167 	gzmode[0] = 'w';
    168 
    169 	openlog("savecore", LOG_PERROR, LOG_DAEMON);
    170 
    171 	while ((ch = getopt(argc, argv, "cdfnN:vzZ:")) != -1)
    172 		switch(ch) {
    173 		case 'c':
    174 			clear = 1;
    175 			break;
    176 		case 'd':		/* Not documented. */
    177 		case 'v':
    178 			verbose = 1;
    179 			break;
    180 		case 'f':
    181 			force = 1;
    182 			break;
    183 		case 'n':
    184 			testonly = 1;
    185 			break;
    186 		case 'N':
    187 			kernel = optarg;
    188 			break;
    189 		case 'z':
    190 			compress = 1;
    191 			break;
    192 		case 'Z':
    193 			level = (int)strtol(optarg, &ep, 10);
    194 			if (level < 0 || level > 9) {
    195 				(void)syslog(LOG_ERR, "invalid compression %s",
    196 				    optarg);
    197 				usage();
    198 			}
    199 			break;
    200 		case '?':
    201 		default:
    202 			usage();
    203 		}
    204 	argc -= optind;
    205 	argv += optind;
    206 
    207 	if (argc != ((clear || testonly) ? 0 : 1))
    208 		usage();
    209 
    210 	gzmode[1] = level + '0';
    211 	if (!clear)
    212 		dirname = argv[0];
    213 
    214 	if (kernel == NULL) {
    215 		kernel = getbootfile();
    216 	}
    217 
    218 	(void)time(&now);
    219 	kmem_setup();
    220 
    221 	if (clear && !testonly) {
    222 		clear_dump();
    223 		exit(0);
    224 	}
    225 
    226 	if (!dump_exists() && !force)
    227 		exit(1);
    228 
    229 	if (testonly)
    230 		/* If -n was passed and there was a dump, exit at level 0 */
    231 		exit(0);
    232 
    233 	check_kmem();
    234 
    235 	if (panicstr)
    236 		syslog(LOG_ALERT, "reboot after panic: %s", panic_mesg);
    237 	else
    238 		syslog(LOG_ALERT, "reboot");
    239 
    240 	if ((!get_crashtime() || !check_space()) && !force)
    241 		exit(1);
    242 
    243 	save_core();
    244 
    245 	clear_dump();
    246 	exit(0);
    247 }
    248 
    249 void
    250 kmem_setup(void)
    251 {
    252 	kvm_t *kd_kern;
    253 	char errbuf[_POSIX2_LINE_MAX];
    254 	int i, hdrsz;
    255 
    256 	/*
    257 	 * Some names we need for the currently running system, others for
    258 	 * the system that was running when the dump was made.  The values
    259 	 * obtained from the current system are used to look for things in
    260 	 * /dev/kmem that cannot be found in the kernel namelist, but are
    261 	 * presumed to be the same (since the disk partitions are probably
    262 	 * the same!)
