xref: /dragonfly/usr.bin/fstat/fstat.c (revision 73b5ca6b)
1 /*-
2  * Copyright (c) 1988, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. Neither the name of the University nor the names of its contributors
14  *    may be used to endorse or promote products derived from this software
15  *    without specific prior written permission.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27  * SUCH DAMAGE.
28  *
29  * @(#) Copyright (c) 1988, 1993 The Regents of the University of California.  All rights reserved.
30  * @(#)fstat.c	8.3 (Berkeley) 5/2/95
31  * $FreeBSD: src/usr.bin/fstat/fstat.c,v 1.21.2.7 2001/11/21 10:49:37 dwmalone Exp $
32  */
33 
34 #include <sys/user.h>
35 #include <sys/param.h>
36 #include <sys/time.h>
37 #include <sys/stat.h>
38 #include <sys/vnode.h>
39 #include <sys/socket.h>
40 #include <sys/socketvar.h>
41 #include <sys/domain.h>
42 #include <sys/protosw.h>
43 #include <sys/un.h>
44 #include <sys/unpcb.h>
45 #include <sys/sysctl.h>
46 #include <sys/filedesc.h>
47 #include <sys/queue.h>
48 #include <sys/pipe.h>
49 #include <sys/conf.h>
50 #include <sys/file.h>
51 #include <sys/ktrace.h>
52 #include <vfs/ufs/quota.h>
53 #include <vfs/ufs/inode.h>
54 #include <sys/mount.h>
55 #include <sys/namecache.h>
56 #include <nfs/nfsproto.h>
57 #include <nfs/rpcv2.h>
58 #include <nfs/nfs.h>
59 #include <nfs/nfsnode.h>
60 #include <sys/devfs.h>
61 
62 #include <vm/vm.h>
63 #include <vm/vm_map.h>
64 #include <vm/vm_object.h>
65 
66 #include <net/route.h>
67 #include <netinet/in.h>
68 #include <netinet/in_systm.h>
69 #include <netinet/ip.h>
70 #include <netinet/in_pcb.h>
71 
72 #include <ctype.h>
73 #include <err.h>
74 #include <fcntl.h>
75 #include <kvm.h>
76 #include <limits.h>
77 #include <nlist.h>
78 #include <paths.h>
79 #include <pwd.h>
80 #include <stdio.h>
81 #include <stdlib.h>
82 #include <string.h>
83 #include <unistd.h>
84 #include <netdb.h>
85 
86 #include "fstat.h"
87 
88 #define	TEXT	-1
89 #define	CDIR	-2
90 #define	RDIR	-3
91 #define	TRACE	-4
92 #define	MMAP	-5
93 
94 DEVS *devs;
95 
96 static void make_printable(char *buf, int len);
97 
98 #ifdef notdef
99 struct nlist nl[] = {
100 	{ "" },
101 };
102 #endif
103 
104 int 	fsflg,	/* show files on same filesystem as file(s) argument */
105 	pflg,	/* show files open by a particular pid */
106 	uflg;	/* show files open by a particular (effective) user */
107 int 	checkfile; /* true if restricting to particular files or filesystems */
108 int	nflg;	/* (numerical) display f.s. and rdev as dev_t */
109 int	vflg;	/* display errors in locating kernel data objects etc... */
110 int	mflg;	/* include memory-mapped files */
111 int	wflg_mnt = 16;
112 int	wflg_cmd = 10;
113 int	pid_width = 5;
114 int	ino_width = 6;
115 
116 const char *Uname;
117 char	*Comm;
118 int	Pid;
119 
120 struct fdnode *ofiles; 	/* buffer of pointers to file structures */
121 int maxfiles;
122 
123 #define ALLOC_OFILES(d)	\
124 	if ((d) > maxfiles) { \
125 		free(ofiles); \
126 		ofiles = malloc((d) * sizeof(struct fdnode)); \
127 		if (ofiles == NULL) { \
128 			err(1, NULL); \
129 		} \
130 		maxfiles = (d); \
131 	}
132 
133 kvm_t *kd;
134 
135 static void dofiles(struct kinfo_proc *, struct proc *);
136 static void dommap(struct proc *);
137 static void vtrans(struct vnode *, struct nchandle *, int, int, off_t);
138 static int  ufs_filestat(struct vnode *, struct filestat *);
139 static int  nfs_filestat(struct vnode *, struct filestat *);
