mirror of
https://gitlab.com/freepascal.org/lazarus/lazarus.git
synced 2025-04-30 21:43:38 +02:00
1213 lines
42 KiB
ObjectPascal
1213 lines
42 KiB
ObjectPascal
{ $Id: fpdbgwinclasses.pp 43410 2013-11-09 20:34:31Z martin $ }
|
|
{
|
|
---------------------------------------------------------------------------
|
|
fpdbgwinclasses.pp - Native freepascal debugger
|
|
---------------------------------------------------------------------------
|
|
|
|
This unit contains debugger classes for a native freepascal debugger
|
|
|
|
---------------------------------------------------------------------------
|
|
|
|
@created(Sun Feb 9th WET 2014)
|
|
@lastmod($Date: 2013-11-09 21:34:31 +0100 (za, 09 nov 2013) $)
|
|
@author(Joost van der Sluis <joost@@cnoc.nl>)
|
|
|
|
***************************************************************************
|
|
* *
|
|
* This source is free software; you can redistribute it and/or modify *
|
|
* it under the terms of the GNU General Public License as published by *
|
|
* the Free Software Foundation; either version 2 of the License, or *
|
|
* (at your option) any later version. *
|
|
* *
|
|
* This code is distributed in the hope that it will be useful, but *
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of *
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU *
|
|
* General Public License for more details. *
|
|
* *
|
|
* A copy of the GNU General Public License is available on the World *
|
|
* Wide Web at <http://www.gnu.org/copyleft/gpl.html>. You can also *
|
|
* obtain it by writing to the Free Software Foundation, *
|
|
* Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1335, USA. *
|
|
* *
|
|
***************************************************************************
|
|
}
|
|
unit FpDbgWinClasses;
|
|
|
|
{$mode objfpc}{$H+}
|
|
|
|
interface
|
|
|
|
uses
|
|
Classes,
|
|
SysUtils,
|
|
Windows,
|
|
FpDbgUtil,
|
|
FpDbgClasses,
|
|
process,
|
|
FpDbgWinExtra,
|
|
strutils,
|
|
FpDbgInfo,
|
|
FpDbgLoader,
|
|
DbgIntfBaseTypes,
|
|
LazLoggerBase, UTF8Process;
|
|
|
|
type
|
|
|
|
{ TDbgWinThread }
|
|
|
|
TDbgWinThread = class(TDbgThread)
|
|
protected
|
|
FThreadContextChanged: boolean;
|
|
procedure LoadRegisterValues; override;
|
|
public
|
|
procedure SetSingleStep;
|
|
function AddWatchpoint(AnAddr: TDBGPtr): integer; override;
|
|
function RemoveWatchpoint(AnId: integer): boolean; override;
|
|
procedure BeforeContinue; override;
|
|
function ResetInstructionPointerAfterBreakpoint: boolean; override;
|
|
function ReadThreadState: boolean;
|
|
end;
|
|
|
|
|
|
{ TDbgWinBreakpoint }
|
|
|
|
TDbgWinBreakpointEvent = procedure(const ASender: TFpInternalBreakpoint; const AContext: TContext) of object;
|
|
TDbgWinBreakpoint = class(TFpInternalBreakpoint)
|
|
public
|
|
procedure SetBreak; override;
|
|
procedure ResetBreak; override;
|
|
end;
|
|
|
|
{ TDbgWinProcess }
|
|
|
|
TDbgWinProcess = class(TDbgProcess)
|
|
private
|
|
FInfo: TCreateProcessDebugInfo;
|
|
FPauseRequested: boolean;
|
|
FProcProcess: TProcessUTF8;
|
|
FJustStarted: boolean;
|
|
function GetFullProcessImageName(AProcessHandle: THandle): string;
|
|
function GetModuleFileName(AModuleHandle: THandle): string;
|
|
function GetProcFilename(AProcess: TDbgProcess; lpImageName: LPVOID; fUnicode: word; hFile: handle): string;
|
|
procedure LogLastError;
|
|
protected
|
|
function GetHandle: THandle; override;
|
|
function GetLastEventProcessIdentifier: THandle; override;
|
|
procedure InitializeLoaders; override;
|
|
public
|
|
destructor Destroy; override;
|
|
|
|
function ReadData(const AAdress: TDbgPtr; const ASize: Cardinal; out AData): Boolean; override;
|
|
function WriteData(const AAdress: TDbgPtr; const ASize: Cardinal; const AData): Boolean; override;
|
|
function ReadString(const AAdress: TDbgPtr; const AMaxSize: Cardinal; out AData: String): Boolean; override;
|
|
function ReadWString(const AAdress: TDbgPtr; const AMaxSize: Cardinal; out AData: WideString): Boolean; override;
|
|
|
|
procedure Interrupt;
|
|
function HandleDebugEvent(const ADebugEvent: TDebugEvent): Boolean;
|
|
|
|
class function StartInstance(AFileName: string; AParams, AnEnvironment: TStrings; AWorkingDirectory, AConsoleTty: string; AOnLog: TOnLog; ReDirectOutput: boolean): TDbgProcess; override;
|
|
function Continue(AProcess: TDbgProcess; AThread: TDbgThread; SingleStep: boolean): boolean; override;
|
|
function WaitForDebugEvent(out ProcessIdentifier, ThreadIdentifier: THandle): boolean; override;
|
|
function AnalyseDebugEvent(AThread: TDbgThread): TFPDEvent; override;
|
|
function CreateThread(AthreadIdentifier: THandle; out IsMainThread: boolean): TDbgThread; override;
|
|
|
|
procedure StartProcess(const AThreadID: DWORD; const AInfo: TCreateProcessDebugInfo);
|
|
|
|
function GetInstructionPointerRegisterValue: TDbgPtr; override;
|
|
function GetStackBasePointerRegisterValue: TDbgPtr; override;
|
|
function GetStackPointerRegisterValue: TDbgPtr; override;
|
|
function Pause: boolean; override;
|
|
|
|
procedure TerminateProcess; override;
|
|
|
|
function AddrOffset: Int64; override;
|
|
function AddLib(const AInfo: TLoadDLLDebugInfo): TDbgLibrary;
|
|
procedure RemoveLib(const AInfo: TUnloadDLLDebugInfo);
|
|
end;
|
|
|
|
{ tDbgWinLibrary }
|
|
|
|
tDbgWinLibrary = class(TDbgLibrary)
|
|
private
|
|
FInfo: TLoadDLLDebugInfo;
|
|
protected
|
|
procedure InitializeLoaders; override;
|
|
public
|
|
constructor Create(const AProcess: TDbgProcess; const ADefaultName: String;
|
|
const AModuleHandle: THandle; const ABaseAddr: TDbgPtr; AInfo: TLoadDLLDebugInfo);
|
|
end;
|
|
|
|
|
|
procedure RegisterDbgClasses;
|
|
|
|
implementation
|
|
|
|
{$ifdef cpux86_64}
|
|
const
|
|
FLAG_TRACE_BIT = $100;
|
|
{$endif}
|
|
|
|
procedure RegisterDbgClasses;
|
|
begin
|
|
OSDbgClasses.DbgThreadClass:=TDbgWinThread;
|
|
OSDbgClasses.DbgBreakpointClass:=TDbgWinBreakpoint;
|
|
OSDbgClasses.DbgProcessClass:=TDbgWinProcess;
|
|
end;
|
|
|
|
procedure TDbgWinProcess.LogLastError;
|
|
begin
|
|
log('FpDbg-ERROR: %s', [GetLastErrorText], dllDebug);
|
|
end;
|
|
|
|
function QueryFullProcessImageName(hProcess:HANDLE; dwFlags: DWord; lpExeName:LPWSTR; var lpdwSize:DWORD):BOOL; stdcall; external 'kernel32' name 'QueryFullProcessImageNameW';
|
|
|
|
function TDbgWinProcess.GetFullProcessImageName(AProcessHandle: THandle): string;
|
|
var
|
|
u: UnicodeString;
|
|
len: DWORD;
|
|
begin
|
|
len := MAX_PATH;
|
|
SetLength(u, len);
|
|
if QueryFullProcessImageName(AProcessHandle, 0, @u[1], len)
|
|
then begin
|
|
SetLength(u, len);
|
|
Result:=UTF8Encode(u);
|
|
end else begin
|
|
Result := '';
|
|
LogLastError;
|
|
end;
|
|
end;
|
|
|
|
function TDbgWinProcess.GetModuleFileName(AModuleHandle: THandle): string;
|
|
var
|
|
u: UnicodeString;
|
|
s: string;
|
|
len: Integer;
|
|
hMod: THandle;
|
|
_GetFinalPathNameByHandle: function(hFile: HANDLE; lpFilename:LPWSTR; cchFilePath, dwFlags: DWORD):DWORD; stdcall;
|
|
begin
|
|
result := '';
|
|
|
|
// normally you would load a lib, but since kernel32 is
|
|
// always loaded we can use this (and we don't have to free it
|
|
hMod := GetModuleHandle(kernel32);
|
|
if hMod = 0 then Exit; //????
