ubsan.c (ubsan_expand_null_ifn): Use _v1 suffixed type mismatch builtins...
* ubsan.c (ubsan_expand_null_ifn): Use _v1 suffixed type mismatch
builtins, store max (log2 (align), 0) into uchar field instead of
align into uptr field.
(ubsan_expand_objsize_ifn): Use _v1 suffixed type mismatch builtins,
store uchar 0 field instead of uptr 0 field.
(instrument_nonnull_return): Use _v1 suffixed nonnull return builtin,
instead of passing one address of struct with 2 locations pass
two addresses of structs with 1 location each.
* sanitizer.def (BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH,
BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH_ABORT,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN_ABORT): Removed.
(BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH_V1,
BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH_V1_ABORT,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN_V1,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN_V1_ABORT): New builtins.
* c-c++-common/ubsan/float-cast-overflow-1.c: Drop value keyword
from expected output regexps.
* c-c++-common/ubsan/float-cast-overflow-2.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-3.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-4.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-5.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-6.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-8.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-9.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-10.c: Likewise.
* g++.dg/ubsan/float-cast-overflow-bf.C: Likewise.
* gcc.dg/ubsan/float-cast-overflow-bf.c: Likewise.
* g++.dg/asan/default-options-1.C (__asan_default_options): Add
used attribute.
* g++.dg/asan/asan_test.C: Run with ASAN_OPTIONS=handle_segv=2
in the environment.
* All source files: Merge from upstream 315899.
* asan/Makefile.am (nodist_saninclude_HEADERS): Add
include/sanitizer/tsan_interface.h.
* asan/libtool-version: Bump the libasan SONAME.
* lsan/Makefile.am (sanitizer_lsan_files): Add lsan_common_mac.cc.
(lsan_files): Add lsan_linux.cc, lsan_mac.cc and lsan_malloc_mac.cc.
* sanitizer_common/Makefile.am (sanitizer_common_files): Add
sancov_flags.cc, sanitizer_allocator_checks.cc,
sanitizer_coverage_libcdep_new.cc, sanitizer_errno.cc,
sanitizer_file.cc, sanitizer_mac_libcdep.cc and
sanitizer_stoptheworld_mac.cc. Remove sanitizer_coverage_libcdep.cc
and sanitizer_coverage_mapping_libcdep.cc.
* tsan/Makefile.am (tsan_files): Add tsan_external.cc.
* ubsan/Makefile.am (DEFS): Add -DUBSAN_CAN_USE_CXXABI=1.
(ubsan_files): Add ubsan_init_standalone.cc and
ubsan_signals_standalone.cc.
* ubsan/libtool-version: Bump the libubsan SONAME.
* asan/Makefile.in: Regenerate.
* lsan/Makefile.in: Regenerate.
* sanitizer_common/Makefile.in: Regenerate.
* tsan/Makefile.in: Regenerate.
* ubsan/Makefile.in: Regenerate.
From-SVN: r253887
2017-10-19 13:23:59 +02:00
|
|
|
//===-- asan_fuchsia.cc --------------------------------------------------===//
|
|
|
|
//
|
|
|
|
// This file is distributed under the University of Illinois Open Source
|
|
|
|
// License. See LICENSE.TXT for details.
|
|
|
|
//
|
|
|
|
//===---------------------------------------------------------------------===//
|
|
|
|
//
|
|
|
|
// This file is a part of AddressSanitizer, an address sanity checker.
|
|
|
|
//
|
|
|
|
// Fuchsia-specific details.
|
|
|
|
//===---------------------------------------------------------------------===//
|
|
|
|
|
|
|
|
#include "sanitizer_common/sanitizer_fuchsia.h"
|
|
|
|
#if SANITIZER_FUCHSIA
|
|
|
|
|
|
|
|
#include "asan_interceptors.h"
|
|
|
|
#include "asan_internal.h"
|
|
|
|
#include "asan_stack.h"
|
|
|
|
#include "asan_thread.h"
|
|
|
|
|
|
|
|
#include <limits.h>
|
|
|
|
#include <zircon/sanitizer.h>
|
|
|
|
#include <zircon/syscalls.h>
|
|
|
|
#include <zircon/threads.h>
|
|
|
|
|
|
|
|
namespace __asan {
|
|
|
|
|
|
|
|
// The system already set up the shadow memory for us.
|
2018-10-31 12:14:23 +01:00
|
|
|
// __sanitizer::GetMaxUserVirtualAddress has already been called by
|
ubsan.c (ubsan_expand_null_ifn): Use _v1 suffixed type mismatch builtins...
* ubsan.c (ubsan_expand_null_ifn): Use _v1 suffixed type mismatch
builtins, store max (log2 (align), 0) into uchar field instead of
align into uptr field.
