framework/native/cmds/bugreport/bugreport.cpp
framework/native/cmds/dumpstate/dumpstate.cpp
framework/native/cmds/dumpstate/utils.c

adb bugreport > bugreport.txt

int main() {//启动dumpstate服务property_set("ctl.start", "dumpstate");//需要多次尝试，直到dumpstate服务启动完成，才能建立socket通信int s;for (int i = 0; i < 20; i++) {s = socket_local_client("dumpstate", ANDROID_SOCKET_NAMESPACE_RESERVED,SOCK_STREAM);if (s >= 0)break;//休眠1s后再次尝试连接sleep(1);}if (s == -1) {printf("Failed to connect to dumpstate service: %s\n", strerror(errno));return 1;}//当3分钟没有任何数据可读，则超时停止读取并退出。//dumpstate服务中不存在大于1分钟的timetout，因而不可预见的超时的情况下留有很大的回旋余地。struct timeval tv;tv.tv_sec = 3 * 60;tv.tv_usec = 0;if (setsockopt(s, SOL_SOCKET, SO_RCVTIMEO, &tv, sizeof(tv)) == -1) {printf("WARNING: Cannot set socket timeout: %s\n", strerror(errno));}while (1) {char buffer[65536];ssize_t bytes_read = TEMP_FAILURE_RETRY(read(s, buffer, sizeof(buffer)));if (bytes_read == 0) {break;} else if (bytes_read == -1) {// EAGAIN意味着timeout，Bugreport读异常终止if (errno == EAGAIN) {errno = ETIMEDOUT;}break;}ssize_t bytes_to_send = bytes_read;ssize_t bytes_written;//不断循环得将读取数据输出到stdoutdo {bytes_written = TEMP_FAILURE_RETRY(write(STDOUT_FILENO,buffer + bytes_read - bytes_to_send, bytes_to_send));if (bytes_written == -1) {return 1; //将数据无法写入stdout}bytes_to_send -= bytes_written;} while (bytes_written != 0 && bytes_to_send > 0);}close(s);return 0;
}

int main(int argc, char *argv[]) {struct sigaction sigact;int do_add_date = 0;int do_vibrate = 1;char* use_outfile = 0;int use_socket = 0;int do_fb = 0;int do_broadcast = 0;if (getuid() != 0) {//兼容性考虑，旧版本支持直接调用dumpstate命令，新版本通过调用/system/bin/bugreport来替代。//当检测到直接调用，则强制执行bugreport命令。return execl("/system/bin/bugreport", "/system/bin/bugreport", NULL);}ALOGI("begin\n");//清空句柄SIGPIPEmemset(&sigact, 0, sizeof(sigact));sigact.sa_handler = sigpipe_handler;sigaction(SIGPIPE, &sigact, NULL);//提高当前进程的优先级，防止被OOM Killer杀死setpriority(PRIO_PROCESS, 0, -20);FILE *oom_adj = fopen("/proc/self/oom_adj", "we");if (oom_adj) {fputs("-17", oom_adj);fclose(oom_adj);}//参数解析int c;while ((c = getopt(argc, argv, "dho:svqzpB")) != -1) {switch (c) {case 'd': do_add_date = 1;       break;case 'o': use_outfile = optarg;  break;case 's': use_socket = 1;        break;case 'v': break;  // compatibility no-opcase 'q': do_vibrate = 0;        break;case 'p': do_fb = 1;             break;case 'B': do_broadcast = 1;      break;case '?': printf("\n");case 'h':usage();exit(1);}}//建立socketif (use_socket) {redirect_to_socket(stdout, "dumpstate");}//打开vibratorFILE *vibrator = 0;if (do_vibrate) {vibrator = fopen("/sys/class/timed_output/vibrator/enable", "we");if (vibrator) {vibrate(vibrator, 150);}}//读取/proc/cmdlineFILE *cmdline = fopen("/proc/cmdline", "re");if (cmdline != NULL) {fgets(cmdline_buf, sizeof(cmdline_buf), cmdline);fclose(cmdline);}//收集虚拟机和native进程的stack traces(需要root权限)dump_traces_path = dump_traces();//获取tombstone文件描述符get_tombstone_fds(tombstone_data);//确保capabilitiesif (prctl(PR_SET_KEEPCAPS, 1) < 0) {ALOGE("prctl(PR_SET_KEEPCAPS) failed: %s\n", strerror(errno));return -1;}//切换到非root用户和组，在切换之前都是处于root权限gid_t groups[] = { AID_LOG, AID_SDCARD_R, AID_SDCARD_RW,AID_MOUNT, AID_INET, AID_NET_BW_STATS };if (setgroups(sizeof(groups)/sizeof(groups[0]), groups) != 0) {ALOGE("Unable to setgroups, aborting: %s\n", strerror(errno));return -1;}if (setgid(AID_SHELL) != 0) {ALOGE("Unable to setgid, aborting: %s\n", strerror(errno));return -1;}if (setuid(AID_SHELL) != 0) {ALOGE("Unable to setuid, aborting: %s\n", strerror(errno));return -1;}struct __user_cap_header_struct capheader;struct __user_cap_data_struct capdata[2];memset(&capheader, 0, sizeof(capheader));memset(&capdata, 0, sizeof(capdata));capheader.version = _LINUX_CAPABILITY_VERSION_3;capheader.pid = 0;capdata[CAP_TO_INDEX(CAP_SYSLOG)].permitted = CAP_TO_MASK(CAP_SYSLOG);capdata[CAP_TO_INDEX(CAP_SYSLOG)].effective = CAP_TO_MASK(CAP_SYSLOG);capdata[0].inheritable = 0;capdata[1].inheritable = 0;if (capset(&capheader, &capdata[0]) < 0) {ALOGE("capset failed: %s\n", strerror(errno));return -1;}//如果需要，则重定向输出char path[PATH_MAX], tmp_path[PATH_MAX];pid_t gzip_pid = -1;if (!use_socket && use_outfile) {strlcpy(path, use_outfile, sizeof(path));if (do_add_date) {char date[80];time_t now = time(NULL);strftime(date, sizeof(date), "-%Y-%m-%d-%H-%M-%S", localtime(&now));strlcat(path, date, sizeof(path));}if (do_fb) {strlcpy(screenshot_path, path, sizeof(screenshot_path));strlcat(screenshot_path, ".png", sizeof(screenshot_path));}strlcat(path, ".txt", sizeof(path));strlcpy(tmp_path, path, sizeof(tmp_path));strlcat(tmp_path, ".tmp", sizeof(tmp_path));redirect_to_file(stdout, tmp_path);}//这里是真正干活的地方 【见小节 2.3】dumpstate();//通过震动提醒已完成所有dump操作if (vibrator) {for (int i = 0; i < 3; i++) {vibrate(vibrator, 75);usleep((75 + 50) * 1000);}fclose(vibrator);}//等待gzip的完成，等进程退出时则会被杀if (gzip_pid > 0) {fclose(stdout);waitpid(gzip_pid, NULL, 0);}//重命名.tmp文件到最终位置if (use_outfile && rename(tmp_path, path)) {fprintf(stderr, "rename(%s, %s): %s\n", tmp_path, path, strerror(errno));}//通过发送广播告知ActivityManager已完成bugreport操作if (do_broadcast && use_outfile && do_fb) {run_command(NULL, 5, "/system/bin/am", "broadcast", "--user", "0","-a", "android.intent.action.BUGREPORT_FINISHED","--es", "android.intent.extra.BUGREPORT", path,"--es", "android.intent.extra.SCREENSHOT", screenshot_path,"--receiver-permission", "android.permission.DUMP", NULL);}ALOGI("done\n");return 0;
}

static void dumpstate() {...property_get("ro.build.display.id", build, "(unknown)");property_get("ro.build.fingerprint", fingerprint, "(unknown)");property_get("ro.build.type", build_type, "(unknown)");property_get("ro.baseband", radio, "(unknown)");property_get("ro.bootloader", bootloader, "(unknown)");property_get("gsm.operator.alpha", network, "(unknown)");strftime(date, sizeof(date), "%Y-%m-%d %H:%M:%S", localtime(&now));//开头信息printf("========================================================\n");printf("== dumpstate: %s\n", date);printf("========================================================\n");printf("\n");printf("Build: %s\n", build);printf("Build fingerprint: '%s'\n", fingerprint);printf("Bootloader: %s\n", bootloader);printf("Radio: %s\n", radio);printf("Network: %s\n", network);printf("Kernel: "); dump_file(NULL, "/proc/version");printf("Command line: %s\n", strtok(cmdline_buf, "\n"));printf("\n");//记录系统运行时长和休眠时长run_command("UPTIME", 10, "uptime", NULL);//输出mmcblk0设备信息dump_files("UPTIME MMC PERF", mmcblk0, skip_not_stat, dump_stat_from_fd);dump_file("MEMORY INFO", "/proc/meminfo");run_command("CPU INFO", 10, "top", "-n", "1", "-d", "1", "-m", "30", "-t", NULL);run_command("PROCRANK", 20, "procrank", NULL);dump_file("VIRTUAL MEMORY STATS", "/proc/vmstat");dump_file("VMALLOC INFO", "/proc/vmallocinfo");dump_file("SLAB INFO", "/proc/slabinfo");dump_file("ZONEINFO", "/proc/zoneinfo");dump_file("PAGETYPEINFO", "/proc/pagetypeinfo");dump_file("BUDDYINFO", "/proc/buddyinfo");dump_file("FRAGMENTATION INFO", "/d/extfrag/unusable_index");dump_file("KERNEL WAKELOCKS", "/proc/wakelocks");dump_file("KERNEL WAKE SOURCES", "/d/wakeup_sources");dump_file("KERNEL CPUFREQ", "/sys/devices/system/cpu/cpu0/cpufreq/stats/time_in_state");dump_file("KERNEL SYNC", "/d/sync");run_command("PROCESSES", 10, "ps", "-P", NULL);run_command("PROCESSES AND THREADS", 10, "ps", "-t", "-p", "-P", NULL);run_command("PROCESSES (SELINUX LABELS)", 10, "ps", "-Z", NULL);run_command("LIBRANK", 10, "librank", NULL);//输出kernel logdo_dmesg();//所有已打开文件run_command("LIST OF OPEN FILES", 10, SU_PATH, "root", "lsof", NULL);//遍历所有进程的show mapfor_each_pid(do_showmap, "SMAPS OF ALL PROCESSES");//显示所有线程的blocked位置for_each_tid(show_wchan, "BLOCKED PROCESS WAIT-CHANNELS");//SYSTEM LOGtimeout = logcat_timeout("main") + logcat_timeout("system") + logcat_timeout("crash");if (timeout < 20000) {timeout = 20000;}run_command("SYSTEM LOG", timeout / 1000, "logcat", "-v", "threadtime", "-d", "*:v", NULL);//EVENT LOGtimeout = logcat_timeout("events");if (timeout < 20000) {timeout = 20000;}run_command("EVENT LOG", timeout / 1000, "logcat", "-b", "events", "-v", "threadtime", "-d", "*:v", NULL);//RADIO LOGtimeout = logcat_timeout("radio");if (timeout < 20000) {timeout = 20000;}run_command("RADIO LOG", timeout / 1000, "logcat", "-b", "radio", "-v", "threadtime", "-d", "*:v", NULL);//Log统计信息run_command("LOG STATISTICS", 10, "logcat", "-b", "all", "-S", NULL);//输出当前虚拟机和native进程的vm tracesif (dump_traces_path != NULL) {dump_file("VM TRACES JUST NOW", dump_traces_path);}//输出上次发生ANR时vm traces，即路径/data/anr/traces.txtstruct stat st;char anr_traces_path[PATH_MAX];property_get("dalvik.vm.stack-trace-file", anr_traces_path, "");if (!anr_traces_path[0]) {printf("*** NO VM TRACES FILE DEFINED (dalvik.vm.stack-trace-file)\n\n");} else {int fd = TEMP_FAILURE_RETRY(open(anr_traces_path,O_RDONLY | O_CLOEXEC | O_NOFOLLOW | O_NONBLOCK));if (fd < 0) {printf("*** NO ANR VM TRACES FILE (%s): %s\n\n", anr_traces_path, strerror(errno));} else {dump_file_from_fd("VM TRACES AT LAST ANR", anr_traces_path, fd);}}//输出慢操作的vm