|
|
|
|
// GetFinalPathNameByHandle is only available on Windows Vista / Server 2008
|
|
_GetFinalPathNameByHandle := nil;
|
|
pointer(_GetFinalPathNameByHandle) := GetProcAddress(hMod, 'GetFinalPathNameByHandleW');
|
|
if assigned(_GetFinalPathNameByHandle) then begin
|
|
SetLength(u, MAX_PATH);
|
|
|
|
len := _GetFinalPathNameByHandle(AModuleHandle, @u[1], MAX_PATH, 0);
|
|
s:='';
|
|
if len > 0
|
|
then begin
|
|
SetLength(u, len - 1);
|
|
if (u<>'') and (u[length(u)]=#0) then
|
|
begin
|
|
// On some older Windows versions there's a bug in GetFinalPathNameByHandleW,
|
|
// which leads to a trailing #0.
|
|
Delete(u,length(u),1);
|
|
end;
|
|
s:=UTF8Encode(u);
|
|
end else begin
|
|
u := '';
|
|
LogLastError;
|
|
end;
|
|
// Remove the \\?\ prefix
|
|
Delete(S,1,4);
|
|
result := S;
|
|
end;
|
|
end;
|
|
|
|
function TDbgWinProcess.GetProcFilename(AProcess: TDbgProcess; lpImageName: LPVOID; fUnicode: word; hFile: handle): string;
|
|
var
|
|
NamePtr: TDbgPtr;
|
|
S: String;
|
|
W: WideString;
|
|
begin
|
|
S := '';
|
|
if (lpImageName<>nil) and AProcess.ReadOrdinal(TDbgPtr(lpImageName), NamePtr)
|
|
then begin
|
|
if fUnicode <> 0
|
|
then begin
|
|
if AProcess.ReadWString(NamePtr, MAX_PATH, W)
|
|
then S := W;
|
|
end
|
|
else begin
|
|
AProcess.ReadString(NamePtr, MAX_PATH, S);
|
|
end;
|
|
end;
|
|
|
|
if S = ''
|
|
then begin
|
|
if hFile=0 then
|
|
S := GetFullProcessImageName(AProcess.Handle)
|
|
else
|
|
S := GetModuleFileName(hFile);
|
|
end;
|
|
result := S;
|
|
end;
|
|
|
|
{ tDbgWinLibrary }
|
|
|
|
procedure tDbgWinLibrary.InitializeLoaders;
|
|
begin
|
|
LoaderList.Add(TDbgImageLoader.Create(FInfo.hFile));
|
|
end;
|
|
|
|
constructor tDbgWinLibrary.Create(const AProcess: TDbgProcess;
|
|
const ADefaultName: String; const AModuleHandle: THandle;
|
|
const ABaseAddr: TDbgPtr; AInfo: TLoadDLLDebugInfo);
|
|
var
|
|
S: String;
|
|
begin
|
|
inherited Create(AProcess, ADefaultName, AModuleHandle, ABaseAddr);
|
|
FInfo := AInfo;
|
|
|
|
s := TDbgWinProcess(AProcess).GetProcFilename(AProcess, AInfo.lpImageName, AInfo.fUnicode, AInfo.hFile);
|
|
if s <> ''
|
|
then SetFileName(s);
|
|
|
|
LoadInfo;
|
|
end;
|
|
|
|
{ TDbgWinProcess }
|
|
|
|
function TDbgWinProcess.GetHandle: THandle;
|
|
begin
|
|
Result:=FInfo.hProcess;
|
|
end;
|
|
|
|
function TDbgWinProcess.GetLastEventProcessIdentifier: THandle;
|
|
begin
|
|
Result:= MDebugEvent.LoadDll.hFile;
|
|
end;
|
|
|
|
procedure TDbgWinProcess.InitializeLoaders;
|
|
begin
|
|
LoaderList.Add(TDbgImageLoader.Create(FInfo.hFile));
|
|
end;
|
|
|
|
destructor TDbgWinProcess.Destroy;
|
|
begin
|
|
FInfo.hProcess:=0;
|
|
FProcProcess.Free;
|
|
inherited Destroy;
|
|
end;
|
|
|
|
function TDbgWinProcess.ReadData(const AAdress: TDbgPtr; const ASize: Cardinal; out AData): Boolean;
|
|
var
|
|
BytesRead: PtrUInt;
|
|
begin
|
|
Result := ReadProcessMemory(Handle, Pointer(PtrUInt(AAdress)), @AData, ASize, BytesRead) and (BytesRead = ASize);
|
|
|
|
if not Result then LogLastError;
|
|
MaskBreakpointsInReadData(AAdress, ASize, AData);
|
|
end;
|
|
|
|
function TDbgWinProcess.WriteData(const AAdress: TDbgPtr; const ASize: Cardinal; const AData): Boolean;
|
|
var
|
|
BytesWritten: PtrUInt;
|
|
begin
|
|
Result := WriteProcessMemory(Handle, Pointer(PtrUInt(AAdress)), @AData, ASize, BytesWritten) and (BytesWritten = ASize);
|
|
|
|
if not Result then LogLastError;
|
|
end;
|
|
|
|
function TDbgWinProcess.ReadString(const AAdress: TDbgPtr; const AMaxSize: Cardinal; out AData: String): Boolean;
|
|
var
|
|
BytesRead: PtrUInt;
|
|
buf: array of Char;
|
|
begin
|
|
AData := '';
|
|
SetLength(buf, AMaxSize + 1);
|
|
Result := ReadProcessMemory(Handle, Pointer(PtrUInt(AAdress)), @Buf[0], AMaxSize, BytesRead);
|
|
if not Result then Exit;
|
|
if BytesRead < AMaxSize
|
|
then Buf[BytesRead] := #0
|
|
else Buf[AMaxSize] := #0;
|
|
AData := PChar(@Buf[0]);
|
|
end;
|
|
|
|
function TDbgWinProcess.ReadWString(const AAdress: TDbgPtr; const AMaxSize: Cardinal; out AData: WideString): Boolean;
|
|
var
|
|
BytesRead: PtrUInt;
|
|
buf: array of WChar;
|
|
begin
|
|
AData := '';
|
|
SetLength(buf, AMaxSize + 1);
|
|
Result := ReadProcessMemory(Handle, Pointer(PtrUInt(AAdress)), @Buf[0], SizeOf(WChar) * AMaxSize, BytesRead);
|
|
if not Result then Exit;
|
|
BytesRead := BytesRead div SizeOf(WChar);
|
|
if BytesRead < AMaxSize
|
|
then Buf[BytesRead] := #0
|
|
else Buf[AMaxSize] := #0;
|
|
AData := PWChar(@Buf[0]);
|
|
end;
|
|
|
|
procedure TDbgWinProcess.Interrupt;
|
|
var
|
|
_UC: record
|
|
C: TContext;
|
|
D: array[1..16] of Byte;
|
|
end;
|
|
Context: PContext;
|
|
begin
|
|
// Interrupting is implemented by suspending the thread and set DB0 to the
|
|
// (to be) executed EIP. When the thread is resumed, it will generate a break
|
|
// Single stepping doesn't work in all cases.
