I looked at this a little bit, and I'm confused at how to use the POSIX APIs correctly.

Right now there's a loop in main() that basically attaches, gets the stack data, detaches, and sleeps for a bit. Once the sleep finishes, it reattaches, gets the stack data, detaches, and so on. If you look for the code in src/pyflame.cc that looks like this you'll see what I mean:

PtraceDeatch(pid);
std::this_thread::sleep_for(interval);
PtraceAttach(pid);

The PTRACE_O_TRACEFORK flag is supposed to be used in conjunction with waitpid(). The idea is you'd call it, and then the wstatus integer you get back has some bits set that let you detect that a fork happened, and then you use PTRACE_GETEVENTMSG to actually figure out the new PID to trace.

On Linux there's a method called sigtimedwait() that can be used to wait for a signal with a timeout. It gives you back a siginfo_t, so it's more like waitid() than waitpid(). But that's fine, they should be equivalent. The idea is src/pyflame.cc should be updated to use sigtimedwait(), so that it sleeps for the equivalent amount of time as the existing thread sleep call, but also gets notified when there's a new process to trace.

I did this, set up my mask to get SIGCHLD, and sure enough I get notified. However, I don't see how to actually get the information I want. The docs for PTRACE_O_TRACEFORK say that after the waitpid() call you should check that status satisfies the property:

status>>8 == (SIGTRAP | (PTRACE_EVENT_FORK<<8))

We have a siginfo_t not a status integer, but it looks like siginfo_t is supposed to have a field called si_status that I'm guessing is equivalent. However, for some reason, GDB can't field this field:

ptype siginfo_t
type = struct siginfo_t {
    int si_signo;
    int si_errno;
    int si_code;
    union {
        int _pad[28];
        struct {...} _kill;
        struct {...} _timer;
        struct {...} _rt;
        struct {...} _sigchld;
        struct {...} _sigfault;
        struct {...} _sigpoll;
        struct {...} _sigsys;
    } _sifields;
}

This does not match the definition from the sigaction(2) man page at all. I think GDB is just confused. Having GDB unavailable is really annoying, since GDB makes it easier to introspect objects. GCC knows about the field, but it doesn't seem to have what I want. I also tried some variations like immediately calling waitpid() with WNOHANG after the sigtimedwait() call, but that didn't work right. I also tried adding SIGTRAP to my sigtimedwait() mask but that doesn't seem to do anything.

I pushed a branch called trace_children that has a bunch of this code in it set up in a really hacky not-at-all-working way. However, I was trying various different permutations of these system calls so I'm not sure exactly what the state of the branch is. In the meantime, if anyone knows of another program that uses sigtimedwait() in conjunction with PTRACE_O_TRACEFORK that would be really helpful.

Add option to profile child processes #67

Description

Activity

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions