1 //===-- sanitizer_linux_libcdep.cpp ---------------------------------------===//
2 //
3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4 // See https://llvm.org/LICENSE.txt for license information.
5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6 //
7 //===----------------------------------------------------------------------===//
8 //
9 // This file is shared between AddressSanitizer and ThreadSanitizer
10 // run-time libraries and implements linux-specific functions from
11 // sanitizer_libc.h.
12 //===----------------------------------------------------------------------===//
13 
14 #include "sanitizer_platform.h"
15 
16 #if SANITIZER_FREEBSD || SANITIZER_LINUX || SANITIZER_NETBSD || \
17     SANITIZER_SOLARIS
18 
19 #include "sanitizer_allocator_internal.h"
20 #include "sanitizer_atomic.h"
21 #include "sanitizer_common.h"
22 #include "sanitizer_file.h"
23 #include "sanitizer_flags.h"
24 #include "sanitizer_freebsd.h"
25 #include "sanitizer_getauxval.h"
26 #include "sanitizer_glibc_version.h"
27 #include "sanitizer_linux.h"
28 #include "sanitizer_placement_new.h"
29 #include "sanitizer_procmaps.h"
30 
31 #if SANITIZER_NETBSD
32 #define _RTLD_SOURCE  // for __lwp_gettcb_fast() / __lwp_getprivate_fast()
33 #endif
34 
35 #include <dlfcn.h>  // for dlsym()
36 #include <link.h>
37 #include <pthread.h>
38 #include <signal.h>
39 #include <sys/mman.h>
40 #include <sys/resource.h>
41 #include <syslog.h>
42 
43 #if !defined(ElfW)
44 #define ElfW(type) Elf_##type
45 #endif
46 
47 #if SANITIZER_FREEBSD
48 #include <pthread_np.h>
49 #include <osreldate.h>
50 #include <sys/sysctl.h>
51 #define pthread_getattr_np pthread_attr_get_np
52 // The MAP_NORESERVE define has been removed in FreeBSD 11.x, and even before
53 // that, it was never implemented. So just define it to zero.
54 #undef MAP_NORESERVE
55 #define MAP_NORESERVE 0
56 #endif
57 
58 #if SANITIZER_NETBSD
59 #include <sys/sysctl.h>
60 #include <sys/tls.h>
61 #include <lwp.h>
62 #endif
63 
64 #if SANITIZER_SOLARIS
65 #include <stdlib.h>
66 #include <thread.h>
67 #endif
68 
69 #if SANITIZER_ANDROID
70 #include <android/api-level.h>
71 #if !defined(CPU_COUNT) && !defined(__aarch64__)
72 #include <dirent.h>
73 #include <fcntl.h>
74 struct __sanitizer::linux_dirent {
75   long           d_ino;
76   off_t          d_off;
77   unsigned short d_reclen;
78   char           d_name[];
79 };
80 #endif
81 #endif
82 
83 #if !SANITIZER_ANDROID
84 #include <elf.h>
85 #include <unistd.h>
86 #endif
87 
88 namespace __sanitizer {
89 
90 SANITIZER_WEAK_ATTRIBUTE int
91 real_sigaction(int signum, const void *act, void *oldact);
92 
93 int internal_sigaction(int signum, const void *act, void *oldact) {
94 #if !SANITIZER_GO
95   if (&real_sigaction)
96     return real_sigaction(signum, act, oldact);
97 #endif
98   return sigaction(signum, (const struct sigaction *)act,
99                    (struct sigaction *)oldact);
100 }
101 
102 void GetThreadStackTopAndBottom(bool at_initialization, uptr *stack_top,
103                                 uptr *stack_bottom) {
104   CHECK(stack_top);
105   CHECK(stack_bottom);
106   if (at_initialization) {
107     // This is the main thread. Libpthread may not be initialized yet.
108     struct rlimit rl;
109     CHECK_EQ(getrlimit(RLIMIT_STACK, &rl), 0);
110 
111     // Find the mapping that contains a stack variable.
112     MemoryMappingLayout proc_maps(/*cache_enabled*/true);
113     if (proc_maps.Error()) {
114       *stack_top = *stack_bottom = 0;
115       return;
116     }
117     MemoryMappedSegment segment;
118     uptr prev_end = 0;
119     while (proc_maps.Next(&segment)) {
120       if ((uptr)&rl < segment.end) break;
121       prev_end = segment.end;
122     }
123     CHECK((uptr)&rl >= segment.start && (uptr)&rl < segment.end);
124 
125     // Get stacksize from rlimit, but clip it so that it does not overlap
126     // with other mappings.
127     uptr stacksize = rl.rlim_cur;
128     if (stacksize > segment.end - prev_end) stacksize = segment.end - prev_end;
129     // When running with unlimited stack size, we still want to set some limit.
130     // The unlimited stack size is caused by 'ulimit -s unlimited'.
131     // Also, for some reason, GNU make spawns subprocesses with unlimited stack.
