[PATCHv6,3/4] gdb: allow 'until' to work in outermost frame
Checks
| Context |
Check |
Description |
| linaro-tcwg-bot/tcwg_gdb_build--master-aarch64 |
success
|
Build passed
|
| linaro-tcwg-bot/tcwg_gdb_build--master-arm |
success
|
Build passed
|
| linaro-tcwg-bot/tcwg_gdb_check--master-arm |
fail
|
Test failed
|
| linaro-tcwg-bot/tcwg_gdb_check--master-aarch64 |
success
|
Test passed
|
Commit Message
The 'until' command with an argument, e.g. 'until *ADDRESS', is
implemented by the until_break_command in breakpoint.c.
The most important thing this function does is convert the location
argument '*ADDRESS' in my example, into a vector of symtab_and_line
objects. Each of these symtab_and_line objects is then used to create
a temporary bp_until breakpoint.
The other thing that until_break_command does is create a breakpoint
in the caller frame. This breakpoint is there to ensure the inferior
stops upon exiting the frame in which the 'until' command was issued,
if the until breakpoint was not hit.
When compiling an assembler file into a static test program, if I use
'starti' to stop the inferior within the outermost frame, and then try
to use 'until *ADDRESS' I see the following error:
(gdb) starti
Starting program: /tmp/hello
Program stopped.
0x0000000000401000 in _start ()
(gdb) bt
#0 0x0000000000401000 in _start ()
(gdb) until *0x0000000000401015
Warning:
Cannot insert breakpoint 0.
Cannot access memory at address 0x1
Command aborted.
(gdb)
The problem here is the breakpoint that 'until' tries to create in the
caller frame. Though the 'bt' in the above example indicates that
there is only a single frame, the outermost frame, this is only
because GDB has specific code in get_prev_frame to stop the backtrace
at the outermost frame. If we turn this off and try 'bt' again:
(gdb) set backtrace past-entry on
(gdb) bt
#0 0x0000000000401000 in _start ()
#1 0x0000000000000001 in ?? ()
#2 0x00007fffffffac73 in ?? ()
#3 0x0000000000000000 in ?? ()
(gdb)
What we are seeing here is the garbage values that happen to be in the
registers tricking GDB into thinking there are frames before _start.
GDB's code to handle this is in get_prev_frame, where we call
inside_entry_func. This checks if a frame is one of the two possible
entry frames, the inferior entry frame or the executable entry frame.
See the previous commit for more details. The important thing is that
the inferior entry frame is the absolute outer frame, the very first
frame that the inferior executed when starting, while the executable
entry frame is just the first frame within the main executable.
There are a number of user configurable filters in get_prev_frame, the
backtrace past-main filter, the backtrace frame limit filter, and the
backtrace past-entry filter that we are discussing here.
When creating the caller frame breakpoint, the 'until' command doesn't
use get_prev_frame, it uses get_prev_frame_always. This is so that
the user configurable filters don't prevent the caller frame
breakpoint from being created. But this means that when creating the
breakpoint, we skip the entry frame check. As a result, the 'until'
command will try to place a breakpoint in the bogus frame #1 shown
above. As the frame is at address 0x1, which is non-writable, we see
an error when trying to insert the breakpoint.
In this commit I propose that we split the inside_entry_func handling
in to two parts. In get_prev_frame we will retain the check for the
executable entry frame. In theory it is possible that there are
frames between the executable entry frame and the inferior entry
frame. These are the frames the 'backtrace past-entry' can hide or
reveal (if the frames can be discovered).
The check for the inferior entry frame I propose moving into
get_prev_frame_always. I think this is a better place for it because
any frames before the inferior entry frame are almost certainly
bogus. As such we want to elide those frames even for "inner" use
cases, like the caller frame breakpoint of the 'until' command.
The test for this fix ran into an issue where the frame-id for the
outermost frame would change between the first instruction and later
instructions in the frame. I created bug PR gdb/34245 for this issue.
Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=34245
---
gdb/frame.c | 103 +++++++----
gdb/testsuite/gdb.base/until-in-entry-frame.c | 22 +++
.../gdb.base/until-in-entry-frame.exp | 166 ++++++++++++++++++
3 files changed, 259 insertions(+), 32 deletions(-)
create mode 100644 gdb/testsuite/gdb.base/until-in-entry-frame.c
create mode 100644 gdb/testsuite/gdb.base/until-in-entry-frame.exp
Comments
On 7/10/26 10:24 AM, Andrew Burgess wrote:
> The 'until' command with an argument, e.g. 'until *ADDRESS', is
> implemented by the until_break_command in breakpoint.c.
