KDebug - Revision history

TuxSH at 22:10, 2 June 2020

2020-06-02T20:10:44Z

← Older revision		Revision as of 00:10, 3 June 2020
Line 116:		Line 116:
	\| 0x5C		\| 0x5C
	\| u32		\| u32
	\| Count of ~~KThread~~ object nodes associated with this KDebug object ~~(threads linked to [[KDebugThread]]* instances)~~		\| Count of KDebugThread object nodes associated with this KDebug object
	\|-		\|-
	\| 0x60		\| 0x60
	\| KLinkedListNode*		\| KLinkedListNode*
	\| Pointer to first KLinkedListNode in linked list of ~~KThread~~ objects		\| Pointer to first KLinkedListNode in linked list of KDebugThread objects
	\|-		\|-
	\| 0x64		\| 0x64
	\| KLinkedListNode*		\| KLinkedListNode*
	\| Pointer to last KLinkedListNode in linked list of ~~KThread~~ objects		\| Pointer to last KLinkedListNode in linked list of KDebugThread objects
	\|-		\|-
	\| 0x68		\| 0x68

TuxSH at 22:39, 11 March 2017

2017-03-11T21:39:28Z

← Older revision		Revision as of 00:39, 12 March 2017
Line 157:		Line 157:
	\| 0x82		\| 0x82
	\| u8		\| u8
	\| Indicates that all threads should be unlocked ~~from debug features~~		\| Indicates that all threads should be unlocked
	\|-		\|-
	\| 0x83		\| 0x83
Line 211:		Line 211:
	\| Debug string length		\| Debug string length
	\|}		\|}

	~~"Locked from debug features": this is done by setting bit7 of the thread's scheduling mask, which is checked by debug SVCs afterwards~~

TuxSH at 16:05, 24 December 2016

2016-12-24T15:05:27Z

← Older revision		Revision as of 18:05, 24 December 2016
Line 37:		Line 37:
	\| 0x1C		\| 0x1C
	\| u8		\| u8
	\| Indicates a PROCESS event has been signaled to this object		\| Indicates an ATTACH PROCESS event has been signaled to this object
	\|-		\|-
	\| 0x1D		\| 0x1D
	\| u8		\| u8
	\| Debug string length >> 31		\| Debug string length >> 31, always 0
	\|-		\|-
	\| 0x1E		\| 0x1E
Line 177:		Line 177:
	\| 0x87		\| 0x87
	\| u8		\| u8
	\| Indicates that svcBreak was used and not yet handled by svcContinueDebugEvent		\| Indicates that svcBreak was used and not yet handled by svcContinueDebugEvent, with type != (UN)LOAD_RO
	\|-		\|-
	\| 0x88		\| 0x88

TuxSH at 14:17, 20 December 2016

2016-12-20T13:17:28Z

← Older revision		Revision as of 16:17, 20 December 2016
Line 76:		Line 76:
	\| 0x34		\| 0x34
	\| u32		\| u32
	\| Count of KEventInfo object nodes associated with this KDebug object		\| Count of KEventInfo object nodes to be fetched with svcGetProcessDebugEvent (associated with this KDebug object)
	\|-		\|-
	\| 0x38		\| 0x38
	\| [[KLinkedListNode]]*		\| [[KLinkedListNode]]*
	\| Pointer to first KLinkedListNode in linked list of KEventInfo objects		\| Pointer to first KLinkedListNode in linked list of KEventInfo objects to be fetched with svcGetProcessDebugEvent
	\|-		\|-
	\| 0x3C		\| 0x3C
	\| [[KLinkedListNode]]*		\| [[KLinkedListNode]]*
	\| Pointer to last KLinkedListNode in linked list of KEventInfo objects		\| Pointer to last KLinkedListNode in linked list of KEventInfo objects to be fetched with svcGetProcessDebugEvent
	\|-		\|-
	\| 0x40		\| 0x40

TuxSH at 17:33, 15 December 2016

2016-12-15T16:33:37Z

← Older revision		Revision as of 19:33, 15 December 2016
Line 55:		Line 55:
	\| [[SVC\|DebugEventType]]		\| [[SVC\|DebugEventType]]
	\| Type of the latest debug event		\| Type of the latest debug event
			\|-
			\| 0x24
			\| u32
			\| Unknown, probably unused
	\|-		\|-
	\| 0x28		\| 0x28
Line 63:		Line 67:
	\| u32		\| u32
	\| Debug event flags set by svcContinueDebugEvents		\| Debug event flags set by svcContinueDebugEvents
	Bit0: ~~debugger~~ is ~~attached, bit1~~: report "EXCEPTION~~" events~~ (this flag is bypassed for svc 0xFF), ~~bit2 : ?~~, ~~bit3: ?~~, ~~bit4: ?~~		Bit0: no exception dumps are made if this is set.
			Bit1 and following: report EXCEPTION (this flag is bypassed for svc 0xFF), SCHEDULE, SYSCALL, MAP debug events, respectively.
	\|-		\|-
	\| 0x30		\| 0x30
Line 135:		Line 140:
	\|-		\|-
	\| 0x74		\| 0x74
	\| [[KRecursiveLock]] *		\| [[KRecursiveLock]]
	\| Recursive lock		\| Recursive lock
	\|-		\|-
Line 141:		Line 146:
	\| [[KThread]]*		\| [[KThread]]*
	\| Current KThread- used in svcBreak		\| Current KThread- used in svcBreak
			\|-
			\| 0x80
			\| u8
			\| Cleared when an EXCEPTION debug event was (attempted to be) signaled (i.e. even when bit2 of the debug flag is clear)
			\|-
			\| 0x81
			\| u8
			\| Indicates that an EXCEPTION debug event was signaled
			\|-
			\| 0x82
			\| u8
			\| Indicates that all threads should be unlocked from debug features
	\|-		\|-
	\| 0x83		\| 0x83
Line 152:		Line 169:
	\| 0x85		\| 0x85
	\| u8		\| u8
	\| ~~Set to 1~~ to ~~indicate~~ the KProcess it belongs to has been terminated		\| Indicates that the KProcess instance it belongs to has exited (normally ?)
			\|-
			\| 0x86
			\| u8
			\| Indicates that the KProcess instance it belongs to has been terminated
	\|-		\|-
	\| 0x87		\| 0x87
	\| u8		\| u8
	\| ~~Unknown (bool?)~~		\| Indicates that svcBreak was used and not yet handled by svcContinueDebugEvent
	\|-		\|-
	\| 0x88		\| 0x88
Line 191:		Line 212:
	\|}		\|}

