Home | History | Annotate | Line # | Download | only in ktruss
dump.c revision 1.37 
      1 /*	$NetBSD: dump.c,v 1.37 2011/03/06 17:08:42 bouyer Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 1988, 1993
      5  *	The Regents of the University of California.  All rights reserved.
      6  *
      7  * Redistribution and use in source and binary forms, with or without
      8  * modification, are permitted provided that the following conditions
      9  * are met:
     10  * 1. Redistributions of source code must retain the above copyright
     11  *    notice, this list of conditions and the following disclaimer.
     12  * 2. Redistributions in binary form must reproduce the above copyright
     13  *    notice, this list of conditions and the following disclaimer in the
     14  *    documentation and/or other materials provided with the distribution.
     15  * 3. Neither the name of the University nor the names of its contributors
     16  *    may be used to endorse or promote products derived from this software
     17  *    without specific prior written permission.
     18  *
     19  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     29  * SUCH DAMAGE.
     30  */
     31 
     32 #include <sys/cdefs.h>
     33 #ifndef lint
     34 __COPYRIGHT("@(#) Copyright (c) 1988, 1993\
     35  The Regents of the University of California.  All rights reserved.");
     36 #endif /* not lint */
     37 
     38 #ifndef lint
     39 #if 0
     40 static char sccsid[] = "@(#)kdump.c	8.4 (Berkeley) 4/28/95";
     41 #endif
     42 __RCSID("$NetBSD: dump.c,v 1.37 2011/03/06 17:08:42 bouyer Exp $");
     43 #endif /* not lint */
     44 
     45 #include <sys/param.h>
     46 #define	_KERNEL
     47 #include <sys/errno.h>
     48 #undef _KERNEL
     49 #include <sys/ioctl.h>
     50 #include <sys/time.h>
     51 #include <sys/uio.h>
     52 #include <sys/ktrace.h>
     53 #include <sys/ptrace.h>
     54 #include <sys/queue.h>
     55 
     56 #include <err.h>
     57 #include <signal.h>
     58 #include <stdarg.h>
     59 #include <stddef.h>
     60 #include <stdio.h>
     61 #include <stdlib.h>
     62 #include <string.h>
     63 #include <unistd.h>
     64 #include <vis.h>
     65 
     66 #include "ktrace.h"
     67 #include "misc.h"
     68 #include "setemul.h"
     69 
     70 int timestamp, decimal, fancy = 1, tail, maxdata;
     71 
     72 int width;			/* Keep track of current columns. */
     73 
     74 #include <sys/syscall.h>
     75 
     76 static const char *const ptrace_ops[] = {
     77 	"PT_TRACE_ME",	"PT_READ_I",	"PT_READ_D",	"PT_READ_U",
     78 	"PT_WRITE_I",	"PT_WRITE_D",	"PT_WRITE_U",	"PT_CONTINUE",
     79 	"PT_KILL",	"PT_ATTACH",	"PT_DETACH",
     80 };
     81 
     82 struct ktr_entry {
     83 	TAILQ_ENTRY(ktr_entry) kte_list;
     84 	struct ktr_header kte_kth;
     85 };
     86 
     87 TAILQ_HEAD(kteq, ktr_entry) ktependq = TAILQ_HEAD_INITIALIZER(ktependq);
     88 
     89 void	argprint(const char *, register_t **, int *);
     90 void	dumpheader(struct ktr_header *);
     91 int	dumprecord(int, FILE *);
     92 void	flushpendq(struct ktr_entry *);
     93 int	fread_tail(void *, int, int, FILE *);
     94 void	genioprint(struct ktr_header *);
     95 struct ktr_entry *
     96 	getpendq(struct ktr_header *, int, struct kteq *);
     97 struct ktr_entry *
     98 	getrecord(FILE *);
     99 void	indent(int);
    100 void	ioctldecode(u_long);
    101 void	ktrcsw(struct ktr_entry *);
    102 void	ktremul(struct ktr_entry *);
    103 void	ktrgenio(struct ktr_entry *);
    104 void	ktrnamei(struct ktr_entry *);
    105 void	ktrpsig(struct ktr_entry *);
    106 void	ktrsyscall(struct ktr_entry *);
    107 void	ktrsysret(struct ktr_entry *);
    108 void	nameiargprint(const char *, struct ktr_header *, register_t **, int *);
    109 void	nameiprint(struct ktr_header *);
    110 void	newline(void);
    111 void	putpendq(struct ktr_entry *);
    112 void	syscallnameprint(int);
    113 void	syscallprint(struct ktr_header *);
    114 void	sysretprint(struct ktr_header *);
    115 int	wprintf(const char *, ...);
    116 void	*xrealloc(void *, size_t *, size_t);
    117 
    118 int
    119 wprintf(const char *fmt, ...)