|
|
|
|
// A context needs to be aligned to 16 bytes. Unfortunately, the compiler has
|
|
// no directive for this, so align it somewhere in our "reserved" memory
|
|
Context := AlignPtr(@_UC, $10);
|
|
SuspendThread(FInfo.hThread);
|
|
try
|
|
Context^.ContextFlags := CONTEXT_CONTROL or CONTEXT_DEBUG_REGISTERS;
|
|
if not GetThreadContext(FInfo.hThread, Context^)
|
|
then begin
|
|
Log('Proces %u interrupt: Unable to get context', [ProcessID]);
|
|
Exit;
|
|
end;
|
|
|
|
Context^.ContextFlags := CONTEXT_DEBUG_REGISTERS;
|
|
{$ifdef cpui386}
|
|
Context^.Dr0 := Context^.Eip;
|
|
{$else}
|
|
Context^.Dr0 := Context^.Rip;
|
|
{$endif}
|
|
Context^.Dr7 := (Context^.Dr7 and $FFF0FFFF) or $1;
|
|
|
|
if not SetThreadContext(FInfo.hThread, Context^)
|
|
then begin
|
|
Log('Proces %u interrupt: Unable to set context', [ProcessID]);
|
|
Exit;
|
|
end;
|
|
finally
|
|
ResumeTHread(FInfo.hThread);
|
|
end;
|
|
end;
|
|
|
|
{ ------------------------------------------------------------------
|
|
HandleDebugEvent
|
|
|
|
Result: True if the event was triggered internally
|
|
The callee should continue the process
|
|
------------------------------------------------------------------ }
|
|
function TDbgWinProcess.HandleDebugEvent(const ADebugEvent: TDebugEvent): Boolean;
|
|
|
|
function DoSingleStep: Boolean;
|
|
var
|
|
_UC: record
|
|
C: TContext;
|
|
D: array[1..16] of Byte;
|
|
end;
|
|
Context: PContext;
|
|
begin
|
|
Result := False;
|
|
// check if we are interupting
|
|
Context := AlignPtr(@_UC, $10);
|
|
Context^.ContextFlags := CONTEXT_DEBUG_REGISTERS;
|
|
if GetThreadContext(FInfo.hThread, Context^)
|
|
then begin
|
|
if Context^.Dr6 and 1 <> 0
|
|
then begin
|
|
// interrupt !
|
|
// disable break.
|
|
Context^.Dr7 := Context^.Dr7 and not $1;
|
|
Context^.Dr0 := 0;
|
|
if not SetThreadContext(FInfo.hThread, Context^)
|
|
then begin
|
|
// Heeellppp!!
|
|
Log('Thread %u: Unable to reset BR0', [ADebugEvent.dwThreadId]);
|
|
end;
|
|
// check if we are also singlestepping
|
|
// if not, then exit, else proceed to next check
|
|
if Context^.Dr6 and $40 = 0
|
|
then Exit;
|
|
end;
|
|
end
|
|
else begin
|
|
// if we can not get the context, we probable weren't able to set it either
|
|
Log('Thread %u: Unable to get context', [ADebugEvent.dwThreadId]);
|
|
end;
|
|
|
|
// check if we are single stepping ourself
|
|
if FCurrentBreakpoint = nil then Exit;
|
|
|
|
FCurrentBreakpoint.SetBreak;
|
|
FCurrentBreakpoint := nil;
|
|
Result := FReEnableBreakStep;
|
|
FReEnableBreakStep := False;
|
|
end;
|
|
|
|
begin
|
|
Result := False;
|
|
case ADebugEvent.dwDebugEventCode of
|
|
EXIT_THREAD_DEBUG_EVENT: begin
|
|
RemoveThread(ADebugEvent.dwThreadId);
|
|
end;
|
|
LOAD_DLL_DEBUG_EVENT: begin
|
|
AddLib(ADebugEvent.LoadDll);
|
|
end;
|
|
UNLOAD_DLL_DEBUG_EVENT: begin
|
|
RemoveLib(ADebugEvent.UnloadDll);
|
|
end;
|
|
end;
|
|
end;
|
|
|
|
class function TDbgWinProcess.StartInstance(AFileName: string; AParams, AnEnvironment: TStrings; AWorkingDirectory, AConsoleTty: string;
|
|
AOnLog: TOnLog; ReDirectOutput: boolean): TDbgProcess;
|
|
var
|
|
AProcess: TProcessUTF8;
|
|
begin
|
|
result := nil;
|
|
AProcess := TProcessUTF8.Create(nil);
|
|
try
|
|
AProcess.Options:=[poDebugProcess, poNewProcessGroup];
|
|
AProcess.Executable:=AFilename;
|
|
AProcess.Parameters:=AParams;
|
|
AProcess.Environment:=AnEnvironment;
|
|
AProcess.CurrentDirectory:=AWorkingDirectory;
|
|
AProcess.Execute;
|
|
|
|
result := TDbgWinProcess.Create(AFileName, AProcess.ProcessID, AProcess.ThreadID, AOnLog);
|
|
TDbgWinProcess(result).FProcProcess := AProcess;
|
|
except
|
|
on E: Exception do
|
|
begin
|
|
{$ifdef cpui386}
|
|
if (E is EProcess) and (GetLastError=50) then
|
|
begin
|
|
AOnLog(Format('Failed to start process "%s". Note that on Windows it is not possible to debug a 64-bit application with a 32-bit debugger.'+sLineBreak+'Errormessage: "%s".',[AFileName, E.Message]), dllInfo);
|
|
end
|
|
else
|
|
{$endif i386}
|
|
AOnLog(Format('Failed to start process "%s". Errormessage: "%s".',[AFileName, E.Message]), dllInfo);
|
|
AProcess.Free;
|
|
end;
|
|
end;
|
|
end;
|
|
|
|
|
|
function TDbgWinProcess.Continue(AProcess: TDbgProcess; AThread: TDbgThread;
|
|
SingleStep: boolean): boolean;
|
|
begin
|
|
if assigned(AThread) then
|
|
begin
|
|
if not FThreadMap.HasId(AThread.ID) then begin
|
|
AThread.Free;
|
|
end else begin
|
|
AThread.NextIsSingleStep:=SingleStep;
|
|
if SingleStep or assigned(FCurrentBreakpoint) then
|
|
TDbgWinThread(AThread).SetSingleStep;
|
|
AThread.BeforeContinue;
|
|
end;
|
|
end;
|
|
|
|
case MDebugEvent.Exception.ExceptionRecord.ExceptionCode of
|
|
EXCEPTION_BREAKPOINT,
|
|
EXCEPTION_SINGLE_STEP: begin
|
|
Windows.ContinueDebugEvent(MDebugEvent.dwProcessId, MDebugEvent.dwThreadId, DBG_CONTINUE);
|
|
end
|
|
else
|
|
Windows.ContinueDebugEvent(MDebugEvent.dwProcessId, MDebugEvent.dwThreadId, DBG_EXCEPTION_NOT_HANDLED);
|
|
end;
|
|
result := true;
|
|
end;
|
|
|
|
function TDbgWinProcess.WaitForDebugEvent(out ProcessIdentifier, ThreadIdentifier: THandle): boolean;
|
|
begin
|
|
result := Windows.WaitForDebugEvent(MDebugEvent, INFINITE);
|
|
ProcessIdentifier:=MDebugEvent.dwProcessId;
|
|
ThreadIdentifier:=MDebugEvent.dwThreadId;
|
|
end;
|
|
|
|
function TDbgWinProcess.AnalyseDebugEvent(AThread: TDbgThread): TFPDEvent;
|
|
|
|
procedure HandleException(const AEvent: TDebugEvent);
|
|
const
|
|
PARAMCOLS = 12 - SizeOf(Pointer);
|
|
var
|
|
Info0: QWORD;
|
|
Info1: QWORD;
|
|
Info1Str: String;
|
|
ExInfo32: TExceptionDebugInfo32 absolute AEvent.Exception;
|
|
ExInfo64: TExceptionDebugInfo64 absolute AEvent.Exception;
|
|
begin
|
|
// Kept the debug-output as comments, since they provide deeper information
|
|
// on how to interprete the exception-information.
