Question

在mips平台上，我试图让Unwind工作。目前，如果我发出print_trace手动堆栈跟踪正确显示如下：

backtrace_helper 0x4b6958

backtrace_helper 0x4b6ab4

backtrace_helper 0x2ac2f628

获得3个堆叠帧。

./ v（print_trace + 0x38）[0x4b6958]

./ v（main + 0x90）[0x4b6ab4]

/lib/libc.so.0(__ uClibc_main + 0x24c）[0x2ac2f628]

但是当发生SIGSEGV时，堆栈跟踪不会显示正确的函数调用序列。

backtrace_helper 0x4b7a74

backtrace_helper 0x2ab9b84c

获得2个堆叠帧。

./ v（getLineIDByPhyIdx + 0x3d8）[0x4b7a74]

/lib/libpthread.so.0(__ new_sem_post + 0x2c8）[0x2ab9b84c]

我正在使用-g -fexceptions -rdynamic进行编译。另外我看到How to generate a stacktrace when my gcc C++ app crashes其中第二个答案提到了错误的地址，但是当我按照他的设置但它只改变了第二帧并且休息是相同的时，代码片段如下：

caller_address = (void *) uc->uc_mcontext.gregs[30]; // Frame pointer (from wikipedia here)  

 fprintf(stderr, "signal %d (%s), address is %p from %p\n", 
  sig_num, strsignal(sig_num), info->si_addr, 
  (void *)caller_address);

 size = backtrace(array, 50);

 /* overwrite sigaction with caller's address */
 array[1] = caller_address;

 messages = backtrace_symbols(array, size);

代码：

int main(int argc, char *argv[]) {
    registerSignalHandler(signalHandler);

    print_trace();

    {
        // Seg Fault
        int *p = NULL;
        *p = 54;
    }
}

void print_trace(void) {
    void *array[10];
    size_t size;
    char **strings;
    size_t i;

    /* Get the address at the time the signal was raised from the EIP (x86) */
    size = backtrace(array, 10);
    strings = backtrace_symbols(array, size);

    printf("Obtained %zd stack frames.\n", size);

    for (i = 0; i < size; i++)
        printf("%s\n", strings[i]);

    free(strings);
}



static _Unwind_Reason_Code
backtrace_helper (struct _Unwind_Context *ctx, void *a)
{
    struct trace_arg *arg = a;

    assert (unwind_getip != NULL);

    /* We are first called with address in the __backtrace function. Skip it. */
    if (arg->cnt != -1) {
        arg->array[arg->cnt] = (void *) unwind_getip (ctx);
        printf("backtrace_helper %p \n", arg->array[arg->cnt]);
    }
    if (++arg->cnt == arg->size)
        return _URC_END_OF_STACK;
    return _URC_NO_REASON;
}

/*
 * Perform stack unwinding by using the _Unwind_Backtrace.
 *
 * User application that wants to use backtrace needs to be
 * compiled with -fexceptions option and -rdynamic to get full
 * symbols printed.
 */
int backtrace (void **array, int size)
{
    struct trace_arg arg = { .array = array, .size = size, .cnt = -1 };

    if (unwind_backtrace == NULL)
        backtrace_init();

    if (size >= 1)
        unwind_backtrace (backtrace_helper, &arg);

    return arg.cnt != -1 ? arg.cnt : 0;
}


void signalHandler( int sig, siginfo_t* siginfo, void* notused)
{
    /* Print out the signal info */
    signalInfo(sig, siginfo);

    switch (sig) {
        case SIGSEGV:
        {
            print_trace();
            abort();
        }
    }
}

Answer 1

帧指针实际上从未在MIPS上使用，并且在不挖掘符号的情况下获得回溯需要一些启发式。

典型的方法是分析当前指令指针之前的代码，并尝试查找调整SP的函数序言。使用该信息可以找出前一帧的位置等。

请参阅以下幻灯片了解一些血腥细节： http://elinux.org/images/0/07/Intricacies_of_a_MIPS_Stack_Backtrace_Implementation.pdf

在SIGSEGV上mips _Unwind_Backtrace

1 个答案: