xref: /dragonfly/usr.bin/fstat/fstat.c (revision 32c20b8b)
1 /*-
2  * Copyright (c) 1988, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. All advertising materials mentioning features or use of this software
14  *    must display the following acknowledgement:
15  *	This product includes software developed by the University of
16  *	California, Berkeley and its contributors.
17  * 4. Neither the name of the University nor the names of its contributors
18  *    may be used to endorse or promote products derived from this software
19  *    without specific prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  *
33  * @(#) Copyright (c) 1988, 1993 The Regents of the University of California.  All rights reserved.
34  * @(#)fstat.c	8.3 (Berkeley) 5/2/95
35  * $FreeBSD: src/usr.bin/fstat/fstat.c,v 1.21.2.7 2001/11/21 10:49:37 dwmalone Exp $
36  * $DragonFly: src/usr.bin/fstat/fstat.c,v 1.26 2008/05/03 04:13:12 dillon Exp $
37  */
38 
39 #define	_KERNEL_STRUCTURES
40 
41 #include <sys/param.h>
42 #include <sys/time.h>
43 #include <sys/user.h>
44 #include <sys/stat.h>
45 #include <sys/vnode.h>
46 #include <sys/socket.h>
47 #include <sys/socketvar.h>
48 #include <sys/domain.h>
49 #include <sys/protosw.h>
50 #include <sys/un.h>
51 #include <sys/unpcb.h>
52 #include <sys/sysctl.h>
53 #include <sys/filedesc.h>
54 #include <sys/queue.h>
55 #include <sys/pipe.h>
56 #include <sys/conf.h>
57 #include <sys/file.h>
58 #include <sys/ktrace.h>
59 #include <vfs/ufs/quota.h>
60 #include <vfs/ufs/inode.h>
61 #include <sys/mount.h>
62 #include <sys/namecache.h>
63 #include <nfs/nfsproto.h>
64 #include <nfs/rpcv2.h>
65 #include <nfs/nfs.h>
66 #include <nfs/nfsnode.h>
67 
68 
69 #include <vm/vm.h>
70 #include <vm/vm_map.h>
71 #include <vm/vm_object.h>
72 
73 #include <net/route.h>
74 #include <netinet/in.h>
75 #include <netinet/in_systm.h>
76 #include <netinet/ip.h>
77 #include <netinet/in_pcb.h>
78 
79 #include <ctype.h>
80 #include <err.h>
81 #include <fcntl.h>
82 #include <kvm.h>
83 #include <limits.h>
84 #include <nlist.h>
85 #include <paths.h>
86 #include <pwd.h>
87 #include <stdio.h>
88 #include <stdlib.h>
89 #include <string.h>
90 #include <unistd.h>
91 #include <netdb.h>
92 
93 #include "fstat.h"
94 
95 #define	TEXT	-1
96 #define	CDIR	-2
97 #define	RDIR	-3
98 #define	TRACE	-4
99 #define	MMAP	-5
100 
101 DEVS *devs;
102 
103 static void make_printable(char *buf, int len);
104 
105 #ifdef notdef
106 struct nlist nl[] = {
107 	{ "" },
108 };
109 #endif
110 
111 int 	fsflg,	/* show files on same filesystem as file(s) argument */
112 	pflg,	/* show files open by a particular pid */
113 	uflg;	/* show files open by a particular (effective) user */
114 int 	checkfile; /* true if restricting to particular files or filesystems */
115 int	nflg;	/* (numerical) display f.s. and rdev as dev_t */
116 int	vflg;	/* display errors in locating kernel data objects etc... */