    263 	 */
    264 	kd_kern = kvm_openfiles(kernel, NULL, NULL, O_RDONLY, errbuf);
    265 	if (kd_kern == NULL) {
    266 		syslog(LOG_ERR, "%s: kvm_openfiles: %s", kernel, errbuf);
    267 		exit(1);
    268 	}
    269 	if (kvm_nlist(kd_kern, current_nl) == -1)
    270 		syslog(LOG_ERR, "%s: kvm_nlist: %s", kernel,
    271 		    kvm_geterr(kd_kern));
    272 
    273 	for (i = 0; cursyms[i] != -1; i++) {
    274 		if (current_nl[cursyms[i]].n_value != 0)
    275 			continue;
    276 		switch (cursyms[i]) {
    277 		case X_TIME_SECOND:
    278 		case X_TIME:
    279 		case X_DUMPCDEV:
    280 			break;
    281 		default:
    282 			syslog(LOG_ERR, "%s: %s not in namelist",
    283 			    kernel, current_nl[cursyms[i]].n_name);
    284 			exit(1);
    285 		}
    286 	}
    287 
    288 	if (KREAD(kd_kern, current_nl[X_DUMPDEV].n_value, &dumpdev) != 0) {
    289 		if (verbose)
    290 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_kern));
    291 		exit(1);
    292 	}
    293 	if (dumpdev == NODEV) {
    294 		syslog(LOG_WARNING, "no core dump (no dumpdev)");
    295 		exit(1);
    296 	}
    297 	{
    298 	    long l_dumplo;
    299 
    300 	    if (KREAD(kd_kern, current_nl[X_DUMPLO].n_value, &l_dumplo) != 0) {
    301 		    if (verbose)
    302 			syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_kern));
    303 		    exit(1);
    304 	    }
    305 	    if (l_dumplo == -1) {
    306 		syslog(LOG_WARNING, "no core dump (invalid dumplo)");
    307 		exit(1);
    308 	    }
    309 	    dumplo = DEV_BSIZE * (off_t) l_dumplo;
    310 	}
    311 
    312 	if (verbose)
    313 		(void)printf("dumplo = %lld (%ld * %ld)\n",
    314 		    (long long)dumplo, (long)(dumplo / DEV_BSIZE), (long)DEV_BSIZE);
    315 	if (KREAD(kd_kern, current_nl[X_DUMPMAG].n_value, &dumpmag) != 0) {
    316 		if (verbose)
    317 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_kern));
    318 		exit(1);
    319 	}
    320 
    321 	(void)kvm_read(kd_kern, current_nl[X_VERSION].n_value, vers,
    322 	    sizeof(vers));
    323 	vers[sizeof(vers) - 1] = '\0';
    324 
    325 	if (current_nl[X_DUMPCDEV].n_value != 0) {
    326 		if (KREAD(kd_kern, current_nl[X_DUMPCDEV].n_value,
    327 		    &dumpcdev) != 0) {
    328 			if (verbose)
    329 				syslog(LOG_WARNING, "kvm_read: %s",
    330 			            kvm_geterr(kd_kern));
    331 			exit(1);
    332 		}
    333 		ddname = find_dev(dumpcdev, S_IFCHR);
    334 	} else
    335 		ddname = find_dev(dumpdev, S_IFBLK);
    336 	if (strncmp(ddname, "/dev/cons", 8) == 0 ||
    337 	    strncmp(ddname, "/dev/tty", 7) == 0 ||
    338 	    strncmp(ddname, "/dev/pty", 7) == 0 ||
    339 	    strncmp(ddname, "/dev/pts", 7) == 0) {
    340 		syslog(LOG_ERR, "dumpdev %s is tty; override kernel", ddname);
    341 		exit(1);
    342 	}
    343 	dumpfd = Open(ddname, O_RDWR);
    344 
    345 	kd_dump = kvm_openfiles(kernel, ddname, NULL, O_RDWR, errbuf);
    346 	if (kd_dump == NULL) {
    347 		syslog(LOG_ERR, "%s: kvm_openfiles: %s", kernel, errbuf);
    348 		exit(1);
    349 	}
    350 
    351 	if (kvm_nlist(kd_dump, dump_nl) == -1)
    352 		syslog(LOG_ERR, "%s: kvm_nlist: %s", kernel,
    353 		    kvm_geterr(kd_dump));
    354 
    355 	for (i = 0; dumpsyms[i] != -1; i++)
    356 		if (dump_nl[dumpsyms[i]].n_value == 0 &&
    357 			dumpsyms[i] != X_TIME_SECOND &&
    358 			dumpsyms[i] != X_TIME) {
    359 			syslog(LOG_ERR, "%s: %s not in namelist",
    360 			    kernel, dump_nl[dumpsyms[i]].n_name);
    361 			exit(1);
    362 		}
    363 	hdrsz = kvm_dump_mkheader(kd_dump, dumplo);
    364 
    365 	/*
    366 	 * If 'hdrsz' == 0, kvm_dump_mkheader() failed on the magic-number
    367 	 * checks, ergo no dump is present...
