1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#include <errno.h>
18#include <fcntl.h>
19#include <limits.h>
20#include <stdio.h>
21#include <stdlib.h>
22#include <string.h>
23#include <sys/resource.h>
24#include <sys/stat.h>
25#include <sys/time.h>
26#include <sys/wait.h>
27#include <unistd.h>
28#include <linux/capability.h>
29#include <linux/prctl.h>
30
31#include <cutils/properties.h>
32
33#include "private/android_filesystem_config.h"
34
35#define LOG_TAG "dumpstate"
36#include <utils/Log.h>
37
38#include "dumpstate.h"
39
40/* read before root is shed */
41static char cmdline_buf[16384] = "(unknown)";
42static const char *dump_traces_path = NULL;
43
44static char screenshot_path[PATH_MAX] = "";
45
46/* dumps the current system state to stdout */
47static void dumpstate() {
48    time_t now = time(NULL);
49    char build[PROPERTY_VALUE_MAX], fingerprint[PROPERTY_VALUE_MAX];
50    char radio[PROPERTY_VALUE_MAX], bootloader[PROPERTY_VALUE_MAX];
51    char network[PROPERTY_VALUE_MAX], date[80];
52    char build_type[PROPERTY_VALUE_MAX];
53
54    property_get("ro.build.display.id", build, "(unknown)");
55    property_get("ro.build.fingerprint", fingerprint, "(unknown)");
56    property_get("ro.build.type", build_type, "(unknown)");
57    property_get("ro.baseband", radio, "(unknown)");
58    property_get("ro.bootloader", bootloader, "(unknown)");
59    property_get("gsm.operator.alpha", network, "(unknown)");
60    strftime(date, sizeof(date), "%Y-%m-%d %H:%M:%S", localtime(&now));
61
62    printf("========================================================\n");
63    printf("== dumpstate: %s\n", date);
64    printf("========================================================\n");
65
66    printf("\n");
67    printf("Build: %s\n", build);
68    printf("Build fingerprint: '%s'\n", fingerprint); /* format is important for other tools */
69    printf("Bootloader: %s\n", bootloader);
70    printf("Radio: %s\n", radio);
71    printf("Network: %s\n", network);
72
73    printf("Kernel: ");
74    dump_file(NULL, "/proc/version");
75    printf("Command line: %s\n", strtok(cmdline_buf, "\n"));
76    printf("\n");
77
78    run_command("UPTIME", 10, "uptime", NULL);
79    dump_file("MEMORY INFO", "/proc/meminfo");
80    run_command("CPU INFO", 10, "top", "-n", "1", "-d", "1", "-m", "30", "-t", NULL);
81    run_command("PROCRANK", 20, "procrank", NULL);
82    dump_file("VIRTUAL MEMORY STATS", "/proc/vmstat");
83    dump_file("VMALLOC INFO", "/proc/vmallocinfo");
84    dump_file("SLAB INFO", "/proc/slabinfo");
85    dump_file("ZONEINFO", "/proc/zoneinfo");
86    dump_file("PAGETYPEINFO", "/proc/pagetypeinfo");
87    dump_file("BUDDYINFO", "/proc/buddyinfo");
88    dump_file("FRAGMENTATION INFO", "/d/extfrag/unusable_index");
89
90
91    dump_file("KERNEL WAKELOCKS", "/proc/wakelocks");
92    dump_file("KERNEL WAKE SOURCES", "/d/wakeup_sources");
93    dump_file("KERNEL CPUFREQ", "/sys/devices/system/cpu/cpu0/cpufreq/stats/time_in_state");
94    dump_file("KERNEL SYNC", "/d/sync");
95
96    run_command("PROCESSES", 10, "ps", "-P", NULL);
97    run_command("PROCESSES AND THREADS", 10, "ps", "-t", "-p", "-P", NULL);
98    run_command("LIBRANK", 10, "librank", NULL);
99
100    do_dmesg();
101
102    run_command("LIST OF OPEN FILES", 10, SU_PATH, "root", "lsof", NULL);
103
104    for_each_pid(do_showmap, "SMAPS OF ALL PROCESSES");
105    for_each_pid(show_wchan, "BLOCKED PROCESS WAIT-CHANNELS");
106
107    // dump_file("EVENT LOG TAGS", "/etc/event-log-tags");
108    run_command("SYSTEM LOG", 20, "logcat", "-v", "threadtime", "-d", "*:v", NULL);
