| 1 | //===-- crash_handler.cpp ---------------------------------------*- C++ -*-===// |
| 2 | // |
| 3 | // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. |
| 4 | // See https://llvm.org/LICENSE.txt for license information. |
| 5 | // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception |
| 6 | // |
| 7 | //===----------------------------------------------------------------------===// |
| 8 | |
| 9 | #include "gwp_asan/common.h" |
| 10 | #include "gwp_asan/stack_trace_compressor.h" |
| 11 | |
| 12 | #include <assert.h> |
| 13 | #include <stdint.h> |
| 14 | #include <string.h> |
| 15 | |
| 16 | using AllocationMetadata = gwp_asan::AllocationMetadata; |
| 17 | using Error = gwp_asan::Error; |
| 18 | |
| 19 | #ifdef __cplusplus |
| 20 | extern "C" { |
| 21 | #endif |
| 22 | |
| 23 | bool __gwp_asan_error_is_mine(const gwp_asan::AllocatorState *State, |
| 24 | uintptr_t ErrorPtr) { |
| 25 | assert(State && "State should not be nullptr." ); |
| 26 | if (State->FailureType != Error::UNKNOWN && State->FailureAddress != 0) |
| 27 | return true; |
| 28 | |
| 29 | return ErrorPtr < State->GuardedPagePoolEnd && |
| 30 | State->GuardedPagePool <= ErrorPtr; |
| 31 | } |
| 32 | |
| 33 | uintptr_t |
| 34 | __gwp_asan_get_internal_crash_address(const gwp_asan::AllocatorState *State, |
| 35 | uintptr_t ErrorPtr) { |
| 36 | // There can be a race between internally- and externally-raised faults. The |
| 37 | // fault address from the signal handler is used to discriminate whether it's |
| 38 | // internally- or externally-raised, and the pool maintains a special page at |
| 39 | // the end of the GuardedPagePool specifically for the internally-raised |
| 40 | // faults. |
| 41 | if (ErrorPtr != State->internallyDetectedErrorFaultAddress()) |
| 42 | return 0u; |
| 43 | return State->FailureAddress; |
| 44 | } |
| 45 | |
| 46 | static const AllocationMetadata * |
| 47 | addrToMetadata(const gwp_asan::AllocatorState *State, |
| 48 | const AllocationMetadata *Metadata, uintptr_t Ptr) { |
| 49 | // Note - Similar implementation in guarded_pool_allocator.cpp. |
| 50 | return &Metadata[State->getNearestSlot(Ptr)]; |
| 51 | } |
| 52 | |
| 53 | gwp_asan::Error |
| 54 | __gwp_asan_diagnose_error(const gwp_asan::AllocatorState *State, |
| 55 | const gwp_asan::AllocationMetadata *Metadata, |
| 56 | uintptr_t ErrorPtr) { |
| 57 | if (!__gwp_asan_error_is_mine(State, ErrorPtr)) |
| 58 | return Error::UNKNOWN; |
| 59 | |
| 60 | if (State->FailureType != Error::UNKNOWN) |
| 61 | return State->FailureType; |
| 62 | |
| 63 | // Check for use-after-free. |
| 64 | if (addrToMetadata(State, Metadata, Ptr: ErrorPtr)->IsDeallocated) |
| 65 | return Error::USE_AFTER_FREE; |
| 66 | |
| 67 | // Check for buffer-overflow. Because of allocation alignment or left/right |
| 68 | // page placement, we can have buffer-overflows that don't touch a guarded |
| 69 | // page, but these are not possible to detect unless it's also a |
| 70 | // use-after-free, which is handled above. |
| 71 | if (State->isGuardPage(Ptr: ErrorPtr)) { |
| 72 | size_t Slot = State->getNearestSlot(Ptr: ErrorPtr); |
| 73 | const AllocationMetadata *SlotMeta = |
| 74 | addrToMetadata(State, Metadata, Ptr: State->slotToAddr(N: Slot)); |
| 75 | |
| 76 | // Ensure that this slot was allocated once upon a time. |
| 77 | if (!SlotMeta->Addr) |
| 78 | return Error::UNKNOWN; |
| 79 | |
| 80 | if (SlotMeta->Addr < ErrorPtr) |
