dumpstate.cpp revision 93d705b6d742e8f00167ff2384e35c2205a6f9da 
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#include <dirent.h>
18#include <errno.h>
19#include <fcntl.h>
20#include <limits.h>
21#include <stdbool.h>
22#include <stdio.h>
23#include <stdlib.h>
24#include <string.h>
25#include <sys/capability.h>
26#include <sys/prctl.h>
27#include <sys/resource.h>
28#include <sys/stat.h>
29#include <sys/time.h>
30#include <sys/wait.h>
31#include <unistd.h>
32
33#include <cutils/properties.h>
34
35#include "private/android_filesystem_config.h"
36
37#define LOG_TAG "dumpstate"
38#include <cutils/log.h>
39
40#include "dumpstate.h"
41
42/* read before root is shed */
43static char cmdline_buf[16384] = "(unknown)";
44static const char *dump_traces_path = NULL;
45
46static char screenshot_path[PATH_MAX] = "";
47
48#define PSTORE_LAST_KMSG "/sys/fs/pstore/console-ramoops"
49
50#define RAFT_DIR "/data/misc/raft/"
51#define TOMBSTONE_DIR "/data/tombstones"
52#define TOMBSTONE_FILE_PREFIX TOMBSTONE_DIR "/tombstone_"
53/* Can accomodate a tombstone number up to 9999. */
54#define TOMBSTONE_MAX_LEN (sizeof(TOMBSTONE_FILE_PREFIX) + 4)
55#define NUM_TOMBSTONES  10
56
57typedef struct {
58  char name[TOMBSTONE_MAX_LEN];
59  int fd;
60} tombstone_data_t;
61
62static tombstone_data_t tombstone_data[NUM_TOMBSTONES];
63
64/* Get the fds of any tombstone that was modified in the last half an hour. */
65static void get_tombstone_fds(tombstone_data_t data[NUM_TOMBSTONES]) {
66    time_t thirty_minutes_ago = time(NULL) - 60*30;
67    for (size_t i = 0; i < NUM_TOMBSTONES; i++) {
68        snprintf(data[i].name, sizeof(data[i].name), "%s%02zu", TOMBSTONE_FILE_PREFIX, i);
69        int fd = TEMP_FAILURE_RETRY(open(data[i].name,
70                                         O_RDONLY | O_CLOEXEC | O_NOFOLLOW | O_NONBLOCK));
71        struct stat st;
72        if (fstat(fd, &st) == 0 && S_ISREG(st.st_mode) &&
73                (time_t) st.st_mtime >= thirty_minutes_ago) {
74            data[i].fd = fd;
75        } else {
76            close(fd);
77            data[i].fd = -1;
78        }
79    }
80}
81
82static void dump_dev_files(const char *title, const char *driverpath, const char *filename)
83{
84    DIR *d;
85    struct dirent *de;
86    char path[PATH_MAX];
87
88    d = opendir(driverpath);
89    if (d == NULL) {
90        return;
91    }
92
93    while ((de = readdir(d))) {
94        if (de->d_type != DT_LNK) {
95            continue;
96        }
97        snprintf(path, sizeof(path), "%s/%s/%s", driverpath, de->d_name, filename);
98        dump_file(title, path);
99    }
100
101    closedir(d);
102}
103
104static bool skip_not_stat(const char *path) {
105    static const char stat[] = "/stat";
106    size_t len = strlen(path);
107    if (path[len - 1] == '/') { /* Directory? */
108        return false;
109    }
110    return strcmp(path + len - sizeof(stat) + 1, stat); /* .../stat? */
111}
112
113static const char mmcblk0[] = "/sys/block/mmcblk0/";
114unsigned long worst_write_perf = 20000; /* in KB/s */
115
116static int dump_stat_from_fd(const char *title __unused, const char *path, int fd) {
117    unsigned long fields[11], read_perf, write_perf;
118    bool z;
119    char *cp, *buffer = NULL;
120    size_t i = 0;
121    FILE *fp = fdopen(fd, "rb");
122    getline(&buffer, &i, fp);
123    fclose(fp);
