forked from esyr-rh/strace
/
NEWS
1571 lines (1423 loc) · 70.6 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Noteworthy changes in release ?.? (????-??-??)
==============================================
* Improvements
* Implemented decoding of BPF_LINK_CREATE and BPF_LINK_UPDATE bpf
syscall commands.
* Updated lists of BPF_* constants.
* Added -e trace=%clock option for tracing syscalls reading of modifying
system clocks.
Noteworthy changes in release 5.6 (2020-04-07)
==============================================
* Changes in behaviour
* Messages about unknown tracees are now subject to the strace's quietness
setting (-q/--quiet).
* If -A option is provided without -o, or -S option without -c/-C, a warning
about its uselessness is printed now.
* The usage of --seccomp-bpf without -f has no effect now.
* Improvements
* Every short option now has a long option alias, which also has enabled
the following improvements:
* Ability to use human-readable settings for -I/--interruptible,
-D/--daemonize options.
* Ability to silence specific messages using -e quiet/--quiet qualifier
(an alias for the -q option), including those that couldn't be silenced
previously (path resolution messages and "superseded by execve").
* Ability to specify selected fd decoding features using
-e decode-fds/--decode-fds qualifier (an alias for the -y option).
* Ability to set precision for the absolute timestamp, relative timestamp,
and syscall time output (using --absolute-timestamps,
--relative-timestamps, and --syscall-times options, respectively).
* Implemented ability to select the set of displayed columns in the call
summary output (-U/--summary-columns option).
* Implemented ability to sort on any summary column.
* Implemented ability to show information about minimum and maximum call
duration in the call summary output (addresses Debian bug #240945).
* Implemented printing of PIDs associated with pidfds in -yy mode.
* Implemented PTRACE_GETREGS API support on hppa, sh, sh64, and xtensa.
* Improved performance of libdw-based stack traces printing by implementing
a symbol-to-address cache.
* Implemented decoding of openat2 and pidfd_getfd syscalls.
* Enhanced io_uring_register, prctl, sched_getattr, and sched_setattr syscall
decoding.
* Implemented decoding of BPF_MAP_LOOKUP_BATCH,
BPF_MAP_LOOKUP_AND_DELETE_BATCH, BPF_MAP_UPDATE_BATCH, and
BPF_MAP_DELETE_BATCH bpf syscall commands.
* Enhanced decoding of BPF_MAP_CREATE and BPF_PROG_ATTACH bpf syscall
commands.
* Enhanced decoding of RTC_VL_READ ioctl command.
* Enhanced decoding of IFLA_* netlink attributes.
* Implemented HIDIOCGRAWUNIQ() ioctl command number printing.
* Wired up kexec_file_load syscall on hppa.
* Updated lists of AUDIT_*, BPF_*, CLONE_*, GRND_*, IFLA_*, IORING_*,
IPPROTO_*, KEY_*, KVM_*, RTM_F_*, SCHED_*, and *_MAGIC constants.
* Updated lists of ioctl commands from Linux 5.6.
* Bug fixes
* Fixed build on csky abiv1 architecture.
* Various minor fixes in VIDIOC_* ioctl output formatting.
* Fix printing of the size field for _IOC_NONE ioctl command numbers on sparc.
* Portability
* On hppa, linux kernel >= 4.7 is required.
On sh and sh64, linux kernel >= 2.6.28 is required.
Older versions without a decent PTRACE_GETREGS support will not work.
Noteworthy changes in release 5.5 (2020-02-06)
==============================================
* Improvements
* Added -e trace=%creds option for tracing syscalls related to process
credentials.
* Enhanced decoding of arch_prctl, keyctl, io_uring_register, io_uring_setup,
and perf_event_open syscalls.
* Enhanced decoding of BPF_PROG_LOAD bpf syscall command.
* Updated decoding of clone3 syscall to match Linux 5.5.
* Implemented decoding of TCA_ACT_FLAGS and TCA_STATS_PKT64 netlink
attributes.
* Updated lists of AUDIT_*, BPF_*, CLONE_*, KEY_*, KVM_*, PPC_PTRACE_*,
SCTP_*, STATX_*, TIPC_*, V4L2_*, and *_MAGIC constants.
* Updated lists of ioctl commands from Linux 5.5.
* Enhanced manual page and "strace --help" output.
* Bug fixes
* Fixed stack trace printing for early syscalls when strace is configured
to use libdw backend for stack tracing (addresses Fedora bug #1788636).
* Fixed stack trace caching when --seccomp-bpf option is specified.
* Fixed potentially unaligned access in decoder of SO_TIMESTAMP*_NEW
control messages.
* Fixed decoding of NDA_LLADDR netlink neighbor table attribute.
* Fixed build of mpers support when CFLAGS contains -flto.
* Fixed build on no-MMU architectures.
* Fixed build with glibc-2.31 and Linux kernel headers < 5.3.
* Fixed tests for glibc-2.31.
Noteworthy changes in release 5.4 (2019-11-28)
==============================================
* Improvements
* Implemented -DD and -DDD options that move strace into a separate
process group and session, respectively.
* Enhanced seccomp-bpf tracee syscall filtering support by implementing
new "binary match" BPF program generation strategy and automatically
choosing the strategy that generates the shortest BPF program.
* Implemented decoding of BPF_BTF_GET_NEXT_ID bpf syscall command.
* Enhanced decoding of BPF_MAP_LOOKUP_ELEM bpf syscall command.
* Implemented PTP_CLOCK_GETCAPS2, PTP_EXTTS_REQUEST2, PTP_PEROUT_REQUEST2,
PTP_ENABLE_PPS2, and PTP_SYS_OFFSET2 ioctl decoding.
* Updated lists of BPF_*, CAN_*, KEXEC_*, KVM_*, MADV_*, MSG_*, P_*, PR_*,
PTP_*, SCTP_*, and V4L2_* constants.
* Implemented ability to build ARM EABI mpers support using a separate
compiler on aarch64.
* Updated lists of ioctl commands from Linux 5.4.
* Enhanced manual page.
* Bug fixes
* Fixed -b execve when --seccomp-bpf option is specified.
* Fixed decoding of BPF_PROG_LOAD bpf syscall command.
* Fixed build on no-MMU architectures.
* Fixed build on antique systems that do not provide necessary definitions
of AUDIT_ARCH_* constants.
Noteworthy changes in release 5.3 (2019-09-25)
==============================================
* Improvements
* Implemented usage of seccomp-bpf for stopping tracees only for filtered
syscalls. Use --seccomp-bpf option to enable.
* Implemented decoding of pidfd_open and clone3 syscalls.