132     if (stacksize > kMaxThreadStackSize)
133       stacksize = kMaxThreadStackSize;
134     *stack_top = segment.end;
135     *stack_bottom = segment.end - stacksize;
136     return;
137   }
138   uptr stacksize = 0;
139   void *stackaddr = nullptr;
140 #if SANITIZER_SOLARIS
141   stack_t ss;
142   CHECK_EQ(thr_stksegment(&ss), 0);
143   stacksize = ss.ss_size;
144   stackaddr = (char *)ss.ss_sp - stacksize;
145 #else  // !SANITIZER_SOLARIS
146   pthread_attr_t attr;
147   pthread_attr_init(&attr);
148   CHECK_EQ(pthread_getattr_np(pthread_self(), &attr), 0);
149   my_pthread_attr_getstack(&attr, &stackaddr, &stacksize);
150   pthread_attr_destroy(&attr);
151 #endif  // SANITIZER_SOLARIS
152 
153   *stack_top = (uptr)stackaddr + stacksize;
154   *stack_bottom = (uptr)stackaddr;
155 }
156 
157 #if !SANITIZER_GO
158 bool SetEnv(const char *name, const char *value) {
159   void *f = dlsym(RTLD_NEXT, "setenv");
160   if (!f)
161     return false;
162   typedef int(*setenv_ft)(const char *name, const char *value, int overwrite);
163   setenv_ft setenv_f;
164   CHECK_EQ(sizeof(setenv_f), sizeof(f));
165   internal_memcpy(&setenv_f, &f, sizeof(f));
166   return setenv_f(name, value, 1) == 0;
167 }
168 #endif
169 
170 __attribute__((unused)) static bool GetLibcVersion(int *major, int *minor,
171                                                    int *patch) {
172 #ifdef _CS_GNU_LIBC_VERSION
173   char buf[64];
174   uptr len = confstr(_CS_GNU_LIBC_VERSION, buf, sizeof(buf));
175   if (len >= sizeof(buf))
176     return false;
177   buf[len] = 0;
178   static const char kGLibC[] = "glibc ";
179   if (internal_strncmp(buf, kGLibC, sizeof(kGLibC) - 1) != 0)
180     return false;
181   const char *p = buf + sizeof(kGLibC) - 1;
182   *major = internal_simple_strtoll(p, &p, 10);
183   *minor = (*p == '.') ? internal_simple_strtoll(p + 1, &p, 10) : 0;
184   *patch = (*p == '.') ? internal_simple_strtoll(p + 1, &p, 10) : 0;
185   return true;
186 #else
187   return false;
188 #endif
189 }
190 
191 // True if we can use dlpi_tls_data. glibc before 2.25 may leave NULL (BZ
192 // #19826) so dlpi_tls_data cannot be used.
193 //
194 // musl before 1.2.3 and FreeBSD as of 12.2 incorrectly set dlpi_tls_data to
195 // the TLS initialization image
196 // https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254774
197 __attribute__((unused)) static int g_use_dlpi_tls_data;
198 
199 #if SANITIZER_GLIBC && !SANITIZER_GO
200 __attribute__((unused)) static size_t g_tls_size;
201 void InitTlsSize() {
202   int major, minor, patch;
203   g_use_dlpi_tls_data =
204       GetLibcVersion(&major, &minor, &patch) && major == 2 && minor >= 25;
205 
206 #if defined(__aarch64__) || defined(__x86_64__) || defined(__powerpc64__)
207   void *get_tls_static_info = dlsym(RTLD_NEXT, "_dl_get_tls_static_info");
208   size_t tls_align;
209   ((void (*)(size_t *, size_t *))get_tls_static_info)(&g_tls_size, &tls_align);
210 #endif
211 }
212 #else
213 void InitTlsSize() { }
214 #endif  // SANITIZER_GLIBC && !SANITIZER_GO
215 
216 // On glibc x86_64, ThreadDescriptorSize() needs to be precise due to the usage
217 // of g_tls_size. On other targets, ThreadDescriptorSize() is only used by lsan
218 // to get the pointer to thread-specific data keys in the thread control block.
219 #if (SANITIZER_FREEBSD || SANITIZER_LINUX) && !SANITIZER_ANDROID
220 // sizeof(struct pthread) from glibc.
221 static atomic_uintptr_t thread_descriptor_size;
222 
223 uptr ThreadDescriptorSize() {
224   uptr val = atomic_load_relaxed(&thread_descriptor_size);
225   if (val)
226     return val;
227 #if defined(__x86_64__) || defined(__i386__) || defined(__arm__)
228   int major;
229   int minor;
230   int patch;
231   if (GetLibcVersion(&major, &minor, &patch) && major == 2) {
232     /* sizeof(struct pthread) values from various glibc versions.  */
233     if (SANITIZER_X32)
234       val = 1728; // Assume only one particular version for x32.
235     // For ARM sizeof(struct pthread) changed in Glibc 2.23.
236     else if (SANITIZER_ARM)
237       val = minor <= 22 ? 1120 : 1216;
238     else if (minor <= 3)
239       val = FIRST_32_SECOND_64(1104, 1696);
240     else if (minor == 4)
241       val = FIRST_32_SECOND_64(1120, 1728);
242     else if (minor == 5)
243       val = FIRST_32_SECOND_64(1136, 1728);
244     else if (minor <= 9)
245       val = FIRST_32_SECOND_64(1136, 1712);
246     else if (minor == 10)
247       val = FIRST_32_SECOND_64(1168, 1776);
248     else if (minor == 11 || (minor == 12 && patch == 1))
249       val = FIRST_32_SECOND_64(1168, 2288);
250     else if (minor <= 14)
251       val = FIRST_32_SECOND_64(1168, 2304);
252     else if (minor < 32)  // Unknown version
253       val = FIRST_32_SECOND_64(1216, 2304);
254     else  // minor == 32
255       val = FIRST_32_SECOND_64(1344, 2496);
256   }
257 #elif defined(__s390__) || defined(__sparc__)
258   // The size of a prefix of TCB including pthread::{specific_1stblock,specific}
259   // suffices. Just return offsetof(struct pthread, specific_used), which hasn't
260   // changed since 2007-05. Technically this applies to i386/x86_64 as well but
261   // we call _dl_get_tls_static_info and need the precise size of struct
262   // pthread.
