1/* 2 * Copyright (C) 2008 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17#include <errno.h> 18#include <fcntl.h> 19#include <limits.h> 20#include <stdio.h> 21#include <stdlib.h> 22#include <string.h> 23#include <sys/resource.h> 24#include <sys/stat.h> 25#include <sys/time.h> 26#include <sys/wait.h> 27#include <unistd.h> 28#include <sys/capability.h> 29#include <linux/prctl.h> 30 31#include <cutils/properties.h> 32 33#include "private/android_filesystem_config.h" 34 35#define LOG_TAG "dumpstate" 36#include <cutils/log.h> 37 38#include "dumpstate.h" 39 40/* read before root is shed */ 41static char cmdline_buf[16384] = "(unknown)"; 42static const char *dump_traces_path = NULL; 43 44static char screenshot_path[PATH_MAX] = ""; 45 46/* dumps the current system state to stdout */ 47static void dumpstate() { 48 time_t now = time(NULL); 49 char build[PROPERTY_VALUE_MAX], fingerprint[PROPERTY_VALUE_MAX]; 50 char radio[PROPERTY_VALUE_MAX], bootloader[PROPERTY_VALUE_MAX]; 51 char network[PROPERTY_VALUE_MAX], date[80]; 52 char build_type[PROPERTY_VALUE_MAX]; 53 54 property_get("ro.build.display.id", build, "(unknown)"); 55 property_get("ro.build.fingerprint", fingerprint, "(unknown)"); 56 property_get("ro.build.type", build_type, "(unknown)"); 57 property_get("ro.baseband", radio, "(unknown)"); 58 property_get("ro.bootloader", bootloader, "(unknown)"); 59 property_get("gsm.operator.alpha", network, "(unknown)"); 60 strftime(date, sizeof(date), "%Y-%m-%d %H:%M:%S", localtime(&now)); 61 62 printf("========================================================\n"); 63 printf("== dumpstate: %s\n", date); 64 printf("========================================================\n"); 65 66 printf("\n"); 67 printf("Build: %s\n", build); 68 printf("Build fingerprint: '%s'\n", fingerprint); /* format is important for other tools */ 69 printf("Bootloader: %s\n", bootloader); 70 printf("Radio: %s\n", radio); 71 printf("Network: %s\n", network); 72 73 printf("Kernel: "); 74 dump_file(NULL, "/proc/version"); 75 printf("Command line: %s\n", strtok(cmdline_buf, "\n")); 76 printf("\n"); 77 78 run_command("UPTIME", 10, "uptime", NULL); 79 dump_file("MEMORY INFO", "/proc/meminfo"); 80 run_command("CPU INFO", 10, "top", "-n", "1", "-d", "1", "-m", "30", "-t", NULL); 81 run_command("PROCRANK", 20, "procrank", NULL); 82 dump_file("VIRTUAL MEMORY STATS", "/proc/vmstat"); 83 dump_file("VMALLOC INFO", "/proc/vmallocinfo"); 84 dump_file("SLAB INFO", "/proc/slabinfo"); 85 dump_file("ZONEINFO", "/proc/zoneinfo"); 86 dump_file("PAGETYPEINFO", "/proc/pagetypeinfo"); 87 dump_file("BUDDYINFO", "/proc/buddyinfo"); 88 dump_file("FRAGMENTATION INFO", "/d/extfrag/unusable_index"); 89 90 91 dump_file("KERNEL WAKELOCKS", "/proc/wakelocks"); 92 dump_file("KERNEL WAKE SOURCES", "/d/wakeup_sources"); 93 dump_file("KERNEL CPUFREQ", "/sys/devices/system/cpu/cpu0/cpufreq/stats/time_in_state"); 94 dump_file("KERNEL SYNC", "/d/sync"); 95 96 run_command("PROCESSES", 10, "ps", "-P", NULL); 97 run_command("PROCESSES AND THREADS", 10, "ps", "-t", "-p", "-P", NULL); 98 run_command("PROCESSES (SELINUX LABELS)", 10, "ps", "-Z", NULL); 99 run_command("LIBRANK", 10, "librank", NULL); 100 101 do_dmesg(); 102 103 run_command("LIST OF OPEN FILES", 10, SU_PATH, "root", "lsof", NULL); 104 105 if (screenshot_path[0]) { 106 ALOGI("taking screenshot\n"); 107 run_command(NULL, 10, "/system/bin/screencap", "-p", screenshot_path, NULL); 108 ALOGI("wrote screenshot: %s\n", screenshot_path); 109 } 110 111 for_each_pid(do_showmap, "SMAPS OF ALL PROCESSES"); 112 for_each_tid(show_wchan, "BLOCKED PROCESS WAIT-CHANNELS"); 113 114 // dump_file("EVENT LOG TAGS", "/etc/event-log-tags"); 115 run_command("SYSTEM LOG", 20, "logcat", "-v", "threadtime", "-d", "*:v", NULL); 116 run_command("EVENT LOG", 20, "logcat", "-b", "events", "-v", "threadtime", "-d", "*:v", NULL); 117 run_command("RADIO LOG", 20, "logcat", "-b", "radio", "-v", "threadtime", "-d", "*:v", NULL); 118 119 120 /* show the traces we collected in main(), if that was done */ 121 if (dump_traces_path != NULL) { 122 dump_file("VM TRACES JUST NOW", dump_traces_path); 123 } 124 125 /* only show ANR traces if they're less than 15 minutes old */ 126 struct stat st; 127 char anr_traces_path[PATH_MAX]; 128 property_get("dalvik.vm.stack-trace-file", anr_traces_path, ""); 129 if (!anr_traces_path[0]) { 130 printf("*** NO VM TRACES FILE DEFINED (dalvik.vm.stack-trace-file)\n\n"); 131 } else if (stat(anr_traces_path, &st)) { 132 printf("*** NO ANR VM TRACES FILE (%s): %s\n\n", anr_traces_path, strerror(errno)); 133 } else { 134 dump_file("VM TRACES AT LAST ANR", anr_traces_path); 135 } 136 137 /* slow traces for slow operations */ 138 if (anr_traces_path[0] != 0) { 139 int tail = strlen(anr_traces_path)-1; 140 while (tail > 0 && anr_traces_path[tail] != '/') { 141 tail--; 142 } 143 int i = 0; 144 while (1) { 145 sprintf(anr_traces_path+tail+1, "slow%02d.txt", i); 146 if (stat(anr_traces_path, &st)) { 147 // No traces file at this index, done with the files. 148 break; 149 } 150 dump_file("VM TRACES WHEN SLOW", anr_traces_path); 151 i++; 152 } 153 } 154 155 dump_file("NETWORK DEV INFO", "/proc/net/dev"); 156 dump_file("QTAGUID NETWORK INTERFACES INFO", "/proc/net/xt_qtaguid/iface_stat_all"); 157 dump_file("QTAGUID NETWORK INTERFACES INFO (xt)", "/proc/net/xt_qtaguid/iface_stat_fmt"); 158 dump_file("QTAGUID CTRL INFO", "/proc/net/xt_qtaguid/ctrl"); 159 dump_file("QTAGUID STATS INFO", "/proc/net/xt_qtaguid/stats"); 160 161 dump_file("NETWORK ROUTES", "/proc/net/route"); 162 dump_file("NETWORK ROUTES IPV6", "/proc/net/ipv6_route"); 163 164 /* TODO: Make last_kmsg CAP_SYSLOG protected. b/5555691 */ 165 dump_file("LAST KMSG", "/proc/last_kmsg"); 166 dump_file("LAST PANIC CONSOLE", "/data/dontpanic/apanic_console"); 167 dump_file("LAST PANIC THREADS", "/data/dontpanic/apanic_threads"); 168 169 run_command("SYSTEM SETTINGS", 20, SU_PATH, "root", "sqlite3", 170 "/data/data/com.android.providers.settings/databases/settings.db", 171 "pragma user_version; select * from system; select * from secure; select * from global;", NULL); 172 173 /* The following have a tendency to get wedged when wifi drivers/fw goes belly-up. */ 174 run_command("NETWORK INTERFACES", 10, SU_PATH, "root", "netcfg", NULL); 175 run_command("IP RULES", 10, "ip", "rule", "show", NULL); 176 