//===-- sanitizer_symbolizer_report.cc ------------------------------------===// // // The LLVM Compiler Infrastructure // // This file is distributed under the University of Illinois Open Source // License. See LICENSE.TXT for details. // //===----------------------------------------------------------------------===// /// /// This file is shared between AddressSanitizer and other sanitizer run-time /// libraries and implements symbolized reports related functions. /// //===----------------------------------------------------------------------===// #include "sanitizer_common.h" #include "sanitizer_file.h" #include "sanitizer_flags.h" #include "sanitizer_procmaps.h" #include "sanitizer_report_decorator.h" #include "sanitizer_stacktrace.h" #include "sanitizer_stacktrace_printer.h" #include "sanitizer_symbolizer.h" #if SANITIZER_POSIX # include "sanitizer_posix.h" # include #endif namespace __sanitizer { #if !SANITIZER_GO void ReportErrorSummary(const char *error_type, const AddressInfo &info, const char *alt_tool_name) { if (!common_flags()->print_summary) return; InternalScopedString buff(kMaxSummaryLength); buff.append("%s ", error_type); RenderFrame(&buff, "%L %F", 0, info, common_flags()->symbolize_vs_style, common_flags()->strip_path_prefix); ReportErrorSummary(buff.data(), alt_tool_name); } #endif #if !SANITIZER_FUCHSIA bool ReportFile::SupportsColors() { SpinMutexLock l(mu); ReopenIfNecessary(); return SupportsColoredOutput(fd); } static INLINE bool ReportSupportsColors() { return report_file.SupportsColors(); } #else // SANITIZER_FUCHSIA // Fuchsia's logs always go through post-processing that handles colorization. static INLINE bool ReportSupportsColors() { return true; } #endif // !SANITIZER_FUCHSIA bool ColorizeReports() { // FIXME: Add proper Windows support to AnsiColorDecorator and re-enable color // printing on Windows. if (SANITIZER_WINDOWS) return false; const char *flag = common_flags()->color; return internal_strcmp(flag, "always") == 0 || (internal_strcmp(flag, "auto") == 0 && ReportSupportsColors()); } void ReportErrorSummary(const char *error_type, const StackTrace *stack, const char *alt_tool_name) { #if !SANITIZER_GO if (!common_flags()->print_summary) return; if (stack->size == 0) { ReportErrorSummary(error_type); return; } // Currently, we include the first stack frame into the report summary. // Maybe sometimes we need to choose another frame (e.g. skip memcpy/etc). uptr pc = StackTrace::GetPreviousInstructionPc(stack->trace[0]); SymbolizedStack *frame = Symbolizer::GetOrInit()->SymbolizePC(pc); ReportErrorSummary(error_type, frame->info, alt_tool_name); frame->ClearAll(); #endif } void ReportMmapWriteExec(int prot) { #if SANITIZER_POSIX && (!SANITIZER_GO && !SANITIZER_ANDROID) if ((prot & (PROT_WRITE | PROT_EXEC)) != (PROT_WRITE | PROT_EXEC)) return; ScopedErrorReportLock l; SanitizerCommonDecorator d; InternalMmapVector stack_buffer(1); BufferedStackTrace *stack = stack_buffer.data(); stack->Reset(); uptr top = 0; uptr bottom = 0; GET_CALLER_PC_BP_SP; (void)sp; bool fast = common_flags()->fast_unwind_on_fatal; if (fast) GetThreadStackTopAndBottom(false, &top, &bottom); stack->Unwind(kStackTraceMax, pc, bp, nullptr, top, bottom, fast); Printf("%s", d.Warning()); Report("WARNING: %s: writable-executable page usage\n", SanitizerToolName); Printf("%s", d.Default()); stack->Print(); ReportErrorSummary("w-and-x-usage", stack); #endif } #if !SANITIZER_FUCHSIA && !SANITIZER_RTEMS && !SANITIZER_GO void StartReportDeadlySignal() { // Write the first message using fd=2, just in case. // It may actually fail to write in case stderr is closed. CatastrophicErrorWrite(SanitizerToolName, internal_strlen(SanitizerToolName)); static const char kDeadlySignal[] = ":DEADLYSIGNAL\n"; CatastrophicErrorWrite(kDeadlySignal, sizeof(kDeadlySignal) - 1); } static void MaybeReportNonExecRegion(uptr pc) { #if SANITIZER_FREEBSD || SANITIZER_LINUX || SANITIZER_NETBSD MemoryMappingLayout proc_maps(/*cache_enabled*/ true); MemoryMappedSegment segment; while (proc_maps.Next(&segment)) { if (pc >= segment.start && pc < segment.end && !segment.IsExecutable()) Report("Hint: PC is at a non-executable region. Maybe a wild jump?