140 static int  devfs_filestat(struct vnode *, struct filestat *);
141 static char *getmnton(struct mount *, struct namecache_list *, struct nchandle *);
142 static void pipetrans(struct pipe *, int, int);
143 static void socktrans(struct socket *, int);
144 static void getinetproto(int);
145 static int  getfname(const char *);
146 static void usage(void) __dead2;
147 
148 
149 int
150 main(int argc, char **argv)
151 {
152 	struct passwd *passwd;
153 	struct kinfo_proc *p, *plast;
154 	struct proc proc;
155 	int arg, ch, what;
156 	char *memf, *nlistf;
157 	char buf[_POSIX2_LINE_MAX];
158 	int cnt;
159 
160 	arg = 0;
161 	what = KERN_PROC_ALL;
162 	nlistf = memf = NULL;
163 	while ((ch = getopt(argc, argv, "fmnp:u:vwN:M:")) != -1)
164 		switch((char)ch) {
165 		case 'f':
166 			fsflg = 1;
167 			break;
168 		case 'M':
169 			memf = optarg;
170 			break;
171 		case 'N':
172 			nlistf = optarg;
173 			break;
174 		case 'm':
175 			mflg = 1;
176 			break;
177 		case 'n':
178 			nflg = 1;
179 			break;
180 		case 'p':
181 			if (pflg++)
182 				usage();
183 			if (!isdigit(*optarg)) {
184 				warnx("-p requires a process id");
185 				usage();
186 			}
187 			what = KERN_PROC_PID;
188 			arg = atoi(optarg);
189 			break;
190 		case 'u':
191 			if (uflg++)
192 				usage();
193 			if (!(passwd = getpwnam(optarg)))
194 				errx(1, "%s: unknown uid", optarg);
195 			what = KERN_PROC_UID;
196 			arg = passwd->pw_uid;
197 			break;
198 		case 'v':
199 			vflg = 1;
200 			break;
201 		case 'w':
202 			wflg_mnt = 40;
203 			wflg_cmd = 16;
204 			break;
205 		case '?':
206 		default:
207 			usage();
208 		}
209 
210 	if (*(argv += optind)) {
211 		for (; *argv; ++argv) {
212 			if (getfname(*argv))
213 				checkfile = 1;
214 		}
215 		if (!checkfile)	/* file(s) specified, but none accessable */
216 			exit(1);
217 	}
218 
219 	ALLOC_OFILES(256);	/* reserve space for file pointers */
220 
221 	if (fsflg && !checkfile) {
222 		/* -f with no files means use wd */
223 		if (getfname(".") == 0)
224 			exit(1);
225 		checkfile = 1;
226 	}
227 
228 	/*
229 	 * Discard setgid privileges if not the running kernel so that bad
230 	 * guys can't print interesting stuff from kernel memory.
231 	 */
232 	if (nlistf != NULL || memf != NULL)
233 		setgid(getgid());
234 
235 	if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL)
236 		errx(1, "%s", buf);
237 #ifdef notdef
238 	if (kvm_nlist(kd, nl) != 0)
239 		errx(1, "no namelist: %s", kvm_geterr(kd));
240 #endif
241 	if ((p = kvm_getprocs(kd, what, arg, &cnt)) == NULL)
242 		errx(1, "%s", kvm_geterr(kd));
243 	if (nflg)
244 		printf("USER     %-*.*s %*.*s   FD DEV              %*.*s MODE   SZ|DV R/W",
245 			wflg_cmd, wflg_cmd, "CMD",
246 			pid_width, pid_width, "PID",
247 			ino_width, ino_width, "INUM");
248 	else
249 		printf("USER     %-*.*s %*.*s   FD %-*.*s %*.*s MODE           SZ|DV R/W",
250 			wflg_cmd, wflg_cmd, "CMD",
251 			pid_width, pid_width, "PID",
252 			wflg_mnt, wflg_mnt, "PATH",
253 			ino_width, ino_width, "INUM");
254 	if (checkfile && fsflg == 0)
255 		printf(" NAME\n");
256 	else
257 		putchar('\n');
258 
259 	for (plast = &p[cnt]; p < plast; ++p) {
260 		if (p->kp_stat == SZOMB)
261 			continue;
262 		if (!kread((void *)p->kp_paddr, &proc, sizeof(proc))) {
263 			dprintf(stderr, "can't read proc at %p for pid %d\n",
264 			    (void *)p->kp_paddr, Pid);
265 			continue;
266 		}
267 		dofiles(p, &proc);
268 		if (mflg)
269 			dommap(&proc);
