123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277 |
- //===-- msan_report.cpp ---------------------------------------------------===//
- //
- // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
- // See https://llvm.org/LICENSE.txt for license information.
- // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
- //
- //===----------------------------------------------------------------------===//
- //
- // This file is a part of MemorySanitizer.
- //
- // Error reporting.
- //===----------------------------------------------------------------------===//
- #include "msan.h"
- #include "msan_chained_origin_depot.h"
- #include "msan_origin.h"
- #include "msan_report.h"
- #include "sanitizer_common/sanitizer_allocator_internal.h"
- #include "sanitizer_common/sanitizer_common.h"
- #include "sanitizer_common/sanitizer_flags.h"
- #include "sanitizer_common/sanitizer_mutex.h"
- #include "sanitizer_common/sanitizer_report_decorator.h"
- #include "sanitizer_common/sanitizer_stackdepot.h"
- #include "sanitizer_common/sanitizer_symbolizer.h"
- using namespace __sanitizer;
- namespace __msan {
- class Decorator: public __sanitizer::SanitizerCommonDecorator {
- public:
- Decorator() : SanitizerCommonDecorator() { }
- const char *Origin() const { return Magenta(); }
- const char *Name() const { return Green(); }
- };
- static void DescribeStackOrigin(const char *so, uptr pc) {
- Decorator d;
- char *s = internal_strdup(so);
- char *sep = internal_strchr(s, '@');
- CHECK(sep);
- *sep = '\0';
- Printf("%s", d.Origin());
- Printf(
- " %sUninitialized value was created by an allocation of '%s%s%s'"
- " in the stack frame of function '%s%s%s'%s\n",
- d.Origin(), d.Name(), s, d.Origin(), d.Name(), sep + 1, d.Origin(),
- d.Default());
- InternalFree(s);
- if (pc) {
- // For some reason function address in LLVM IR is 1 less then the address
- // of the first instruction.
- pc = StackTrace::GetNextInstructionPc(pc);
- StackTrace(&pc, 1).Print();
- }
- }
- static void DescribeOrigin(u32 id) {
- VPrintf(1, " raw origin id: %d\n", id);
- Decorator d;
- Origin o = Origin::FromRawId(id);
- while (o.isChainedOrigin()) {
- StackTrace stack;
- o = o.getNextChainedOrigin(&stack);
- Printf(" %sUninitialized value was stored to memory at%s\n", d.Origin(),
- d.Default());
- stack.Print();
- }
- if (o.isStackOrigin()) {
- uptr pc;
- const char *so = GetStackOriginDescr(o.getStackId(), &pc);
- DescribeStackOrigin(so, pc);
- } else {
- StackTrace stack = o.getStackTraceForHeapOrigin();
- switch (stack.tag) {
- case StackTrace::TAG_ALLOC:
- Printf(" %sUninitialized value was created by a heap allocation%s\n",
- d.Origin(), d.Default());
- break;
- case StackTrace::TAG_DEALLOC:
- Printf(" %sUninitialized value was created by a heap deallocation%s\n",
- d.Origin(), d.Default());
- break;
- case STACK_TRACE_TAG_POISON:
- Printf(" %sMemory was marked as uninitialized%s\n", d.Origin(),
- d.Default());
- break;
- default:
- Printf(" %sUninitialized value was created%s\n", d.Origin(),
- d.Default());
- break;
- }
- stack.Print();
- }
- }
- void ReportUMR(StackTrace *stack, u32 origin) {
- if (!__msan::flags()->report_umrs) return;
- ScopedErrorReportLock l;
- Decorator d;
- Printf("%s", d.Warning());
- Report("WARNING: MemorySanitizer: use-of-uninitialized-value\n");
- Printf("%s", d.Default());
- stack->Print();
- if (origin) {
- DescribeOrigin(origin);
- }
- ReportErrorSummary("use-of-uninitialized-value", stack);
- }
- void ReportExpectedUMRNotFound(StackTrace *stack) {
- ScopedErrorReportLock l;
- Printf("WARNING: Expected use of uninitialized value not found\n");
- stack->Print();
- }
- void ReportStats() {
- ScopedErrorReportLock l;
- if (__msan_get_track_origins() > 0) {
- StackDepotStats stack_depot_stats = StackDepotGetStats();
- // FIXME: we want this at normal exit, too!