109    run_command("EVENT LOG", 20, "logcat", "-b", "events", "-v", "threadtime", "-d", "*:v", NULL);
110    run_command("RADIO LOG", 20, "logcat", "-b", "radio", "-v", "threadtime", "-d", "*:v", NULL);
111
112
113    /* show the traces we collected in main(), if that was done */
114    if (dump_traces_path != NULL) {
115        dump_file("VM TRACES JUST NOW", dump_traces_path);
116    }
117
118    /* only show ANR traces if they're less than 15 minutes old */
119    struct stat st;
120    char anr_traces_path[PATH_MAX];
121    property_get("dalvik.vm.stack-trace-file", anr_traces_path, "");
122    if (!anr_traces_path[0]) {
123        printf("*** NO VM TRACES FILE DEFINED (dalvik.vm.stack-trace-file)\n\n");
124    } else if (stat(anr_traces_path, &st)) {
125        printf("*** NO ANR VM TRACES FILE (%s): %s\n\n", anr_traces_path, strerror(errno));
126    } else {
127        dump_file("VM TRACES AT LAST ANR", anr_traces_path);
128    }
129
130    /* slow traces for slow operations */
131    if (anr_traces_path[0] != 0) {
132        int tail = strlen(anr_traces_path)-1;
133        while (tail > 0 && anr_traces_path[tail] != '/') {
134            tail--;
135        }
136        int i = 0;
137        while (1) {
138            sprintf(anr_traces_path+tail+1, "slow%02d.txt", i);
139            if (stat(anr_traces_path, &st)) {
140                // No traces file at this index, done with the files.
141                break;
142            }
143            dump_file("VM TRACES WHEN SLOW", anr_traces_path);
144            i++;
145        }
146    }
147
148    dump_file("NETWORK DEV INFO", "/proc/net/dev");
149    dump_file("QTAGUID NETWORK INTERFACES INFO", "/proc/net/xt_qtaguid/iface_stat_all");
150    dump_file("QTAGUID NETWORK INTERFACES INFO (xt)", "/proc/net/xt_qtaguid/iface_stat_fmt");
151    dump_file("QTAGUID CTRL INFO", "/proc/net/xt_qtaguid/ctrl");
152    dump_file("QTAGUID STATS INFO", "/proc/net/xt_qtaguid/stats");
153
154    dump_file("NETWORK ROUTES", "/proc/net/route");
155    dump_file("NETWORK ROUTES IPV6", "/proc/net/ipv6_route");
156
157    /* TODO: Make last_kmsg CAP_SYSLOG protected. b/5555691 */
158    dump_file("LAST KMSG", "/proc/last_kmsg");
159    dump_file("LAST PANIC CONSOLE", "/data/dontpanic/apanic_console");
160    dump_file("LAST PANIC THREADS", "/data/dontpanic/apanic_threads");
161
162    if (screenshot_path[0]) {
163        ALOGI("taking screenshot\n");
164        run_command(NULL, 5, SU_PATH, "root", "screenshot", screenshot_path, NULL);
165        ALOGI("wrote screenshot: %s\n", screenshot_path);
166    }
167
168    run_command("SYSTEM SETTINGS", 20, SU_PATH, "root", "sqlite3",
169            "/data/data/com.android.providers.settings/databases/settings.db",
170            "pragma user_version; select * from system; select * from secure; select * from global;", NULL);
171
172    /* The following have a tendency to get wedged when wifi drivers/fw goes belly-up. */
173    run_command("NETWORK INTERFACES", 10, SU_PATH, "root", "netcfg", NULL);
174    run_command("IP RULES", 10, "ip", "rule", "show", NULL);
175    run_command("IP RULES v6", 10, "ip", "-6", "rule", "show", NULL);
176    run_command("ROUTE TABLE 60", 10, "ip", "route", "show", "table", "60", NULL);
177    run_command("ROUTE TABLE 61 v6", 10, "ip", "-6", "route", "show", "table", "60", NULL);
178    run_command("ROUTE TABLE 61", 10, "ip", "route", "show", "table", "61", NULL);
179    run_command("ROUTE TABLE 61 v6", 10, "ip", "-6", "route", "show", "table", "61", NULL);
180    dump_file("ARP CACHE", "/proc/net/arp");
181    run_command("IPTABLES", 10, SU_PATH, "root", "iptables", "-L", "-nvx", NULL);