* Enhanced decoding of io_cancel, io_submit, s390_sthyi, and syslog syscalls.
* Enhanced decoding of NETLINK_ROUTE protocol.
* Implemented decoding of UNIX_DIAG_UID netlink attribute.
* Implemented decoding of WDIOC_* ioctl commands.
* Enhanced syscall count statistics: overhead is now applied per-call,
added ability for sorting on errors field.
* Syscall delay injection and overhead values can now be supplied with
time measure unit suffix and provided in IEEE 754 floating point format.
* Updated lists of AUDIT_*, BPF_*, ETH_*, KEYCTL_*, KVM_*, MAP_*, SO_*, TCP_*, V4L2_*,
XDP_*, and *_MAGIC constants.
* Updated lists of ioctl commands from Linux 5.3.
* Enhanced manual page.
* Bug fixes
* Fixed syscall tampering on arc, avr32, csky, ia64, m68k, metag, mips,
nios2, or1k, riscv, s390, s390x, sparc, sparc64, and tile architectures
when PTRACE_GET_SYSCALL_INFO is in use.
* Fixed decoding of sockaddr_hci (AF_BLUETOOTH) addresses that lack
hci_channel field.
* Fixed evdev ioctl bitset decoding.
* Fixed tests on alpha with Linux kernel headers 5.1+.
* Portability
* Removed support for decoding syscalls in range [1024...1079] on AArch64
architecture as this range has never been implemented in mainline kernel
releases.
Noteworthy changes in release 5.2 (2019-07-12)
==============================================
* Improvements
* Implemented syscall return status filtering with -e status=set option
and its aliases: -z (limit syscall printing to successful syscalls only)
and -Z (limit syscall printing to failed syscalls only). Addresses Debian
bug #176376.
* Implemented decoding of open_tree, move_mount, fsopen, fsconfig, fsmount,
and fspick syscalls.
* Enhanced decoding of bpf, clone, inotify_init, mbind, and set_mempolicy
syscalls.
* Updated lists of AT_*, AUDIT_*, BPF_*, CLONE_*, ETH_*, KEY_*, KVM_*, MPOL_*,
TIPC_*, and V4L2_* constants.
* Updated lists of ioctl commands from Linux 5.2.
* Bug fixes
* Fixed syscall tampering on powerpc and powerpc64 when
PTRACE_GET_SYSCALL_INFO is in use.
* Fixed build with cutting-edge toolchain.
Noteworthy changes in release 5.1 (2019-05-22)
==============================================
* Bug fixes
* Fixed decoding of last two arguments of clone syscall on riscv.
* Improvements
* Added C-SKY architecture support.
* Implemented decoding of SO_TIMESTAMP*_NEW control messages.
* Implemented decoding of clock_gettime64, clock_settime64, clock_adjtime64,
clock_getres_time64, clock_nanosleep_time64, timer_gettime64,
timer_settime64, timerfd_gettime64, timerfd_settime64, utimensat_time64,
pselect6_time64, ppoll_time64, io_pgetevents_time64, recvmmsg_time64,
mq_timedsend_time64, mq_timedreceive_time64, semtimedop_time64,
rt_sigtimedwait_time64, futex_time64, sched_rr_get_interval_time64,
pidfd_send_signal, io_uring_setup, io_uring_enter, and io_uring_register
syscalls.
* Enhanced decoding of bpf syscall.
* Wired up getegid, geteuid, getppid, io_pgetevents, statfs64, and fstatfs64
syscalls on alpha.
* Wired up kexec_file_load and migrate_pages syscalls on arm.
* Wired up io_pgetevents, perf_event_open, seccomp, and statx syscalls
on ia64.
* Wired up seccomp syscall on m68k.
* Wired up statx syscall on sh.
* Wired up pkey_mprotect, pkey_alloc, and pkey_free syscalls on alpha, hppa,
ia64, m68k, s390, s390x, sh, sparc, and sparc64.
* Wired up rseq syscall on alpha, hppa, ia64, m68k, sh, sparc, sparc64,
and xtensa.
* Wired up direct ipc syscalls on m68k, mips o32, powerpc, powerpc64,
s390, s390x, sh, sparc, sparc64, and x86.
* Updated lists of BPF_*, FAN_*, F_SEAL_*, IPV6_*, NT_*, PR_SPEC_*, SO_*,
and V4L2_* constants.
* Updated lists of ioctl commands from Linux 5.1.
Noteworthy changes in release 5.0 (2019-03-19)
==============================================
* Changes in behavior
* -D option now implies -I4: by default strace ignores SIGHUP, SIGINT,
SIGQUIT, SIGPIPE, SIGTERM, SIGTTIN, SIGTTOU, and SIGTSTP when -D option
is used.
* Diagnostic message is no longer printed if an attempt to restart a process
has failed with ESRCH. (Addresses RHBZ bug #1662936.)
* ASCII dump no longer tries to read the whole buffer at once. As result,
it can fail with a diagnostic message after dumping only a part.
Amount of preceding zeroes printed for offset is now chosen in a way
to accommodate all the digits of all the offsets being printed.
* Improvements
* Changed the way tracees are handled: all pending tracees are now waited for
before further processing, this improves fairness of tracee processing.
(Addresses RHBZ bugs #478419, #526740, #851457, #1609318, #1610774,
and maybe some others.)
* Enhanced xlat styles support configured by -X option.
* Enhanced decoding of bpf syscall.
* Enhanced decoding of PTRACE_PEEKUSER and PTRACE_POKEUSER on hppa.
* Enhanced pid formatting in strace-log-merge output.
* Wired up kexec_file_load and rseq syscalls on aarch64, arc, metag, nios2,
or1k, riscv, and tile architectures.
* Updated lists of BPF_*, BTRFS_*, FAN_*, IFLA_*, KERN_*, KVM_CAP_*, NDA_*,
NETNSA_*, NT_*, PR_*, REL_*, SECCOMP_*, SCTP_*, UDP_*, V4L2_*, and *_MAGIC
constants.
* Updated lists of ioctl commands from Linux 5.0.
* Bug fixes
* Fixed ordering of sockaddr_in6 fields.
* Fixed strace-k test on alpha.
* Fixed build on mips o32.
* Fixed build on NOMMU architectures.
* Fixed build in --with-libiberty=yes mode.
* Fixed potential NULL dereference during printing of line continuation
for syscalls that haven't been decoded.
* Fixed strace-log-merge error diagnostics.
Noteworthy changes in release 4.26 (2018-12-26)
===============================================
* License
* The test suite is now provided under the terms of
the GNU General Public License version 2 or later.