    120 {
    121 	va_list ap;
    122 	int w;
    123 
    124 	va_start(ap, fmt);
    125 	w = vprintf(fmt, ap);
    126 	if (w == -1)
    127 		warn("vprintf");
    128 	else
    129 		width += w;
    130 	va_end(ap);
    131 	return (w);
    132 }
    133 
    134 void
    135 newline(void)
    136 {
    137 
    138 	if (width > 0) {
    139 		printf("\n");
    140 		width = 0;
    141 	}
    142 }
    143 
    144 void
    145 indent(int col)
    146 {
    147 
    148 	while (width < col)
    149 		if (wprintf(" ") < 0)
    150 			break;
    151 }
    152 
    153 void *
    154 xrealloc(void *p, size_t *siz, size_t req)
    155 {
    156 
    157 	if (*siz < req) {
    158 		if (*siz == 0)
    159 			*siz = 1;
    160 		while (*siz < req)
    161 			*siz <<= 1;
    162 		p = realloc(p, *siz);
    163 		if (p == NULL)
    164 			err(EXIT_FAILURE, "realloc: %lu bytes",
    165 			    (u_long)*siz);
    166 	}
    167 	return (p);
    168 }
    169 
    170 struct ktr_entry *
    171 getrecord(FILE *fp)
    172 {
    173 	struct ktr_entry *kte;
    174 	struct ktr_header *kth;
    175 	char *cp;
    176 	size_t siz, len;
    177 
    178 	siz = 0;
    179 	kte = xrealloc(NULL, &siz, sizeof(struct ktr_entry));
    180 	kth = &kte->kte_kth;
    181 	if (fread_tail(kth, sizeof(struct ktr_header), 1, fp) == 0) {
    182 		free(kte);
    183 		return (NULL);
    184 	}
    185 
    186 	if (kth->ktr_len < 0)
    187 		errx(EXIT_FAILURE, "bogus length 0x%x", kth->ktr_len);
    188 	len = kth->ktr_len;
    189 	if (len > 0) {
    190 		/* + 1 to ensure room for NUL terminate */
    191 		kte = xrealloc(kte, &siz, sizeof(struct ktr_entry) + len + 1);
    192 		if (fread_tail(cp = (char *)(&kte->kte_kth + 1),
    193 		    len, 1, fp) == 0)
    194 			errx(EXIT_FAILURE, "data too short");
    195 		cp[len] = 0;
    196 	}
    197 
    198 	return (kte);
    199 }
    200 
    201 #define	KTE_TYPE(kte)		((kte)->kte_kth.ktr_type)
    202 #define	KTE_PID(kte)		((kte)->kte_kth.ktr_pid)
    203 #define	KTE_LID(kte)		((kte)->kte_kth.ktr_lid)
    204 #define	KTE_MATCH(kte, type, pid, lid)				\
    205 	(KTE_TYPE(kte) == (type) && KTE_PID(kte) == (pid) &&	\
    206 	KTE_LID(kte) == (lid))
    207 
    208 void
    209 putpendq(struct ktr_entry *kte)
    210 {
    211 
    212 	TAILQ_INSERT_TAIL(&ktependq, kte, kte_list);
    213 }
    214 
    215 void
    216 flushpendq(struct ktr_entry *us)
    217 {
    218 	struct ktr_entry *kte, *kte_next;
    219 	int pid = KTE_PID(us), lid = KTE_LID(us);
    220 
    221 	for (kte = TAILQ_FIRST(&ktependq); kte != NULL; kte = kte_next) {
    222 		kte_next = TAILQ_NEXT(kte, kte_list);