traces，例如/data/anr/slow1.txtif (anr_traces_path[0] != 0) {int tail = strlen(anr_traces_path)-1;while (tail > 0 && anr_traces_path[tail] != '/') {tail--;}int i = 0;while (1) {//例如trace文件为/data/anr/slow1.txtsprintf(anr_traces_path+tail+1, "slow%02d.txt", i);if (stat(anr_traces_path, &st)) {break;}dump_file("VM TRACES WHEN SLOW", anr_traces_path);i++;}}//输出tombstone信息，NUM_TOMBSTONES=10，例如/data/tombstones/tombstone_1int dumped = 0;for (size_t i = 0; i < NUM_TOMBSTONES; i++) {if (tombstone_data[i].fd != -1) {dumped = 1;dump_file_from_fd("TOMBSTONE", tombstone_data[i].name, tombstone_data[i].fd);tombstone_data[i].fd = -1;}}if (!dumped) {printf("*** NO TOMBSTONES to dump in %s\n\n", TOMBSTONE_DIR);}dump_file("NETWORK DEV INFO", "/proc/net/dev");dump_file("QTAGUID NETWORK INTERFACES INFO", "/proc/net/xt_qtaguid/iface_stat_all");dump_file("QTAGUID NETWORK INTERFACES INFO (xt)", "/proc/net/xt_qtaguid/iface_stat_fmt");dump_file("QTAGUID CTRL INFO", "/proc/net/xt_qtaguid/ctrl");dump_file("QTAGUID STATS INFO", "/proc/net/xt_qtaguid/stats");//输出上次的kernel logif (!stat(PSTORE_LAST_KMSG, &st)) {//文件为/sys/fs/pstore/console-ramoopsdump_file("LAST KMSG", PSTORE_LAST_KMSG);} else {//文件为/proc/last_kmsgdump_file("LAST KMSG", "/proc/last_kmsg");}//输出上次 logcat，内核必须设置CONFIG_PSTORE_PMSGrun_command("LAST LOGCAT", 10, "logcat", "-L", "-v", "threadtime","-b", "all", "-d", "*:v", NULL);//wifi驱动/固件 以及ip相关信息run_command("NETWORK INTERFACES", 10, "ip", "link", NULL);run_command("IPv4 ADDRESSES", 10, "ip", "-4", "addr", "show", NULL);run_command("IPv6 ADDRESSES", 10, "ip", "-6", "addr", "show", NULL);run_command("IP RULES", 10, "ip", "rule", "show", NULL);run_command("IP RULES v6", 10, "ip", "-6", "rule", "show", NULL);dump_route_tables();run_command("ARP CACHE", 10, "ip", "-4", "neigh", "show", NULL);run_command("IPv6 ND CACHE", 10, "ip", "-6", "neigh", "show", NULL);run_command("IPTABLES", 10, SU_PATH, "root", "iptables", "-L", "-nvx", NULL);run_command("IP6TABLES", 10, SU_PATH, "root", "ip6tables", "-L", "-nvx", NULL);run_command("IPTABLE NAT", 10, SU_PATH, "root", "iptables", "-t", "nat", "-L", "-nvx", NULL);run_command("IPTABLE RAW", 10, SU_PATH, "root", "iptables", "-t", "raw", "-L", "-nvx", NULL);run_command("IP6TABLE RAW", 10, SU_PATH, "root", "ip6tables", "-t", "raw", "-L", "-nvx", NULL);run_command("WIFI NETWORKS", 20, SU_PATH, "root", "wpa_cli", "IFNAME=wlan0", "list_networks", NULL);//中断向量表dump_file("INTERRUPTS (1)", "/proc/interrupts");run_command("NETWORK DIAGNOSTICS", 10, "dumpsys", "connectivity", "--diag", NULL);//中断向量表(二次输出)dump_file("INTERRUPTS (2)", "/proc/interrupts");//获取properties属性值print_properties();run_command("VOLD DUMP", 10, "vdc", "dump", NULL);run_command("SECURE CONTAINERS", 10, "vdc", "asec", "list", NULL);//可用空间run_command("FILESYSTEMS & FREE SPACE", 10, "df", NULL);run_command("LAST RADIO LOG", 10, "parse_radio_log", "/proc/last_radio_log", NULL);//背光信息printf("------ BACKLIGHTS ------\n");printf("LCD brightness="); dump_file(NULL, "/sys/class/leds/lcd-backlight/brightness");printf("Button brightness="); dump_file(NULL, "/sys/class/leds/button-backlight/brightness");printf("Keyboard brightness="); dump_file(NULL, "/sys/class/leds/keyboard-backlight/brightness");printf("ALS mode="); dump_file(NULL, "/sys/class/leds/lcd-backlight/als");printf("LCD driver registers:\n"); dump_file(NULL, "/sys/class/leds/lcd-backlight/registers");printf("\n");//Binder相关dump_file("BINDER FAILED TRANSACTION LOG", "/sys/kernel/debug/binder/failed_transaction_log");dump_file("BINDER TRANSACTION LOG", "/sys/kernel/debug/binder/transaction_log");dump_file("BINDER TRANSACTIONS", "/sys/kernel/debug/binder/transactions");dump_file("BINDER STATS", "/sys/kernel/debug/binder/stats");dump_file("BINDER STATE", "/sys/kernel/debug/binder/state");printf("========================================================\n");printf("== Board\n");printf("========================================================\n");dumpstate_board(); printf("\n");//输出framework各种服务的dumpsys信息printf("========================================================\n");printf("== Android Framework Services\n");printf("========================================================\n");run_command("DUMPSYS", 60, "dumpsys", NULL); //很耗时则timeout=60sprintf("========================================================\n");printf("== Checkins\n");printf("========================================================\n");run_command("CHECKIN BATTERYSTATS", 30, "dumpsys", "batterystats", "-c", NULL);run_command("CHECKIN MEMINFO", 30, "dumpsys", "meminfo", "--checkin", NULL);run_command("CHECKIN NETSTATS", 30, "dumpsys", "netstats", "--checkin", NULL);run_command("CHECKIN PROCSTATS", 30, "dumpsys", "procstats", "-c", NULL);run_command("CHECKIN USAGESTATS", 30, "dumpsys", "usagestats", "-c", NULL);run_command("CHECKIN PACKAGE", 30, "dumpsys", "package", "--checkin", NULL);//输出当前 运行中activity/service/provider信息printf("========================================================\n");printf("== Running Application Activities\n");printf("========================================================\n");run_command("APP ACTIVITIES", 30, "dumpsys", "activity", "all", NULL);printf("========================================================\n");printf("== Running Application Services\n");printf("========================================================\n");run_command("APP SERVICES", 30, "dumpsys", "activity", "service", "all", NULL);printf("========================================================\n");printf("== Running Application Providers\n");printf("========================================================\n");run_command("APP SERVICES", 30, "dumpsys", "activity", "provider", "all", NULL);printf("========================================================\n");printf("== dumpstate: done\n");printf("========================================================\n");
}

