2 * File pe_module.c - handle PE module information
4 * Copyright (C) 1996, Eric Youngdale.
5 * Copyright (C) 1999-2000, Ulrich Weigand.
6 * Copyright (C) 2004, Eric Pouech.
8 * This library is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
13 * This library is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with this library; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
30 #include "dbghelp_private.h"
33 #include "wine/debug.h"
36 WINE_DEFAULT_DEBUG_CHANNEL(dbghelp
);
38 /******************************************************************
41 * look for stabs information in PE header (it's how the mingw compiler provides
42 * its debugging information)
44 static BOOL
pe_load_stabs(const struct process
* pcs
, struct module
* module
,
45 const void* mapping
, IMAGE_NT_HEADERS
* nth
)
47 IMAGE_SECTION_HEADER
* section
;
48 int i
, stabsize
= 0, stabstrsize
= 0;
49 unsigned int stabs
= 0, stabstr
= 0;
52 section
= (IMAGE_SECTION_HEADER
*)
53 ((char*)&nth
->OptionalHeader
+ nth
->FileHeader
.SizeOfOptionalHeader
);
54 for (i
= 0; i
< nth
->FileHeader
.NumberOfSections
; i
++, section
++)
56 if (!strcasecmp((const char*)section
->Name
, ".stab"))
58 stabs
= section
->VirtualAddress
;
59 stabsize
= section
->SizeOfRawData
;
61 else if (!strncasecmp((const char*)section
->Name
, ".stabstr", 8))
63 stabstr
= section
->VirtualAddress
;
64 stabstrsize
= section
->SizeOfRawData
;
68 if (stabstrsize
&& stabsize
)
70 ret
= stabs_parse(module
,
71 module
->module
.BaseOfImage
- nth
->OptionalHeader
.ImageBase
,
72 RtlImageRvaToVa(nth
, (void*)mapping
, stabs
, NULL
),
74 RtlImageRvaToVa(nth
, (void*)mapping
, stabstr
, NULL
),
80 static BOOL CALLBACK
dbg_match(char* file
, void* user
)
82 /* accept first file */
86 /******************************************************************
91 static BOOL
pe_load_dbg_file(const struct process
* pcs
, struct module
* module
,
92 const char* dbg_name
, DWORD timestamp
)
95 HANDLE hFile
= INVALID_HANDLE_VALUE
, hMap
= 0;
96 const BYTE
* dbg_mapping
= NULL
;
97 const IMAGE_SEPARATE_DEBUG_HEADER
* hdr
;
98 const IMAGE_DEBUG_DIRECTORY
* dbg
;
101 WINE_TRACE("Processing DBG file %s\n", dbg_name
);
103 if (SymFindFileInPath(pcs
->handle
, NULL
, (char*)dbg_name
,
105 tmp
, dbg_match
, NULL
) &&
106 (hFile
= CreateFileA(tmp
, GENERIC_READ
, FILE_SHARE_READ
, NULL
,
107 OPEN_EXISTING
, FILE_ATTRIBUTE_NORMAL
, NULL
)) != INVALID_HANDLE_VALUE
&&
108 ((hMap
= CreateFileMappingA(hFile
, NULL
, PAGE_READONLY
, 0, 0, NULL
)) != 0) &&
109 ((dbg_mapping
= MapViewOfFile(hMap
, FILE_MAP_READ
, 0, 0, 0)) != NULL
))
111 hdr
= (const IMAGE_SEPARATE_DEBUG_HEADER
*)dbg_mapping
;
112 if (hdr
->TimeDateStamp
!= timestamp
)
114 WINE_ERR("Warning - %s has incorrect internal timestamp\n",
117 * Well, sometimes this happens to DBG files which ARE REALLY the
118 * right .DBG files but nonetheless this check fails. Anyway,
119 * WINDBG (debugger for Windows by Microsoft) loads debug symbols
120 * which have incorrect timestamps.