182    run_command("IP6TABLES", 10, SU_PATH, "root", "ip6tables", "-L", "-nvx", NULL);
183    run_command("IPTABLE NAT", 10, SU_PATH, "root", "iptables", "-t", "nat", "-L", "-nvx", NULL);
184    /* no ip6 nat */
185    run_command("IPTABLE RAW", 10, SU_PATH, "root", "iptables", "-t", "raw", "-L", "-nvx", NULL);
186    run_command("IP6TABLE RAW", 10, SU_PATH, "root", "ip6tables", "-t", "raw", "-L", "-nvx", NULL);
187
188    run_command("WIFI NETWORKS", 20,
189            SU_PATH, "root", "wpa_cli", "list_networks", NULL);
190
191    property_get("dhcp.wlan0.gateway", network, "");
192    if (network[0])
193        run_command("PING GATEWAY", 10, SU_PATH, "root", "ping", "-c", "3", "-i", ".5", network, NULL);
194    property_get("dhcp.wlan0.dns1", network, "");
195    if (network[0])
196        run_command("PING DNS1", 10, SU_PATH, "root", "ping", "-c", "3", "-i", ".5", network, NULL);
197    property_get("dhcp.wlan0.dns2", network, "");
198    if (network[0])
199        run_command("PING DNS2", 10, SU_PATH, "root", "ping", "-c", "3", "-i", ".5", network, NULL);
200#ifdef FWDUMP_bcm4329
201    run_command("DUMP WIFI STATUS", 20,
202            SU_PATH, "root", "dhdutil", "-i", "wlan0", "dump", NULL);
203    run_command("DUMP WIFI INTERNAL COUNTERS", 20,
204            SU_PATH, "root", "wlutil", "counters", NULL);
205#endif
206
207    print_properties();
208
209    run_command("VOLD DUMP", 10, "vdc", "dump", NULL);
210    run_command("SECURE CONTAINERS", 10, "vdc", "asec", "list", NULL);
211
212    run_command("FILESYSTEMS & FREE SPACE", 10, SU_PATH, "root", "df", NULL);
213
214    run_command("PACKAGE SETTINGS", 20, SU_PATH, "root", "cat", "/data/system/packages.xml", NULL);
215    dump_file("PACKAGE UID ERRORS", "/data/system/uiderrors.txt");
216
217    run_command("LAST RADIO LOG", 10, "parse_radio_log", "/proc/last_radio_log", NULL);
218
219    printf("------ BACKLIGHTS ------\n");
220    printf("LCD brightness=");
221    dump_file(NULL, "/sys/class/leds/lcd-backlight/brightness");
222    printf("Button brightness=");
223    dump_file(NULL, "/sys/class/leds/button-backlight/brightness");
224    printf("Keyboard brightness=");
225    dump_file(NULL, "/sys/class/leds/keyboard-backlight/brightness");
226    printf("ALS mode=");
227    dump_file(NULL, "/sys/class/leds/lcd-backlight/als");
228    printf("LCD driver registers:\n");
229    dump_file(NULL, "/sys/class/leds/lcd-backlight/registers");
230    printf("\n");
231
232    /* Binder state is expensive to look at as it uses a lot of memory. */
233    dump_file("BINDER FAILED TRANSACTION LOG", "/sys/kernel/debug/binder/failed_transaction_log");
234    dump_file("BINDER TRANSACTION LOG", "/sys/kernel/debug/binder/transaction_log");
235    dump_file("BINDER TRANSACTIONS", "/sys/kernel/debug/binder/transactions");
236    dump_file("BINDER STATS", "/sys/kernel/debug/binder/stats");
237    dump_file("BINDER STATE", "/sys/kernel/debug/binder/state");
238
239#ifdef BOARD_HAS_DUMPSTATE
240    printf("========================================================\n");
241    printf("== Board\n");
242    printf("========================================================\n");
243
244    dumpstate_board();
245    printf("\n");
246#endif
247
248    /* Migrate the ril_dumpstate to a dumpstate_board()? */
249    char ril_dumpstate_timeout[PROPERTY_VALUE_MAX] = {0};
250    property_get("ril.dumpstate.timeout", ril_dumpstate_timeout, "30");
251    if (strnlen(ril_dumpstate_timeout, PROPERTY_VALUE_MAX - 1) > 0) {
252        if (0 == strncmp(build_type, "user", PROPERTY_VALUE_MAX - 1)) {
253            // su does not exist on user builds, so try running without it.
