1 //===-- sanitizer_linux_libcdep.cpp ---------------------------------------===// 2 // 3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. 4 // See https://llvm.org/LICENSE.txt for license information. 5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception 6 // 7 //===----------------------------------------------------------------------===// 8 // 9 // This file is shared between AddressSanitizer and ThreadSanitizer 10 // run-time libraries and implements linux-specific functions from 11 // sanitizer_libc.h. 12 //===----------------------------------------------------------------------===// 13 14 #include "sanitizer_platform.h" 15 16 #if SANITIZER_FREEBSD || SANITIZER_LINUX || SANITIZER_NETBSD || \ 17 SANITIZER_SOLARIS 18 19 #include "sanitizer_allocator_internal.h" 20 #include "sanitizer_atomic.h" 21 #include "sanitizer_common.h" 22 #include "sanitizer_file.h" 23 #include "sanitizer_flags.h" 24 #include "sanitizer_freebsd.h" 25 #include "sanitizer_getauxval.h" 26 #include "sanitizer_glibc_version.h" 27 #include "sanitizer_linux.h" 28 #include "sanitizer_placement_new.h" 29 #include "sanitizer_procmaps.h" 30 31 #if SANITIZER_NETBSD 32 #define _RTLD_SOURCE // for __lwp_gettcb_fast() / __lwp_getprivate_fast() 33 #endif 34 35 #include <dlfcn.h> // for dlsym() 36 #include <link.h> 37 #include <pthread.h> 38 #include <signal.h> 39 #include <sys/mman.h> 40 #include <sys/resource.h> 41 #include <syslog.h> 42 43 #if !defined(ElfW) 44 #define ElfW(type) Elf_##type 45 #endif 46 47 #if SANITIZER_FREEBSD 48 #include <pthread_np.h> 49 #include <osreldate.h> 50 #include <sys/sysctl.h> 51 #define pthread_getattr_np pthread_attr_get_np 52 // The MAP_NORESERVE define has been removed in FreeBSD 11.x, and even before 53 // that, it was never implemented. So just define it to zero. 54 #undef MAP_NORESERVE 55 #define MAP_NORESERVE 0 56 #endif 57 58 #if SANITIZER_NETBSD 59 #include <sys/sysctl.h> 60 #include <sys/tls.h> 61 #include <lwp.h> 62 #endif 63 64 #if SANITIZER_SOLARIS 65 #include <stdlib.h> 66 #include <thread.h> 67 #endif 68 69 #if SANITIZER_ANDROID 70 #include <android/api-level.h> 71 #if !defined(CPU_COUNT) && !defined(__aarch64__) 72 #include <dirent.h> 73 #include <fcntl.h> 74 struct __sanitizer::linux_dirent { 75 long d_ino; 76 off_t d_off; 77 unsigned short d_reclen; 78 char d_name[]; 79 }; 80 #endif 81 #endif 82 83 #if !SANITIZER_ANDROID 84 #include <elf.h> 85 #include <unistd.h> 86 #endif 87 88 namespace __sanitizer { 89 90 SANITIZER_WEAK_ATTRIBUTE int 91 real_sigaction(int signum, const void *act, void *oldact); 92 93 int internal_sigaction(int signum, const void *act, void *oldact) { 94 #if !SANITIZER_GO 95 if (&real_sigaction) 96 return real_sigaction(signum, act, oldact); 97 #endif 98 return sigaction(signum, (const struct sigaction *)act, 99 (struct sigaction *)oldact); 100 } 101 102 void GetThreadStackTopAndBottom(bool at_initialization, uptr *stack_top, 103 uptr *stack_bottom) { 104 CHECK(stack_top); 105 CHECK(stack_bottom); 106 if (at_initialization) { 107 // This is the main thread. Libpthread may not be initialized yet. 108 struct rlimit rl; 109 CHECK_EQ(getrlimit(RLIMIT_STACK, &rl), 0); 110 111 // Find the mapping that contains a stack variable. 112 MemoryMappingLayout proc_maps(/*cache_enabled*/true); 113 if (proc_maps.Error()) { 114 *stack_top = *stack_bottom = 0; 115 return; 116 } 117 MemoryMappedSegment segment; 118 uptr prev_end = 0; 119 while (proc_maps.Next(&segment)) { 120 if ((uptr)&rl < segment.end) break; 121 prev_end = segment.end; 122 } 123 CHECK((uptr)&rl >= segment.start && (uptr)&rl < segment.end); 124 125 // Get stacksize from rlimit, but clip it so that it does not overlap 126 // with other mappings. 127 uptr stacksize = rl.rlim_cur; 128 if (stacksize > segment.end - prev_end) stacksize = segment.end - prev_end; 129 // When running with unlimited stack size, we still want to set some limit. 130 // The unlimited stack size is caused by 'ulimit -s unlimited'. 131 // Also, for some reason, GNU make spawns subprocesses with unlimited stack. 