263   return FIRST_32_SECOND_64(524, 1552);
264 #elif defined(__mips__)
265   // TODO(sagarthakur): add more values as per different glibc versions.
266   val = FIRST_32_SECOND_64(1152, 1776);
267 #elif SANITIZER_RISCV64
268   int major;
269   int minor;
270   int patch;
271   if (GetLibcVersion(&major, &minor, &patch) && major == 2) {
272     // TODO: consider adding an optional runtime check for an unknown (untested)
273     // glibc version
274     if (minor <= 28)  // WARNING: the highest tested version is 2.29
275       val = 1772;     // no guarantees for this one
276     else if (minor <= 31)
277       val = 1772;  // tested against glibc 2.29, 2.31
278     else
279       val = 1936;  // tested against glibc 2.32
280   }
281 
282 #elif defined(__aarch64__)
283   // The sizeof (struct pthread) is the same from GLIBC 2.17 to 2.22.
284   val = 1776;
285 #elif defined(__powerpc64__)
286   val = 1776; // from glibc.ppc64le 2.20-8.fc21
287 #endif
288   if (val)
289     atomic_store_relaxed(&thread_descriptor_size, val);
290   return val;
291 }
292 
293 #if defined(__mips__) || defined(__powerpc64__) || SANITIZER_RISCV64
294 // TlsPreTcbSize includes size of struct pthread_descr and size of tcb
295 // head structure. It lies before the static tls blocks.
296 static uptr TlsPreTcbSize() {
297 #if defined(__mips__)
298   const uptr kTcbHead = 16; // sizeof (tcbhead_t)
299 #elif defined(__powerpc64__)
300   const uptr kTcbHead = 88; // sizeof (tcbhead_t)
301 #elif SANITIZER_RISCV64
302   const uptr kTcbHead = 16;  // sizeof (tcbhead_t)
303 #endif
304   const uptr kTlsAlign = 16;
305   const uptr kTlsPreTcbSize =
306       RoundUpTo(ThreadDescriptorSize() + kTcbHead, kTlsAlign);
307   return kTlsPreTcbSize;
308 }
309 #endif
310 
311 #if !SANITIZER_GO
312 namespace {
313 struct TlsBlock {
314   uptr begin, end, align;
315   size_t tls_modid;
316   bool operator<(const TlsBlock &rhs) const { return begin < rhs.begin; }
317 };
318 }  // namespace
319 
320 extern "C" void *__tls_get_addr(size_t *);
321 
322 static int CollectStaticTlsBlocks(struct dl_phdr_info *info, size_t size,
323                                   void *data) {
324   if (!info->dlpi_tls_modid)
325     return 0;
326   uptr begin = (uptr)info->dlpi_tls_data;
327 #ifndef __s390__
328   if (!g_use_dlpi_tls_data) {
329     // Call __tls_get_addr as a fallback. This forces TLS allocation on glibc
330     // and FreeBSD.
331     size_t mod_and_off[2] = {info->dlpi_tls_modid, 0};
332     begin = (uptr)__tls_get_addr(mod_and_off);
333   }
334 #endif
335   for (unsigned i = 0; i != info->dlpi_phnum; ++i)
336     if (info->dlpi_phdr[i].p_type == PT_TLS) {
337       static_cast<InternalMmapVector<TlsBlock> *>(data)->push_back(
338           TlsBlock{begin, begin + info->dlpi_phdr[i].p_memsz,
339                    info->dlpi_phdr[i].p_align, info->dlpi_tls_modid});
340       break;
341     }
342   return 0;
343 }
344 
345 __attribute__((unused)) static void GetStaticTlsBoundary(uptr *addr, uptr *size,
346                                                          uptr *align) {
347   InternalMmapVector<TlsBlock> ranges;
348   dl_iterate_phdr(CollectStaticTlsBlocks, &ranges);
349   uptr len = ranges.size();
350   Sort(ranges.begin(), len);
351   // Find the range with tls_modid=1. For glibc, because libc.so uses PT_TLS,
352   // this module is guaranteed to exist and is one of the initially loaded
353   // modules.
354   uptr one = 0;
355   while (one != len && ranges[one].tls_modid != 1) ++one;
356   if (one == len) {
357     // This may happen with musl if no module uses PT_TLS.
358     *addr = 0;
359     *size = 0;
360     *align = 1;
361     return;
362   }
363   // Find the maximum consecutive ranges. We consider two modules consecutive if
364   // the gap is smaller than the alignment. The dynamic loader places static TLS
365   // blocks this way not to waste space.
