123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143 |
- //===-- hwasan_dynamic_shadow.cpp -------------------------------*- C++ -*-===//
- //
- // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
- // See https://llvm.org/LICENSE.txt for license information.
- // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
- //
- //===----------------------------------------------------------------------===//
- ///
- /// \file
- /// This file is a part of HWAddressSanitizer. It reserves dynamic shadow memory
- /// region and handles ifunc resolver case, when necessary.
- ///
- //===----------------------------------------------------------------------===//
- #include "hwasan_dynamic_shadow.h"
- #include <elf.h>
- #include <link.h>
- #include "hwasan.h"
- #include "hwasan_mapping.h"
- #include "hwasan_thread_list.h"
- #include "sanitizer_common/sanitizer_common.h"
- #include "sanitizer_common/sanitizer_posix.h"
- // The code in this file needs to run in an unrelocated binary. It should not
- // access any external symbol, including its own non-hidden globals.
- #if SANITIZER_ANDROID
- extern "C" {
- INTERFACE_ATTRIBUTE void __hwasan_shadow();
- decltype(__hwasan_shadow)* __hwasan_premap_shadow();
- } // extern "C"
- namespace __hwasan {
- // Conservative upper limit.
- static uptr PremapShadowSize() {
- return RoundUpTo(GetMaxVirtualAddress() >> kShadowScale,
- GetMmapGranularity());
- }
- static uptr PremapShadow() {
- return MapDynamicShadow(PremapShadowSize(), kShadowScale,
- kShadowBaseAlignment, kHighMemEnd);
- }
- static bool IsPremapShadowAvailable() {
- const uptr shadow = reinterpret_cast<uptr>(&__hwasan_shadow);
- const uptr resolver = reinterpret_cast<uptr>(&__hwasan_premap_shadow);
- // shadow == resolver is how Android KitKat and older handles ifunc.
- // shadow == 0 just in case.
- return shadow != 0 && shadow != resolver;
- }
- static uptr FindPremappedShadowStart(uptr shadow_size_bytes) {
- const uptr granularity = GetMmapGranularity();
- const uptr shadow_start = reinterpret_cast<uptr>(&__hwasan_shadow);
- const uptr premap_shadow_size = PremapShadowSize();
- const uptr shadow_size = RoundUpTo(shadow_size_bytes, granularity);
- // We may have mapped too much. Release extra memory.
- UnmapFromTo(shadow_start + shadow_size, shadow_start + premap_shadow_size);
- return shadow_start;
- }
- } // namespace __hwasan
- extern "C" {
- decltype(__hwasan_shadow)* __hwasan_premap_shadow() {
- // The resolver might be called multiple times. Map the shadow just once.
- static __sanitizer::uptr shadow = 0;
- if (!shadow)
- shadow = __hwasan::PremapShadow();
- return reinterpret_cast<decltype(__hwasan_shadow)*>(shadow);
- }
- // __hwasan_shadow is a "function" that has the same address as the first byte
- // of the shadow mapping.
- INTERFACE_ATTRIBUTE __attribute__((ifunc("__hwasan_premap_shadow")))
- void __hwasan_shadow();
- extern __attribute((weak, visibility("hidden"))) ElfW(Rela) __rela_iplt_start[],
- __rela_iplt_end[];
- } // extern "C"
- namespace __hwasan {
- void InitShadowGOT() {
- // Call the ifunc resolver for __hwasan_shadow and fill in its GOT entry. This
- // needs to be done before other ifunc resolvers (which are handled by libc)
- // because a resolver might read __hwasan_shadow.
- typedef ElfW(Addr) (*ifunc_resolver_t)(void);
- for (ElfW(Rela) *r = __rela_iplt_start; r != __rela_iplt_end; ++r) {
- ElfW(Addr)* offset = reinterpret_cast<ElfW(Addr)*>(r->r_offset);
- ElfW(Addr) resolver = r->r_addend;
- if (resolver == reinterpret_cast<ElfW(Addr)>(&__hwasan_premap_shadow)) {
- *offset = reinterpret_cast<ifunc_resolver_t>(resolver)();
- break;
- }
- }
- }
- uptr FindDynamicShadowStart(uptr shadow_size_bytes) {
- if (IsPremapShadowAvailable())
- return FindPremappedShadowStart(shadow_size_bytes);
- return MapDynamicShadow(shadow_size_bytes, kShadowScale, kShadowBaseAlignment,
- kHighMemEnd);
- }
- } // namespace __hwasan
- #elif SANITIZER_FUCHSIA
- namespace __hwasan {
- void InitShadowGOT() {}
- } // namespace __hwasan
- #else
- namespace __hwasan {
- void InitShadowGOT() {}
- uptr FindDynamicShadowStart(uptr shadow_size_bytes) {
- # if defined(HWASAN_ALIASING_MODE)
- constexpr uptr kAliasSize = 1ULL << kAddressTagShift;
- constexpr uptr kNumAliases = 1ULL << kTagBits;
- return MapDynamicShadowAndAliases(shadow_size_bytes, kAliasSize, kNumAliases,
- RingBufferSize());
- # endif
- return MapDynamicShadow(shadow_size_bytes, kShadowScale, kShadowBaseAlignment,
- kHighMemEnd);
- }
- } // namespace __hwasan
- #endif // SANITIZER_ANDROID
|