124    if (!buffer) {
125        return -errno;
126    }
127    i = strlen(buffer);
128    while ((i > 0) && (buffer[i - 1] == '\n')) {
129        buffer[--i] = '\0';
130    }
131    if (!*buffer) {
132        free(buffer);
133        return 0;
134    }
135    z = true;
136    for (cp = buffer, i = 0; i < (sizeof(fields) / sizeof(fields[0])); ++i) {
137        fields[i] = strtol(cp, &cp, 0);
138        if (fields[i] != 0) {
139            z = false;
140        }
141    }
142    if (z) { /* never accessed */
143        free(buffer);
144        return 0;
145    }
146
147    if (!strncmp(path, mmcblk0, sizeof(mmcblk0) - 1)) {
148        path += sizeof(mmcblk0) - 1;
149    }
150
151    printf("%s: %s\n", path, buffer);
152    free(buffer);
153
154    read_perf = 0;
155    if (fields[3]) {
156        read_perf = 512 * fields[2] / fields[3];
157    }
158    write_perf = 0;
159    if (fields[7]) {
160        write_perf = 512 * fields[6] / fields[7];
161    }
162    printf("%s: read: %luKB/s write: %luKB/s\n", path, read_perf, write_perf);
163    if ((write_perf > 1) && (write_perf < worst_write_perf)) {
164        worst_write_perf = write_perf;
165    }
166    return 0;
167}
168
169/* Copied policy from system/core/logd/LogBuffer.cpp */
170
171#define LOG_BUFFER_SIZE (256 * 1024)
172#define LOG_BUFFER_MIN_SIZE (64 * 1024UL)
173#define LOG_BUFFER_MAX_SIZE (256 * 1024 * 1024UL)
174
175static bool valid_size(unsigned long value) {
176    if ((value < LOG_BUFFER_MIN_SIZE) || (LOG_BUFFER_MAX_SIZE < value)) {
177        return false;
178    }
179
180    long pages = sysconf(_SC_PHYS_PAGES);
181    if (pages < 1) {
182        return true;
183    }
184
185    long pagesize = sysconf(_SC_PAGESIZE);
186    if (pagesize <= 1) {
187        pagesize = PAGE_SIZE;
188    }
189
190    // maximum memory impact a somewhat arbitrary ~3%
191    pages = (pages + 31) / 32;
192    unsigned long maximum = pages * pagesize;
193
194    if ((maximum < LOG_BUFFER_MIN_SIZE) || (LOG_BUFFER_MAX_SIZE < maximum)) {
195        return true;
196    }
197
198    return value <= maximum;
199}
200
201static unsigned long property_get_size(const char *key) {
202    unsigned long value;
203    char *cp, property[PROPERTY_VALUE_MAX];
204
205    property_get(key, property, "");
206    value = strtoul(property, &cp, 10);
207
208    switch(*cp) {
209    case 'm':
210    case 'M':
211        value *= 1024;
212    /* FALLTHRU */
213    case 'k':
214    case 'K':
215        value *= 1024;
216    /* FALLTHRU */
217    case '\0':
218        break;
219
220    default:
221        value = 0;
222    }
223
224    if (!valid_size(value)) {
225        value = 0;
226    }
227
228    return value;
229}
230
231/* timeout in ms */
232static unsigned long logcat_timeout(const char *name) {
233    static const char global_tuneable[] = "persist.logd.size"; // Settings App
234    static const char global_default[] = "ro.logd.size";       // BoardConfig.mk
235    char key[PROP_NAME_MAX];
236    unsigned long property_size, default_size;
237
238    default_size = property_get_size(global_tuneable);
239    if (!default_size) {
240        default_size = property_get_size(global_default);
241    }
242
243    snprintf(key, sizeof(key), "%s.%s", global_tuneable, name);
244    property_size = property_get_size(key);
245
246    if (!property_size) {