run_command("IP RULES v6", 10, "ip", "-6", "rule", "show", NULL); 177 run_command("ROUTE TABLE 60", 10, "ip", "route", "show", "table", "60", NULL); 178 run_command("ROUTE TABLE 61 v6", 10, "ip", "-6", "route", "show", "table", "60", NULL); 179 run_command("ROUTE TABLE 61", 10, "ip", "route", "show", "table", "61", NULL); 180 run_command("ROUTE TABLE 61 v6", 10, "ip", "-6", "route", "show", "table", "61", NULL); 181 dump_file("ARP CACHE", "/proc/net/arp"); 182 run_command("IPTABLES", 10, SU_PATH, "root", "iptables", "-L", "-nvx", NULL); 183 run_command("IP6TABLES", 10, SU_PATH, "root", "ip6tables", "-L", "-nvx", NULL); 184 run_command("IPTABLE NAT", 10, SU_PATH, "root", "iptables", "-t", "nat", "-L", "-nvx", NULL); 185 /* no ip6 nat */ 186 run_command("IPTABLE RAW", 10, SU_PATH, "root", "iptables", "-t", "raw", "-L", "-nvx", NULL); 187 run_command("IP6TABLE RAW", 10, SU_PATH, "root", "ip6tables", "-t", "raw", "-L", "-nvx", NULL); 188 189 run_command("WIFI NETWORKS", 20, 190 SU_PATH, "root", "wpa_cli", "IFNAME=wlan0", "list_networks", NULL); 191 192#ifdef FWDUMP_bcmdhd 193 run_command("DUMP WIFI INTERNAL COUNTERS", 20, 194 SU_PATH, "root", "wlutil", "counters", NULL); 195#endif 196 dump_file("INTERRUPTS (1)", "/proc/interrupts"); 197 198 property_get("dhcp.wlan0.gateway", network, ""); 199 if (network[0]) 200 run_command("PING GATEWAY", 10, "ping", "-c", "3", "-i", ".5", network, NULL); 201 property_get("dhcp.wlan0.dns1", network, ""); 202 if (network[0]) 203 run_command("PING DNS1", 10, "ping", "-c", "3", "-i", ".5", network, NULL); 204 property_get("dhcp.wlan0.dns2", network, ""); 205 if (network[0]) 206 run_command("PING DNS2", 10, "ping", "-c", "3", "-i", ".5", network, NULL); 207#ifdef FWDUMP_bcmdhd 208 run_command("DUMP WIFI STATUS", 20, 209 SU_PATH, "root", "dhdutil", "-i", "wlan0", "dump", NULL); 210 run_command("DUMP WIFI INTERNAL COUNTERS", 20, 211 SU_PATH, "root", "wlutil", "counters", NULL); 212#endif 213 dump_file("INTERRUPTS (2)", "/proc/interrupts"); 214 215 print_properties(); 216 217 run_command("VOLD DUMP", 10, "vdc", "dump", NULL); 218 run_command("SECURE CONTAINERS", 10, "vdc", "asec", "list", NULL); 219 220 run_command("FILESYSTEMS & FREE SPACE", 10, "df", NULL); 221 222 run_command("PACKAGE SETTINGS", 20, SU_PATH, "root", "cat", "/data/system/packages.xml", NULL); 223 dump_file("PACKAGE UID ERRORS", "/data/system/uiderrors.txt"); 224 225 run_command("LAST RADIO LOG", 10, "parse_radio_log", "/proc/last_radio_log", NULL); 226 227 printf("------ BACKLIGHTS ------\n"); 228 printf("LCD brightness="); 229 dump_file(NULL, "/sys/class/leds/lcd-backlight/brightness"); 230 printf("Button brightness="); 231 dump_file(NULL, "/sys/class/leds/button-backlight/brightness"); 232 printf("Keyboard brightness="); 233 dump_file(NULL, "/sys/class/leds/keyboard-backlight/brightness"); 234 printf("ALS mode="); 235 dump_file(NULL, "/sys/class/leds/lcd-backlight/als"); 236 printf("LCD driver registers:\n"); 237 dump_file(NULL, "/sys/class/leds/lcd-backlight/registers"); 238 printf("\n"); 239 240 /* Binder state is expensive to look at as it uses a lot of memory. */ 241 dump_file("BINDER FAILED TRANSACTION