(ubsan_expand_objsize_ifn): Use _v1 suffixed type mismatch builtins,
store uchar 0 field instead of uptr 0 field.
(instrument_nonnull_return): Use _v1 suffixed nonnull return builtin,
instead of passing one address of struct with 2 locations pass
two addresses of structs with 1 location each.
* sanitizer.def (BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH,
BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH_ABORT,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN_ABORT): Removed.
(BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH_V1,
BUILT_IN_UBSAN_HANDLE_TYPE_MISMATCH_V1_ABORT,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN_V1,
BUILT_IN_UBSAN_HANDLE_NONNULL_RETURN_V1_ABORT): New builtins.
* c-c++-common/ubsan/float-cast-overflow-1.c: Drop value keyword
from expected output regexps.
* c-c++-common/ubsan/float-cast-overflow-2.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-3.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-4.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-5.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-6.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-8.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-9.c: Likewise.
* c-c++-common/ubsan/float-cast-overflow-10.c: Likewise.
* g++.dg/ubsan/float-cast-overflow-bf.C: Likewise.
* gcc.dg/ubsan/float-cast-overflow-bf.c: Likewise.
* g++.dg/asan/default-options-1.C (__asan_default_options): Add
used attribute.
* g++.dg/asan/asan_test.C: Run with ASAN_OPTIONS=handle_segv=2
in the environment.
* All source files: Merge from upstream 315899.
* asan/Makefile.am (nodist_saninclude_HEADERS): Add
include/sanitizer/tsan_interface.h.
* asan/libtool-version: Bump the libasan SONAME.
* lsan/Makefile.am (sanitizer_lsan_files): Add lsan_common_mac.cc.
(lsan_files): Add lsan_linux.cc, lsan_mac.cc and lsan_malloc_mac.cc.
* sanitizer_common/Makefile.am (sanitizer_common_files): Add
sancov_flags.cc, sanitizer_allocator_checks.cc,
sanitizer_coverage_libcdep_new.cc, sanitizer_errno.cc,
sanitizer_file.cc, sanitizer_mac_libcdep.cc and
sanitizer_stoptheworld_mac.cc. Remove sanitizer_coverage_libcdep.cc
and sanitizer_coverage_mapping_libcdep.cc.
* tsan/Makefile.am (tsan_files): Add tsan_external.cc.
* ubsan/Makefile.am (DEFS): Add -DUBSAN_CAN_USE_CXXABI=1.
(ubsan_files): Add ubsan_init_standalone.cc and
ubsan_signals_standalone.cc.
* ubsan/libtool-version: Bump the libubsan SONAME.
* asan/Makefile.in: Regenerate.
* lsan/Makefile.in: Regenerate.
* sanitizer_common/Makefile.in: Regenerate.
* tsan/Makefile.in: Regenerate.
* ubsan/Makefile.in: Regenerate.
From-SVN: r253887
2017-10-19 13:23:59 +02:00
|
|
|
// AsanInitInternal->InitializeHighMemEnd (asan_rtl.cc).
|
|
|
|
// Just do some additional sanity checks here.
|
|
|
|
void InitializeShadowMemory() {
|
|
|
|
if (Verbosity()) PrintAddressSpaceLayout();
|
|
|
|
|
|
|
|
// Make sure SHADOW_OFFSET doesn't use __asan_shadow_memory_dynamic_address.
|
|
|
|
__asan_shadow_memory_dynamic_address = kDefaultShadowSentinel;
|
|
|
|
DCHECK(kLowShadowBeg != kDefaultShadowSentinel);
|
|
|
|
__asan_shadow_memory_dynamic_address = kLowShadowBeg;
|
|
|
|
|
|
|
|
CHECK_EQ(kShadowGapEnd, kHighShadowBeg - 1);
|
|
|
|
CHECK_EQ(kHighMemEnd, __sanitizer::ShadowBounds.memory_limit - 1);
|
|
|
|
CHECK_EQ(kHighMemBeg, __sanitizer::ShadowBounds.shadow_limit);
|
|
|
|
CHECK_EQ(kHighShadowBeg, __sanitizer::ShadowBounds.shadow_base);
|
|
|
|
CHECK_EQ(kShadowGapEnd, __sanitizer::ShadowBounds.shadow_base - 1);
|
|
|
|
CHECK_EQ(kLowShadowEnd, 0);
|
|
|
|
CHECK_EQ(kLowShadowBeg, 0);
|
|
|
|
}
|
|
|
|
|
|
|
|
void AsanApplyToGlobals(globals_op_fptr op, const void *needle) {
|
|
|
|
UNIMPLEMENTED();
|
|
|
|
}
|
|
|
|
|
|
|
|
void AsanCheckDynamicRTPrereqs() {}
|
|
|
|
void AsanCheckIncompatibleRT() {}
|
|
|
|
void InitializeAsanInterceptors() {}
|
|
|
|
|
|
|
|
void *AsanDoesNotSupportStaticLinkage() { return nullptr; }
|
|
|
|
|
|
|
|
void InitializePlatformExceptionHandlers() {}
|
|
|
|
void AsanOnDeadlySignal(int signo, void *siginfo, void *context) {
|
|
|
|
UNIMPLEMENTED();
|
|
|
|
}
|
|
|
|
|
|
|
|
// We can use a plain thread_local variable for TSD.