366   uptr l = one;
367   *align = ranges[l].align;
368   while (l != 0 && ranges[l].begin < ranges[l - 1].end + ranges[l - 1].align)
369     *align = Max(*align, ranges[--l].align);
370   uptr r = one + 1;
371   while (r != len && ranges[r].begin < ranges[r - 1].end + ranges[r - 1].align)
372     *align = Max(*align, ranges[r++].align);
373   *addr = ranges[l].begin;
374   *size = ranges[r - 1].end - ranges[l].begin;
375 }
376 #endif  // !SANITIZER_GO
377 #endif  // (x86_64 || i386 || mips || ...) && (SANITIZER_FREEBSD ||
378         // SANITIZER_LINUX) && !SANITIZER_ANDROID
379 
380 #if SANITIZER_NETBSD
381 static struct tls_tcb * ThreadSelfTlsTcb() {
382   struct tls_tcb *tcb = nullptr;
383 #ifdef __HAVE___LWP_GETTCB_FAST
384   tcb = (struct tls_tcb *)__lwp_gettcb_fast();
385 #elif defined(__HAVE___LWP_GETPRIVATE_FAST)
386   tcb = (struct tls_tcb *)__lwp_getprivate_fast();
387 #endif
388   return tcb;
389 }
390 
391 uptr ThreadSelf() {
392   return (uptr)ThreadSelfTlsTcb()->tcb_pthread;
393 }
394 
395 int GetSizeFromHdr(struct dl_phdr_info *info, size_t size, void *data) {
396   const Elf_Phdr *hdr = info->dlpi_phdr;
397   const Elf_Phdr *last_hdr = hdr + info->dlpi_phnum;
398 
399   for (; hdr != last_hdr; ++hdr) {
400     if (hdr->p_type == PT_TLS && info->dlpi_tls_modid == 1) {
401       *(uptr*)data = hdr->p_memsz;
402       break;
403     }
404   }
405   return 0;
406 }
407 #endif  // SANITIZER_NETBSD
408 
409 #if SANITIZER_ANDROID
410 // Bionic provides this API since S.
411 extern "C" SANITIZER_WEAK_ATTRIBUTE void __libc_get_static_tls_bounds(void **,
412                                                                       void **);
413 #endif
414 
415 #if !SANITIZER_GO
416 static void GetTls(uptr *addr, uptr *size) {
417 #if SANITIZER_ANDROID
418   if (&__libc_get_static_tls_bounds) {
419     void *start_addr;
420     void *end_addr;
421     __libc_get_static_tls_bounds(&start_addr, &end_addr);
422     *addr = reinterpret_cast<uptr>(start_addr);
423     *size =
424         reinterpret_cast<uptr>(end_addr) - reinterpret_cast<uptr>(start_addr);
425   } else {
426     *addr = 0;
427     *size = 0;
428   }
429 #elif SANITIZER_GLIBC && defined(__x86_64__)
430   // For aarch64 and x86-64, use an O(1) approach which requires relatively
431   // precise ThreadDescriptorSize. g_tls_size was initialized in InitTlsSize.
432   asm("mov %%fs:16,%0" : "=r"(*addr));
433   *size = g_tls_size;
434   *addr -= *size;
435   *addr += ThreadDescriptorSize();
436 #elif SANITIZER_GLIBC && defined(__aarch64__)
437   *addr = reinterpret_cast<uptr>(__builtin_thread_pointer()) -
438           ThreadDescriptorSize();
439   *size = g_tls_size + ThreadDescriptorSize();
440 #elif SANITIZER_GLIBC && defined(__powerpc64__)
441   // Workaround for glibc<2.25(?). 2.27 is known to not need this.
442   uptr tp;
443   asm("addi %0,13,-0x7000" : "=r"(tp));
444   const uptr pre_tcb_size = TlsPreTcbSize();
445   *addr = tp - pre_tcb_size;
446   *size = g_tls_size + pre_tcb_size;
447 #elif SANITIZER_FREEBSD || SANITIZER_LINUX
448   uptr align;
449   GetStaticTlsBoundary(addr, size, &align);
450 #if defined(__x86_64__) || defined(__i386__) || defined(__s390__) || \
451     defined(__sparc__)
452   if (SANITIZER_GLIBC) {
453 #if defined(__x86_64__) || defined(__i386__)
454     align = Max<uptr>(align, 64);
455 #else
456     align = Max<uptr>(align, 16);
457 #endif
458   }
459   const uptr tp = RoundUpTo(*addr + *size, align);
460 
461   // lsan requires the range to additionally cover the static TLS surplus
462   // (elf/dl-tls.c defines 1664). Otherwise there may be false positives for
463   // allocations only referenced by tls in dynamically loaded modules.
464   if (SANITIZER_GLIBC)
465     *size += 1644;
466   else if (SANITIZER_FREEBSD)
467     *size += 128;  // RTLD_STATIC_TLS_EXTRA
468 
469   // Extend the range to include the thread control block. On glibc, lsan needs
470   // the range to include pthread::{specific_1stblock,specific} so that
471   // allocations only referenced by pthread_setspecific can be scanned. This may
472   // underestimate by at most TLS_TCB_ALIGN-1 bytes but it should be fine
473   // because the number of bytes after pthread::specific is larger.
474   *addr = tp - RoundUpTo(*size, align);
475   *size = tp - *addr + ThreadDescriptorSize();
476 #else
477   if (SANITIZER_GLIBC)
478     *size += 1664;
479   else if (SANITIZER_FREEBSD)
480     *size += 128;  // RTLD_STATIC_TLS_EXTRA
481 #if defined(__mips__) || defined(__powerpc64__) || SANITIZER_RISCV64
482   const uptr pre_tcb_size = TlsPreTcbSize();
483   *addr -= pre_tcb_size;
484   *size += pre_tcb_size;
485 #else
486   // arm and aarch64 reserve two words at TP, so this underestimates the range.