254            // This way any implementations of vril-dump that do not require
255            // root can run on user builds.
256            run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout),
257                    "vril-dump", NULL);
258        } else {
259            run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout),
260                    SU_PATH, "root", "vril-dump", NULL);
261        }
262    }
263
264    printf("========================================================\n");
265    printf("== Android Framework Services\n");
266    printf("========================================================\n");
267
268    /* the full dumpsys is starting to take a long time, so we need
269       to increase its timeout.  we really need to do the timeouts in
270       dumpsys itself... */
271    run_command("DUMPSYS", 60, "dumpsys", NULL);
272
273    printf("========================================================\n");
274    printf("== Running Application Activities\n");
275    printf("========================================================\n");
276
277    run_command("APP ACTIVITIES", 30, "dumpsys", "activity", "all", NULL);
278
279    printf("========================================================\n");
280    printf("== Running Application Services\n");
281    printf("========================================================\n");
282
283    run_command("APP SERVICES", 30, "dumpsys", "activity", "service", "all", NULL);
284
285    printf("========================================================\n");
286    printf("== Running Application Providers\n");
287    printf("========================================================\n");
288
289    run_command("APP SERVICES", 30, "dumpsys", "activity", "provider", "all", NULL);
290
291
292    printf("========================================================\n");
293    printf("== dumpstate: done\n");
294    printf("========================================================\n");
295}
296
297static void usage() {
298    fprintf(stderr, "usage: dumpstate [-b soundfile] [-e soundfile] [-o file [-d] [-p] [-z]] [-s] [-q]\n"
299            "  -o: write to file (instead of stdout)\n"
300            "  -d: append date to filename (requires -o)\n"
301            "  -z: gzip output (requires -o)\n"
302            "  -p: capture screenshot to filename.png (requires -o)\n"
303            "  -s: write output to control socket (for init)\n"
304            "  -b: play sound file instead of vibrate, at beginning of job\n"
305            "  -e: play sound file instead of vibrate, at end of job\n"
306            "  -q: disable vibrate\n"
307		);
308}
309
310int main(int argc, char *argv[]) {
311    int do_add_date = 0;
312    int do_compress = 0;
313    int do_vibrate = 1;
314    char* use_outfile = 0;
315    char* begin_sound = 0;
316    char* end_sound = 0;
317    int use_socket = 0;
318    int do_fb = 0;
319
320    if (getuid() != 0) {
321        // Old versions of the adb client would call the
322        // dumpstate command directly. Newer clients
323        // call /system/bin/bugreport instead. If we detect
324        // we're being called incorrectly, then exec the
325        // correct program.
326        return execl("/system/bin/bugreport", "/system/bin/bugreport", NULL);
327    }
328    ALOGI("begin\n");
329
330    signal(SIGPIPE, SIG_IGN);
331
332    /* set as high priority, and protect from OOM killer */
333    setpriority(PRIO_PROCESS, 0, -20);
334    FILE *oom_adj = fopen("/proc/self/oom_adj", "w");
335    if (oom_adj) {
336        fputs("-17", oom_adj);
337        fclose(oom_adj);
338    }
339
340    /* very first thing, collect stack traces from Dalvik and native processes (needs root) */
341    dump_traces_path = dump_traces();
342
343    int c;
344    while ((c = getopt(argc, argv, "b:de:ho:svqzp")) != -1) {
345        switch (c) {
346            case 'b': begin_sound = optarg;  break;
347            case 'd': do_add_date = 1;       break;
348            case 'e': end_sound = optarg;    break;
349            case 'o': use_outfile = optarg;  break;
350            case 's': use_socket = 1;        break;
351            case 'v': break;  // compatibility no-op
