dumpstate.cpp revision 8fecfdda012928bc2fe6d0e66fd4a4c912946254
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#include <dirent.h>
18#include <errno.h>
19#include <fcntl.h>
20#include <libgen.h>
21#include <limits.h>
22#include <memory>
23#include <regex>
24#include <set>
25#include <stdbool.h>
26#include <stdio.h>
27#include <stdlib.h>
28#include <string>
29#include <string.h>
30#include <sys/capability.h>
31#include <sys/prctl.h>
32#include <sys/resource.h>
33#include <sys/stat.h>
34#include <sys/time.h>
35#include <sys/wait.h>
36#include <unistd.h>
37
38#include <android-base/stringprintf.h>
39#include <cutils/properties.h>
40
41#include "private/android_filesystem_config.h"
42
43#define LOG_TAG "dumpstate"
44#include <cutils/log.h>
45
46#include "dumpstate.h"
47#include "ScopedFd.h"
48#include "ziparchive/zip_writer.h"
49
50#include "mincrypt/sha256.h"
51
52using android::base::StringPrintf;
53
54/* read before root is shed */
55static char cmdline_buf[16384] = "(unknown)";
56static const char *dump_traces_path = NULL;
57
58// TODO: should be part of dumpstate object
59static unsigned long id;
60static char build_type[PROPERTY_VALUE_MAX];
61static time_t now;
62static std::unique_ptr<ZipWriter> zip_writer;
63static std::set<std::string> mount_points;
64void add_mountinfo();
65static bool add_zip_entry(const std::string& entry_name, const std::string& entry_path);
66
67#define PSTORE_LAST_KMSG "/sys/fs/pstore/console-ramoops"
68
69#define RAFT_DIR "/data/misc/raft/"
70#define RECOVERY_DIR "/cache/recovery"
71#define TOMBSTONE_DIR "/data/tombstones"
72#define TOMBSTONE_FILE_PREFIX TOMBSTONE_DIR "/tombstone_"
73/* Can accomodate a tombstone number up to 9999. */
74#define TOMBSTONE_MAX_LEN (sizeof(TOMBSTONE_FILE_PREFIX) + 4)
75#define NUM_TOMBSTONES  10
76
77typedef struct {
78  char name[TOMBSTONE_MAX_LEN];
79  int fd;
80} tombstone_data_t;
81
82static tombstone_data_t tombstone_data[NUM_TOMBSTONES];
83
84// Root dir for all files copied as-is into the bugreport
85const std::string& ZIP_ROOT_DIR = "FS";
86
87/*
88 * List of supported zip format versions.
89 *
90 * See bugreport-format.txt for more info.
91 */
92// TODO: change to "v1" before final N build
93static std::string VERSION_DEFAULT = "v1-dev1";
94// TODO: remove before final N build
95static std::string VERSION_DUMPSYS_SPLIT = "v1-dev1-dumpsys-split";
96
97/* gets the tombstone data, according to the bugreport type: if zipped gets all tombstones,
98 * otherwise gets just those modified in the last half an hour. */
99static void get_tombstone_fds(tombstone_data_t data[NUM_TOMBSTONES]) {
100    time_t thirty_minutes_ago = now - 60*30;
101    for (size_t i = 0; i < NUM_TOMBSTONES; i++) {
102        snprintf(data[i].name, sizeof(data[i].name), "%s%02zu", TOMBSTONE_FILE_PREFIX, i);
103        int fd = TEMP_FAILURE_RETRY(open(data[i].name,
104                                         O_RDONLY | O_CLOEXEC | O_NOFOLLOW | O_NONBLOCK));
105        struct stat st;
106        if (fstat(fd, &st) == 0 && S_ISREG(st.st_mode) &&
107            (zip_writer || (time_t) st.st_mtime >= thirty_minutes_ago)) {
108        data[i].fd = fd;
109        } else {
110        close(fd);
111            data[i].fd = -1;
112        }
113    }
114}
115
116// for_each_pid() callback to get mount info about a process.
117void do_mountinfo(int pid, const char *name) {
118    char path[PATH_MAX];
119
120    // Gets the the content of the /proc/PID/ns/mnt link, so only unique mount points
121    // are added.
122    sprintf(path, "/proc/%d/ns/mnt", pid);
123    char linkname[PATH_MAX];
124    ssize_t r = readlink(path, linkname, PATH_MAX);
125    if (r == -1) {
126        MYLOGE("Unable to read link for %s: %s\n", path, strerror(errno));
127        return;
128    }
129    linkname[r] = '\0';
130
131    if (mount_points.find(linkname) == mount_points.end()) {
132        // First time this mount point was found: add it
133        sprintf(path, "/proc/%d/mountinfo", pid);
134        if (add_zip_entry(ZIP_ROOT_DIR + path, path)) {
135            mount_points.insert(linkname);
136        } else {
137            MYLOGE("Unable to add mountinfo %s to zip file\n", path);
138        }
139    }
140}
141
142void add_mountinfo() {
143    if (!zip_writer) return;
144    const char *title = "MOUNT INFO";
145    mount_points.clear();
146    DurationReporter duration_reporter(title, NULL);
147    for_each_pid(do_mountinfo, NULL);
148    MYLOGD("%s: %lu entries added to zip file\n", title, mount_points.size());
149}
150
151static void dump_dev_files(const char *title, const char *driverpath, const char *filename)
152{
153    DIR *d;
154    struct dirent *de;
155    char path[PATH_MAX];
156
157    d = opendir(driverpath);
158    if (d == NULL) {
159        return;
160    }
161
162    while ((de = readdir(d))) {
163        if (de->d_type != DT_LNK) {
164            continue;
165        }
166        snprintf(path, sizeof(path), "%s/%s/%s", driverpath, de->d_name, filename);
167        dump_file(title, path);
168    }
169
170    closedir(d);
171}
172
173static bool skip_not_stat(const char *path) {
174    static const char stat[] = "/stat";
175    size_t len = strlen(path);
176    if (path[len - 1] == '/') { /* Directory? */
177        return false;
178    }
179    return strcmp(path + len - sizeof(stat) + 1, stat); /* .../stat? */
180}
181
182static bool skip_none(const char *path) {
183    return false;
184}
185
186static const char mmcblk0[] = "/sys/block/mmcblk0/";
187unsigned long worst_write_perf = 20000; /* in KB/s */
188
189//
190//  stat offsets
191// Name            units         description
192// ----            -----         -----------
193// read I/Os       requests      number of read I/Os processed
194#define __STAT_READ_IOS      0
195// read merges     requests      number of read I/Os merged with in-queue I/O
196#define __STAT_READ_MERGES   1
197// read sectors    sectors       number of sectors read
198#define __STAT_READ_SECTORS  2
199// read ticks      milliseconds  total wait time for read requests
200#define __STAT_READ_TICKS    3
201// write I/Os      requests      number of write I/Os processed
202#define __STAT_WRITE_IOS     4
203// write merges    requests      number of write I/Os merged with in-queue I/O
204#define __STAT_WRITE_MERGES  5
205// write sectors   sectors       number of sectors written
206#define __STAT_WRITE_SECTORS 6
207// write ticks     milliseconds  total wait time for write requests
208#define __STAT_WRITE_TICKS   7
209// in_flight       requests      number of I/Os currently in flight
210#define __STAT_IN_FLIGHT     8
211// io_ticks        milliseconds  total time this block device has been active
212#define __STAT_IO_TICKS      9
213// time_in_queue   milliseconds  total wait time for all requests
214#define __STAT_IN_QUEUE     10
215#define __STAT_NUMBER_FIELD 11
216//
217// read I/Os, write I/Os
218// =====================
219//
220// These values increment when an I/O request completes.
