110ab2aceSGeorge Karpenkov //===- FuzzerUtilPosix.cpp - Misc utils for Posix. ------------------------===//
210ab2aceSGeorge Karpenkov //
32946cd70SChandler Carruth // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
42946cd70SChandler Carruth // See https://llvm.org/LICENSE.txt for license information.
52946cd70SChandler Carruth // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
610ab2aceSGeorge Karpenkov //
710ab2aceSGeorge Karpenkov //===----------------------------------------------------------------------===//
810ab2aceSGeorge Karpenkov // Misc utils implementation using Posix API.
910ab2aceSGeorge Karpenkov //===----------------------------------------------------------------------===//
10226866e1SDokyung Song #include "FuzzerPlatform.h"
1110ab2aceSGeorge Karpenkov #if LIBFUZZER_POSIX
1210ab2aceSGeorge Karpenkov #include "FuzzerIO.h"
1310ab2aceSGeorge Karpenkov #include "FuzzerInternal.h"
1423482e1dSKostya Serebryany #include "FuzzerTracePC.h"
1510ab2aceSGeorge Karpenkov #include <cassert>
1610ab2aceSGeorge Karpenkov #include <chrono>
1710ab2aceSGeorge Karpenkov #include <cstring>
1810ab2aceSGeorge Karpenkov #include <errno.h>
1910ab2aceSGeorge Karpenkov #include <iomanip>
2010ab2aceSGeorge Karpenkov #include <signal.h>
2110ab2aceSGeorge Karpenkov #include <stdio.h>
228da9479eSKostya Serebryany #include <sys/mman.h>
2310ab2aceSGeorge Karpenkov #include <sys/resource.h>
2410ab2aceSGeorge Karpenkov #include <sys/syscall.h>
2510ab2aceSGeorge Karpenkov #include <sys/time.h>
2610ab2aceSGeorge Karpenkov #include <sys/types.h>
2710ab2aceSGeorge Karpenkov #include <thread>
2810ab2aceSGeorge Karpenkov #include <unistd.h>
2910ab2aceSGeorge Karpenkov
3010ab2aceSGeorge Karpenkov namespace fuzzer {
3110ab2aceSGeorge Karpenkov
AlarmHandler(int,siginfo_t *,void *)3210ab2aceSGeorge Karpenkov static void AlarmHandler(int, siginfo_t *, void *) {
3310ab2aceSGeorge Karpenkov Fuzzer::StaticAlarmCallback();
3410ab2aceSGeorge Karpenkov }
3510ab2aceSGeorge Karpenkov
3623482e1dSKostya Serebryany static void (*upstream_segv_handler)(int, siginfo_t *, void *);
3723482e1dSKostya Serebryany
SegvHandler(int sig,siginfo_t * si,void * ucontext)3823482e1dSKostya Serebryany static void SegvHandler(int sig, siginfo_t *si, void *ucontext) {
398da9479eSKostya Serebryany assert(si->si_signo == SIGSEGV);
4023482e1dSKostya Serebryany if (upstream_segv_handler)
4123482e1dSKostya Serebryany return upstream_segv_handler(sig, si, ucontext);
4223482e1dSKostya Serebryany Fuzzer::StaticCrashSignalCallback();
438da9479eSKostya Serebryany }
448da9479eSKostya Serebryany
CrashHandler(int,siginfo_t *,void *)4510ab2aceSGeorge Karpenkov static void CrashHandler(int, siginfo_t *, void *) {
4610ab2aceSGeorge Karpenkov Fuzzer::StaticCrashSignalCallback();