|
|
|
|
static thread_local void *per_thread;
|
|
|
|
|
|
|
|
void *AsanTSDGet() { return per_thread; }
|
|
|
|
|
|
|
|
void AsanTSDSet(void *tsd) { per_thread = tsd; }
|
|
|
|
|
|
|
|
// There's no initialization needed, and the passed-in destructor
|
|
|
|
// will never be called. Instead, our own thread destruction hook
|
|
|
|
// (below) will call AsanThread::TSDDtor directly.
|
|
|
|
void AsanTSDInit(void (*destructor)(void *tsd)) {
|
|
|
|
DCHECK(destructor == &PlatformTSDDtor);
|
|
|
|
}
|
|
|
|
|
|
|
|
void PlatformTSDDtor(void *tsd) { UNREACHABLE(__func__); }
|
|
|
|
|
|
|
|
static inline size_t AsanThreadMmapSize() {
|
|
|
|
return RoundUpTo(sizeof(AsanThread), PAGE_SIZE);
|
|
|
|
}
|
|
|
|
|
|
|
|
struct AsanThread::InitOptions {
|
|
|
|
uptr stack_bottom, stack_size;
|
|
|
|
};
|
|
|
|
|
|
|
|
// Shared setup between thread creation and startup for the initial thread.
|
|
|
|
static AsanThread *CreateAsanThread(StackTrace *stack, u32 parent_tid,
|
|
|
|
uptr user_id, bool detached,
|
|
|
|
const char *name, uptr stack_bottom,
|
|
|
|
uptr stack_size) {
|
|
|
|
// In lieu of AsanThread::Create.
|
|
|
|
AsanThread *thread = (AsanThread *)MmapOrDie(AsanThreadMmapSize(), __func__);
|
|
|
|
|
|
|
|
AsanThreadContext::CreateThreadContextArgs args = {thread, stack};
|
|
|
|
u32 tid =
|
|
|
|
asanThreadRegistry().CreateThread(user_id, detached, parent_tid, &args);
|
|
|
|
asanThreadRegistry().SetThreadName(tid, name);
|
|
|
|
|
|
|
|
// On other systems, AsanThread::Init() is called from the new
|
|
|
|
// thread itself. But on Fuchsia we already know the stack address
|
|
|
|
// range beforehand, so we can do most of the setup right now.
|
|
|
|
const AsanThread::InitOptions options = {stack_bottom, stack_size};
|
|
|
|
thread->Init(&options);
|
|
|
|
|
|
|
|
return thread;
|
|
|
|
}
|
|
|
|
|
|
|
|
// This gets the same arguments passed to Init by CreateAsanThread, above.
|
|
|
|
// We're in the creator thread before the new thread is actually started,
|
|
|
|
// but its stack address range is already known. We don't bother tracking
|
|
|
|
// the static TLS address range because the system itself already uses an
|
|
|
|
// ASan-aware allocator for that.
|
|
|
|
void AsanThread::SetThreadStackAndTls(const AsanThread::InitOptions *options) {
|
|
|
|
DCHECK_NE(GetCurrentThread(), this);
|
|
|
|
DCHECK_NE(GetCurrentThread(), nullptr);
|
|
|
|
CHECK_NE(options->stack_bottom, 0);
|
|
|
|
CHECK_NE(options->stack_size, 0);
|
|
|
|
stack_bottom_ = options->stack_bottom;
|
|
|
|
stack_top_ = options->stack_bottom + options->stack_size;
|
|
|
|
}
|
|
|
|
|
|
|
|
// Called by __asan::AsanInitInternal (asan_rtl.c).
|
|
|
|
AsanThread *CreateMainThread() {
|
|
|
|
thrd_t self = thrd_current();
|
|
|
|
char name[ZX_MAX_NAME_LEN];
|
|
|
|
CHECK_NE(__sanitizer::MainThreadStackBase, 0);
|
|
|
|
CHECK_GT(__sanitizer::MainThreadStackSize, 0);
|
|
|
|
AsanThread *t = CreateAsanThread(
|
|
|
|
nullptr, 0, reinterpret_cast<uptr>(self), true,
|
|
|
|
_zx_object_get_property(thrd_get_zx_handle(self), ZX_PROP_NAME, name,
|
|
|
|
sizeof(name)) == ZX_OK
|
|
|
|
? name
|
|
|
|
: nullptr,
|
|
|
|
__sanitizer::MainThreadStackBase, __sanitizer::MainThreadStackSize);
|
|
|
|
SetCurrentThread(t);
|
|
|
|
return t;
|
|
|
|
}
|
|
|
|
|
|
|
|
// This is called before each thread creation is attempted. So, in
|
|
|
|
// its first call, the calling thread is the initial and sole thread.