221//
222// read merges, write merges
223// =========================
224//
225// These values increment when an I/O request is merged with an
226// already-queued I/O request.
227//
228// read sectors, write sectors
229// ===========================
230//
231// These values count the number of sectors read from or written to this
232// block device.  The "sectors" in question are the standard UNIX 512-byte
233// sectors, not any device- or filesystem-specific block size.  The
234// counters are incremented when the I/O completes.
235#define SECTOR_SIZE 512
236//
237// read ticks, write ticks
238// =======================
239//
240// These values count the number of milliseconds that I/O requests have
241// waited on this block device.  If there are multiple I/O requests waiting,
242// these values will increase at a rate greater than 1000/second; for
243// example, if 60 read requests wait for an average of 30 ms, the read_ticks
244// field will increase by 60*30 = 1800.
245//
246// in_flight
247// =========
248//
249// This value counts the number of I/O requests that have been issued to
250// the device driver but have not yet completed.  It does not include I/O
251// requests that are in the queue but not yet issued to the device driver.
252//
253// io_ticks
254// ========
255//
256// This value counts the number of milliseconds during which the device has
257// had I/O requests queued.
258//
259// time_in_queue
260// =============
261//
262// This value counts the number of milliseconds that I/O requests have waited
263// on this block device.  If there are multiple I/O requests waiting, this
264// value will increase as the product of the number of milliseconds times the
265// number of requests waiting (see "read ticks" above for an example).
266#define S_TO_MS 1000
267//
268
269static int dump_stat_from_fd(const char *title __unused, const char *path, int fd) {
270    unsigned long long fields[__STAT_NUMBER_FIELD];
271    bool z;
272    char *cp, *buffer = NULL;
273    size_t i = 0;
274    FILE *fp = fdopen(fd, "rb");
275    getline(&buffer, &i, fp);
276    fclose(fp);
277    if (!buffer) {
278        return -errno;
279    }
280    i = strlen(buffer);
281    while ((i > 0) && (buffer[i - 1] == '\n')) {
282        buffer[--i] = '\0';
283    }
284    if (!*buffer) {
285        free(buffer);
286        return 0;
287    }
288    z = true;
289    for (cp = buffer, i = 0; i < (sizeof(fields) / sizeof(fields[0])); ++i) {
290        fields[i] = strtoull(cp, &cp, 10);
291        if (fields[i] != 0) {
292            z = false;
293        }
294    }
295    if (z) { /* never accessed */
296        free(buffer);
297        return 0;
298    }
299
300    if (!strncmp(path, mmcblk0, sizeof(mmcblk0) - 1)) {
301        path += sizeof(mmcblk0) - 1;
302    }
303
304    printf("%s: %s\n", path, buffer);
305    free(buffer);
306
307    if (fields[__STAT_IO_TICKS]) {
308        unsigned long read_perf = 0;
309        unsigned long read_ios = 0;
310        if (fields[__STAT_READ_TICKS]) {
311            unsigned long long divisor = fields[__STAT_READ_TICKS]
312                                       * fields[__STAT_IO_TICKS];
313            read_perf = ((unsigned long long)SECTOR_SIZE
314                           * fields[__STAT_READ_SECTORS]
315                           * fields[__STAT_IN_QUEUE] + (divisor >> 1))
316                                        / divisor;
317            read_ios = ((unsigned long long)S_TO_MS * fields[__STAT_READ_IOS]
318                           * fields[__STAT_IN_QUEUE] + (divisor >> 1))
319                                        / divisor;
320        }
321
322        unsigned long write_perf = 0;
323        unsigned long write_ios = 0;
324        if (fields[__STAT_WRITE_TICKS]) {
325            unsigned long long divisor = fields[__STAT_WRITE_TICKS]
326                                       * fields[__STAT_IO_TICKS];
327            write_perf = ((unsigned long long)SECTOR_SIZE
328                           * fields[__STAT_WRITE_SECTORS]
329                           * fields[__STAT_IN_QUEUE] + (divisor >> 1))
330                                        / divisor;
331            write_ios = ((unsigned long long)S_TO_MS * fields[__STAT_WRITE_IOS]
332                           * fields[__STAT_IN_QUEUE] + (divisor >> 1))
333                                        / divisor;
334        }
335
336        unsigned queue = (fields[__STAT_IN_QUEUE]
337                             + (fields[__STAT_IO_TICKS] >> 1))
338                                 / fields[__STAT_IO_TICKS];
339
340        if (!write_perf && !write_ios) {
341            printf("%s: perf(ios) rd: %luKB/s(%lu/s) q: %u\n",
342                   path, read_perf, read_ios, queue);
343        } else {
344            printf("%s: perf(ios) rd: %luKB/s(%lu/s) wr: %luKB/s(%lu/s) q: %u\n",
345                   path, read_perf, read_ios, write_perf, write_ios, queue);
346        }
347
348        /* bugreport timeout factor adjustment */
349        if ((write_perf > 1) && (write_perf < worst_write_perf)) {
350            worst_write_perf = write_perf;
351        }
352    }
353    return 0;
354}
355
356/* Copied policy from system/core/logd/LogBuffer.cpp */
357
358#define LOG_BUFFER_SIZE (256 * 1024)
359#define LOG_BUFFER_MIN_SIZE (64 * 1024UL)
360#define LOG_BUFFER_MAX_SIZE (256 * 1024 * 1024UL)
361
362static bool valid_size(unsigned long value) {
363    if ((value < LOG_BUFFER_MIN_SIZE) || (LOG_BUFFER_MAX_SIZE < value)) {
364        return false;
365    }
366
367    long pages = sysconf(_SC_PHYS_PAGES);
368    if (pages < 1) {
369        return true;
370    }
371
372    long pagesize = sysconf(_SC_PAGESIZE);
373    if (pagesize <= 1) {
374        pagesize = PAGE_SIZE;
375    }
376
377    // maximum memory impact a somewhat arbitrary ~3%
378    pages = (pages + 31) / 32;
379    unsigned long maximum = pages * pagesize;
380
381    if ((maximum < LOG_BUFFER_MIN_SIZE) || (LOG_BUFFER_MAX_SIZE < maximum)) {
382        return true;
383    }
384
385    return value <= maximum;
386}
387