247        snprintf(key, sizeof(key), "%s.%s", global_default, name);
248        property_size = property_get_size(key);
249    }
250
251    if (!property_size) {
252        property_size = default_size;
253    }
254
255    if (!property_size) {
256        property_size = LOG_BUFFER_SIZE;
257    }
258
259    /* Engineering margin is ten-fold our guess */
260    return 10 * (property_size + worst_write_perf) / worst_write_perf;
261}
262
263/* End copy from system/core/logd/LogBuffer.cpp */
264
265/* dumps the current system state to stdout */
266static void dumpstate() {
267    unsigned long timeout;
268    time_t now = time(NULL);
269    char build[PROPERTY_VALUE_MAX], fingerprint[PROPERTY_VALUE_MAX];
270    char radio[PROPERTY_VALUE_MAX], bootloader[PROPERTY_VALUE_MAX];
271    char network[PROPERTY_VALUE_MAX], date[80];
272    char build_type[PROPERTY_VALUE_MAX];
273
274    property_get("ro.build.display.id", build, "(unknown)");
275    property_get("ro.build.fingerprint", fingerprint, "(unknown)");
276    property_get("ro.build.type", build_type, "(unknown)");
277    property_get("ro.baseband", radio, "(unknown)");
278    property_get("ro.bootloader", bootloader, "(unknown)");
279    property_get("gsm.operator.alpha", network, "(unknown)");
280    strftime(date, sizeof(date), "%Y-%m-%d %H:%M:%S", localtime(&now));
281
282    printf("========================================================\n");
283    printf("== dumpstate: %s\n", date);
284    printf("========================================================\n");
285
286    printf("\n");
287    printf("Build: %s\n", build);
288    printf("Build fingerprint: '%s'\n", fingerprint); /* format is important for other tools */
289    printf("Bootloader: %s\n", bootloader);
290    printf("Radio: %s\n", radio);
291    printf("Network: %s\n", network);
292
293    printf("Kernel: ");
294    dump_file(NULL, "/proc/version");
295    printf("Command line: %s\n", strtok(cmdline_buf, "\n"));
296    printf("\n");
297
298    dump_dev_files("TRUSTY VERSION", "/sys/bus/platform/drivers/trusty", "trusty_version");
299    run_command("UPTIME", 10, "uptime", NULL);
300    dump_files("UPTIME MMC PERF", mmcblk0, skip_not_stat, dump_stat_from_fd);
301    dump_file("MEMORY INFO", "/proc/meminfo");
302    run_command("CPU INFO", 10, "top", "-n", "1", "-d", "1", "-m", "30", "-t", NULL);
303    run_command("PROCRANK", 20, SU_PATH, "root", "procrank", NULL);
304    dump_file("VIRTUAL MEMORY STATS", "/proc/vmstat");
305    dump_file("VMALLOC INFO", "/proc/vmallocinfo");
306    dump_file("SLAB INFO", "/proc/slabinfo");
307    dump_file("ZONEINFO", "/proc/zoneinfo");
308    dump_file("PAGETYPEINFO", "/proc/pagetypeinfo");
309    dump_file("BUDDYINFO", "/proc/buddyinfo");
310    dump_file("FRAGMENTATION INFO", "/d/extfrag/unusable_index");
311
312    dump_file("KERNEL WAKELOCKS", "/proc/wakelocks");
313    dump_file("KERNEL WAKE SOURCES", "/d/wakeup_sources");
314    dump_file("KERNEL CPUFREQ", "/sys/devices/system/cpu/cpu0/cpufreq/stats/time_in_state");
315    dump_file("KERNEL SYNC", "/d/sync");
316
317    run_command("PROCESSES AND THREADS", 10, "ps", "-Z", "-t", "-p", "-P", NULL);
318    run_command("LIBRANK", 10, "librank", NULL);
319
320    do_dmesg();
321
322    run_command("LIST OF OPEN FILES", 10, SU_PATH, "root", "lsof", NULL);
323    for_each_pid(do_showmap, "SMAPS OF ALL PROCESSES");