\n"); } #endif } static void PrintMemoryByte(InternalScopedString *str, const char *before, u8 byte) { SanitizerCommonDecorator d; str->append("%s%s%x%x%s ", before, d.MemoryByte(), byte >> 4, byte & 15, d.Default()); } static void MaybeDumpInstructionBytes(uptr pc) { if (!common_flags()->dump_instruction_bytes || (pc < GetPageSizeCached())) return; InternalScopedString str(1024); str.append("First 16 instruction bytes at pc: "); if (IsAccessibleMemoryRange(pc, 16)) { for (int i = 0; i < 16; ++i) { PrintMemoryByte(&str, "", ((u8 *)pc)[i]); } str.append("\n"); } else { str.append("unaccessible\n"); } Report("%s", str.data()); } static void MaybeDumpRegisters(void *context) { if (!common_flags()->dump_registers) return; SignalContext::DumpAllRegisters(context); } static void ReportStackOverflowImpl(const SignalContext &sig, u32 tid, UnwindSignalStackCallbackType unwind, const void *unwind_context) { SanitizerCommonDecorator d; Printf("%s", d.Warning()); static const char kDescription[] = "stack-overflow"; Report("ERROR: %s: %s on address %p (pc %p bp %p sp %p T%d)\n", SanitizerToolName, kDescription, (void *)sig.addr, (void *)sig.pc, (void *)sig.bp, (void *)sig.sp, tid); Printf("%s", d.Default()); InternalMmapVector stack_buffer(1); BufferedStackTrace *stack = stack_buffer.data(); stack->Reset(); unwind(sig, unwind_context, stack); stack->Print(); ReportErrorSummary(kDescription, stack); } static void ReportDeadlySignalImpl(const SignalContext &sig, u32 tid, UnwindSignalStackCallbackType unwind, const void *unwind_context) { SanitizerCommonDecorator d; Printf("%s", d.Warning()); const char *description = sig.Describe(); Report("ERROR: %s: %s on unknown address %p (pc %p bp %p sp %p T%d)\n", SanitizerToolName, description, (void *)sig.addr, (void *)sig.pc, (void *)sig.bp, (void *)sig.sp, tid); Printf("%s", d.Default()); if (sig.pc < GetPageSizeCached()) Report("Hint: pc points to the zero page.\n"); if (sig.is_memory_access) { const char *access_type = sig.write_flag == SignalContext::WRITE ? "WRITE" : (sig.write_flag == SignalContext::READ ? "READ" : "UNKNOWN"); Report("The signal is caused by a %s memory access.\n", access_type); if (sig.addr < GetPageSizeCached()) Report("Hint: address points to the zero page.\n"); } MaybeReportNonExecRegion(sig.pc); InternalMmapVector stack_buffer(1); BufferedStackTrace *stack = stack_buffer.data(); stack->Reset(); unwind(sig, unwind_context, stack); stack->Print(); MaybeDumpInstructionBytes(sig.pc); MaybeDumpRegisters(sig.context); Printf("%s can not provide additional info.\n", SanitizerToolName); ReportErrorSummary(description, stack); } void ReportDeadlySignal(const SignalContext &sig, u32 tid, UnwindSignalStackCallbackType unwind, const void *unwind_context) { if (sig.IsStackOverflow()) ReportStackOverflowImpl(sig, tid, unwind, unwind_context); else ReportDeadlySignalImpl(sig, tid, unwind, unwind_context); } void HandleDeadlySignal(void *siginfo, void *context, u32 tid, UnwindSignalStackCallbackType unwind, const void *unwind_context) { StartReportDeadlySignal(); ScopedErrorReportLock rl; SignalContext sig(siginfo, context); ReportDeadlySignal(sig, tid, unwind, unwind_context); Report("ABORTING\n"); Die(); } #endif // !SANITIZER_FUCHSIA && !SANITIZER_GO static atomic_uintptr_t reporting_thread = {0}; static StaticSpinMutex CommonSanitizerReportMutex; ScopedErrorReportLock::ScopedErrorReportLock() { uptr current = GetThreadSelf(); for (;;) { uptr expected = 0; if (atomic_compare_exchange_strong(&reporting_thread, &expected, current, memory_order_relaxed)) { // We've claimed reporting_thread so proceed. CommonSanitizerReportMutex.Lock(); return; } if (expected == current) { // This is either asynch signal or nested error during error reporting. // Fail simple to avoid deadlocks in Report(). // Can't use Report() here because of potential deadlocks in nested // signal handlers. CatastrophicErrorWrite(SanitizerToolName, internal_strlen(SanitizerToolName)); static const char msg[] = ": nested bug in the same thread, aborting.\n"; CatastrophicErrorWrite(msg, sizeof(msg) - 1); internal__exit(common_flags()->exitcode); } internal_sched_yield(); } } ScopedErrorReportLock::~ScopedErrorReportLock() { CommonSanitizerReportMutex.Unlock(); atomic_store_relaxed(&reporting_thread, 0); } void ScopedErrorReportLock::CheckLocked() { CommonSanitizerReportMutex.CheckLocked(); } } // namespace __sanitizer