LOG", "/sys/kernel/debug/binder/failed_transaction_log"); 242 dump_file("BINDER TRANSACTION LOG", "/sys/kernel/debug/binder/transaction_log"); 243 dump_file("BINDER TRANSACTIONS", "/sys/kernel/debug/binder/transactions"); 244 dump_file("BINDER STATS", "/sys/kernel/debug/binder/stats"); 245 dump_file("BINDER STATE", "/sys/kernel/debug/binder/state"); 246 247 printf("========================================================\n"); 248 printf("== Board\n"); 249 printf("========================================================\n"); 250 251 dumpstate_board(); 252 printf("\n"); 253 254 /* Migrate the ril_dumpstate to a dumpstate_board()? */ 255 char ril_dumpstate_timeout[PROPERTY_VALUE_MAX] = {0}; 256 property_get("ril.dumpstate.timeout", ril_dumpstate_timeout, "30"); 257 if (strnlen(ril_dumpstate_timeout, PROPERTY_VALUE_MAX - 1) > 0) { 258 if (0 == strncmp(build_type, "user", PROPERTY_VALUE_MAX - 1)) { 259 // su does not exist on user builds, so try running without it. 260 // This way any implementations of vril-dump that do not require 261 // root can run on user builds. 262 run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout), 263 "vril-dump", NULL); 264 } else { 265 run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout), 266 SU_PATH, "root", "vril-dump", NULL); 267 } 268 } 269 270 printf("========================================================\n"); 271 printf("== Android Framework Services\n"); 272 printf("========================================================\n"); 273 274 /* the full dumpsys is starting to take a long time, so we need 275 to increase its timeout. we really need to do the timeouts in 276 dumpsys itself... */ 277 run_command("DUMPSYS", 60, "dumpsys", NULL); 278 279 printf("========================================================\n"); 280 printf("== Checkins\n"); 281 printf("========================================================\n"); 282 283 run_command("CHECKIN BATTERYSTATS", 30, "dumpsys", "batterystats", "-c", NULL); 284 run_command("CHECKIN MEMINFO", 30, "dumpsys", "meminfo", "--checkin", NULL); 285 run_command("CHECKIN NETSTATS", 30, "dumpsys", "netstats", "--checkin", NULL); 286 run_command("CHECKIN PROCSTATS", 30, "dumpsys", "procstats", "-c", NULL); 287 run_command("CHECKIN USAGESTATS", 30, "dumpsys", "usagestats", "-c", NULL); 288 289 printf("========================================================\n"); 290 printf("== Running Application Activities\n"); 291 printf("========================================================\n"); 292 293 run_command("APP ACTIVITIES", 30, "dumpsys", "activity", "all", NULL); 294 295 printf("========================================================\n"); 296 printf("== Running Application Services\n"); 297 printf("========================================================\n"); 298 299 run_command("APP SERVICES", 30, "dumpsys", "activity", "service", "all", NULL); 300 301 printf("========================================================\n"); 302 printf("== Running Application Providers\n"); 303 printf("========================================================\n"); 304 305 run_command("APP SERVICES", 30, "dumpsys", "activity", "provider", "all", NULL); 306 307 308 