132 if (stacksize > kMaxThreadStackSize) 133 stacksize = kMaxThreadStackSize; 134 *stack_top = segment.end; 135 *stack_bottom = segment.end - stacksize; 136 return; 137 } 138 uptr stacksize = 0; 139 void *stackaddr = nullptr; 140 #if SANITIZER_SOLARIS 141 stack_t ss; 142 CHECK_EQ(thr_stksegment(&ss), 0); 143 stacksize = ss.ss_size; 144 stackaddr = (char *)ss.ss_sp - stacksize; 145 #else // !SANITIZER_SOLARIS 146 pthread_attr_t attr; 147 pthread_attr_init(&attr); 148 CHECK_EQ(pthread_getattr_np(pthread_self(), &attr), 0); 149 my_pthread_attr_getstack(&attr, &stackaddr, &stacksize); 150 pthread_attr_destroy(&attr); 151 #endif // SANITIZER_SOLARIS 152 153 *stack_top = (uptr)stackaddr + stacksize; 154 *stack_bottom = (uptr)stackaddr; 155 } 156 157 #if !SANITIZER_GO 158 bool SetEnv(const char *name, const char *value) { 159 void *f = dlsym(RTLD_NEXT, "setenv"); 160 if (!f) 161 return false; 162 typedef int(*setenv_ft)(const char *name, const char *value, int overwrite); 163 setenv_ft setenv_f; 164 CHECK_EQ(sizeof(setenv_f), sizeof(f)); 165 internal_memcpy(&setenv_f, &f, sizeof(f)); 166 return setenv_f(name, value, 1) == 0; 167 } 168 #endif 169 170 __attribute__((unused)) static bool GetLibcVersion(int *major, int *minor, 171 int *patch) { 172 #ifdef _CS_GNU_LIBC_VERSION 173 char buf[64]; 174 uptr len = confstr(_CS_GNU_LIBC_VERSION, buf, sizeof(buf)); 175 if (len >= sizeof(buf)) 176 return false; 177 buf[len] = 0; 178 static const char kGLibC[] = "glibc "; 179 if (internal_strncmp(buf, kGLibC, sizeof(kGLibC) - 1) != 0) 180 return false; 181 const char *p = buf + sizeof(kGLibC) - 1; 182 *major = internal_simple_strtoll(p, &p, 10); 183 *minor = (*p == '.') ? internal_simple_strtoll(p + 1, &p, 10) : 0; 184 *patch = (*p == '.') ? internal_simple_strtoll(p + 1, &p, 10) : 0; 185 return true; 186 #else 187 return false; 188 #endif 189 } 190 191 // True if we can use dlpi_tls_data. glibc before 2.25 may leave NULL (BZ 192 // #19826) so dlpi_tls_data cannot be used. 193 // 194 // musl before 1.2.3 and FreeBSD as of 12.2 incorrectly set dlpi_tls_data to 195 // the TLS initialization image 196 // https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254774 197 __attribute__((unused)) static int g_use_dlpi_tls_data; 198 199 #if SANITIZER_GLIBC && !SANITIZER_GO 200 __attribute__((unused)) static uptr g_tls_size; 201 void InitTlsSize() { 202 int major, minor, patch; 203 g_use_dlpi_tls_data = 204 GetLibcVersion(&major, &minor, &patch) && major == 2 && minor >= 25; 205 206 #if defined(__x86_64__) || defined(__powerpc64__) 207 void *get_tls_static_info = dlsym(RTLD_NEXT, "_dl_get_tls_static_info"); 208 size_t tls_align; 209 ((void (*)(size_t *, size_t *))get_tls_static_info)(&g_tls_size, &tls_align); 210 #endif 211 } 212 #else 213 void InitTlsSize() { } 214 #endif // SANITIZER_GLIBC && !SANITIZER_GO 215 216 // On glibc x86_64, ThreadDescriptorSize() needs to be precise due to the usage 217 // of g_tls_size. On other targets, ThreadDescriptorSize() is only used by lsan 218 // to get the pointer to thread-specific data keys in the thread control block. 219 #if (SANITIZER_FREEBSD || SANITIZER_LINUX) && !SANITIZER_ANDROID 220 // sizeof(struct pthread) from glibc. 221 static atomic_uintptr_t thread_descriptor_size; 222 223 uptr ThreadDescriptorSize() { 224 uptr val = atomic_load_relaxed(&thread_descriptor_size); 225 if (val) 226 return val; 227 #if defined(__x86_64__) || defined(__i386__) || defined(__arm__) 228 int major; 229 int minor; 230 int patch; 231 if (GetLibcVersion(&major, &minor, &patch) && major == 2) { 232 /* sizeof(struct pthread) values from various glibc versions. */ 233 if (SANITIZER_X32) 234 val = 1728; // Assume only one particular version for x32. 235 // For ARM sizeof(struct pthread) changed in Glibc 2.23. 236 else if (SANITIZER_ARM) 237 val = minor <= 22 ? 