    223 		if (KTE_PID(kte) == pid || KTE_LID(kte) == lid) {
    224 			TAILQ_REMOVE(&ktependq, kte, kte_list);
    225 			free(kte);
    226 		}
    227 	}
    228 }
    229 
    230 struct ktr_entry *
    231 getpendq(struct ktr_header *us, int type, struct kteq *kteq)
    232 {
    233 	struct ktr_entry *kte, *kte_next;
    234 	int pid = us->ktr_pid, lid = us->ktr_lid;
    235 
    236 	if (kteq != NULL)
    237 		TAILQ_INIT(kteq);
    238 	for (kte = TAILQ_FIRST(&ktependq); kte != NULL; kte = kte_next) {
    239 		kte_next = TAILQ_NEXT(kte, kte_list);
    240 		if (KTE_MATCH(kte, type, pid, lid)) {
    241 			TAILQ_REMOVE(&ktependq, kte, kte_list);
    242 			if (kteq != NULL)
    243 				TAILQ_INSERT_TAIL(kteq, kte, kte_list);
    244 			else
    245 				break;
    246 		}
    247 	}
    248 
    249 	return (kteq ? TAILQ_FIRST(kteq) : kte);
    250 }
    251 
    252 int
    253 dumprecord(int trpoints, FILE *fp)
    254 {
    255 	struct ktr_entry *kte;
    256 	struct ktr_header *kth;
    257 
    258 	kte = getrecord(fp);
    259 	if (kte == NULL)
    260 		return (0);
    261 
    262 	kth = &kte->kte_kth;
    263 	if ((trpoints & (1 << kth->ktr_type)) == 0) {
    264 		free(kte);
    265 		goto out;
    266 	}
    267 
    268 	/* Update context to match currently processed record. */
    269 	ectx_sanify(kth->ktr_pid);
    270 
    271 	switch (kth->ktr_type) {
    272 	case KTR_SYSCALL:
    273 		ktrsyscall(kte);
    274 		break;
    275 	case KTR_SYSRET:
    276 		ktrsysret(kte);
    277 		break;
    278 	case KTR_NAMEI:
    279 		putpendq(kte);
    280 		break;
    281 	case KTR_GENIO:
    282 		putpendq(kte);
    283 		break;
    284 	case KTR_PSIG:
    285 		ktrpsig(kte);
    286 		break;
    287 	case KTR_CSW:
    288 		ktrcsw(kte);
    289 		break;
    290 	case KTR_EMUL:
    291 		putpendq(kte);
    292 		break;
    293 	default:
    294 		/*
    295 		 * XXX: Other types added recently.
    296 		 */
    297 		free(kte);
    298 		break;
    299 	}
    300 	newline();
    301 
    302 out:
    303 	return (1);
    304 }
    305 
    306 void
    307 dumpfile(const char *file, int fd, int trpoints)
    308 {
    309 	FILE *fp;
    310 
    311 	if (file == NULL || *file == 0) {
    312 		if ((fp = fdopen(fd, "r")) == NULL)
    313 			err(EXIT_FAILURE, "fdopen(%d)", fd);
    314 	} else if (strcmp(file, "-") == 0)
    315 		fp = stdin;
    316 	else if ((fp = fopen(file, "r")) == NULL)
    317 		err(EXIT_FAILURE, "fopen: %s", file);
    318 
    319 	for (width = 0; dumprecord(trpoints, fp) != 0;)
    320 		if (tail)
    321 			(void)fflush(stdout);
    322 
    323 	newline();
    324 
    325 	/*
    326 	 * XXX: Dump pending KTR_SYSCALL if any?