270 	}
271 	exit(0);
272 }
273 
274 #define PREFIX(i) \
275 	printf("%-8.8s %-*s %*d", Uname, wflg_cmd, Comm, pid_width, Pid); \
276 	switch(i) { \
277 	case TEXT: \
278 		printf(" text"); \
279 		break; \
280 	case CDIR: \
281 		printf("   wd"); \
282 		break; \
283 	case RDIR: \
284 		printf(" root"); \
285 		break; \
286 	case TRACE: \
287 		printf("   tr"); \
288 		break; \
289 	case MMAP: \
290 		printf(" mmap"); \
291 		break; \
292 	default: \
293 		printf(" %4d", i); \
294 		break; \
295 	}
296 
297 /*
298  * print open files attributed to this process
299  */
300 static void
301 dofiles(struct kinfo_proc *kp, struct proc *p)
302 {
303 	int i;
304 	struct file file;
305 	struct filedesc filed;
306 	struct ktrace_node ktrace_node;
307 
308 	Uname = user_from_uid(kp->kp_uid, 0);
309 	Pid = kp->kp_pid;
310 	Comm = kp->kp_comm;
311 	make_printable(Comm, strlen(Comm));
312 
313 	if (p->p_fd == NULL)
314 		return;
315 	if (!kread(p->p_fd, &filed, sizeof (filed))) {
316 		dprintf(stderr, "can't read filedesc at %p for pid %d\n",
317 		    (void *)p->p_fd, Pid);
318 		return;
319 	}
320 	/*
321 	 * root directory vnode, if one
322 	 */
323 	if (filed.fd_rdir)
324 		vtrans(filed.fd_rdir, &filed.fd_nrdir, RDIR, FREAD, 0);
325 	/*
326 	 * current working directory vnode
327 	 */
328 	vtrans(filed.fd_cdir, &filed.fd_ncdir, CDIR, FREAD, 0);
329 	/*
330 	 * ktrace vnode, if one
331 	 */
332 	if (p->p_tracenode) {
333 		if (kread(p->p_tracenode, &ktrace_node, sizeof (ktrace_node)))
334 			vtrans(ktrace_node.kn_vp, NULL, TRACE, FREAD|FWRITE, 0);
335 	}
336 	/*
337 	 * text vnode, if one
338 	 */
339 	if (p->p_textvp)
340 		vtrans(p->p_textvp, NULL, TEXT, FREAD, 0);
341 	/*
342 	 * open files
343 	 */
344 	ALLOC_OFILES(filed.fd_lastfile+1);
345 	if (!kread(filed.fd_files, ofiles,
346 	    (filed.fd_lastfile+1) * sizeof(struct fdnode))) {
347 		dprintf(stderr,
348 		    "can't read file structures at %p for pid %d\n",
349 		    (void *)filed.fd_files, Pid);
350 		return;
351 	}
352 	for (i = 0; i <= filed.fd_lastfile; i++) {
353 		if (ofiles[i].fp == NULL)
354 			continue;
355 		if (!kread(ofiles[i].fp, &file, sizeof (struct file))) {
356 			dprintf(stderr, "can't read file %d at %p for pid %d\n",
357 			    i, (void *)ofiles[i].fp, Pid);
358 			continue;
359 		}
360 		if (file.f_type == DTYPE_VNODE) {
361 			vtrans((struct vnode *)file.f_data, &file.f_nchandle,
362 				i, file.f_flag, file.f_offset);
363 		} else if (file.f_type == DTYPE_SOCKET) {
364 			if (checkfile == 0)
365 				socktrans((struct socket *)file.f_data, i);
366 		}
367 #ifdef DTYPE_PIPE
368 		else if (file.f_type == DTYPE_PIPE) {
369 			if (checkfile == 0)
370 				pipetrans((struct pipe *)file.f_data, i,
371 				    file.f_flag);
372 		}
373 #endif
374 #ifdef DTYPE_FIFO
375 		else if (file.f_type == DTYPE_FIFO) {
376 			if (checkfile == 0)
377 				vtrans((struct vnode *)file.f_data,
378 					&file.f_nchandle,
379 					i, file.f_flag, file.f_offset);
380 		}
381 #endif
382 		else {
383 			dprintf(stderr,
384 			    "unknown file type %d for file %d of pid %d\n",
385 			    file.f_type, i, Pid);
386 		}
387 	}
388 }
389 
390 static void
391 dommap(struct proc *p)
392 {
393 	struct vmspace vmspace;
394 	vm_map_t map;
395 	struct vm_map_entry entry;
396 	vm_map_entry_t ken;
397 	struct vm_object object;
398 	vm_object_t objp;
399 	int prot, fflags;
400 
401 	if (!kread(p->p_vmspace, &vmspace, sizeof(vmspace))) {
