Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(477)

Side by Side Diff: components/breakpad/app/breakpad_linux.cc

Issue 485893007: Rename components/breakpad to components/crash. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Rebase + iOS tests Created 6 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « components/breakpad/app/breakpad_linux.h ('k') | components/breakpad/app/breakpad_linux_impl.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 // For linux_syscall_support.h. This makes it safe to call embedded system
6 // calls when in seccomp mode.
7
8 #include "components/breakpad/app/breakpad_linux.h"
9
10 #include <fcntl.h>
11 #include <poll.h>
12 #include <signal.h>
13 #include <stdlib.h>
14 #include <sys/socket.h>
15 #include <sys/time.h>
16 #include <sys/types.h>
17 #include <sys/uio.h>
18 #include <sys/wait.h>
19 #include <time.h>
20 #include <unistd.h>
21
22 #include <algorithm>
23 #include <string>
24
25 #include "base/base_switches.h"
26 #include "base/command_line.h"
27 #include "base/debug/crash_logging.h"
28 #include "base/debug/dump_without_crashing.h"
29 #include "base/files/file_path.h"
30 #include "base/linux_util.h"
31 #include "base/path_service.h"
32 #include "base/posix/eintr_wrapper.h"
33 #include "base/posix/global_descriptors.h"
34 #include "base/process/memory.h"
35 #include "base/strings/string_util.h"
36 #include "breakpad/src/client/linux/crash_generation/crash_generation_client.h"
37 #include "breakpad/src/client/linux/handler/exception_handler.h"
38 #include "breakpad/src/client/linux/minidump_writer/directory_reader.h"
39 #include "breakpad/src/common/linux/linux_libc_support.h"
40 #include "breakpad/src/common/memory.h"
41 #include "components/breakpad/app/breakpad_client.h"
42 #include "components/breakpad/app/breakpad_linux_impl.h"
43 #include "content/public/common/content_descriptors.h"
44
45 #if defined(OS_ANDROID)
46 #include <android/log.h>
47 #include <sys/stat.h>
48
49 #include "base/android/build_info.h"
50 #include "base/android/path_utils.h"
51 #endif
52 #include "third_party/lss/linux_syscall_support.h"
53
54 #if defined(ADDRESS_SANITIZER)
55 #include <ucontext.h> // for getcontext().
56 #endif
57
58 #if defined(OS_ANDROID)
59 #define STAT_STRUCT struct stat
60 #define FSTAT_FUNC fstat
61 #else
62 #define STAT_STRUCT struct kernel_stat
63 #define FSTAT_FUNC sys_fstat
64 #endif
65
66 // Some versions of gcc are prone to warn about unused return values. In cases
67 // where we either a) know the call cannot fail, or b) there is nothing we
68 // can do when a call fails, we mark the return code as ignored. This avoids
69 // spurious compiler warnings.
70 #define IGNORE_RET(x) do { if (x); } while (0)
71
72 using google_breakpad::ExceptionHandler;
73 using google_breakpad::MinidumpDescriptor;
74
75 namespace breakpad {
76
77 namespace {
78
79 #if !defined(OS_CHROMEOS)
80 const char kUploadURL[] = "https://clients2.google.com/cr/report";
81 #endif
82
83 bool g_is_crash_reporter_enabled = false;
84 uint64_t g_process_start_time = 0;
85 pid_t g_pid = 0;
86 char* g_crash_log_path = NULL;
87 ExceptionHandler* g_breakpad = NULL;
88
89 #if defined(ADDRESS_SANITIZER)
90 const char* g_asan_report_str = NULL;
91 #endif
92 #if defined(OS_ANDROID)
93 char* g_process_type = NULL;
94 #endif
95
96 CrashKeyStorage* g_crash_keys = NULL;
97
98 // Writes the value |v| as 16 hex characters to the memory pointed at by
99 // |output|.
100 void write_uint64_hex(char* output, uint64_t v) {
101 static const char hextable[] = "0123456789abcdef";
102
103 for (int i = 15; i >= 0; --i) {
104 output[i] = hextable[v & 15];
105 v >>= 4;
106 }
107 }
108
109 // The following helper functions are for calculating uptime.
110
111 // Converts a struct timeval to milliseconds.
112 uint64_t timeval_to_ms(struct timeval *tv) {
113 uint64_t ret = tv->tv_sec; // Avoid overflow by explicitly using a uint64_t.
114 ret *= 1000;
115 ret += tv->tv_usec / 1000;
116 return ret;
117 }
118
119 // Converts a struct timeval to milliseconds.
120 uint64_t kernel_timeval_to_ms(struct kernel_timeval *tv) {
121 uint64_t ret = tv->tv_sec; // Avoid overflow by explicitly using a uint64_t.
122 ret *= 1000;
123 ret += tv->tv_usec / 1000;
124 return ret;
125 }
126
127 // String buffer size to use to convert a uint64_t to string.
128 const size_t kUint64StringSize = 21;
129
130 void SetProcessStartTime() {
131 // Set the base process start time value.
132 struct timeval tv;
133 if (!gettimeofday(&tv, NULL))
134 g_process_start_time = timeval_to_ms(&tv);
135 else
136 g_process_start_time = 0;
137 }
138
139 // uint64_t version of my_int_len() from
140 // breakpad/src/common/linux/linux_libc_support.h. Return the length of the
141 // given, non-negative integer when expressed in base 10.
142 unsigned my_uint64_len(uint64_t i) {
143 if (!i)
144 return 1;
145
146 unsigned len = 0;
147 while (i) {
148 len++;
149 i /= 10;
150 }
151
152 return len;
153 }
154
155 // uint64_t version of my_uitos() from
156 // breakpad/src/common/linux/linux_libc_support.h. Convert a non-negative
157 // integer to a string (not null-terminated).
158 void my_uint64tos(char* output, uint64_t i, unsigned i_len) {
159 for (unsigned index = i_len; index; --index, i /= 10)
160 output[index - 1] = '0' + (i % 10);
161 }
162
163 #if defined(OS_ANDROID)
164 char* my_strncpy(char* dst, const char* src, size_t len) {
165 int i = len;
166 char* p = dst;
167 if (!dst || !src)
168 return dst;
169 while (i != 0 && *src != '\0') {
170 *p++ = *src++;
171 i--;
172 }
173 while (i != 0) {
174 *p++ = '\0';
175 i--;
176 }
177 return dst;
178 }
179
180 char* my_strncat(char *dest, const char* src, size_t len) {
181 char* ret = dest;
182 while (*dest)
183 dest++;
184 while (len--)
185 if (!(*dest++ = *src++))
186 return ret;
187 *dest = 0;
188 return ret;
189 }
190 #endif
191
192 #if !defined(OS_CHROMEOS)
193 bool my_isxdigit(char c) {
194 return (c >= '0' && c <= '9') || ((c | 0x20) >= 'a' && (c | 0x20) <= 'f');
195 }
196 #endif
197
198 size_t LengthWithoutTrailingSpaces(const char* str, size_t len) {
199 while (len > 0 && str[len - 1] == ' ') {
200 len--;
201 }
202 return len;
203 }
204
205 void SetClientIdFromCommandLine(const CommandLine& command_line) {
206 // Get the guid from the command line switch.
207 std::string switch_value =
208 command_line.GetSwitchValueASCII(switches::kEnableCrashReporter);
209 GetBreakpadClient()->SetBreakpadClientIdFromGUID(switch_value);
210 }
211
212 // MIME substrings.
213 #if defined(OS_CHROMEOS)
214 const char g_sep[] = ":";
215 #endif
216 const char g_rn[] = "\r\n";
217 const char g_form_data_msg[] = "Content-Disposition: form-data; name=\"";
218 const char g_quote_msg[] = "\"";
219 const char g_dashdash_msg[] = "--";
220 const char g_dump_msg[] = "upload_file_minidump\"; filename=\"dump\"";
221 #if defined(ADDRESS_SANITIZER)
222 const char g_log_msg[] = "upload_file_log\"; filename=\"log\"";
223 #endif
224 const char g_content_type_msg[] = "Content-Type: application/octet-stream";
225
226 // MimeWriter manages an iovec for writing MIMEs to a file.