352            case 'q': do_vibrate = 0;        break;
353            case 'z': do_compress = 6;       break;
354            case 'p': do_fb = 1;             break;
355            case '?': printf("\n");
356            case 'h':
357                usage();
358                exit(1);
359        }
360    }
361
362    FILE *vibrator = 0;
363    if (do_vibrate) {
364        /* open the vibrator before dropping root */
365        vibrator = fopen("/sys/class/timed_output/vibrator/enable", "w");
366        if (vibrator) fcntl(fileno(vibrator), F_SETFD, FD_CLOEXEC);
367    }
368
369    /* read /proc/cmdline before dropping root */
370    FILE *cmdline = fopen("/proc/cmdline", "r");
371    if (cmdline != NULL) {
372        fgets(cmdline_buf, sizeof(cmdline_buf), cmdline);
373        fclose(cmdline);
374    }
375
376    if (prctl(PR_SET_KEEPCAPS, 1) < 0) {
377        ALOGE("prctl(PR_SET_KEEPCAPS) failed: %s\n", strerror(errno));
378        return -1;
379    }
380
381    /* switch to non-root user and group */
382    gid_t groups[] = { AID_LOG, AID_SDCARD_R, AID_SDCARD_RW,
383            AID_MOUNT, AID_INET, AID_NET_BW_STATS };
384    if (setgroups(sizeof(groups)/sizeof(groups[0]), groups) != 0) {
385        ALOGE("Unable to setgroups, aborting: %s\n", strerror(errno));
386        return -1;
387    }
388    if (setgid(AID_SHELL) != 0) {
389        ALOGE("Unable to setgid, aborting: %s\n", strerror(errno));
390        return -1;
391    }
392    if (setuid(AID_SHELL) != 0) {
393        ALOGE("Unable to setuid, aborting: %s\n", strerror(errno));
394        return -1;
395    }
396
397    struct __user_cap_header_struct capheader;
398    struct __user_cap_data_struct capdata[2];
399    memset(&capheader, 0, sizeof(capheader));
400    memset(&capdata, 0, sizeof(capdata));
401    capheader.version = _LINUX_CAPABILITY_VERSION_3;
402    capheader.pid = 0;
403
404    capdata[CAP_TO_INDEX(CAP_SYSLOG)].permitted = CAP_TO_MASK(CAP_SYSLOG);
405    capdata[CAP_TO_INDEX(CAP_SYSLOG)].effective = CAP_TO_MASK(CAP_SYSLOG);
406    capdata[0].inheritable = 0;
407    capdata[1].inheritable = 0;
408
409    if (capset(&capheader, &capdata[0]) < 0) {
410        ALOGE("capset failed: %s\n", strerror(errno));
411        return -1;
412    }
413
414    char path[PATH_MAX], tmp_path[PATH_MAX];
415    pid_t gzip_pid = -1;
416
417    if (use_socket) {
418        redirect_to_socket(stdout, "dumpstate");
419    } else if (use_outfile) {
420        strlcpy(path, use_outfile, sizeof(path));
421        if (do_add_date) {
422            char date[80];
423            time_t now = time(NULL);
424            strftime(date, sizeof(date), "-%Y-%m-%d-%H-%M-%S", localtime(&now));
425            strlcat(path, date, sizeof(path));
426        }
427        if (do_fb) {
428            strlcpy(screenshot_path, path, sizeof(screenshot_path));
429            strlcat(screenshot_path, ".png", sizeof(screenshot_path));
430        }
431        strlcat(path, ".txt", sizeof(path));
432        if (do_compress) strlcat(path, ".gz", sizeof(path));
433        strlcpy(tmp_path, path, sizeof(tmp_path));
434        strlcat(tmp_path, ".tmp", sizeof(tmp_path));
435        gzip_pid = redirect_to_file(stdout, tmp_path, do_compress);
436    }
437
438    if (begin_sound) {
439        play_sound(begin_sound);
440    } else if (vibrator) {
441        fputs("150", vibrator);
442        fflush(vibrator);
443    }
444
445    dumpstate();
446
447    if (end_sound) {
448        play_sound(end_sound);
449    } else if (vibrator) {
450        int i;
451        for (i = 0; i < 3; i++) {
452            fputs("75\n", vibrator);
453            fflush(vibrator);
454            usleep((75 + 50) * 1000);
455        }
456        fclose(vibrator);
457    }
458
459    /* wait for gzip to finish, otherwise it might get killed when we exit */
460    if (gzip_pid > 0) {
461        fclose(stdout);
462        waitpid(gzip_pid, NULL, 0);
463    }
464
465    /* rename the (now complete) .tmp file to its final location */
466    if (use_outfile && rename(tmp_path, path)) {
467        fprintf(stderr, "rename(%s, %s): %s\n", tmp_path, path, strerror(errno));
468    }
469
470    ALOGI("done\n");
471
472    return 0;
473}
474