402 		dprintf(stderr, "can't read vmspace at %p for pid %d\n",
403 		    (void *)p->p_vmspace, Pid);
404 		return;
405 	}
406 
407 	map = &vmspace.vm_map;
408 	for (ken = kvm_vm_map_entry_first(kd, map, &entry);
409 	     ken; ken = kvm_vm_map_entry_next(kd, ken, &entry)) {
410 		if (entry.maptype == VM_MAPTYPE_SUBMAP)
411 			continue;
412 
413 		if ((objp = entry.object.vm_object) == NULL)
414 			continue;
415 
416 		for (; objp; objp = object.backing_object) {
417 			if (!kread(objp, &object, sizeof(object))) {
418 				dprintf(stderr,
419 				    "can't read vm_object at %p for pid %d\n",
420 				    (void *)objp, Pid);
421 				return;
422 			}
423 		}
424 
425 		prot = entry.protection;
426 		fflags = (prot & VM_PROT_READ ? FREAD : 0) |
427 		    (prot & VM_PROT_WRITE ? FWRITE : 0);
428 
429 		switch (object.type) {
430 		case OBJT_VNODE:
431 			vtrans((struct vnode *)object.handle, NULL,
432 				MMAP, fflags, 0);
433 			break;
434 		default:
435 			break;
436 		}
437 	}
438 }
439 
440 static void
441 vtrans(struct vnode *vp, struct nchandle *ncr, int i, int flag, off_t off)
442 {
443 	struct vnode vn;
444 	struct filestat fst;
445 	char rw[3], mode[15];
446 	const char *badtype = NULL, *filename;
447 	char *name;
448 
449 	fst.offset = off;
450 	filename = badtype = NULL;
451 	if (!kread(vp, &vn, sizeof (struct vnode))) {
452 		dprintf(stderr, "can't read vnode at %p for pid %d\n",
453 		    (void *)vp, Pid);
454 		return;
455 	}
456 	if (vn.v_type == VNON || vn.v_tag == VT_NON)
457 		badtype = "none";
458 	else if (vn.v_type == VBAD)
459 		badtype = "bad";
460 	else
461 		switch (vn.v_tag) {
462 		case VT_HAMMER:
463 			if (!hammer_filestat(&vn, &fst))
464 				badtype = "error";
465 			break;
466 		case VT_HAMMER2:
467 			if (!hammer2_filestat(&vn, &fst))
468 				badtype = "error";
469 			break;
470 		case VT_TMPFS:
471 			if (!tmpfs_filestat(&vn, &fst))
472 				badtype = "error";
473 			break;
474 		case VT_UFS:
475 			if (!ufs_filestat(&vn, &fst))
476 				badtype = "error";
477 			break;
478 		case VT_MFS:
479 			if (!ufs_filestat(&vn, &fst))
480 				badtype = "error";
481 			break;
482 		case VT_NFS:
483 			if (!nfs_filestat(&vn, &fst))
484 				badtype = "error";
485 			break;
486 		case VT_NTFS:
487 			if (!ntfs_filestat(&vn, &fst))
488 				badtype = "error";
489 			break;
490 		case VT_EXT2FS:
491 			if (!ext2fs_filestat(&vn, &fst))
492 				badtype = "error";
493 			break;
494 
495 		case VT_MSDOSFS:
496 			if (!msdosfs_filestat(&vn, &fst))
497 				badtype = "error";
498 			break;
499 
500 		case VT_ISOFS:
501 			if (!isofs_filestat(&vn, &fst))
502 				badtype = "error";
503 			break;
504 
505 		case VT_DEVFS:
506 			if (!devfs_filestat(&vn, &fst))
507 				badtype = "error";
508 			break;
509 
510 		default: {
511 			static char unknown[10];
512 			sprintf(unknown, "?(%x)", vn.v_tag);
513 			badtype=unknown;
514 			break;
515 		}
516 	}
517 	if (checkfile) {
518 		int fsmatch = 0;
519 		DEVS *d;
520 
521 		if (badtype)
522 			return;
523 		for (d = devs; d != NULL; d = d->next)
524 			if (d->fsid == fst.fsid) {
525 				fsmatch = 1;
526 				if (d->ino == (ino_t)fst.fileid) {
527 					filename = d->name;
528 					break;
529 				}
530 			}
531 		if (fsmatch == 0 || (filename == NULL && fsflg == 0))
532 			return;
533 	}
534 	PREFIX(i);
535 	if (badtype) {
536 		(void)printf(" %-*s  %10s    %jd\n",
537 			     wflg_mnt,
538 			     getmnton(vn.v_mount, &vn.v_namecache, ncr),
539 			     badtype,