487   // However, this is sufficient for the purpose of finding the pointers to
488   // thread-specific data keys.
489   const uptr tcb_size = ThreadDescriptorSize();
490   *addr -= tcb_size;
491   *size += tcb_size;
492 #endif
493 #endif
494 #elif SANITIZER_NETBSD
495   struct tls_tcb * const tcb = ThreadSelfTlsTcb();
496   *addr = 0;
497   *size = 0;
498   if (tcb != 0) {
499     // Find size (p_memsz) of dlpi_tls_modid 1 (TLS block of the main program).
500     // ld.elf_so hardcodes the index 1.
501     dl_iterate_phdr(GetSizeFromHdr, size);
502 
503     if (*size != 0) {
504       // The block has been found and tcb_dtv[1] contains the base address
505       *addr = (uptr)tcb->tcb_dtv[1];
506     }
507   }
508 #elif SANITIZER_SOLARIS
509   // FIXME
510   *addr = 0;
511   *size = 0;
512 #else
513 #error "Unknown OS"
514 #endif
515 }
516 #endif
517 
518 #if !SANITIZER_GO
519 uptr GetTlsSize() {
520 #if SANITIZER_FREEBSD || SANITIZER_LINUX || SANITIZER_NETBSD || \
521     SANITIZER_SOLARIS
522   uptr addr, size;
523   GetTls(&addr, &size);
524   return size;
525 #else
526   return 0;
527 #endif
528 }
529 #endif
530 
531 void GetThreadStackAndTls(bool main, uptr *stk_addr, uptr *stk_size,
532                           uptr *tls_addr, uptr *tls_size) {
533 #if SANITIZER_GO
534   // Stub implementation for Go.
535   *stk_addr = *stk_size = *tls_addr = *tls_size = 0;
536 #else
537   GetTls(tls_addr, tls_size);
538 
539   uptr stack_top, stack_bottom;
540   GetThreadStackTopAndBottom(main, &stack_top, &stack_bottom);
541   *stk_addr = stack_bottom;
542   *stk_size = stack_top - stack_bottom;
543 
544   if (!main) {
545     // If stack and tls intersect, make them non-intersecting.
546     if (*tls_addr > *stk_addr && *tls_addr < *stk_addr + *stk_size) {
547       if (*stk_addr + *stk_size < *tls_addr + *tls_size)
548         *tls_size = *stk_addr + *stk_size - *tls_addr;
549       *stk_size = *tls_addr - *stk_addr;
550     }
551   }
552 #endif
553 }
554 
555 #if !SANITIZER_FREEBSD
556 typedef ElfW(Phdr) Elf_Phdr;
557 #elif SANITIZER_WORDSIZE == 32 && __FreeBSD_version <= 902001  // v9.2
558 #define Elf_Phdr XElf32_Phdr
559 #define dl_phdr_info xdl_phdr_info
560 #define dl_iterate_phdr(c, b) xdl_iterate_phdr((c), (b))
561 #endif  // !SANITIZER_FREEBSD
562 
563 struct DlIteratePhdrData {
564   InternalMmapVectorNoCtor<LoadedModule> *modules;
565   bool first;
566 };
567 
568 static int AddModuleSegments(const char *module_name, dl_phdr_info *info,
569                              InternalMmapVectorNoCtor<LoadedModule> *modules) {
570   if (module_name[0] == '\0')
571     return 0;
572   LoadedModule cur_module;
573   cur_module.set(module_name, info->dlpi_addr);
574   for (int i = 0; i < (int)info->dlpi_phnum; i++) {
575     const Elf_Phdr *phdr = &info->dlpi_phdr[i];
576     if (phdr->p_type == PT_LOAD) {
577       uptr cur_beg = info->dlpi_addr + phdr->p_vaddr;
578       uptr cur_end = cur_beg + phdr->p_memsz;
579       bool executable = phdr->p_flags & PF_X;
580       bool writable = phdr->p_flags & PF_W;
581       cur_module.addAddressRange(cur_beg, cur_end, executable,
582                                  writable);
583     }
584   }
585   modules->push_back(cur_module);
586   return 0;
587 }
588 
589 static int dl_iterate_phdr_cb(dl_phdr_info *info, size_t size, void *arg) {
590   DlIteratePhdrData *data = (DlIteratePhdrData *)arg;
591   if (data->first) {
592     InternalMmapVector<char> module_name(kMaxPathLength);
593     data->first = false;
594     // First module is the binary itself.
595     ReadBinaryNameCached(module_name.data(), module_name.size());
596     return AddModuleSegments(module_name.data(), info, data->modules);
597   }
598 
599   if (info->dlpi_name) {
600     InternalScopedString module_name;
601     module_name.append("%s", info->dlpi_name);
602     return AddModuleSegments(module_name.data(), info, data->modules);
603   }
604 
605   return 0;
606 }
607 
608 #if SANITIZER_ANDROID && __ANDROID_API__ < 21
609 extern "C" __attribute__((weak)) int dl_iterate_phdr(
610     int (*)(struct dl_phdr_info *, size_t, void *), void *);
611 #endif
612 
613 static bool requiresProcmaps() {
614 #if SANITIZER_ANDROID && __ANDROID_API__ <= 22
615   // Fall back to /proc/maps if dl_iterate_phdr is unavailable or broken.
