| ============================== |
| Debugging JIT-ed Code With GDB |
| ============================== |
| |
| Background |
| ========== |
| |
| Without special runtime support, debugging dynamically generated code with |
| GDB (as well as most debuggers) can be quite painful. Debuggers generally |
| read debug information from the object file of the code, but for JITed |
| code, there is no such file to look for. |
| |
| In order to communicate the necessary debug info to GDB, an interface for |
| registering JITed code with debuggers has been designed and implemented for |
| GDB and LLVM MCJIT. At a high level, whenever MCJIT generates new machine code, |
| it does so in an in-memory object file that contains the debug information in |
| DWARF format. MCJIT then adds this in-memory object file to a global list of |
| dynamically generated object files and calls a special function |
| (``__jit_debug_register_code``) marked noinline that GDB knows about. When |
| GDB attaches to a process, it puts a breakpoint in this function and loads all |
| of the object files in the global list. When MCJIT calls the registration |
| function, GDB catches the breakpoint signal, loads the new object file from |
| the inferior's memory, and resumes the execution. In this way, GDB can get the |
| necessary debug information. |
| |
| GDB Version |
| =========== |
| |
| In order to debug code JIT-ed by LLVM, you need GDB 7.0 or newer, which is |
| available on most modern distributions of Linux. The version of GDB that |
| Apple ships with Xcode has been frozen at 6.3 for a while. LLDB may be a |
| better option for debugging JIT-ed code on Mac OS X. |
| |
| |
| Debugging MCJIT-ed code |
| ======================= |
| |
| The emerging MCJIT component of LLVM allows full debugging of JIT-ed code with |
| GDB. This is due to MCJIT's ability to use the MC emitter to provide full |
| DWARF debugging information to GDB. |
| |
| Note that lli has to be passed the ``-use-mcjit`` flag to JIT the code with |
| MCJIT instead of the old JIT. |
| |
| Example |
| ------- |
| |
| Consider the following C code (with line numbers added to make the example |
| easier to follow): |
| |
| .. |
| FIXME: |
| Sphinx has the ability to automatically number these lines by adding |
| :linenos: on the line immediately following the `.. code-block:: c`, but |
| it looks like garbage; the line numbers don't even line up with the |
| lines. Is this a Sphinx bug, or is it a CSS problem? |
| |
| .. code-block:: c |
| |
| 1 int compute_factorial(int n) |
| 2 { |
| 3 if (n <= 1) |
| 4 return 1; |
| 5 |
| 6 int f = n; |
| 7 while (--n > 1) |
| 8 f *= n; |
| 9 return f; |
| 10 } |
| 11 |
| 12 |
| 13 int main(int argc, char** argv) |
| 14 { |
| 15 if (argc < 2) |
| 16 return -1; |
| 17 char firstletter = argv[1][0]; |
| 18 int result = compute_factorial(firstletter - '0'); |
| 19 |
| 20 // Returned result is clipped at 255... |
| 21 return result; |
| 22 } |
| |
| Here is a sample command line session that shows how to build and run this |
| code via ``lli`` inside GDB: |
| |
| .. code-block:: bash |
| |
| $ $BINPATH/clang -cc1 -O0 -g -emit-llvm showdebug.c |
| $ gdb --quiet --args $BINPATH/lli -use-mcjit showdebug.ll 5 |
| Reading symbols from $BINPATH/lli...done. |
| (gdb) b showdebug.c:6 |
| No source file named showdebug.c. |
| Make breakpoint pending on future shared library load? (y or [n]) y |
| Breakpoint 1 (showdebug.c:6) pending. |
| (gdb) r |
| Starting program: $BINPATH/lli -use-mcjit showdebug.ll 5 |
| [Thread debugging using libthread_db enabled] |
| |
| Breakpoint 1, compute_factorial (n=5) at showdebug.c:6 |
| 6 int f = n; |
| (gdb) p n |
| $1 = 5 |
| (gdb) p f |
| $2 = 0 |
| (gdb) n |
| 7 while (--n > 1) |
| (gdb) p f |
| $3 = 5 |
| (gdb) b showdebug.c:9 |
| Breakpoint 2 at 0x7ffff7ed404c: file showdebug.c, line 9. |
| (gdb) c |
| Continuing. |
| |
| Breakpoint 2, compute_factorial (n=1) at showdebug.c:9 |
| 9 return f; |
| (gdb) p f |
| $4 = 120 |
| (gdb) bt |
| #0 compute_factorial (n=1) at showdebug.c:9 |
| #1 0x00007ffff7ed40a9 in main (argc=2, argv=0x16677e0) at showdebug.c:18 |
| #2 0x3500000001652748 in ?? () |
| #3 0x00000000016677e0 in ?? () |
| #4 0x0000000000000002 in ?? () |
| #5 0x0000000000d953b3 in llvm::MCJIT::runFunction (this=0x16151f0, F=0x1603020, ArgValues=...) at /home/ebenders_test/llvm_svn_rw/lib/ExecutionEngine/MCJIT/MCJIT.cpp:161 |
| #6 0x0000000000dc8872 in llvm::ExecutionEngine::runFunctionAsMain (this=0x16151f0, Fn=0x1603020, argv=..., envp=0x7fffffffe040) |
| at /home/ebenders_test/llvm_svn_rw/lib/ExecutionEngine/ExecutionEngine.cpp:397 |
| #7 0x000000000059c583 in main (argc=4, argv=0x7fffffffe018, envp=0x7fffffffe040) at /home/ebenders_test/llvm_svn_rw/tools/lli/lli.cpp:324 |
| (gdb) finish |
| Run till exit from #0 compute_factorial (n=1) at showdebug.c:9 |
| 0x00007ffff7ed40a9 in main (argc=2, argv=0x16677e0) at showdebug.c:18 |
| 18 int result = compute_factorial(firstletter - '0'); |
| Value returned is $5 = 120 |
| (gdb) p result |
| $6 = 23406408 |
| (gdb) n |
| 21 return result; |
| (gdb) p result |
| $7 = 120 |
| (gdb) c |
| Continuing. |
| |
| Program exited with code 0170. |
| (gdb) |