1120 : 1216; 238 else if (minor <= 3) 239 val = FIRST_32_SECOND_64(1104, 1696); 240 else if (minor == 4) 241 val = FIRST_32_SECOND_64(1120, 1728); 242 else if (minor == 5) 243 val = FIRST_32_SECOND_64(1136, 1728); 244 else if (minor <= 9) 245 val = FIRST_32_SECOND_64(1136, 1712); 246 else if (minor == 10) 247 val = FIRST_32_SECOND_64(1168, 1776); 248 else if (minor == 11 || (minor == 12 && patch == 1)) 249 val = FIRST_32_SECOND_64(1168, 2288); 250 else if (minor <= 14) 251 val = FIRST_32_SECOND_64(1168, 2304); 252 else if (minor < 32) // Unknown version 253 val = FIRST_32_SECOND_64(1216, 2304); 254 else // minor == 32 255 val = FIRST_32_SECOND_64(1344, 2496); 256 } 257 #elif defined(__s390__) || defined(__sparc__) 258 // The size of a prefix of TCB including pthread::{specific_1stblock,specific} 259 // suffices. Just return offsetof(struct pthread, specific_used), which hasn't 260 // changed since 2007-05. Technically this applies to i386/x86_64 as well but 261 // we call _dl_get_tls_static_info and need the precise size of struct 262 // pthread. 263 return FIRST_32_SECOND_64(524, 1552); 264 #elif defined(__mips__) 265 // TODO(sagarthakur): add more values as per different glibc versions. 266 val = FIRST_32_SECOND_64(1152, 1776); 267 #elif SANITIZER_RISCV64 268 int major; 269 int minor; 270 int patch; 271 if (GetLibcVersion(&major, &minor, &patch) && major == 2) { 272 // TODO: consider adding an optional runtime check for an unknown (untested) 273 // glibc version 274 if (minor <= 28) // WARNING: the highest tested version is 2.29 275 val = 1772; // no guarantees for this one 276 else if (minor <= 31) 277 val = 1772; // tested against glibc 2.29, 2.31 278 else 279 val = 1936; // tested against glibc 2.32 280 } 281 282 #elif defined(__aarch64__) 283 // The sizeof (struct pthread) is the same from GLIBC 2.17 to 2.22. 284 val = 1776; 285 #elif defined(__powerpc64__) 286 val = 1776; // from glibc.ppc64le 2.20-8.fc21 287 #endif 288 if (val) 289 atomic_store_relaxed(&thread_descriptor_size, val); 290 return val; 291 } 292 293 #if defined(__mips__) || defined(__powerpc64__) || SANITIZER_RISCV64 294 // TlsPreTcbSize includes size of struct pthread_descr and size of tcb 295 // head structure. It lies before the static tls blocks. 296 static uptr TlsPreTcbSize() { 297 #if defined(__mips__) 298 const uptr kTcbHead = 16; // sizeof (tcbhead_t) 299 #elif defined(__powerpc64__) 300 const uptr kTcbHead = 88; // sizeof (tcbhead_t) 301 #elif SANITIZER_RISCV64 302 const uptr kTcbHead = 16; // sizeof (tcbhead_t) 303 #endif 304 const uptr kTlsAlign = 16; 305 const uptr kTlsPreTcbSize = 306 RoundUpTo(ThreadDescriptorSize() + kTcbHead, kTlsAlign); 307 return kTlsPreTcbSize; 308 } 309 #endif 310 311 #if !SANITIZER_GO 312 namespace { 313 struct TlsBlock { 314 uptr begin, end, align; 315 size_t tls_modid; 316 bool operator<(const TlsBlock &rhs) const { return begin < rhs.begin; } 317 }; 318 } // namespace 319 320 extern "C" void *__tls_get_addr(size_t *); 321 322 static int CollectStaticTlsBlocks(struct dl_phdr_info *info, size_t size, 323 void *data) { 324 if (!info->dlpi_tls_modid) 325 return 0; 326 uptr begin = (uptr)info->dlpi_tls_data; 327 #ifndef __s390__ 328 if (!g_use_dlpi_tls_data) { 329 // Call __tls_get_addr as a fallback. This forces TLS allocation on glibc 330 // and FreeBSD. 331 size_t mod_and_off[2] = {info->dlpi_tls_modid, 0}; 332 begin = (uptr)__tls_get_addr(mod_and_off); 333 } 334 #endif 335 for (unsigned i = 0; i != info->dlpi_phnum; ++i) 336 if (info->dlpi_phdr[i].p_type == PT_TLS) { 337 static_cast<InternalMmapVector<TlsBlock> *>(data)->push_back( 338 TlsBlock{begin, begin + info->dlpi_phdr[i].p_memsz, 339 info->dlpi_phdr[i].p_align, info->dlpi_tls_modid}); 340 break; 341 } 342 return 0; 343 } 344 345 __attribute__((unused)) static void GetStaticTlsBoundary(uptr *addr, uptr *size, 346 uptr *align) { 347 InternalMmapVector<TlsBlock> ranges; 348 dl_iterate_phdr(CollectStaticTlsBlocks, &ranges); 349 uptr len = ranges.size(); 350 Sort(ranges.begin(), len); 351 // Find the range with tls_modid=1. For glibc, because libc.so uses PT_TLS, 352 // this module is guaranteed to exist and is one of the initially loaded 353 // modules. 354 uptr one = 0; 355 while (one != len && ranges[one].tls_modid != 1) ++one; 356 if (one == len) { 357 // This may happen with musl if no module uses PT_TLS. 358 *addr = 0; 359 *size = 0; 360 *align = 1; 361 return; 362 } 363 // Find the maximum consecutive ranges. We consider two modules consecutive if 364 // the gap is smaller than the alignment. The dynamic loader places static TLS 365 // blocks this way not to waste space. 