From owner-freebsd-current@FreeBSD.ORG  Tue Jun 19 21:42:56 2007
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
X-Original-To: freebsd-current@freebsd.org
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id BCB3E16A421
	for <freebsd-current@freebsd.org>; Tue, 19 Jun 2007 21:42:56 +0000 (UTC)
	(envelope-from michiel@boland.org)
Received: from neerbosch.nijmegen.internl.net (neerbosch.nijmegen.internl.net
	[217.149.193.38])
	by mx1.freebsd.org (Postfix) with ESMTP id 57D4913C469
	for <freebsd-current@freebsd.org>; Tue, 19 Jun 2007 21:42:56 +0000 (UTC)
	(envelope-from michiel@boland.org)
Received: from neerbosch.nijmegen.internl.net by neerbosch.nijmegen.internl.net
	via neerbosch.nijmegen.internl.net [217.149.193.38] with ESMTP for
	<freebsd-current@freebsd.org>
	id l5JLgsXg006470 (8.13.4/1.4); Tue, 19 Jun 2007 23:42:54 +0200 (MEST)
Received: from localhost by neerbosch.nijmegen.internl.net
	via mboland@localhost with ESMTP for <freebsd-current@freebsd.org>
	id l5JLgsGx006466 (8.13.4/2.02); Tue, 19 Jun 2007 23:42:54 +0200 (MEST)
X-Authentication-Warning: neerbosch.nijmegen.internl.net: mboland owned
	process doing -bs
Date: Tue, 19 Jun 2007 23:42:54 +0200 (MEST)
From: Michiel Boland <michiel@boland.org>
To: freebsd-current@freebsd.org
Message-ID: <Pine.GSO.4.64.0706192328380.5197@neerbosch.nijmegen.internl.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Subject: truss(1) gets confused after execve
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jun 2007 21:42:56 -0000

Hi. If i truss the following program

#include <unistd.h>

extern char **environ;

int main(int argc, char **argv)
{
         execve("/usr/bin/false", argv, environ);
         return 1;
}

then everything after the execve() call is reported as garbage.
E.g. something like
[snip]

execve("/usr/bin/false",<missing argument>,<missing argument>)
execve("/usr/bin/false",<missing argument>,<missing argument>) = 0 (0x0)
-- UNKNOWN SYSCALL -6040 --
(null)(0x0,0x7fffffffe880,0x0,0x0,0x0)           = 198 (0xc6)
-- UNKNOWN SYSCALL 5394432 --
(null)(0xc5,0x0,0x2a0,0x3,0x1000)                = 73 (0x49)
-- UNKNOWN SYSCALL 5394432 --

etc.

Something looks not quite right here.
This is -CURRENT on amd64 if that matters.

Also, truss on amd64 appears to coredump if the above program is compiled 
with -m32. Probably because it gets the size of the argv and envp 
arguments wrong.

Anyone looking into this yet? I could not find any relevant PRs with the 
word truss in the title.

Cheers
Michiel