4710ab2aceSGeorge Karpenkov }
4810ab2aceSGeorge Karpenkov
InterruptHandler(int,siginfo_t *,void *)4910ab2aceSGeorge Karpenkov static void InterruptHandler(int, siginfo_t *, void *) {
5010ab2aceSGeorge Karpenkov Fuzzer::StaticInterruptCallback();
5110ab2aceSGeorge Karpenkov }
5210ab2aceSGeorge Karpenkov
GracefulExitHandler(int,siginfo_t *,void *)53a2ca2dccSKostya Serebryany static void GracefulExitHandler(int, siginfo_t *, void *) {
54a2ca2dccSKostya Serebryany Fuzzer::StaticGracefulExitCallback();
55a2ca2dccSKostya Serebryany }
56a2ca2dccSKostya Serebryany
FileSizeExceedHandler(int,siginfo_t *,void *)5710ab2aceSGeorge Karpenkov static void FileSizeExceedHandler(int, siginfo_t *, void *) {
5810ab2aceSGeorge Karpenkov Fuzzer::StaticFileSizeExceedCallback();
5910ab2aceSGeorge Karpenkov }
6010ab2aceSGeorge Karpenkov
SetSigaction(int signum,void (* callback)(int,siginfo_t *,void *))6110ab2aceSGeorge Karpenkov static void SetSigaction(int signum,
6210ab2aceSGeorge Karpenkov void (*callback)(int, siginfo_t *, void *)) {
6310ab2aceSGeorge Karpenkov struct sigaction sigact = {};
6410ab2aceSGeorge Karpenkov if (sigaction(signum, nullptr, &sigact)) {
6510ab2aceSGeorge Karpenkov Printf("libFuzzer: sigaction failed with %d\n", errno);
6610ab2aceSGeorge Karpenkov exit(1);
6710ab2aceSGeorge Karpenkov }
6810ab2aceSGeorge Karpenkov if (sigact.sa_flags & SA_SIGINFO) {
6923482e1dSKostya Serebryany if (sigact.sa_sigaction) {
7023482e1dSKostya Serebryany if (signum != SIGSEGV)
7110ab2aceSGeorge Karpenkov return;
7223482e1dSKostya Serebryany upstream_segv_handler = sigact.sa_sigaction;
7323482e1dSKostya Serebryany }
7410ab2aceSGeorge Karpenkov } else {
7510ab2aceSGeorge Karpenkov if (sigact.sa_handler != SIG_DFL && sigact.sa_handler != SIG_IGN &&
7610ab2aceSGeorge Karpenkov sigact.sa_handler != SIG_ERR)
7710ab2aceSGeorge Karpenkov return;
7810ab2aceSGeorge Karpenkov }
7910ab2aceSGeorge Karpenkov
8070cbc6dbSSebastian Poeplau struct sigaction new_sigact = {};
8170cbc6dbSSebastian Poeplau // Address sanitizer needs SA_ONSTACK (causing the signal handler to run on a
8270cbc6dbSSebastian Poeplau // dedicated stack) in order to be able to detect stack overflows; keep the
8370cbc6dbSSebastian Poeplau // flag if it's set.
8470cbc6dbSSebastian Poeplau new_sigact.sa_flags = SA_SIGINFO | (sigact.sa_flags & SA_ONSTACK);
8570cbc6dbSSebastian Poeplau new_sigact.sa_sigaction = callback;
8670cbc6dbSSebastian Poeplau if (sigaction(signum, &new_sigact, nullptr)) {
8710ab2aceSGeorge Karpenkov Printf("libFuzzer: sigaction failed with %d\n", errno);
8810ab2aceSGeorge Karpenkov exit(1);
8910ab2aceSGeorge Karpenkov }
9010ab2aceSGeorge Karpenkov }
9110ab2aceSGeorge Karpenkov
924caeb62eSYuanfang Chen // Return true on success, false otherwise.