324    for_each_tid(show_wchan, "BLOCKED PROCESS WAIT-CHANNELS");
325
326    if (screenshot_path[0]) {
327        ALOGI("taking screenshot\n");
328        run_command(NULL, 10, "/system/bin/screencap", "-p", screenshot_path, NULL);
329        ALOGI("wrote screenshot: %s\n", screenshot_path);
330    }
331
332    // dump_file("EVENT LOG TAGS", "/etc/event-log-tags");
333    // calculate timeout
334    timeout = logcat_timeout("main") + logcat_timeout("system") + logcat_timeout("crash");
335    if (timeout < 20000) {
336        timeout = 20000;
337    }
338    run_command("SYSTEM LOG", timeout / 1000, "logcat", "-v", "threadtime",
339                                                        "-v", "printable",
340                                                        "-d",
341                                                        "*:v", NULL);
342    timeout = logcat_timeout("events");
343    if (timeout < 20000) {
344        timeout = 20000;
345    }
346    run_command("EVENT LOG", timeout / 1000, "logcat", "-b", "events",
347                                                       "-v", "threadtime",
348                                                       "-v", "printable",
349                                                       "-d",
350                                                       "*:v", NULL);
351    timeout = logcat_timeout("radio");
352    if (timeout < 20000) {
353        timeout = 20000;
354    }
355    run_command("RADIO LOG", timeout / 1000, "logcat", "-b", "radio",
356                                                       "-v", "threadtime",
357                                                       "-v", "printable",
358                                                       "-d",
359                                                       "*:v", NULL);
360
361    run_command("LOG STATISTICS", 10, "logcat", "-b", "all", "-S", NULL);
362
363    run_command("RAFT LOGS", 300, SU_PATH, "root", "logcompressor", "-r", RAFT_DIR, NULL);
364
365    /* show the traces we collected in main(), if that was done */
366    if (dump_traces_path != NULL) {
367        dump_file("VM TRACES JUST NOW", dump_traces_path);
368    }
369
370    /* only show ANR traces if they're less than 15 minutes old */
371    struct stat st;
372    char anr_traces_path[PATH_MAX];
373    property_get("dalvik.vm.stack-trace-file", anr_traces_path, "");
374    if (!anr_traces_path[0]) {
375        printf("*** NO VM TRACES FILE DEFINED (dalvik.vm.stack-trace-file)\n\n");
376    } else {
377      int fd = TEMP_FAILURE_RETRY(open(anr_traces_path,
378                                       O_RDONLY | O_CLOEXEC | O_NOFOLLOW | O_NONBLOCK));
379      if (fd < 0) {
380          printf("*** NO ANR VM TRACES FILE (%s): %s\n\n", anr_traces_path, strerror(errno));
381      } else {
382          dump_file_from_fd("VM TRACES AT LAST ANR", anr_traces_path, fd);
383      }
384    }
385
386    /* slow traces for slow operations */
387    if (anr_traces_path[0] != 0) {
388        int tail = strlen(anr_traces_path)-1;
389        while (tail > 0 && anr_traces_path[tail] != '/') {
390            tail--;
391        }
392        int i = 0;
393        while (1) {
394            sprintf(anr_traces_path+tail+1, "slow%02d.txt", i);
395            if (stat(anr_traces_path, &st)) {
396                // No traces file at this index, done with the files.