    368 	 */
    369 	if (hdrsz == 0) {
    370 		syslog(LOG_WARNING, "no core dump");
    371 		exit(1);
    372 	}
    373 	if (hdrsz == -1) {
    374 		syslog(LOG_ERR, "%s: kvm_dump_mkheader: %s", kernel,
    375 		    kvm_geterr(kd_dump));
    376 		exit(1);
    377 	}
    378 	dumplo += hdrsz;
    379 	kvm_close(kd_kern);
    380 }
    381 
    382 void
    383 check_kmem(void)
    384 {
    385 	char *cp, *bufdata;
    386 	struct kern_msgbuf msgbuf, *bufp;
    387 	long panicloc, panicstart, panicend;
    388 	char core_vers[1024];
    389 
    390 	(void)kvm_read(kd_dump, dump_nl[X_VERSION].n_value, core_vers,
    391 	    sizeof(core_vers));
    392 	core_vers[sizeof(core_vers) - 1] = '\0';
    393 
    394 	if (strcmp(vers, core_vers) != 0)
    395 		syslog(LOG_WARNING,
    396 		    "warning: %s version mismatch:\n\t%s\nand\t%s\n",
    397 		    kernel, vers, core_vers);
    398 
    399 	panicstart = panicend = 0;
    400 	if (KREAD(kd_dump, dump_nl[X_PANICSTART].n_value, &panicstart) != 0) {
    401 		if (verbose)
    402 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    403 		goto nomsguf;
    404 	}
    405 	if (KREAD(kd_dump, dump_nl[X_PANICEND].n_value, &panicend) != 0) {
    406 		if (verbose)
    407 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    408 		goto nomsguf;
    409 	}
    410 	if (panicstart != 0 && panicend != 0) {
    411 		if (KREAD(kd_dump, dump_nl[X_MSGBUF].n_value, &bufp)) {
    412 			if (verbose)
    413 				syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    414 			goto nomsguf;
    415 		}
    416 		if (kvm_read(kd_dump, (long)bufp, &msgbuf,
    417 		    offsetof(struct kern_msgbuf, msg_bufc)) !=
    418 		    offsetof(struct kern_msgbuf, msg_bufc)) {
    419 			if (verbose)
    420 				syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    421 			goto nomsguf;
    422 		}
    423 		if (msgbuf.msg_magic != MSG_MAGIC) {
    424 			if (verbose)
    425 				syslog(LOG_WARNING, "msgbuf magic incorrect");
    426 			goto nomsguf;
    427 		}
    428 		bufdata = malloc(msgbuf.msg_bufs);
    429 		if (bufdata == NULL) {
    430 			if (verbose)
    431 				syslog(LOG_WARNING, "couldn't allocate space for msgbuf data");
    432 			goto nomsguf;
    433 		}
    434 		if (kvm_read(kd_dump, (long)&bufp->msg_bufc, bufdata,
    435 		    msgbuf.msg_bufs) != msgbuf.msg_bufs) {
    436 			if (verbose)
    437 				syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    438 			free(bufdata);
    439 			goto nomsguf;
    440 		}
    441 		cp = panic_mesg;
    442 		while (panicstart != panicend && cp < &panic_mesg[sizeof(panic_mesg)-1]) {
    443 			*cp++ = bufdata[panicstart];
    444 			panicstart++;
    445 			if (panicstart >= msgbuf.msg_bufs)