227 class MimeWriter {
228 public:
229 static const int kIovCapacity = 30;
230 static const size_t kMaxCrashChunkSize = 64;
231
232 MimeWriter(int fd, const char* const mime_boundary);
233 ~MimeWriter();
234
235 // Append boundary.
236 virtual void AddBoundary();
237
238 // Append end of file boundary.
239 virtual void AddEnd();
240
241 // Append key/value pair with specified sizes.
242 virtual void AddPairData(const char* msg_type,
243 size_t msg_type_size,
244 const char* msg_data,
245 size_t msg_data_size);
246
247 // Append key/value pair.
248 void AddPairString(const char* msg_type,
249 const char* msg_data) {
250 AddPairData(msg_type, my_strlen(msg_type), msg_data, my_strlen(msg_data));
251 }
252
253 // Append key/value pair, splitting value into chunks no larger than
254 // |chunk_size|. |chunk_size| cannot be greater than |kMaxCrashChunkSize|.
255 // The msg_type string will have a counter suffix to distinguish each chunk.
256 virtual void AddPairDataInChunks(const char* msg_type,
257 size_t msg_type_size,
258 const char* msg_data,
259 size_t msg_data_size,
260 size_t chunk_size,
261 bool strip_trailing_spaces);
262
263 // Add binary file contents to be uploaded with the specified filename.
264 virtual void AddFileContents(const char* filename_msg,
265 uint8_t* file_data,
266 size_t file_size);
267
268 // Flush any pending iovecs to the output file.
269 void Flush() {
270 IGNORE_RET(sys_writev(fd_, iov_, iov_index_));
271 iov_index_ = 0;
272 }
273
274 protected:
275 void AddItem(const void* base, size_t size);
276 // Minor performance trade-off for easier-to-maintain code.
277 void AddString(const char* str) {
278 AddItem(str, my_strlen(str));
279 }
280 void AddItemWithoutTrailingSpaces(const void* base, size_t size);
281
282 struct kernel_iovec iov_[kIovCapacity];
283 int iov_index_;
284
285 // Output file descriptor.
286 int fd_;
287
288 const char* const mime_boundary_;
289
290 private:
291 DISALLOW_COPY_AND_ASSIGN(MimeWriter);
292 };
293
294 MimeWriter::MimeWriter(int fd, const char* const mime_boundary)
295 : iov_index_(0),
296 fd_(fd),
297 mime_boundary_(mime_boundary) {
298 }
299
300 MimeWriter::~MimeWriter() {
301 }
302
303 void MimeWriter::AddBoundary() {
304 AddString(mime_boundary_);
305 AddString(g_rn);
306 }
307
308 void MimeWriter::AddEnd() {
309 AddString(mime_boundary_);
310 AddString(g_dashdash_msg);
311 AddString(g_rn);
312 }
313
314 void MimeWriter::AddPairData(const char* msg_type,
315 size_t msg_type_size,
316 const char* msg_data,
317 size_t msg_data_size) {
318 AddString(g_form_data_msg);
319 AddItem(msg_type, msg_type_size);
320 AddString(g_quote_msg);
321 AddString(g_rn);
322 AddString(g_rn);
323 AddItem(msg_data, msg_data_size);
324 AddString(g_rn);
325 }
326
327 void MimeWriter::AddPairDataInChunks(const char* msg_type,
328 size_t msg_type_size,
329 const char* msg_data,
330 size_t msg_data_size,
331 size_t chunk_size,
332 bool strip_trailing_spaces) {
333 if (chunk_size > kMaxCrashChunkSize)
334 return;
335
336 unsigned i = 0;
337 size_t done = 0, msg_length = msg_data_size;
338
339 while (msg_length) {
340 char num[kUint64StringSize];
341 const unsigned num_len = my_uint_len(++i);
342 my_uitos(num, i, num_len);
343
344 size_t chunk_len = std::min(chunk_size, msg_length);
345
346 AddString(g_form_data_msg);
347 AddItem(msg_type, msg_type_size);
348 AddItem(num, num_len);
349 AddString(g_quote_msg);
350 AddString(g_rn);
351 AddString(g_rn);
352 if (strip_trailing_spaces) {
353 AddItemWithoutTrailingSpaces(msg_data + done, chunk_len);
354 } else {
355 AddItem(msg_data + done, chunk_len);
356 }
357 AddString(g_rn);
358 AddBoundary();
359 Flush();
360
361 done += chunk_len;
362 msg_length -= chunk_len;
363 }
364 }
365
366 void MimeWriter::AddFileContents(const char* filename_msg, uint8_t* file_data,
367 size_t file_size) {
368 AddString(g_form_data_msg);
369 AddString(filename_msg);
370 AddString(g_rn);
371 AddString(g_content_type_msg);
372 AddString(g_rn);
373 AddString(g_rn);
374 AddItem(file_data, file_size);
375 AddString(g_rn);
376 }
377
378 void MimeWriter::AddItem(const void* base, size_t size) {
379 // Check if the iovec is full and needs to be flushed to output file.
380 if (iov_index_ == kIovCapacity) {
381 Flush();
382 }
383 iov_[iov_index_].iov_base = const_cast<void*>(base);
384 iov_[iov_index_].iov_len = size;
385 ++iov_index_;
386 }
387
388 void MimeWriter::AddItemWithoutTrailingSpaces(const void* base, size_t size) {
389 AddItem(base, LengthWithoutTrailingSpaces(static_cast<const char*>(base),
390 size));
391 }
392
393 #if defined(OS_CHROMEOS)
394 // This subclass is used on Chromium OS to report crashes in a format easy for
395 // the central crash reporting facility to understand.
396 // Format is <name>:<data length in decimal>:<data>
397 class CrashReporterWriter : public MimeWriter {
398 public:
399 explicit CrashReporterWriter(int fd);
400
401 virtual void AddBoundary() OVERRIDE;
402
403 virtual void AddEnd() OVERRIDE;
404
405 virtual void AddPairData(const char* msg_type,
406 size_t msg_type_size,
407 const char* msg_data,
408 size_t msg_data_size) OVERRIDE;
409
410 virtual void AddPairDataInChunks(const char* msg_type,
411 size_t msg_type_size,
412 const char* msg_data,
413 size_t msg_data_size,
414 size_t chunk_size,
415 bool strip_trailing_spaces) OVERRIDE;
416
417 virtual void AddFileContents(const char* filename_msg,
418 uint8_t* file_data,
419 size_t file_size) OVERRIDE;
420
421 private:
422 DISALLOW_COPY_AND_ASSIGN(CrashReporterWriter);
423 };
424
425
426 CrashReporterWriter::CrashReporterWriter(int fd) : MimeWriter(fd, "") {}
427
428 // No-ops.
429 void CrashReporterWriter::AddBoundary() {}
430 void CrashReporterWriter::AddEnd() {}
431
432 void CrashReporterWriter::AddPairData(const char* msg_type,
433 size_t msg_type_size,
434 const char* msg_data,
435 size_t msg_data_size) {
436 char data[kUint64StringSize];
437 const unsigned data_len = my_uint_len(msg_data_size);
438 my_uitos(data, msg_data_size, data_len);
439
440 AddItem(msg_type, msg_type_size);
441 AddString(g_sep);
442 AddItem(data, data_len);
443 AddString(g_sep);
444 AddItem(msg_data, msg_data_size);
445 Flush();
446 }
447
448 void CrashReporterWriter::AddPairDataInChunks(const char* msg_type,
449 size_t msg_type_size,
450 const char* msg_data,
451 size_t msg_data_size,
452 size_t chunk_size,
453 bool strip_trailing_spaces) {
454 if (chunk_size > kMaxCrashChunkSize)
455 return;
456
457 unsigned i = 0;
458 size_t done = 0;
459 size_t msg_length = msg_data_size;
460
461 while (msg_length) {
462 char num[kUint64StringSize];
463 const unsigned num_len = my_uint_len(++i);
464 my_uitos(num, i, num_len);
465
466 size_t chunk_len = std::min(chunk_size, msg_length);
467
468 size_t write_len = chunk_len;
469 if (strip_trailing_spaces) {
470 // Take care of this here because we need to know the exact length of
471 // what is going to be written.