|
|
{
|
|
if AEvent.Exception.dwFirstChance = 0
|
|
then DebugLn('Exception: ')
|
|
else DebugLn('First chance exception: ');
|
|
}
|
|
// in both 32 and 64 case is the exceptioncode the first, so no difference
|
|
case AEvent.Exception.ExceptionRecord.ExceptionCode of
|
|
EXCEPTION_ACCESS_VIOLATION : ExceptionClass:='ACCESS VIOLATION';
|
|
EXCEPTION_ARRAY_BOUNDS_EXCEEDED : ExceptionClass:='ARRAY BOUNDS EXCEEDED';
|
|
EXCEPTION_BREAKPOINT : ExceptionClass:='BREAKPOINT';
|
|
EXCEPTION_DATATYPE_MISALIGNMENT : ExceptionClass:='DATATYPE MISALIGNMENT';
|
|
EXCEPTION_FLT_DENORMAL_OPERAND : ExceptionClass:='FLT DENORMAL OPERAND';
|
|
EXCEPTION_FLT_DIVIDE_BY_ZERO : ExceptionClass:='FLT DIVIDE BY ZERO';
|
|
EXCEPTION_FLT_INEXACT_RESULT : ExceptionClass:='FLT INEXACT RESULT';
|
|
EXCEPTION_FLT_INVALID_OPERATION : ExceptionClass:='FLT INVALID OPERATION';
|
|
EXCEPTION_FLT_OVERFLOW : ExceptionClass:='FLT OVERFLOW';
|
|
EXCEPTION_FLT_STACK_CHECK : ExceptionClass:='FLT STACK CHECK';
|
|
EXCEPTION_FLT_UNDERFLOW : ExceptionClass:='FLT UNDERFLOW';
|
|
EXCEPTION_ILLEGAL_INSTRUCTION : ExceptionClass:='ILLEGAL INSTRUCTION';
|
|
EXCEPTION_IN_PAGE_ERROR : ExceptionClass:='IN PAGE ERROR';
|
|
EXCEPTION_INT_DIVIDE_BY_ZERO : ExceptionClass:='INT DIVIDE BY ZERO';
|
|
EXCEPTION_INT_OVERFLOW : ExceptionClass:='INT OVERFLOW';
|
|
EXCEPTION_INVALID_DISPOSITION : ExceptionClass:='INVALID DISPOSITION';
|
|
EXCEPTION_INVALID_HANDLE : ExceptionClass:='INVALID HANDLE';
|
|
EXCEPTION_NONCONTINUABLE_EXCEPTION : ExceptionClass:='NONCONTINUABLE EXCEPTION';
|
|
EXCEPTION_POSSIBLE_DEADLOCK : ExceptionClass:='POSSIBLE DEADLOCK';
|
|
EXCEPTION_PRIV_INSTRUCTION : ExceptionClass:='PRIV INSTRUCTION';
|
|
EXCEPTION_SINGLE_STEP : ExceptionClass:='SINGLE STEP';
|
|
EXCEPTION_STACK_OVERFLOW : ExceptionClass:='STACK OVERFLOW';
|
|
|
|
// add some status - don't know if we can get them here
|
|
{
|
|
DBG_EXCEPTION_NOT_HANDLED : DebugLn('DBG_EXCEPTION_NOT_HANDLED');
|
|
STATUS_GUARD_PAGE_VIOLATION : DebugLn('STATUS_GUARD_PAGE_VIOLATION');
|
|
STATUS_NO_MEMORY : DebugLn('STATUS_NO_MEMORY');
|
|
STATUS_CONTROL_C_EXIT : DebugLn('STATUS_CONTROL_C_EXIT');
|
|
STATUS_FLOAT_MULTIPLE_FAULTS : DebugLn('STATUS_FLOAT_MULTIPLE_FAULTS');
|
|
STATUS_FLOAT_MULTIPLE_TRAPS : DebugLn('STATUS_FLOAT_MULTIPLE_TRAPS');
|
|
STATUS_REG_NAT_CONSUMPTION : DebugLn('STATUS_REG_NAT_CONSUMPTION');
|
|
STATUS_SXS_EARLY_DEACTIVATION : DebugLn('STATUS_SXS_EARLY_DEACTIVATION');
|
|
STATUS_SXS_INVALID_DEACTIVATION : DebugLn('STATUS_SXS_INVALID_DEACTIVATION');
|
|
}
|
|
else
|
|
ExceptionClass := 'Unknown exception code $' + IntToHex(ExInfo32.ExceptionRecord.ExceptionCode, 8);
|
|
{
|
|
DebugLn(' [');
|
|
case ExInfo32.ExceptionRecord.ExceptionCode and $C0000000 of
|
|
STATUS_SEVERITY_SUCCESS : DebugLn('SEVERITY_ERROR');
|
|
STATUS_SEVERITY_INFORMATIONAL : DebugLn('SEVERITY_ERROR');
|
|
STATUS_SEVERITY_WARNING : DebugLn('SEVERITY_WARNING');
|
|
STATUS_SEVERITY_ERROR : DebugLn('SEVERITY_ERROR');
|
|
end;
|
|
if ExInfo32.ExceptionRecord.ExceptionCode and $20000000 <> 0
|
|
then DebugLn (' Customer');
|
|
if ExInfo32.ExceptionRecord.ExceptionCode and $10000000 <> 0
|
|
then DebugLn (' Reserved');
|
|
case (ExInfo32.ExceptionRecord.ExceptionCode and $0FFF0000) shr 16 of
|
|
FACILITY_DEBUGGER : DebugLn('FACILITY_DEBUGGER');
|
|
FACILITY_RPC_RUNTIME : DebugLn('FACILITY_RPC_RUNTIME');
|
|
FACILITY_RPC_STUBS : DebugLn('FACILITY_RPC_STUBS');
|
|
FACILITY_IO_ERROR_CODE : DebugLn('FACILITY_IO_ERROR_CODE');
|
|
FACILITY_TERMINAL_SERVER : DebugLn('FACILITY_TERMINAL_SERVER');
|
|
FACILITY_USB_ERROR_CODE : DebugLn('FACILITY_USB_ERROR_CODE');
|
|
FACILITY_HID_ERROR_CODE : DebugLn('FACILITY_HID_ERROR_CODE');
|
|
FACILITY_FIREWIRE_ERROR_CODE : DebugLn('FACILITY_FIREWIRE_ERROR_CODE');
|
|
FACILITY_CLUSTER_ERROR_CODE : DebugLn('FACILITY_CLUSTER_ERROR_CODE');
|
|
FACILITY_ACPI_ERROR_CODE : DebugLn('FACILITY_ACPI_ERROR_CODE');
|
|
FACILITY_SXS_ERROR_CODE : DebugLn('FACILITY_SXS_ERROR_CODE');
|
|
else
|
|
DebugLn(' Facility: $', IntToHex((ExInfo32.ExceptionRecord.ExceptionCode and $0FFF0000) shr 16, 3));
|
|
end;
|
|
DebugLn(' Code: $', IntToHex((ExInfo32.ExceptionRecord.ExceptionCode and $0000FFFF), 4));
|
|
}
|
|
end;
|
|
ExceptionClass:='External: '+ExceptionClass;
|
|
ExceptionMessage:='';
|
|
{
|
|
if GMode = dm32
|
|
then Info0 := PtrUInt(ExInfo32.ExceptionRecord.ExceptionAddress)
|
|
else Info0 := PtrUInt(ExInfo64.ExceptionRecord.ExceptionAddress);
|
|
DebugLn(' at: ', FormatAddress(Info0));
|
|
DebugLn(' Flags:', Format('%x', [AEvent.Exception.ExceptionRecord.ExceptionFlags]), ' [');
|
|
|
|
if AEvent.Exception.ExceptionRecord.ExceptionFlags = 0
|
|
then DebugLn('Continuable')
|
|
else DebugLn('Not continuable');
|
|
DebugLn(']');
|
|
if GMode = dm32
|
|
then DebugLn(' ParamCount:', IntToStr(ExInfo32.ExceptionRecord.NumberParameters))
|
|
else DebugLn(' ParamCount:', IntToStr(ExInfo64.ExceptionRecord.NumberParameters));
|
|
}
|
|
case AEvent.Exception.ExceptionRecord.ExceptionCode of
|
|
EXCEPTION_ACCESS_VIOLATION: begin
|
|
if GMode = dm32
|
|
then begin
|
|
Info0 := ExInfo32.ExceptionRecord.ExceptionInformation[0];
|
|
Info1 := ExInfo32.ExceptionRecord.ExceptionInformation[1];