printf("========================================================\n"); 309 printf("== dumpstate: done\n"); 310 printf("========================================================\n"); 311} 312 313static void usage() { 314 fprintf(stderr, "usage: dumpstate [-b soundfile] [-e soundfile] [-o file [-d] [-p] [-z]] [-s] [-q]\n" 315 " -o: write to file (instead of stdout)\n" 316 " -d: append date to filename (requires -o)\n" 317 " -z: gzip output (requires -o)\n" 318 " -p: capture screenshot to filename.png (requires -o)\n" 319 " -s: write output to control socket (for init)\n" 320 " -b: play sound file instead of vibrate, at beginning of job\n" 321 " -e: play sound file instead of vibrate, at end of job\n" 322 " -q: disable vibrate\n" 323 " -B: send broadcast when finished (requires -o and -p)\n" 324 ); 325} 326 327static void sigpipe_handler(int n) { 328 (void)n; 329 exit(EXIT_FAILURE); 330} 331 332int main(int argc, char *argv[]) { 333 struct sigaction sigact; 334 int do_add_date = 0; 335 int do_compress = 0; 336 int do_vibrate = 1; 337 char* use_outfile = 0; 338 char* begin_sound = 0; 339 char* end_sound = 0; 340 int use_socket = 0; 341 int do_fb = 0; 342 int do_broadcast = 0; 343 344 if (getuid() != 0) { 345 // Old versions of the adb client would call the 346 // dumpstate command directly. Newer clients 347 // call /system/bin/bugreport instead. If we detect 348 // we're being called incorrectly, then exec the 349 // correct program. 350 return execl("/system/bin/bugreport", "/system/bin/bugreport", NULL); 351 } 352 ALOGI("begin\n"); 353 354 memset(&sigact, 0, sizeof(sigact)); 355 sigact.sa_handler = sigpipe_handler; 356 sigaction(SIGPIPE, &sigact, NULL); 357 358 /* set as high priority, and protect from OOM killer */ 359 setpriority(PRIO_PROCESS, 0, -20); 360 FILE *oom_adj = fopen("/proc/self/oom_adj", "w"); 361 if (oom_adj) { 362 fputs("-17", oom_adj); 363 fclose(oom_adj); 364 } 365 366 /* very first thing, collect stack traces from Dalvik and native processes (needs root) */ 367 dump_traces_path = dump_traces(); 368 369 int c; 370 while ((c = getopt(argc, argv, "b:de:ho:svqzpB")) != -1) { 371 switch (c) { 372 case 'b': begin_sound = optarg; break; 373 case 'd': do_add_date = 1; break; 374 case 'e': end_sound = optarg; break; 375 case 'o': use_outfile = optarg; break; 376 case 's': use_socket = 1; break; 377 case 'v': break; // compatibility no-op 378 case 'q': do_vibrate = 0; break; 379 case 'z': do_compress = 6; break; 380 case 'p': do_fb = 1; break; 381 case 'B': do_broadcast = 1; break; 382 case '?': printf("\n"); 383 case 'h': 384 usage(); 385 exit(1); 386 } 387 } 388 389 FILE *vibrator = 0; 390 if (do_vibrate) { 391 /* open the vibrator before dropping root */ 392 vibrator = fopen("/sys/class/timed_output/vibrator/enable", "w"); 393 if (vibrator) fcntl(fileno(vibrator), F_SETFD, FD_CLOEXEC); 394 } 395 396 /* read /proc/cmdline before dropping root */ 397 FILE *cmdline = fopen("/proc/cmdline", "r"); 398 if (cmdline != NULL) { 399 fgets(cmdline_buf, sizeof(cmdline_buf), cmdline); 400 fclose(cmdline); 401 } 402 403 if (prctl(PR_SET_KEEPCAPS, 1) < 0) { 404 ALOGE("prctl(PR_SET_KEEPCAPS) failed: %s\n", strerror(errno)); 