    446 				panicstart = 0;
    447 		}
    448 		/* Don't end in a new-line */
    449 		cp = &panic_mesg[strlen(panic_mesg)] - 1;
    450 		if (*cp == '\n')
    451 			*cp = '\0';
    452 		panic_mesg[sizeof(panic_mesg) - 1] = '\0';
    453 		free(bufdata);
    454 
    455 		panicstr = 1;	/* anything not zero */
    456 		return;
    457 	}
    458 nomsguf:
    459 	if (KREAD(kd_dump, dump_nl[X_PANICSTR].n_value, &panicstr) != 0) {
    460 		if (verbose)
    461 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    462 		return;
    463 	}
    464 	if (panicstr) {
    465 		cp = panic_mesg;
    466 		panicloc = panicstr;
    467 		do {
    468 			if (KREAD(kd_dump, panicloc, cp) != 0) {
    469 				if (verbose)
    470 				    syslog(LOG_WARNING, "kvm_read: %s",
    471 					kvm_geterr(kd_dump));
    472 				break;
    473 			}
    474 			panicloc++;
    475 		} while (*cp++ && cp < &panic_mesg[sizeof(panic_mesg)-1]);
    476 		panic_mesg[sizeof(panic_mesg) - 1] = '\0';
    477 	}
    478 }
    479 
    480 int
    481 dump_exists(void)
    482 {
    483 	u_int32_t newdumpmag;
    484 
    485 	if (KREAD(kd_dump, dump_nl[X_DUMPMAG].n_value, &newdumpmag) != 0) {
    486 		if (verbose)
    487 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    488 		return (0);
    489 	}
    490 
    491 	/* Read the dump size. */
    492 	if (KREAD(kd_dump, dump_nl[X_DUMPSIZE].n_value, &dumpsize) != 0) {
    493 		if (verbose)
    494 		    syslog(LOG_WARNING, "kvm_read: %s", kvm_geterr(kd_dump));
    495 		return (0);
    496 	}
    497 	dumpbytes = (off_t)dumpsize * getpagesize();
    498 
    499 	/*
    500 	 * Return zero if core dump doesn't seem to be there, and note
    501 	 * it for syslog.  This check and return happens after the dump size
    502 	 * is read, so dumpsize is whether or not the core is valid (for -f).
    503 	 */
    504 	if (newdumpmag != dumpmag) {
    505 		if (verbose)
    506 			syslog(LOG_WARNING,
    507 			    "magic number mismatch (0x%x != 0x%x)",
    508 			    newdumpmag, dumpmag);
    509 		syslog(LOG_WARNING, "no core dump");
    510 		return (0);
    511 	}
    512 	return (1);
    513 }
    514 
    515 void
    516 clear_dump(void)
    517 {
    518 	if (kvm_dump_inval(kd_dump) == -1)
    519 		syslog(LOG_ERR, "%s: kvm_dump_inval: %s", ddname,
    520 		    kvm_geterr(kd_dump));
    521 
    522 }
    523 
    524 char buf[1024 * 1024];
    525 
    526 void
    527 save_core(void)
    528 {
    529 	FILE *fp;
    530 	int bounds, ifd, nr, nw, ofd;
    531 	char *rawp, path[MAXPATHLEN];
    532 
    533 	ofd = -1;
    534 	/*
    535 	 * Get the current number and update the bounds file.  Do the update
    536 	 * now, because may fail later and don't want to overwrite anything.