>
> The most important thing this function does is convert the location
> argument '*ADDRESS' in my example, into a vector of symtab_and_line
> objects. Each of these symtab_and_line objects is then used to create
> a temporary bp_until breakpoint.
>
> The other thing that until_break_command does is create a breakpoint
> in the caller frame. This breakpoint is there to ensure the inferior
> stops upon exiting the frame in which the 'until' command was issued,
> if the until breakpoint was not hit.
>
> When compiling an assembler file into a static test program, if I use
> 'starti' to stop the inferior within the outermost frame, and then try
> to use 'until *ADDRESS' I see the following error:
>
> (gdb) starti
> Starting program: /tmp/hello
>
> Program stopped.
> 0x0000000000401000 in _start ()
> (gdb) bt
> #0 0x0000000000401000 in _start ()
> (gdb) until *0x0000000000401015
> Warning:
> Cannot insert breakpoint 0.
> Cannot access memory at address 0x1
>
> Command aborted.
> (gdb)
>
> The problem here is the breakpoint that 'until' tries to create in the
> caller frame. Though the 'bt' in the above example indicates that
> there is only a single frame, the outermost frame, this is only
> because GDB has specific code in get_prev_frame to stop the backtrace
> at the outermost frame. If we turn this off and try 'bt' again:
>
> (gdb) set backtrace past-entry on
> (gdb) bt
> #0 0x0000000000401000 in _start ()
> #1 0x0000000000000001 in ?? ()
> #2 0x00007fffffffac73 in ?? ()
> #3 0x0000000000000000 in ?? ()
> (gdb)
>
> What we are seeing here is the garbage values that happen to be in the
> registers tricking GDB into thinking there are frames before _start.
>
> GDB's code to handle this is in get_prev_frame, where we call
> inside_entry_func. This checks if a frame is one of the two possible
> entry frames, the inferior entry frame or the executable entry frame.
> See the previous commit for more details. The important thing is that
> the inferior entry frame is the absolute outer frame, the very first
> frame that the inferior executed when starting, while the executable
> entry frame is just the first frame within the main executable.
>
> There are a number of user configurable filters in get_prev_frame, the
> backtrace past-main filter, the backtrace frame limit filter, and the
> backtrace past-entry filter that we are discussing here.
>
> When creating the caller frame breakpoint, the 'until' command doesn't
> use get_prev_frame, it uses get_prev_frame_always. This is so that
> the user configurable filters don't prevent the caller frame
> breakpoint from being created. But this means that when creating the
> breakpoint, we skip the entry frame check. As a result, the 'until'
> command will try to place a breakpoint in the bogus frame #1 shown
> above. As the frame is at address 0x1, which is non-writable, we see
> an error when trying to insert the breakpoint.
>
> In this commit I propose that we split the inside_entry_func handling
> in to two parts. In get_prev_frame we will retain the check for the
> executable entry frame. In theory it is possible that there are
> frames between the executable entry frame and the inferior entry
> frame. These are the frames the 'backtrace past-entry' can hide or
> reveal (if the frames can be discovered).
>
> The check for the inferior entry frame I propose moving into
> get_prev_frame_always. I think this is a better place for it because
> any frames before the inferior entry frame are almost certainly
> bogus. As such we want to elide those frames even for "inner" use
> cases, like the caller frame breakpoint of the 'until' command.
>
> The test for this fix ran into an issue where the frame-id for the
> outermost frame would change between the first instruction and later
> instructions in the frame. I created bug PR gdb/34245 for this issue.