117 int	mflg;	/* include memory-mapped files */
118 int	wflg_mnt = 16;
119 int	wflg_cmd = 10;
120 int	pid_width = 5;
121 int	ino_width = 6;
122 
123 
124 struct fdnode *ofiles; 	/* buffer of pointers to file structures */
125 int maxfiles;
126 
127 #define ALLOC_OFILES(d)	\
128 	if ((d) > maxfiles) { \
129 		free(ofiles); \
130 		ofiles = malloc((d) * sizeof(struct fdnode)); \
131 		if (ofiles == NULL) { \
132 			err(1, NULL); \
133 		} \
134 		maxfiles = (d); \
135 	}
136 
137 kvm_t *kd;
138 
139 void dofiles(struct kinfo_proc *kp, struct proc *p);
140 void dommap(struct proc *p);
141 void vtrans(struct vnode *vp, struct nchandle *ncr, int i, int flag);
142 int  ufs_filestat(struct vnode *vp, struct filestat *fsp);
143 int  nfs_filestat(struct vnode *vp, struct filestat *fsp);
144 char *getmnton(struct mount *m, struct namecache_list *ncplist, struct nchandle *ncr);
145 void pipetrans(struct pipe *pi, int i, int flag);
146 void socktrans(struct socket *sock, int i);
147 void getinetproto(int number);
148 int  getfname(const char *filename);
149 void usage(void);
150 
151 
152 int
153 main(int argc, char **argv)
154 {
155 	struct passwd *passwd;
156 	struct kinfo_proc *p, *plast;
157 	struct proc proc;
158 	int arg, ch, what;
159 	char *memf, *nlistf;
160 	char buf[_POSIX2_LINE_MAX];
161 	int cnt;
162 
163 	arg = 0;
164 	what = KERN_PROC_ALL;
165 	nlistf = memf = NULL;
166 	while ((ch = getopt(argc, argv, "fmnp:u:vwN:M:")) != -1)
167 		switch((char)ch) {
168 		case 'f':
169 			fsflg = 1;
170 			break;
171 		case 'M':
172 			memf = optarg;
173 			break;
174 		case 'N':
175 			nlistf = optarg;
176 			break;
177 		case 'm':
178 			mflg = 1;
179 			break;
180 		case 'n':
181 			nflg = 1;
182 			break;
183 		case 'p':
184 			if (pflg++)
185 				usage();
186 			if (!isdigit(*optarg)) {
187 				warnx("-p requires a process id");
188 				usage();
189 			}
190 			what = KERN_PROC_PID;
191 			arg = atoi(optarg);
192 			break;
193 		case 'u':
194 			if (uflg++)
195 				usage();
196 			if (!(passwd = getpwnam(optarg)))
197 				errx(1, "%s: unknown uid", optarg);
198 			what = KERN_PROC_UID;
199 			arg = passwd->pw_uid;
200 			break;
201 		case 'v':
202 			vflg = 1;
203 			break;
204 		case 'w':
205 			wflg_mnt = 40;
206 			wflg_cmd = 16;
207 			break;
208 		case '?':
209 		default:
210 			usage();
211 		}
212 
213 	if (*(argv += optind)) {
214 		for (; *argv; ++argv) {
215 			if (getfname(*argv))
216 				checkfile = 1;
217 		}
218 		if (!checkfile)	/* file(s) specified, but none accessable */
219 			exit(1);
220 	}
221 
222 	ALLOC_OFILES(256);	/* reserve space for file pointers */
223 
224 	if (fsflg && !checkfile) {
225 		/* -f with no files means use wd */
226 		if (getfname(".") == 0)
227 			exit(1);
228 		checkfile = 1;
229 	}
230 
231 	/*
232 	 * Discard setgid privileges if not the running kernel so that bad
233 	 * guys can't print interesting stuff from kernel memory.