405 return -1; 406 } 407 408 /* switch to non-root user and group */ 409 gid_t groups[] = { AID_LOG, AID_SDCARD_R, AID_SDCARD_RW, 410 AID_MOUNT, AID_INET, AID_NET_BW_STATS }; 411 if (setgroups(sizeof(groups)/sizeof(groups[0]), groups) != 0) { 412 ALOGE("Unable to setgroups, aborting: %s\n", strerror(errno)); 413 return -1; 414 } 415 if (setgid(AID_SHELL) != 0) { 416 ALOGE("Unable to setgid, aborting: %s\n", strerror(errno)); 417 return -1; 418 } 419 if (setuid(AID_SHELL) != 0) { 420 ALOGE("Unable to setuid, aborting: %s\n", strerror(errno)); 421 return -1; 422 } 423 424 struct __user_cap_header_struct capheader; 425 struct __user_cap_data_struct capdata[2]; 426 memset(&capheader, 0, sizeof(capheader)); 427 memset(&capdata, 0, sizeof(capdata)); 428 capheader.version = _LINUX_CAPABILITY_VERSION_3; 429 capheader.pid = 0; 430 431 capdata[CAP_TO_INDEX(CAP_SYSLOG)].permitted = CAP_TO_MASK(CAP_SYSLOG); 432 capdata[CAP_TO_INDEX(CAP_SYSLOG)].effective = CAP_TO_MASK(CAP_SYSLOG); 433 capdata[0].inheritable = 0; 434 capdata[1].inheritable = 0; 435 436 if (capset(&capheader, &capdata[0]) < 0) { 437 ALOGE("capset failed: %s\n", strerror(errno)); 438 return -1; 439 } 440 441 char path[PATH_MAX], tmp_path[PATH_MAX]; 442 pid_t gzip_pid = -1; 443 444 if (use_socket) { 445 redirect_to_socket(stdout, "dumpstate"); 446 } else if (use_outfile) { 447 strlcpy(path, use_outfile, sizeof(path)); 448 if (do_add_date) { 449 char date[80]; 450 time_t now = time(NULL); 451 strftime(date, sizeof(date), "-%Y-%m-%d-%H-%M-%S", localtime(&now)); 452 strlcat(path, date, sizeof(path)); 453 } 454 if (do_fb) { 455 strlcpy(screenshot_path, path, sizeof(screenshot_path)); 456 strlcat(screenshot_path, ".png", sizeof(screenshot_path)); 457 } 458 strlcat(path, ".txt", sizeof(path)); 459 if (do_compress) strlcat(path, ".gz", sizeof(path)); 460 strlcpy(tmp_path, path, sizeof(tmp_path)); 461 strlcat(tmp_path, ".tmp", sizeof(tmp_path)); 462 gzip_pid = redirect_to_file(stdout, tmp_path, do_compress); 463 } 464 465 if (begin_sound) { 466 play_sound(begin_sound); 467 } else if (vibrator) { 468 fputs("150", vibrator); 469 fflush(vibrator); 470 } 471 472 dumpstate(); 473 474 if (end_sound) { 475 play_sound(end_sound); 476 } else if (vibrator) { 477 int i; 478 for (i = 0; i < 3; i++) { 479 fputs("75\n", vibrator); 480 fflush(vibrator); 481 usleep((75 + 50) * 1000); 482 } 483 fclose(vibrator); 484 } 485 486 /* wait for gzip to finish, otherwise it might get killed when we exit */ 487 if (gzip_pid > 0) { 488 fclose(stdout); 489 waitpid(gzip_pid, NULL, 0); 490 } 491 492 /* rename the (now complete) .tmp file to its final location */ 493 if (use_outfile && rename(tmp_path, path)) { 494 fprintf(stderr, "rename(%s, %s): %s\n", tmp_path, path, strerror(errno)); 495 } 496 497 if (do_broadcast && use_outfile && do_fb) { 498 run_command(NULL, 5, "/system/bin/am", "broadcast", "--user", "0", 499 "-a", "android.intent.action.BUGREPORT_FINISHED", 500 "--es", "android.intent.extra.BUGREPORT", path, 501 "--es", "android.intent.extra.SCREENSHOT", screenshot_path, 502 "--receiver-permission", "android.permission.DUMP", NULL); 503 } 504 505 ALOGI("done\n"); 506 507 return 0; 508} 509