616   // The runtime check allows the same library to work with
617   // both K and L (and future) Android releases.
618   return AndroidGetApiLevel() <= ANDROID_LOLLIPOP_MR1;
619 #else
620   return false;
621 #endif
622 }
623 
624 static void procmapsInit(InternalMmapVectorNoCtor<LoadedModule> *modules) {
625   MemoryMappingLayout memory_mapping(/*cache_enabled*/true);
626   memory_mapping.DumpListOfModules(modules);
627 }
628 
629 void ListOfModules::init() {
630   clearOrInit();
631   if (requiresProcmaps()) {
632     procmapsInit(&modules_);
633   } else {
634     DlIteratePhdrData data = {&modules_, true};
635     dl_iterate_phdr(dl_iterate_phdr_cb, &data);
636   }
637 }
638 
639 // When a custom loader is used, dl_iterate_phdr may not contain the full
640 // list of modules. Allow callers to fall back to using procmaps.
641 void ListOfModules::fallbackInit() {
642   if (!requiresProcmaps()) {
643     clearOrInit();
644     procmapsInit(&modules_);
645   } else {
646     clear();
647   }
648 }
649 
650 // getrusage does not give us the current RSS, only the max RSS.
651 // Still, this is better than nothing if /proc/self/statm is not available
652 // for some reason, e.g. due to a sandbox.
653 static uptr GetRSSFromGetrusage() {
654   struct rusage usage;
655   if (getrusage(RUSAGE_SELF, &usage))  // Failed, probably due to a sandbox.
656     return 0;
657   return usage.ru_maxrss << 10;  // ru_maxrss is in Kb.
658 }
659 
660 uptr GetRSS() {
661   if (!common_flags()->can_use_proc_maps_statm)
662     return GetRSSFromGetrusage();
663   fd_t fd = OpenFile("/proc/self/statm", RdOnly);
664   if (fd == kInvalidFd)
665     return GetRSSFromGetrusage();
666   char buf[64];
667   uptr len = internal_read(fd, buf, sizeof(buf) - 1);
668   internal_close(fd);
669   if ((sptr)len <= 0)
670     return 0;
671   buf[len] = 0;
672   // The format of the file is:
673   // 1084 89 69 11 0 79 0
674   // We need the second number which is RSS in pages.
675   char *pos = buf;
676   // Skip the first number.
677   while (*pos >= '0' && *pos <= '9')
678     pos++;
679   // Skip whitespaces.
680   while (!(*pos >= '0' && *pos <= '9') && *pos != 0)
681     pos++;
682   // Read the number.
683   uptr rss = 0;
684   while (*pos >= '0' && *pos <= '9')
685     rss = rss * 10 + *pos++ - '0';
686   return rss * GetPageSizeCached();
687 }
688 
689 // sysconf(_SC_NPROCESSORS_{CONF,ONLN}) cannot be used on most platforms as
690 // they allocate memory.
691 u32 GetNumberOfCPUs() {
692 #if SANITIZER_FREEBSD || SANITIZER_NETBSD
693   u32 ncpu;
694   int req[2];
695   uptr len = sizeof(ncpu);
696   req[0] = CTL_HW;
697   req[1] = HW_NCPU;
698   CHECK_EQ(internal_sysctl(req, 2, &ncpu, &len, NULL, 0), 0);
699   return ncpu;
700 #elif SANITIZER_ANDROID && !defined(CPU_COUNT) && !defined(__aarch64__)
701   // Fall back to /sys/devices/system/cpu on Android when cpu_set_t doesn't
702   // exist in sched.h. That is the case for toolchains generated with older
703   // NDKs.
704   // This code doesn't work on AArch64 because internal_getdents makes use of
705   // the 64bit getdents syscall, but cpu_set_t seems to always exist on AArch64.
706   uptr fd = internal_open("/sys/devices/system/cpu", O_RDONLY | O_DIRECTORY);
707   if (internal_iserror(fd))
708     return 0;
709   InternalMmapVector<u8> buffer(4096);
710   uptr bytes_read = buffer.size();
711   uptr n_cpus = 0;
712   u8 *d_type;
713   struct linux_dirent *entry = (struct linux_dirent *)&buffer[bytes_read];
714   while (true) {
715     if ((u8 *)entry >= &buffer[bytes_read]) {
716       bytes_read = internal_getdents(fd, (struct linux_dirent *)buffer.data(),
717                                      buffer.size());
718       if (internal_iserror(bytes_read) || !bytes_read)
719         break;
720       entry = (struct linux_dirent *)buffer.data();
721     }
722     d_type = (u8 *)entry + entry->d_reclen - 1;
723     if (d_type >= &buffer[bytes_read] ||
724         (u8 *)&entry->d_name[3] >= &buffer[bytes_read])
725       break;
726     if (entry->d_ino != 0 && *d_type == DT_DIR) {
727       if (entry->d_name[0] == 'c' && entry->d_name[1] == 'p' &&
728           entry->d_name[2] == 'u' &&
729           entry->d_name[3] >= '0' && entry->d_name[3] <= '9')
730         n_cpus++;
731     }
732     entry = (struct linux_dirent *)(((u8 *)entry) + entry->d_reclen);
733   }
734   internal_close(fd);
735   return n_cpus;
736 #elif SANITIZER_SOLARIS
737   return sysconf(_SC_NPROCESSORS_ONLN);
738 #else
739   cpu_set_t CPUs;
740   CHECK_EQ(sched_getaffinity(0, sizeof(cpu_set_t), &CPUs), 0);
741   return CPU_COUNT(&CPUs);
742 #endif
743 }
744 
745 #if SANITIZER_LINUX
746 
747 #if SANITIZER_ANDROID
748 static atomic_uint8_t android_log_initialized;
749 
750 void AndroidLogInit() {
751   openlog(GetProcessName(), 0, LOG_USER);
752   atomic_store(&android_log_initialized, 1, memory_order_release);
753 }
754 
755 static bool ShouldLogAfterPrintf() {
756   return atomic_load(&android_log_initialized, memory_order_acquire);
757 }
758 
759 extern "C" SANITIZER_WEAK_ATTRIBUTE
760 int async_safe_write_log(int pri, const char* tag, const char* msg);
761 extern "C" SANITIZER_WEAK_ATTRIBUTE
762 int __android_log_write(int prio, const char* tag, const char* msg);
763 
764 // ANDROID_LOG_INFO is 4, but can't be resolved at runtime.