    327 	 */
    328 }
    329 
    330 int
    331 fread_tail(void *buf, int size, int num, FILE *fp)
    332 {
    333 	int i;
    334 
    335 	while ((i = fread(buf, size, num, fp)) == 0 && tail) {
    336 		(void)sleep(1);
    337 		clearerr(fp);
    338 	}
    339 	return (i);
    340 }
    341 
    342 void
    343 dumpheader(struct ktr_header *kth)
    344 {
    345 	union timeholder {
    346 		struct timeval tv;
    347 		struct timespec ts;
    348 	};
    349 	static union timeholder prevtime;
    350 	union timeholder temp;
    351 
    352 	wprintf("%6d ", kth->ktr_pid);
    353 	if (kth->ktr_version > KTRFAC_VERSION(KTRFACv0))
    354 		wprintf("%6d ", kth->ktr_lid);
    355 	wprintf("%-8.*s ", MAXCOMLEN, kth->ktr_comm);
    356 	if (timestamp) {
    357 		if (timestamp == 2) {
    358 			switch (kth->ktr_version) {
    359 			case KTRFAC_VERSION(KTRFACv0):
    360 				if (prevtime.tv.tv_sec == 0)
    361 					temp.tv.tv_sec = temp.tv.tv_usec = 0;
    362 				else
    363 					timersub(&kth->ktr_otv,
    364 					    &prevtime.tv, &temp.tv);
    365 				prevtime.tv.tv_sec = kth->ktr_otv.tv_sec;
    366 				prevtime.tv.tv_usec = kth->ktr_otv.tv_usec;
    367 				break;
    368 
    369 			case KTRFAC_VERSION(KTRFACv1):
    370 				if (prevtime.ts.tv_sec == 0)
    371 					temp.ts.tv_sec = temp.ts.tv_nsec = 0;
    372 				else
    373 					timespecsub(&kth->ktr_time,
    374 					    &prevtime.ts, &temp.ts);
    375 				prevtime.ts.tv_sec = kth->ktr_ots.tv_sec;
    376 				prevtime.ts.tv_nsec = kth->ktr_ots.tv_nsec;
    377 				break;
    378 
    379 			case KTRFAC_VERSION(KTRFACv2):
    380 				if (prevtime.ts.tv_sec == 0)
    381 					temp.ts.tv_sec = temp.ts.tv_nsec = 0;
    382 				else
    383 					timespecsub(&kth->ktr_time,
    384 					    &prevtime.ts, &temp.ts);
    385 				prevtime.ts.tv_sec = kth->ktr_ts.tv_sec;
    386 				prevtime.ts.tv_nsec = kth->ktr_ts.tv_nsec;
    387 				break;
    388 			}
    389 		} else {
    390 			switch (kth->ktr_version) {
    391 			case KTRFAC_VERSION(KTRFACv0):
    392 				temp.tv.tv_sec = kth->ktr_otv.tv_sec;
    393 				temp.tv.tv_usec = kth->ktr_otv.tv_usec;
    394 				break;
    395 			case KTRFAC_VERSION(KTRFACv1):
    396 				temp.ts.tv_sec = kth->ktr_ots.tv_sec;
    397 				temp.ts.tv_nsec = kth->ktr_ots.tv_nsec;
    398 				break;
    399 			case KTRFAC_VERSION(KTRFACv2):
    400 				temp.ts.tv_sec = kth->ktr_ts.tv_sec;
    401 				temp.ts.tv_nsec = kth->ktr_ts.tv_nsec;
    402 				break;
    403 			}
    404 		}
    405 		if (kth->ktr_version == KTRFAC_VERSION(KTRFACv0))
    406 			wprintf("%lld.%06ld ",
    407 			    (long long)temp.tv.tv_sec, (long)temp.tv.tv_usec);
    408 		else
    409 			wprintf("%lld.%09ld ",
    410 			    (long long)temp.ts.tv_sec, (long)temp.ts.tv_nsec);
    411 	}
    412 }
    413 
    414 void
    415 ioctldecode(u_long cmd)
    416 {
    417 	char dirbuf[4], *dir = dirbuf;
    418 
    419 	if (cmd & IOC_OUT)
    420 		*dir++ = 'W';
    421 	if (cmd & IOC_IN)
    422 		*dir++ = 'R';
    423 	*dir = '\0';
    424 
    425 	wprintf(decimal ? ", _IO%s('%c',%ld" : ", _IO%s('%c',%#lx",
    426 	    dirbuf, (int) ((cmd >> 8) & 0xff), cmd & 0xff);
    427 	if ((cmd & IOC_VOID) == 0)
    428 		wprintf(decimal ? ",%ld)" : ",%#lx)",
    429 		    (cmd >> 16) & 0xff);
    430 	else
    431 		wprintf(")");
    432 }
    433 
    434 void
    435 nameiargprint(const char *prefix, struct ktr_header *kth,
    436     register_t **ap, int *argsize)
    437 {
    438 	struct ktr_entry *kte;
    439 
    440 	if (*argsize == 0)
    441 		errx(EXIT_FAILURE, "argument expected");
    442 	/*
    443 	 * XXX: binary emulation mode.