|
|
end
|
|
else begin
|
|
Info0 := ExInfo64.ExceptionRecord.ExceptionInformation[0];
|
|
Info1 := ExInfo64.ExceptionRecord.ExceptionInformation[1];
|
|
end;
|
|
Info1Str := FormatAddress(Info1);
|
|
|
|
case Info0 of
|
|
EXCEPTION_READ_FAULT: ExceptionMessage := 'Access violation reading from address ' + Info1Str +'.';
|
|
EXCEPTION_WRITE_FAULT: ExceptionMessage := 'Access violation writing to address ' + Info1Str +'.';
|
|
EXCEPTION_EXECUTE_FAULT: ExceptionMessage := 'Access violation executing address ' + Info1Str +'.';
|
|
end;
|
|
end;
|
|
end;
|
|
{
|
|
DebugLn(' Info: ');
|
|
for n := 0 to EXCEPTION_MAXIMUM_PARAMETERS - 1 do
|
|
begin
|
|
if GMode = dm32
|
|
then Info0 := ExInfo32.ExceptionRecord.ExceptionInformation[n]
|
|
else Info0 := ExInfo64.ExceptionRecord.ExceptionInformation[n];
|
|
DebugLn(IntToHex(Info0, DBGPTRSIZE[GMode] * 2), ' ');
|
|
if n and (PARAMCOLS - 1) = (PARAMCOLS - 1)
|
|
then begin
|
|
DebugLn;
|
|
DebugLn(' ');
|
|
end;
|
|
end;
|
|
DebugLn('');
|
|
}
|
|
end;
|
|
|
|
procedure DumpEvent(const AEvent: String);
|
|
var
|
|
f: Cardinal;
|
|
n: integer;
|
|
begin
|
|
DebugLn('===');
|
|
DebugLn(AEvent);
|
|
DebugLn('---');
|
|
DebugLn('Process ID: '+ IntToSTr(MDebugEvent.dwProcessId));
|
|
DebugLn('Thread ID: '+ IntToStr(MDebugEvent.dwThreadId));
|
|
|
|
if AThread = nil then Exit;
|
|
|
|
{$PUSH}{$R-}
|
|
{$ifdef cpui386}
|
|
with GCurrentContext^ do DebugLn(Format('DS: 0x%x, ES: 0x%x, FS: 0x%x, GS: 0x%x', [SegDs, SegEs, SegFs, SegGs]));
|
|
with GCurrentContext^ do DebugLn(Format('EAX: 0x%x, EBX: 0x%x, ECX: 0x%x, EDX: 0x%x, EDI: 0x%x, ESI: 0x%x', [Eax, Ebx, Ecx, Edx, Edi, Esi]));
|
|
with GCurrentContext^ do DebugLn(Format('CS: 0x%x, SS: 0x%x, EBP: 0x%x, EIP: 0x%x, ESP: 0x%x, EFlags: 0x%x [', [SegCs, SegSs, Ebp, Eip, Esp, EFlags]));
|
|
{$else}
|
|
with GCurrentContext^ do DebugLn(Format('SegDS: 0x%4.4x, SegES: 0x%4.4x, SegFS: 0x%4.4x, SegGS: 0x%4.4x', [SegDs, SegEs, SegFs, SegGs]));
|
|
with GCurrentContext^ do DebugLn(Format('RAX: 0x%16.16x, RBX: 0x%16.16x, RCX: 0x%16.16x, RDX: 0x%16.16x, RDI: 0x%16.16x, RSI: 0x%16.16x, R9: 0x%16.16x, R10: 0x%16.16x, R11: 0x%16.16x, R12: 0x%16.16x, R13: 0x%16.16x, R14: 0x%16.16x, R15: 0x%16.16x', [Rax, Rbx, Rcx, Rdx, Rdi, Rsi, R9, R10, R11, R12, R13, R14, R15]));
|
|
with GCurrentContext^ do DebugLn(Format('SegCS: 0x%4.4x, SegSS: 0x%4.4x, RBP: 0x%16.16x, RIP: 0x%16.16x, RSP: 0x%16.16x, EFlags: 0x%8.8x [', [SegCs, SegSs, Rbp, Rip, Rsp, EFlags]));
|
|
{$endif}
|
|
// luckely flag and debug registers are named the same
|
|
with GCurrentContext^ do
|
|
begin
|
|
if EFlags and (1 shl 0) <> 0 then DebugLn('CF ');
|
|
if EFlags and (1 shl 2) <> 0 then DebugLn('PF ');
|
|
if EFlags and (1 shl 4) <> 0 then DebugLn('AF ');
|
|
if EFlags and (1 shl 6) <> 0 then DebugLn('ZF ');
|
|
if EFlags and (1 shl 7) <> 0 then DebugLn('SF ');
|
|
if EFlags and (1 shl 8) <> 0 then DebugLn('TF ');
|
|
if EFlags and (1 shl 9) <> 0 then DebugLn('IF ');
|
|
if EFlags and (1 shl 10) <> 0 then DebugLn('DF ');
|
|
if EFlags and (1 shl 11) <> 0 then DebugLn('OF ');
|
|
if (EFlags shr 12) and 3 <> 0 then DebugLn('IOPL=', IntToSTr((EFlags shr 12) and 3));
|
|
if EFlags and (1 shl 14) <> 0 then DebugLn('NT ');
|
|
if EFlags and (1 shl 16) <> 0 then DebugLn('RF ');
|
|
if EFlags and (1 shl 17) <> 0 then DebugLn('VM ');
|
|
if EFlags and (1 shl 18) <> 0 then DebugLn('AC ');
|
|
if EFlags and (1 shl 19) <> 0 then DebugLn('VIF ');
|
|
if EFlags and (1 shl 20) <> 0 then DebugLn('VIP ');
|
|
if EFlags and (1 shl 21) <> 0 then DebugLn('ID ');
|
|
DebugLn(']');
|
|
|
|
DebugLn(Format('DR0: 0x%x, DR1: 0x%x, DR2: 0x%x, DR3: 0x%x', [Dr0, Dr1, Dr2, Dr3]));
|
|
DebugLn(' DR6: 0x', IntToHex(Dr6, SizeOf(Pointer) * 2), ' [');
|
|
if Dr6 and $0001 <> 0 then DebugLn('B0 ');
|
|
if Dr6 and $0002 <> 0 then DebugLn('B1 ');
|
|
if Dr6 and $0004 <> 0 then DebugLn('B2 ');
|
|
if Dr6 and $0008 <> 0 then DebugLn('B3 ');
|
|
if Dr6 and $2000 <> 0 then DebugLn('BD ');
|
|
if Dr6 and $4000 <> 0 then DebugLn('BS ');
|
|
if Dr6 and $8000 <> 0 then DebugLn('BT ');
|
|
DebugLn('] DR7: 0x', IntToHex(Dr7, SizeOf(Pointer) * 2), ' [');
|
|
if Dr7 and $01 <> 0 then DebugLn('L0 ');
|
|
if Dr7 and $02 <> 0 then DebugLn('G0 ');
|
|
if Dr7 and $04 <> 0 then DebugLn('L1 ');
|
|
if Dr7 and $08 <> 0 then DebugLn('G1 ');
|
|
if Dr7 and $10 <> 0 then DebugLn('L2 ');
|
|
if Dr7 and $20 <> 0 then DebugLn('G2 ');
|
|
if Dr7 and $40 <> 0 then DebugLn('L3 ');
|
|
if Dr7 and $80 <> 0 then DebugLn('G3 ');
|
|
if Dr7 and $100 <> 0 then DebugLn('LE ');
|
|
if Dr7 and $200 <> 0 then DebugLn('GE ');
|
|
if Dr7 and $2000 <> 0 then DebugLn('GD ');
|
|
f := Dr7 shr 16;
|
|
for n := 0 to 3 do
|
|
begin
|
|
DebugLn('R/W', IntToSTr(n),':');
|
|
case f and 3 of
|
|
0: DebugLn('ex');
|
|
1: DebugLn('wo');
|
|
2: DebugLn('IO');
|
|
3: DebugLn('rw');
|
|
end;
|
|
f := f shr 2;
|
|
DebugLn(' LEN', IntToSTr(n),':', IntToSTr(f and 3 + 1), ' ');
|
|
f := f shr 2;
|
|
end;
|
|
DebugLn(']');
|
|
end;
|
|
DebugLn('---');
|
|
{$POP}
|
|
end;
|
|
|
|
procedure HandleOutputDebug(const AEvent: TDebugEvent);
|
|
var
|
|
S: String;
|
|
W: WideString;
|
|
begin
|
|
if AEvent.DebugString.fUnicode <> 0
|
|
then begin
|
|