	~~Exception fields are set for~~ the ~~latest notified exception that occured in userland.~~		"Locked from debug features": this is done by setting bit7 of the thread's scheduling mask, which is checked by debug SVCs afterwards

TuxSH at 00:06, 15 December 2016

2016-12-14T23:06:09Z

← Older revision		Revision as of 02:06, 15 December 2016
Line 141:		Line 141:
	\| [[KThread]]*		\| [[KThread]]*
	\| Current KThread- used in svcBreak		\| Current KThread- used in svcBreak
			\|-
			\| 0x83
			\| u8
			\| Indicates that an EXCEPTION debug event different from USER_BREAK was continued, while the process was paused
	\|-		\|-
	\| 0x84		\| 0x84
	\| u8		\| u8
	\| ~~Set to 1 to indicate~~ the ~~KProcess it belongs to exited~~		\| Indicates that a USER_BREAK debug event was continued while the process was paused
	\|-		\|-
	\| 0x85		\| 0x85
	\| u8		\| u8
	\| Set to 1 to indicate the KProcess it belongs to has been terminated		\| Set to 1 to indicate the KProcess it belongs to has been terminated
			\|-
			\| 0x87
			\| u8
			\| Unknown (bool?)
	\|-		\|-
	\| 0x88		\| 0x88

TuxSH at 23:18, 14 December 2016

2016-12-14T22:18:18Z

← Older revision		Revision as of 01:18, 15 December 2016
Line 123:		Line 123:
	\| 0x68		\| 0x68
	\| u32		\| u32
	\| List size; this [[KLinkedList]] of [[KThread]] instances of the parent process.		\| List size; this [[KLinkedList]] of all the [[KThread]] instances of the parent process: the currently running threads followed the others,
	~~It is made of~~ the ~~process's~~ currently running threads, then~~, for each core, of one thread~~ by priority ~~(if it exists), from highest to lowest priority~~		by core then by dynamic priority.
	\|-		\|-
	\| 0x6C		\| 0x6C

TuxSH at 22:48, 14 December 2016

2016-12-14T21:48:45Z

← Older revision		Revision as of 00:48, 15 December 2016
Line 58:		Line 58:
	\| 0x28		\| 0x28
	\| [[KThread]] *		\| [[KThread]] *
	\| Thread ~~exclusively reporting a debug event~~ to this object		\| Thread having exclusive access to this object
	\|-		\|-
	\| 0x2C		\| 0x2C
Line 123:		Line 123:
	\| 0x68		\| 0x68
	\| u32		\| u32
	\| ~~Count~~ of ~~KDebug object nodes~~		\| List size; this [[KLinkedList]] of [[KThread]] instances of the parent process.
			It is made of the process's currently running threads, then, for each core, of one thread by priority (if it exists), from highest to lowest priority
	\|-		\|-
	\| 0x6C		\| 0x6C
	\| KLinkedListNode*		\| KLinkedListNode*
	\| Pointer to first KLinkedListNode in ~~linked~~ list ~~of KDebug objects~~		\| Pointer to first KLinkedListNode in the above list
	\|-		\|-
	\| 0x70		\| 0x70
	\| KLinkedListNode*		\| KLinkedListNode*
	\| Pointer to last KLinkedListNode in ~~linked~~ list ~~of KDebug objects~~		\| Pointer to last KLinkedListNode in the above list
	\|-		\|-
	\| 0x74		\| 0x74

TuxSH at 19:50, 14 December 2016

2016-12-14T18:50:06Z

← Older revision		Revision as of 21:50, 14 December 2016
Line 46:		Line 46:
	\| u8		\| u8
	\| Indicates that a debug event is currently being signaled to this object		\| Indicates that a debug event is currently being signaled to this object
			\|-
			\| 0x1F
			\| u8
			\| Indicates that the parent process is paused (using svcBreakDebugProcess).
			svcContinueDebugEvent will ignore all debug events other than EXIT PROCESS, and some other debug SVCs will return an error.
	\|-		\|-
	\| 0x20		\| 0x20
Line 90:		Line 95:
	\| 0x4C		\| 0x4C
	\| [[KProcess]]*		\| [[KProcess]]*
	\| ~~Process the thread belongs to (virtual address)~~		\| Parent process
	\|-		\|-
	\| 0x50		\| 0x50

TuxSH at 19:21, 14 December 2016

2016-12-14T18:21:52Z

← Older revision		Revision as of 21:21, 14 December 2016
Line 162:		Line 162:
	\| 0x94		\| 0x94
	\| u16		\| u16
	\| ~~Counter, unknown~~		\| Total number of debug events associated with this object awaiting svcContinueDebugEvent
	\|-		\|-
	\| 0x96		\| 0x96
	\| u16		\| u16
	\| ~~Counter, unknown~~		\| Number of EXIT PROCESS debug events associated with this object awaiting svcContinueDebugEvent
	\|-		\|-
	\| 0x98		\| 0x98