366 uptr l = one; 367 *align = ranges[l].align; 368 while (l != 0 && ranges[l].begin < ranges[l - 1].end + ranges[l - 1].align) 369 *align = Max(*align, ranges[--l].align); 370 uptr r = one + 1; 371 while (r != len && ranges[r].begin < ranges[r - 1].end + ranges[r - 1].align) 372 *align = Max(*align, ranges[r++].align); 373 *addr = ranges[l].begin; 374 *size = ranges[r - 1].end - ranges[l].begin; 375 } 376 #endif // !SANITIZER_GO 377 #endif // (x86_64 || i386 || mips || ...) && (SANITIZER_FREEBSD || 378 // SANITIZER_LINUX) && !SANITIZER_ANDROID 379 380 #if SANITIZER_NETBSD 381 static struct tls_tcb * ThreadSelfTlsTcb() { 382 struct tls_tcb *tcb = nullptr; 383 #ifdef __HAVE___LWP_GETTCB_FAST 384 tcb = (struct tls_tcb *)__lwp_gettcb_fast(); 385 #elif defined(__HAVE___LWP_GETPRIVATE_FAST) 386 tcb = (struct tls_tcb *)__lwp_getprivate_fast(); 387 #endif 388 return tcb; 389 } 390 391 uptr ThreadSelf() { 392 return (uptr)ThreadSelfTlsTcb()->tcb_pthread; 393 } 394 395 int GetSizeFromHdr(struct dl_phdr_info *info, size_t size, void *data) { 396 const Elf_Phdr *hdr = info->dlpi_phdr; 397 const Elf_Phdr *last_hdr = hdr + info->dlpi_phnum; 398 399 for (; hdr != last_hdr; ++hdr) { 400 if (hdr->p_type == PT_TLS && info->dlpi_tls_modid == 1) { 401 *(uptr*)data = hdr->p_memsz; 402 break; 403 } 404 } 405 return 0; 406 } 407 #endif // SANITIZER_NETBSD 408 409 #if SANITIZER_ANDROID 410 // Bionic provides this API since S. 411 extern "C" SANITIZER_WEAK_ATTRIBUTE void __libc_get_static_tls_bounds(void **, 412 void **); 413 #endif 414 415 #if !SANITIZER_GO 416 static void GetTls(uptr *addr, uptr *size) { 417 #if SANITIZER_ANDROID 418 if (&__libc_get_static_tls_bounds) { 419 void *start_addr; 420 void *end_addr; 421 __libc_get_static_tls_bounds(&start_addr, &end_addr); 422 *addr = reinterpret_cast<uptr>(start_addr); 423 *size = 424 reinterpret_cast<uptr>(end_addr) - reinterpret_cast<uptr>(start_addr); 425 } else { 426 *addr = 0; 427 *size = 0; 428 } 429 #elif SANITIZER_GLIBC && defined(__x86_64__) 430 // For x86-64, use an O(1) approach which requires precise 431 // ThreadDescriptorSize. g_tls_size was initialized in InitTlsSize. 432 asm("mov %%fs:16,%0" : "=r"(*addr)); 433 *size = g_tls_size; 434 *addr -= *size; 435 *addr += ThreadDescriptorSize(); 436 #elif SANITIZER_GLIBC && defined(__powerpc64__) 437 // Workaround for glibc<2.25(?). 2.27 is known to not need this. 438 uptr tp; 439 asm("addi %0,13,-0x7000" : "=r"(tp)); 440 const uptr pre_tcb_size = TlsPreTcbSize(); 441 *addr = tp - pre_tcb_size; 442 *size = g_tls_size + pre_tcb_size; 443 #elif SANITIZER_FREEBSD || SANITIZER_LINUX 444 uptr align; 445 GetStaticTlsBoundary(addr, size, &align); 446 #if defined(__x86_64__) || defined(__i386__) || defined(__s390__) || \ 447 defined(__sparc__) 448 if (SANITIZER_GLIBC) { 449 #if defined(__x86_64__) || defined(__i386__) 450 align = Max<uptr>(align, 64); 451 #else 452 align = Max<uptr>(align, 16); 453 #endif 454 } 455 const uptr tp = RoundUpTo(*addr + *size, align); 456 457 // lsan requires the range to additionally cover the static TLS surplus 458 // (elf/dl-tls.c defines 1664). Otherwise there may be false positives for 459 // allocations only referenced by tls in dynamically loaded modules. 460 if (SANITIZER_GLIBC) 461 *size += 1644; 462 else if (SANITIZER_FREEBSD) 463 *size += 128; // RTLD_STATIC_TLS_EXTRA 464 465 // Extend the range to include the thread control block. On glibc, lsan needs 466 // the range to include pthread::{specific_1stblock,specific} so that 467 // allocations only referenced by pthread_setspecific can be scanned. This may 468 // underestimate by at most TLS_TCB_ALIGN-1 bytes but it should be fine 469 // because the number of bytes after pthread::specific is larger. 470 *addr = tp - RoundUpTo(*size, align); 471 *size = tp - *addr + ThreadDescriptorSize(); 472 #else 473 if (SANITIZER_GLIBC) 474 *size += 1664; 475 else if (SANITIZER_FREEBSD) 476 *size += 128; // RTLD_STATIC_TLS_EXTRA 477 #if defined(__mips__) || defined(__powerpc64__) || SANITIZER_RISCV64 478 const uptr pre_tcb_size = TlsPreTcbSize(); 479 *addr -= pre_tcb_size; 480 *size += pre_tcb_size; 481 #else 482 // arm and aarch64 reserve two words at TP, so this underestimates the range. 