765 #define SANITIZER_ANDROID_LOG_INFO 4
766 
767 // async_safe_write_log is a new public version of __libc_write_log that is
768 // used behind syslog. It is preferable to syslog as it will not do any dynamic
769 // memory allocation or formatting.
770 // If the function is not available, syslog is preferred for L+ (it was broken
771 // pre-L) as __android_log_write triggers a racey behavior with the strncpy
772 // interceptor. Fallback to __android_log_write pre-L.
773 void WriteOneLineToSyslog(const char *s) {
774   if (&async_safe_write_log) {
775     async_safe_write_log(SANITIZER_ANDROID_LOG_INFO, GetProcessName(), s);
776   } else if (AndroidGetApiLevel() > ANDROID_KITKAT) {
777     syslog(LOG_INFO, "%s", s);
778   } else {
779     CHECK(&__android_log_write);
780     __android_log_write(SANITIZER_ANDROID_LOG_INFO, nullptr, s);
781   }
782 }
783 
784 extern "C" SANITIZER_WEAK_ATTRIBUTE
785 void android_set_abort_message(const char *);
786 
787 void SetAbortMessage(const char *str) {
788   if (&android_set_abort_message)
789     android_set_abort_message(str);
790 }
791 #else
792 void AndroidLogInit() {}
793 
794 static bool ShouldLogAfterPrintf() { return true; }
795 
796 void WriteOneLineToSyslog(const char *s) { syslog(LOG_INFO, "%s", s); }
797 
798 void SetAbortMessage(const char *str) {}
799 #endif  // SANITIZER_ANDROID
800 
801 void LogMessageOnPrintf(const char *str) {
802   if (common_flags()->log_to_syslog && ShouldLogAfterPrintf())
803     WriteToSyslog(str);
804 }
805 
806 #endif  // SANITIZER_LINUX
807 
808 #if SANITIZER_GLIBC && !SANITIZER_GO
809 // glibc crashes when using clock_gettime from a preinit_array function as the
810 // vDSO function pointers haven't been initialized yet. __progname is
811 // initialized after the vDSO function pointers, so if it exists, is not null
812 // and is not empty, we can use clock_gettime.
813 extern "C" SANITIZER_WEAK_ATTRIBUTE char *__progname;
814 inline bool CanUseVDSO() { return &__progname && __progname && *__progname; }
815 
816 // MonotonicNanoTime is a timing function that can leverage the vDSO by calling
817 // clock_gettime. real_clock_gettime only exists if clock_gettime is
818 // intercepted, so define it weakly and use it if available.
819 extern "C" SANITIZER_WEAK_ATTRIBUTE
820 int real_clock_gettime(u32 clk_id, void *tp);
821 u64 MonotonicNanoTime() {
822   timespec ts;
823   if (CanUseVDSO()) {
824     if (&real_clock_gettime)
825       real_clock_gettime(CLOCK_MONOTONIC, &ts);
826     else
827       clock_gettime(CLOCK_MONOTONIC, &ts);
828   } else {
829     internal_clock_gettime(CLOCK_MONOTONIC, &ts);
830   }
831   return (u64)ts.tv_sec * (1000ULL * 1000 * 1000) + ts.tv_nsec;
832 }
833 #else
834 // Non-glibc & Go always use the regular function.
835 u64 MonotonicNanoTime() {
836   timespec ts;
837   clock_gettime(CLOCK_MONOTONIC, &ts);
838   return (u64)ts.tv_sec * (1000ULL * 1000 * 1000) + ts.tv_nsec;
839 }
840 #endif  // SANITIZER_GLIBC && !SANITIZER_GO
841 
842 void ReExec() {
843   const char *pathname = "/proc/self/exe";
844 
845 #if SANITIZER_NETBSD
846   static const int name[] = {
847       CTL_KERN,
848       KERN_PROC_ARGS,
849       -1,
850       KERN_PROC_PATHNAME,
851   };
852   char path[400];
853   uptr len;
854 
855   len = sizeof(path);
856   if (internal_sysctl(name, ARRAY_SIZE(name), path, &len, NULL, 0) != -1)
857     pathname = path;
858 #elif SANITIZER_SOLARIS
859   pathname = getexecname();
860   CHECK_NE(pathname, NULL);
861 #elif SANITIZER_USE_GETAUXVAL
862   // Calling execve with /proc/self/exe sets that as $EXEC_ORIGIN. Binaries that
863   // rely on that will fail to load shared libraries. Query AT_EXECFN instead.