* All the rest of strace is now provided under the terms of
the GNU Lesser General Public License version 2.1 or later.
* Changes in behavior
* If strace is interrupted by a signal it handles (currently
one of HUP, INT, QUIT, PIPE, or TERM), strace terminates
itself with this signal.
* Improvements
* Implemented obtainment of system call information using
PTRACE_GET_SYSCALL_INFO ptrace API.
* Implemented decoding of PTRACE_GET_SYSCALL_INFO ptrace request.
* Implemented decoding of BLKGETZONESZ, BLKGETNRZONES, and RND* ioctl
commands.
* Enhanced xlat styles support configured by -X option.
* Enhanced internet address formatting in structureless contexts.
* Enhanced decoding of getsockopt SO_ERROR option.
* Enhanced error diagnostics when the first exec fails.
* Added %net as a short form of %network in syscall specifications.
* Updated lists of ABS_*, BPF_*, FAN_*, IFA_*, IFLA_*, KVM_CAP_*, NETLINK_*,
NTF_*, PR_SPEC_*, REL_*, SOL_*, TCA_*, and V4L2_* constants.
* Updated lists of ioctl commands from Linux 4.20.
* Enhanced manual page.
* Bug fixes
* Fixed "xlat_idx: Unexpected xlat value 0" warnings.
* Fixed sthyi output format on s390.
* Documented -X option in strace -h output.
Noteworthy changes in release 4.25 (2018-10-30)
===============================================
* Improvements
* Implemented decoding of KVM_CHECK_EXTENSION and NBD_* ioctl commands.
* Implemented decoding of SOL_XDP socket option names.
* Implemented decoding of AF_PACKET protocols in socket syscall.
* Implemented decoding of AF_AX25 and AF_X25 addresses, protocols,
and options.
* Implemented stack trace printing on receiving signals.
* Enhanced xlat styles support configured by -X option.
* Enhanced decoding of IFLA_*, NETCONFA_*, and SMC_DIAG_* netlink attributes.
* Wired up io_pgetevents syscall on arm, sparc, and sparc64.
* Updated lists of AF_*, AUDIT_*, BPF_*, IFLA_*, IN_*, IPSTATS_*,
IPV4_DEVCONF_*, NT_*, SCTP_*, SO_*, SOCK_*, SOL_*, and V4L2_* constants.
* Updated lists of ioctl commands from Linux 4.19.
* Bug fixes
* Fixed decoding of bit sets in evdev ioctl commands.
* Fixed decoding of EVIOCGBIT(0, ...) ioctl commands.
* Fixed test suite for the case when mlockall and unimplemented syscalls
are explicitly disabled by a seccomp filter.
Noteworthy changes in release 4.24 (2018-08-14)
===============================================
* Improvements
* Implemented decoding of kvm vcpu exit reason (-e kvm=vcpu option),
requires Linux kernel version 4.16.0 or higher.
* Implemented decoding of KVM_SET_CPUID2 and KVM_GET_*_CPUID ioctl commands.
* Enhanced decoding of corner cases of SO_LINGER, SO_PEERCRED,
and PACKET_STATISTICS getsockopt options.
* Wired up io_pgetevents and rseq syscalls on hppa, microblaze, mips, powerpc,
and s390.
* Updated lists of AUDIT_*, BPF_*, IFA_*, IFLA_*, RTA_*, RTPROT_*, TCP_*,
TRAP_*, and UDP_* constants.
* Updated lists of ioctl commands from Linux 4.18.
* Bug fixes
* Fixed decoding of Q_XGETQSTAT on non-native personalities.
* Fixed race condition in aio test.
* Fixed build with Bionic libc.
* Fixed build with glibc-2.28.
* Fixed build in exotic systemd-nspawn based environments.
* Fixed build on s390 with kernel headers that do not contain Linux commit
v3.10-rc1~201^2~11.
Noteworthy changes in release 4.23 (2018-06-14)
===============================================
* Changes in behaviour
* On x32 personality, 64-bit syscalls (such as readv) are now shown with "#64"
suffix instead of "64:" prefix. Unlike the old names, these new names
can be used in syscall qualification expressions.
* Changed error number output format: error numbers are consistently
printed as "-1 ECONST (Error description)"
for known errors and as "-1 (errno 123)" for unknown errors,
regardless of -e raw qualification settings. One can specify
-X raw for displaying raw error numbers unconditionally.
* Unfetchable addresses inside arrays are now printed as comments.
* Obsolete IA-32 mode syscall names are no longer printed on ia64.
* Improvements
* Implemented libdw backend for -k option, configured at build time
using --with-libdw option.
Whether -k option is compiled is now configured at build time
using --enable-stacktrace option.
* Added -X option for configuring xlat output formatting (addresses
Debian bug #692915).
* Added support for personality designation ("64", "32", or "x32") to syscall
qualifications in -e trace expressions.
* Implemented injection of syscalls with no side effects as an alternative
to injection of an invalid syscall (-e inject=SET:syscall= expression).
* Improved support for reproducible builds (addresses Debian bug #896016).
* Implemented decoding of BPF_PROG_QUERY and BPF_RAW_TRACEPOINT_OPEN bpf
syscall commands.
* Implemented decoding of INOTIFY_IOC_SETNEXTWD and PERF_EVENT_IOC_* ioctl
commands.
* Implemented decoding of PR_GET_SPECULATION_CTRL and PR_SET_SPECULATION_CTRL
prctl syscall options.
* Enhanced decoding of bpf, getsockopt, setsockopt, and socket syscalls.
* Enhanced decoding of NETLINK_KOBJECT_UEVENT and NETLINK_ROUTE protocols.
* Enhanced decoding of *_DIAG_MEMINFO netlink attributes.
* Enhanced decoding of BTRFS_*, FS_IOC_*, SIOCGIFHWADDR, and SIOCSIFHWADDR
ioctl commands.
* Enhanced decoding of AF_BLUETOOTH socket addresses.
* Implemented decoding of io_pgetevent syscall.
* Wired up rseq syscall.
* Updated lists of ADJ_*, BPF_*, BPF_F_*, BPF_PROG_TYPE_*, ETH_P_*, FPE_*,
IFF_*, IPPROTO_*, MAP_*, MS_*, MSG_*, NETLINK_*, PACKET_*, PROT_*, SCTP_*,
SECCOMP_FILTER_FLAG_*, SEGV_*, SEM_*, SHM_*, SW_*, V4L2_CID_*,
V4L2_CTRL_CLASS_*, and V4L2_PIX_FMT_* constants.
* Updated lists of ioctl commands from Linux 4.17.