483 // However, this is sufficient for the purpose of finding the pointers to 484 // thread-specific data keys. 485 const uptr tcb_size = ThreadDescriptorSize(); 486 *addr -= tcb_size; 487 *size += tcb_size; 488 #endif 489 #endif 490 #elif SANITIZER_NETBSD 491 struct tls_tcb * const tcb = ThreadSelfTlsTcb(); 492 *addr = 0; 493 *size = 0; 494 if (tcb != 0) { 495 // Find size (p_memsz) of dlpi_tls_modid 1 (TLS block of the main program). 496 // ld.elf_so hardcodes the index 1. 497 dl_iterate_phdr(GetSizeFromHdr, size); 498 499 if (*size != 0) { 500 // The block has been found and tcb_dtv[1] contains the base address 501 *addr = (uptr)tcb->tcb_dtv[1]; 502 } 503 } 504 #elif SANITIZER_SOLARIS 505 // FIXME 506 *addr = 0; 507 *size = 0; 508 #else 509 #error "Unknown OS" 510 #endif 511 } 512 #endif 513 514 #if !SANITIZER_GO 515 uptr GetTlsSize() { 516 #if SANITIZER_FREEBSD || SANITIZER_LINUX || SANITIZER_NETBSD || \ 517 SANITIZER_SOLARIS 518 uptr addr, size; 519 GetTls(&addr, &size); 520 return size; 521 #else 522 return 0; 523 #endif 524 } 525 #endif 526 527 void GetThreadStackAndTls(bool main, uptr *stk_addr, uptr *stk_size, 528 uptr *tls_addr, uptr *tls_size) { 529 #if SANITIZER_GO 530 // Stub implementation for Go. 531 *stk_addr = *stk_size = *tls_addr = *tls_size = 0; 532 #else 533 GetTls(tls_addr, tls_size); 534 535 uptr stack_top, stack_bottom; 536 GetThreadStackTopAndBottom(main, &stack_top, &stack_bottom); 537 *stk_addr = stack_bottom; 538 *stk_size = stack_top - stack_bottom; 539 540 if (!main) { 541 // If stack and tls intersect, make them non-intersecting. 542 if (*tls_addr > *stk_addr && *tls_addr < *stk_addr + *stk_size) { 543 if (*stk_addr + *stk_size < *tls_addr + *tls_size) 544 *tls_size = *stk_addr + *stk_size - *tls_addr; 545 *stk_size = *tls_addr - *stk_addr; 546 } 547 } 548 #endif 549 } 550 551 #if !SANITIZER_FREEBSD 552 typedef ElfW(Phdr) Elf_Phdr; 553 #elif SANITIZER_WORDSIZE == 32 && __FreeBSD_version <= 902001 // v9.2 554 #define Elf_Phdr XElf32_Phdr 555 #define dl_phdr_info xdl_phdr_info 556 #define dl_iterate_phdr(c, b) xdl_iterate_phdr((c), (b)) 557 #endif // !SANITIZER_FREEBSD 558 559 struct DlIteratePhdrData { 560 InternalMmapVectorNoCtor<LoadedModule> *modules; 561 bool first; 562 }; 563 564 static int AddModuleSegments(const char *module_name, dl_phdr_info *info, 565 InternalMmapVectorNoCtor<LoadedModule> *modules) { 566 if (module_name[0] == '\0') 567 return 0; 568 LoadedModule cur_module; 569 cur_module.set(module_name, info->dlpi_addr); 570 for (int i = 0; i < (int)info->dlpi_phnum; i++) { 571 const Elf_Phdr *phdr = &info->dlpi_phdr[i]; 572 if (phdr->p_type == PT_LOAD) { 573 uptr cur_beg = info->dlpi_addr + phdr->p_vaddr; 574 uptr cur_end = cur_beg + phdr->p_memsz; 575 bool executable = phdr->p_flags & PF_X; 576 bool writable = phdr->p_flags & PF_W; 577 cur_module.addAddressRange(cur_beg, cur_end, executable, 578 writable); 579 } 580 } 581 modules->push_back(cur_module); 582 return 0; 583 } 584 585 static int dl_iterate_phdr_cb(dl_phdr_info *info, size_t size, void *arg) { 586 DlIteratePhdrData *data = (DlIteratePhdrData *)arg; 587 if (data->first) { 588 InternalMmapVector<char> module_name(kMaxPathLength); 589 data->first = false; 590 // First module is the binary itself. 591 ReadBinaryNameCached(module_name.data(), module_name.size()); 592 return AddModuleSegments(module_name.data(), info, data->modules); 593 } 594 595 if (info->dlpi_name) { 596 InternalScopedString module_name; 597 module_name.append("%s", info->dlpi_name); 598 return AddModuleSegments(module_name.data(), info, data->modules); 599 } 600 601 return 0; 602 } 603 604 #if SANITIZER_ANDROID && __ANDROID_API__ < 21 605 extern "C" __attribute__((weak)) int dl_iterate_phdr( 606 int (*)(struct dl_phdr_info *, size_t, void *), void *); 607 #endif 608 609 static bool requiresProcmaps() { 610 #if SANITIZER_ANDROID && __ANDROID_API__ <= 22 611 // Fall back to /proc/maps if dl_iterate_phdr is unavailable or broken. 612 // The runtime check allows the same library to work with 613 // both K and L (and future) Android releases. 