388static unsigned long property_get_size(const char *key) {
389    unsigned long value;
390    char *cp, property[PROPERTY_VALUE_MAX];
391
392    property_get(key, property, "");
393    value = strtoul(property, &cp, 10);
394
395    switch(*cp) {
396    case 'm':
397    case 'M':
398        value *= 1024;
399    /* FALLTHRU */
400    case 'k':
401    case 'K':
402        value *= 1024;
403    /* FALLTHRU */
404    case '\0':
405        break;
406
407    default:
408        value = 0;
409    }
410
411    if (!valid_size(value)) {
412        value = 0;
413    }
414
415    return value;
416}
417
418/* timeout in ms */
419static unsigned long logcat_timeout(const char *name) {
420    static const char global_tuneable[] = "persist.logd.size"; // Settings App
421    static const char global_default[] = "ro.logd.size";       // BoardConfig.mk
422    char key[PROP_NAME_MAX];
423    unsigned long property_size, default_size;
424
425    default_size = property_get_size(global_tuneable);
426    if (!default_size) {
427        default_size = property_get_size(global_default);
428    }
429
430    snprintf(key, sizeof(key), "%s.%s", global_tuneable, name);
431    property_size = property_get_size(key);
432
433    if (!property_size) {
434        snprintf(key, sizeof(key), "%s.%s", global_default, name);
435        property_size = property_get_size(key);
436    }
437
438    if (!property_size) {
439        property_size = default_size;
440    }
441
442    if (!property_size) {
443        property_size = LOG_BUFFER_SIZE;
444    }
445
446    /* Engineering margin is ten-fold our guess */
447    return 10 * (property_size + worst_write_perf) / worst_write_perf;
448}
449
450/* End copy from system/core/logd/LogBuffer.cpp */
451
452/* dumps the current system state to stdout */
453static void print_header(std::string version) {
454    char build[PROPERTY_VALUE_MAX], fingerprint[PROPERTY_VALUE_MAX];
455    char radio[PROPERTY_VALUE_MAX], bootloader[PROPERTY_VALUE_MAX];
456    char network[PROPERTY_VALUE_MAX], date[80];
457
458    property_get("ro.build.display.id", build, "(unknown)");
459    property_get("ro.build.fingerprint", fingerprint, "(unknown)");
460    property_get("ro.build.type", build_type, "(unknown)");
461    property_get("ro.baseband", radio, "(unknown)");
462    property_get("ro.bootloader", bootloader, "(unknown)");
463    property_get("gsm.operator.alpha", network, "(unknown)");
464    strftime(date, sizeof(date), "%Y-%m-%d %H:%M:%S", localtime(&now));
465
466    printf("========================================================\n");
467    printf("== dumpstate: %s\n", date);
468    printf("========================================================\n");
469
470    printf("\n");
471    printf("Build: %s\n", build);
472    printf("Build fingerprint: '%s'\n", fingerprint); /* format is important for other tools */
473    printf("Bootloader: %s\n", bootloader);
474    printf("Radio: %s\n", radio);
475    printf("Network: %s\n", network);
476
477    printf("Kernel: ");
478    dump_file(NULL, "/proc/version");
479    printf("Command line: %s\n", strtok(cmdline_buf, "\n"));
480    printf("Bugreport format version: %s\n", version.c_str());
481    printf("Dumpstate info: id=%lu pid=%d\n", id, getpid());
482    printf("\n");
483}
484
485/* adds a new entry to the existing zip file. */
486static bool add_zip_entry_from_fd(const std::string& entry_name, int fd) {
487    if (!zip_writer) {
488        MYLOGD("Not adding zip entry %s from fd because zip_writer is not set\n", entry_name.c_str());
489        return false;
490    }
491    MYLOGD("Adding zip entry %s\n", entry_name.c_str());
492    int32_t err = zip_writer->StartEntryWithTime(entry_name.c_str(),
493            ZipWriter::kCompress, get_mtime(fd, now));
494    if (err) {
495        MYLOGE("zip_writer->StartEntryWithTime(%s): %s\n", entry_name.c_str(),
496                ZipWriter::ErrorCodeString(err));
497        return false;
498    }
499
500    std::vector<uint8_t> buffer(65536);
501    while (1) {
502        ssize_t bytes_read = TEMP_FAILURE_RETRY(read(fd, buffer.data(), sizeof(buffer)));
503        if (bytes_read == 0) {
504            break;
505        } else if (bytes_read == -1) {
506            MYLOGE("read(%s): %s\n", entry_name.c_str(), strerror(errno));
507            return false;
508        }
509        err = zip_writer->WriteBytes(buffer.data(), bytes_read);
510        if (err) {
511            MYLOGE("zip_writer->WriteBytes(): %s\n", ZipWriter::ErrorCodeString(err));
512            return false;
513        }
514    }
515
516    err = zip_writer->FinishEntry();
517    if (err) {
518        MYLOGE("zip_writer->FinishEntry(): %s\n", ZipWriter::ErrorCodeString(err));
519        return false;
520    }
521
522    return true;
523}
524
525/* adds a new entry to the existing zip file. */
526static bool add_zip_entry(const std::string& entry_name, const std::string& entry_path) {
527    ScopedFd fd(TEMP_FAILURE_RETRY(open(entry_path.c_str(), O_RDONLY | O_NONBLOCK | O_CLOEXEC)));
528    if (fd.get() == -1) {
529        MYLOGE("open(%s): %s\n", entry_path.c_str(), strerror(errno));
530        return false;
531    }
532
533    return add_zip_entry_from_fd(entry_name, fd.get());
534}
535
536/* adds a file to the existing zipped bugreport */
537static int _add_file_from_fd(const char *title, const char *path, int fd) {
538    return add_zip_entry_from_fd(ZIP_ROOT_DIR + path, fd) ? 0 : 1;
539}
540
541/* adds all files from a directory to the zipped bugreport file */
542void add_dir(const char *dir, bool recursive) {
543    if (!zip_writer) {
544        MYLOGD("Not adding dir %s because zip_writer is not set\n", dir);
545        return;
546    }
547    DurationReporter duration_reporter(dir, NULL);
548    dump_files(NULL, dir, recursive ? skip_none : is_dir, _add_file_from_fd);
549}
550
551/* adds a text entry entry to the existing zip file. */
552static bool add_text_zip_entry(const std::string& entry_name, const std::string& content) {
553    if (!zip_writer) {
554        MYLOGD("Not adding text zip entry %s because zip_writer is not set\n", entry_name.c_str());