    444 	 */
    445 	kte = getpendq(kth, KTR_NAMEI, NULL);
    446 	if (kte == NULL)
    447 		argprint(prefix, ap, argsize);
    448 	else {
    449 		wprintf("%s", prefix);
    450 		nameiprint(&kte->kte_kth);
    451 		free(kte);
    452 		(*ap)++;
    453 		*argsize -= sizeof(register_t);
    454 	}
    455 }
    456 
    457 void
    458 syscallnameprint(int code)
    459 {
    460 
    461 	if (code >= cur_emul->nsysnames || code < 0)
    462 		wprintf("[%d]", code);
    463 	else
    464 		wprintf("%s", cur_emul->sysnames[code]);
    465 }
    466 
    467 void
    468 argprint(const char *prefix, register_t **ap, int *argsize)
    469 {
    470 
    471 	if (decimal)
    472 		wprintf("%s%ld", prefix, (long)**ap);
    473 	else
    474 		wprintf("%s%#lx", prefix, (long)**ap);
    475 	(*ap)++;
    476 	*argsize -= sizeof(register_t);
    477 }
    478 
    479 void
    480 syscallprint(struct ktr_header *kth)
    481 {
    482 	struct ktr_syscall *ktr = (struct ktr_syscall *)(kth + 1);
    483 	register_t *ap;
    484 	const char *s;
    485 	int argsize;
    486 
    487 	syscallnameprint(ktr->ktr_code);
    488 
    489 	/*
    490 	 * Arguments processing.
    491 	 */
    492 	argsize = ktr->ktr_argsize;
    493 	if (argsize == 0) {
    494 		wprintf("(");
    495 		goto noargument;
    496 	}
    497 
    498 	ap = (register_t *)(ktr + 1);
    499 	if (!fancy)
    500 		goto print_first;
    501 
    502 	switch (ktr->ktr_code) {
    503 	/*
    504 	 * All these have a path as the first param.
    505 	 * The order is same as syscalls.master.
    506 	 */
    507 	case SYS_open:
    508 	case SYS_link:
    509 	case SYS_unlink:
    510 	case SYS_chdir:
    511 	case SYS___mknod50:
    512 	case SYS_chmod:
    513 	case SYS_chown:
    514 	case SYS_unmount:
    515 	case SYS_access:
    516 	case SYS_chflags:
    517 	case SYS_acct:
    518 	case SYS_revoke:
    519 	case SYS_symlink:
    520 	case SYS_readlink:
    521 	case SYS_execve:
    522 	case SYS_chroot:
    523 	case SYS_rename:
    524 	case SYS_mkfifo:
    525 	case SYS_mkdir:
    526 	case SYS_rmdir:
    527 	case SYS___utimes50:
    528 	case SYS_compat_50_quotactl:
    529 	case SYS___quotactl50:
    530 	case SYS_statvfs1:
    531 	case SYS_compat_30_getfh:
    532 	case SYS_pathconf:
    533 	case SYS_truncate:
    534 	case SYS_undelete:
    535 	case SYS___posix_rename:
    536 	case SYS_lchmod:
    537 	case SYS_lchown:
    538 	case SYS___lutimes50:
    539 	case SYS___stat50:
    540 	case SYS___lstat50:
    541 	case SYS___posix_chown:
    542 	case SYS___posix_lchown:
    543 	case SYS_lchflags:
    544 	case SYS___getfh30:
    545 		nameiargprint("(", kth, &ap, &argsize);
    546 
    547 		/*
    548 		 * 2nd argument is also pathname.