234 	 */
235 	if (nlistf != NULL || memf != NULL)
236 		setgid(getgid());
237 
238 	if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL)
239 		errx(1, "%s", buf);
240 #ifdef notdef
241 	if (kvm_nlist(kd, nl) != 0)
242 		errx(1, "no namelist: %s", kvm_geterr(kd));
243 #endif
244 	if ((p = kvm_getprocs(kd, what, arg, &cnt)) == NULL)
245 		errx(1, "%s", kvm_geterr(kd));
246 	if (nflg)
247 		printf("USER     %-*.*s %*.*s   FD DEV              %*.*s MODE   SZ|DV R/W",
248 			wflg_cmd, wflg_cmd, "CMD",
249 			pid_width, pid_width, "PID",
250 			ino_width, ino_width, "INUM");
251 	else
252 		printf("USER     %-*.*s %*.*s   FD %-*.*s %*.*s MODE           SZ|DV R/W",
253 			wflg_cmd, wflg_cmd, "CMD",
254 			pid_width, pid_width, "PID",
255 			wflg_mnt, wflg_mnt, "PATH",
256 			ino_width, ino_width, "INUM");
257 	if (checkfile && fsflg == 0)
258 		printf(" NAME\n");
259 	else
260 		putchar('\n');
261 
262 	for (plast = &p[cnt]; p < plast; ++p) {
263 		if (p->kp_stat == SZOMB)
264 			continue;
265 		if (!kread((void *)p->kp_paddr, &proc, sizeof(proc))) {
266 			dprintf(stderr, "can't read proc at %p for pid %d\n",
267 			    (void *)p->kp_paddr, Pid);
268 			continue;
269 		}
270 		dofiles(p, &proc);
271 		if (mflg)
272 			dommap(&proc);
273 	}
274 	exit(0);
275 }
276 
277 char	*Uname, *Comm;
278 int	Pid;
279 
280 #define PREFIX(i) \
281 	printf("%-8.8s %-*s %*d", Uname, wflg_cmd, Comm, pid_width, Pid); \
282 	switch(i) { \
283 	case TEXT: \
284 		printf(" text"); \
285 		break; \
286 	case CDIR: \
287 		printf("   wd"); \
288 		break; \
289 	case RDIR: \
290 		printf(" root"); \
291 		break; \
292 	case TRACE: \
293 		printf("   tr"); \
294 		break; \
295 	case MMAP: \
296 		printf(" mmap"); \
297 		break; \
298 	default: \
299 		printf(" %4d", i); \
300 		break; \
301 	}
302 
303 /*
304  * print open files attributed to this process
305  */
306 void
307 dofiles(struct kinfo_proc *kp, struct proc *p)
308 {
309 	int i;
310 	struct file file;
311 	struct filedesc filed;
312 	struct ktrace_node ktrace_node;
313 
314 	Uname = user_from_uid(kp->kp_uid, 0);
315 	Pid = kp->kp_pid;
316 	Comm = kp->kp_comm;
317 	make_printable(Comm, strlen(Comm));
318 
319 	if (p->p_fd == NULL)
320 		return;
321 	if (!kread(p->p_fd, &filed, sizeof (filed))) {
322 		dprintf(stderr, "can't read filedesc at %p for pid %d\n",
323 		    (void *)p->p_fd, Pid);
324 		return;
325 	}
326 	/*
327 	 * root directory vnode, if one
328 	 */
329 	if (filed.fd_rdir)
330 		vtrans(filed.fd_rdir, &filed.fd_nrdir, RDIR, FREAD);
331 	/*
332 	 * current working directory vnode
333 	 */
334 	vtrans(filed.fd_cdir, &filed.fd_ncdir, CDIR, FREAD);
335 	/*
336 	 * ktrace vnode, if one
337 	 */
338 	if (p->p_tracenode) {
339 		if (kread(p->p_tracenode, &ktrace_node, sizeof (ktrace_node)))
340 			vtrans(ktrace_node.kn_vp, NULL, TRACE, FREAD|FWRITE);
341 	}
342 	/*
343 	 * text vnode, if one
344 	 */
345 	if (p->p_textvp)
346 		vtrans(p->p_textvp, NULL, TEXT, FREAD);
347 	/*
348 	 * open files
349 	 */
350 	ALLOC_OFILES(filed.fd_lastfile+1);
351 	if (!kread(filed.fd_files, ofiles,
352 	    (filed.fd_lastfile+1) * sizeof(struct fdnode))) {