* Bug fixes
* Fixed decoding of msgtyp argument of msgrcv syscall.
* Fixed fallback definitions for F_*, MCL_*, MSG_ZEROCOPY, SI_*,
and SOL_SOCKET constants.
* Fixed -e trace=%pure expression on mips.
Noteworthy changes in release 4.22 (2018-04-05)
===============================================
* Changes in infrastructure
* The mailing list was moved to strace-devel@lists.strace.io.
* SourceForge git repository
(https://sourceforge.net/p/strace/code/ci/master/tree/) is no longer
maintained. Please use GitLab (https://gitlab.com/strace/strace/)
or GitHub (https://github.com/strace/strace/) repository instead.
* Changes in behaviour
* When printing string data, '8' and '9' following an octal escape sequence
no longer lead to unabbreviated octal escape sequence output, as they used
to do.
* Angle brackets are now printed as octal number escape sequences
in the output of paths associated with file descriptors.
* Data dump for write syscalls (-e write) is performed regardless
of successfulness of these syscall (addresses Debian bug #436284).
* -r and -t options are now affect output independently. Previously,
-r option led to ignoring of the -t option (addresses Debian bug #466195).
* Improvements
* Implemented delay injection (-e inject=SET:delay_enter= and
-e inject=SET:delay_exit= options).
* Added -A option for opening output files in append mode
(addresses Debian bug #528488).
* IPv6 addresses shown in socket information in -yy mode are now printed
in brackets.
* Enhanced decoding of bpf, prctl and ptrace syscalls.
* Enhanced decoding of BTRFS_IOC_INO_PATHS, BTRFS_IOC_LOGICAL_INO, and PTP_*
ioctl commands.
* Enhanced NETLINK_ROUTE protocol decoding.
* Updated lists of signal codes.
* Updated lists of BPF_*, BTN_*, ETH_P_*, INET_DIAG_BC_*, KEY_*, POLL*, RWF_*,
SCHED_FLAG_*, SCTP_* and error constants.
* Implemented block/character device number printing in -yy mode.
* Known pixel/SDR format names are printed as comments for pixelformat fields
in v4l2 structures.
* Enhanced decoding of kern_features syscall.
* Enhanced NETLINK_NETFILTER netlink protocol decoder.
* Optimized handling of large number of tracees.
* Improved wall clock time measurement in syscall count statistics
(-c -w option).
* Extended the range of allowed values in -e inject=...:retval= expression.
* Added i18n support.
* Updated lists of ioctl commands from Linux 4.16.
* Enhanced manual page.
* Bug fixes
* Fixed build on m68k.
* Fixed v4l2 pixelformat decoding on big-endian architectures.
* Fixed -O option.
Noteworthy changes in release 4.21 (2018-02-13)
===============================================
* Changes in behaviour
* Warning is now issued when -F option is used.
* Warning is now issued when a tracee with unsupported personality
is attached.
* Unknown syscall numbers are now printed in hexadecimal form.
* Improvements
* Implemented decoding of netlink descriptor attributes as file descriptors.
* Implemented decoding of hugetlb page size selection flags.
* Implemented decoding of BPF_PROG_TEST_RUN, BPF_PROG_GET_NEXT_ID,
BPF_MAP_GET_NEXT_ID, BPF_PROG_GET_FD_BY_ID, BPF_MAP_GET_FD_BY_ID,
and BPF_OBJ_GET_INFO_BY_FD commands of bpf syscall.
* Enhanced decoding of get_thread_area, memfd_create, modify_ldt,
perf_event_open, reboot, s390_guarded_storage, s390_pcio_mmio_read,
s390_pci_mmio_write, s390_runtime_instr, s390_sthyi, set_thread_area,
and shmget syscalls.
* Implemented decoding of KVM_* and DM_LIST_DEVICES ioctl commands.
* Implemented decoding of riscv_flush_icache syscall.
* Enhanced decoding of getsockopt and setsockopt syscalls for SOL_NETLINK
level.
* Enhanced decoding of BPF_MAP_CREATE command of bpf syscall.
* Print values returned by mq_open syscall and first arguments
of mq_getsetattr, mq_notify, mq_timedreceive, and mq_timedsend syscalls
as file descriptors.
* Added decoding of get_tls syscall on arm.
* Added -e trace=%pure option for tracing system calls with no arguments that
never fail.
* Updated lists of IPV6_*, MAP_*, MEMBARRIER_CMD_*, MSG_*, NT_*, PKEY_*,
SHM_*, and TCP_* constants.
* Added manual page for the strace-log-merge command.
* Updated lists of ioctl commands from Linux 4.15.
* Implemented biarch support for s390x.
* Implemented an optional support for symbol demangling in strace -k output
(activated by --with-libiberty configure option).
* Information about availability of demangling and reliable personality
decoding (on architectures with multiple personalities) is now available
in strace -V output.
* Added decoding of pkey_alloc, pkey_free, and pkey_mprotect syscalls on
powerpc and powerpc64.
* Enhanced manual page.
* Bug fixes
* Fixed multi-personality support in cross builds.
* Added mq_getsetattr, mq_notify, mq_open, mq_timedreceive, and mq_timedsend
syscalls to %desc tracing set.
* Fixed path tracing support for mmap syscalls with indirect arguments and
for old select syscall.
* Fixed decoding of arm-specific (__ARM_NR_*) syscalls.
* Fixed open mode flags decoding.
* Fixed corner cases in handling of strace -ff -ttt logs by strace-log-merge.
* Error counts that exceed one billion are now printed correctly in call
summary output.
* Fixed call summary header for x32 personality.
* Changes of tracee personalities are reported more reliably.
* Fixed the case when strace attaches to a tracee being inside exec and its
first syscall stop is syscall-exit-stop instead of syscall-enter-stop,
which messed up all the syscall state tracking.
* Fixed printing of higher 32 bits of the return value for x32 personality.
* Portability
* A C compiler that supports "for" loop initial declarations is now required.
* Inability to configure multiple personality support on architectures where
multiple personalities are supported leads to configuration failure during
build now. Use --enable-mpers=check to revert to the old behaviour.
* Build-time requirement for the mpers support has been lowered from gawk 4
to gawk 3.
* Removed incomplete and non-functional support for the CRIS architecture.
* Removed incomplete and unused support for IA-32 mode on the IA-64
architecture.
Noteworthy changes in release 4.20 (2017-11-13)
===============================================
* Improvements
* Implemented decoding of NETLINK_NETFILTER netlink message types and flags.
* Implemented decoding of SECCOMP_GET_ACTION_AVAIL operation of seccomp
syscall.