if not ReadWString(TDbgPtr(AEvent.DebugString.lpDebugStringData), AEvent.DebugString.nDebugStringLength, W)
|
|
then Exit;
|
|
S := W;
|
|
end
|
|
else begin
|
|
if not ReadString(TDbgPtr(AEvent.DebugString.lpDebugStringData), AEvent.DebugString.nDebugStringLength, S)
|
|
then Exit;
|
|
end;
|
|
log('[%d:%d]: %s', [AEvent.dwProcessId, AEvent.dwThreadId, S]);
|
|
end;
|
|
|
|
begin
|
|
if HandleDebugEvent(MDebugEvent)
|
|
then result := deBreakpoint
|
|
else begin
|
|
FillChar(GCurrentContext^, SizeOf(GCurrentContext^), $EE);
|
|
|
|
if AThread <> nil
|
|
then begin
|
|
// TODO: move to TDbgThread
|
|
|
|
if not TDbgWinThread(AThread).ReadThreadState
|
|
then log('LOOP: Unable to retrieve thread context');
|
|
end;
|
|
|
|
case MDebugEvent.dwDebugEventCode of
|
|
EXCEPTION_DEBUG_EVENT: begin
|
|
//DumpEvent('EXCEPTION_DEBUG_EVENT');
|
|
case MDebugEvent.Exception.ExceptionRecord.ExceptionCode of
|
|
EXCEPTION_BREAKPOINT: begin
|
|
if FJustStarted and (MDebugEvent.Exception.dwFirstChance <> 0) and (MDebugEvent.Exception.ExceptionRecord.ExceptionFlags = 0) then
|
|
begin
|
|
FJustStarted:=false;
|
|
result := deInternalContinue;
|
|
end
|
|
else
|
|
result := deBreakpoint;
|
|
end;
|
|
EXCEPTION_SINGLE_STEP: begin
|
|
result := deBreakpoint;
|
|
end
|
|
else begin
|
|
HandleException(MDebugEvent);
|
|
if MDebugEvent.Exception.dwFirstChance = 1 then
|
|
result := deInternalContinue
|
|
else
|
|
result := deException;
|
|
end;
|
|
end;
|
|
end;
|
|
CREATE_THREAD_DEBUG_EVENT: begin
|
|
//DumpEvent('CREATE_THREAD_DEBUG_EVENT');
|
|
result := deInternalContinue;
|
|
end;
|
|
CREATE_PROCESS_DEBUG_EVENT: begin
|
|
//DumpEvent('CREATE_PROCESS_DEBUG_EVENT');
|
|
StartProcess(MDebugEvent.dwThreadId, MDebugEvent.CreateProcessInfo);
|
|
FJustStarted := true;
|
|
result := deCreateProcess;
|
|
end;
|
|
EXIT_THREAD_DEBUG_EVENT: begin
|
|
//DumpEvent('EXIT_THREAD_DEBUG_EVENT');
|
|
result := deInternalContinue;
|
|
end;
|
|
EXIT_PROCESS_DEBUG_EVENT: begin
|
|
//DumpEvent('EXIT_PROCESS_DEBUG_EVENT');
|
|
SetExitCode(MDebugEvent.ExitProcess.dwExitCode);
|
|
// Let the kernel close all debug-handles and close-up the
|
|
// debuggee.
|
|
Windows.ContinueDebugEvent(MDebugEvent.dwProcessId, MDebugEvent.dwThreadId, DBG_CONTINUE);
|
|
result := deExitProcess;
|
|
end;
|
|
LOAD_DLL_DEBUG_EVENT: begin
|
|
//DumpEvent('LOAD_DLL_DEBUG_EVENT');
|
|
result := deLoadLibrary;
|
|
end;
|
|
UNLOAD_DLL_DEBUG_EVENT: begin
|
|
//DumpEvent('UNLOAD_DLL_DEBUG_EVENT');
|
|
result := deInternalContinue;
|
|
end;
|
|
OUTPUT_DEBUG_STRING_EVENT: begin
|
|
//DumpEvent('OUTPUT_DEBUG_STRING_EVENT');
|
|
HandleOutputDebug(MDebugEvent);
|
|
result := deInternalContinue;
|
|
end;
|
|
RIP_EVENT: begin
|
|
//DumpEvent('RIP_EVENT');
|
|
result := deInternalContinue;
|
|
end
|
|
else begin
|
|
raise Exception.CreateFmt('Unknown dwDebugEventCode value %d',[MDebugEvent.dwDebugEventCode]);
|
|
end;
|
|
end;
|
|
|
|
end;
|
|
end;
|
|
|
|
function TDbgWinProcess.CreateThread(AthreadIdentifier: THandle; out IsMainThread: boolean): TDbgThread;
|
|
begin
|
|
case MDebugEvent.dwDebugEventCode of
|
|
CREATE_THREAD_DEBUG_EVENT :
|
|
begin
|
|
result := OSDbgClasses.DbgThreadClass.Create(Self, AThreadIdentifier, MDebugEvent.CreateThread.hThread);
|
|
IsMainThread := false;
|
|
end;
|
|
CREATE_PROCESS_DEBUG_EVENT :
|
|
begin
|
|
result := OSDbgClasses.DbgThreadClass.Create(Self, AThreadIdentifier, MDebugEvent.CreateProcessInfo.hThread);
|
|
IsMainThread := true;
|
|
end
|
|
else
|
|
result := nil;
|
|
end; {case}
|
|
end;
|
|
|
|
procedure TDbgWinProcess.StartProcess(const AThreadID: DWORD;const AInfo: TCreateProcessDebugInfo);
|
|
var
|
|
s: string;
|
|
begin
|
|
FInfo := AInfo;
|
|
|
|
s := GetProcFilename(Self, AInfo.lpImageName, AInfo.fUnicode, 0);
|
|
if s <> ''
|
|
then SetFileName(s);
|
|
end;
|
|
|
|
function TDbgWinProcess.GetInstructionPointerRegisterValue: TDbgPtr;
|
|
begin
|
|
{$ifdef cpui386}
|
|
Result := GCurrentContext^.Eip;
|
|
{$else}
|
|
Result := GCurrentContext^.Rip;
|
|
{$endif}
|
|
end;
|
|
|
|
function TDbgWinProcess.GetStackBasePointerRegisterValue: TDbgPtr;
|
|
begin
|
|
{$ifdef cpui386}
|
|
Result := GCurrentContext^.Ebp;
|
|
{$else}
|
|
Result := GCurrentContext^.Rbp;
|
|
{$endif}
|
|
end;
|
|
|
|
function TDbgWinProcess.GetStackPointerRegisterValue: TDbgPtr;
|
|
begin
|
|
{$ifdef cpui386}
|
|
Result := GCurrentContext^.Esp;
|
|
{$else}
|
|
Result := GCurrentContext^.Rsp;
|
|
{$endif}
|
|
end;
|
|
|
|
function DebugBreakProcess(Process:HANDLE): WINBOOL; external 'kernel32' name 'DebugBreakProcess';
|
|
var
|
|
DebugBreakAddr: Pointer = nil;
|
|
_CreateRemoteThread: function(hProcess: THandle; lpThreadAttributes: Pointer; dwStackSize: DWORD; lpStartAddress: TFNThreadStartRoutine; lpParameter: Pointer; dwCreationFlags: DWORD; var lpThreadId: DWORD): THandle; stdcall = nil;
|
|
|
|
procedure InitWin32;
|
|
var
|
|
hMod: THandle;
|
|
begin
|
|
// Check if we already are initialized
|
|
if DebugBreakAddr <> nil then Exit;
|
|
|
|
// normally you would load a lib, but since kernel32 is
|
|
// always loaded we can use this (and we don't have to free it
|
|
hMod := GetModuleHandle(kernel32);
|
|
if hMod = 0 then Exit; //????
