logo

basic-core-handler

Basic Linux coredump handler to process coredump data right away git clone https://anongit.hacktivis.me/git/basic-core-handler.git

core-handler (1841B)

    

  1. #!/bin/sh
  2. # Copyright © 2024 Haelwenn (lanodan) Monnier <contact+core-handler@hacktivis.me>
  3. # SPDX-License-Identifier: MIT
  5. applyuidgid=$(command -v applyuidgid 2>/dev/null || echo s6-applyuidgid)
  7. # kernel.core_pattern = |/usr/local/bin/core-handler %P %u %g %s %t %c %e %E
  8. grep -q "$0"' %P %u %g %s %t %c %e %E$' /proc/sys/kernel/core_pattern || exit 1
  10. pid="$1"; shift
  11. uid="$1"; shift
  12. gid="$1"; shift
  13. signum="$1"; shift
  14. epoch="$1"; shift
  15. core_limit="$1"; shift
  16. comm="$1"; shift
  17. full_path="$1"; shift
  19. destdir="/var/crash/"
  20. dest="${destdir}/${epoch}-${pid}-${uid}-${comm}"
  22. umask u=r,og=
  24. # Using this script, /var/crash should be "0755/drwxr-xr-x root root"
  25. # Let's make sure it both exists and is safe before writing anything
  26. mkdir -m 0755 -p "${destdir}"
  27. chown 0:0 "${destdir}"
  28. chmod 0755 "${destdir}"
  30. cat - >"${dest}.core"
  31. chown -- "${uid}:${gid}" "${dest}.core"
  32. sync -d "${dest}.core"
  34. {
  35. 	printf 'pid: %s\n' "$pid"
  36. 	printf 'uid: %s\n' "$uid"
  37. 	printf 'gid: %s\n' "$gid"
  38. 	printf 'signum: %s\n' "$signum"
  39. 	printf 'epoch: %s\n' "$epoch"
  40. 	printf 'core_limit: %s\n' "$core_limit"
  41. 	printf 'comm: %s\n' "$comm"
  42. 	printf 'full_path: %s\n' "${full_path}" | tr '!' '/'
  43. } > "${dest}.info"
  44. chown -- "${uid}:${gid}" "${dest}.info"
  45. sync -d "${dest}.info"
  47. # Extract the following from a coredump with LLDB:
  48. # - backtrace, all threads
  49. # - current frame for readability
  50. # - global and frame-local variables
  51. # - registers
  52. # - dissasembly of current frame (with mixed source code when available)
  53. nice -n 20 -- "${applyuidgid?}" -u "$uid" -g "$gid" -G '' lldb \
  54. 	--core "${dest}.core" \
  55. 	-b \
  56. 	-o 'bt all' \
  57. 	-o 'f' \
  58. 	-o 'v -A -g -P2 -c -s' \
  59. 	-o 'register read' \
  60. 	-o 'di -m' \
  61. 	-o 'quit' \
  62. 	>"${dest}.backtrace.txt" 2>&1
  63. #	-o "session save \"${dest}.backtrace.txt\"" 
  65. chown -- "${uid}:${gid}" "${dest}.backtrace.txt"
  66. sync -d "${dest}.backtrace.txt"