2 * File pe_module.c - handle PE module information
4 * Copyright (C) 1996, Eric Youngdale.
5 * Copyright (C) 1999-2000, Ulrich Weigand.
6 * Copyright (C) 2004-2007, Eric Pouech.
8 * This library is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
13 * This library is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with this library; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
30 #include "dbghelp_private.h"
33 #include "wine/debug.h"
36 WINE_DEFAULT_DEBUG_CHANNEL(dbghelp
);
38 /******************************************************************
41 * look for stabs information in PE header (it's how the mingw compiler provides
42 * its debugging information)
44 static BOOL
pe_load_stabs(const struct process
* pcs
, struct module
* module
,
45 const void* mapping
, IMAGE_NT_HEADERS
* nth
)
47 IMAGE_SECTION_HEADER
* section
;
48 int i
, stabsize
= 0, stabstrsize
= 0;
49 unsigned int stabs
= 0, stabstr
= 0;
52 section
= (IMAGE_SECTION_HEADER
*)
53 ((char*)&nth
->OptionalHeader
+ nth
->FileHeader
.SizeOfOptionalHeader
);
54 for (i
= 0; i
< nth
->FileHeader
.NumberOfSections
; i
++, section
++)
56 if (!strcasecmp((const char*)section
->Name
, ".stab"))
58 stabs
= section
->VirtualAddress
;
59 stabsize
= section
->SizeOfRawData
;
61 else if (!strncasecmp((const char*)section
->Name
, ".stabstr", 8))
63 stabstr
= section
->VirtualAddress
;
64 stabstrsize
= section
->SizeOfRawData
;
68 if (stabstrsize
&& stabsize
)
70 ret
= stabs_parse(module
,
71 module
->module
.BaseOfImage
- nth
->OptionalHeader
.ImageBase
,
72 RtlImageRvaToVa(nth
, (void*)mapping
, stabs
, NULL
),
74 RtlImageRvaToVa(nth
, (void*)mapping
, stabstr
, NULL
),
80 static BOOL CALLBACK
dbg_match(char* file
, void* user
)
82 /* accept first file */
86 /******************************************************************
91 static BOOL
pe_load_dbg_file(const struct process
* pcs
, struct module
* module
,
92 const char* dbg_name
, DWORD timestamp
)
95 HANDLE hFile
= INVALID_HANDLE_VALUE
, hMap
= 0;
96 const BYTE
* dbg_mapping
= NULL
;
97 const IMAGE_SEPARATE_DEBUG_HEADER
* hdr
;
98 const IMAGE_DEBUG_DIRECTORY
* dbg
;
101 WINE_TRACE("Processing DBG file %s\n", dbg_name
);
103 if (SymFindFileInPath(pcs
->handle
, NULL
, dbg_name
, NULL
, 0, 0, 0, tmp
, dbg_match
, NULL
) &&
104 (hFile
= CreateFileA(tmp
, GENERIC_READ
, FILE_SHARE_READ
, NULL
,
105 OPEN_EXISTING
, FILE_ATTRIBUTE_NORMAL
, NULL
)) != INVALID_HANDLE_VALUE
&&
106 ((hMap
= CreateFileMappingW(hFile
, NULL
, PAGE_READONLY
, 0, 0, NULL
)) != 0) &&
107 ((dbg_mapping
= MapViewOfFile(hMap
, FILE_MAP_READ
, 0, 0, 0)) != NULL
))
109 hdr
= (const IMAGE_SEPARATE_DEBUG_HEADER
*)dbg_mapping
;
110 if (hdr
->TimeDateStamp
!= timestamp
)
112 WINE_ERR("Warning - %s has incorrect internal timestamp\n",
115 * Well, sometimes this happens to DBG files which ARE REALLY the
116 * right .DBG files but nonetheless this check fails. Anyway,
117 * WINDBG (debugger for Windows by Microsoft) loads debug symbols
118 * which have incorrect timestamps.
121 if (hdr
->Signature
== IMAGE_SEPARATE_DEBUG_SIGNATURE
)
123 /* section headers come immediately after debug header */
124 const IMAGE_SECTION_HEADER
*sectp
=
125 (const IMAGE_SECTION_HEADER
*)(hdr
+ 1);
126 /* and after that and the exported names comes the debug directory */
127 dbg
= (const IMAGE_DEBUG_DIRECTORY
*)
128 (dbg_mapping
+ sizeof(*hdr
) +
129 hdr
->NumberOfSections
* sizeof(IMAGE_SECTION_HEADER
) +
130 hdr
->ExportedNamesSize
);
133 ret
= pe_load_debug_directory(pcs
, module
, dbg_mapping
, sectp
,
134 hdr
->NumberOfSections
, dbg
,
135 hdr
->DebugDirectorySize
/ sizeof(*dbg
));
138 ERR("Wrong signature in .DBG file %s\n", debugstr_a(tmp
));
141 WINE_ERR("-Unable to peruse .DBG file %s (%s)\n", dbg_name
, debugstr_a(tmp
));
143 if (dbg_mapping
) UnmapViewOfFile(dbg_mapping
);
144 if (hMap
) CloseHandle(hMap
);
145 if (hFile
!= NULL
) CloseHandle(hFile
);
149 /******************************************************************
150 * pe_load_msc_debug_info
152 * Process MSC debug information in PE file.
154 static BOOL
pe_load_msc_debug_info(const struct process
* pcs
,
155 struct module
* module
,
156 const void* mapping
, IMAGE_NT_HEADERS
* nth
)
159 const IMAGE_DATA_DIRECTORY
* dir
;
160 const IMAGE_DEBUG_DIRECTORY
*dbg
= NULL
;
163 /* Read in debug directory */
164 dir
= nth
->OptionalHeader
.DataDirectory
+ IMAGE_DIRECTORY_ENTRY_DEBUG
;
165 nDbg
= dir
->Size
/ sizeof(IMAGE_DEBUG_DIRECTORY
);
166 if (!nDbg
) return FALSE
;
168 dbg
= RtlImageRvaToVa(nth
, (void*)mapping
, dir
->VirtualAddress
, NULL
);
170 /* Parse debug directory */
171 if (nth
->FileHeader
.Characteristics
& IMAGE_FILE_DEBUG_STRIPPED
)
173 /* Debug info is stripped to .DBG file */
174 const IMAGE_DEBUG_MISC
* misc
= (const IMAGE_DEBUG_MISC
*)
175 ((const char*)mapping
+ dbg
->PointerToRawData
);
177 if (nDbg
!= 1 || dbg
->Type
!= IMAGE_DEBUG_TYPE_MISC
||
178 misc
->DataType
!= IMAGE_DEBUG_MISC_EXENAME
)
180 WINE_ERR("-Debug info stripped, but no .DBG file in module %s\n",
181 module
->module_name
);
185 ret
= pe_load_dbg_file(pcs
, module
, (const char*)misc
->Data
, nth
->FileHeader
.TimeDateStamp
);
190 const IMAGE_SECTION_HEADER
*sectp
= (const IMAGE_SECTION_HEADER
*)((const char*)&nth
->OptionalHeader
+ nth
->FileHeader
.SizeOfOptionalHeader
);
191 /* Debug info is embedded into PE module */
192 ret
= pe_load_debug_directory(pcs
, module
, mapping
, sectp
,
193 nth
->FileHeader
.NumberOfSections
, dbg
, nDbg
);
199 /***********************************************************************
200 * pe_load_export_debug_info
202 static BOOL
pe_load_export_debug_info(const struct process
* pcs
,
203 struct module
* module
,
204 const void* mapping
, IMAGE_NT_HEADERS
* nth
)
207 const IMAGE_EXPORT_DIRECTORY
* exports
;
208 DWORD base
= module
->module
.BaseOfImage
;
211 if (dbghelp_options
& SYMOPT_NO_PUBLICS
) return TRUE
;
214 /* Add start of DLL (better use the (yet unimplemented) Exe SymTag for this) */
215 /* FIXME: module.ModuleName isn't correctly set yet if it's passed in SymLoadModule */
216 symt_new_public(module