123 if (hdr
->Signature
== IMAGE_SEPARATE_DEBUG_SIGNATURE
)
125 /* section headers come immediately after debug header */
126 const IMAGE_SECTION_HEADER
*sectp
=
127 (const IMAGE_SECTION_HEADER
*)(hdr
+ 1);
128 /* and after that and the exported names comes the debug directory */
129 dbg
= (const IMAGE_DEBUG_DIRECTORY
*)
130 (dbg_mapping
+ sizeof(*hdr
) +
131 hdr
->NumberOfSections
* sizeof(IMAGE_SECTION_HEADER
) +
132 hdr
->ExportedNamesSize
);
135 ret
= pe_load_debug_directory(pcs
, module
, dbg_mapping
, sectp
,
136 hdr
->NumberOfSections
, dbg
,
137 hdr
->DebugDirectorySize
/ sizeof(*dbg
));
140 ERR("Wrong signature in .DBG file %s\n", debugstr_a(tmp
));
143 WINE_ERR("-Unable to peruse .DBG file %s (%s)\n", dbg_name
, debugstr_a(tmp
));
145 if (dbg_mapping
) UnmapViewOfFile((void*)dbg_mapping
);
146 if (hMap
) CloseHandle(hMap
);
147 if (hFile
!= NULL
) CloseHandle(hFile
);
151 /******************************************************************
152 * pe_load_msc_debug_info
154 * Process MSC debug information in PE file.
156 static BOOL
pe_load_msc_debug_info(const struct process
* pcs
,
157 struct module
* module
,
158 const void* mapping
, IMAGE_NT_HEADERS
* nth
)
161 const IMAGE_DATA_DIRECTORY
* dir
;
162 const IMAGE_DEBUG_DIRECTORY
*dbg
= NULL
;
165 /* Read in debug directory */
166 dir
= nth
->OptionalHeader
.DataDirectory
+ IMAGE_DIRECTORY_ENTRY_DEBUG
;
167 nDbg
= dir
->Size
/ sizeof(IMAGE_DEBUG_DIRECTORY
);
168 if (!nDbg
) return FALSE
;
170 dbg
= RtlImageRvaToVa(nth
, (void*)mapping
, dir
->VirtualAddress
, NULL
);
172 /* Parse debug directory */
173 if (nth
->FileHeader
.Characteristics
& IMAGE_FILE_DEBUG_STRIPPED
)
175 /* Debug info is stripped to .DBG file */
176 const IMAGE_DEBUG_MISC
* misc
= (const IMAGE_DEBUG_MISC
*)
177 ((const char*)mapping
+ dbg
->PointerToRawData
);
179 if (nDbg
!= 1 || dbg
->Type
!= IMAGE_DEBUG_TYPE_MISC
||
180 misc
->DataType
!= IMAGE_DEBUG_MISC_EXENAME
)
182 WINE_ERR("-Debug info stripped, but no .DBG file in module %s\n",
183 module
->module
.ModuleName
);
187 ret
= pe_load_dbg_file(pcs
, module
, (const char*)misc
->Data
, nth
->FileHeader
.TimeDateStamp
);
192 const IMAGE_SECTION_HEADER
*sectp
= (const IMAGE_SECTION_HEADER
*)((const char*)&nth
->OptionalHeader
+ nth
->FileHeader
.SizeOfOptionalHeader
);
193 /* Debug info is embedded into PE module */
194 ret
= pe_load_debug_directory(pcs
, module
, mapping
, sectp
,
195 nth
->FileHeader
.NumberOfSections
, dbg
, nDbg
);
201 /***********************************************************************
202 * pe_load_export_debug_info
204 static BOOL
pe_load_export_debug_info(const struct process
* pcs
,
205 struct module
* module
,
206 const void* mapping
, IMAGE_NT_HEADERS
* nth
)
209 const IMAGE_EXPORT_DIRECTORY
* exports
;
210 DWORD base
= module
->module
.BaseOfImage
;
213 if (dbghelp_options
& SYMOPT_NO_PUBLICS
) return TRUE
;
216 /* Add start of DLL (better use the (yet unimplemented) Exe SymTag for this) */
217 /* FIXME: module.ModuleName isn't correctly set yet if it's passed in SymLoadModule */
218 symt_new_public(module
, NULL
, module
->module
.ModuleName
, base
, 1,
219 TRUE