    549 		 */
    550 		switch (ktr->ktr_code) {
    551 		case SYS_link:
    552 		case SYS_rename:
    553 		case SYS___posix_rename:
    554 			nameiargprint(", ", kth, &ap, &argsize);
    555 			break;
    556 		}
    557 		break;
    558 
    559 	case SYS_compat_16___sigaction14 :
    560 		wprintf("(%s", signals[(int)*ap].name);
    561 		ap++;
    562 		argsize -= sizeof(register_t);
    563 		break;
    564 
    565 	case SYS_ioctl :
    566 		argprint("(", &ap, &argsize);
    567 		if ((s = ioctlname(*ap)) != NULL)
    568 			wprintf(", %s", s);
    569 		else
    570 			ioctldecode(*ap);
    571 		ap++;
    572 		argsize -= sizeof(register_t);
    573 		break;
    574 
    575 	case SYS_ptrace :
    576 		if ((long)*ap >= 0 &&
    577 		    *ap < (register_t)(sizeof(ptrace_ops) / sizeof(ptrace_ops[0])))
    578 			wprintf("(%s", ptrace_ops[*ap]);
    579 		else
    580 			wprintf("(%ld", (long)*ap);
    581 		ap++;
    582 		argsize -= sizeof(register_t);
    583 		break;
    584 
    585 	default:
    586 print_first:
    587 		argprint("(", &ap, &argsize);
    588 		break;
    589 	}
    590 
    591 	/* Print rest of argument. */
    592 	while (argsize > 0)
    593 		argprint(", ", &ap, &argsize);
    594 
    595 noargument:
    596 	wprintf(")");
    597 }
    598 
    599 void
    600 ktrsyscall(struct ktr_entry *kte)
    601 {
    602 	struct ktr_header *kth = &kte->kte_kth;
    603 	struct ktr_syscall *ktr = (struct ktr_syscall *)(kth + 1);
    604 
    605 	switch (ktr->ktr_code) {
    606 	case SYS_exit:
    607 		dumpheader(kth);
    608 		syscallprint(kth);
    609 		break;
    610 	default:
    611 		putpendq(kte);
    612 		return;
    613 	}
    614 
    615 	free(kte);
    616 }
    617 
    618 void
    619 sysretprint(struct ktr_header *kth)
    620 {
    621 	struct ktr_sysret *ktr = (struct ktr_sysret *)(kth + 1);
    622 	register_t ret = ktr->ktr_retval;
    623 	int error = ktr->ktr_error;
    624 
    625 	indent(50);
    626 	if (error == EJUSTRETURN)
    627 		wprintf(" JUSTRETURN");
    628 	else if (error == ERESTART)
    629 		wprintf(" RESTART");
    630 	else if (error) {
    631 		wprintf(" Err#%d", error);
    632 		if (error < MAXERRNOS && error >= -2)
    633 			wprintf(" %s", errnos[error].name);
    634 	} else
    635 		switch (ktr->ktr_code) {
    636 		case SYS_mmap:
    637 			wprintf(" = %p", (long)ret);
    638 			break;
    639 		default:
    640 			wprintf(" = %ld", (long)ret);
    641 			if (kth->ktr_len > (int)offsetof(struct ktr_sysret,
    642 			    ktr_retval_1) && ktr->ktr_retval_1 != 0)
    643 				wprintf(", %ld", (long)ktr->ktr_retval_1);
    644 			break;
    645 		}
    646 }
    647 
    648 void
    649 ktrsysret(struct ktr_entry *kte)
    650 {
    651 	struct ktr_header *kth = &kte->kte_kth;
    652 	struct ktr_sysret *ktr = (struct ktr_sysret *)(kth + 1);
    653 	struct ktr_entry *emul;
    654 	struct ktr_entry *genio;
    655 	struct ktr_entry *syscall_ent;
    656 
    657 	dumpheader(kth);
    658 
    659 	/* Print syscall name and arguments. */
    660 	syscall_ent = getpendq(kth, KTR_SYSCALL, NULL);
    661 	if (syscall_ent == NULL) {
    662 		/*
    663 		 * Possibilly a child of fork/vfork, or tracing of
    664 		 * process started during system call.