    537 	 */
    538 	umask(066);
    539 	(void)snprintf(path, sizeof(path), "%s/bounds", dirname);
    540 	if ((fp = fopen(path, "r")) == NULL)
    541 		goto err1;
    542 	if (fgets(buf, sizeof(buf), fp) == NULL) {
    543 		if (ferror(fp))
    544 err1:			syslog(LOG_WARNING, "%s: %m", path);
    545 		bounds = 0;
    546 	} else
    547 		bounds = atoi(buf);
    548 	if (fp != NULL)
    549 		(void)fclose(fp);
    550 	if ((fp = fopen(path, "w")) == NULL)
    551 		syslog(LOG_ERR, "%s: %m", path);
    552 	else {
    553 		(void)fprintf(fp, "%d\n", bounds + 1);
    554 		(void)fclose(fp);
    555 	}
    556 
    557 	/* Create the core file. */
    558 	(void)snprintf(path, sizeof(path), "%s/netbsd.%d.core%s",
    559 	    dirname, bounds, compress ? ".gz" : "");
    560 	if (compress) {
    561 		if ((fp = zopen(path, gzmode)) == NULL) {
    562 			syslog(LOG_ERR, "%s: %m", path);
    563 			exit(1);
    564 		}
    565 	} else {
    566 		ofd = Create(path, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
    567 		fp  = fdopen(ofd, "w");
    568 		if (fp == NULL) {
    569 			syslog(LOG_ERR, "%s: fdopen: %m", path);
    570 			exit(1);
    571 		}
    572 	}
    573 
    574 	if (dumpcdev == NODEV) {
    575 		/* Open the raw device. */
    576 		rawp = rawname(ddname);
    577 		if ((ifd = open(rawp, O_RDONLY)) == -1) {
    578 			syslog(LOG_WARNING, "%s: %m; using block device",
    579 			    rawp);
    580 			ifd = dumpfd;
    581 		}
    582 	} else {
    583 		rawp = ddname;
    584 		ifd = dumpfd;
    585 	}
    586 
    587 	/* Seek to the start of the core. */
    588 	Lseek(ifd, dumplo, SEEK_SET);
    589 
    590 	if (kvm_dump_wrtheader(kd_dump, fp, (int32_t)dumpbytes) == -1) {
    591 		syslog(LOG_ERR, "kvm_dump_wrtheader: %s : %s", path,
    592 		    kvm_geterr(kd_dump));
    593 		exit(1);
    594 	}
    595 
    596 	/* Copy the core file. */
    597 	syslog(LOG_NOTICE, "writing %score to %s",
    598 	    compress ? "compressed " : "", path);
    599 	for (; dumpbytes > (off_t)0; dumpbytes -= (off_t)nr) {
    600 		char nbuf[7];
    601 		humanize_number(nbuf, 7, dumpbytes, "", HN_AUTOSCALE, 0);
    602 		(void)printf("%7s\r", nbuf);
    603 		(void)fflush(stdout);
    604 		nr = read(ifd, buf, MIN(dumpbytes, sizeof(buf)));
    605 		if (nr <= 0) {
    606 			if (nr == 0)
    607 				syslog(LOG_WARNING,
    608 				    "WARNING: EOF on dump device");
    609 			else
    610 				syslog(LOG_ERR, "%s: %m", rawp);
    611 			goto err2;
    612 		}
    613 		nw = fwrite(buf, 1, nr, fp);
    614 		if (nw != nr) {
    615 			syslog(LOG_ERR, "%s: %s",
    616 			    path, strerror(nw == 0 ? EIO : errno));
    617 err2:			syslog(LOG_WARNING,
    618 			    "WARNING: core may be incomplete");
    619 			(void)printf("\n");
    620 			exit(1);
    621 		}
    622 	}
    623 	if (dumpcdev == NODEV)
    624 		(void)close(ifd);
    625 	(void)fclose(fp);
    626 
    627 	/* Copy the kernel. */
    628 	ifd = Open(kernel, O_RDONLY);
    629 	(void)snprintf(path, sizeof(path), "%s/netbsd.%d%s",
    630 	    dirname, bounds, compress ? ".gz" : "");
    631 	if (compress) {
    632 		if ((fp = zopen(path, gzmode)) == NULL) {
    633 			syslog(LOG_ERR, "%s: %m", path);
    634 			exit(1);
    635 		}
    636 	} else
    637 		ofd = Create(path, S_IRUSR | S_IWUSR);
    638 	syslog(LOG_NOTICE, "writing %skernel to %s",
    639 	    compress ? "compressed " : "", path);
    640 	while ((nr = read(ifd, buf, sizeof(buf))) > 0) {
    641 		if (compress)
    642 			nw = fwrite(buf, 1, nr, fp);
    643 		else
    644 			nw = write(ofd, buf, nr);
    645 		if (nw != nr) {
    646 			syslog(LOG_ERR, "%s: %s",
    647 			    path, strerror(nw == 0 ? EIO : errno));
    648 			syslog(LOG_WARNING,
    649 			    "WARNING: kernel may be incomplete");
    650 			exit(1);
    651 		}
    652 	}
    653 	if (nr < 0) {
    654 		syslog(LOG_ERR, "%s: %m", kernel);
    655 		syslog(LOG_WARNING, "WARNING: kernel may be incomplete");
    656 		exit(1);
    657 	}
    658 	if (compress)
    659 		(void)fclose(fp);
    660 	else
    661 		(void)close(ofd);
    662 
    663 	/*
    664 	 * For development systems where the crash occurs during boot
    665 	 * to multiuser.