>
> Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=34245
> ---
> gdb/frame.c | 103 +++++++----
> gdb/testsuite/gdb.base/until-in-entry-frame.c | 22 +++
> .../gdb.base/until-in-entry-frame.exp | 166 ++++++++++++++++++
> 3 files changed, 259 insertions(+), 32 deletions(-)
> create mode 100644 gdb/testsuite/gdb.base/until-in-entry-frame.c
> create mode 100644 gdb/testsuite/gdb.base/until-in-entry-frame.exp
>
> diff --git a/gdb/frame.c b/gdb/frame.c
> index 782ca33abd8..a84cca5b81c 100644
> --- a/gdb/frame.c
> +++ b/gdb/frame.c
> @@ -2232,6 +2232,63 @@ frame_register_unwind_location (const frame_info_ptr &initial_this_frame,
> }
> }
>
> +/* When checking if a frame is an entry frame, there are two different
> + entry frames to consider. This enum is used to choose between them. */
> +
> +enum class entry_address_type
> +{
> + /* The executable's entry frame. This is the first frame within the main
> + executable. */
> + executable,
> +
> + /* The inferior's entry frame. This is the first frame within the
> + inferior, this can be outside the main executable, e.g. for a
> + dynamically linked executable, this will be the first frame in the
> + dynamic linker. */
> + inferior,
> +};
> +
> +/* Test whether THIS_FRAME is inside the TYPE process entry point
> + function. */
> +
> +static bool
> +inside_entry_func (const frame_info_ptr &this_frame,
> + entry_address_type type)
> +{
> + const program_space::entry_point_info &ep_info
> + = current_program_space->get_entry_point_info ();
> +
> + CORE_ADDR frame_func_addr;
> + if (!get_frame_func_if_available (this_frame, &frame_func_addr))
> + return false;
> +
> + switch (type)
> + {
> + case entry_address_type::executable:
> + return ep_info.exec_entry_address () == frame_func_addr;
> +
> + case entry_address_type::inferior:
> + return ep_info.inferior_entry_address () == frame_func_addr;
> + }
> +
> + gdb_assert_not_reached ("unknown entry address type: %d", ((int) type));
> +}
Given that this code path allows reading just one of the two entry
address types, it would perhaps be good to by pass
program_spaceget_entry_point_info (which returns both), and just go
fetch the one that is requested. The other one will inevitably be
wasted. Not a big deal if both branches are reasonably fast to fetch,
but still it shouldn't be difficult to fetch just the right one.
> +
> +/* Debug routine to print a NULL frame being returned. */
> +
> +static void
> +frame_debug_got_null_frame (const frame_info_ptr &this_frame,
> + const char *reason)
> +{
> + if (frame_debug)
> + {
> + if (this_frame != NULL)
> + frame_debug_printf ("this_frame=%d -> %s", this_frame->level, reason);
> + else
> + frame_debug_printf ("this_frame=nullptr -> %s", reason);
> + }
> +}
> +
> /* Get the previous raw frame, and check that it is not identical to
> same other frame frame already in the chain. If it is, there is
> most likely a stack cycle, so we discard it, and mark THIS_FRAME as
> @@ -2538,6 +2595,17 @@ get_prev_frame_always_1 (const frame_info_ptr &this_frame)
> frame_info_ptr
> get_prev_frame_always (const frame_info_ptr &this_frame)
> {
> + if (this_frame->level >= 0
> + && get_frame_type (this_frame) == NORMAL_FRAME
> + && !user_set_backtrace_options.backtrace_past_entry
> + && inside_entry_func (this_frame, entry_address_type::inferior))
get_prev_frame_always is called quite often, inside_entry_func is going
to be called quite often (the other parts of the conjunction are often
going to be true), inside_entry_func calls
program_space::get_entry_point_info, which calls
solib_ops::inferior_entry_point_address.
svr4_solib_ops::inferior_entry_point_address is somewhat heavy (ELF
parsing and all). I wonder if the inferior entry point should be
cached, as it's not going to change often.
I put a printf in svr4_solib_ops::inferior_entry_point_address, attached
to gnome-calculator (with debuginfod, so debug info for all the libs)
and ran a backtrace. For 10 frames,
svr4_solib_ops::inferior_entry_point_address was called 242 times.
Perhaps it's premature optimization, but it just feels wrong.
> + {
> + this_frame->prev_p = true;
> + this_frame->stop_reason = UNWIND_OUTERMOST;
> + frame_debug_got_null_frame (this_frame, "inside inferior entry func");
> + return nullptr;
> + }
I notice that this makes get_prev_frame_always modify a persistent
state (stop_reason) of `this_frame` based on a setting that could change
from one call to another (options.backtrace_past_entry). For instance,
what happens to "bt -past-entry" after this runs?
> static bool
> @@ -2689,19 +2742,6 @@ inside_main_func (const frame_info_ptr &this_frame)
> return sym_addr == get_frame_func (this_frame);
> }
>
> -/* Test whether THIS_FRAME is inside the process entry point function. */
> -
> -static bool
> -inside_entry_func (const frame_info_ptr &this_frame)
> -{
> - const program_space::entry_point_info &ep_info
> - = current_program_space->get_entry_point_info ();
> -
> - CORE_ADDR frame_func_addr = get_frame_func (this_frame);
> - return (ep_info.exec_entry_address () == frame_func_addr
> - || ep_info.inferior_entry_address () == frame_func_addr);
> -}
> -
> /* Return a structure containing various interesting information about
> the frame that called THIS_FRAME. Returns NULL if there is either
> no such frame or the frame fails any of a set of target-independent
> @@ -2783,11 +2823,10 @@ get_prev_frame (const frame_info_ptr &this_frame)
> if (this_frame->level >= 0
> && get_frame_type (this_frame) == NORMAL_FRAME
> && !user_set_backtrace_options.backtrace_past_entry
> - && frame_pc.has_value ()
Can you explain the removal of this frame_pc.has_value() line? Probably
fine, but I want to be sure.
Simon
On 7/10/26 1:00 PM, Simon Marchi wrote:
> get_prev_frame_always is called quite often, inside_entry_func is going
> to be called quite often (the other parts of the conjunction are often
> going to be true), inside_entry_func calls
> program_space::get_entry_point_info, which calls
> solib_ops::inferior_entry_point_address.
> svr4_solib_ops::inferior_entry_point_address is somewhat heavy (ELF
> parsing and all). I wonder if the inferior entry point should be
> cached, as it's not going to change often.
>
> I put a printf in svr4_solib_ops::inferior_entry_point_address, attached
> to gnome-calculator (with debuginfod, so debug info for all the libs)
> and ran a backtrace. For 10 frames,
> svr4_solib_ops::inferior_entry_point_address was called 242 times.
>
> Perhaps it's premature optimization, but it just feels wrong.
Ah well... I hadn't read the next patch yet.
Simon
Simon Marchi <simark@simark.ca> writes:
> On 7/10/26 10:24 AM, Andrew Burgess wrote:
>> The 'until' command with an argument, e.g. 'until *ADDRESS', is
>> implemented by the until_break_command in breakpoint.c.
>>
>> The most important thing this function does is convert the location
>> argument '*ADDRESS' in my example, into a vector of symtab_and_line
>> objects. Each of these symtab_and_line objects is then used to create
>> a temporary bp_until breakpoint.
>>
>> The other thing that until_break_command does is create a breakpoint
>> in the caller frame. This breakpoint is there to ensure the inferior
>> stops upon exiting the frame in which the 'until' command was issued,
>> if the until breakpoint was not hit.
>>
>> When compiling an assembler file into a static test program, if I use
>> 'starti' to stop the inferior within the outermost frame, and then try
>> to use 'until *ADDRESS' I see the following error:
>>
>> (gdb) starti
>> Starting program: /tmp/hello
>>
>> Program stopped.
>> 0x0000000000401000 in _start ()
>> (gdb) bt
>> #0 0x0000000000401000 in _start ()
>> (gdb) until *0x0000000000401015
>> Warning:
>> Cannot insert breakpoint 0.
>> Cannot access memory at address 0x1
>>
>> Command aborted.
>> (gdb)
>>
>> The problem here is the breakpoint that 'until' tries to create in the
>> caller frame. Though the 'bt' in the above example indicates that
>> there is only a single frame, the outermost frame, this is only
>> because GDB has specific code in get_prev_frame to stop the backtrace
>> at the outermost frame. If we turn this off and try 'bt' again:
>>
>> (gdb) set backtrace past-entry on
>> (gdb) bt
>> #0 0x0000000000401000 in _start ()
>> #1 0x0000000000000001 in ?? ()
>> #2 0x00007fffffffac73 in ?? ()
>> #3 0x0000000000000000 in ?? ()
>> (gdb)
>>
>> What we are seeing here is the garbage values that happen to be in the
>> registers tricking GDB into thinking there are frames before _start.
>>
>> GDB's code to handle this is in get_prev_frame, where we call
>> inside_entry_func. This checks if a frame is one of the two possible
>> entry frames, the inferior entry frame or the executable entry frame.
>> See the previous commit for more details. The important thing is that
>> the inferior entry frame is the absolute outer frame, the very first
>> frame that the inferior executed when starting, while the executable
>> entry frame is just the first frame within the main executable.
>>
>> There are a number of user configurable filters in get_prev_frame, the
>> backtrace past-main filter, the backtrace frame limit filter, and the
>> backtrace past-entry filter that we are discussing here.
>>
>> When creating the caller frame breakpoint, the 'until' command doesn't
>> use get_prev_frame, it uses get_prev_frame_always. This is so that
>> the user configurable filters don't prevent the caller frame
>> breakpoint from being created. But this means that when creating the
>> breakpoint, we skip the entry frame check. As a result, the 'until'
>> command will try to place a breakpoint in the bogus frame #1 shown
>> above. As the frame is at address 0x1, which is non-writable, we see
>> an error when trying to insert the breakpoint.
>>
>> In this commit I propose that we split the inside_entry_func handling
>> in to two parts. In get_prev_frame we will retain the check for the
>> executable entry frame. In theory it is possible that there are
>> frames between the executable entry frame and the inferior entry
>> frame. These are the frames the 'backtrace past-entry' can hide or
>> reveal (if the frames can be discovered).