    665 		 */
    666 		syscallnameprint(ktr->ktr_code);
    667 	} else {
    668 		syscallprint(&syscall_ent->kte_kth);
    669 		free(syscall_ent);
    670 	}
    671 
    672 	/* Print return value and an error if any. */
    673 	sysretprint(kth);
    674 
    675 	genio = getpendq(kth, KTR_GENIO, NULL);
    676 	if (genio != NULL) {
    677 		genioprint(&genio->kte_kth);
    678 		free(genio);
    679 	}
    680 
    681 	emul = getpendq(kth, KTR_EMUL, NULL);
    682 	if (emul != NULL) {
    683 		newline();
    684 		ktremul(emul);
    685 	}
    686 
    687 	flushpendq(kte);
    688 	free(kte);
    689 }
    690 
    691 void
    692 nameiprint(struct ktr_header *kth)
    693 {
    694 
    695 	wprintf("\"%.*s\"", kth->ktr_len, (char *)(kth + 1));
    696 }
    697 
    698 #ifdef notused
    699 void
    700 ktrnamei(struct ktr_entry *kte)
    701 {
    702 	struct ktr_header *kth = &kte->kte_kth;
    703 
    704 	dumpheader(kth);
    705 	wprintf("namei(");
    706 	nameiprint(kth);
    707 	wprintf(")");
    708 
    709 	free(kte);
    710 }
    711 #endif
    712 
    713 void
    714 ktremul(struct ktr_entry *kte)
    715 {
    716 	struct ktr_header *kth = &kte->kte_kth;
    717 	char *emul = (char *)(kth + 1);
    718 
    719 	dumpheader(kth);
    720 	wprintf("emul(%s)", emul);
    721 	setemul(emul, kth->ktr_pid, 1);
    722 
    723 	free(kte);
    724 }
    725 
    726 void
    727 genioprint(struct ktr_header *kth)
    728 {
    729 	struct ktr_genio *ktr = (struct ktr_genio *)(kth + 1);
    730 	static int screenwidth = 0;
    731 	int datalen = kth->ktr_len - sizeof(struct ktr_genio);
    732 	/*
    733 	 * Need to be unsigned type so that positive value is passed
    734 	 * to vis(), which will call isgraph().
    735 	 */
    736 	unsigned char *dp = (unsigned char *)(ktr + 1);
    737 	int w;
    738 	char visbuf[5];
    739 
    740 	if (screenwidth == 0) {
    741 		struct winsize ws;
    742 
    743 		if (fancy && ioctl(fileno(stderr), TIOCGWINSZ, &ws) != -1 &&
    744 		    ws.ws_col > 8)
    745 			screenwidth = ws.ws_col;
    746 		else
    747 			screenwidth = 80;
    748 	}
    749 
    750 	if (maxdata && datalen > maxdata)
    751 		datalen = maxdata;
    752 	newline();
    753 	wprintf("       \"");
    754 	for (; datalen > 0; datalen--, dp++) {
    755 		(void) vis(visbuf, *dp, VIS_NL|VIS_TAB|VIS_CSTYLE,
    756 		    /* We put NUL at the end of buffer when reading */
    757 		    *(dp + 1));
    758 		visbuf[4] = '\0';
    759 		w = strlen(visbuf);
    760 		if (width + w + 2 >= screenwidth)
    761 			break;
    762 		wprintf("%s", visbuf);
    763 		if (width + 2 >= screenwidth)
    764 			break;
    765 	}
    766 	wprintf("\"");
    767 }
    768 
    769 #ifdef notused
    770 void
    771 ktrgenio(struct ktr_entry *kte)
    772 {
    773 	struct ktr_header *kth = &kte->kte_kth;
    774 	struct ktr_genio *ktr = (struct ktr_genio *)(kth + 1);
    775 
    776 	dumpheader(kth);
    777 	wprintf("genio fd %d %s",
    778 	    ktr->ktr_fd, ktr->ktr_rw ? "write" : "read");
    779 	genioprint(kth);
    780 
    781 	free(kte);
    782 }
    783 #endif
    784 
    785 void
    786 ktrpsig(struct ktr_entry *kte)
    787 {
    788 	struct ktr_header *kth = &kte->kte_kth;
    789 	struct ktr_psig *psig = (struct ktr_psig *)(kth + 1);
    790 
    791 	dumpheader(kth);
    792 	wprintf("SIG%s ", sys_signame[psig->signo]);
    793 	if (psig->action == SIG_DFL)
    794 		wprintf("SIG_DFL");
    795 	else {
    796 		wprintf("caught handler=0x%lx mask=0x%lx code=0x%x",
    797 		    (u_long)psig->action, (unsigned long)psig->mask.__bits[0],
    798 		    psig->code);
    799 	}
    800 
    801 	free(kte);
    802 }
    803 
    804 void
    805 ktrcsw(struct ktr_entry *kte)
    806 {
    807 	struct ktr_header *kth = &kte->kte_kth;
    808 	struct ktr_csw *cs = (struct ktr_csw *)(kth + 1);
    809 
    810 	dumpheader(kth);
    811 	wprintf("%s %s", cs->out ? "stop" : "resume",
    812 	    cs->user ? "user" : "kernel");
    813 
    814 	free(kte);
    815 }
    816