    666 	 */
    667 	sync();
    668 	sleep(1);
    669 	sync();
    670 	sleep(1);
    671 }
    672 
    673 char *
    674 find_dev(dev_t dev, int type)
    675 {
    676 	DIR *dfd;
    677 	struct dirent *dir;
    678 	struct stat sb;
    679 	char *dp, device[MAXPATHLEN + 1], *p;
    680 	size_t l;
    681 
    682 	if ((dfd = opendir(_PATH_DEV)) == NULL) {
    683 		syslog(LOG_ERR, "%s: %m", _PATH_DEV);
    684 		exit(1);
    685 	}
    686 	strlcpy(device, _PATH_DEV, sizeof(device));
    687 	p = &device[strlen(device)];
    688 	l = sizeof(device) - strlen(device);
    689 	while ((dir = readdir(dfd))) {
    690 		strlcpy(p, dir->d_name, l);
    691 		if (lstat(device, &sb)) {
    692 			syslog(LOG_ERR, "%s: %m", device);
    693 			continue;
    694 		}
    695 		if ((sb.st_mode & S_IFMT) != type)
    696 			continue;
    697 		if (dev == sb.st_rdev) {
    698 			closedir(dfd);
    699 			if ((dp = strdup(device)) == NULL) {
    700 				syslog(LOG_ERR, "%m");
    701 				exit(1);
    702 			}
    703 			return (dp);
    704 		}
    705 	}
    706 	closedir(dfd);
    707 	syslog(LOG_ERR, "can't find device %d/%d", major(dev), minor(dev));
    708 	exit(1);
    709 }
    710 
    711 char *
    712 rawname(char *s)
    713 {
    714 	char *sl;
    715 	char name[MAXPATHLEN];
    716 
    717 	if ((sl = strrchr(s, '/')) == NULL || sl[1] == '0') {
    718 		syslog(LOG_ERR,
    719 		    "can't make raw dump device name from %s", s);
    720 		return (s);
    721 	}
    722 	(void)snprintf(name, sizeof(name), "%.*s/r%s", (int)(sl - s), s,
    723 	    sl + 1);
    724 	if ((sl = strdup(name)) == NULL) {
    725 		syslog(LOG_ERR, "%m");
    726 		exit(1);
    727 	}
    728 	return (sl);
    729 }
    730 
    731 int
    732 get_crashtime(void)
    733 {
    734 	time_t dumptime;			/* Time the dump was taken. */
    735 	struct timeval dtime;
    736 
    737 	if (KREAD(kd_dump, dump_nl[X_TIME_SECOND].n_value, &dumptime) != 0) {
    738 		if (KREAD(kd_dump, dump_nl[X_TIME].n_value, &dtime) != 0) {
    739 			if (verbose)
    740 				syslog(LOG_WARNING, "kvm_read: %s (and _time_second is not defined also)", kvm_geterr(kd_dump));
    741 			return (0);
    742 		}
    743 		dumptime = dtime.tv_sec;
    744 	}
    745 	if (dumptime == 0) {
    746 		if (verbose)
    747 			syslog(LOG_ERR, "dump time is zero");
    748 		return (0);
    749 	}
    750 	(void)printf("savecore: system went down at %s", ctime(&dumptime));
    751 #define	LEEWAY	(60 * SECSPERDAY)
    752 	if (dumptime < now - LEEWAY || dumptime > now + LEEWAY) {
    753 		(void)printf("dump time is unreasonable\n");
    754 		return (0);