ExecuteCommand(const Command & Cmd,std::string * CmdOutput)934caeb62eSYuanfang Chen bool ExecuteCommand(const Command &Cmd, std::string *CmdOutput) {
944caeb62eSYuanfang Chen FILE *Pipe = popen(Cmd.toString().c_str(), "r");
954caeb62eSYuanfang Chen if (!Pipe)
964caeb62eSYuanfang Chen return false;
974caeb62eSYuanfang Chen
984caeb62eSYuanfang Chen if (CmdOutput) {
994caeb62eSYuanfang Chen char TmpBuffer[128];
1004caeb62eSYuanfang Chen while (fgets(TmpBuffer, sizeof(TmpBuffer), Pipe))
1014caeb62eSYuanfang Chen CmdOutput->append(TmpBuffer);
1024caeb62eSYuanfang Chen }
1034caeb62eSYuanfang Chen return pclose(Pipe) == 0;
1044caeb62eSYuanfang Chen }
1054caeb62eSYuanfang Chen
SetTimer(int Seconds)10610ab2aceSGeorge Karpenkov void SetTimer(int Seconds) {
10710ab2aceSGeorge Karpenkov struct itimerval T {
10810ab2aceSGeorge Karpenkov {Seconds, 0}, { Seconds, 0 }
10910ab2aceSGeorge Karpenkov };
11010ab2aceSGeorge Karpenkov if (setitimer(ITIMER_REAL, &T, nullptr)) {
11110ab2aceSGeorge Karpenkov Printf("libFuzzer: setitimer failed with %d\n", errno);
11210ab2aceSGeorge Karpenkov exit(1);
11310ab2aceSGeorge Karpenkov }
11410ab2aceSGeorge Karpenkov SetSigaction(SIGALRM, AlarmHandler);
11510ab2aceSGeorge Karpenkov }
11610ab2aceSGeorge Karpenkov
SetSignalHandler(const FuzzingOptions & Options)11710ab2aceSGeorge Karpenkov void SetSignalHandler(const FuzzingOptions& Options) {
11823bee0b0SJonathan Metzman // setitimer is not implemented in emscripten.
1199df7ee34SIlya Leoshkevich if (Options.HandleAlrm && Options.UnitTimeoutSec > 0 && !LIBFUZZER_EMSCRIPTEN)
12010ab2aceSGeorge Karpenkov SetTimer(Options.UnitTimeoutSec / 2 + 1);
12110ab2aceSGeorge Karpenkov if (Options.HandleInt)
12210ab2aceSGeorge Karpenkov SetSigaction(SIGINT, InterruptHandler);
12310ab2aceSGeorge Karpenkov if (Options.HandleTerm)
12410ab2aceSGeorge Karpenkov SetSigaction(SIGTERM, InterruptHandler);
12510ab2aceSGeorge Karpenkov if (Options.HandleSegv)
1268da9479eSKostya Serebryany SetSigaction(SIGSEGV, SegvHandler);
12710ab2aceSGeorge Karpenkov if (Options.HandleBus)
12810ab2aceSGeorge Karpenkov SetSigaction(SIGBUS, CrashHandler);
12910ab2aceSGeorge Karpenkov if (Options.HandleAbrt)
13010ab2aceSGeorge Karpenkov SetSigaction(SIGABRT, CrashHandler);
13110ab2aceSGeorge Karpenkov if (Options.HandleIll)
13210ab2aceSGeorge Karpenkov SetSigaction(SIGILL, CrashHandler);
13310ab2aceSGeorge Karpenkov if (Options.HandleFpe)
13410ab2aceSGeorge Karpenkov SetSigaction(SIGFPE, CrashHandler);
13510ab2aceSGeorge Karpenkov if (Options.HandleXfsz)
13610ab2aceSGeorge Karpenkov SetSigaction(SIGXFSZ, FileSizeExceedHandler);
137a2ca2dccSKostya Serebryany if (Options.HandleUsr1)
138a2ca2dccSKostya Serebryany SetSigaction(SIGUSR1, GracefulExitHandler);
139a2ca2dccSKostya Serebryany if (Options.HandleUsr2)
140a2ca2dccSKostya Serebryany SetSigaction(SIGUSR2, GracefulExitHandler);
14110ab2aceSGeorge Karpenkov }
14210ab2aceSGeorge Karpenkov
SleepSeconds(int Seconds)14310ab2aceSGeorge Karpenkov void SleepSeconds(int Seconds) {
14410ab2aceSGeorge Karpenkov sleep(Seconds); // Use C API to avoid coverage from instrumented libc++.