555        return false;
556    }
557    MYLOGD("Adding zip text entry %s\n", entry_name.c_str());
558    int32_t err = zip_writer->StartEntryWithTime(entry_name.c_str(), ZipWriter::kCompress, now);
559    if (err) {
560        MYLOGE("zip_writer->StartEntryWithTime(%s): %s\n", entry_name.c_str(),
561                ZipWriter::ErrorCodeString(err));
562        return false;
563    }
564
565    err = zip_writer->WriteBytes(content.c_str(), content.length());
566    if (err) {
567        MYLOGE("zip_writer->WriteBytes(%s): %s\n", entry_name.c_str(),
568                ZipWriter::ErrorCodeString(err));
569        return false;
570    }
571
572    err = zip_writer->FinishEntry();
573    if (err) {
574        MYLOGE("zip_writer->FinishEntry(): %s\n", ZipWriter::ErrorCodeString(err));
575        return false;
576    }
577
578    return true;
579}
580
581static void dumpstate(const std::string& screenshot_path) {
582    DurationReporter duration_reporter("DUMPSTATE");
583    unsigned long timeout;
584
585    dump_dev_files("TRUSTY VERSION", "/sys/bus/platform/drivers/trusty", "trusty_version");
586    run_command("UPTIME", 10, "uptime", NULL);
587    dump_files("UPTIME MMC PERF", mmcblk0, skip_not_stat, dump_stat_from_fd);
588    dump_emmc_ecsd("/d/mmc0/mmc0:0001/ext_csd");
589    dump_file("MEMORY INFO", "/proc/meminfo");
590    run_command("CPU INFO", 10, "top", "-n", "1", "-d", "1", "-m", "30", "-H", NULL);
591    run_command("PROCRANK", 20, SU_PATH, "root", "procrank", NULL);
592    dump_file("VIRTUAL MEMORY STATS", "/proc/vmstat");
593    dump_file("VMALLOC INFO", "/proc/vmallocinfo");
594    dump_file("SLAB INFO", "/proc/slabinfo");
595    dump_file("ZONEINFO", "/proc/zoneinfo");
596    dump_file("PAGETYPEINFO", "/proc/pagetypeinfo");
597    dump_file("BUDDYINFO", "/proc/buddyinfo");
598    dump_file("FRAGMENTATION INFO", "/d/extfrag/unusable_index");
599
600    dump_file("KERNEL WAKELOCKS", "/proc/wakelocks");
601    dump_file("KERNEL WAKE SOURCES", "/d/wakeup_sources");
602    dump_file("KERNEL CPUFREQ", "/sys/devices/system/cpu/cpu0/cpufreq/stats/time_in_state");
603    dump_file("KERNEL SYNC", "/d/sync");
604
605    run_command("PROCESSES AND THREADS", 10, "ps", "-Z", "-t", "-p", "-P", NULL);
606    run_command("LIBRANK", 10, SU_PATH, "root", "librank", NULL);
607
608    run_command("ROUTE", 10, "route", NULL);
609    run_command("PRINTENV", 10, "printenv", NULL);
610    run_command("NETSTAT", 10, "netstat", NULL);
611    run_command("LSMOD", 10, "lsmod", NULL);
612
613    do_dmesg();
614
615    run_command("LIST OF OPEN FILES", 10, SU_PATH, "root", "lsof", NULL);
616    for_each_pid(do_showmap, "SMAPS OF ALL PROCESSES");
617    for_each_tid(show_wchan, "BLOCKED PROCESS WAIT-CHANNELS");
618
619    if (!screenshot_path.empty()) {
620        MYLOGI("taking late screenshot\n");
621        take_screenshot(screenshot_path);
622        MYLOGI("wrote screenshot: %s\n", screenshot_path.c_str());
623    }
624
625    // dump_file("EVENT LOG TAGS", "/etc/event-log-tags");
626    // calculate timeout
627    timeout = logcat_timeout("main") + logcat_timeout("system") + logcat_timeout("crash");
628    if (timeout < 20000) {
629        timeout = 20000;
630    }
631    run_command("SYSTEM LOG", timeout / 1000, "logcat", "-v", "threadtime",
632                                                        "-v", "printable",
633                                                        "-d",
634                                                        "*:v", NULL);
635    timeout = logcat_timeout("events");
636    if (timeout < 20000) {
637        timeout = 20000;
638    }
639    run_command("EVENT LOG", timeout / 1000, "logcat", "-b", "events",
640                                                       "-v", "threadtime",
641                                                       "-v", "printable",
642                                                       "-d",
643                                                       "*:v", NULL);
644    timeout = logcat_timeout("radio");
645    if (timeout < 20000) {
646        timeout = 20000;
647    }
648    run_command("RADIO LOG", timeout / 1000, "logcat", "-b", "radio",
649                                                       "-v", "threadtime",
650                                                       "-v", "printable",
651                                                       "-d",
652                                                       "*:v", NULL);
653
654    run_command("LOG STATISTICS", 10, "logcat", "-b", "all", "-S", NULL);
655
656    run_command("RAFT LOGS", 600, SU_PATH, "root", "logcompressor", "-r", RAFT_DIR, NULL);
657
658    /* show the traces we collected in main(), if that was done */
659    if (dump_traces_path != NULL) {
660        dump_file("VM TRACES JUST NOW", dump_traces_path);
661    }
662
663    /* only show ANR traces if they're less than 15 minutes old */
664    struct stat st;
665    char anr_traces_path[PATH_MAX];
666    property_get("dalvik.vm.stack-trace-file", anr_traces_path, "");
667    if (!anr_traces_path[0]) {
668        printf("*** NO VM TRACES FILE DEFINED (dalvik.vm.stack-trace-file)\n\n");
669    } else {
670      int fd = TEMP_FAILURE_RETRY(open(anr_traces_path,
671                                       O_RDONLY | O_CLOEXEC | O_NOFOLLOW | O_NONBLOCK));
672      if (fd < 0) {
673          printf("*** NO ANR VM TRACES FILE (%s): %s\n\n", anr_traces_path, strerror(errno));
674      } else {
675          dump_file_from_fd("VM TRACES AT LAST ANR", anr_traces_path, fd);
676      }
677    }
678
679    /* slow traces for slow operations */
680    if (anr_traces_path[0] != 0) {
681        int tail = strlen(anr_traces_path)-1;
682        while (tail > 0 && anr_traces_path[tail] != '/') {
683            tail--;
684        }
685        int i = 0;
686        while (1) {
687            sprintf(anr_traces_path+tail+1, "slow%02d.txt", i);
688            if (stat(anr_traces_path, &st)) {
689                // No traces file at this index, done with the files.