/* FIXME */, TRUE
/* FIXME */);
222 /* Add entry point */
223 symt_new_public(module
, NULL
, "EntryPoint",
224 base
+ nth
->OptionalHeader
.AddressOfEntryPoint
, 1,
227 /* FIXME: we'd better store addresses linked to sections rather than
229 IMAGE_SECTION_HEADER
* section
;
230 /* Add start of sections */
231 section
= (IMAGE_SECTION_HEADER
*)
232 ((char*)&nth
->OptionalHeader
+ nth
->FileHeader
.SizeOfOptionalHeader
);
233 for (i
= 0; i
< nth
->FileHeader
.NumberOfSections
; i
++, section
++)
235 symt_new_public(module
, NULL
, section
->Name
,
236 RtlImageRvaToVa(nth
, (void*)mapping
, section
->VirtualAddress
, NULL
),
237 1, TRUE
/* FIXME */, TRUE
/* FIXME */);
241 /* Add exported functions */
242 if ((exports
= RtlImageDirectoryEntryToData((void*)mapping
, FALSE
,
243 IMAGE_DIRECTORY_ENTRY_EXPORT
, &size
)))
245 const WORD
* ordinals
= NULL
;
246 const DWORD_PTR
* functions
= NULL
;
247 const DWORD
* names
= NULL
;
251 functions
= RtlImageRvaToVa(nth
, (void*)mapping
, exports
->AddressOfFunctions
, NULL
);
252 ordinals
= RtlImageRvaToVa(nth
, (void*)mapping
, exports
->AddressOfNameOrdinals
, NULL
);
253 names
= RtlImageRvaToVa(nth
, (void*)mapping
, exports
->AddressOfNames
, NULL
);
255 for (i
= 0; i
< exports
->NumberOfNames
; i
++)
257 if (!names
[i
]) continue;
258 symt_new_public(module
, NULL
,
259 RtlImageRvaToVa(nth
, (void*)mapping
, names
[i
], NULL
),
260 base
+ functions
[ordinals
[i
]],
261 1, TRUE
/* FIXME */, TRUE
/* FIXME */);
264 for (i
= 0; i
< exports
->NumberOfFunctions
; i
++)
266 if (!functions
[i
]) continue;
267 /* Check if we already added it with a name */
268 for (j
= 0; j
< exports
->NumberOfNames
; j
++)
269 if ((ordinals
[j
] == i
) && names
[j
]) break;
270 if (j
< exports
->NumberOfNames
) continue;
271 snprintf(buffer
, sizeof(buffer
), "%ld", i
+ exports
->Base
);
272 symt_new_public(module
, NULL
, buffer
, base
+ (DWORD
)functions
[i
], 1,
273 TRUE
/* FIXME */, TRUE
/* FIXME */);
276 /* no real debug info, only entry points */
277 if (module
->module
.SymType
== SymDeferred
)
278 module
->module
.SymType
= SymExport
;
282 /******************************************************************
286 BOOL
pe_load_debug_info(const struct process
* pcs
, struct module
* module
)
292 IMAGE_NT_HEADERS
* nth
;
294 hFile
= CreateFileA(module
->module
.LoadedImageName
, GENERIC_READ
, FILE_SHARE_READ
,
295 NULL
, OPEN_EXISTING
, FILE_ATTRIBUTE_NORMAL
, NULL
);
296 if (hFile
== INVALID_HANDLE_VALUE
) return ret
;
297 if ((hMap
= CreateFileMappingA(hFile
, NULL
, PAGE_READONLY
, 0, 0, NULL
)) != 0)
299 if ((mapping
= MapViewOfFile(hMap
, FILE_MAP_READ
, 0, 0, 0)) != NULL
)
301 nth
= RtlImageNtHeader(mapping
);
303 if (!(dbghelp_options
& SYMOPT_PUBLICS_ONLY
))
305 ret
= pe_load_stabs(pcs
, module
, mapping
, nth
) ||
306 pe_load_msc_debug_info(pcs
, module
, mapping
, nth
);
307 /* if we still have no debug info (we could only get SymExport at this
308 * point), then do the SymExport except if we have an ELF container,
309 * in which case we'll rely on the export's on the ELF side
312 /* FIXME shouldn't we check that? if (!module_get_debug(pcs, module))l */