    755 	}
    756 	return (1);
    757 }
    758 
    759 int
    760 check_space(void)
    761 {
    762 	FILE *fp;
    763 	off_t minfree, spacefree, kernelsize, needed;
    764 	struct stat st;
    765 	struct statvfs fsbuf;
    766 	char mbuf[100], path[MAXPATHLEN];
    767 
    768 	if (stat(kernel, &st) < 0) {
    769 		syslog(LOG_ERR, "%s: %m", kernel);
    770 		exit(1);
    771 	}
    772 	kernelsize = st.st_blocks * S_BLKSIZE;
    773 	if (statvfs(dirname, &fsbuf) < 0) {
    774 		syslog(LOG_ERR, "%s: %m", dirname);
    775 		exit(1);
    776 	}
    777 	spacefree = fsbuf.f_bavail;
    778 	spacefree *= fsbuf.f_frsize;
    779 	spacefree /= 1024;
    780 
    781 	(void)snprintf(path, sizeof(path), "%s/minfree", dirname);
    782 	if ((fp = fopen(path, "r")) == NULL)
    783 		minfree = 0;
    784 	else {
    785 		if (fgets(mbuf, sizeof(mbuf), fp) == NULL)
    786 			minfree = 0;
    787 		else
    788 			minfree = atoi(mbuf);
    789 		(void)fclose(fp);
    790 	}
    791 
    792 	needed = (dumpbytes + kernelsize) / 1024;
    793  	if (minfree > 0 && spacefree - needed < minfree) {
    794 		syslog(LOG_WARNING,
    795 		    "no dump, not enough free space in %s", dirname);
    796 		return (0);
    797 	}
    798 	if (spacefree - needed < minfree)
    799 		syslog(LOG_WARNING,
    800 		    "dump performed, but free space threshold crossed");
    801 	return (1);
    802 }
    803 
    804 int
    805 Open(const char *name, int rw)
    806 {
    807 	int fd;
    808 
    809 	if ((fd = open(name, rw, 0)) < 0) {
    810 		syslog(LOG_ERR, "%s: %m", name);
    811 		exit(1);
    812 	}
    813 	return (fd);
    814 }
    815 
    816 void
    817 Lseek(int fd, off_t off, int flag)
    818 {
    819 	off_t ret;
    820 
    821 	ret = lseek(fd, off, flag);
    822 	if (ret == -1) {
    823 		syslog(LOG_ERR, "lseek: %m");
    824 		exit(1);
    825 	}
    826 }
    827 
    828 int
    829 Create(char *file, int mode)
    830 {
    831 	int fd;
    832 
    833 	fd = open(file, O_WRONLY | O_CREAT | O_TRUNC, mode);
    834 	if (fd < 0) {
    835 		syslog(LOG_ERR, "%s: %m", file);
    836 		exit(1);
    837 	}
    838 	return (fd);
    839 }
    840 
    841 void
    842 Write(int fd, void *bp, int size)
    843 {
    844 	int n;
    845 
    846 	if ((n = write(fd, bp, size)) < size) {
    847 		syslog(LOG_ERR, "write: %s", strerror(n == -1 ? errno : EIO));
    848 		exit(1);
    849 	}
    850 }
    851 
    852 void
    853 usage(void)
    854 {
    855 	(void)syslog(LOG_ERR,
    856 	    "usage: savecore [-cfnvz] [-N system] [-Z level] directory");
    857 	exit(1);
    858 }
    859