690                break;
691            }
692            dump_file("VM TRACES WHEN SLOW", anr_traces_path);
693            i++;
694        }
695    }
696
697    int dumped = 0;
698    for (size_t i = 0; i < NUM_TOMBSTONES; i++) {
699        if (tombstone_data[i].fd != -1) {
700            const char *name = tombstone_data[i].name;
701            int fd = tombstone_data[i].fd;
702            dumped = 1;
703            if (zip_writer) {
704                if (!add_zip_entry_from_fd(ZIP_ROOT_DIR + name, fd)) {
705                    MYLOGE("Unable to add tombstone %s to zip file\n", name);
706                }
707            } else {
708                dump_file_from_fd("TOMBSTONE", name, fd);
709            }
710            close(fd);
711            tombstone_data[i].fd = -1;
712        }
713    }
714    if (!dumped) {
715        printf("*** NO TOMBSTONES to dump in %s\n\n", TOMBSTONE_DIR);
716    }
717
718    dump_file("NETWORK DEV INFO", "/proc/net/dev");
719    dump_file("QTAGUID NETWORK INTERFACES INFO", "/proc/net/xt_qtaguid/iface_stat_all");
720    dump_file("QTAGUID NETWORK INTERFACES INFO (xt)", "/proc/net/xt_qtaguid/iface_stat_fmt");
721    dump_file("QTAGUID CTRL INFO", "/proc/net/xt_qtaguid/ctrl");
722    dump_file("QTAGUID STATS INFO", "/proc/net/xt_qtaguid/stats");
723
724    if (!stat(PSTORE_LAST_KMSG, &st)) {
725        /* Also TODO: Make console-ramoops CAP_SYSLOG protected. */
726        dump_file("LAST KMSG", PSTORE_LAST_KMSG);
727    } else {
728        /* TODO: Make last_kmsg CAP_SYSLOG protected. b/5555691 */
729        dump_file("LAST KMSG", "/proc/last_kmsg");
730    }
731
732    /* kernels must set CONFIG_PSTORE_PMSG, slice up pstore with device tree */
733    run_command("LAST LOGCAT", 10, "logcat", "-L",
734                                             "-b", "all",
735                                             "-v", "threadtime",
736                                             "-v", "printable",
737                                             "-d",
738                                             "*:v", NULL);
739
740    /* The following have a tendency to get wedged when wifi drivers/fw goes belly-up. */
741
742    run_command("NETWORK INTERFACES", 10, "ip", "link", NULL);
743
744    run_command("IPv4 ADDRESSES", 10, "ip", "-4", "addr", "show", NULL);
745    run_command("IPv6 ADDRESSES", 10, "ip", "-6", "addr", "show", NULL);
746
747    run_command("IP RULES", 10, "ip", "rule", "show", NULL);
748    run_command("IP RULES v6", 10, "ip", "-6", "rule", "show", NULL);
749
750    dump_route_tables();
751
752    run_command("ARP CACHE", 10, "ip", "-4", "neigh", "show", NULL);
753    run_command("IPv6 ND CACHE", 10, "ip", "-6", "neigh", "show", NULL);
754
755    run_command("IPTABLES", 10, SU_PATH, "root", "iptables", "-L", "-nvx", NULL);
756    run_command("IP6TABLES", 10, SU_PATH, "root", "ip6tables", "-L", "-nvx", NULL);
757    run_command("IPTABLE NAT", 10, SU_PATH, "root", "iptables", "-t", "nat", "-L", "-nvx", NULL);
758    /* no ip6 nat */
759    run_command("IPTABLE RAW", 10, SU_PATH, "root", "iptables", "-t", "raw", "-L", "-nvx", NULL);
760    run_command("IP6TABLE RAW", 10, SU_PATH, "root", "ip6tables", "-t", "raw", "-L", "-nvx", NULL);
761
762    run_command("WIFI NETWORKS", 20,
763            SU_PATH, "root", "wpa_cli", "IFNAME=wlan0", "list_networks", NULL);
764
765#ifdef FWDUMP_bcmdhd
766    run_command("ND OFFLOAD TABLE", 5,
767            SU_PATH, "root", "wlutil", "nd_hostip", NULL);
768
769    run_command("DUMP WIFI INTERNAL COUNTERS (1)", 20,
770            SU_PATH, "root", "wlutil", "counters", NULL);
771
772    run_command("ND OFFLOAD STATUS (1)", 5,
773            SU_PATH, "root", "wlutil", "nd_status", NULL);
774
775#endif
776    dump_file("INTERRUPTS (1)", "/proc/interrupts");
777
778    run_command("NETWORK DIAGNOSTICS", 10, "dumpsys", "connectivity", "--diag", NULL);
779
780#ifdef FWDUMP_bcmdhd
781    run_command("DUMP WIFI STATUS", 20,
782            SU_PATH, "root", "dhdutil", "-i", "wlan0", "dump", NULL);
783
784    run_command("DUMP WIFI INTERNAL COUNTERS (2)", 20,
785            SU_PATH, "root", "wlutil", "counters", NULL);
786
787    run_command("ND OFFLOAD STATUS (2)", 5,
788            SU_PATH, "root", "wlutil", "nd_status", NULL);
789#endif
790    dump_file("INTERRUPTS (2)", "/proc/interrupts");
791
792    print_properties();
793
794    run_command("VOLD DUMP", 10, "vdc", "dump", NULL);
795    run_command("SECURE CONTAINERS", 10, "vdc", "asec", "list", NULL);
796
797    run_command("FILESYSTEMS & FREE SPACE", 10, "df", NULL);
798
799    run_command("LAST RADIO LOG", 10, "parse_radio_log", "/proc/last_radio_log", NULL);
800
801    printf("------ BACKLIGHTS ------\n");
802    printf("LCD brightness=");
803    dump_file(NULL, "/sys/class/leds/lcd-backlight/brightness");
804    printf("Button brightness=");
805    dump_file(NULL, "/sys/class/leds/button-backlight/brightness");
806    printf("Keyboard brightness=");
807    dump_file(NULL, "/sys/class/leds/keyboard-backlight/brightness");
808    printf("ALS mode=");
809    dump_file(NULL, "/sys/class/leds/lcd-backlight/als");
810    printf("LCD driver registers:\n");
811    dump_file(NULL, "/sys/class/leds/lcd-backlight/registers");
812    printf("\n");
813
814    /* Binder state is expensive to look at as it uses a lot of memory. */
815    dump_file("BINDER FAILED TRANSACTION LOG", "/sys/kernel/debug/binder/failed_transaction_log");
816    dump_file("BINDER TRANSACTION LOG", "/sys/kernel/debug/binder/transaction_log");
817    dump_file("BINDER TRANSACTIONS", "/sys/kernel/debug/binder/transactions");
818    dump_file("BINDER STATS", "/sys/kernel/debug/binder/stats");
819    dump_file("BINDER STATE", "/sys/kernel/debug/binder/state");
820
821    printf("========================================================\n");
822    printf("== Board\n");
823    printf("========================================================\n");
824
825    dumpstate_board();
826    printf("\n");
827
828    /* Migrate the ril_dumpstate to a dumpstate_board()? */
829    char ril_dumpstate_timeout[PROPERTY_VALUE_MAX] = {0};
830    property_get("ril.dumpstate.timeout", ril_dumpstate_timeout, "30");
831    if (strnlen(ril_dumpstate_timeout, PROPERTY_VALUE_MAX - 1) > 0) {
832        if (0 == strncmp(build_type, "user", PROPERTY_VALUE_MAX - 1)) {
833            // su does not exist on user builds, so try running without it.
834            // This way any implementations of vril-dump that do not require
835            // root can run on user builds.