|
|
|
|
static void *BeforeThreadCreateHook(uptr user_id, bool detached,
|
|
|
|
const char *name, uptr stack_bottom,
|
|
|
|
uptr stack_size) {
|
|
|
|
EnsureMainThreadIDIsCorrect();
|
|
|
|
// Strict init-order checking is thread-hostile.
|
|
|
|
if (flags()->strict_init_order) StopInitOrderChecking();
|
|
|
|
|
|
|
|
GET_STACK_TRACE_THREAD;
|
|
|
|
u32 parent_tid = GetCurrentTidOrInvalid();
|
|
|
|
|
|
|
|
return CreateAsanThread(&stack, parent_tid, user_id, detached, name,
|
|
|
|
stack_bottom, stack_size);
|
|
|
|
}
|
|
|
|
|
|
|
|
// This is called after creating a new thread (in the creating thread),
|
|
|
|
// with the pointer returned by BeforeThreadCreateHook (above).
|
|
|
|
static void ThreadCreateHook(void *hook, bool aborted) {
|
|
|
|
AsanThread *thread = static_cast<AsanThread *>(hook);
|
|
|
|
if (!aborted) {
|
|
|
|
// The thread was created successfully.
|
|
|
|
// ThreadStartHook is already running in the new thread.
|
|
|
|
} else {
|
|
|
|
// The thread wasn't created after all.
|
|
|
|
// Clean up everything we set up in BeforeThreadCreateHook.
|
|
|
|
asanThreadRegistry().FinishThread(thread->tid());
|
|
|
|
UnmapOrDie(thread, AsanThreadMmapSize());
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// This is called in the newly-created thread before it runs anything else,
|
|
|
|
// with the pointer returned by BeforeThreadCreateHook (above).
|
|
|
|
// cf. asan_interceptors.cc:asan_thread_start
|
|
|
|
static void ThreadStartHook(void *hook, uptr os_id) {
|
|
|
|
AsanThread *thread = static_cast<AsanThread *>(hook);
|
|
|
|
SetCurrentThread(thread);
|
|
|
|
|
|
|
|
// In lieu of AsanThread::ThreadStart.
|
|
|
|
asanThreadRegistry().StartThread(thread->tid(), os_id, /*workerthread*/ false,
|
|
|
|
nullptr);
|
|
|
|
}
|
|
|
|
|
|
|
|
// Each thread runs this just before it exits,
|
|
|
|
// with the pointer returned by BeforeThreadCreateHook (above).
|
|
|
|
// All per-thread destructors have already been called.
|
|
|
|
static void ThreadExitHook(void *hook, uptr os_id) {
|
|
|
|
AsanThread::TSDDtor(per_thread);
|
|
|
|
}
|
|
|
|
|
|
|
|
} // namespace __asan
|
|
|
|
|
|
|
|
// These are declared (in extern "C") by <zircon/sanitizer.h>.
|
|
|
|
// The system runtime will call our definitions directly.
|
|
|
|
|
|
|
|
void *__sanitizer_before_thread_create_hook(thrd_t thread, bool detached,
|
|
|
|
const char *name, void *stack_base,
|
|
|
|
size_t stack_size) {
|
|
|
|
return __asan::BeforeThreadCreateHook(
|
|
|
|
reinterpret_cast<uptr>(thread), detached, name,
|
|
|
|
reinterpret_cast<uptr>(stack_base), stack_size);
|
|
|
|
}
|
|
|
|
|
|
|
|
void __sanitizer_thread_create_hook(void *hook, thrd_t thread, int error) {
|
|
|
|
__asan::ThreadCreateHook(hook, error != thrd_success);
|
|
|
|
}
|
|
|
|
|
|
|
|
void __sanitizer_thread_start_hook(void *hook, thrd_t self) {
|
|
|
|
__asan::ThreadStartHook(hook, reinterpret_cast<uptr>(self));
|
|
|
|
}
|
|
|
|
|
|
|
|
void __sanitizer_thread_exit_hook(void *hook, thrd_t self) {
|
|
|
|
__asan::ThreadExitHook(hook, reinterpret_cast<uptr>(self));
|
|
|
|
}
|
|
|
|
|
|
|
|
#endif // SANITIZER_FUCHSIA
|