614 return AndroidGetApiLevel() <= ANDROID_LOLLIPOP_MR1; 615 #else 616 return false; 617 #endif 618 } 619 620 static void procmapsInit(InternalMmapVectorNoCtor<LoadedModule> *modules) { 621 MemoryMappingLayout memory_mapping(/*cache_enabled*/true); 622 memory_mapping.DumpListOfModules(modules); 623 } 624 625 void ListOfModules::init() { 626 clearOrInit(); 627 if (requiresProcmaps()) { 628 procmapsInit(&modules_); 629 } else { 630 DlIteratePhdrData data = {&modules_, true}; 631 dl_iterate_phdr(dl_iterate_phdr_cb, &data); 632 } 633 } 634 635 // When a custom loader is used, dl_iterate_phdr may not contain the full 636 // list of modules. Allow callers to fall back to using procmaps. 637 void ListOfModules::fallbackInit() { 638 if (!requiresProcmaps()) { 639 clearOrInit(); 640 procmapsInit(&modules_); 641 } else { 642 clear(); 643 } 644 } 645 646 // getrusage does not give us the current RSS, only the max RSS. 647 // Still, this is better than nothing if /proc/self/statm is not available 648 // for some reason, e.g. due to a sandbox. 649 static uptr GetRSSFromGetrusage() { 650 struct rusage usage; 651 if (getrusage(RUSAGE_SELF, &usage)) // Failed, probably due to a sandbox. 652 return 0; 653 return usage.ru_maxrss << 10; // ru_maxrss is in Kb. 654 } 655 656 uptr GetRSS() { 657 if (!common_flags()->can_use_proc_maps_statm) 658 return GetRSSFromGetrusage(); 659 fd_t fd = OpenFile("/proc/self/statm", RdOnly); 660 if (fd == kInvalidFd) 661 return GetRSSFromGetrusage(); 662 char buf[64]; 663 uptr len = internal_read(fd, buf, sizeof(buf) - 1); 664 internal_close(fd); 665 if ((sptr)len <= 0) 666 return 0; 667 buf[len] = 0; 668 // The format of the file is: 669 // 1084 89 69 11 0 79 0 670 // We need the second number which is RSS in pages. 671 char *pos = buf; 672 // Skip the first number. 673 while (*pos >= '0' && *pos <= '9') 674 pos++; 675 // Skip whitespaces. 676 while (!(*pos >= '0' && *pos <= '9') && *pos != 0) 677 pos++; 678 // Read the number. 679 uptr rss = 0; 680 while (*pos >= '0' && *pos <= '9') 681 rss = rss * 10 + *pos++ - '0'; 682 return rss * GetPageSizeCached(); 683 } 684 685 // sysconf(_SC_NPROCESSORS_{CONF,ONLN}) cannot be used on most platforms as 686 // they allocate memory. 687 u32 GetNumberOfCPUs() { 688 #if SANITIZER_FREEBSD || SANITIZER_NETBSD 689 u32 ncpu; 690 int req[2]; 691 uptr len = sizeof(ncpu); 692 req[0] = CTL_HW; 693 req[1] = HW_NCPU; 694 CHECK_EQ(internal_sysctl(req, 2, &ncpu, &len, NULL, 0), 0); 695 return ncpu; 696 #elif SANITIZER_ANDROID && !defined(CPU_COUNT) && !defined(__aarch64__) 697 // Fall back to /sys/devices/system/cpu on Android when cpu_set_t doesn't 698 // exist in sched.h. That is the case for toolchains generated with older 699 // NDKs. 700 // This code doesn't work on AArch64 because internal_getdents makes use of 701 // the 64bit getdents syscall, but cpu_set_t seems to always exist on AArch64. 702 uptr fd = internal_open("/sys/devices/system/cpu", O_RDONLY | O_DIRECTORY); 703 if (internal_iserror(fd)) 704 return 0; 705 InternalMmapVector<u8> buffer(4096); 706 uptr bytes_read = buffer.size(); 707 uptr n_cpus = 0; 708 u8 *d_type; 709 struct linux_dirent *entry = (struct linux_dirent *)&buffer[bytes_read]; 710 while (true) { 711 if ((u8 *)entry >= &buffer[bytes_read]) { 712 bytes_read = internal_getdents(fd, (struct linux_dirent *)buffer.data(), 713 buffer.size()); 714 if (internal_iserror(bytes_read) || !bytes_read) 715 break; 716 entry = (struct linux_dirent *)buffer.data(); 717 } 718 d_type = (u8 *)entry + entry->d_reclen - 1; 719 if (d_type >= &buffer[bytes_read] || 720 (u8 *)&entry->d_name[3] >= &buffer[bytes_read]) 721 break; 722 if (entry->d_ino != 0 && *d_type == DT_DIR) { 723 if (entry->d_name[0] == 'c' && entry->d_name[1] == 'p' && 724 entry->d_name[2] == 'u' && 725 entry->d_name[3] >= '0' && entry->d_name[3] <= '9') 726 n_cpus++; 727 } 728 entry = (struct linux_dirent *)(((u8 *)entry) + entry->d_reclen); 729 } 730 internal_close(fd); 731 return n_cpus; 732 #elif SANITIZER_SOLARIS 733 return sysconf(_SC_NPROCESSORS_ONLN); 734 #else 735 cpu_set_t CPUs; 736 CHECK_EQ(sched_getaffinity(0, sizeof(cpu_set_t), &CPUs), 