>>
>> The check for the inferior entry frame I propose moving into
>> get_prev_frame_always. I think this is a better place for it because
>> any frames before the inferior entry frame are almost certainly
>> bogus. As such we want to elide those frames even for "inner" use
>> cases, like the caller frame breakpoint of the 'until' command.
>>
>> The test for this fix ran into an issue where the frame-id for the
>> outermost frame would change between the first instruction and later
>> instructions in the frame. I created bug PR gdb/34245 for this issue.
>>
>> Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=34245
>> ---
>> gdb/frame.c | 103 +++++++----
>> gdb/testsuite/gdb.base/until-in-entry-frame.c | 22 +++
>> .../gdb.base/until-in-entry-frame.exp | 166 ++++++++++++++++++
>> 3 files changed, 259 insertions(+), 32 deletions(-)
>> create mode 100644 gdb/testsuite/gdb.base/until-in-entry-frame.c
>> create mode 100644 gdb/testsuite/gdb.base/until-in-entry-frame.exp
>>
>> diff --git a/gdb/frame.c b/gdb/frame.c
>> index 782ca33abd8..a84cca5b81c 100644
>> --- a/gdb/frame.c
>> +++ b/gdb/frame.c
>> @@ -2232,6 +2232,63 @@ frame_register_unwind_location (const frame_info_ptr &initial_this_frame,
>> }
>> }
>>
>> +/* When checking if a frame is an entry frame, there are two different
>> + entry frames to consider. This enum is used to choose between them. */
>> +
>> +enum class entry_address_type
>> +{
>> + /* The executable's entry frame. This is the first frame within the main
>> + executable. */
>> + executable,
>> +
>> + /* The inferior's entry frame. This is the first frame within the
>> + inferior, this can be outside the main executable, e.g. for a
>> + dynamically linked executable, this will be the first frame in the
>> + dynamic linker. */
>> + inferior,
>> +};
>> +
>> +/* Test whether THIS_FRAME is inside the TYPE process entry point
>> + function. */
>> +
>> +static bool
>> +inside_entry_func (const frame_info_ptr &this_frame,
>> + entry_address_type type)
>> +{
>> + const program_space::entry_point_info &ep_info
>> + = current_program_space->get_entry_point_info ();
>> +
>> + CORE_ADDR frame_func_addr;
>> + if (!get_frame_func_if_available (this_frame, &frame_func_addr))
>> + return false;
>> +
>> + switch (type)
>> + {
>> + case entry_address_type::executable:
>> + return ep_info.exec_entry_address () == frame_func_addr;
>> +
>> + case entry_address_type::inferior:
>> + return ep_info.inferior_entry_address () == frame_func_addr;
>> + }
>> +
>> + gdb_assert_not_reached ("unknown entry address type: %d", ((int) type));
>> +}
>
> Given that this code path allows reading just one of the two entry
> address types, it would perhaps be good to by pass
> program_spaceget_entry_point_info (which returns both), and just go
> fetch the one that is requested. The other one will inevitably be
> wasted. Not a big deal if both branches are reasonably fast to fetch,
> but still it shouldn't be difficult to fetch just the right one.
The reason I didn't do this is the caching added in the next patch. I
currently cache the whole entry_point_info structure. I could push that
caching down and cache each field of the entry_point_info separately,
then we can fetch each field.
But as it currently stands with this complete series (including the next
patch), we pay a price the first time inside_entry_func is called, but
after that fetching the entry_point_info is pretty cheap. Also, we
always end up calling inside_entry_func twice, once for each entry
address that it can check, so the "price" we pay isn't wasted, it just
means the first call has to prime the cache, then we're good.
>
>> +
>> +/* Debug routine to print a NULL frame being returned. */
>> +
>> +static void
>> +frame_debug_got_null_frame (const frame_info_ptr &this_frame,
>> + const char *reason)
>> +{
>> + if (frame_debug)
>> + {
>> + if (this_frame != NULL)
>> + frame_debug_printf ("this_frame=%d -> %s", this_frame->level, reason);
>> + else
>> + frame_debug_printf ("this_frame=nullptr -> %s", reason);
>> + }
>> +}
>> +
>> /* Get the previous raw frame, and check that it is not identical to
>> same other frame frame already in the chain. If it is, there is
>> most likely a stack cycle, so we discard it, and mark THIS_FRAME as
>> @@ -2538,6 +2595,17 @@ get_prev_frame_always_1 (const frame_info_ptr &this_frame)
>> frame_info_ptr
>> get_prev_frame_always (const frame_info_ptr &this_frame)
>> {
>> + if (this_frame->level >= 0
>> + && get_frame_type (this_frame) == NORMAL_FRAME
>> + && !user_set_backtrace_options.backtrace_past_entry
>> + && inside_entry_func (this_frame, entry_address_type::inferior))
>
> get_prev_frame_always is called quite often, inside_entry_func is going
> to be called quite often (the other parts of the conjunction are often
> going to be true), inside_entry_func calls
> program_space::get_entry_point_info, which calls
> solib_ops::inferior_entry_point_address.