- // FIXME: but only with verbosity=1 or something
- Printf("Unique heap origins: %zu\n", stack_depot_stats.n_uniq_ids);
- Printf("Stack depot allocated bytes: %zu\n", stack_depot_stats.allocated);
- StackDepotStats chained_origin_depot_stats = ChainedOriginDepotGetStats();
- Printf("Unique origin histories: %zu\n",
- chained_origin_depot_stats.n_uniq_ids);
- Printf("History depot allocated bytes: %zu\n",
- chained_origin_depot_stats.allocated);
- }
- }
- void ReportAtExitStatistics() {
- ScopedErrorReportLock l;
- if (msan_report_count > 0) {
- Decorator d;
- Printf("%s", d.Warning());
- Printf("MemorySanitizer: %d warnings reported.\n", msan_report_count);
- Printf("%s", d.Default());
- }
- }
- class OriginSet {
- public:
- OriginSet() : next_id_(0) {}
- int insert(u32 o) {
- // Scan from the end for better locality.
- for (int i = next_id_ - 1; i >= 0; --i)
- if (origins_[i] == o) return i;
- if (next_id_ == kMaxSize_) return OVERFLOW;
- int id = next_id_++;
- origins_[id] = o;
- return id;
- }
- int size() { return next_id_; }
- u32 get(int id) { return origins_[id]; }
- static char asChar(int id) {
- switch (id) {
- case MISSING:
- return '.';
- case OVERFLOW:
- return '*';
- default:
- return 'A' + id;
- }
- }
- static const int OVERFLOW = -1;
- static const int MISSING = -2;
- private:
- static const int kMaxSize_ = 'Z' - 'A' + 1;
- u32 origins_[kMaxSize_];
- int next_id_;
- };
- void DescribeMemoryRange(const void *x, uptr size) {
- // Real limits.
- uptr start = MEM_TO_SHADOW(x);
- uptr end = start + size;
- // Scan limits: align start down to 4; align size up to 16.
- uptr s = start & ~3UL;
- size = end - s;
- size = (size + 15) & ~15UL;
- uptr e = s + size;
- // Single letter names to origin id mapping.
- OriginSet origin_set;
- uptr pos = 0; // Offset from aligned start.
- bool with_origins = __msan_get_track_origins();
- // True if there is at least 1 poisoned bit in the last 4-byte group.
- bool last_quad_poisoned;
- int origin_ids[4]; // Single letter origin ids for the current line.
- Decorator d;
- Printf("%s", d.Warning());
- uptr start_x = reinterpret_cast<uptr>(x);
- Printf("Shadow map [%p, %p) of [%p, %p), %zu bytes:\n",
- reinterpret_cast<void *>(start), reinterpret_cast<void *>(end),
- reinterpret_cast<void *>(start_x),
- reinterpret_cast<void *>(start_x + end - start), end - start);
- Printf("%s", d.Default());
- while (s < e) {
- // Line start.
- if (pos % 16 == 0) {
- for (int i = 0; i < 4; ++i) origin_ids[i] = -1;
- Printf("%p[%p]:", reinterpret_cast<void *>(s),
- reinterpret_cast<void *>(start_x - start + s));
- }
- // Group start.
- if (pos % 4 == 0) {
- Printf(" ");
- last_quad_poisoned = false;
- }
- // Print shadow byte.
- if (s < start || s >= end) {
- Printf("..");
- } else {
- unsigned char v = *(unsigned char *)s;
- if (v) last_quad_poisoned = true;
- Printf("%x%x", v >> 4, v & 0xf);
- }
- // Group end.
- if (pos % 4 == 3 && with_origins) {
- int id = OriginSet::MISSING;
- if (last_quad_poisoned) {
- u32 o = *(u32 *)SHADOW_TO_ORIGIN(s - 3);
- id = origin_set.insert(o);
- }
- origin_ids[(pos % 16) / 4] = id;
- }
- // Line end.
- if (pos % 16 == 15) {
- if (with_origins) {
- Printf(" |");
- for (int i = 0; i < 4; ++i) {
- char c = OriginSet::asChar(origin_ids[i]);
- Printf("%c", c);
- if (i != 3) Printf(" ");
- }
- Printf("|");
- }
- Printf("\n");
- }
- size--;
- s++;
- pos++;
- }
- Printf("\n");
- for (int i = 0; i < origin_set.size(); ++i) {
- u32 o = origin_set.get(i);
- Printf("Origin %c (origin_id %x):\n", OriginSet::asChar(i), o);
- DescribeOrigin(o);
- }
- }
- void ReportUMRInsideAddressRange(const char *what, const void *start, uptr size,
- uptr offset) {
- Decorator d;
- Printf("%s", d.Warning());
- Printf("%sUninitialized bytes in %s%s%s at offset %zu inside [%p, %zu)%s\n",
- d.Warning(), d.Name(), what, d.Warning(), offset, start, size,
- d.Default());
- if (__sanitizer::Verbosity())
- DescribeMemoryRange(start, size);
- }
- } // namespace __msan
|