836            run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout),
837                    "vril-dump", NULL);
838        } else {
839            run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout),
840                    SU_PATH, "root", "vril-dump", NULL);
841        }
842    }
843
844    printf("========================================================\n");
845    printf("== Android Framework Services\n");
846    printf("========================================================\n");
847
848    /* the full dumpsys is starting to take a long time, so we need
849       to increase its timeout.  we really need to do the timeouts in
850       dumpsys itself... */
851    run_command("DUMPSYS", 60, "dumpsys", NULL);
852
853    printf("========================================================\n");
854    printf("== Checkins\n");
855    printf("========================================================\n");
856
857    run_command("CHECKIN BATTERYSTATS", 30, "dumpsys", "batterystats", "-c", NULL);
858    run_command("CHECKIN MEMINFO", 30, "dumpsys", "meminfo", "--checkin", NULL);
859    run_command("CHECKIN NETSTATS", 30, "dumpsys", "netstats", "--checkin", NULL);
860    run_command("CHECKIN PROCSTATS", 30, "dumpsys", "procstats", "-c", NULL);
861    run_command("CHECKIN USAGESTATS", 30, "dumpsys", "usagestats", "-c", NULL);
862    run_command("CHECKIN PACKAGE", 30, "dumpsys", "package", "--checkin", NULL);
863
864    printf("========================================================\n");
865    printf("== Running Application Activities\n");
866    printf("========================================================\n");
867
868    run_command("APP ACTIVITIES", 30, "dumpsys", "activity", "all", NULL);
869
870    printf("========================================================\n");
871    printf("== Running Application Services\n");
872    printf("========================================================\n");
873
874    run_command("APP SERVICES", 30, "dumpsys", "activity", "service", "all", NULL);
875
876    printf("========================================================\n");
877    printf("== Running Application Providers\n");
878    printf("========================================================\n");
879
880    run_command("APP SERVICES", 30, "dumpsys", "activity", "provider", "all", NULL);
881
882
883    printf("========================================================\n");
884    printf("== Final progress (pid %d): %d/%d (originally %d)\n",
885            getpid(), progress, weight_total, WEIGHT_TOTAL);
886    printf("========================================================\n");
887    printf("== dumpstate: done\n");
888    printf("========================================================\n");
889}
890
891static void usage() {
892    fprintf(stderr, "usage: dumpstate [-b soundfile] [-e soundfile] [-o file [-d] [-p] [-z]] [-s] [-q] [-B] [-P] [-R] [-V version]\n"
893            "  -b: play sound file instead of vibrate, at beginning of job\n"
894            "  -e: play sound file instead of vibrate, at end of job\n"
895            "  -o: write to file (instead of stdout)\n"
896            "  -d: append date to filename (requires -o)\n"
897            "  -p: capture screenshot to filename.png (requires -o)\n"
898            "  -z: generates zipped file (requires -o)\n"
899            "  -s: write output to control socket (for init)\n"
900            "  -q: disable vibrate\n"
901            "  -B: send broadcast when finished (requires -o)\n"
902            "  -P: send broadcast when started and update system properties on progress (requires -o and -B)\n"
903            "  -R: take bugreport in remote mode (requires -o, -z, -d and -B, shouldn't be used with -P)\n"
904            "  -V: sets the bugreport format version (%s or %s)\n",
905            VERSION_DEFAULT.c_str(), VERSION_DUMPSYS_SPLIT.c_str());
906}
907
908static void sigpipe_handler(int n) {
909    // don't complain to stderr or stdout
910    _exit(EXIT_FAILURE);
911}
912
913/* adds the temporary report to the existing .zip file, closes the .zip file, and removes the
914   temporary file.
915 */
916static bool finish_zip_file(const std::string& bugreport_name, const std::string& bugreport_path,
917        time_t now) {
918    if (!add_zip_entry(bugreport_name, bugreport_path)) {
919        MYLOGE("Failed to add text entry to .zip file\n");
920        return false;
921    }
922    if (!add_text_zip_entry("main_entry.txt", bugreport_name)) {
923        MYLOGE("Failed to add main_entry.txt to .zip file\n");
924        return false;
925    }
926
927    int32_t err = zip_writer->Finish();
928    if (err) {
929        MYLOGE("zip_writer->Finish(): %s\n", ZipWriter::ErrorCodeString(err));
930        return false;
931    }
932
933    return true;
934}
935
936static std::string SHA256_file_hash(std::string filepath) {
937    ScopedFd fd(TEMP_FAILURE_RETRY(open(filepath.c_str(), O_RDONLY | O_NONBLOCK | O_CLOEXEC
938            | O_NOFOLLOW)));
939    if (fd.get() == -1) {
940        MYLOGE("open(%s): %s\n", filepath.c_str(), strerror(errno));
941        return NULL;
942    }
943
944    SHA256_CTX ctx;
945    SHA256_init(&ctx);
946
947    std::vector<uint8_t> buffer(65536);
948    while (1) {
949        ssize_t bytes_read = TEMP_FAILURE_RETRY(read(fd.get(), buffer.data(), buffer.size()));
950        if (bytes_read == 0) {
951            break;
952        } else if (bytes_read == -1) {
953            MYLOGE("read(%s): %s\n", filepath.c_str(), strerror(errno));
954            return NULL;
955        }
956
957        SHA256_update(&ctx, buffer.data(), bytes_read);
958    }
959
960    uint8_t hash[SHA256_DIGEST_SIZE];
961    memcpy(hash, SHA256_final(&ctx), SHA256_DIGEST_SIZE);
962    char hash_buffer[SHA256_DIGEST_SIZE * 2 + 1];
963    for(size_t i = 0; i < SHA256_DIGEST_SIZE; i++) {
964        sprintf(hash_buffer + (i * 2), "%02x", hash[i]);
965    }
966    hash_buffer[sizeof(hash_buffer) - 1] = 0;
967    return std::string(hash_buffer);
968}
969
970/* switch to non-root user and group */
971bool drop_root() {
972    /* ensure we will keep capabilities when we drop root */
973    if (prctl(PR_SET_KEEPCAPS, 1) < 0) {
974        MYLOGE("prctl(PR_SET_KEEPCAPS) failed: %s\n", strerror(errno));
975        return false;
976    }
977
978    gid_t groups[] = { AID_LOG, AID_SDCARD_R, AID_SDCARD_RW,
979            AID_MOUNT, AID_INET, AID_NET_BW_STATS, AID_READPROC };
980    if (setgroups(sizeof(groups)/sizeof(groups[0]), groups) != 0) {
981        MYLOGE("Unable to setgroups, aborting: %s\n", strerror(errno));
982        return false;
983    }
984    if (setgid(AID_SHELL) != 0) {
985        MYLOGE("Unable to setgid, aborting: %s\n", strerror(errno));
986        return false;
987    }
988    if (setuid(AID_SHELL) != 0) {
989        MYLOGE("Unable to setuid, aborting: %s\n", strerror(errno));
990        return false;
991    }
992
993    struct __user_cap_header_struct capheader;
994    struct __user_cap_data_struct capdata[2];
995    memset(&capheader, 0, sizeof(capheader));
996    memset(&capdata, 0, sizeof(capdata));
997    capheader.version = _LINUX_CAPABILITY_VERSION_3;
998    capheader.pid = 0;
999
1000    capdata[CAP_TO_INDEX(CAP_SYSLOG)].permitted = CAP_TO_MASK(CAP_SYSLOG);
1001    capdata[CAP_TO_INDEX(CAP_SYSLOG)].effective = CAP_TO_MASK(CAP_SYSLOG);
1002    capdata[0].inheritable = 0;
1003    capdata[1].inheritable = 0;
1004
1005    if (capset(&capheader, &capdata[0]) < 0) {
1006        MYLOGE("capset failed: %s\n", strerror(errno));
1007        return false;
1008    }
1009
1010    return true;
1011}
1012
1013int main(int argc, char *argv[]) {
1014    struct sigaction sigact;
1015    int do_add_date = 0;
1016    int do_zip_file = 0;
1017    int do_vibrate = 1;
1018    char* use_outfile = 0;
1019    int use_socket = 0;
1020    int do_fb = 0;
1021    int do_broadcast = 0;
1022    int do_early_screenshot = 0;
1023    int is_remote_mode = 0;
1024    std::string version = VERSION_DEFAULT;
1025
1026    now = time(NULL);
1027
1028    if (getuid() != 0) {
1029        // Old versions of the adb client would call the
1030        // dumpstate command directly. Newer clients
1031        // call /system/bin/bugreport instead. If we detect
1032        // we're being called incorrectly, then exec the
1033        // correct program.