> svr4_solib_ops::inferior_entry_point_address is somewhat heavy (ELF
> parsing and all). I wonder if the inferior entry point should be
> cached, as it's not going to change often.
>
> I put a printf in svr4_solib_ops::inferior_entry_point_address, attached
> to gnome-calculator (with debuginfod, so debug info for all the libs)
> and ran a backtrace. For 10 frames,
> svr4_solib_ops::inferior_entry_point_address was called 242 times.
>
> Perhaps it's premature optimization, but it just feels wrong.
As you spotted, patch #4 adds the caching. I'll add a sentence to the
commit message to make it clear that sub-optimal things in this patch
should be resolved by the next one.
>
>> + {
>> + this_frame->prev_p = true;
>> + this_frame->stop_reason = UNWIND_OUTERMOST;
>> + frame_debug_got_null_frame (this_frame, "inside inferior entry func");
>> + return nullptr;
>> + }
>
> I notice that this makes get_prev_frame_always modify a persistent
> state (stop_reason) of `this_frame` based on a setting that could change
> from one call to another (options.backtrace_past_entry). For instance,
> what happens to "bt -past-entry" after this runs?
I got rid of this and just return NULL, which is what the entry frame
detection in get_prev_frame does, and that works just fine too. I also
extended the test in the previous commit to test 'bt -past-entry', which
continues to pass after this patch has been applied.
>
>> static bool
>> @@ -2689,19 +2742,6 @@ inside_main_func (const frame_info_ptr &this_frame)
>> return sym_addr == get_frame_func (this_frame);
>> }
>>
>> -/* Test whether THIS_FRAME is inside the process entry point function. */
>> -
>> -static bool
>> -inside_entry_func (const frame_info_ptr &this_frame)
>> -{
>> - const program_space::entry_point_info &ep_info
>> - = current_program_space->get_entry_point_info ();
>> -
>> - CORE_ADDR frame_func_addr = get_frame_func (this_frame);
>> - return (ep_info.exec_entry_address () == frame_func_addr
>> - || ep_info.inferior_entry_address () == frame_func_addr);
>> -}
>> -
>> /* Return a structure containing various interesting information about
>> the frame that called THIS_FRAME. Returns NULL if there is either
>> no such frame or the frame fails any of a set of target-independent
>> @@ -2783,11 +2823,10 @@ get_prev_frame (const frame_info_ptr &this_frame)
>> if (this_frame->level >= 0
>> && get_frame_type (this_frame) == NORMAL_FRAME
>> && !user_set_backtrace_options.backtrace_past_entry
>> - && frame_pc.has_value ()
>
> Can you explain the removal of this frame_pc.has_value() line? Probably
> fine, but I want to be sure.
It seemed redundant given that `inside_entry_func`, which is also called
by this `if` check uses `get_frame_func_if_available`, which will cover
the same logic. But looking again, I think there are multiple instances
of this `frame_pc.has_value()` that could be removed, so this is
probably better done in a separate commit. As such, I've added this
check back in for now.
I'm just re-running the tests, but will post a v7 shortly.