397                break;
398            }
399            dump_file("VM TRACES WHEN SLOW", anr_traces_path);
400            i++;
401        }
402    }
403
404    int dumped = 0;
405    for (size_t i = 0; i < NUM_TOMBSTONES; i++) {
406        if (tombstone_data[i].fd != -1) {
407            dumped = 1;
408            dump_file_from_fd("TOMBSTONE", tombstone_data[i].name, tombstone_data[i].fd);
409            tombstone_data[i].fd = -1;
410        }
411    }
412    if (!dumped) {
413        printf("*** NO TOMBSTONES to dump in %s\n\n", TOMBSTONE_DIR);
414    }
415
416    dump_file("NETWORK DEV INFO", "/proc/net/dev");
417    dump_file("QTAGUID NETWORK INTERFACES INFO", "/proc/net/xt_qtaguid/iface_stat_all");
418    dump_file("QTAGUID NETWORK INTERFACES INFO (xt)", "/proc/net/xt_qtaguid/iface_stat_fmt");
419    dump_file("QTAGUID CTRL INFO", "/proc/net/xt_qtaguid/ctrl");
420    dump_file("QTAGUID STATS INFO", "/proc/net/xt_qtaguid/stats");
421
422    if (!stat(PSTORE_LAST_KMSG, &st)) {
423        /* Also TODO: Make console-ramoops CAP_SYSLOG protected. */
424        dump_file("LAST KMSG", PSTORE_LAST_KMSG);
425    } else {
426        /* TODO: Make last_kmsg CAP_SYSLOG protected. b/5555691 */
427        dump_file("LAST KMSG", "/proc/last_kmsg");
428    }
429
430    /* kernels must set CONFIG_PSTORE_PMSG, slice up pstore with device tree */
431    run_command("LAST LOGCAT", 10, "logcat", "-L",
432                                             "-b", "all",
433                                             "-v", "threadtime",
434                                             "-v", "printable",
435                                             "-d",
436                                             "*:v", NULL);
437
438    /* The following have a tendency to get wedged when wifi drivers/fw goes belly-up. */
439
440    run_command("NETWORK INTERFACES", 10, "ip", "link", NULL);
441
442    run_command("IPv4 ADDRESSES", 10, "ip", "-4", "addr", "show", NULL);
443    run_command("IPv6 ADDRESSES", 10, "ip", "-6", "addr", "show", NULL);
444
445    run_command("IP RULES", 10, "ip", "rule", "show", NULL);
446    run_command("IP RULES v6", 10, "ip", "-6", "rule", "show", NULL);
447
448    dump_route_tables();
449
450    run_command("ARP CACHE", 10, "ip", "-4", "neigh", "show", NULL);
451    run_command("IPv6 ND CACHE", 10, "ip", "-6", "neigh", "show", NULL);
452
453    run_command("IPTABLES", 10, SU_PATH, "root", "iptables", "-L", "-nvx", NULL);
454    run_command("IP6TABLES", 10, SU_PATH, "root", "ip6tables", "-L", "-nvx", NULL);
455    run_command("IPTABLE NAT", 10, SU_PATH, "root", "iptables", "-t", "nat", "-L", "-nvx", NULL);
456    /* no ip6 nat */
457    run_command("IPTABLE RAW", 10, SU_PATH, "root", "iptables", "-t", "raw", "-L", "-nvx", NULL);
458    run_command("IP6TABLE RAW", 10, SU_PATH, "root", "ip6tables", "-t", "raw", "-L", "-nvx", NULL);
459
460    run_command("WIFI NETWORKS", 20,
461            SU_PATH, "root", "wpa_cli", "IFNAME=wlan0", "list_networks", NULL);
462
463#ifdef FWDUMP_bcmdhd
464    run_command("ND OFFLOAD TABLE", 5,
465            SU_PATH, "root", "wlutil", "nd_hostip", NULL);
466
467    run_command("DUMP WIFI INTERNAL COUNTERS (1)", 20,
468            SU_PATH, "root", "wlutil", "counters", NULL);
469
470    run_command("ND OFFLOAD STATUS (1)", 5,
471            SU_PATH, "root", "wlutil", "nd_status", NULL);
472
473#endif
474    dump_file("INTERRUPTS (1)", "/proc/interrupts");
475
476    run_command("NETWORK DIAGNOSTICS", 10, "dumpsys", "connectivity", "--diag", NULL);
477
478#ifdef FWDUMP_bcmdhd
479    run_command("DUMP WIFI STATUS", 20,
480            SU_PATH, "root", "dhdutil", "-i", "wlan0", "dump", NULL);
481
482    run_command("DUMP WIFI INTERNAL COUNTERS (2)", 20,
483            SU_PATH, "root", "wlutil", "counters", NULL);
484
485    run_command("ND OFFLOAD STATUS (2)", 5,