353 		dprintf(stderr,
354 		    "can't read file structures at %p for pid %d\n",
355 		    (void *)filed.fd_files, Pid);
356 		return;
357 	}
358 	for (i = 0; i <= filed.fd_lastfile; i++) {
359 		if (ofiles[i].fp == NULL)
360 			continue;
361 		if (!kread(ofiles[i].fp, &file, sizeof (struct file))) {
362 			dprintf(stderr, "can't read file %d at %p for pid %d\n",
363 			    i, (void *)ofiles[i].fp, Pid);
364 			continue;
365 		}
366 		if (file.f_type == DTYPE_VNODE) {
367 			vtrans((struct vnode *)file.f_data, &file.f_nchandle, i,
368 				file.f_flag);
369 		} else if (file.f_type == DTYPE_SOCKET) {
370 			if (checkfile == 0)
371 				socktrans((struct socket *)file.f_data, i);
372 		}
373 #ifdef DTYPE_PIPE
374 		else if (file.f_type == DTYPE_PIPE) {
375 			if (checkfile == 0)
376 				pipetrans((struct pipe *)file.f_data, i,
377 				    file.f_flag);
378 		}
379 #endif
380 #ifdef DTYPE_FIFO
381 		else if (file.f_type == DTYPE_FIFO) {
382 			if (checkfile == 0)
383 				vtrans((struct vnode *)file.f_data, &file.f_nchandle,
384 					i, file.f_flag);
385 		}
386 #endif
387 		else {
388 			dprintf(stderr,
389 			    "unknown file type %d for file %d of pid %d\n",
390 			    file.f_type, i, Pid);
391 		}
392 	}
393 }
394 
395 void
396 dommap(struct proc *p)
397 {
398 	struct vmspace vmspace;
399 	vm_map_t map;
400 	struct vm_map_entry entry;
401 	vm_map_entry_t entryp;
402 	struct vm_object object;
403 	vm_object_t objp;
404 	int prot, fflags;
405 
406 	if (!kread(p->p_vmspace, &vmspace, sizeof(vmspace))) {
407 		dprintf(stderr, "can't read vmspace at %p for pid %d\n",
408 		    (void *)p->p_vmspace, Pid);
409 		return;
410 	}
411 
412 	map = &vmspace.vm_map;
413 
414 	for (entryp = map->header.next; entryp != &p->p_vmspace->vm_map.header;
415 	    entryp = entry.next) {
416 		if (!kread(entryp, &entry, sizeof(entry))) {
417 			dprintf(stderr,
418 			    "can't read vm_map_entry at %p for pid %d\n",
419 			    (void *)entryp, Pid);
420 			return;
421 		}
422 
423 		if (entry.maptype == VM_MAPTYPE_SUBMAP)
424 			continue;
425 
426 		if ((objp = entry.object.vm_object) == NULL)
427 			continue;
428 
429 		for (; objp; objp = object.backing_object) {
430 			if (!kread(objp, &object, sizeof(object))) {
431 				dprintf(stderr,
432 				    "can't read vm_object at %p for pid %d\n",
433 				    (void *)objp, Pid);
434 				return;
435 			}
436 		}
437 
438 		prot = entry.protection;
439 		fflags = (prot & VM_PROT_READ ? FREAD : 0) |
440 		    (prot & VM_PROT_WRITE ? FWRITE : 0);
441 
442 		switch (object.type) {
443 		case OBJT_VNODE:
444 			vtrans((struct vnode *)object.handle, NULL,
445 				MMAP, fflags);
446 			break;
447 		default:
448 			break;
449 		}
450 	}
451 }
452 
453 void
454 vtrans(struct vnode *vp, struct nchandle *ncr, int i, int flag)
455 {
456 	struct vnode vn;
457 	struct filestat fst;
458 	char rw[3], mode[15];
459 	const char *badtype = NULL, *filename;
460 
461 	filename = badtype = NULL;
462 	if (!kread(vp, &vn, sizeof (struct vnode))) {
463 		dprintf(stderr, "can't read vnode at %p for pid %d\n",
464 		    (void *)vp, Pid);
465 		return;