, NULL
, module
->module
.ModuleName
, base
, 1,
217 TRUE
/* FIXME */, TRUE
/* FIXME */);
220 /* Add entry point */
221 symt_new_public(module
, NULL
, "EntryPoint",
222 base
+ nth
->OptionalHeader
.AddressOfEntryPoint
, 1,
225 /* FIXME: we'd better store addresses linked to sections rather than
227 IMAGE_SECTION_HEADER
* section
;
228 /* Add start of sections */
229 section
= (IMAGE_SECTION_HEADER
*)
230 ((char*)&nth
->OptionalHeader
+ nth
->FileHeader
.SizeOfOptionalHeader
);
231 for (i
= 0; i
< nth
->FileHeader
.NumberOfSections
; i
++, section
++)
233 symt_new_public(module
, NULL
, section
->Name
,
234 RtlImageRvaToVa(nth
, (void*)mapping
, section
->VirtualAddress
, NULL
),
235 1, TRUE
/* FIXME */, TRUE
/* FIXME */);
239 /* Add exported functions */
240 if ((exports
= RtlImageDirectoryEntryToData((void*)mapping
, FALSE
,
241 IMAGE_DIRECTORY_ENTRY_EXPORT
, &size
)))
243 const WORD
* ordinals
= NULL
;
244 const DWORD_PTR
* functions
= NULL
;
245 const DWORD
* names
= NULL
;
249 functions
= RtlImageRvaToVa(nth
, (void*)mapping
, exports
->AddressOfFunctions
, NULL
);
250 ordinals
= RtlImageRvaToVa(nth
, (void*)mapping
, exports
->AddressOfNameOrdinals
, NULL
);
251 names
= RtlImageRvaToVa(nth
, (void*)mapping
, exports
->AddressOfNames
, NULL
);
253 for (i
= 0; i
< exports
->NumberOfNames
; i
++)
255 if (!names
[i
]) continue;
256 symt_new_public(module
, NULL
,
257 RtlImageRvaToVa(nth
, (void*)mapping
, names
[i
], NULL
),
258 base
+ functions
[ordinals
[i
]],
259 1, TRUE
/* FIXME */, TRUE
/* FIXME */);
262 for (i
= 0; i
< exports
->NumberOfFunctions
; i
++)
264 if (!functions
[i
]) continue;
265 /* Check if we already added it with a name */
266 for (j
= 0; j
< exports
->NumberOfNames
; j
++)
267 if ((ordinals
[j
] == i
) && names
[j
]) break;
268 if (j
< exports
->NumberOfNames
) continue;
269 snprintf(buffer
, sizeof(buffer
), "%d", i
+ exports
->Base
);
270 symt_new_public(module
, NULL
, buffer
, base
+ (DWORD
)functions
[i
], 1,
271 TRUE
/* FIXME */, TRUE
/* FIXME */);
274 /* no real debug info, only entry points */
275 if (module
->module
.SymType
== SymDeferred
)
276 module
->module
.SymType
= SymExport
;
280 /******************************************************************
284 BOOL
pe_load_debug_info(const struct process
* pcs
, struct module
* module
)
290 IMAGE_NT_HEADERS
* nth
;
292 hFile
= CreateFileW(module
->module
.LoadedImageName
, GENERIC_READ
, FILE_SHARE_READ
,
293 NULL
, OPEN_EXISTING
, FILE_ATTRIBUTE_NORMAL
, NULL
);
294 if (hFile
== INVALID_HANDLE_VALUE
) return ret
;
295 if ((hMap
= CreateFileMappingW(hFile
, NULL
, PAGE_READONLY
, 0, 0, NULL
)) != 0)
297 if ((mapping
= MapViewOfFile(hMap
, FILE_MAP_READ
, 0, 0, 0)) != NULL
)
299 nth
= RtlImageNtHeader(mapping
);
301 if (!(dbghelp_options
& SYMOPT_PUBLICS_ONLY
))
303 ret
= pe_load_stabs(pcs
, module
, mapping
, nth
) ||
304 pe_load_msc_debug_info(pcs
, module
, mapping
, nth
);
305 /* if we still have no debug info (we could only get SymExport at this
306 * point), then do the SymExport except if we have an ELF container,
307 * in which case we'll rely on the export's on the ELF side
310 /* FIXME shouldn't we check that? if (!module_get_debug(pcs, module))l */
311 if (pe_load_export_debug_info(pcs
, module
, mapping
, nth
) && !ret
)
313 UnmapViewOfFile(mapping
);
322 /******************************************************************
326 struct module
* pe_load_module(struct process
* pcs
, const WCHAR
* name
,
327 HANDLE hFile
, DWORD base
, DWORD size
)
329 struct module
* module
= NULL
;
333 WCHAR loaded_name
[MAX_PATH
];
335 loaded_name
[0] = '\0';
340 /* FIXME SetLastError */
344 if ((hFile
= FindExecutableImageExW(name
, pcs
->search_path
, loaded_name
, NULL
, NULL
)) == NULL
)
348 else if (name
) strcpyW(loaded_name
, name
);
349 else if (dbghelp_options
& SYMOPT_DEFERRED_LOADS
)
350 FIXME("Trouble ahead (no module name passed in deferred mode)\n");
351 if (!(module
= module_find_by_name(pcs
, loaded_name
, DMT_PE
)) &&
352 (hMap
= CreateFileMappingW(hFile
, NULL
, PAGE_READONLY
, 0, 0, NULL
)) != NULL
)
354 if ((mapping
= MapViewOfFile(hMap
, FILE_MAP_READ
, 0, 0, 0)) != NULL
)
356 IMAGE_NT_HEADERS
* nth
= RtlImageNtHeader(mapping
);
360 if (!base
) base
= nth
->OptionalHeader
.ImageBase
;
361 if (!size
) size
= nth
->OptionalHeader
.SizeOfImage
;
363 module
= module_new(pcs
, loaded_name
, DMT_PE
, FALSE
, base
, size
,
364 nth
->FileHeader
.TimeDateStamp
,
365 nth
->OptionalHeader
.CheckSum
);
368 if (dbghelp_options
& SYMOPT_DEFERRED_LOADS
)
369 module
->module
.SymType
= SymDeferred
;
371 pe_load_debug_info(pcs
, module
);
374 UnmapViewOfFile(mapping
);
378 if (opened
) CloseHandle(hFile
);
383 /******************************************************************
387 BOOL
pe_load_nt_header(HANDLE hProc
, DWORD base
, IMAGE_NT_HEADERS
* nth
)
389 IMAGE_DOS_HEADER dos
;
391 return ReadProcessMemory(hProc
, (char*)base
, &dos
, sizeof(dos
), NULL
) &&
392 dos
.e_magic
== IMAGE_DOS_SIGNATURE
&&
393 ReadProcessMemory(hProc
, (char*)(base
+ dos
.e_lfanew
),
394 nth
, sizeof(*nth
), NULL
) &&
395 nth
->Signature
== IMAGE_NT_SIGNATURE
;
398 /******************************************************************
399 * pe_load_module_from_pcs
402 struct module
* pe_load_module_from_pcs(struct process
* pcs
, const WCHAR
* name
,
403 const WCHAR
* mod_name
, DWORD base
, DWORD size
)
405 struct module
* module
;
408 if ((module
= module_find_by_name(pcs
, name
, DMT_PE
))) return module
;
409 if (mod_name
) ptr
= mod_name
;
412 for (ptr
= name
+ strlenW(name
) - 1; ptr
>= name
; ptr
--)
414 if (*ptr
== '/' || *ptr
== '\\')
421 if (ptr
&& (module
= module_find_by_name(pcs
, ptr
, DMT_PE
))) return module
;
424 if (pcs
->dbg_hdr_addr
)
426 IMAGE_NT_HEADERS nth
;
428 if (pe_load_nt_header(pcs
->handle
, base
, &nth
))
430 if (!size
) size
= nth
.OptionalHeader
.SizeOfImage
;
431 module
= module_new(pcs
, name
, DMT_PE
, FALSE
, base
, size
,
432 nth
.FileHeader
.TimeDateStamp
,
433 nth
.OptionalHeader
.CheckSum
);
436 module
= module_new(pcs
, name
, DMT_PE
, FALSE
, base
, size
,
437 0 /* FIXME */, 0 /* FIXME */);