| 81 | return Error::BUFFER_OVERFLOW; |
| 82 | return Error::BUFFER_UNDERFLOW; |
| 83 | } |
| 84 | |
| 85 | // If we have reached here, the error is still unknown. |
| 86 | return Error::UNKNOWN; |
| 87 | } |
| 88 | |
| 89 | const gwp_asan::AllocationMetadata * |
| 90 | __gwp_asan_get_metadata(const gwp_asan::AllocatorState *State, |
| 91 | const gwp_asan::AllocationMetadata *Metadata, |
| 92 | uintptr_t ErrorPtr) { |
| 93 | if (!__gwp_asan_error_is_mine(State, ErrorPtr)) |
| 94 | return nullptr; |
| 95 | |
| 96 | if (ErrorPtr >= State->GuardedPagePoolEnd || |
| 97 | State->GuardedPagePool > ErrorPtr) |
| 98 | return nullptr; |
| 99 | |
| 100 | const AllocationMetadata *Meta = addrToMetadata(State, Metadata, Ptr: ErrorPtr); |
| 101 | if (Meta->Addr == 0) |
| 102 | return nullptr; |
| 103 | |
| 104 | return Meta; |
| 105 | } |
| 106 | |
| 107 | uintptr_t __gwp_asan_get_allocation_address( |
| 108 | const gwp_asan::AllocationMetadata *AllocationMeta) { |
| 109 | return AllocationMeta->Addr; |
| 110 | } |
| 111 | |
| 112 | size_t __gwp_asan_get_allocation_size( |
| 113 | const gwp_asan::AllocationMetadata *AllocationMeta) { |
| 114 | return AllocationMeta->RequestedSize; |
| 115 | } |
| 116 | |
| 117 | uint64_t __gwp_asan_get_allocation_thread_id( |
| 118 | const gwp_asan::AllocationMetadata *AllocationMeta) { |
| 119 | return AllocationMeta->AllocationTrace.ThreadID; |
| 120 | } |
| 121 | |
| 122 | size_t __gwp_asan_get_allocation_trace( |
| 123 | const gwp_asan::AllocationMetadata *AllocationMeta, uintptr_t *Buffer, |
| 124 | size_t BufferLen) { |
| 125 | uintptr_t UncompressedBuffer[AllocationMetadata::kMaxTraceLengthToCollect]; |
| 126 | size_t UnpackedLength = gwp_asan::compression::unpack( |
| 127 | Packed: AllocationMeta->AllocationTrace.CompressedTrace, |
| 128 | PackedSize: AllocationMeta->AllocationTrace.TraceSize, Unpacked: UncompressedBuffer, |
| 129 | UnpackedMaxSize: AllocationMetadata::kMaxTraceLengthToCollect); |
| 130 | if (UnpackedLength < BufferLen) |
| 131 | BufferLen = UnpackedLength; |
| 132 | memcpy(dest: Buffer, src: UncompressedBuffer, n: BufferLen * sizeof(*Buffer)); |
| 133 | return UnpackedLength; |
| 134 | } |
| 135 | |
| 136 | bool __gwp_asan_is_deallocated( |
| 137 | const gwp_asan::AllocationMetadata *AllocationMeta) { |
| 138 | return AllocationMeta->IsDeallocated; |
| 139 | } |
| 140 | |
| 141 | uint64_t __gwp_asan_get_deallocation_thread_id( |
| 142 | const gwp_asan::AllocationMetadata *AllocationMeta) { |
| 143 | return AllocationMeta->DeallocationTrace.ThreadID; |
| 144 | } |
| 145 | |
| 146 | size_t __gwp_asan_get_deallocation_trace( |
| 147 | const gwp_asan::AllocationMetadata *AllocationMeta, uintptr_t *Buffer, |
| 148 | size_t BufferLen) { |
| 149 | uintptr_t UncompressedBuffer[AllocationMetadata::kMaxTraceLengthToCollect]; |
| 150 | size_t UnpackedLength = gwp_asan::compression::unpack( |
| 151 | Packed: AllocationMeta->DeallocationTrace.CompressedTrace, |
| 152 | PackedSize: AllocationMeta->DeallocationTrace.TraceSize, Unpacked: UncompressedBuffer, |
| 153 | UnpackedMaxSize: AllocationMetadata::kMaxTraceLengthToCollect); |
| 154 | if (UnpackedLength < BufferLen) |
| 155 | BufferLen = UnpackedLength; |
| 156 | memcpy(dest: Buffer, src: UncompressedBuffer, n: BufferLen * sizeof(*Buffer)); |
| 157 | return UnpackedLength; |
| 158 | } |
| 159 | |
| 160 | #ifdef __cplusplus |
| 161 | } // extern "C" |
| 162 | #endif |
| 163 | |