Thanks,
Andrew
@@ -2232,6 +2232,63 @@ frame_register_unwind_location (const frame_info_ptr &initial_this_frame,
}
}
+/* When checking if a frame is an entry frame, there are two different
+ entry frames to consider. This enum is used to choose between them. */
+
+enum class entry_address_type
+{
+ /* The executable's entry frame. This is the first frame within the main
+ executable. */
+ executable,
+
+ /* The inferior's entry frame. This is the first frame within the
+ inferior, this can be outside the main executable, e.g. for a
+ dynamically linked executable, this will be the first frame in the
+ dynamic linker. */
+ inferior,
+};
+
+/* Test whether THIS_FRAME is inside the TYPE process entry point
+ function. */
+
+static bool
+inside_entry_func (const frame_info_ptr &this_frame,
+ entry_address_type type)
+{
+ const program_space::entry_point_info &ep_info
+ = current_program_space->get_entry_point_info ();
+
+ CORE_ADDR frame_func_addr;
+ if (!get_frame_func_if_available (this_frame, &frame_func_addr))
+ return false;
+
+ switch (type)
+ {
+ case entry_address_type::executable:
+ return ep_info.exec_entry_address () == frame_func_addr;
+
+ case entry_address_type::inferior:
+ return ep_info.inferior_entry_address () == frame_func_addr;
+ }
+
+ gdb_assert_not_reached ("unknown entry address type: %d", ((int) type));
+}
+
+/* Debug routine to print a NULL frame being returned. */
+
+static void
+frame_debug_got_null_frame (const frame_info_ptr &this_frame,
+ const char *reason)
+{
+ if (frame_debug)
+ {
+ if (this_frame != NULL)
+ frame_debug_printf ("this_frame=%d -> %s", this_frame->level, reason);
+ else
+ frame_debug_printf ("this_frame=nullptr -> %s", reason);
+ }
+}
+
/* Get the previous raw frame, and check that it is not identical to
same other frame frame already in the chain. If it is, there is
most likely a stack cycle, so we discard it, and mark THIS_FRAME as
@@ -2538,6 +2595,17 @@ get_prev_frame_always_1 (const frame_info_ptr &this_frame)
frame_info_ptr
get_prev_frame_always (const frame_info_ptr &this_frame)
{
+ if (this_frame->level >= 0
+ && get_frame_type (this_frame) == NORMAL_FRAME
+ && !user_set_backtrace_options.backtrace_past_entry
+ && inside_entry_func (this_frame, entry_address_type::inferior))
+ {
+ this_frame->prev_p = true;
+ this_frame->stop_reason = UNWIND_OUTERMOST;
+ frame_debug_got_null_frame (this_frame, "inside inferior entry func");
+ return nullptr;
+ }
+
frame_info_ptr prev_frame = NULL;
try
@@ -2626,21 +2694,6 @@ get_prev_frame_raw (const frame_info_ptr &this_frame)
return frame_info_ptr (prev_frame);
}
-/* Debug routine to print a NULL frame being returned. */
-
-static void
-frame_debug_got_null_frame (const frame_info_ptr &this_frame,
- const char *reason)
-{
- if (frame_debug)
- {
- if (this_frame != NULL)
- frame_debug_printf ("this_frame=%d -> %s", this_frame->level, reason);
- else
- frame_debug_printf ("this_frame=nullptr -> %s", reason);
- }
-}
-
/* Is this (non-sentinel) frame in the "main"() function? */
static bool
@@ -2689,19 +2742,6 @@ inside_main_func (const frame_info_ptr &this_frame)
return sym_addr == get_frame_func (this_frame);
}
-/* Test whether THIS_FRAME is inside the process entry point function. */
-
-static bool
-inside_entry_func (const frame_info_ptr &this_frame)
-{
- const program_space::entry_point_info &ep_info
- = current_program_space->get_entry_point_info ();
-
- CORE_ADDR frame_func_addr = get_frame_func (this_frame);
- return (ep_info.exec_entry_address () == frame_func_addr
- || ep_info.inferior_entry_address () == frame_func_addr);
-}
-
/* Return a structure containing various interesting information about
the frame that called THIS_FRAME. Returns NULL if there is either
no such frame or the frame fails any of a set of target-independent
@@ -2783,11 +2823,10 @@ get_prev_frame (const frame_info_ptr &this_frame)
if (this_frame->level >= 0
&& get_frame_type (this_frame) == NORMAL_FRAME
&& !user_set_backtrace_options.backtrace_past_entry
- && frame_pc.has_value ()
- && inside_entry_func (this_frame))
+ && inside_entry_func (this_frame, entry_address_type::executable))
{
- frame_debug_got_null_frame (this_frame, "inside entry func");
- return NULL;
+ frame_debug_got_null_frame (this_frame, "inside executable entry func");
+ return nullptr;
}
/* Assume that the only way to get a zero PC is through something
new file mode 100644
@@ -0,0 +1,22 @@
+/* This testcase is part of GDB, the GNU debugger.
+
+ Copyright 2026 Free Software Foundation, Inc.
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>. */
+
+int
+main (void)
+{
+ return 0;
+}
new file mode 100644
@@ -0,0 +1,166 @@
+# Copyright 2026 Free Software Foundation, Inc.
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+
+# Check that 'until' in the outermost frame works as expected.
+
+require !use_gdb_stub
+
+standard_testfile
+
+if { [build_executable "failed to build" $testfile $srcfile] } {
+ return
+}
+
+set testfile_static ${testfile}-static
+if { [build_executable "failed to build" $testfile_static $srcfile \
+ { debug additional_flags=-static } ] } {
+ return
+}
+
+# Use 'frame' to get the name of the current function. Returns the
+# name of the current function, or the empty string if the current
+# function name cannot be established.