540 			     (intmax_t)off);
541 		return;
542 	}
543 	if (nflg)
544 		printf(" %3u,%-9u   ",
545 		       major(fst.fsid), minor(fst.fsid));
546 	else
547 		printf(" %-*s",
548 		       wflg_mnt, getmnton(vn.v_mount, &vn.v_namecache, ncr));
549 	if (nflg)
550 		sprintf(mode, "%o", fst.mode);
551 	else
552 		strmode(fst.mode, mode);
553 
554 	printf(" %*ld %10s", ino_width, fst.fileid, mode);
555 
556 	switch (vn.v_type) {
557 	case VBLK:
558 	case VCHR:
559 		if (nflg || ((name = devname(fst.rdev, vn.v_type == VCHR ?
560 		    S_IFCHR : S_IFBLK)) == NULL))
561 			printf(" %3u,%-4u", major(fst.rdev), minor(fst.rdev));
562 		else
563 			printf(" %8s", name);
564 		break;
565 	case VREG:
566 		printf(" %jd", (intmax_t)fst.offset);
567 		break;
568 	default:
569 		printf(" %8ju", (uintmax_t)fst.size);
570 	}
571 	rw[0] = '\0';
572 	if (flag & FREAD)
573 		strcat(rw, "r");
574 	if (flag & FWRITE)
575 		strcat(rw, "w");
576 	printf(" %2s", rw);
577 	if (filename && !fsflg)
578 		printf("  %s", filename);
579 	putchar('\n');
580 }
581 
582 static int
583 ufs_filestat(struct vnode *vp, struct filestat *fsp)
584 {
585 	struct inode inode;
586 
587 	if (!kread(VTOI(vp), &inode, sizeof (inode))) {
588 		dprintf(stderr, "can't read inode at %p for pid %d\n",
589 		    (void *)VTOI(vp), Pid);
590 		return 0;
591 	}
592 	/*
593 	 * The st_dev from stat(2) is a udev_t. These kernel structures
594 	 * contain dev_t structures. We need to convert to udev to make
595 	 * comparisons
596 	 */
597 	fsp->fsid = fstat_dev2udev(inode.i_dev);
598 	fsp->fileid = (long)inode.i_number;
599 	fsp->mode = (mode_t)inode.i_mode;
600 	fsp->size = inode.i_size;
601 	fsp->rdev = inode.i_rdev;
602 
603 	return 1;
604 }
605 
606 static int
607 nfs_filestat(struct vnode *vp, struct filestat *fsp)
608 {
609 	struct nfsnode nfsnode;
610 
611 	if (!kread(VTONFS(vp), &nfsnode, sizeof (nfsnode))) {
612 		dprintf(stderr, "can't read nfsnode at %p for pid %d\n",
613 		    (void *)VTONFS(vp), Pid);
614 		return 0;
615 	}
616 	fsp->fsid = nfsnode.n_vattr.va_fsid;
617 	fsp->fileid = nfsnode.n_vattr.va_fileid;
618 	fsp->size = nfsnode.n_size;
619 	fsp->rdev = makeudev(nfsnode.n_vattr.va_rmajor,
620 			     nfsnode.n_vattr.va_rminor);
621 	fsp->mode = nfsnode.n_vattr.va_mode | mtrans(vp->v_type);
622 
623 	return 1;
624 }
625 
626 static int
627 devfs_filestat(struct vnode *vp, struct filestat *fsp)
628 {
629 	struct devfs_node devfs_node;
630 
631 	if (!kread(vp->v_data, &devfs_node, sizeof (devfs_node))) {
632 		dprintf(stderr, "can't read devfs_node at %p for pid %d\n",
633 		    (void *)vp->v_data, Pid);
634 		return 0;
635 	}
636 	fsp->fsid = fsp->rdev = fstat_dev2udev(vp->v_rdev);
637 	fsp->fileid = devfs_node.d_dir.d_ino;
638 	fsp->mode = (devfs_node.mode & ~S_IFMT) | S_IFCHR;
639 	fsp->size = 0;
640 
641 	return 1;
642 }
643 
644 static char *
645 getmnton(struct mount *m, struct namecache_list *ncplist, struct nchandle *ncr)
646 {
647 	static struct mount mount_l;
648 	static struct mtab {
649 		struct mtab *next;
650 		struct mount *m;
651 		char mntonname[MNAMELEN];
652 	} *mhead = NULL;
653 	struct mtab *mt;
654 	struct namecache *ncp;
655 	struct namecache ncp_copy;
656 	static char path[1024];
657 	int i;
658 
659 	/*
660 	 * If no ncp is passed try to find one via ncplist.  Make sure
661 	 * we are using the correct mount pointer or the matching code
662 	 * will not know how to transition mount points properly.