0); 737 return CPU_COUNT(&CPUs); 738 #endif 739 } 740 741 #if SANITIZER_LINUX 742 743 #if SANITIZER_ANDROID 744 static atomic_uint8_t android_log_initialized; 745 746 void AndroidLogInit() { 747 openlog(GetProcessName(), 0, LOG_USER); 748 atomic_store(&android_log_initialized, 1, memory_order_release); 749 } 750 751 static bool ShouldLogAfterPrintf() { 752 return atomic_load(&android_log_initialized, memory_order_acquire); 753 } 754 755 extern "C" SANITIZER_WEAK_ATTRIBUTE 756 int async_safe_write_log(int pri, const char* tag, const char* msg); 757 extern "C" SANITIZER_WEAK_ATTRIBUTE 758 int __android_log_write(int prio, const char* tag, const char* msg); 759 760 // ANDROID_LOG_INFO is 4, but can't be resolved at runtime. 761 #define SANITIZER_ANDROID_LOG_INFO 4 762 763 // async_safe_write_log is a new public version of __libc_write_log that is 764 // used behind syslog. It is preferable to syslog as it will not do any dynamic 765 // memory allocation or formatting. 766 // If the function is not available, syslog is preferred for L+ (it was broken 767 // pre-L) as __android_log_write triggers a racey behavior with the strncpy 768 // interceptor. Fallback to __android_log_write pre-L. 769 void WriteOneLineToSyslog(const char *s) { 770 if (&async_safe_write_log) { 771 async_safe_write_log(SANITIZER_ANDROID_LOG_INFO, GetProcessName(), s); 772 } else if (AndroidGetApiLevel() > ANDROID_KITKAT) { 773 syslog(LOG_INFO, "%s", s); 774 } else { 775 CHECK(&__android_log_write); 776 __android_log_write(SANITIZER_ANDROID_LOG_INFO, nullptr, s); 777 } 778 } 779 780 extern "C" SANITIZER_WEAK_ATTRIBUTE 781 void android_set_abort_message(const char *); 782 783 void SetAbortMessage(const char *str) { 784 if (&android_set_abort_message) 785 android_set_abort_message(str); 786 } 787 #else 788 void AndroidLogInit() {} 789 790 static bool ShouldLogAfterPrintf() { return true; } 791 792 void WriteOneLineToSyslog(const char *s) { syslog(LOG_INFO, "%s", s); } 793 794 void SetAbortMessage(const char *str) {} 795 #endif // SANITIZER_ANDROID 796 797 void LogMessageOnPrintf(const char *str) { 798 if (common_flags()->log_to_syslog && ShouldLogAfterPrintf()) 799 WriteToSyslog(str); 800 } 801 802 #endif // SANITIZER_LINUX 803 804 #if SANITIZER_GLIBC && !SANITIZER_GO 805 // glibc crashes when using clock_gettime from a preinit_array function as the 806 // vDSO function pointers haven't been initialized yet. __progname is 807 // initialized after the vDSO function pointers, so if it exists, is not null 808 // and is not empty, we can use clock_gettime. 809 extern "C" SANITIZER_WEAK_ATTRIBUTE char *__progname; 810 inline bool CanUseVDSO() { return &__progname && __progname && *__progname; } 811 812 // MonotonicNanoTime is a timing function that can leverage the vDSO by calling 813 // clock_gettime. real_clock_gettime only exists if clock_gettime is 814 // intercepted, so define it weakly and use it if available. 815 extern "C" SANITIZER_WEAK_ATTRIBUTE 816 int real_clock_gettime(u32 clk_id, void *tp); 817 u64 MonotonicNanoTime() { 818 timespec ts; 819 if (CanUseVDSO()) { 820 if (&real_clock_gettime) 821 real_clock_gettime(CLOCK_MONOTONIC, &ts); 822 else 823 clock_gettime(CLOCK_MONOTONIC, &ts); 824 } else { 825 internal_clock_gettime(CLOCK_MONOTONIC, &ts); 826 } 827 return (u64)ts.tv_sec * (1000ULL * 1000 * 1000) + ts.tv_nsec; 828 } 829 #else 830 // Non-glibc & Go always use the regular function. 831 u64 MonotonicNanoTime() { 832 timespec ts; 833 clock_gettime(CLOCK_MONOTONIC, &ts); 834 return (u64)ts.tv_sec * (1000ULL * 1000 * 1000) + ts.tv_nsec; 835 } 836 #endif // SANITIZER_GLIBC && !SANITIZER_GO 837 838 void ReExec() { 839 const char *pathname = "/proc/self/exe"; 840 841 #if SANITIZER_NETBSD 842 static const int name[] = { 843 CTL_KERN, 844 KERN_PROC_ARGS, 845 -1, 846 KERN_PROC_PATHNAME, 847 }; 848 char path[400]; 849 uptr len; 850 851 len = sizeof(path); 852 if (internal_sysctl(name, ARRAY_SIZE(name), path, &len, NULL, 0) != -1) 853 pathname = path; 854 #elif SANITIZER_SOLARIS 855 pathname = getexecname(); 856 CHECK_NE(pathname, NULL); 857 #elif SANITIZER_USE_GETAUXVAL 858 // Calling execve with /proc/self/exe sets that as $EXEC_ORIGIN. Binaries that 859 // rely on that will fail to load shared libraries. Query AT_EXECFN instead. 