472 write_len = LengthWithoutTrailingSpaces(msg_data + done, write_len);
473 }
474
475 char data[kUint64StringSize];
476 const unsigned data_len = my_uint_len(write_len);
477 my_uitos(data, write_len, data_len);
478
479 AddItem(msg_type, msg_type_size);
480 AddItem(num, num_len);
481 AddString(g_sep);
482 AddItem(data, data_len);
483 AddString(g_sep);
484 AddItem(msg_data + done, write_len);
485 Flush();
486
487 done += chunk_len;
488 msg_length -= chunk_len;
489 }
490 }
491
492 void CrashReporterWriter::AddFileContents(const char* filename_msg,
493 uint8_t* file_data,
494 size_t file_size) {
495 char data[kUint64StringSize];
496 const unsigned data_len = my_uint_len(file_size);
497 my_uitos(data, file_size, data_len);
498
499 AddString(filename_msg);
500 AddString(g_sep);
501 AddItem(data, data_len);
502 AddString(g_sep);
503 AddItem(file_data, file_size);
504 Flush();
505 }
506 #endif // defined(OS_CHROMEOS)
507
508 void DumpProcess() {
509 if (g_breakpad)
510 g_breakpad->WriteMinidump();
511 }
512
513 #if defined(OS_ANDROID)
514 const char kGoogleBreakpad[] = "google-breakpad";
515 #endif
516
517 size_t WriteLog(const char* buf, size_t nbytes) {
518 #if defined(OS_ANDROID)
519 return __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad, buf);
520 #else
521 return sys_write(2, buf, nbytes);
522 #endif
523 }
524
525 size_t WriteNewline() {
526 return WriteLog("\n", 1);
527 }
528
529 #if defined(OS_ANDROID)
530 // Android's native crash handler outputs a diagnostic tombstone to the device
531 // log. By returning false from the HandlerCallbacks, breakpad will reinstall
532 // the previous (i.e. native) signal handlers before returning from its own
533 // handler. A Chrome build fingerprint is written to the log, so that the
534 // specific build of Chrome and the location of the archived Chrome symbols can
535 // be determined directly from it.
536 bool FinalizeCrashDoneAndroid() {
537 base::android::BuildInfo* android_build_info =
538 base::android::BuildInfo::GetInstance();
539
540 __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad,
541 "### ### ### ### ### ### ### ### ### ### ### ### ###");
542 __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad,
543 "Chrome build fingerprint:");
544 __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad,
545 android_build_info->package_version_name());
546 __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad,
547 android_build_info->package_version_code());
548 __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad,
549 CHROME_BUILD_ID);
550 __android_log_write(ANDROID_LOG_WARN, kGoogleBreakpad,
551 "### ### ### ### ### ### ### ### ### ### ### ### ###");
552 return false;
553 }
554 #endif
555
556 bool CrashDone(const MinidumpDescriptor& minidump,
557 const bool upload,
558 const bool succeeded) {
559 // WARNING: this code runs in a compromised context. It may not call into
560 // libc nor allocate memory normally.
561 if (!succeeded) {
562 const char msg[] = "Failed to generate minidump.";
563 WriteLog(msg, sizeof(msg) - 1);
564 return false;
565 }
566
567 DCHECK(!minidump.IsFD());
568
569 BreakpadInfo info = {0};
570 info.filename = minidump.path();
571 info.fd = minidump.fd();
572 #if defined(ADDRESS_SANITIZER)
573 google_breakpad::PageAllocator allocator;
574 const size_t log_path_len = my_strlen(minidump.path());
575 char* log_path = reinterpret_cast<char*>(allocator.Alloc(log_path_len + 1));
576 my_memcpy(log_path, minidump.path(), log_path_len);
577 my_memcpy(log_path + log_path_len - 4, ".log", 4);
578 log_path[log_path_len] = '\0';
579 info.log_filename = log_path;
580 #endif
581 info.process_type = "browser";
582 info.process_type_length = 7;
583 info.distro = base::g_linux_distro;
584 info.distro_length = my_strlen(base::g_linux_distro);
585 info.upload = upload;
586 info.process_start_time = g_process_start_time;
587 info.oom_size = base::g_oom_size;
588 info.pid = g_pid;
589 info.crash_keys = g_crash_keys;
590 HandleCrashDump(info);
591 #if defined(OS_ANDROID)
592 return FinalizeCrashDoneAndroid();
593 #else
594 return true;
595 #endif
596 }
597
598 // Wrapper function, do not add more code here.
599 bool CrashDoneNoUpload(const MinidumpDescriptor& minidump,
600 void* context,
601 bool succeeded) {
602 return CrashDone(minidump, false, succeeded);
603 }
604
605 #if !defined(OS_ANDROID)
606 // Wrapper function, do not add more code here.
607 bool CrashDoneUpload(const MinidumpDescriptor& minidump,
608 void* context,
609 bool succeeded) {
610 return CrashDone(minidump, true, succeeded);
611 }
612 #endif
613
614 #if defined(ADDRESS_SANITIZER)
615 extern "C"
616 void __asan_set_error_report_callback(void (*cb)(const char*));
617
618 extern "C"
619 void AsanLinuxBreakpadCallback(const char* report) {
620 g_asan_report_str = report;
621 // Send minidump here.
622 g_breakpad->SimulateSignalDelivery(SIGKILL);
623 }
624 #endif
625
626 void EnableCrashDumping(bool unattended) {
627 g_is_crash_reporter_enabled = true;
628
629 base::FilePath tmp_path("/tmp");
630 PathService::Get(base::DIR_TEMP, &tmp_path);
631
632 base::FilePath dumps_path(tmp_path);
633 if (GetBreakpadClient()->GetCrashDumpLocation(&dumps_path)) {
634 base::FilePath logfile =
635 dumps_path.Append(GetBreakpadClient()->GetReporterLogFilename());
636 std::string logfile_str = logfile.value();
637 const size_t crash_log_path_len = logfile_str.size() + 1;
638 g_crash_log_path = new char[crash_log_path_len];
639 strncpy(g_crash_log_path, logfile_str.c_str(), crash_log_path_len);
640 }
641 DCHECK(!g_breakpad);
642 MinidumpDescriptor minidump_descriptor(dumps_path.value());
643 minidump_descriptor.set_size_limit(kMaxMinidumpFileSize);
644 #if defined(OS_ANDROID)
645 unattended = true; // Android never uploads directly.
646 #endif
647 if (unattended) {
648 g_breakpad = new ExceptionHandler(
649 minidump_descriptor,
650 NULL,
651 CrashDoneNoUpload,
652 NULL,
653 true, // Install handlers.
654 -1); // Server file descriptor. -1 for in-process.
655 return;
656 }
657
658 #if !defined(OS_ANDROID)
659 // Attended mode
660 g_breakpad = new ExceptionHandler(
661 minidump_descriptor,
662 NULL,
663 CrashDoneUpload,
664 NULL,
665 true, // Install handlers.
666 -1); // Server file descriptor. -1 for in-process.
667 #endif
668 }
669
670 #if defined(OS_ANDROID)
671 bool CrashDoneInProcessNoUpload(
672 const google_breakpad::MinidumpDescriptor& descriptor,
673 void* context,
674 const bool succeeded) {
675 // WARNING: this code runs in a compromised context. It may not call into
676 // libc nor allocate memory normally.
677 if (!succeeded) {
678 static const char msg[] = "Crash dump generation failed.\n";
679 WriteLog(msg, sizeof(msg) - 1);
680 return false;
681 }
682
683 // Start constructing the message to send to the browser.