466 	}
467 	if (vn.v_type == VNON || vn.v_tag == VT_NON)
468 		badtype = "none";
469 	else if (vn.v_type == VBAD)
470 		badtype = "bad";
471 	else
472 		switch (vn.v_tag) {
473 		case VT_UFS:
474 			if (!ufs_filestat(&vn, &fst))
475 				badtype = "error";
476 			break;
477 		case VT_MFS:
478 			if (!ufs_filestat(&vn, &fst))
479 				badtype = "error";
480 			break;
481 		case VT_NFS:
482 			if (!nfs_filestat(&vn, &fst))
483 				badtype = "error";
484 			break;
485 
486 		case VT_MSDOSFS:
487 			if (!msdosfs_filestat(&vn, &fst))
488 				badtype = "error";
489 			break;
490 
491 		case VT_ISOFS:
492 			if (!isofs_filestat(&vn, &fst))
493 				badtype = "error";
494 			break;
495 
496 		default: {
497 			static char unknown[10];
498 			sprintf(unknown, "?(%x)", vn.v_tag);
499 			badtype=unknown;
500 			break;
501 		}
502 	}
503 	if (checkfile) {
504 		int fsmatch = 0;
505 		DEVS *d;
506 
507 		if (badtype)
508 			return;
509 		for (d = devs; d != NULL; d = d->next)
510 			if (d->fsid == fst.fsid) {
511 				fsmatch = 1;
512 				if (d->ino == (ino_t)fst.fileid) {
513 					filename = d->name;
514 					break;
515 				}
516 			}
517 		if (fsmatch == 0 || (filename == NULL && fsflg == 0))
518 			return;
519 	}
520 	PREFIX(i);
521 	if (badtype) {
522 		(void)printf(" %-*s  %10s    -\n",
523 			     wflg_mnt,
524 			     getmnton(vn.v_mount, &vn.v_namecache, ncr),
525 			     badtype);
526 		return;
527 	}
528 	if (nflg)
529 		(void)printf(" %3d,%-9d   ", major(fst.fsid), minor(fst.fsid));
530 	else
531 		(void)printf(" %-*s", wflg_mnt, getmnton(vn.v_mount, &vn.v_namecache, ncr));
532 	if (nflg)
533 		(void)sprintf(mode, "%o", fst.mode);
534 	else
535 		strmode(fst.mode, mode);
536 	(void)printf(" %*ld %10s", ino_width, fst.fileid, mode);
537 	switch (vn.v_type) {
538 	case VBLK:
539 	case VCHR: {
540 		char *name;
541 
542 		if (nflg || ((name = devname(fst.rdev, vn.v_type == VCHR ?
543 		    S_IFCHR : S_IFBLK)) == NULL))
544 			printf(" %3d,%-4d", major(fst.rdev), minor(fst.rdev));
545 		else
546 			printf(" %8s", name);
547 		break;
548 	}
549 	default:
550 		printf(" %8llu", fst.size);
551 	}
552 	rw[0] = '\0';
553 	if (flag & FREAD)
554 		strcat(rw, "r");
555 	if (flag & FWRITE)
556 		strcat(rw, "w");
557 	printf(" %2s", rw);
558 	if (filename && !fsflg)
559 		printf("  %s", filename);
560 	putchar('\n');
561 }
562 
563 int
564 ufs_filestat(struct vnode *vp, struct filestat *fsp)
565 {
566 	struct inode inode;
567 
568 	if (!kread(VTOI(vp), &inode, sizeof (inode))) {
569 		dprintf(stderr, "can't read inode at %p for pid %d\n",
570 		    (void *)VTOI(vp), Pid);
571 		return 0;
572 	}
573 	/*
574 	 * The st_dev from stat(2) is a udev_t. These kernel structures
575 	 * contain dev_t structures. We need to convert to udev to make
576 	 * comparisons
577 	 */
578 	fsp->fsid = dev2udev(inode.i_dev);
579 	fsp->fileid = (long)inode.i_number;
580 	fsp->mode = (mode_t)inode.i_mode;
581 	fsp->size = inode.i_size;
582 	fsp->rdev = inode.i_rdev;
583 
584 	return 1;
585 }
586 
587 int
588 nfs_filestat(struct vnode *vp, struct filestat *fsp)
589 {
590 	struct nfsnode nfsnode;