|
|
|
|
DebugBreakAddr := GetProcAddress(hMod, 'DebugBreak');
|
|
Pointer(_CreateRemoteThread) := GetProcAddress(hMod, 'CreateRemoteThread');
|
|
end;
|
|
|
|
function TDbgWinProcess.Pause: boolean;
|
|
var
|
|
hndl: Handle;
|
|
hThread: THandle;
|
|
NewThreadId: Cardinal;
|
|
begin
|
|
//hndl := OpenProcess(PROCESS_CREATE_THREAD or PROCESS_QUERY_INFORMATION or PROCESS_VM_OPERATION or PROCESS_VM_WRITE or PROCESS_VM_READ, False, TargetPID);
|
|
hndl := OpenProcess(PROCESS_ALL_ACCESS, false, ProcessID);
|
|
FPauseRequested:=true;
|
|
result := DebugBreakProcess(hndl);
|
|
if not Result then begin
|
|
DebugLn(['pause failed(1) ', GetLastError]);
|
|
InitWin32;
|
|
hThread := _CreateRemoteThread(hndl, nil, 0, DebugBreakAddr, nil, 0, NewThreadId);
|
|
if hThread = 0 then begin
|
|
DebugLn(['pause failed(2) ', GetLastError]);
|
|
end
|
|
else begin
|
|
Result := True;
|
|
CloseHandle(hThread);
|
|
end;
|
|
end;
|
|
CloseHandle(hndl);
|
|
end;
|
|
|
|
procedure TDbgWinProcess.TerminateProcess;
|
|
begin
|
|
Windows.TerminateProcess(Handle, 0);
|
|
end;
|
|
|
|
function TDbgWinProcess.AddrOffset: Int64;
|
|
begin
|
|
Result:=0;//inherited AddrOffset - TDbgPtr(FInfo.lpBaseOfImage);
|
|
end;
|
|
|
|
function TDbgWinProcess.AddLib(const AInfo: TLoadDLLDebugInfo): TDbgLibrary;
|
|
var
|
|
ID: TDbgPtr;
|
|
begin
|
|
Result := TDbgWinLibrary.Create(Self, HexValue(AInfo.lpBaseOfDll, SizeOf(Pointer), [hvfIncludeHexchar]), AInfo.hFile, TDbgPtr(AInfo.lpBaseOfDll), AInfo);
|
|
ID := TDbgPtr(AInfo.lpBaseOfDll);
|
|
FLibMap.Add(ID, Result);
|
|
if Result.DbgInfo.HasInfo
|
|
then FSymInstances.Add(Result);
|
|
end;
|
|
|
|
procedure TDbgWinProcess.RemoveLib(const AInfo: TUnloadDLLDebugInfo);
|
|
var
|
|
Lib: TDbgLibrary;
|
|
ID: TDbgPtr;
|
|
begin
|
|
if FLibMap = nil then Exit;
|
|
ID := TDbgPtr(AInfo.lpBaseOfDll);
|
|
if not FLibMap.GetData(ID, Lib) then Exit;
|
|
if Lib.DbgInfo.HasInfo
|
|
then FSymInstances.Remove(Lib);
|
|
FLibMap.Delete(ID);
|
|
Lib.Free;
|
|
end;
|
|
|
|
{ TDbgWinBreakpoint }
|
|
|
|
procedure TDbgWinBreakpoint.SetBreak;
|
|
var
|
|
a: TDBGPtr;
|
|
begin
|
|
inherited;
|
|
for a in Location do
|
|
FlushInstructionCache(Process.Handle, Pointer(PtrUInt(a)), 1);
|
|
end;
|
|
|
|
procedure TDbgWinBreakpoint.ResetBreak;
|
|
var
|
|
a: TDBGPtr;
|
|
begin
|
|
inherited;
|
|
for a in Location do
|
|
FlushInstructionCache(Process.Handle, Pointer(PtrUInt(a)), 1);
|
|
end;
|
|
|
|
{ TDbgWinThread }
|
|
|
|
procedure TDbgWinThread.LoadRegisterValues;
|
|
begin
|
|
{$ifdef cpui386}
|
|
with GCurrentContext^ do
|
|
begin
|
|
FRegisterValueList.DbgRegisterAutoCreate['eax'].SetValue(Eax, IntToStr(Eax),4,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ecx'].SetValue(Ecx, IntToStr(Ecx),4,1);
|
|
FRegisterValueList.DbgRegisterAutoCreate['edx'].SetValue(Edx, IntToStr(Edx),4,2);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ebx'].SetValue(Ebx, IntToStr(Ebx),4,3);
|
|
FRegisterValueList.DbgRegisterAutoCreate['esp'].SetValue(Esp, IntToStr(Esp),4,4);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ebp'].SetValue(Ebp, IntToStr(Ebp),4,5);
|
|
FRegisterValueList.DbgRegisterAutoCreate['esi'].SetValue(Esi, IntToStr(Esi),4,6);
|
|
FRegisterValueList.DbgRegisterAutoCreate['edi'].SetValue(Edi, IntToStr(Edi),4,7);
|
|
FRegisterValueList.DbgRegisterAutoCreate['eip'].SetValue(Eip, IntToStr(Eip),4,8);
|
|
|
|
FRegisterValueList.DbgRegisterAutoCreate['eflags'].Setx86EFlagsValue(EFlags);
|
|
|
|
FRegisterValueList.DbgRegisterAutoCreate['cs'].SetValue(SegCs, IntToStr(SegCs),4,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ss'].SetValue(SegSs, IntToStr(SegSs),4,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ds'].SetValue(SegDs, IntToStr(SegDs),4,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['es'].SetValue(SegEs, IntToStr(SegEs),4,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['fs'].SetValue(SegFs, IntToStr(SegFs),4,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['gs'].SetValue(SegGs, IntToStr(SegGs),4,0);
|
|
end;
|
|
{$else}
|
|
with GCurrentContext^ do
|
|
begin
|
|
FRegisterValueList.DbgRegisterAutoCreate['rax'].SetValue(rax, IntToStr(rax),8,0);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rbx'].SetValue(rbx, IntToStr(rbx),8,3);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rcx'].SetValue(rcx, IntToStr(rcx),8,2);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rdx'].SetValue(rdx, IntToStr(rdx),8,1);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rsi'].SetValue(rsi, IntToStr(rsi),8,4);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rdi'].SetValue(rdi, IntToStr(rdi),8,5);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rbp'].SetValue(rbp, IntToStr(rbp),8,6);
|
|
FRegisterValueList.DbgRegisterAutoCreate['rsp'].SetValue(rsp, IntToStr(rsp),8,7);
|
|
|
|