1034        return execl("/system/bin/bugreport", "/system/bin/bugreport", NULL);
1035    }
1036
1037    MYLOGI("begin\n");
1038
1039    /* gets the sequential id */
1040    char last_id[PROPERTY_VALUE_MAX];
1041    property_get("dumpstate.last_id", last_id, "0");
1042    id = strtoul(last_id, NULL, 10) + 1;
1043    sprintf(last_id, "%lu", id);
1044    property_set("dumpstate.last_id", last_id);
1045    MYLOGI("dumpstate id: %lu\n", id);
1046
1047    /* clear SIGPIPE handler */
1048    memset(&sigact, 0, sizeof(sigact));
1049    sigact.sa_handler = sigpipe_handler;
1050    sigaction(SIGPIPE, &sigact, NULL);
1051
1052    /* set as high priority, and protect from OOM killer */
1053    setpriority(PRIO_PROCESS, 0, -20);
1054    FILE *oom_adj = fopen("/proc/self/oom_adj", "we");
1055    if (oom_adj) {
1056        fputs("-17", oom_adj);
1057        fclose(oom_adj);
1058    }
1059
1060    /* parse arguments */
1061    int c;
1062    while ((c = getopt(argc, argv, "dho:svqzpPBRV:")) != -1) {
1063        switch (c) {
1064            case 'd': do_add_date = 1;          break;
1065            case 'z': do_zip_file = 1;          break;
1066            case 'o': use_outfile = optarg;     break;
1067            case 's': use_socket = 1;           break;
1068            case 'v': break;  // compatibility no-op
1069            case 'q': do_vibrate = 0;           break;
1070            case 'p': do_fb = 1;                break;
1071            case 'P': do_update_progress = 1;   break;
1072            case 'R': is_remote_mode = 1;       break;
1073            case 'B': do_broadcast = 1;         break;
1074            case 'V': version = optarg;         break;
1075            case '?': printf("\n");
1076            case 'h':
1077                usage();
1078                exit(1);
1079        }
1080    }
1081
1082    if ((do_zip_file || do_add_date || do_update_progress || do_broadcast) && !use_outfile) {
1083        usage();
1084        exit(1);
1085    }
1086
1087    if (do_update_progress && !do_broadcast) {
1088        usage();
1089        exit(1);
1090    }
1091
1092    if (is_remote_mode && (do_update_progress || !do_broadcast || !do_zip_file || !do_add_date)) {
1093        usage();
1094        exit(1);
1095    }
1096
1097    if (version != VERSION_DEFAULT && version != VERSION_DUMPSYS_SPLIT) {
1098        usage();
1099        exit(1);
1100    }
1101
1102    MYLOGI("bugreport format version: %s\n", version.c_str());
1103
1104    do_early_screenshot = do_update_progress;
1105
1106    // If we are going to use a socket, do it as early as possible
1107    // to avoid timeouts from bugreport.
1108    if (use_socket) {
1109        redirect_to_socket(stdout, "dumpstate");
1110    }
1111
1112    /* full path of the directory where the bugreport files will be written */
1113    std::string bugreport_dir;
1114
1115    /* full path of the temporary file containing the bugreport */
1116    std::string tmp_path;
1117
1118    /* full path of the file containing the dumpstate logs*/
1119    std::string log_path;
1120
1121    /* full path of the temporary file containing the screenshot (when requested) */
1122    std::string screenshot_path;
1123
1124    /* base name (without suffix or extensions) of the bugreport files */
1125    std::string base_name;
1126
1127    /* suffix of the bugreport files - it's typically the date (when invoked with -d),
1128     * although it could be changed by the user using a system property */
1129    std::string suffix;
1130
1131    /* pointer to the actual path, be it zip or text */
1132    std::string path;
1133
1134    /* pointer to the zipped file */
1135    std::unique_ptr<FILE, int(*)(FILE*)> zip_file(NULL, fclose);
1136
1137    /* redirect output if needed */
1138    bool is_redirecting = !use_socket && use_outfile;
1139
1140    if (is_redirecting) {
1141        bugreport_dir = dirname(use_outfile);
1142        base_name = basename(use_outfile);
1143        if (do_add_date) {
1144            char date[80];
1145            strftime(date, sizeof(date), "%Y-%m-%d-%H-%M-%S", localtime(&now));
1146            suffix = date;
1147        } else {
1148            suffix = "undated";
1149        }
1150        if (do_fb) {
1151            // TODO: if dumpstate was an object, the paths could be internal variables and then
1152            // we could have a function to calculate the derived values, such as:
1153            //     screenshot_path = GetPath(".png");
1154            screenshot_path = bugreport_dir + "/" + base_name + "-" + suffix + ".png";
1155        }
1156        tmp_path = bugreport_dir + "/" + base_name + "-" + suffix + ".tmp";
1157        log_path = bugreport_dir + "/dumpstate_log-" + suffix + "-"
1158                + std::to_string(getpid()) + ".txt";
1159
1160        MYLOGD("Bugreport dir: %s\n"
1161                "Base name: %s\n"
1162                "Suffix: %s\n"
1163                "Log path: %s\n"
1164                "Temporary path: %s\n"
1165                "Screenshot path: %s\n",
1166                bugreport_dir.c_str(), base_name.c_str(), suffix.c_str(),
1167                log_path.c_str(), tmp_path.c_str(), screenshot_path.c_str());
1168
1169        if (do_zip_file) {
1170            MYLOGD("Creating initial .zip file\n");
1171            path = bugreport_dir + "/" + base_name + "-" + suffix + ".zip";
1172            create_parent_dirs(path.c_str());
1173            zip_file.reset(fopen(path.c_str(), "wb"));
1174            if (!zip_file) {
1175                MYLOGE("fopen(%s, 'wb'): %s\n", path.c_str(), strerror(errno));
1176                do_zip_file = 0;
1177            } else {
1178                zip_writer.reset(new ZipWriter(zip_file.get()));
1179            }
1180            add_text_zip_entry("version.txt", version);
1181        }
1182
1183        if (do_update_progress) {
1184            std::vector<std::string> am_args = {
1185                 "--receiver-permission", "android.permission.DUMP",
1186                 "--es", "android.intent.extra.NAME", suffix,
1187                 "--ei", "android.intent.extra.ID", std::to_string(id),
1188                 "--ei", "android.intent.extra.PID", std::to_string(getpid()),
1189                 "--ei", "android.intent.extra.MAX", std::to_string(WEIGHT_TOTAL),
1190            };
1191            send_broadcast("android.intent.action.BUGREPORT_STARTED", am_args);
1192        }
1193    }
1194
1195    /* read /proc/cmdline before dropping root */
1196    FILE *cmdline = fopen("/proc/cmdline", "re");
1197    if (cmdline) {
1198        fgets(cmdline_buf, sizeof(cmdline_buf), cmdline);
1199        fclose(cmdline);
1200    }
1201
1202    /* open the vibrator before dropping root */
1203    std::unique_ptr<FILE, int(*)(FILE*)> vibrator(NULL, fclose);
