MAC kernel panic分析(2)

lldb (lldb) settings set target.load-script-from-symbol-file true

(lldb) target modules load --file kernel --slide 0x000000000bc00000

(lldb) image lookup -a 0xffffff800926997d      Address:kernel[0xffffff800025997d] (kernel.__TEXT.__text + 231805)      Summary:kernel`ipc_kmsg_get_from_kernel + 45 at ipc_kmsg.c:2103:29打开源码包中的对应文件找到对应行数。

IP_PREALLOC(dest_port)

#define IP_PREALLOC(port)      ((port)->ip_object.io_bits & IP_BIT_PREALLOC)#define IP_VALID(port)         IPC_PORT_VALID(port)#define IPC_PORT_VALID(port)   ipc_port_valid(port)ipc_port_valid(ipc_port_t port){         return port != IPC_PORT_DEAD&& port;}

ipc_port_t dest_port;typedef struct ipc_port *ipc_port_t;

struct ipc_port {         /*          * Initial sub-structure in common withipc_pset          * First element is an ipc_object second is a          * message queue          */         struct ipc_object ip_object;         struct ipc_mqueueip_messages;         union {                 struct ipc_space *receiver;                 struct ipc_port *destination;                  ipc_port_timestamp_t timestamp;         } data;          /* updatehost_request_notification if this union is changed */         union {                 ipc_kobject_tXNU_PTRAUTH_SIGNED_PTR("ipc_port.kobject") kobject;                 ipc_kobject_label_t XNU_PTRAUTH_SIGNED_PTR("ipc_port.kolabel")kolabel;                 ipc_importance_task_timp_task;                 ipc_port_tsync_inheritor_port;                 struct knote*sync_inheritor_knote;                 struct turnstile*sync_inheritor_ts;         } kdata;         struct ipc_port*ip_nsrequest;         struct ipc_port*ip_pdrequest;         struct ipc_port_request*ip_requests;         union {                 struct ipc_kmsg*XNU_PTRAUTH_SIGNED_PTR("ipc_port.premsg") premsg;                 struct turnstile*send_turnstile;                 ipc_port_tXNU_PTRAUTH_SIGNED_PTR("ipc_port.alt_port") alt_port;         } kdata2;         mach_vm_address_tip_context;         natural_tip_sprequests:1,      /* send-possiblerequests outstanding */             ip_spimportant:1,           /* ... at least one is importancedonating */             ip_impdonation:1,           /* port supports importance donation*/             ip_tempowner:1,             /* dont give donations to currentreceiver */             ip_guarded:1,               /* port guarded (use contextvalue as guard) */             ip_strict_guard:1,          /* Strict guarding; Prevents usermanipulation of context values directly */             ip_specialreply:1,          /* port is a special reply port */             ip_sync_link_state:3,       /* link the port to destination port/Workloop */             ip_sync_bootstrap_checkin:1,/* port part ofsync bootstrap checkin, push on thread doing the checkin */             ip_immovable_receive:1,     /* the receive right cannot be moved outof a space, until it is destroyed */             ip_no_grant:1,              /* Port wont accept complexmessages containing (ool) port descriptors */             ip_immovable_send:1,        /* No send(once) rights to this portcan be moved out of a space */             ip_tg_block_tracking:1,     /* Track blocking relationship betweenthread groups during sync IPC */             ip_pinned: 1,               /* Can't deallocate the lastsend right from a space while the bit is set */             ip_impcount:16;             /* number of importance donationsin nested queue */         mach_port_mscount_tip_mscount;         mach_port_rights_tip_srights;         mach_port_rights_tip_sorights;#if     MACH_ASSERT#define IP_NSPARES              4#define IP_CALLSTACK_MAX        16/*       queue_chain_t     ip_port_links;*//* all allocated ports */         thread_t        ip_thread;      /* who made me?  thread context */         unsigned long   ip_timetrack;   /* give an idea of "when" created*/         uintptr_t       ip_callstack[IP_CALLSTACK_MAX]; /* stacktrace */         unsigned long   ip_spares[IP_NSPARES]; /* for debugging */#endif  /* MACH_ASSERT */#if DEVELOPMENT || DEBUG         uint8_t         ip_srp_lost_link:1,     /* special reply port turnstile link chainbroken */             ip_srp_msg_sent:1;                  /* special reply port msgsent */#endif};

#define T_PF_PROT              0x1             /* protectionviolation */#define T_PF_WRITE             0x2             /* write access */#define T_PF_USER              0x4             /* from user state*/#define T_PF_RSVD              0x8             /* reserved bitset to 1 */#define T_PF_EXECUTE           0x10            /* instructionfetch when NX */

#define T_PF_PROT              0x1             /* protectionviolation */
#define T_PF_WRITE             0x2             /* write access */
#define T_PF_USER              0x4             /* from user state*/

loading kernel debugging from /Library/Developer/KDKs/KDK_11.4_20F71.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/kernel.py
LLDB version lldb-1205.0.28.2
Apple Swift version 5.4.2 (swiftlang-1205.0.28.2 clang-1205.0.19.57)
settings set target.process.python-os-plugin-path"/Library/Developer/KDKs/KDK_11.4_20F71.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/core/operating_system.py"
settings set target.trap-handler-names hndl_allintrs hndl_alltrapstrap_from_kernel hndl_double_fault hndl_machine_check _fleh_prefabt_ExceptionVectorsBase _ExceptionVectorsTable _fleh_undef _fleh_dataabt_fleh_irq _fleh_decirq _fleh_fiq_generic _fleh_dec
command script import"/Library/Developer/KDKs/KDK_11.4_20F71.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/xnu.py"
error: module importing failed: Traceback (most recent call last):
  File "<string>",line 1, in <module>
  File"/Library/Developer/KDKs/KDK_11.4_20F71.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/xnu.py",line 123
    print "Executioninterrupted by user"
          ^SyntaxError: Missing parentheses in call to 'print'. Did you meanprint("Execution interrupted by user")?
settings set target.process.optimization-warnings false

defaults write com.apple.dt.lldb DefaultPythonVersion 2