486            SU_PATH, "root", "wlutil", "nd_status", NULL);
487#endif
488    dump_file("INTERRUPTS (2)", "/proc/interrupts");
489
490    print_properties();
491
492    run_command("VOLD DUMP", 10, "vdc", "dump", NULL);
493    run_command("SECURE CONTAINERS", 10, "vdc", "asec", "list", NULL);
494
495    run_command("FILESYSTEMS & FREE SPACE", 10, "df", NULL);
496
497    run_command("LAST RADIO LOG", 10, "parse_radio_log", "/proc/last_radio_log", NULL);
498
499    printf("------ BACKLIGHTS ------\n");
500    printf("LCD brightness=");
501    dump_file(NULL, "/sys/class/leds/lcd-backlight/brightness");
502    printf("Button brightness=");
503    dump_file(NULL, "/sys/class/leds/button-backlight/brightness");
504    printf("Keyboard brightness=");
505    dump_file(NULL, "/sys/class/leds/keyboard-backlight/brightness");
506    printf("ALS mode=");
507    dump_file(NULL, "/sys/class/leds/lcd-backlight/als");
508    printf("LCD driver registers:\n");
509    dump_file(NULL, "/sys/class/leds/lcd-backlight/registers");
510    printf("\n");
511
512    /* Binder state is expensive to look at as it uses a lot of memory. */
513    dump_file("BINDER FAILED TRANSACTION LOG", "/sys/kernel/debug/binder/failed_transaction_log");
514    dump_file("BINDER TRANSACTION LOG", "/sys/kernel/debug/binder/transaction_log");
515    dump_file("BINDER TRANSACTIONS", "/sys/kernel/debug/binder/transactions");
516    dump_file("BINDER STATS", "/sys/kernel/debug/binder/stats");
517    dump_file("BINDER STATE", "/sys/kernel/debug/binder/state");
518
519    printf("========================================================\n");
520    printf("== Board\n");
521    printf("========================================================\n");
522
523    dumpstate_board();
524    printf("\n");
525
526    /* Migrate the ril_dumpstate to a dumpstate_board()? */
527    char ril_dumpstate_timeout[PROPERTY_VALUE_MAX] = {0};
528    property_get("ril.dumpstate.timeout", ril_dumpstate_timeout, "30");
529    if (strnlen(ril_dumpstate_timeout, PROPERTY_VALUE_MAX - 1) > 0) {
530        if (0 == strncmp(build_type, "user", PROPERTY_VALUE_MAX - 1)) {
531            // su does not exist on user builds, so try running without it.
532            // This way any implementations of vril-dump that do not require
533            // root can run on user builds.
534            run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout),
535                    "vril-dump", NULL);
536        } else {
537            run_command("DUMP VENDOR RIL LOGS", atoi(ril_dumpstate_timeout),
538                    SU_PATH, "root", "vril-dump", NULL);
539        }
540    }
541
542    printf("========================================================\n");
543    printf("== Android Framework Services\n");
544    printf("========================================================\n");
545
546    /* the full dumpsys is starting to take a long time, so we need
547       to increase its timeout.  we really need to do the timeouts in
548       dumpsys itself... */
549    run_command("DUMPSYS", 60, "dumpsys", NULL);
550
551    printf("========================================================\n");
552    printf("== Checkins\n");
553    printf("========================================================\n");
554
555    run_command("CHECKIN BATTERYSTATS", 30, "dumpsys", "batterystats", "-c", NULL);
556    run_command("CHECKIN MEMINFO", 30, "dumpsys", "meminfo", "--checkin", NULL);
557    run_command("CHECKIN NETSTATS", 30, "dumpsys", "netstats", "--checkin", NULL);
558    run_command("CHECKIN PROCSTATS", 30, "dumpsys", "procstats", "-c", NULL);
559    run_command("CHECKIN USAGESTATS", 30, "dumpsys", "usagestats", "-c", NULL);
560    run_command("CHECKIN PACKAGE", 30, "dumpsys", "package", "--checkin", NULL);
561
562    printf("========================================================\n");