313 if (pe_load_export_debug_info(pcs
, module
, mapping
, nth
) && !ret
)
315 UnmapViewOfFile(mapping
);
324 /******************************************************************
328 struct module
* pe_load_module(struct process
* pcs
, const char* name
,
329 HANDLE hFile
, DWORD base
, DWORD size
)
331 struct module
* module
= NULL
;
335 char loaded_name
[MAX_PATH
];
337 loaded_name
[0] = '\0';
340 unsigned len
= WideCharToMultiByte(CP_ACP
,0, pcs
->search_path
, -1, NULL
, 0, NULL
, NULL
);
345 /* FIXME SetLastError */
348 sp
= HeapAlloc(GetProcessHeap(), 0, len
);
349 if (!sp
) return FALSE
;
350 WideCharToMultiByte(CP_ACP
,0, pcs
->search_path
, -1, sp
, len
, NULL
, NULL
);
352 if ((hFile
= FindExecutableImage(name
, sp
, loaded_name
)) == NULL
)
356 else if (name
) strcpy(loaded_name
, name
);
357 else if (dbghelp_options
& SYMOPT_DEFERRED_LOADS
)
358 FIXME("Trouble ahead (no module name passed in deferred mode)\n");
359 if (!(module
= module_find_by_name(pcs
, loaded_name
, DMT_PE
)) &&
360 (hMap
= CreateFileMappingA(hFile
, NULL
, PAGE_READONLY
, 0, 0, NULL
)) != NULL
)
362 if ((mapping
= MapViewOfFile(hMap
, FILE_MAP_READ
, 0, 0, 0)) != NULL
)
364 IMAGE_NT_HEADERS
* nth
= RtlImageNtHeader(mapping
);
368 if (!base
) base
= nth
->OptionalHeader
.ImageBase
;
369 if (!size
) size
= nth
->OptionalHeader
.SizeOfImage
;
371 module
= module_new(pcs
, loaded_name
, DMT_PE
, FALSE
, base
, size
,
372 nth
->FileHeader
.TimeDateStamp
,
373 nth
->OptionalHeader
.CheckSum
);
376 if (dbghelp_options
& SYMOPT_DEFERRED_LOADS
)
377 module
->module
.SymType
= SymDeferred
;
379 pe_load_debug_info(pcs
, module
);
382 UnmapViewOfFile(mapping
);
386 if (opened
) CloseHandle(hFile
);
391 /******************************************************************
395 BOOL
pe_load_nt_header(HANDLE hProc
, DWORD base
, IMAGE_NT_HEADERS
* nth
)
397 IMAGE_DOS_HEADER dos
;
399 return ReadProcessMemory(hProc
, (char*)base
, &dos
, sizeof(dos
), NULL
) &&
400 dos
.e_magic
== IMAGE_DOS_SIGNATURE
&&
401 ReadProcessMemory(hProc
, (char*)(base
+ dos
.e_lfanew
),
402 nth
, sizeof(*nth
), NULL
) &&
403 nth
->Signature
== IMAGE_NT_SIGNATURE
;
406 /******************************************************************
407 * pe_load_module_from_pcs
410 struct module
* pe_load_module_from_pcs(struct process
* pcs
, const char* name
,
411 const char* mod_name
, DWORD base
, DWORD size
)
413 struct module
* module
;
416 if ((module
= module_find_by_name(pcs
, name
, DMT_PE
))) return module
;
417 if (mod_name
) ptr
= mod_name
;
420 for (ptr
= name
+ strlen(name
) - 1; ptr
>= name
; ptr
--)
422 if (*ptr
== '/' || *ptr
== '\\')
429 if (ptr
&& (module
= module_find_by_name(pcs
, ptr
, DMT_PE
))) return module
;
432 if (pcs
->dbg_hdr_addr
)
434 IMAGE_NT_HEADERS nth
;
436 if (pe_load_nt_header(pcs
->handle
, base
, &nth
))
438 if (!size
) size
= nth
.OptionalHeader
.SizeOfImage
;
439 module
= module_new(pcs
, name
, DMT_PE
, FALSE
, base
, size
,
440 nth
.FileHeader
.TimeDateStamp
, nth
.OptionalHeader
.CheckSum
);
443 module
= module_new(pcs
, name
, DMT_PE
, FALSE
, base
, size
, 0 /* FIXME */, 0 /* FIXME */);