* Updated lists of ARPHRD_*, BPF_*, ETH_P_*, LOOP_*, MADV_*,
MEMBARRIER_CMD_*, MFD_*, SECCOMP_*, SO_*, SOL_*, TCP_*, and UFFD_FEATURE_*
constants.
* Added decoding of statx syscall on hppa.
* Updated lists of ioctl commands from Linux 4.14.
* Bug fixes
* Fixed powerpc personality support on powerpc64.
Noteworthy changes in release 4.19 (2017-09-05)
===============================================
* Changes in behaviour
* Changed formatting of personality names on tile architecture in order
to make it in line with other multi-personality architectures.
* Changed field output order in struct v4l2_requestbuffers to improve in/out
field formatting.
* Changed handling of multiple signal= specifications in an injection
expression: multiple specification now leads to error instead of implicit
usage the last specification.
* Improvements
* Enhanced decoding of optlen argument of getsockopt syscall.
* Enhanced decoding of SO_LINGER option of getsockopt and setsockopt syscalls.
* Enhanced decoding of SO_PEERCRED option of getsockopt syscall.
* Enhanced decoding of IP_ADD_MEMBERSHIP, IP_DROP_MEMBERSHIP,
IPV6_ADD_MEMBERSHIP, IPV6_DROP_MEMBERSHIP, IPV6_JOIN_ANYCAST,
IPV6_LEAVE_ANYCAST, MCAST_JOIN_GROUP, and MCAST_LEAVE_GROUP options
of setsockopt syscall.
* Enhanced decoding of KEYCTL_DH_COMPUTE operation of keyctl syscall
(KDF parameters decoding).
* Implemented decoding of KEYCTL_RESTRICT_KEYRING operation of keyctl syscall.
* Enhanced decoding of UFFDIO_API ioctl command.
* Enhanced decoding of BPF_PROG_LOAD, BPF_MAP_CREATE, BPF_MAP_LOOKUP_ELEM,
and BPF_MAP_GET_NEXT_KEY commands of bpf syscall.
* Implemented decoding of linux socket filter programs specified
for SO_ATTACH_FILTER and SO_ATTACH_REUSEPORT_CBPF socket options.
* Implemented decoding of inet_diag_req_v2, inet_diag_req_compat,
packet_diag_msg, and smc_diag_msg netlink attributes of NETLINK_SOCK_DIAG.
* Implemented NETLINK_SELINUX protocol specific decoding.
* Implemented decoding of netlink message ack flags.
* Implemented decoding of nlmsgerr netlink attributes.
* Implemented basic protocol specific decoding of NETLINK_CRYPTO.
* Implemented decoding of crypto_user_alg netlink attributes
of NETLINK_CRYPTO.
* Implemented basic protocol specific decoding of addr, addrlabel, dcb, link,
mdb, neigh, neightbl, netconf, nsid, route, rule, tc, and tca messages
of NETLINK_ROUTE.
* Implemented decoding of NETLINK_KOBJECT_UEVENT messages.
* Improved handling of unexpected tracees (the ones that cloned with
CLONE_PARENT/CLONE_PTRACE or called PTRACE_TRACEME on themselves): they
are now PTRACE_DETACH'ed instead of PTRACE_CONT'ed.
* Updated lists of BPF_*, KEY_*, RWF_*, SCM_*, SO_*, and *_MAGIC constants.
* Added decoding of arch_prctl syscall on x86.
* Added decoding of seccomp, bpf, userfaultfd, membarrier, mlock2,
copy_file_range, preadv2, pwritev2, and statx on alpha.
* Added decoding of statx syscall on microblaze.
* Added decoding of s390_guarded_storage syscall on s390.
* Updated lists of ioctl commands from Linux 4.13.
* Enhanced manual page.
* Bug fixes
* Fixed printing of group_req structure on non-native personalities.
* Fixed output formatting of blkpg_ioctl_arg, dm_name_list, and iocb
structures.
* Fixed formatting of nul-terminated strings which have kernel-imposed size
limit.
* Fixed printing of paths that hit PATM_MAX limit in order to match kernel's
behaviour.
* Fixed build warnings on Android mips64.
* Fixed unused function "is_negated_errno" build warning when built
with clang.
* Fixed syscall number and arguments retrieval behaviour on sparc64 and
mips o32 after prctl(PR_SET_DUMPABLE, 0) makes PTRACE_PEEKTEXT impossible
to use if Linux kernel has commit v4.10-rc1~114^2~2.
* Fixed path tracing for execveat, symlink, symlinkat, inotify_add_watch,
and inotify_init syscalls.
* Fixed personality switch printing on sparc64 and risc-v.
Noteworthy changes in release 4.18 (2017-07-05)
===============================================
* Improvements
* Implemented decoding of SCM_TIMESTAMP* control messages.
* Implemented decoding of netlink NLMSG_DONE messages.
* Implemented decoding of netlink generic nlmsg_type and nlmsg_flags.
* Implemented decoding of NETLINK_AUDIT, NETLINK_NETFILTER, NETLINK_ROUTE,
NETLINK_SELINUX, NETLINK_SOCK_DIAG, and NETLINK_XFRM message types.
* Implemented decoding of NETLINK_GENERIC protocol families.
* Implemented basic protocol specific decoding of AF_INET, AF_INET6,
AF_NETLINK, AF_PACKET, AF_SMC, and AF_UNIX messages of NETLINK_SOCK_DIAG.
* Implemented basic decoding of netlink attributes.
* Implemented basic protocol specific decoding of AF_INET, AF_NETLINK,
AF_PACKET, AF_SMC, and AF_UNIX netlink attributes of NETLINK_SOCK_DIAG.
* Implemented decoding of inet_diag_msg, netlink_diag_msg, and unix_diag_msg
netlink attributes of NETLINK_SOCK_DIAG.
* Updated lists of ARPHRD_*, KEYCTL_*, NDIAG_SHOW_*, RTM_*, SCM_*, SCTP_*,
SO_*, V4L2_*, and prctl ARCH_* constants.
* Updated lists of ioctl commands from Linux 4.12.
* Bug fixes
* In interactive mode (-I2), those signals that were blocked at startup
will remain blocked for the whole period of strace execution.
* strace no longer resets SIGCHLD handler in tracees to the default action.
* When traced command is terminated by a blocked signal, strace unblocks
that signal to ensure its own termination with the same signal.
* Fixed corner cases in decoding of old sigaction syscall.
* Fixed build with old kernel headers on mips.
* Fixed build on aarch64 and tile with glibc >= 2.26.
* Fixed build on arc and nios2.