14510ab2aceSGeorge Karpenkov }
14610ab2aceSGeorge Karpenkov
GetPid()14710ab2aceSGeorge Karpenkov unsigned long GetPid() { return (unsigned long)getpid(); }
14810ab2aceSGeorge Karpenkov
GetPeakRSSMb()14910ab2aceSGeorge Karpenkov size_t GetPeakRSSMb() {
15010ab2aceSGeorge Karpenkov struct rusage usage;
15110ab2aceSGeorge Karpenkov if (getrusage(RUSAGE_SELF, &usage))
15210ab2aceSGeorge Karpenkov return 0;
1539802089eSVitaly Buka if (LIBFUZZER_LINUX || LIBFUZZER_FREEBSD || LIBFUZZER_NETBSD ||
15453065c54SDavid Carlier LIBFUZZER_EMSCRIPTEN) {
15510ab2aceSGeorge Karpenkov // ru_maxrss is in KiB
15610ab2aceSGeorge Karpenkov return usage.ru_maxrss >> 10;
15710ab2aceSGeorge Karpenkov } else if (LIBFUZZER_APPLE) {
15810ab2aceSGeorge Karpenkov // ru_maxrss is in bytes
15910ab2aceSGeorge Karpenkov return usage.ru_maxrss >> 20;
16010ab2aceSGeorge Karpenkov }
16110ab2aceSGeorge Karpenkov assert(0 && "GetPeakRSSMb() is not implemented for your platform");
16210ab2aceSGeorge Karpenkov return 0;
16310ab2aceSGeorge Karpenkov }
16410ab2aceSGeorge Karpenkov
OpenProcessPipe(const char * Command,const char * Mode)16510ab2aceSGeorge Karpenkov FILE *OpenProcessPipe(const char *Command, const char *Mode) {
16610ab2aceSGeorge Karpenkov return popen(Command, Mode);
16710ab2aceSGeorge Karpenkov }
16810ab2aceSGeorge Karpenkov
CloseProcessPipe(FILE * F)16985515c7fSYuanfang Chen int CloseProcessPipe(FILE *F) {
17085515c7fSYuanfang Chen return pclose(F);
17185515c7fSYuanfang Chen }
17285515c7fSYuanfang Chen
SearchMemory(const void * Data,size_t DataLen,const void * Patt,size_t PattLen)173*c5d72517SMarco Vanotti const void *SearchMemory(const void *Data, size_t DataLen, const void *Patt,
174*c5d72517SMarco Vanotti size_t PattLen) {
175*c5d72517SMarco Vanotti return memmem(Data, DataLen, Patt, PattLen);
176*c5d72517SMarco Vanotti }
177*c5d72517SMarco Vanotti
DisassembleCmd(const std::string & FileName)17810ab2aceSGeorge Karpenkov std::string DisassembleCmd(const std::string &FileName) {
17910ab2aceSGeorge Karpenkov return "objdump -d " + FileName;
18010ab2aceSGeorge Karpenkov }
18110ab2aceSGeorge Karpenkov
SearchRegexCmd(const std::string & Regex)18210ab2aceSGeorge Karpenkov std::string SearchRegexCmd(const std::string &Regex) {
18310ab2aceSGeorge Karpenkov return "grep '" + Regex + "'";
18410ab2aceSGeorge Karpenkov }
18510ab2aceSGeorge Karpenkov
18610ab2aceSGeorge Karpenkov } // namespace fuzzer
18710ab2aceSGeorge Karpenkov
18810ab2aceSGeorge Karpenkov #endif // LIBFUZZER_POSIX
189