684 BreakpadInfo info = {0};
685 info.filename = NULL;
686 info.fd = descriptor.fd();
687 info.process_type = g_process_type;
688 info.process_type_length = my_strlen(g_process_type);
689 info.distro = NULL;
690 info.distro_length = 0;
691 info.upload = false;
692 info.process_start_time = g_process_start_time;
693 info.pid = g_pid;
694 info.crash_keys = g_crash_keys;
695 HandleCrashDump(info);
696 bool finalize_result = FinalizeCrashDoneAndroid();
697 base::android::BuildInfo* android_build_info =
698 base::android::BuildInfo::GetInstance();
699 if (android_build_info->sdk_int() >= 18 &&
700 my_strcmp(android_build_info->build_type(), "eng") != 0 &&
701 my_strcmp(android_build_info->build_type(), "userdebug") != 0) {
702 // On JB MR2 and later, the system crash handler displays a dialog. For
703 // renderer crashes, this is a bad user experience and so this is disabled
704 // for user builds of Android.
705 // TODO(cjhopman): There should be some way to recover the crash stack from
706 // non-uploading user clients. See http://crbug.com/273706.
707 __android_log_write(ANDROID_LOG_WARN,
708 kGoogleBreakpad,
709 "Tombstones are disabled on JB MR2+ user builds.");
710 __android_log_write(ANDROID_LOG_WARN,
711 kGoogleBreakpad,
712 "### ### ### ### ### ### ### ### ### ### ### ### ###");
713 return true;
714 } else {
715 return finalize_result;
716 }
717 }
718
719 void EnableNonBrowserCrashDumping(const std::string& process_type,
720 int minidump_fd) {
721 // This will guarantee that the BuildInfo has been initialized and subsequent
722 // calls will not require memory allocation.
723 base::android::BuildInfo::GetInstance();
724 SetClientIdFromCommandLine(*CommandLine::ForCurrentProcess());
725
726 // On Android, the current sandboxing uses process isolation, in which the
727 // child process runs with a different UID. That breaks the normal crash
728 // reporting where the browser process generates the minidump by inspecting
729 // the child process. This is because the browser process now does not have
730 // the permission to access the states of the child process (as it has a
731 // different UID).
732 // TODO(jcivelli): http://b/issue?id=6776356 we should use a watchdog
733 // process forked from the renderer process that generates the minidump.
734 if (minidump_fd == -1) {
735 LOG(ERROR) << "Minidump file descriptor not found, crash reporting will "
736 " not work.";
737 return;
738 }
739 SetProcessStartTime();
740 g_pid = getpid();
741
742 g_is_crash_reporter_enabled = true;
743 // Save the process type (it is leaked).
744 const size_t process_type_len = process_type.size() + 1;
745 g_process_type = new char[process_type_len];
746 strncpy(g_process_type, process_type.c_str(), process_type_len);
747 new google_breakpad::ExceptionHandler(MinidumpDescriptor(minidump_fd),
748 NULL, CrashDoneInProcessNoUpload, NULL, true, -1);
749 }
750 #else
751 // Non-Browser = Extension, Gpu, Plugins, Ppapi and Renderer
752 class NonBrowserCrashHandler : public google_breakpad::CrashGenerationClient {
753 public:
754 NonBrowserCrashHandler()
755 : server_fd_(base::GlobalDescriptors::GetInstance()->Get(
756 kCrashDumpSignal)) {
757 }
758
759 virtual ~NonBrowserCrashHandler() {}
760
761 virtual bool RequestDump(const void* crash_context,
762 size_t crash_context_size) OVERRIDE {
763 int fds[2] = { -1, -1 };
764 if (sys_socketpair(AF_UNIX, SOCK_STREAM, 0, fds) < 0) {
765 static const char msg[] = "Failed to create socket for crash dumping.\n";
766 WriteLog(msg, sizeof(msg) - 1);
767 return false;
768 }
769
770 // Start constructing the message to send to the browser.
771 char b; // Dummy variable for sys_read below.
772 const char* b_addr = &b; // Get the address of |b| so we can create the
773 // expected /proc/[pid]/syscall content in the
774 // browser to convert namespace tids.
775
776 // The length of the control message:
777 static const unsigned kControlMsgSize = sizeof(int);
778 static const unsigned kControlMsgSpaceSize = CMSG_SPACE(kControlMsgSize);
779 static const unsigned kControlMsgLenSize = CMSG_LEN(kControlMsgSize);
780
781 struct kernel_msghdr msg;
782 my_memset(&msg, 0, sizeof(struct kernel_msghdr));
783 struct kernel_iovec iov[kCrashIovSize];
784 iov[0].iov_base = const_cast<void*>(crash_context);
785 iov[0].iov_len = crash_context_size;
786 iov[1].iov_base = &b_addr;
787 iov[1].iov_len = sizeof(b_addr);
788 iov[2].iov_base = &fds[0];
789 iov[2].iov_len = sizeof(fds[0]);
790 iov[3].iov_base = &g_process_start_time;
791 iov[3].iov_len = sizeof(g_process_start_time);
792 iov[4].iov_base = &base::g_oom_size;
793 iov[4].iov_len = sizeof(base::g_oom_size);
794 google_breakpad::SerializedNonAllocatingMap* serialized_map;
795 iov[5].iov_len = g_crash_keys->Serialize(
796 const_cast<const google_breakpad::SerializedNonAllocatingMap**>(
797 &serialized_map));
798 iov[5].iov_base = serialized_map;
799 #if !defined(ADDRESS_SANITIZER)
800 COMPILE_ASSERT(5 == kCrashIovSize - 1, Incorrect_Number_Of_Iovec_Members);
801 #else
802 iov[6].iov_base = const_cast<char*>(g_asan_report_str);
803 iov[6].iov_len = kMaxAsanReportSize + 1;
804 COMPILE_ASSERT(6 == kCrashIovSize - 1, Incorrect_Number_Of_Iovec_Members);
805 #endif
806
807 msg.msg_iov = iov;
808 msg.msg_iovlen = kCrashIovSize;
809 char cmsg[kControlMsgSpaceSize];
810 my_memset(cmsg, 0, kControlMsgSpaceSize);
811 msg.msg_control = cmsg;
812 msg.msg_controllen = sizeof(cmsg);
813
814 struct cmsghdr *hdr = CMSG_FIRSTHDR(&msg);
815 hdr->cmsg_level = SOL_SOCKET;
816 hdr->cmsg_type = SCM_RIGHTS;
817 hdr->cmsg_len = kControlMsgLenSize;
818 ((int*)CMSG_DATA(hdr))[0] = fds[1];
819
820 if (HANDLE_EINTR(sys_sendmsg(server_fd_, &msg, 0)) < 0) {
821 static const char errmsg[] = "Failed to tell parent about crash.\n";
822 WriteLog(errmsg, sizeof(errmsg) - 1);
823 IGNORE_RET(sys_close(fds[0]));
824 IGNORE_RET(sys_close(fds[1]));
825 return false;
826 }
827 IGNORE_RET(sys_close(fds[1]));
828
829 if (HANDLE_EINTR(sys_read(fds[0], &b, 1)) != 1) {
830 static const char errmsg[] = "Parent failed to complete crash dump.\n";
831 WriteLog(errmsg, sizeof(errmsg) - 1);
832 }
833 IGNORE_RET(sys_close(fds[0]));
834
835 return true;
836 }
837
838 private:
839 // The pipe FD to the browser process, which will handle the crash dumping.
840 const int server_fd_;
841
842 DISALLOW_COPY_AND_ASSIGN(NonBrowserCrashHandler);
843 };
844
845 void EnableNonBrowserCrashDumping() {
846 g_is_crash_reporter_enabled = true;
847 // We deliberately leak this object.
848 DCHECK(!g_breakpad);
849
850 g_breakpad = new ExceptionHandler(
851 MinidumpDescriptor("/tmp"), // Unused but needed or Breakpad will assert.
852 NULL,
853 NULL,
854 NULL,
855 true,
856 -1);
857 g_breakpad->set_crash_generation_client(new NonBrowserCrashHandler());
858 }
859 #endif // defined(OS_ANDROID)
860
861 void SetCrashKeyValue(const base::StringPiece& key,
862 const base::StringPiece& value) {
863 g_crash_keys->SetKeyValue(key.data(), value.data());
864 }
865
866 void ClearCrashKey(const base::StringPiece& key) {
867 g_crash_keys->RemoveKey(key.data());
868 }
869
870 // GetBreakpadClient() cannot call any Set methods until after InitCrashKeys().