591 	mode_t mode;
592 
593 	if (!kread(VTONFS(vp), &nfsnode, sizeof (nfsnode))) {
594 		dprintf(stderr, "can't read nfsnode at %p for pid %d\n",
595 		    (void *)VTONFS(vp), Pid);
596 		return 0;
597 	}
598 	fsp->fsid = nfsnode.n_vattr.va_fsid;
599 	fsp->fileid = nfsnode.n_vattr.va_fileid;
600 	fsp->size = nfsnode.n_size;
601 	fsp->rdev = makeudev(nfsnode.n_vattr.va_rmajor,
602 			     nfsnode.n_vattr.va_rminor);
603 	mode = (mode_t)nfsnode.n_vattr.va_mode;
604 	switch (vp->v_type) {
605 	case VREG:
606 		mode |= S_IFREG;
607 		break;
608 	case VDIR:
609 		mode |= S_IFDIR;
610 		break;
611 	case VBLK:
612 		mode |= S_IFBLK;
613 		break;
614 	case VCHR:
615 		mode |= S_IFCHR;
616 		break;
617 	case VLNK:
618 		mode |= S_IFLNK;
619 		break;
620 	case VSOCK:
621 		mode |= S_IFSOCK;
622 		break;
623 	case VFIFO:
624 		mode |= S_IFIFO;
625 		break;
626 	case VDATABASE:
627 		break;
628 	case VNON:
629 	case VBAD:
630 		return 0;
631 	};
632 	fsp->mode = mode;
633 
634 	return 1;
635 }
636 
637 
638 char *
639 getmnton(struct mount *m, struct namecache_list *ncplist, struct nchandle *ncr)
640 {
641 	static struct mount mount_l;
642 	static struct mtab {
643 		struct mtab *next;
644 		struct mount *m;
645 		char mntonname[MNAMELEN];
646 	} *mhead = NULL;
647 	struct mtab *mt;
648 	struct namecache *ncp;
649 	struct namecache ncp_copy;
650 	static char path[1024];
651 	int i;
652 
653 	/*
654 	 * If no ncp is passed try to find one via ncplist.
655 	 */
656 	if (ncr == NULL || ncr->ncp == NULL) {
657 		ncp = ncplist->tqh_first;
658 	} else {
659 		ncp = ncr->ncp;
660 	}
661 
662 	/*
663 	 * If we have an ncp, traceback the path.  This is a kvm pointer.
664 	 */
665 	if (ncp) {
666 		if (!kread(m, &mount_l, sizeof(struct mount))) {
667 			warnx("can't read mount table at %p", (void *)m);
668 			return (NULL);
669 		}
670 		i = sizeof(path) - 1;
671 		path[i] = 0;
672 		while (ncp) {
673 			/*
674 			 * If this is the root of the mount then traverse
675 			 * to the parent mount.
676 			 */
677 			if (ncp == mount_l.mnt_ncmountpt.ncp) {
678 				ncp = mount_l.mnt_ncmounton.ncp;
679 				if (ncp == NULL)
680 					break;
681 				m = mount_l.mnt_ncmounton.mount;
682 				if (!kread(m, &mount_l, sizeof(struct mount))) {
683 					warnx("can't read mount table at %p", (void *)m);
684 					return (NULL);
685 				}
686 			}
687 
688 			/*
689 			 * Ok, pull out the ncp and extract the name
690 			 */
691 			if (!kread(ncp, &ncp_copy, sizeof(ncp_copy))) {
692 				warnx("can't read ncp at %p", ncp);
693 				return (NULL);
694 			}
695 			if (i <= ncp_copy.nc_nlen)
696 				break;
697 			i -= ncp_copy.nc_nlen;
698 			if (!kread(ncp_copy.nc_name, path + i, ncp_copy.nc_nlen)) {
699 				warnx("can't read ncp %p path component at %p", ncp, ncp_copy.nc_name);
700 				return (NULL);
701 			}
702 			make_printable(path + i, ncp_copy.nc_nlen);
703 			path[--i] = '/';
704 			ncp = ncp_copy.nc_parent;
705 		}
706 		if (i == sizeof(path) - 1)
707 			path[--i] = '/';
708 		return(path + i);
709 	}
710 
711 	/*
712 	 * If all else fails print out the mount point path
713 	 */
714 	for (mt = mhead; mt != NULL; mt = mt->next) {
