Programmable debugger
Go to file
Omar Sandoval 9273de829b type: handle anonymous types thoroughly
There were a couple more corner cases missing: arrays of anonymous types
and bit fields of anonymous enums.
2018-07-11 23:56:32 -07:00
drgn type: handle anonymous types thoroughly 2018-07-11 23:56:32 -07:00
examples/kernel Add README and examples 2018-07-02 23:59:39 -07:00
scripts Support userspace program core dumps 2018-07-09 22:34:03 -07:00
tests type: handle anonymous types thoroughly 2018-07-11 23:56:32 -07:00
.gitignore dwarf: rewrite drgn.dwarf in pure Python 2018-03-26 01:51:20 -07:00
COPYING License under GPL-3.0 or later 2018-04-15 15:03:33 -07:00
README.md Support running userspace programs 2018-07-09 23:08:56 -07:00
setup.py Implement core dump reading in C 2018-05-24 17:55:47 -07:00

drgn

drgn is a debugger-as-a-library. It can be used to write Python programs which use the types and data of the program being debugged.

drgn was developed for debugging the Linux kernel (as an alternative to the crash utility), but it can also debug userspace program written in C. C++ support is planned.

Installation

drgn is built with setuptools. Build it like so:

$ python3 setup.py build_ext -i

Then, you can either run it locally:

$ python3 -m drgn.cli --help

Or install it and run it:

$ sudo python3 setup.py install
$ drgn --help

Or, pick your favorite Python package installation method.

Getting Started

To debug the running kernel, run sudo drgn -k. To debug a running program, run sudo drgn -p $PID. To debug a core dump (either a kernel vmcore or a userspace core dump), run drgn -c $PATH.

drgn has an interactive mode and a script mode. If no arguments are passed, drgn runs in interactive mode; otherwise, the given script is run with the given arguments. drgn is actually just the Python interpreter initialized with a prog object representing the debugged program:

$ sudo drgn -k
>>> prog.type('struct list_head')
struct list_head {
        struct list_head *next;
        struct list_head *prev;
}
>>> prog['modules']
(struct list_head){
        .next = (struct list_head *)0xffffffffc0b91048,
        .prev = (struct list_head *)0xffffffffc0066148,
}
>>> prog['init_task'].pid
(pid_t)0
>>> from drgn.helpers.kernel import list_for_each_entry
>>> for mod in list_for_each_entry('struct module', prog['modules'].address_of_(), 'list'):
...    if mod.refcnt.counter > 10:
...        print(mod.name)
...
(char [56])"snd"
(char [56])"evdev"
(char [56])"i915"

See the in-program documentation in interactive mode with help(drgn) for more information. See examples and drgn/helpers/kernel for some examples.

License

Copyright 2018 - Omar Sandoval Licensed under the GPLv3 or later

Acknowledgements

drgn is so named because dragons eat dwarves. It is also named after a song.