871 void InitCrashKeys() {
872 g_crash_keys = new CrashKeyStorage;
873 GetBreakpadClient()->RegisterCrashKeys();
874 base::debug::SetCrashKeyReportingFunctions(&SetCrashKeyValue, &ClearCrashKey);
875 }
876
877 // Miscellaneous initialization functions to call after Breakpad has been
878 // enabled.
879 void PostEnableBreakpadInitialization() {
880 SetProcessStartTime();
881 g_pid = getpid();
882
883 base::debug::SetDumpWithoutCrashingFunction(&DumpProcess);
884 #if defined(ADDRESS_SANITIZER)
885 // Register the callback for AddressSanitizer error reporting.
886 __asan_set_error_report_callback(AsanLinuxBreakpadCallback);
887 #endif
888 }
889
890 } // namespace
891
892 void LoadDataFromFD(google_breakpad::PageAllocator& allocator,
893 int fd, bool close_fd, uint8_t** file_data, size_t* size) {
894 STAT_STRUCT st;
895 if (FSTAT_FUNC(fd, &st) != 0) {
896 static const char msg[] = "Cannot upload crash dump: stat failed\n";
897 WriteLog(msg, sizeof(msg) - 1);
898 if (close_fd)
899 IGNORE_RET(sys_close(fd));
900 return;
901 }
902
903 *file_data = reinterpret_cast<uint8_t*>(allocator.Alloc(st.st_size));
904 if (!(*file_data)) {
905 static const char msg[] = "Cannot upload crash dump: cannot alloc\n";
906 WriteLog(msg, sizeof(msg) - 1);
907 if (close_fd)
908 IGNORE_RET(sys_close(fd));
909 return;
910 }
911 my_memset(*file_data, 0xf, st.st_size);
912
913 *size = st.st_size;
914 int byte_read = sys_read(fd, *file_data, *size);
915 if (byte_read == -1) {
916 static const char msg[] = "Cannot upload crash dump: read failed\n";
917 WriteLog(msg, sizeof(msg) - 1);
918 if (close_fd)
919 IGNORE_RET(sys_close(fd));
920 return;
921 }
922
923 if (close_fd)
924 IGNORE_RET(sys_close(fd));
925 }
926
927 void LoadDataFromFile(google_breakpad::PageAllocator& allocator,
928 const char* filename,
929 int* fd, uint8_t** file_data, size_t* size) {
930 // WARNING: this code runs in a compromised context. It may not call into
931 // libc nor allocate memory normally.
932 *fd = sys_open(filename, O_RDONLY, 0);
933 *size = 0;
934
935 if (*fd < 0) {
936 static const char msg[] = "Cannot upload crash dump: failed to open\n";
937 WriteLog(msg, sizeof(msg) - 1);
938 return;
939 }
940
941 LoadDataFromFD(allocator, *fd, true, file_data, size);
942 }
943
944 // Spawn the appropriate upload process for the current OS:
945 // - generic Linux invokes wget.
946 // - ChromeOS invokes crash_reporter.
947 // |dumpfile| is the path to the dump data file.
948 // |mime_boundary| is only used on Linux.
949 // |exe_buf| is only used on CrOS and is the crashing process' name.
950 void ExecUploadProcessOrTerminate(const BreakpadInfo& info,
951 const char* dumpfile,
952 const char* mime_boundary,
953 const char* exe_buf,
954 google_breakpad::PageAllocator* allocator) {
955 #if defined(OS_CHROMEOS)
956 // CrOS uses crash_reporter instead of wget to report crashes,
957 // it needs to know where the crash dump lives and the pid and uid of the
958 // crashing process.
959 static const char kCrashReporterBinary[] = "/sbin/crash_reporter";
960
961 char pid_buf[kUint64StringSize];
962 uint64_t pid_str_length = my_uint64_len(info.pid);
963 my_uint64tos(pid_buf, info.pid, pid_str_length);
964 pid_buf[pid_str_length] = '\0';
965
966 char uid_buf[kUint64StringSize];
967 uid_t uid = geteuid();
968 uint64_t uid_str_length = my_uint64_len(uid);
969 my_uint64tos(uid_buf, uid, uid_str_length);
970 uid_buf[uid_str_length] = '\0';
971 const char* args[] = {
972 kCrashReporterBinary,
973 "--chrome",
974 dumpfile,
975 "--pid",
976 pid_buf,
977 "--uid",
978 uid_buf,
979 "--exe",
980 exe_buf,
981 NULL,
982 };
983 static const char msg[] = "Cannot upload crash dump: cannot exec "
984 "/sbin/crash_reporter\n";
985 #else
986 // The --header argument to wget looks like:
987 // --header=Content-Type: multipart/form-data; boundary=XYZ
988 // where the boundary has two fewer leading '-' chars
989 static const char header_msg[] =
990 "--header=Content-Type: multipart/form-data; boundary=";
991 char* const header = reinterpret_cast<char*>(allocator->Alloc(
992 sizeof(header_msg) - 1 + strlen(mime_boundary) - 2 + 1));
993 memcpy(header, header_msg, sizeof(header_msg) - 1);
994 memcpy(header + sizeof(header_msg) - 1, mime_boundary + 2,
995 strlen(mime_boundary) - 2);
996 // We grab the NUL byte from the end of |mime_boundary|.
997
998 // The --post-file argument to wget looks like:
999 // --post-file=/tmp/...
1000 static const char post_file_msg[] = "--post-file=";
1001 char* const post_file = reinterpret_cast<char*>(allocator->Alloc(
1002 sizeof(post_file_msg) - 1 + strlen(dumpfile) + 1));
1003 memcpy(post_file, post_file_msg, sizeof(post_file_msg) - 1);
1004 memcpy(post_file + sizeof(post_file_msg) - 1, dumpfile, strlen(dumpfile));
1005
1006 static const char kWgetBinary[] = "/usr/bin/wget";
1007 const char* args[] = {
1008 kWgetBinary,
1009 header,
1010 post_file,
1011 kUploadURL,
1012 "--timeout=10", // Set a timeout so we don't hang forever.
1013 "--tries=1", // Don't retry if the upload fails.
1014 "-O", // output reply to fd 3
1015 "/dev/fd/3",
1016 NULL,
1017 };
1018 static const char msg[] = "Cannot upload crash dump: cannot exec "
1019 "/usr/bin/wget\n";
1020 #endif
1021 execve(args[0], const_cast<char**>(args), environ);
1022 WriteLog(msg, sizeof(msg) - 1);
1023 sys__exit(1);
1024 }
1025
1026 // Runs in the helper process to wait for the upload process running
1027 // ExecUploadProcessOrTerminate() to finish. Returns the number of bytes written
1028 // to |fd| and save the written contents to |buf|.
1029 // |buf| needs to be big enough to hold |bytes_to_read| + 1 characters.
1030 size_t WaitForCrashReportUploadProcess(int fd, size_t bytes_to_read,
1031 char* buf) {
1032 size_t bytes_read = 0;
1033
1034 // Upload should finish in about 10 seconds. Add a few more 500 ms
1035 // internals to account for process startup time.
1036 for (size_t wait_count = 0; wait_count < 24; ++wait_count) {
1037 struct kernel_pollfd poll_fd;
1038 poll_fd.fd = fd;
1039 poll_fd.events = POLLIN | POLLPRI | POLLERR;
1040 int ret = sys_poll(&poll_fd, 1, 500);
1041 if (ret < 0) {
1042 // Error
1043 break;
1044 } else if (ret > 0) {
1045 // There is data to read.
1046 ssize_t len = HANDLE_EINTR(
1047 sys_read(fd, buf + bytes_read, bytes_to_read - bytes_read));
1048 if (len < 0)
1049 break;
1050 bytes_read += len;
1051 if (bytes_read == bytes_to_read)
1052 break;
1053 }
1054 // |ret| == 0 -> timed out, continue waiting.
1055 // or |bytes_read| < |bytes_to_read| still, keep reading.
1056 }
1057 buf[bytes_to_read] = 0; // Always NUL terminate the buffer.
1058 return bytes_read;
1059 }
1060
1061 // |buf| should be |expected_len| + 1 characters in size and NULL terminated.
1062 bool IsValidCrashReportId(const char* buf, size_t bytes_read,
1063 size_t expected_len) {
1064 if (bytes_read != expected_len)
1065 return false;
1066 #if defined(OS_CHROMEOS)
1067 return my_strcmp(buf, "_sys_cr_finished") == 0;
1068 #else
1069 for (size_t i = 0; i < bytes_read; ++i) {
1070 if (!my_isxdigit(buf[i]))
1071 return false;
1072 }
1073 return true;
1074 #endif
1075 }
1076
1077 // |buf| should be |expected_len| + 1 characters in size and NULL terminated.
1078 void HandleCrashReportId(const char* buf, size_t bytes_read,
1079 size_t expected_len) {
1080 WriteNewline();
1081 if (!IsValidCrashReportId(buf, bytes_read, expected_len)) {
1082 #if defined(OS_CHROMEOS)
1083 static const char msg[] = "Crash_reporter failed to process crash report";
1084 #else
1085 static const char msg[] = "Failed to get crash dump id.";
1086 #endif
1087 WriteLog(msg, sizeof(msg) - 1);
1088 WriteNewline();
1089 return;
1090 }
1091
1092 #if defined(OS_CHROMEOS)
1093 static const char msg[] = "Crash dump received by crash_reporter\n";
1094 WriteLog(msg, sizeof(msg) - 1);
1095 #else
1096 // Write crash dump id to stderr.
1097 static const char msg[] = "Crash dump id: ";
1098 WriteLog(msg, sizeof(msg) - 1);
1099 WriteLog(buf, my_strlen(buf));
1100 WriteNewline();
1101
1102 // Write crash dump id to crash log as: seconds_since_epoch,crash_id
1103 struct kernel_timeval tv;
1104 if (g_crash_log_path && !sys_gettimeofday(&tv, NULL)) {
1105 uint64_t time = kernel_timeval_to_ms(&tv) / 1000;
1106 char time_str[kUint64StringSize];
1107 const unsigned time_len = my_uint64_len(time);
1108 my_uint64tos(time_str, time, time_len);
1109
1110 const int kLogOpenFlags = O_CREAT | O_WRONLY | O_APPEND | O_CLOEXEC;
1111 int log_fd = sys_open(g_crash_log_path, kLogOpenFlags, 0600);
1112 if (log_fd > 0) {
1113 sys_write(log_fd, time_str, time_len);
1114 sys_write(log_fd, ",", 1);
1115 sys_write(log_fd, buf, my_strlen(buf));
1116 sys_write(log_fd, "\n", 1);
1117 IGNORE_RET(sys_close(log_fd));
1118 }
1119 }
1120 #endif
1121 }
1122
1123 #if defined(OS_CHROMEOS)
1124 const char* GetCrashingProcessName(const BreakpadInfo& info,
1125 google_breakpad::PageAllocator* allocator) {
1126 // Symlink to process binary is at /proc/###/exe.
1127 char linkpath[kUint64StringSize + sizeof("/proc/") + sizeof("/exe")] =
1128 "/proc/";
1129 uint64_t pid_value_len = my_uint64_len(info.pid);
1130 my_uint64tos(linkpath + sizeof("/proc/") - 1, info.pid, pid_value_len);
1131 linkpath[sizeof("/proc/") - 1 + pid_value_len] = '\0';
1132 my_strlcat(linkpath, "/exe", sizeof(linkpath));
1133
1134 const int kMaxSize = 4096;
1135 char* link = reinterpret_cast<char*>(allocator->Alloc(kMaxSize));
1136 if (link) {
1137 ssize_t size = readlink(linkpath, link, kMaxSize);
1138 if (size < kMaxSize && size > 0) {
1139 // readlink(2) doesn't add a terminating NUL, so do it now.
1140 link[size] = '\0';
1141
1142 const char* name = my_strrchr(link, '/');
1143 if (name)
1144 return name + 1;
1145 return link;
1146 }
1147 }
1148 // Either way too long, or a read error.
1149 return "chrome-crash-unknown-process";
1150 }
1151 #endif
1152
1153 void HandleCrashDump(const BreakpadInfo& info) {
1154 int dumpfd;
1155 bool keep_fd = false;
1156 size_t dump_size;
1157 uint8_t* dump_data;
1158 google_breakpad::PageAllocator allocator;
1159 const char* exe_buf = NULL;
1160
1161 #if defined(OS_CHROMEOS)
1162 // Grab the crashing process' name now, when it should still be available.
1163 // If we try to do this later in our grandchild the crashing process has
1164 // already terminated.
1165 exe_buf = GetCrashingProcessName(info, &allocator);
1166 #endif
1167
1168 if (info.fd != -1) {
1169 // Dump is provided with an open FD.
1170 keep_fd = true;
1171 dumpfd = info.fd;
1172
1173 // The FD is pointing to the end of the file.
1174 // Rewind, we'll read the data next.
1175 if (lseek(dumpfd, 0, SEEK_SET) == -1) {
1176 static const char msg[] = "Cannot upload crash dump: failed to "
1177 "reposition minidump FD\n";
1178 WriteLog(msg, sizeof(msg) - 1);
1179 IGNORE_RET(sys_close(dumpfd));
1180 return;
1181 }
1182 LoadDataFromFD(allocator, info.fd, false, &dump_data, &dump_size);
1183 } else {
1184 // Dump is provided with a path.
1185 keep_fd = false;
1186 LoadDataFromFile(allocator, info.filename, &dumpfd, &dump_data, &dump_size);
1187 }
1188
1189 // TODO(jcivelli): make log work when using FDs.
1190 #if defined(ADDRESS_SANITIZER)
1191 int logfd;
1192 size_t log_size;
1193 uint8_t* log_data;
1194 // Load the AddressSanitizer log into log_data.
1195 LoadDataFromFile(allocator, info.log_filename, &logfd, &log_data, &log_size);
1196 #endif
1197
1198 // We need to build a MIME block for uploading to the server. Since we are
1199 // going to fork and run wget, it needs to be written to a temp file.
1200 const int ufd = sys_open("/dev/urandom", O_RDONLY, 0);
1201 if (ufd < 0) {
1202 static const char msg[] = "Cannot upload crash dump because /dev/urandom"
1203 " is missing\n";
1204 WriteLog(msg, sizeof(msg) - 1);
1205 return;
1206 }
1207
1208 static const char temp_file_template[] =
1209 "/tmp/chromium-upload-XXXXXXXXXXXXXXXX";
1210 char temp_file[sizeof(temp_file_template)];
1211 int temp_file_fd = -1;
1212 if (keep_fd) {
1213 temp_file_fd = dumpfd;
1214 // Rewind the destination, we are going to overwrite it.
1215 if (lseek(dumpfd, 0, SEEK_SET) == -1) {
1216 static const char msg[] = "Cannot upload crash dump: failed to "
1217 "reposition minidump FD (2)\n";
1218 WriteLog(msg, sizeof(msg) - 1);
1219 IGNORE_RET(sys_close(dumpfd));
1220 return;
1221 }
1222 } else {
1223 if (info.upload) {
1224 memcpy(temp_file, temp_file_template, sizeof(temp_file_template));
1225
1226 for (unsigned i = 0; i < 10; ++i) {
1227 uint64_t t;
1228 sys_read(ufd, &t, sizeof(t));
1229 write_uint64_hex(temp_file + sizeof(temp_file) - (16 + 1), t);
1230
1231 temp_file_fd = sys_open(temp_file, O_WRONLY | O_CREAT | O_EXCL, 0600);
1232 if (temp_file_fd >= 0)
1233 break;
1234 }
1235
1236 if (temp_file_fd < 0) {
1237 static const char msg[] = "Failed to create temporary file in /tmp: "
1238 "cannot upload crash dump\n";
1239 WriteLog(msg, sizeof(msg) - 1);
1240 IGNORE_RET(sys_close(ufd));
1241 return;
1242 }
1243 } else {
1244 temp_file_fd = sys_open(info.filename, O_WRONLY, 0600);
1245 if (temp_file_fd < 0) {
1246 static const char msg[] = "Failed to save crash dump: failed to open\n";
1247 WriteLog(msg, sizeof(msg) - 1);
1248 IGNORE_RET(sys_close(ufd));
1249 return;
1250 }
1251 }
1252 }
1253
1254 // The MIME boundary is 28 hyphens, followed by a 64-bit nonce and a NUL.