Noteworthy changes in release 4.17 (2017-05-24)
===============================================
* Changes in command line syntax
* Syscall classes specified in -e trace= option now have % prefix (like
-e trace=%process). Old style class names without leading % are still
supported, but considered deprecated now.
* Improvements
* Optimized syscall filtering.
* Improved representation of timestamps.
* Enhanced decoding of sched_setattr syscall.
* Added -e trace=%stat option for tracing variants of stat syscall.
* Added -e trace=%lstat option for tracing variants of lstat syscall.
* Added -e trace=%fstat option for tracing variants of fstat and fstatat
syscalls.
* Added -e trace=%%stat option for tracing syscalls used for querying file
status information (stat, lstat, fstat, fstatat, statx, and their
variations).
* Added -e trace=%statfs option for tracing statfs, statfs64 and statvfs
syscalls.
* Added -e trace=%fstatfs option for tracing fstatfs, fstatfs64 and fstatvfs
syscalls.
* Added -e trace=%%statfs option for tracing syscalls used for querying file
system statistics information (statfs-like, fstatfs-like and ustat).
* Added -e trace=/regex option for filtering syscalls using regular
expressions.
* Added support for prepending of question mark before syscall qualification
in -e trace expressions in order to suppress error in case no syscalls
matched the provided qualification.
* Implemented decoding of signal mask in rt_sigreturn syscall on alpha, arc,
arm, avr32, bfin, cris, hppa, m68k, metag, microblaze, mips, nios2, or1k,
powerpc, powerpc64, riscv, sh, sh64, sparc, sparc64, tile, x86, and xtensa
architectures.
* Implemented decoding of statx syscall.
* Implemented decoding of NS_* ioctl commands.
* Implemented decoding of the remaining V4L2_BUF_TYPE_* types.
* Implemented decoding of VIDIOC_[SG]_TUNER ioctl commands.
* Implemented decoding of NLMSG_ERROR netlink messages.
* Improved decoding of BPF_PROG_ATTACH command of bpf syscall.
* Improved decoding of misplaced parts in DM_* ioctl commands.
* Updated lists of ioctl commands from Linux 4.11.
* Bug fixes
* Fixed decoding of flags argument of preadv2 and pwritev2 syscalls on x32.
* Fixed the number of arguments and tracing flags of alpha specific syscalls.
* Fixed decoding of old sigsuspend syscall on alpha, cris, mips, powerpc,
powerpc64, sh, sh64, sparc, and sparc64.
* Fixed decoding of sgetmask and ssetmask syscalls on 64-bit architectures.
* Fixed decoding of netlink messages received within struct msghdr.
* Worked around a bug in miscompiled aarch64 kernels leading to the 3rd
argument of sched_getattr syscall being not quite 32-bit.
* Fixed corner cases of printing inaccessible times argument of utimes
and futimesat syscalls.
Noteworthy changes in release 4.16 (2017-02-14)
===============================================
* Improvements
* Implemented syscall return value injection (-e inject=SET:retval= option).
* Implemented signal injection (-e inject=SET:signal= option).
* Implemented decoding of SUID_DUMP_* constants in PR_[GS]ET_DUMPABLE.
* Implemented decoding of all SG_* ioctl commands.
* Implemented decoding of ustat syscall.
* Implemented decoding of BPF_OBJ_PIN, BPF_OBJ_GET, BPF_PROG_ATTACH,
and BPF_PROG_DETACH commands of bpf syscall.
* Enhanced decoding of sg_io_hdr and sg_io_v4 structures.
* Enhanced decoding of get_robust_list, getrandom, io_submit, set_robust_list
syscalls.
* Enhanced decoding of entities of kernel long type on x32 and mips n32 ABIs.
* Updated lists of IP_*, IPV6_*, and LOOP_* constants.
* Updated lists of ioctl commands from Linux 4.10.
* Added decoding of recently added syscalls on avr32, microblaze, ppc,
and ppc64.
* Bug fixes
* Fixed pathmatch of oldselect syscall on 64-bit architectures.
* Fixed decoding of mmap2 syscall on s390 when arguments are not available.
* Fixed decoding of kexec_file_load, mprotect, pkey_mprotect, prctl, preadv*,
and pwritev* syscalls on x32.
* Fixed printing of string arguments of getxattr and setxattr syscalls
when -s option is used to limit the printed string size.
* Fixed decoding of ifconf, ifreq, and loop_info structures on non-native
personalities.
* Fixed decoding of SG_* and LOOP_* ioctl commands.
* Fixed build on mips with musl libc.
* Fixed cross-building of ioctlsort.
* Applied minor formatting fixes to the manual page.
Noteworthy changes in release 4.15 (2016-12-14)
===============================================
* Changes in behavior
* Time stamps are now printed according to ISO 8601.
* Changed output format of val3 parameter of futex FUTEX_WAKE_OP operation.
* The last argument of mincore, sched_getaffinity, and sched_setaffinity
syscalls is now formatted as an array.
* Improvements
* Implemented syscall fault injection (-e fault=... option).
* Implemented decoding of DM_* ioctl commands.
* Implemented decoding of attr parameter of perf_event_open syscall.
* Implemented decoding of pkey_alloc, pkey_free, and pkey_mprotect syscalls.
* Implemented dumping of mq_timedsend and mq_timedreceive syscalls.
* Implemented decoding of PR_SET_FP_MODE and PR_GET_FP_MODE operations
of prctl syscall.
* Implemented PTRACE_GETREGS API support on m68k.
* Updated lists of ARCH_*, BPF_*, BTRFS_*, FALLOC_*, MS_*, *_MAGIC,
and V4L2_* constants.
* Updated lists of ioctl commands from Linux 4.9.
* Added decoding of recently added syscalls on arc, x32, and xtensa.
* Enhanced manual page.
* Bug fixes
* Fixed corner cases in decoding of exit, exit_group, futimesat, getgroups,
getresuid, init_module, inotify_init1, kcmp, kexec_load, lookup_dcookie,
mq_getsetattr, mq_notify, mq_open, mq_timedreceive, mq_timedsend,
name_to_handle_at, prctl, process_vm_readv, process_vm_writev, setfsuid,
setgroups, setns, unshare, and utimes syscalls.
* Fixed handling of verbose flag in printing of controls array
of struct v4l2_ext_controls.
* Fixed omission of field names in the output of capability, sigaction,
sigevent, statfs, timespec, timeval, and utimbuf structures.
* Fixed printing of unknown syscalls in siginfo structure.
* Fixed decoding of ioctl constants on m68k.
* Fixed cris architecture support.
* Fixed cross build when host compiler does not support the same
set of warning flags as the cross compiler.
* Fixed build on SLE10 and SLE11.
Noteworthy changes in release 4.14 (2016-10-04)
===============================================
* Changes in behavior
* When using -p option without a command and no processes has been attached,
strace exits with exit status 1.
* Improvements
* Added printing of the mode argument of open and openat syscalls
when O_TMPFILE flag is set. (Addresses Fedora bug #1377846).
* Enhanced -e abbrev=set, -e raw=set, and -e verbose=set.
* Enhanced decoding of futex, keyctl, quotactl, timerfd_settime,
and aio family syscalls.
* Implemented fetching of the 7th subcall argument on mips o32.
* Updated lists of BPF_*, ETH_P_*, KEXEC_ARCH_*, SCTP_*, TCP_*, and *_MAGIC
constants.
* Updated lists of ioctl commands from Linux 4.8.
* Added decoding of new syscalls on sh and sh64.
* Added RISC-V architecture support.
* Bug fixes
* Marked io_setup and io_destroy as memory mapping related syscalls.
* Fixed leakage of placeholder descriptors to tracees.
* Fixed printing of mode_t, umode_t, and umask types.
* Fixed decoding of iovec arrays without a limit on total data size.
* Fixed decoding of fadvise64, fallocate, futex, keyctl, quotactl, readahead,
and ipc family syscalls.
* Fixed decoding of invalid syscalls mapped to indirect subcalls.
* Fixed decoding of struct btrfs_ioctl_vol_args_v2 on non-native
personalities.
* Fixed decoding of PTRACE_DETACH on sparc and sparc64.
* Fixed decoding of struct stat64 on sparc64.
* Fixed decoding of uid and gid-related syscalls on sparc64.
* Fixed decoding of the forth argument of semctl syscall on sparc64.
* Fixed values of tty ioctl constants on sparc64.
* Fixed sparc personality support on sparc64.
Noteworthy changes in release 4.13 (2016-07-26)
===============================================
* Improvements
* Implemented a general netlink socket parser.
* Enhanced decoding of socket addresses.
* Enhanced decoding of cmsghdr, msghdr, and mmsghdr structures.
* Enhanced decoding of accept, accept4, bind, getpeername, getsockname,
ipc, recvfrom, recvmsg, recvmmsg, sendto, sendmmsg, and socketcall syscalls.
* Updated lists of AF_*, BPF_MAP_TYPE_*, KEY_*, KEYCTL_*, RWF_*, SS_*,
and *_MAGIC constants.
* Updated lists of ioctl commands from Linux 4.7.
* Bug fixes
* Fixed decoding of pid_t argument of prlimit64 syscall.
* Fixed sign extension issues in the parser of struct rusage.
* Fixed race condition in decoding of timeout argument of recvmmsg and
rt_sigtimedwait syscalls.
* Fixed build with fresh linux kernel headers.
Noteworthy changes in release 4.12 (2016-05-31)
===============================================
* Improvements
* Implemented simultaneous use of -p option and tracing of a command.
(addresses Debian bug #549942).
* Implemented caching of netlink conversations to reduce amount of time
spent in decoding socket details in -yy mode.
* Implemented -yy mode decoding of protocol:portid pairs associated with
netlink socket descriptors.
* Implemented decoding of copy_file_range, preadv2, and pwritev2 syscalls.
* Implemented dumping of preadv, preadv2, pwritev, pwritev2, and vmsplice
syscalls.
* Implemented decoding of BTRFS_* and UFFDIO_* ioctl commands.
* Enhanced decoding of BLK*, EVIOC*, RTC_*, and VIDIOC_* ioctl commands.
* Enhanced decoding of fstatfs, fstatfs64, get_mempolicy, getdents,
getdents64, getgroups, getpriority, kill, mbind, migrate_pages, mknod,
mknodat, personality, poll, ppoll, quotactl, rt_sigpending,
rt_sigqueueinfo, rt_sigtimedwait, rt_tgsigqueueinfo, sched_getaffinity,
sched_setaffinity, seccomp, set_mempolicy, setgroups, setpriority, statfs,
statfs64, tgkill, waitid, and xattr family syscalls.
* Enhanced decoding of getxpid, getxuid, and getxgid syscalls on alpha.
* Enhanced decoding of pipe syscall on alpha, ia64, mips, sh, and sparc.
* Added decoding of bind, listen, and setsockopt direct syscalls on sparc.
* Added decoding of osf_statfs64 and osf_fstatfs64 syscalls on alpha.
* Added decoding of fadvise64 and fadvise64_64 on s390.
* Updated lists of AF_*, BPF_MAP_TYPE_*, CLONE_*, EPOLL*, IPV6_*, MADV_*,
MSG_*, PTRACE_*, SEGV_*, SO_*, SOL_*, *_MAGIC, and quotactl constants.
* Updated lists of ioctl commands from Linux 4.6.
* Bug fixes
* Fixed build on arc, metag, nios2, or1k, and tile architectures.
* Fixed decoding of 32-bit times syscall return value on 64-bit architectures.
* Fixed decoding of mlock2 syscall on sparc.
* Fixed decoding of osf_shmat syscall on alpha.
* Fixed decoding of syscalls unknown to the kernel on s390/s390x.
(addresses Debian bug #485979 and Fedora bug #1298294).
* Fixed decoding of preadv syscall in case of short read.
* Fixed decoding and dumping of readv syscall in case of short read.
* Fixed dumping of recvmsg and recvmmsg syscalls in case of short read.
* Fixed decoding of mincore syscall's last argument.
* Fixed remaining errors in mapping between syscall numbers and numbers
of syscall arguments.
* Applied various fixes to strace-graph script.
Noteworthy changes in release 4.11 (2015-12-21)
===============================================
* Changes in behavior
* Some syscalls have different names depending on architecture and
personality. In these cases, syscall filtering and printing now
consistently uses the names that match corresponding __NR_* kernel
macros of the tracee's architecture and personality.
* Added strace prefix to all diagnostic messages.
* Improvements
* Enhanced and extended test suite.
* Implemented reliable tracing of processes whose personality differs
from the personality of strace, fixed decoding of 32-bit personality
syscalls on 64-bit architectures.
* When some data referenced by syscall arguments is irrelevant or cannot
be read from tracee's memory, strace now prints its address consistently.
* When a syscall is restarted using restart_syscall mechanism, strace now
shows the syscall name on architectures that expose this information.