FRegisterValueList.DbgRegisterAutoCreate['r8'].SetValue(r8, IntToStr(r8),8,8);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r9'].SetValue(r9, IntToStr(r9),8,9);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r10'].SetValue(r10, IntToStr(r10),8,10);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r11'].SetValue(r11, IntToStr(r11),8,11);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r12'].SetValue(r12, IntToStr(r12),8,12);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r13'].SetValue(r13, IntToStr(r13),8,13);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r14'].SetValue(r14, IntToStr(r14),8,14);
|
|
FRegisterValueList.DbgRegisterAutoCreate['r15'].SetValue(r15, IntToStr(r15),8,15);
|
|
|
|
FRegisterValueList.DbgRegisterAutoCreate['rip'].SetValue(rip, IntToStr(rip),8,16);
|
|
FRegisterValueList.DbgRegisterAutoCreate['eflags'].Setx86EFlagsValue(EFlags);
|
|
|
|
FRegisterValueList.DbgRegisterAutoCreate['cs'].SetValue(SegCs, IntToStr(SegCs),8,43);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ss'].SetValue(SegSs, IntToStr(SegSs),8,44);
|
|
FRegisterValueList.DbgRegisterAutoCreate['ds'].SetValue(SegDs, IntToStr(SegDs),8,45);
|
|
FRegisterValueList.DbgRegisterAutoCreate['es'].SetValue(SegEs, IntToStr(SegEs),8,42);
|
|
FRegisterValueList.DbgRegisterAutoCreate['fs'].SetValue(SegFs, IntToStr(SegFs),8,46);
|
|
FRegisterValueList.DbgRegisterAutoCreate['gs'].SetValue(SegGs, IntToStr(SegGs),8,47);
|
|
end;
|
|
{$endif}
|
|
FRegisterValueListValid:=true;
|
|
end;
|
|
|
|
procedure TDbgWinThread.SetSingleStep;
|
|
begin
|
|
GCurrentContext^.EFlags := GCurrentContext^.EFlags or FLAG_TRACE_BIT;
|
|
FThreadContextChanged:=true;
|
|
end;
|
|
|
|
function TDbgWinThread.AddWatchpoint(AnAddr: TDBGPtr): integer;
|
|
function SetBreakpoint(var dr: {$ifdef cpui386}DWORD{$else}DWORD64{$endif}; ind: byte): boolean;
|
|
begin
|
|
if (Dr=0) and ((GCurrentContext^.Dr7 and (1 shl ind))=0) then
|
|
begin
|
|
GCurrentContext^.Dr7 := GCurrentContext^.Dr7 or (1 shl (ind*2));
|
|
GCurrentContext^.Dr7 := GCurrentContext^.Dr7 or ($30000 shl (ind*4));
|
|
Dr:=AnAddr;
|
|
FThreadContextChanged:=true;
|
|
Result := True;
|
|
end
|
|
else
|
|
result := False;
|
|
end;
|
|
|
|
begin
|
|
result := -1;
|
|
if SetBreakpoint(GCurrentContext^.Dr0, 0) then
|
|
result := 0
|
|
else if SetBreakpoint(GCurrentContext^.Dr1, 1) then
|
|
result := 1
|
|
else if SetBreakpoint(GCurrentContext^.Dr2, 2) then
|
|
result := 2
|
|
else if SetBreakpoint(GCurrentContext^.Dr3, 3) then
|
|
result := 3
|
|
else
|
|
Process.Log('No hardware breakpoint available.');
|
|
end;
|
|
|
|
function TDbgWinThread.RemoveWatchpoint(AnId: integer): boolean;
|
|
|
|
function RemoveBreakpoint(var dr: {$ifdef cpui386}DWORD{$else}DWORD64{$endif}; ind: byte): boolean;
|
|
begin
|
|
if (Dr<>0) and ((GCurrentContext^.Dr7 and (1 shl (ind*2)))<>0) then
|
|
begin
|
|
GCurrentContext^.Dr7 := GCurrentContext^.Dr7 xor (1 shl (ind*2));
|
|
GCurrentContext^.Dr7 := GCurrentContext^.Dr7 xor ($30000 shl (ind*4));
|
|
Dr:=0;
|
|
FThreadContextChanged:=true;
|
|
Result := True;
|
|
end
|
|
else
|
|
begin
|
|
result := False;
|
|
Process.Log('HW watchpoint is not set.');
|
|
end;
|
|
end;
|
|
|
|
begin
|
|
case AnId of
|
|
0: result := RemoveBreakpoint(GCurrentContext^.Dr0, 0);
|
|
1: result := RemoveBreakpoint(GCurrentContext^.Dr1, 1);
|
|
2: result := RemoveBreakpoint(GCurrentContext^.Dr2, 2);
|
|
3: result := RemoveBreakpoint(GCurrentContext^.Dr3, 3);
|
|
end
|
|
end;
|
|
|
|
procedure TDbgWinThread.BeforeContinue;
|
|
begin
|
|
if GCurrentContext^.Dr6 <> $ffff0ff0 then
|
|
begin
|
|
GCurrentContext^.Dr6:=$ffff0ff0;
|
|
FThreadContextChanged:=true;
|
|
end;
|
|
|
|
if FThreadContextChanged then
|
|
begin
|
|
if SetThreadContext(Handle, GCurrentContext^) then
|
|
FThreadContextChanged:=false
|
|
else
|
|
Log('Thread %u: Unable to set context', [ID])
|
|
end;
|
|
end;
|
|
|
|
function TDbgWinThread.ResetInstructionPointerAfterBreakpoint: boolean;
|
|
var
|
|
_UC: record
|
|
C: TContext;
|
|
D: array[1..16] of Byte;
|
|
end;
|
|
Context: PContext;
|
|
begin
|
|
Result := False;
|
|
|
|
// If the location of the breakpoint is reached by single-stepping, there is
|
|
// no need to decrement the instruction pointer.
|
|
if MDebugEvent.Exception.ExceptionRecord.ExceptionCode = EXCEPTION_SINGLE_STEP
|
|
then begin
|
|
result := true;
|
|
Exit;
|
|
end;
|
|
|
|
Context := AlignPtr(@_UC, $10);
|
|
|
|
Context^.ContextFlags := CONTEXT_CONTROL;
|
|
if not GetThreadContext(Handle, Context^)
|
|
then begin
|
|
Log('Unable to get context');
|
|
Exit;
|
|
end;
|
|
|
|
Context^.ContextFlags := CONTEXT_CONTROL;
|
|
{$ifdef cpui386}
|
|
Dec(Context^.Eip);
|
|
dec(GCurrentContext^.Eip);
|
|
{$else}
|
|
Dec(Context^.Rip);
|
|
dec(GCurrentContext^.Rip);
|
|
{$endif}
|
|
|
|
if not SetThreadContext(Handle, Context^)
|
|
then begin
|
|
Log('Unable to set context');
|
|
Exit;
|
|
end;
|
|
FThreadContextChanged:=false;
|
|
Result := True;
|
|
end;
|
|
|
|
function TDbgWinThread.ReadThreadState: boolean;
|
|
begin
|
|
GCurrentContext^.ContextFlags := CONTEXT_SEGMENTS or CONTEXT_INTEGER or CONTEXT_CONTROL or CONTEXT_DEBUG_REGISTERS;
|
|
SetLastError(0);
|
|
result := GetThreadContext(Handle, GCurrentContext^);
|
|
FRegisterValueListValid:=False;
|
|
end;
|
|
|
|
end.
|
|
|