663 	 */
664 	if (ncr == NULL || ncr->ncp == NULL) {
665 		ncp = ncplist->tqh_first;
666 	} else {
667 		ncp = ncr->ncp;
668 		if (ncr->mount)
669 			m = ncr->mount;
670 	}
671 
672 	/*
673 	 * If we have an ncp, traceback the path.  This is a kvm pointer.
674 	 */
675 	if (ncp) {
676 		if (!kread(m, &mount_l, sizeof(struct mount))) {
677 			warnx("can't read mount table at %p", (void *)m);
678 			return (NULL);
679 		}
680 		i = sizeof(path) - 1;
681 		path[i] = 0;
682 		while (ncp) {
683 			/*
684 			 * If this is the root of the mount then traverse
685 			 * to the parent mount.
686 			 */
687 			if (ncp == mount_l.mnt_ncmountpt.ncp) {
688 				ncp = mount_l.mnt_ncmounton.ncp;
689 				if (ncp == NULL)
690 					break;
691 				m = mount_l.mnt_ncmounton.mount;
692 				if (!kread(m, &mount_l, sizeof(struct mount))) {
693 					warnx("can't read mount table at %p", (void *)m);
694 					return (NULL);
695 				}
696 			}
697 
698 			/*
699 			 * Ok, pull out the ncp and extract the name
700 			 */
701 			if (!kread(ncp, &ncp_copy, sizeof(ncp_copy))) {
702 				warnx("can't read ncp at %p", ncp);
703 				return (NULL);
704 			}
705 			if (i <= ncp_copy.nc_nlen)
706 				break;
707 			i -= ncp_copy.nc_nlen;
708 			if (!kread(ncp_copy.nc_name, path + i, ncp_copy.nc_nlen)) {
709 				warnx("can't read ncp %p path component at %p", ncp, ncp_copy.nc_name);
710 				return (NULL);
711 			}
712 			make_printable(path + i, ncp_copy.nc_nlen);
713 			path[--i] = '/';
714 			ncp = ncp_copy.nc_parent;
715 		}
716 		if (i == sizeof(path) - 1)
717 			path[--i] = '/';
718 		return(path + i);
719 	}
720 
721 	/*
722 	 * If all else fails print out the mount point path
723 	 */
724 	for (mt = mhead; mt != NULL; mt = mt->next) {
725 		if (m == mt->m)
726 			return (mt->mntonname);
727 	}
728 	if (!kread(m, &mount_l, sizeof(struct mount))) {
729 		warnx("can't read mount table at %p", (void *)m);
730 		return (NULL);
731 	}
732 	if ((mt = malloc(sizeof (struct mtab))) == NULL)
733 		err(1, NULL);
734 	mt->m = m;
735 	bcopy(&mount_l.mnt_stat.f_mntonname[0], &mt->mntonname[0], MNAMELEN);
736 	mt->next = mhead;
737 	mhead = mt;
738 	return (mt->mntonname);
739 }
740 
741 static void
742 pipetrans(struct pipe *pi, int i, int flag)
743 {
744 	struct pipe pip;
745 	struct pipebuf *b1;
746 	struct pipebuf *b2;
747 	char rw[3];
748 	char side1;
749 	char side2;
750 
751 	PREFIX(i);
752 	if ((intptr_t)pi & 1) {
753 		side1 = 'B';
754 		side2 = 'A';
755 		b1 = &pip.bufferB;
756 		b2 = &pip.bufferA;
757 	} else {
758 		side1 = 'A';
759 		side2 = 'B';
760 		b1 = &pip.bufferA;
761 		b2 = &pip.bufferB;
762 	}