864   pathname = reinterpret_cast<const char *>(getauxval(AT_EXECFN));
865 #endif
866 
867   uptr rv = internal_execve(pathname, GetArgv(), GetEnviron());
868   int rverrno;
869   CHECK_EQ(internal_iserror(rv, &rverrno), true);
870   Printf("execve failed, errno %d\n", rverrno);
871   Die();
872 }
873 
874 void UnmapFromTo(uptr from, uptr to) {
875   if (to == from)
876     return;
877   CHECK(to >= from);
878   uptr res = internal_munmap(reinterpret_cast<void *>(from), to - from);
879   if (UNLIKELY(internal_iserror(res))) {
880     Report("ERROR: %s failed to unmap 0x%zx (%zd) bytes at address %p\n",
881            SanitizerToolName, to - from, to - from, (void *)from);
882     CHECK("unable to unmap" && 0);
883   }
884 }
885 
886 uptr MapDynamicShadow(uptr shadow_size_bytes, uptr shadow_scale,
887                       uptr min_shadow_base_alignment,
888                       UNUSED uptr &high_mem_end) {
889   const uptr granularity = GetMmapGranularity();
890   const uptr alignment =
891       Max<uptr>(granularity << shadow_scale, 1ULL << min_shadow_base_alignment);
892   const uptr left_padding =
893       Max<uptr>(granularity, 1ULL << min_shadow_base_alignment);
894 
895   const uptr shadow_size = RoundUpTo(shadow_size_bytes, granularity);
896   const uptr map_size = shadow_size + left_padding + alignment;
897 
898   const uptr map_start = (uptr)MmapNoAccess(map_size);
899   CHECK_NE(map_start, ~(uptr)0);
900 
901   const uptr shadow_start = RoundUpTo(map_start + left_padding, alignment);
902 
903   UnmapFromTo(map_start, shadow_start - left_padding);
904   UnmapFromTo(shadow_start + shadow_size, map_start + map_size);
905 
906   return shadow_start;
907 }
908 
909 static uptr MmapSharedNoReserve(uptr addr, uptr size) {
910   return internal_mmap(
911       reinterpret_cast<void *>(addr), size, PROT_READ | PROT_WRITE,
912       MAP_FIXED | MAP_SHARED | MAP_ANONYMOUS | MAP_NORESERVE, -1, 0);
913 }
914 
915 static uptr MremapCreateAlias(uptr base_addr, uptr alias_addr,
916                               uptr alias_size) {
917 #if SANITIZER_LINUX
918   return internal_mremap(reinterpret_cast<void *>(base_addr), 0, alias_size,
919                          MREMAP_MAYMOVE | MREMAP_FIXED,
920                          reinterpret_cast<void *>(alias_addr));
921 #else
922   CHECK(false && "mremap is not supported outside of Linux");
923   return 0;
924 #endif
925 }
926 
927 static void CreateAliases(uptr start_addr, uptr alias_size, uptr num_aliases) {
928   uptr total_size = alias_size * num_aliases;
929   uptr mapped = MmapSharedNoReserve(start_addr, total_size);
930   CHECK_EQ(mapped, start_addr);
931 
932   for (uptr i = 1; i < num_aliases; ++i) {
933     uptr alias_addr = start_addr + i * alias_size;
934     CHECK_EQ(MremapCreateAlias(start_addr, alias_addr, alias_size), alias_addr);
935   }
936 }
937 
938 uptr MapDynamicShadowAndAliases(uptr shadow_size, uptr alias_size,
939                                 uptr num_aliases, uptr ring_buffer_size) {
940   CHECK_EQ(alias_size & (alias_size - 1), 0);
941   CHECK_EQ(num_aliases & (num_aliases - 1), 0);
942   CHECK_EQ(ring_buffer_size & (ring_buffer_size - 1), 0);
943 
944   const uptr granularity = GetMmapGranularity();
945   shadow_size = RoundUpTo(shadow_size, granularity);
946   CHECK_EQ(shadow_size & (shadow_size - 1), 0);
947 
948   const uptr alias_region_size = alias_size * num_aliases;
949   const uptr alignment =
950       2 * Max(Max(shadow_size, alias_region_size), ring_buffer_size);
951   const uptr left_padding = ring_buffer_size;
952 
953   const uptr right_size = alignment;
954   const uptr map_size = left_padding + 2 * alignment;
955 
956   const uptr map_start = reinterpret_cast<uptr>(MmapNoAccess(map_size));
957   CHECK_NE(map_start, static_cast<uptr>(-1));
958   const uptr right_start = RoundUpTo(map_start + left_padding, alignment);
959 
960   UnmapFromTo(map_start, right_start - left_padding);
961   UnmapFromTo(right_start + right_size, map_start + map_size);
962 
963   CreateAliases(right_start + right_size / 2, alias_size, num_aliases);
964 
965   return right_start;
966 }
967 
968 void InitializePlatformCommonFlags(CommonFlags *cf) {
969 #if SANITIZER_ANDROID
970   if (&__libc_get_static_tls_bounds == nullptr)
971     cf->detect_leaks = false;
972 #endif
973 }
974 
975 } // namespace __sanitizer
976 
977 #endif
978