860 pathname = reinterpret_cast<const char *>(getauxval(AT_EXECFN)); 861 #endif 862 863 uptr rv = internal_execve(pathname, GetArgv(), GetEnviron()); 864 int rverrno; 865 CHECK_EQ(internal_iserror(rv, &rverrno), true); 866 Printf("execve failed, errno %d\n", rverrno); 867 Die(); 868 } 869 870 void UnmapFromTo(uptr from, uptr to) { 871 if (to == from) 872 return; 873 CHECK(to >= from); 874 uptr res = internal_munmap(reinterpret_cast<void *>(from), to - from); 875 if (UNLIKELY(internal_iserror(res))) { 876 Report("ERROR: %s failed to unmap 0x%zx (%zd) bytes at address %p\n", 877 SanitizerToolName, to - from, to - from, (void *)from); 878 CHECK("unable to unmap" && 0); 879 } 880 } 881 882 uptr MapDynamicShadow(uptr shadow_size_bytes, uptr shadow_scale, 883 uptr min_shadow_base_alignment, 884 UNUSED uptr &high_mem_end) { 885 const uptr granularity = GetMmapGranularity(); 886 const uptr alignment = 887 Max<uptr>(granularity << shadow_scale, 1ULL << min_shadow_base_alignment); 888 const uptr left_padding = 889 Max<uptr>(granularity, 1ULL << min_shadow_base_alignment); 890 891 const uptr shadow_size = RoundUpTo(shadow_size_bytes, granularity); 892 const uptr map_size = shadow_size + left_padding + alignment; 893 894 const uptr map_start = (uptr)MmapNoAccess(map_size); 895 CHECK_NE(map_start, ~(uptr)0); 896 897 const uptr shadow_start = RoundUpTo(map_start + left_padding, alignment); 898 899 UnmapFromTo(map_start, shadow_start - left_padding); 900 UnmapFromTo(shadow_start + shadow_size, map_start + map_size); 901 902 return shadow_start; 903 } 904 905 static uptr MmapSharedNoReserve(uptr addr, uptr size) { 906 return internal_mmap( 907 reinterpret_cast<void *>(addr), size, PROT_READ | PROT_WRITE, 908 MAP_FIXED | MAP_SHARED | MAP_ANONYMOUS | MAP_NORESERVE, -1, 0); 909 } 910 911 static uptr MremapCreateAlias(uptr base_addr, uptr alias_addr, 912 uptr alias_size) { 913 #if SANITIZER_LINUX 914 return internal_mremap(reinterpret_cast<void *>(base_addr), 0, alias_size, 915 MREMAP_MAYMOVE | MREMAP_FIXED, 916 reinterpret_cast<void *>(alias_addr)); 917 #else 918 CHECK(false && "mremap is not supported outside of Linux"); 919 return 0; 920 #endif 921 } 922 923 static void CreateAliases(uptr start_addr, uptr alias_size, uptr num_aliases) { 924 uptr total_size = alias_size * num_aliases; 925 uptr mapped = MmapSharedNoReserve(start_addr, total_size); 926 CHECK_EQ(mapped, start_addr); 927 928 for (uptr i = 1; i < num_aliases; ++i) { 929 uptr alias_addr = start_addr + i * alias_size; 930 CHECK_EQ(MremapCreateAlias(start_addr, alias_addr, alias_size), alias_addr); 931 } 932 } 933 934 uptr MapDynamicShadowAndAliases(uptr shadow_size, uptr alias_size, 935 uptr num_aliases, uptr ring_buffer_size) { 936 CHECK_EQ(alias_size & (alias_size - 1), 0); 937 CHECK_EQ(num_aliases & (num_aliases - 1), 0); 938 CHECK_EQ(ring_buffer_size & (ring_buffer_size - 1), 0); 939 940 const uptr granularity = GetMmapGranularity(); 941 shadow_size = RoundUpTo(shadow_size, granularity); 942 CHECK_EQ(shadow_size & (shadow_size - 1), 0); 943 944 const uptr alias_region_size = alias_size * num_aliases; 945 const uptr alignment = 946 2 * Max(Max(shadow_size, alias_region_size), ring_buffer_size); 947 const uptr left_padding = ring_buffer_size; 948 949 const uptr right_size = alignment; 950 const uptr map_size = left_padding + 2 * alignment; 951 952 const uptr map_start = reinterpret_cast<uptr>(MmapNoAccess(map_size)); 953 CHECK_NE(map_start, static_cast<uptr>(-1)); 954 const uptr right_start = RoundUpTo(map_start + left_padding, alignment); 955 956 UnmapFromTo(map_start, right_start - left_padding); 957 UnmapFromTo(right_start + right_size, map_start + map_size); 958 959 CreateAliases(right_start + right_size / 2, alias_size, num_aliases); 960 961 return right_start; 962 } 963 964 void InitializePlatformCommonFlags(CommonFlags *cf) { 965 #if SANITIZER_ANDROID 966 if (&__libc_get_static_tls_bounds == nullptr) 967 cf->detect_leaks = false; 968 #endif 969 } 970 971 } // namespace __sanitizer 972 973 #endif 974