763 	pi = (void *)((intptr_t)pi & ~(intptr_t)1);
764 
765 	/* fill in socket */
766 	if (!kread(pi, &pip, sizeof(struct pipe))) {
767 		dprintf(stderr, "can't read pipe at %p\n", (void *)pi);
768 		goto bad;
769 	}
770 
771 	printf("* pipe %8lx (%c<->%c)", (u_long)pi, side1, side2);
772 	printf(" ravail %-zd wavail %-zd",
773 	       b1->windex - b1->rindex,
774 	       b2->windex - b2->rindex);
775 	rw[0] = '\0';
776 	if (flag & FREAD)
777 		strcat(rw, "r");
778 	if (flag & FWRITE)
779 		strcat(rw, "w");
780 	printf(" %2s", rw);
781 	putchar('\n');
782 	return;
783 
784 bad:
785 	printf("* error\n");
786 }
787 
788 static void
789 socktrans(struct socket *sock, int i)
790 {
791 	static const char *stypename[] = {
792 		"unused",	/* 0 */
793 		"stream", 	/* 1 */
794 		"dgram",	/* 2 */
795 		"raw",		/* 3 */
796 		"rdm",		/* 4 */
797 		"seqpak"	/* 5 */
798 	};
799 #define	STYPEMAX 5
800 	struct socket	so;
801 	struct protosw	proto;
802 	struct domain	dom;
803 	struct inpcb	inpcb;
804 	struct unpcb	unpcb;
805 	int len;
806 	char dname[32];
807 
808 	PREFIX(i);
809 
810 	/* fill in socket */
811 	if (!kread(sock, &so, sizeof(struct socket))) {
812 		dprintf(stderr, "can't read sock at %p\n", (void *)sock);
813 		goto bad;
814 	}
815 
816 	/* fill in protosw entry */
817 	if (!kread(so.so_proto, &proto, sizeof(struct protosw))) {
818 		dprintf(stderr, "can't read protosw at %p",
819 		    (void *)so.so_proto);
820 		goto bad;
821 	}
822 
823 	/* fill in domain */
824 	if (!kread(proto.pr_domain, &dom, sizeof(struct domain))) {
825 		dprintf(stderr, "can't read domain at %p\n",
826 		    (const void *)proto.pr_domain);
827 		goto bad;
828 	}
829 
830 	if ((len = kvm_read(kd, (u_long)dom.dom_name, dname,
831 	    sizeof(dname) - 1)) < 0) {
832 		dprintf(stderr, "can't read domain name at %p\n",
833 		    (void *)dom.dom_name);
834 		dname[0] = '\0';
835 	}
836 	else
837 		dname[len] = '\0';
838 
839 	if ((u_short)so.so_type > STYPEMAX)
840 		printf("* %s ?%d", dname, so.so_type);
841 	else
842 		printf("* %s %s", dname, stypename[so.so_type]);
843 
844 	/*
845 	 * protocol specific formatting
846 	 *
847 	 * Try to find interesting things to print.  For tcp, the interesting
848 	 * thing is the address of the tcpcb, for udp and others, just the
849 	 * inpcb (socket pcb).  For unix domain, its the address of the socket
850 	 * pcb and the address of the connected pcb (if connected).  Otherwise
851 	 * just print the protocol number and address of the socket itself.
852 	 * The idea is not to duplicate netstat, but to make available enough
853 	 * information for further analysis.