715 		if (m == mt->m)
716 			return (mt->mntonname);
717 	}
718 	if (!kread(m, &mount_l, sizeof(struct mount))) {
719 		warnx("can't read mount table at %p", (void *)m);
720 		return (NULL);
721 	}
722 	if ((mt = malloc(sizeof (struct mtab))) == NULL)
723 		err(1, NULL);
724 	mt->m = m;
725 	bcopy(&mount_l.mnt_stat.f_mntonname[0], &mt->mntonname[0], MNAMELEN);
726 	mt->next = mhead;
727 	mhead = mt;
728 	return (mt->mntonname);
729 }
730 
731 void
732 pipetrans(struct pipe *pi, int i, int flag)
733 {
734 	struct pipe pip;
735 	char rw[3];
736 
737 	PREFIX(i);
738 
739 	/* fill in socket */
740 	if (!kread(pi, &pip, sizeof(struct pipe))) {
741 		dprintf(stderr, "can't read pipe at %p\n", (void *)pi);
742 		goto bad;
743 	}
744 
745 	printf("* pipe %8lx <-> %8lx", (u_long)pi, (u_long)pip.pipe_peer);
746 	printf(" %6d", (int)(pip.pipe_buffer.windex - pip.pipe_buffer.rindex));
747 	rw[0] = '\0';
748 	if (flag & FREAD)
749 		strcat(rw, "r");
750 	if (flag & FWRITE)
751 		strcat(rw, "w");
752 	printf(" %2s", rw);
753 	putchar('\n');
754 	return;
755 
756 bad:
757 	printf("* error\n");
758 }
759 
760 void
761 socktrans(struct socket *sock, int i)
762 {
763 	static const char *stypename[] = {
764 		"unused",	/* 0 */
765 		"stream", 	/* 1 */
766 		"dgram",	/* 2 */
767 		"raw",		/* 3 */
768 		"rdm",		/* 4 */
769 		"seqpak"	/* 5 */
770 	};
771 #define	STYPEMAX 5
772 	struct socket	so;
773 	struct protosw	proto;
774 	struct domain	dom;
775 	struct inpcb	inpcb;
776 	struct unpcb	unpcb;
777 	int len;
778 	char dname[32];
779 
780 	PREFIX(i);
781 
782 	/* fill in socket */
783 	if (!kread(sock, &so, sizeof(struct socket))) {
784 		dprintf(stderr, "can't read sock at %p\n", (void *)sock);
785 		goto bad;
786 	}
787 
788 	/* fill in protosw entry */
789 	if (!kread(so.so_proto, &proto, sizeof(struct protosw))) {
790 		dprintf(stderr, "can't read protosw at %p",
791 		    (void *)so.so_proto);
792 		goto bad;
793 	}
794 
795 	/* fill in domain */
796 	if (!kread(proto.pr_domain, &dom, sizeof(struct domain))) {
797 		dprintf(stderr, "can't read domain at %p\n",
798 		    (const void *)proto.pr_domain);
799 		goto bad;
800 	}
801 
802 	if ((len = kvm_read(kd, (u_long)dom.dom_name, dname,
803 	    sizeof(dname) - 1)) < 0) {
804 		dprintf(stderr, "can't read domain name at %p\n",
805 		    (void *)dom.dom_name);
806 		dname[0] = '\0';
807 	}
808 	else
809 		dname[len] = '\0';
810 
811 	if ((u_short)so.so_type > STYPEMAX)
812 		printf("* %s ?%d", dname, so.so_type);
813 	else
814 		printf("* %s %s", dname, stypename[so.so_type]);
815 
816 	/*
817 	 * protocol specific formatting
818 	 *
819 	 * Try to find interesting things to print.  For tcp, the interesting
820 	 * thing is the address of the tcpcb, for udp and others, just the
821 	 * inpcb (socket pcb).  For unix domain, its the address of the socket
822 	 * pcb and the address of the connected pcb (if connected).  Otherwise
823 	 * just print the protocol number and address of the socket itself.
824 	 * The idea is not to duplicate netstat, but to make available enough
825 	 * information for further analysis.