1255 char mime_boundary[28 + 16 + 1];
1256 my_memset(mime_boundary, '-', 28);
1257 uint64_t boundary_rand;
1258 sys_read(ufd, &boundary_rand, sizeof(boundary_rand));
1259 write_uint64_hex(mime_boundary + 28, boundary_rand);
1260 mime_boundary[28 + 16] = 0;
1261 IGNORE_RET(sys_close(ufd));
1262
1263 // The MIME block looks like this:
1264 // BOUNDARY \r\n
1265 // Content-Disposition: form-data; name="prod" \r\n \r\n
1266 // Chrome_Linux \r\n
1267 // BOUNDARY \r\n
1268 // Content-Disposition: form-data; name="ver" \r\n \r\n
1269 // 1.2.3.4 \r\n
1270 // BOUNDARY \r\n
1271 //
1272 // zero or one:
1273 // Content-Disposition: form-data; name="ptime" \r\n \r\n
1274 // abcdef \r\n
1275 // BOUNDARY \r\n
1276 //
1277 // zero or one:
1278 // Content-Disposition: form-data; name="ptype" \r\n \r\n
1279 // abcdef \r\n
1280 // BOUNDARY \r\n
1281 //
1282 // zero or one:
1283 // Content-Disposition: form-data; name="lsb-release" \r\n \r\n
1284 // abcdef \r\n
1285 // BOUNDARY \r\n
1286 //
1287 // zero or one:
1288 // Content-Disposition: form-data; name="oom-size" \r\n \r\n
1289 // 1234567890 \r\n
1290 // BOUNDARY \r\n
1291 //
1292 // zero or more (up to CrashKeyStorage::num_entries = 64):
1293 // Content-Disposition: form-data; name=crash-key-name \r\n
1294 // crash-key-value \r\n
1295 // BOUNDARY \r\n
1296 //
1297 // Content-Disposition: form-data; name="dump"; filename="dump" \r\n
1298 // Content-Type: application/octet-stream \r\n \r\n
1299 // <dump contents>
1300 // \r\n BOUNDARY -- \r\n
1301
1302 #if defined(OS_CHROMEOS)
1303 CrashReporterWriter writer(temp_file_fd);
1304 #else
1305 MimeWriter writer(temp_file_fd, mime_boundary);
1306 #endif
1307 {
1308 // TODO(thestig) Do not use this inside a compromised context.
1309 std::string product_name;
1310 std::string version;
1311
1312 GetBreakpadClient()->GetProductNameAndVersion(&product_name, &version);
1313
1314 writer.AddBoundary();
1315 writer.AddPairString("prod", product_name.c_str());
1316 writer.AddBoundary();
1317 writer.AddPairString("ver", version.c_str());
1318 writer.AddBoundary();
1319 if (info.pid > 0) {
1320 char pid_value_buf[kUint64StringSize];
1321 uint64_t pid_value_len = my_uint64_len(info.pid);
1322 my_uint64tos(pid_value_buf, info.pid, pid_value_len);
1323 static const char pid_key_name[] = "pid";
1324 writer.AddPairData(pid_key_name, sizeof(pid_key_name) - 1,
1325 pid_value_buf, pid_value_len);
1326 writer.AddBoundary();
1327 }
1328 #if defined(OS_ANDROID)
1329 // Addtional MIME blocks are added for logging on Android devices.
1330 static const char android_build_id[] = "android_build_id";
1331 static const char android_build_fp[] = "android_build_fp";
1332 static const char device[] = "device";
1333 static const char model[] = "model";
1334 static const char brand[] = "brand";
1335 static const char exception_info[] = "exception_info";
1336
1337 base::android::BuildInfo* android_build_info =
1338 base::android::BuildInfo::GetInstance();
1339 writer.AddPairString(
1340 android_build_id, android_build_info->android_build_id());
1341 writer.AddBoundary();
1342 writer.AddPairString(
1343 android_build_fp, android_build_info->android_build_fp());
1344 writer.AddBoundary();
1345 writer.AddPairString(device, android_build_info->device());
1346 writer.AddBoundary();
1347 writer.AddPairString(model, android_build_info->model());
1348 writer.AddBoundary();
1349 writer.AddPairString(brand, android_build_info->brand());
1350 writer.AddBoundary();
1351 if (android_build_info->java_exception_info() != NULL) {
1352 writer.AddPairString(exception_info,
1353 android_build_info->java_exception_info());
1354 writer.AddBoundary();
1355 }
1356 #endif
1357 writer.Flush();
1358 }
1359
1360 if (info.process_start_time > 0) {
1361 struct kernel_timeval tv;
1362 if (!sys_gettimeofday(&tv, NULL)) {
1363 uint64_t time = kernel_timeval_to_ms(&tv);
1364 if (time > info.process_start_time) {
1365 time -= info.process_start_time;
1366 char time_str[kUint64StringSize];
1367 const unsigned time_len = my_uint64_len(time);
1368 my_uint64tos(time_str, time, time_len);
1369
1370 static const char process_time_msg[] = "ptime";
1371 writer.AddPairData(process_time_msg, sizeof(process_time_msg) - 1,
1372 time_str, time_len);
1373 writer.AddBoundary();
1374 writer.Flush();
1375 }
1376 }
1377 }
1378
1379 if (info.process_type_length) {
1380 writer.AddPairString("ptype", info.process_type);
1381 writer.AddBoundary();
1382 writer.Flush();
1383 }
1384
1385 if (info.distro_length) {
1386 static const char distro_msg[] = "lsb-release";
1387 writer.AddPairString(distro_msg, info.distro);
1388 writer.AddBoundary();
1389 writer.Flush();
1390 }
1391
1392 if (info.oom_size) {
1393 char oom_size_str[kUint64StringSize];
1394 const unsigned oom_size_len = my_uint64_len(info.oom_size);
1395 my_uint64tos(oom_size_str, info.oom_size, oom_size_len);
1396 static const char oom_size_msg[] = "oom-size";
1397 writer.AddPairData(oom_size_msg, sizeof(oom_size_msg) - 1,
1398 oom_size_str, oom_size_len);
1399 writer.AddBoundary();
1400 writer.Flush();
1401 }
1402
1403 if (info.crash_keys) {
1404 CrashKeyStorage::Iterator crash_key_iterator(*info.crash_keys);
1405 const CrashKeyStorage::Entry* entry;
1406 while ((entry = crash_key_iterator.Next())) {
1407 writer.AddPairString(entry->key, entry->value);
1408 writer.AddBoundary();
1409 writer.Flush();
1410 }
1411 }
1412
1413 writer.AddFileContents(g_dump_msg, dump_data, dump_size);
1414 #if defined(ADDRESS_SANITIZER)
1415 // Append a multipart boundary and the contents of the AddressSanitizer log.
1416 writer.AddBoundary();
1417 writer.AddFileContents(g_log_msg, log_data, log_size);
1418 #endif
1419 writer.AddEnd();
1420 writer.Flush();
1421
1422 IGNORE_RET(sys_close(temp_file_fd));
1423
1424 #if defined(OS_ANDROID)
1425 if (info.filename) {
1426 int filename_length = my_strlen(info.filename);
1427
1428 // If this was a file, we need to copy it to the right place and use the
1429 // right file name so it gets uploaded by the browser.
1430 const char msg[] = "Output crash dump file:";
1431 WriteLog(msg, sizeof(msg) - 1);
1432 WriteLog(info.filename, filename_length - 1);
1433
1434 char pid_buf[kUint64StringSize];
1435 uint64_t pid_str_length = my_uint64_len(info.pid);
1436 my_uint64tos(pid_buf, info.pid, pid_str_length);
1437
1438 // -1 because we won't need the null terminator on the original filename.
1439 unsigned done_filename_len = filename_length - 1 + pid_str_length;
1440 char* done_filename = reinterpret_cast<char*>(
1441 allocator.Alloc(done_filename_len));
1442 // Rename the file such that the pid is the suffix in order signal to other
1443 // processes that the minidump is complete. The advantage of using the pid
1444 // as the suffix is that it is trivial to associate the minidump with the
1445 // crashed process.
1446 // Finally, note strncpy prevents null terminators from
1447 // being copied. Pad the rest with 0's.
1448 my_strncpy(done_filename, info.filename, done_filename_len);
1449 // Append the suffix a null terminator should be added.
1450 my_strncat(done_filename, pid_buf, pid_str_length);
1451 // Rename the minidump file to signal that it is complete.
1452 if (rename(info.filename, done_filename)) {
1453 const char failed_msg[] = "Failed to rename:";
1454 WriteLog(failed_msg, sizeof(failed_msg) - 1);
1455 WriteLog(info.filename, filename_length - 1);
1456 const char to_msg[] = "to";
1457 WriteLog(to_msg, sizeof(to_msg) - 1);
1458 WriteLog(done_filename, done_filename_len - 1);
1459 }
1460 }
1461 #endif
1462
1463 if (!info.upload)
1464 return;
1465
1466 const pid_t child = sys_fork();
1467 if (!child) {
1468 // Spawned helper process.
1469 //
1470 // This code is called both when a browser is crashing (in which case,
1471 // nothing really matters any more) and when a renderer/plugin crashes, in
1472 // which case we need to continue.
1473 //
1474 // Since we are a multithreaded app, if we were just to fork(), we might
1475 // grab file descriptors which have just been created in another thread and
1476 // hold them open for too long.
1477 //
1478 // Thus, we have to loop and try and close everything.
1479 const int fd = sys_open("/proc/self/fd", O_DIRECTORY | O_RDONLY, 0);
1480 if (fd < 0) {
1481 for (unsigned i = 3; i < 8192; ++i)
1482 IGNORE_RET(sys_close(i));
1483 } else {
1484 google_breakpad::DirectoryReader reader(fd);
1485 const char* name;
1486 while (reader.GetNextEntry(&name)) {
1487 int i;
1488 if (my_strtoui(&i, name) && i > 2 && i != fd)
1489 IGNORE_RET(sys_close(i));
1490 reader.PopEntry();
1491 }
1492
1493 IGNORE_RET(sys_close(fd));
1494 }
1495
1496 IGNORE_RET(sys_setsid());
1497
1498 // Leave one end of a pipe in the upload process and watch for it getting
1499 // closed by the upload process exiting.
1500 int fds[2];
1501 if (sys_pipe(fds) >= 0) {
1502 const pid_t upload_child = sys_fork();
1503 if (!upload_child) {
1504 // Upload process.
1505 IGNORE_RET(sys_close(fds[0]));
1506 IGNORE_RET(sys_dup2(fds[1], 3));
1507 ExecUploadProcessOrTerminate(info, temp_file, mime_boundary, exe_buf,
1508 &allocator);
1509 }
1510
1511 // Helper process.
1512 if (upload_child > 0) {
1513 IGNORE_RET(sys_close(fds[1]));
1514
1515 const size_t kCrashIdLength = 16;
1516 char id_buf[kCrashIdLength + 1];
1517 size_t bytes_read =
1518 WaitForCrashReportUploadProcess(fds[0], kCrashIdLength, id_buf);
1519 HandleCrashReportId(id_buf, bytes_read, kCrashIdLength);
1520
1521 if (sys_waitpid(upload_child, NULL, WNOHANG) == 0) {
1522 // Upload process is still around, kill it.
1523 sys_kill(upload_child, SIGKILL);
1524 }
1525 }
1526 }
1527
1528 // Helper process.
1529 IGNORE_RET(sys_unlink(info.filename));
1530 #if defined(ADDRESS_SANITIZER)
1531 IGNORE_RET(sys_unlink(info.log_filename));
1532 #endif
1533 IGNORE_RET(sys_unlink(temp_file));
1534 sys__exit(0);
1535 }
1536
1537 // Main browser process.
1538 if (child <= 0)
1539 return;
1540 (void) HANDLE_EINTR(sys_waitpid(child, NULL, 0));
1541 }
1542
1543 void InitCrashReporter(const std::string& process_type) {
1544 #if defined(OS_ANDROID)
1545 // This will guarantee that the BuildInfo has been initialized and subsequent
1546 // calls will not require memory allocation.
1547 base::android::BuildInfo::GetInstance();
1548 #endif
1549 // Determine the process type and take appropriate action.
1550 const CommandLine& parsed_command_line = *CommandLine::ForCurrentProcess();
1551 if (parsed_command_line.HasSwitch(switches::kDisableBreakpad))
1552 return;
1553
1554 if (process_type.empty()) {
1555 bool enable_breakpad = GetBreakpadClient()->GetCollectStatsConsent() ||
1556 GetBreakpadClient()->IsRunningUnattended();
1557 enable_breakpad &=
1558 !parsed_command_line.HasSwitch(switches::kDisableBreakpad);
1559 if (!enable_breakpad) {
1560 enable_breakpad = parsed_command_line.HasSwitch(
1561 switches::kEnableCrashReporterForTesting);
1562 }
1563 if (!enable_breakpad) {
1564 VLOG(1) << "Breakpad disabled";
1565 return;
1566 }
1567
1568 InitCrashKeys();
1569 EnableCrashDumping(GetBreakpadClient()->IsRunningUnattended());
1570 } else if (GetBreakpadClient()->EnableBreakpadForProcess(process_type)) {
1571 #if defined(OS_ANDROID)
1572 NOTREACHED() << "Breakpad initialized with InitCrashReporter() instead of "
1573 "InitNonBrowserCrashReporter in " << process_type << " process.";
1574 return;
1575 #else
1576 // We might be chrooted in a zygote or renderer process so we cannot call
1577 // GetCollectStatsConsent because that needs access the the user's home
1578 // dir. Instead, we set a command line flag for these processes.
1579 // Even though plugins are not chrooted, we share the same code path for
1580 // simplicity.
1581 if (!parsed_command_line.HasSwitch(switches::kEnableCrashReporter))
1582 return;
1583 InitCrashKeys();
1584 SetClientIdFromCommandLine(parsed_command_line);
1585 EnableNonBrowserCrashDumping();
1586 VLOG(1) << "Non Browser crash dumping enabled for: " << process_type;
1587 #endif // #if defined(OS_ANDROID)
1588 }
1589
1590 PostEnableBreakpadInitialization();
1591 }
1592
1593 #if defined(OS_ANDROID)
1594 void InitNonBrowserCrashReporterForAndroid(const std::string& process_type) {
1595 const CommandLine* command_line = CommandLine::ForCurrentProcess();
1596 if (command_line->HasSwitch(switches::kEnableCrashReporter)) {
1597 // On Android we need to provide a FD to the file where the minidump is
1598 // generated as the renderer and browser run with different UIDs
1599 // (preventing the browser from inspecting the renderer process).
1600 int minidump_fd = base::GlobalDescriptors::GetInstance()->MaybeGet(
1601 GetBreakpadClient()->GetAndroidMinidumpDescriptor());
1602 if (minidump_fd < 0) {
1603 NOTREACHED() << "Could not find minidump FD, crash reporting disabled.";
1604 } else {
1605 EnableNonBrowserCrashDumping(process_type, minidump_fd);
1606 }
1607 }
1608 }
1609 #endif // OS_ANDROID
1610
1611 bool IsCrashReporterEnabled() {
1612 return g_is_crash_reporter_enabled;
1613 }
1614
1615 } // namespace breakpad
OLDNEW
« no previous file with comments | « components/breakpad/app/breakpad_linux.h ('k') | components/breakpad/app/breakpad_linux_impl.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698