563    printf("== Running Application Activities\n");
564    printf("========================================================\n");
565
566    run_command("APP ACTIVITIES", 30, "dumpsys", "activity", "all", NULL);
567
568    printf("========================================================\n");
569    printf("== Running Application Services\n");
570    printf("========================================================\n");
571
572    run_command("APP SERVICES", 30, "dumpsys", "activity", "service", "all", NULL);
573
574    printf("========================================================\n");
575    printf("== Running Application Providers\n");
576    printf("========================================================\n");
577
578    run_command("APP SERVICES", 30, "dumpsys", "activity", "provider", "all", NULL);
579
580
581    printf("========================================================\n");
582    printf("== dumpstate: done\n");
583    printf("========================================================\n");
584}
585
586static void usage() {
587    fprintf(stderr, "usage: dumpstate [-b soundfile] [-e soundfile] [-o file [-d] [-p] [-z]] [-s] [-q]\n"
588            "  -o: write to file (instead of stdout)\n"
589            "  -d: append date to filename (requires -o)\n"
590            "  -p: capture screenshot to filename.png (requires -o)\n"
591            "  -s: write output to control socket (for init)\n"
592            "  -b: play sound file instead of vibrate, at beginning of job\n"
593            "  -e: play sound file instead of vibrate, at end of job\n"
594            "  -q: disable vibrate\n"
595            "  -B: send broadcast when finished (requires -o and -p)\n"
596                );
597}
598
599static void sigpipe_handler(int n) {
600    // don't complain to stderr or stdout
601    _exit(EXIT_FAILURE);
602}
603
604static void vibrate(FILE* vibrator, int ms) {
605    fprintf(vibrator, "%d\n", ms);
606    fflush(vibrator);
607}
608
609int main(int argc, char *argv[]) {
610    struct sigaction sigact;
611    int do_add_date = 0;
612    int do_vibrate = 1;
613    char* use_outfile = 0;
614    int use_socket = 0;
615    int do_fb = 0;
616    int do_broadcast = 0;
617
618    if (getuid() != 0) {
619        // Old versions of the adb client would call the
620        // dumpstate command directly. Newer clients
621        // call /system/bin/bugreport instead. If we detect
622        // we're being called incorrectly, then exec the
623        // correct program.
624        return execl("/system/bin/bugreport", "/system/bin/bugreport", NULL);
625    }
626
627    ALOGI("begin\n");
628
629    /* clear SIGPIPE handler */
630    memset(&sigact, 0, sizeof(sigact));
631    sigact.sa_handler = sigpipe_handler;
632    sigaction(SIGPIPE, &sigact, NULL);
633
634    /* set as high priority, and protect from OOM killer */
635    setpriority(PRIO_PROCESS, 0, -20);
636    FILE *oom_adj = fopen("/proc/self/oom_adj", "we");
637    if (oom_adj) {
638        fputs("-17", oom_adj);
639        fclose(oom_adj);
640    }
641
642    /* parse arguments */
643    int c;
644    while ((c = getopt(argc, argv, "dho:svqzpB")) != -1) {
645        switch (c) {
646            case 'd': do_add_date = 1;       break;
647            case 'o': use_outfile = optarg;  break;
648            case 's': use_socket = 1;        break;
649            case 'v': break;  // compatibility no-op
650            case 'q': do_vibrate = 0;        break;
651            case 'p': do_fb = 1;             break;
652            case 'B': do_broadcast = 1;      break;
653            case '?': printf("\n");
654            case 'h':
655                usage();
656                exit(1);
657        }
658    }
659
660    // If we are going to use a socket, do it as early as possible
661    // to avoid timeouts from bugreport.