1204    if (do_vibrate) {
1205        vibrator.reset(fopen("/sys/class/timed_output/vibrator/enable", "we"));
1206        if (vibrator) {
1207            vibrate(vibrator.get(), 150);
1208        }
1209    }
1210
1211    if (do_fb && do_early_screenshot) {
1212        if (screenshot_path.empty()) {
1213            // should not have happened
1214            MYLOGE("INTERNAL ERROR: skipping early screenshot because path was not set\n");
1215        } else {
1216            MYLOGI("taking early screenshot\n");
1217            take_screenshot(screenshot_path);
1218            MYLOGI("wrote screenshot: %s\n", screenshot_path.c_str());
1219            if (chown(screenshot_path.c_str(), AID_SHELL, AID_SHELL)) {
1220                MYLOGE("Unable to change ownership of screenshot file %s: %s\n",
1221                        screenshot_path.c_str(), strerror(errno));
1222            }
1223        }
1224    }
1225
1226    if (do_zip_file) {
1227        if (chown(path.c_str(), AID_SHELL, AID_SHELL)) {
1228            MYLOGE("Unable to change ownership of zip file %s: %s\n", path.c_str(), strerror(errno));
1229        }
1230    }
1231
1232    /* collect stack traces from Dalvik and native processes (needs root) */
1233    dump_traces_path = dump_traces();
1234
1235    /* Get the tombstone fds, recovery files, and mount info here while we are running as root. */
1236    get_tombstone_fds(tombstone_data);
1237    add_dir(RECOVERY_DIR, true);
1238    add_mountinfo();
1239
1240    if (!drop_root()) {
1241        return -1;
1242    }
1243
1244    if (is_redirecting) {
1245        redirect_to_file(stderr, const_cast<char*>(log_path.c_str()));
1246        /* TODO: rather than generating a text file now and zipping it later,
1247           it would be more efficient to redirect stdout to the zip entry
1248           directly, but the libziparchive doesn't support that option yet. */
1249        redirect_to_file(stdout, const_cast<char*>(tmp_path.c_str()));
1250    }
1251    // NOTE: there should be no stdout output until now, otherwise it would break the header.
1252    // In particular, DurationReport objects should be created passing 'title, NULL', so their
1253    // duration is logged into MYLOG instead.
1254    print_header(version);
1255
1256    dumpstate(do_early_screenshot ? "": screenshot_path);
1257
1258    /* done */
1259    if (vibrator) {
1260        for (int i = 0; i < 3; i++) {
1261            vibrate(vibrator.get(), 75);
1262            usleep((75 + 50) * 1000);
1263        }
1264    }
1265
1266    /* close output if needed */
1267    if (is_redirecting) {
1268        fclose(stdout);
1269        fclose(stderr);
1270    }
1271
1272    /* rename or zip the (now complete) .tmp file to its final location */
1273    if (use_outfile) {
1274
1275        /* check if user changed the suffix using system properties */
1276        char key[PROPERTY_KEY_MAX];
1277        char value[PROPERTY_VALUE_MAX];
1278        sprintf(key, "dumpstate.%d.name", getpid());
1279        property_get(key, value, "");
1280        bool change_suffix= false;
1281        if (value[0]) {
1282            /* must whitelist which characters are allowed, otherwise it could cross directories */
1283            std::regex valid_regex("^[-_a-zA-Z0-9]+$");
1284            if (std::regex_match(value, valid_regex)) {
1285                change_suffix = true;
1286            } else {
1287                MYLOGE("invalid suffix provided by user: %s\n", value);
1288            }
1289        }
1290        if (change_suffix) {
1291            MYLOGI("changing suffix from %s to %s\n", suffix.c_str(), value);
1292            suffix = value;
1293            if (!screenshot_path.empty()) {
1294                std::string new_screenshot_path =
1295                        bugreport_dir + "/" + base_name + "-" + suffix + ".png";
1296                if (rename(screenshot_path.c_str(), new_screenshot_path.c_str())) {
1297                    MYLOGE("rename(%s, %s): %s\n", screenshot_path.c_str(),
1298                            new_screenshot_path.c_str(), strerror(errno));
1299                } else {
1300                    screenshot_path = new_screenshot_path;
1301                }
1302            }
1303        }
1304
1305        bool do_text_file = true;
1306        if (do_zip_file) {
1307            MYLOGD("Adding text entry to .zip bugreport\n");
1308            if (!finish_zip_file(base_name + "-" + suffix + ".txt", tmp_path, now)) {
1309                MYLOGE("Failed to finish zip file; sending text bugreport instead\n");
1310                do_text_file = true;
1311            } else {
1312                do_text_file = false;
1313            }
1314        }
1315        if (do_text_file) {
1316            MYLOGD("Generating .txt bugreport\n");
1317            path = bugreport_dir + "/" + base_name + "-" + suffix + ".txt";
1318            if (rename(tmp_path.c_str(), path.c_str())) {
1319                MYLOGE("rename(%s, %s): %s\n", tmp_path.c_str(), path.c_str(), strerror(errno));
1320                path.clear();
1321            }
1322        }
1323    }
1324
1325    /* tell activity manager we're done */
1326    if (do_broadcast) {
1327        if (!path.empty()) {
1328            MYLOGI("Final bugreport path: %s\n", path.c_str());
1329            std::vector<std::string> am_args = {
1330                 "--receiver-permission", "android.permission.DUMP", "--receiver-foreground",
1331                 "--ei", "android.intent.extra.ID", std::to_string(id),
1332                 "--ei", "android.intent.extra.PID", std::to_string(getpid()),
1333                 "--es", "android.intent.extra.BUGREPORT", path,
1334                 "--es", "android.intent.extra.DUMPSTATE_LOG", log_path
1335            };
1336            if (do_fb) {
1337                am_args.push_back("--es");
1338                am_args.push_back("android.intent.extra.SCREENSHOT");
1339                am_args.push_back(screenshot_path);
1340            }
1341            if (is_remote_mode) {
1342                am_args.push_back("--es");
1343                am_args.push_back("android.intent.extra.REMOTE_BUGREPORT_HASH");
1344                am_args.push_back(SHA256_file_hash(path));
1345                send_broadcast("android.intent.action.REMOTE_BUGREPORT_FINISHED", am_args);
1346            } else {
1347                send_broadcast("android.intent.action.BUGREPORT_FINISHED", am_args);
1348            }
1349        } else {
1350            MYLOGE("Skipping finished broadcast because bugreport could not be generated\n");
1351        }
1352    }
1353
1354    MYLOGD("Final progress: %d/%d (originally %d)\n", progress, weight_total, WEIGHT_TOTAL);
1355    MYLOGI("done\n");
1356
1357    return 0;
1358}
1359