+proc current_function_name { testname } {
+ set func_name ""
+ gdb_test_multiple "frame" $testname {
+ -re -wrap "#0\\s+(?:$::hex in )?(\[^( \]+) \\(.*" {
+ set func_name $expect_out(1,string)
+ }
+
+ -re -wrap "#0\\s+\[^\r\n\]*\\s+in (\[^( \]+) \\(.*" {
+ set func_name $expect_out(1,string)
+ }
+ }
+
+ return $func_name
+}
+
+# Start the inferior with 'starti', then use 'until' within the
+# outermost frame. This is the real outermost frame, not 'main'.
+#
+# PAST_ENTRY should be 'on' or 'off' and is used in a 'set backtrace
+# past-entry ...' command.
+proc run_test { use_stepi past_entry testfile } {
+ clean_restart $testfile
+
+ if { [gdb_starti_cmd] < 0 } {
+ untested starti
+ return
+ }
+
+ # Consume up to the first prompt after 'starti' command.
+ gdb_test "" "" "starti"
+
+ set func_name [current_function_name \
+ "function name for first function"]
+
+ gdb_test_no_output "set backtrace past-entry $past_entry"
+
+ # On x86-64 GDB does get a valid frame-id for the very first
+ # instruction, but from the second instruction onwards it gets
+ # outer_frame_id. As a result an 'until' setup at the first
+ # instruction doesn't match later on within the same function as
+ # the frame-ids no longer match.
+ #
+ # Try to work around this by issuing a 'stepi' to move to the
+ # second instruction.
+ #
+ # This is only a heuristic though. On different architectures GDB
+ # might have a valid frame-id for multiple instructions within the
+ # outer frame, or might not have outer_frame_id for all
+ # instructions.
+ #
+ # Also, we need to consider that the very first instruction might
+ # be a control flow instruction, so using stepi could send the
+ # inferior to another function. We try to spot this case and
+ # perform an early return if that happens.
+ if { $use_stepi } {
+ gdb_test "stepi"
+ set func_name_after [current_function_name \
+ "function name after stepi"]
+ if { $func_name ne $func_name_after } {
+ unsupported "stepi moved to another function"
+ return
+ }
+ }
+
+ # If the 'until' doesn't trigger then stop in 'main' as a backup.
+ gdb_breakpoint main
+
+ # Find an address to use in the 'until' command.
+ set until_address ""
+ set capture_address false
+ gdb_test_multiple "disassemble" "find address for until" -lbl {
+ -re "\r\n=> $::hex \[^\r\n\]+(?=\r\n)" {
+ set capture_address true
+ exp_continue
+ }
+
+ -re "\r\n\\s+($::hex) \[^\r\n\]+(?=\r\n)" {
+ if { $capture_address } {
+ set until_address $expect_out(1,string)
+ set capture_address false
+ }
+
+ exp_continue
+ }
+
+ -re "\r\n$::gdb_prompt $" {
+ set found_address [expr { $until_address ne "" }]
+ if { !$found_address } {
+ unsupported "$gdb_test_name (no instruction found)"
+ return
+ }
+ pass $gdb_test_name
+ }
+ }
+
+ # Send the 'until' command and then wait for GDB to stop. See the
+ # notes above about the 'stepi' for why we sometimes expect to see
+ # GDB reach 'main' here.
+ send_gdb "until *${until_address}\n"
+ gdb_test_multiple "" "after until" {
+ -re -wrap "Breakpoint $::decimal, (?:\[^\r\n\]+ in )?main \\(\\).*" {
+ kfail "gdb/34245" "$gdb_test_name (skipped until breakpoint)"
+ }
+
+ -re -wrap "\r\n(?:$::hex in )?$func_name \\(\\).*" {
+ pass $gdb_test_name
+ }
+
+ -re -wrap "Warning:\r\nCannot insert breakpoint 0\\.\r\nCannot access memory at address $::hex.*Command aborted\\." {
+ # With PAST_ENTRY 'on', GDB discovers some invalid frames
+ # past the entry frame based on whatever happens to be in
+ # the registers when the entry function is called. These
+ # invalid frames are often non-writable, so GDB will fail
+ # to insert the breakpoint when the inferior resumes.
+ #
+ # We still count this as a pass though; the user should
+ # only turn on 'backtrace past-entry' when they know that
+ # is needed, so failure here is totally expected.
+ gdb_assert { $past_entry eq "on" } "$gdb_test_name (caller breakpoint failed)"
+ }
+ }
+}
+
+foreach_with_prefix past_entry { off on } {
+ foreach_with_prefix use_stepi { true false } {
+ run_test $use_stepi $past_entry $testfile
+
+ with_test_prefix "static" {
+ run_test $use_stepi $past_entry $testfile_static
+ }
+ }
+}