662    if (use_socket) {
663        redirect_to_socket(stdout, "dumpstate");
664    }
665
666    /* open the vibrator before dropping root */
667    FILE *vibrator = 0;
668    if (do_vibrate) {
669        vibrator = fopen("/sys/class/timed_output/vibrator/enable", "we");
670        if (vibrator) {
671            vibrate(vibrator, 150);
672        }
673    }
674
675    /* read /proc/cmdline before dropping root */
676    FILE *cmdline = fopen("/proc/cmdline", "re");
677    if (cmdline != NULL) {
678        fgets(cmdline_buf, sizeof(cmdline_buf), cmdline);
679        fclose(cmdline);
680    }
681
682    /* collect stack traces from Dalvik and native processes (needs root) */
683    dump_traces_path = dump_traces();
684
685    /* Get the tombstone fds here while we are running as root. */
686    get_tombstone_fds(tombstone_data);
687
688    /* ensure we will keep capabilities when we drop root */
689    if (prctl(PR_SET_KEEPCAPS, 1) < 0) {
690        ALOGE("prctl(PR_SET_KEEPCAPS) failed: %s\n", strerror(errno));
691        return -1;
692    }
693
694    /* switch to non-root user and group */
695    gid_t groups[] = { AID_LOG, AID_SDCARD_R, AID_SDCARD_RW,
696            AID_MOUNT, AID_INET, AID_NET_BW_STATS, AID_READPROC };
697    if (setgroups(sizeof(groups)/sizeof(groups[0]), groups) != 0) {
698        ALOGE("Unable to setgroups, aborting: %s\n", strerror(errno));
699        return -1;
700    }
701    if (setgid(AID_SHELL) != 0) {
702        ALOGE("Unable to setgid, aborting: %s\n", strerror(errno));
703        return -1;
704    }
705    if (setuid(AID_SHELL) != 0) {
706        ALOGE("Unable to setuid, aborting: %s\n", strerror(errno));
707        return -1;
708    }
709
710    struct __user_cap_header_struct capheader;
711    struct __user_cap_data_struct capdata[2];
712    memset(&capheader, 0, sizeof(capheader));
713    memset(&capdata, 0, sizeof(capdata));
714    capheader.version = _LINUX_CAPABILITY_VERSION_3;
715    capheader.pid = 0;
716
717    capdata[CAP_TO_INDEX(CAP_SYSLOG)].permitted = CAP_TO_MASK(CAP_SYSLOG);
718    capdata[CAP_TO_INDEX(CAP_SYSLOG)].effective = CAP_TO_MASK(CAP_SYSLOG);
719    capdata[0].inheritable = 0;
720    capdata[1].inheritable = 0;
721
722    if (capset(&capheader, &capdata[0]) < 0) {
723        ALOGE("capset failed: %s\n", strerror(errno));
724        return -1;
725    }
726
727    /* redirect output if needed */
728    char path[PATH_MAX], tmp_path[PATH_MAX];
729    pid_t gzip_pid = -1;
730
731    if (!use_socket && use_outfile) {
732        strlcpy(path, use_outfile, sizeof(path));
733        if (do_add_date) {
734            char date[80];
735            time_t now = time(NULL);
736            strftime(date, sizeof(date), "-%Y-%m-%d-%H-%M-%S", localtime(&now));
737            strlcat(path, date, sizeof(path));
738        }
739        if (do_fb) {
740            strlcpy(screenshot_path, path, sizeof(screenshot_path));
741            strlcat(screenshot_path, ".png", sizeof(screenshot_path));
742        }
743        strlcat(path, ".txt", sizeof(path));
744        strlcpy(tmp_path, path, sizeof(tmp_path));
745        strlcat(tmp_path, ".tmp", sizeof(tmp_path));
746        redirect_to_file(stdout, tmp_path);
747    }
748
749    dumpstate();
750
751    /* done */
752    if (vibrator) {
753        for (int i = 0; i < 3; i++) {
754            vibrate(vibrator, 75);
755            usleep((75 + 50) * 1000);
756        }
757        fclose(vibrator);
758    }
759
760    /* wait for gzip to finish, otherwise it might get killed when we exit */
761    if (gzip_pid > 0) {
762        fclose(stdout);
763        waitpid(gzip_pid, NULL, 0);
764    }
765
766    /* rename the (now complete) .tmp file to its final location */
767    if (use_outfile && rename(tmp_path, path)) {
768        fprintf(stderr, "rename(%s, %s): %s\n", tmp_path, path, strerror(errno));
769    }
770
771    /* tell activity manager we're done */
772    if (do_broadcast && use_outfile && do_fb) {
773        const char *args[] = { "/system/bin/am", "broadcast", "--user", "0",
774                "-a", "android.intent.action.BUGREPORT_FINISHED",
775                "--es", "android.intent.extra.BUGREPORT", path,
776                "--es", "android.intent.extra.SCREENSHOT", screenshot_path,
777                "--receiver-permission", "android.permission.DUMP", NULL };
778        run_command_always(NULL, 5, args);
779    }
780
781    ALOGI("done\n");
782
783    return 0;
784}
785