826 	 */
827 	switch(dom.dom_family) {
828 	case AF_INET:
829 	case AF_INET6:
830 		getinetproto(proto.pr_protocol);
831 		if (proto.pr_protocol == IPPROTO_TCP ) {
832 			if (so.so_pcb) {
833 				if (kvm_read(kd, (u_long)so.so_pcb,
834 				    (char *)&inpcb, sizeof(struct inpcb))
835 				    != sizeof(struct inpcb)) {
836 					dprintf(stderr,
837 					    "can't read inpcb at %p\n",
838 					    (void *)so.so_pcb);
839 					goto bad;
840 				}
841 				printf(" %lx", (u_long)inpcb.inp_ppcb);
842 			}
843 		}
844 		else if (so.so_pcb)
845 			printf(" %lx", (u_long)so.so_pcb);
846 		break;
847 	case AF_UNIX:
848 		/* print address of pcb and connected pcb */
849 		if (so.so_pcb) {
850 			printf(" %lx", (u_long)so.so_pcb);
851 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&unpcb,
852 			    sizeof(struct unpcb)) != sizeof(struct unpcb)){
853 				dprintf(stderr, "can't read unpcb at %p\n",
854 				    (void *)so.so_pcb);
855 				goto bad;
856 			}
857 			if (unpcb.unp_conn) {
858 				char shoconn[4], *cp;
859 
860 				cp = shoconn;
861 				if (!(so.so_state & SS_CANTRCVMORE))
862 					*cp++ = '<';
863 				*cp++ = '-';
864 				if (!(so.so_state & SS_CANTSENDMORE))
865 					*cp++ = '>';
866 				*cp = '\0';
867 				printf(" %s %lx", shoconn,
868 				    (u_long)unpcb.unp_conn);
869 			}
870 		}
871 		break;
872 	default:
873 		/* print protocol number and socket address */
874 		printf(" %d %lx", proto.pr_protocol, (u_long)sock);
875 	}
876 	printf("\n");
877 	return;
878 bad:
879 	printf("* error\n");
880 }
881 
882 
883 /*
884  * Read the cdev structure in the kernel (as pointed to by a dev_t)
885  * in order to work out the associated udev_t
886  */
887 udev_t
888 dev2udev(void *dev)
889 {
890 	struct cdev si;
891 
892 	if (kread(dev, &si, sizeof si)) {
893 		if ((si.si_umajor & 0xffffff00) ||
894 		    (si.si_uminor & 0x0000ff00)) {
895 			return NOUDEV;
896 		}
897 		return((si.si_umajor << 8) | si.si_uminor);
898 	} else {
899 		dprintf(stderr, "can't convert dev_t %p to a udev_t\n", dev);
900 		return NOUDEV;
901 	}
902 }
903 
904 udev_t
905 makeudev(int x, int y)
906 {
907         if ((x & 0xffffff00) || (y & 0x0000ff00))
908 		return NOUDEV;
909 	return ((x << 8) | y);
910 }
911 
912 /*
913  * getinetproto --
914  *	print name of protocol number
915  */
916 void
917 getinetproto(int number)
918 {
919 	static int isopen;
920 	struct protoent *pe;
921 
922 	if (!isopen)
923 		setprotoent(++isopen);
924 	if ((pe = getprotobynumber(number)) != NULL)
925 		printf(" %s", pe->p_name);
926 	else
927 		printf(" %d", number);
928 }
929 
930 int
931 getfname(const char *filename)
932 {
933 	struct stat statbuf;
934 	DEVS *cur;
935 
936 	if (stat(filename, &statbuf)) {
937 		warn("%s", filename);
938 		return(0);
939 	}
940 	if ((cur = malloc(sizeof(DEVS))) == NULL)
941 		err(1, NULL);
942 	cur->next = devs;
943 	devs = cur;
944 
945 	cur->ino = statbuf.st_ino;
946 	cur->fsid = statbuf.st_dev;
947 	cur->name = filename;
948 	return(1);
949 }
950 
951 void
952 usage(void)
953 {
954 	(void)fprintf(stderr,
955  "usage: fstat [-fmnv] [-p pid] [-u user] [-N system] [-M core] [file ...]\n");
956 	exit(1);
957 }
958 
959 static
960 void
961 make_printable(char *buf, int len)
962 {
963     while (len > 0) {
964 	if (!isprint(*buf))
965 		*buf = '?';
966 	++buf;
967 	--len;
968     }
969 }
970 
971 ssize_t
972 kread(const void *kaddr, void *uaddr, size_t nbytes)
973 {
974     if (nbytes > 0x10000000)
975 	return(0);
976 
977     if (kvm_read(kd, (u_long)kaddr, (char *)uaddr, nbytes) == (ssize_t)nbytes)
978 	return(1);
979     else
980 	return(0);
981 }
982 
983