int run_command(const char *title, int timeout_seconds, const char *command, ...) {fflush(stdout);uint64_t start = nanotime();//通过fork创建子进程pid_t pid = fork();if (pid < 0) {printf("*** fork: %s\n", strerror(errno));return pid;}//子进程执行if (pid == 0) {const char *args[1024] = {command};size_t arg;//确保dumpstate结束后能关闭子进程prctl(PR_SET_PDEATHSIG, SIGKILL);struct sigaction sigact;memset(&sigact, 0, sizeof(sigact));sigact.sa_handler = SIG_IGN;//忽略SIGPIPEsigaction(SIGPIPE, &sigact, NULL);va_list ap;va_start(ap, command);if (title) printf("------ %s (%s", title, command);for (arg = 1; arg < sizeof(args) / sizeof(args[0]); ++arg) {args[arg] = va_arg(ap, const char *);if (args[arg] == NULL) break;if (title) printf(" %s", args[arg]);}if (title) printf(") ------\n");fflush(stdout);//执行命令execvp(command, (char**) args);printf("*** exec(%s): %s\n", command, strerror(errno));fflush(stdout);_exit(-1); //进程退出}//父进程执行，主要处理子进程退出int status;bool ret = waitpid_with_timeout(pid, timeout_seconds, &status);uint64_t elapsed = nanotime() - start;if (!ret) {if (errno == ETIMEDOUT) {printf("*** %s: Timed out after %.3fs (killing pid %d)\n", command,(float) elapsed / NANOS_PER_SEC, pid);} else {printf("*** %s: Error after %.4fs (killing pid %d)\n", command,(float) elapsed / NANOS_PER_SEC, pid);}kill(pid, SIGTERM);if (!waitpid_with_timeout(pid, 5, NULL)) {kill(pid, SIGKILL);if (!waitpid_with_timeout(pid, 5, NULL)) {printf("*** %s: Cannot kill %d even with SIGKILL.\n", command, pid);}}return -1;}if (WIFSIGNALED(status)) {printf("*** %s: Killed by signal %d\n", command, WTERMSIG(status));} else if (WIFEXITED(status) && WEXITSTATUS(status) > 0) {printf("*** %s: Exit code %d\n", command, WEXITSTATUS(status));}if (title) printf("[%s: %.3fs elapsed]\n\n", command, (float)elapsed / NANOS_PER_SEC);return status;
}

------ <title> (<command>) ------
[<command>: <执行时长> elapsed]

int dump_file(const char *title, const char *path) {//尝试打开文件int fd = TEMP_FAILURE_RETRY(open(path, O_RDONLY | O_NONBLOCK | O_CLOEXEC));if (fd < 0) {//无法打开文件时，则输出如下信息int err = errno;if (title) printf("------ %s (%s) ------\n", title, path);printf("*** %s: %s\n", path, strerror(err));if (title) printf("\n");return -1;}//输出文件内容return _dump_file_from_fd(title, path, fd);
}

static int _dump_file_from_fd(const char *title, const char *path, int fd) {if (title) printf("------ %s (%s", title, path);if (title) {struct stat st;//文件路径为/proc/或者/sys/if (memcmp(path, "/proc/", 6) && memcmp(path, "/sys/", 5) && !fstat(fd, &st)) {char stamp[80];time_t mtime = st.st_mtime; //文件上次修改时间strftime(stamp, sizeof(stamp), "%Y-%m-%d %H:%M:%S", localtime(&mtime));printf(": %s", stamp);}printf(") ------\n");}bool newline = false;fd_set read_set;struct timeval tm;while (1) {FD_ZERO(&read_set);FD_SET(fd, &read_set);//30s无数据可读则超时tm.tv_sec = 30;tm.tv_usec = 0;uint64_t elapsed = nanotime();int ret = TEMP_FAILURE_RETRY(select(fd + 1, &read_set, NULL, NULL, &tm));if (ret == -1) {printf("*** %s: select failed: %s\n", path, strerror(errno));newline = true;break;} else if (ret == 0) {elapsed = nanotime() - elapsed;printf("*** %s: Timed out after %.3fs\n", path,(float) elapsed / NANOS_PER_SEC);newline = true;break;} else {char buffer[65536];// 读取数据ssize_t bytes_read = TEMP_FAILURE_RETRY(read(fd, buffer, sizeof(buffer)));if (bytes_read > 0) {fwrite(buffer, bytes_read, 1, stdout);newline = (buffer[bytes_read-1] == '\n');} else {if (bytes_read == -1) {printf("*** %s: Failed to read from fd: %s", path, strerror(errno));newline = true;}break;}}}close(fd);if (!newline) printf("\n");if (title) printf("\n");return 0;