854 	 */
855 	switch(dom.dom_family) {
856 	case AF_INET:
857 	case AF_INET6:
858 		getinetproto(proto.pr_protocol);
859 		if (proto.pr_protocol == IPPROTO_TCP ) {
860 			if (so.so_pcb) {
861 				if (kvm_read(kd, (u_long)so.so_pcb,
862 				    (char *)&inpcb, sizeof(struct inpcb))
863 				    != sizeof(struct inpcb)) {
864 					dprintf(stderr,
865 					    "can't read inpcb at %p\n",
866 					    (void *)so.so_pcb);
867 					goto bad;
868 				}
869 				printf(" %lx", (u_long)inpcb.inp_ppcb);
870 			}
871 		}
872 		else if (so.so_pcb)
873 			printf(" %lx", (u_long)so.so_pcb);
874 		break;
875 	case AF_UNIX:
876 		/* print address of pcb and connected pcb */
877 		if (so.so_pcb) {
878 			printf(" %lx", (u_long)so.so_pcb);
879 			if (kvm_read(kd, (u_long)so.so_pcb, (char *)&unpcb,
880 			    sizeof(struct unpcb)) != sizeof(struct unpcb)){
881 				dprintf(stderr, "can't read unpcb at %p\n",
882 				    (void *)so.so_pcb);
883 				goto bad;
884 			}
885 			if (unpcb.unp_conn) {
886 				char shoconn[4], *cp;
887 
888 				cp = shoconn;
889 				if (!(so.so_state & SS_CANTRCVMORE))
890 					*cp++ = '<';
891 				*cp++ = '-';
892 				if (!(so.so_state & SS_CANTSENDMORE))
893 					*cp++ = '>';
894 				*cp = '\0';
895 				printf(" %s %lx", shoconn,
896 				    (u_long)unpcb.unp_conn);
897 			}
898 		}
899 		break;
900 	default:
901 		/* print protocol number and socket address */
902 		printf(" %d %lx", proto.pr_protocol, (u_long)sock);
903 	}
904 	printf("\n");
905 	return;
906 bad:
907 	printf("* error\n");
908 }
909 
910 
911 /*
912  * Read the cdev structure in the kernel (as pointed to by a dev_t)
913  * in order to work out the associated udev_t
914  */
915 udev_t
916 fstat_dev2udev(void *dev)
917 {
918 	struct cdev si;
919 
920 	if (kread(dev, &si, sizeof si)) {
921 		if ((si.si_umajor & 0xffffff00) ||
922 		    (si.si_uminor & 0x0000ff00)) {
923 			return NOUDEV;
924 		}
925 		return((si.si_umajor << 8) | si.si_uminor);
926 	} else {
927 		dprintf(stderr, "can't convert dev_t %p to a udev_t\n", dev);
928 		return NOUDEV;
929 	}
930 }
931 
932 udev_t
933 makeudev(int x, int y)
934 {
935         if ((x & 0xffffff00) || (y & 0x0000ff00))
936 		return NOUDEV;
937 	return ((x << 8) | y);
938 }
939 
940 /*
941  * getinetproto --
942  *	print name of protocol number
943  */
944 static void
945 getinetproto(int number)
946 {
947 	static int isopen;
948 	struct protoent *pe;
949 
950 	if (!isopen)
951 		setprotoent(++isopen);
952 	if ((pe = getprotobynumber(number)) != NULL)
953 		printf(" %s", pe->p_name);
954 	else
955 		printf(" %d", number);
956 }
957 
958 static int
959 getfname(const char *filename)
960 {
961 	struct stat statbuf;
962 	DEVS *cur;
963 
964 	if (stat(filename, &statbuf)) {
965 		warn("%s", filename);
966 		return(0);
967 	}
968 	if ((cur = malloc(sizeof(DEVS))) == NULL)
969 		err(1, NULL);
970 	cur->next = devs;
971 	devs = cur;
972 
973 	cur->ino = statbuf.st_ino;
974 	cur->fsid = statbuf.st_dev;
975 	cur->name = filename;
976 	return(1);
977 }
978 
979 static void
980 usage(void)
981 {
982 	(void)fprintf(stderr,
983  "usage: fstat [-fmnv] [-p pid] [-u user] [-N system] [-M core] [file ...]\n");
984 	exit(1);
985 }
986 
987 static
988 void
989 make_printable(char *buf, int len)
990 {
991     while (len > 0) {
992 	if (!isprint(*buf))
993 		*buf = '?';
994 	++buf;
995 	--len;
996     }
997 }
998 
999 ssize_t
1000 kread(const void *kaddr, void *uaddr, size_t nbytes)
1001 {
1002     if (nbytes > 0x10000000)
1003 	return(0);
1004 
1005     if (kvm_read(kd, (u_long)kaddr, (char *)uaddr, nbytes) == (ssize_t)nbytes)
1006 	return(1);
1007     else
1008 	return(0);
1009 }
1010