* Print values returned by epoll_create1, eventfd, eventfd2, fanotify_init,
inotify_init1, perf_event_open, pipe, pipe2, signalfd, signalfd4, socket,
socketpair, timerfd, and timerfd_create syscalls, as well as F_DUPFD and
F_DUPFD_CLOEXEC fcntl commands, as file descriptors.
* Optimized decoding of indirect socket syscalls.
* Implemented decoding of nanoseconds along with seconds in stat family
syscalls (addresses Fedora bug #1251176).
* Implemented decoding of struct statfs.f_flags in statfs syscall.
* Implemented decoding of siginfo_t.si_syscall and siginfo_t.si_arch
in SIGSYS signal.
* Implemented decoding of indirect syscall on mips o32.
* Implemented decoding of IPPROTO_IP control messages.
* Implemented decoding of setsockopt syscall multicast arguments.
* Enhanced decoding of struct sigevent.
* Enhanced decoding of block, loop, mtd, ptp, rtc, SG_IO, socket, tty,
and v4l2 ioctl syscall arguments.
* Enhanced decoding of epoll_create, fcntl, fcntl64, futex, getdents,
getdents64, getsockopt, io_*, mount, msgctl, prctl, quotactl, recvfrom,
sendfile, setsockopt, and shmctl syscalls.
* Implemented decoding of bpf, execveat, ioperm, iopl, kcmp, kexec_file_load,
lookup_dcookie, membarrier, memfd_create, mlock2, name_to_handle_at,
open_by_handle_at, sched_getattr, sched_setattr, and userfaultfd syscalls.
* Updated lists of AF_*, EPOLL_*, FALLOC_FL_*, F_*, INPUT_PROP_*, IPPROTO_*,
IPV6_*, IP_*, KEY_*, LOCK_*, MNT_*, MS_*, PACKET_*, PERF_FLAG_*, PF_*,
PR_*, PTRACE_O_*, RENAME_*, SCTP_*, SECBIT_*, SO_*, TCP_*, and siginfo_t
constants.
* Added Nios II architecture support.
* Added new syscall entries to match Linux 4.4.
* Bug fixes
* Fixed potential short read of strings from tracee's memory.
* Fixed -qq option in conjunction with -o option.
* Fixed filtering of <unavailable> syscalls.
* Fixed decoding of ioctl syscall command on aarch64 and 32-bit architectures
with 64-bit aligned structures.
* Fixed decoding of eventfd2, epoll_create1, signalfd4, and sync_file_range2
syscall flags arguments.
* Fixed decoding of 4th argument of clock_nanosleep syscall.
* Fixed decoding of getpagesize syscall on m68k.
* Fixed decoding of getrandom and seccomp syscalls on aarch64.
* Fixed decoding of timezone argument of gettimeofday and settimeofday
* syscalls.
* Fixed decoding of offset argument of mmap2 syscall on arm, sparc,
and sparc64.
* Fixed decoding of pipe syscall on alpha and mips.
* Fixed decoding of pipe2 syscall on ia64, sh, sparc, and sparc64.
* Fixed decoding of signal mask argument of pselect6 syscall on x32.
* Fixed decoding of signal mask of rt_sigreturn syscall on aarch64, m68k,
and x32.
* Fixed decoding of 4th argument of semctl indirect syscall.
* Fixed decoding of sa_restorer and sa_mask of sigaction syscall on m68k.
* Fixed decoding of statfs64 and fstatfs64 syscalls on arm eabi.
* Fixed decoding of struct dirent on x32.
* Fixed decoding of times syscall return value on mips n32 and x32.
* Fixed decoding of path argument of umount2 syscall
(addresses Debian bug #785050).
* Worked around a kernel bug in tracing privileged executables.
* Fixed various errors in mapping between syscall numbers and associated
information like the number of syscall arguments, the name of syscall,
and syscall decoder.
Noteworthy changes in release 4.10 (2015-03-06)
===============================================
* Improvements
* Added -yy option to print protocol and address information associated with
socket descriptors.
* Extended "-e read=set" and "-e write=set" options to cover sendmsg,
recvmsg, sendmmsg, and recvmmsg syscalls.
* Implemented full 32-bit decoding of ioctl commands
(addresses Debian bug #692913 and Fedora bug #902788).
* Implemented PTRACE_GETREGS API support on ia64.
* Implemented PTRACE_GETREGS API support on mips.
* Implemented PTRACE_GETREGSET API support on s390/s390x.
* Implemented decoding of getrandom and seccomp syscalls.
* Implemented full decoding of 64-bit capability sets.
* Implemented decoding of all prctl commands.
* Implemented decoding of parametrized ioctl commands.
* Implemented decoding of evdev ioctl commands.
* Implemented decoding of v4l ioctl commands.
* Implemented decoding of SG_IO v4 ioctl commands.
* Implemented decoding of FIFREEZE/FITHAW/FITRIM ioctl commands.
* Implemented decoding of FALLOC_FL_* fallocate flags.
* Implemented decoding of rt_sigreturn signal mask on aarch64,
x32, and x86_64.
* Enhanced socket decoder to support bluetooth sockets.
* Enhanced decoding of unlisted ioctl commands.
* Enhanced decoding of getsockopt and setsockopt syscall.
* Enhanced decoding of sysinfo syscall.
* Enhanced decoding of struct cmsghdr.
* Enhanced decoding of wait status.
* Enhanced aio support on non-x86 architectures by using external libaio.h.
* Added O_TMPFILE to the list of recognized open mode flags.
* Updated the list of filesystem type constants that is used in decoding
statfs family syscalls.
* Updated lists of CAP_*, PR_*, PTRACE_*, SCHED_*, SO_*, SOL_*, SWAP_FLAG_*,
and TFD_* constants.
* Updated lists of signal constants from Linux 3.19.
* Updated lists of errno constants from Linux 3.19.
* Updated lists of ioctl commands from Linux 3.9.
* Added new syscall entries to match Linux 3.19.
* Bug fixes
* Fixed various errors in mapping between syscall numbers and associated
information like the number of syscall arguments, the name of syscall,
and syscall decoder.
* Fixed quoting issues in printing descriptors, filenames, network interface
names, struct utsname members, device/volume names of BLK* ioctl commands.
* Fixed uid_t/git_t decoding.
* Fixed potential out-of-bounds read issues in getdents/getdents64 decoders.
* Fixed potential open flags truncation on some architectures.
* Fixed decoding of struct ifreq.ifr_name.
* Fixed decoding of SIOCSIFNAME ioctl command.
* Fixed decoding of RENAME_* renameat2 flags.
* Fixed decoding of UTIME_NOW/UTIME_OMIT timeval structures.
* Fixed decoding of indirect ipc subcalls on some architectures.