}

------ <title> (<path>) ------
*** <path>: <err>

------ <title> (<path>: <文件修改时间>) ------

static int dump_stat_from_fd(const char *title __unused, const char *path, int fd) {unsigned long fields[11], read_perf, write_perf;bool z;char *cp, *buffer = NULL;size_t i = 0;FILE *fp = fdopen(fd, "rb"); //打开文件getline(&buffer, &i, fp);fclose(fp);if (!buffer) {return -errno;}i = strlen(buffer);while ((i > 0) && (buffer[i - 1] == '\n')) {buffer[--i] = '\0';}if (!*buffer) {free(buffer);return 0;}z = true;for (cp = buffer, i = 0; i < (sizeof(fields) / sizeof(fields[0])); ++i) {fields[i] = strtol(cp, &cp, 0);if (fields[i] != 0) {z = false;}}if (z) { /* never accessed */free(buffer);return 0;}if (!strncmp(path, mmcblk0, sizeof(mmcblk0) - 1)) {path += sizeof(mmcblk0) - 1;}//例如输出/sys/block/mmcblk0/mmcblk0p13/stat内容printf("%s: %s\n", path, buffer);free(buffer);read_perf = 0;if (fields[3]) {//计算读的性能read_perf = 512 * fields[2] / fields[3];}write_perf = 0;if (fields[7]) {//计算写的性能write_perf = 512 * fields[6] / fields[7];}printf("%s: read: %luKB/s write: %luKB/s\n", path, read_perf, write_perf);//worst_write_perf默认值为20000kb/sif ((write_perf > 1) && (write_perf < worst_write_perf)) {worst_write_perf = write_perf;}return 0;
}

mmcblk0p13/stat:  15  369  100  10  57  7239  5000  250  0  900  2610

const char *dump_traces() {const char* result = NULL;char traces_path[PROPERTY_VALUE_MAX] = "";//traces_path等于/data/anr/traces.txtproperty_get("dalvik.vm.stack-trace-file", traces_path, "");if (!traces_path[0]) return NULL;char anr_traces_path[PATH_MAX];将traces_path文件名拷贝到anr_traces_pathstrlcpy(anr_traces_path, traces_path, sizeof(anr_traces_path));//连接后,anr_traces_path变成了/data/anr/traces.txt.anrstrlcat(anr_traces_path, ".anr", sizeof(anr_traces_path));//文件重命名, 将/data/anr/traces.txt文件重命名为/data/anr/traces.txt.anrif (rename(traces_path, anr_traces_path) && errno != ENOENT) {return NULL; //没有权限重命令}char anr_traces_dir[PATH_MAX];strlcpy(anr_traces_dir, traces_path, sizeof(anr_traces_dir));// *slash为/traces.txtchar *slash = strrchr(anr_traces_dir, '/');if (slash != NULL) {*slash = '\0';//创建文件夹/data/anr/traces.txt/if (!mkdir(anr_traces_dir, 0775)) {chown(anr_traces_dir, AID_SYSTEM, AID_SYSTEM);chmod(anr_traces_dir, 0775);if (selinux_android_restorecon(anr_traces_dir, 0) == -1) {fprintf(stderr, "restorecon failed for %s: %s\n", anr_traces_dir, strerror(errno));}} }//创建一个新的空文件/data/anr/traces.txtint fd = TEMP_FAILURE_RETRY(open(traces_path, O_CREAT | O_WRONLY | O_TRUNC | O_NOFOLLOW | O_CLOEXEC,0666));  /* -rw-rw-rw- */int chmod_ret = fchmod(fd, 0666);DIR *proc = opendir("/proc");//当进程完成dump操作时，通过inotify来通知int ifd = inotify_init();int wfd = inotify_add_watch(ifd, traces_path, IN_CLOSE_WRITE);struct dirent *d;int dalvik_found = 0;while ((d = readdir(proc))) {int pid = atoi(d->d_name);if (pid <= 0) continue;char path[PATH_MAX];char data[PATH_MAX];snprintf(path, sizeof(path), "/proc/%d/exe", pid);ssize_t len = readlink(path, data, sizeof(data) - 1);if (len <= 0) {continue;}data[len] = '\0';if (!strncmp(data, "/system/bin/app_process", strlen("/system/bin/app_process"))) {snprintf(path, sizeof(path), "/proc/%d/cmdline", pid);int cfd = TEMP_FAILURE_RETRY(open(path, O_RDONLY | O_CLOEXEC));len = read(cfd, data, sizeof(data) - 1);close(cfd);if (len <= 0) {continue;}data[len] = '\0';//略过zygote，并不输出它的栈信息if (!strncmp(data, "zygote", strlen("zygote"))) {continue;}++dalvik_found;uint64_t start = nanotime();if (kill(pid, SIGQUIT)) {fprintf(stderr, "kill(%d, SIGQUIT): %s\n", pid, strerror(errno));continue;}//等待来自inotify的可写关闭的通知struct pollfd pfd = { ifd, POLLIN, 0 };int ret = poll(&pfd, 1, 5000);  /* 5s超时*/if (ret < 0) {fprintf(stderr, "poll: %s\n", strerror(errno));} else if (ret == 0) {fprintf(stderr, "warning: timed out dumping pid %d\n", pid);} else {struct inotify_event ie;read(ifd, &ie, sizeof(ie));}if (lseek(fd, 0, SEEK_END) < 0) {fprintf(stderr, "lseek: %s\n", strerror(errno));} else {dprintf(fd, "[dump dalvik stack %d: %.3fs elapsed]\n",pid, (float)(nanotime() - start) / NANOS_PER_SEC);}} else if (should_dump_native_traces(data)) {//native进程traceif (lseek(fd, 0, SEEK_END) < 0) {fprintf(stderr, "lseek: %s\n", strerror(errno));} else {static uint16_t timeout_failures = 0;uint64_t start = nanotime();/* If 3 backtrace dumps fail in a row, consider debuggerd dead. */if (timeout_failures == 3) {dprintf(fd, "too many stack dump failures, skipping...\n");// 超时时长为20s} else if (dump_backtrace_to_file_timeout(pid, fd, 20) == -1) {dprintf(fd, "dumping failed, likely due to a timeout\n");timeout_failures++;} else {timeout_failures = 0;}dprintf(fd, "[dump native stack %d: %.3fs elapsed]\n",pid, (float)(nanotime() - start) / NANOS_PER_SEC);}}}static char dump_traces_path[PATH_MAX];//将/data/anr/tracex.txt字节拷贝到dump_traces_pathstrlcpy(dump_traces_path, traces_path, sizeof(dump_traces_path));//此时dump_traces_path就变成了/data/anr/tracex.txt.bugreportstrlcat(dump_traces_path, ".bugreport", sizeof(dump_traces_path));if (rename(traces_path, dump_traces_path)) {goto error_close_ifd;}result = dump_traces_path;//再将/data/anr/traces.txt.anr 重命名回到/data/anr/traces.txtrename(anr_traces_path, traces_path);...return result;
}

void do_dmesg() {printf("------ KERNEL LOG (dmesg) ------\n");//获取kernel buffer的大小int size = klogctl(KLOG_SIZE_BUFFER, NULL, 0);if (size <= 0) {printf("Unexpected klogctl return value: %d\n\n", size);return;}char *buf = (char *) malloc(size + 1);if (buf == NULL) {printf("memory allocation failed\n\n");return;}//获取kernel logint retval = klogctl(KLOG_READ_ALL, buf, size);if (retval < 0) {printf("klogctl failure\n\n");free(buf);return;}buf[retval] = '\0';printf("%s\n\n", buf);free(buf);return;
}