168d75effSDimitry Andric //===-- fuchsia.cpp ---------------------------------------------*- C++ -*-===// 268d75effSDimitry Andric // 368d75effSDimitry Andric // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. 468d75effSDimitry Andric // See https://llvm.org/LICENSE.txt for license information. 568d75effSDimitry Andric // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception 668d75effSDimitry Andric // 768d75effSDimitry Andric //===----------------------------------------------------------------------===// 868d75effSDimitry Andric 968d75effSDimitry Andric #include "platform.h" 1068d75effSDimitry Andric 1168d75effSDimitry Andric #if SCUDO_FUCHSIA 1268d75effSDimitry Andric 1368d75effSDimitry Andric #include "common.h" 1468d75effSDimitry Andric #include "mutex.h" 1568d75effSDimitry Andric #include "string_utils.h" 1668d75effSDimitry Andric 1768d75effSDimitry Andric #include <lib/sync/mutex.h> // for sync_mutex_t 1868d75effSDimitry Andric #include <stdlib.h> // for getenv() 1968d75effSDimitry Andric #include <zircon/compiler.h> 2081ad6265SDimitry Andric #include <zircon/process.h> 2168d75effSDimitry Andric #include <zircon/sanitizer.h> 2268d75effSDimitry Andric #include <zircon/syscalls.h> 2368d75effSDimitry Andric 2468d75effSDimitry Andric namespace scudo { 2568d75effSDimitry Andric 26fe6060f1SDimitry Andric uptr getPageSize() { return _zx_system_get_page_size(); } 2768d75effSDimitry Andric 2868d75effSDimitry Andric void NORETURN die() { __builtin_trap(); } 2968d75effSDimitry Andric 3068d75effSDimitry Andric // We zero-initialize the Extra parameter of map(), make sure this is consistent 3168d75effSDimitry Andric // with ZX_HANDLE_INVALID. 32480093f4SDimitry Andric static_assert(ZX_HANDLE_INVALID == 0, ""); 3368d75effSDimitry Andric 3468d75effSDimitry Andric static void *allocateVmar(uptr Size, MapPlatformData *Data, bool AllowNoMem) { 3568d75effSDimitry Andric // Only scenario so far. 3668d75effSDimitry Andric DCHECK(Data); 3768d75effSDimitry Andric DCHECK_EQ(Data->Vmar, ZX_HANDLE_INVALID); 3868d75effSDimitry Andric 3968d75effSDimitry Andric const zx_status_t Status = _zx_vmar_allocate( 4068d75effSDimitry Andric _zx_vmar_root_self(), 4168d75effSDimitry Andric ZX_VM_CAN_MAP_READ | ZX_VM_CAN_MAP_WRITE | ZX_VM_CAN_MAP_SPECIFIC, 0, 4268d75effSDimitry Andric Size, &Data->Vmar, &Data->VmarBase); 4368d75effSDimitry Andric if (UNLIKELY(Status != ZX_OK)) { 4468d75effSDimitry Andric if (Status != ZX_ERR_NO_MEMORY || !AllowNoMem) 45fe6060f1SDimitry Andric dieOnMapUnmapError(Status == ZX_ERR_NO_MEMORY ? Size : 0); 4668d75effSDimitry Andric return nullptr; 4768d75effSDimitry Andric } 4868d75effSDimitry Andric return reinterpret_cast<void *>(Data->VmarBase); 4968d75effSDimitry Andric } 5068d75effSDimitry Andric 5168d75effSDimitry Andric void *map(void *Addr, uptr Size, const char *Name, uptr Flags, 5268d75effSDimitry Andric MapPlatformData *Data) { 53fe6060f1SDimitry Andric DCHECK_EQ(Size % getPageSizeCached(), 0); 5468d75effSDimitry Andric const bool AllowNoMem = !!(Flags & MAP_ALLOWNOMEM); 5568d75effSDimitry Andric 5668d75effSDimitry Andric // For MAP_NOACCESS, just allocate a Vmar and return. 5768d75effSDimitry Andric if (Flags & MAP_NOACCESS) 5868d75effSDimitry Andric return allocateVmar(Size, Data, AllowNoMem); 5968d75effSDimitry Andric 60753f127fSDimitry Andric const zx_handle_t Vmar = (Data && Data->Vmar != ZX_HANDLE_INVALID) 61753f127fSDimitry Andric ? Data->Vmar 62753f127fSDimitry Andric : _zx_vmar_root_self(); 6368d75effSDimitry Andric 6468d75effSDimitry Andric zx_status_t Status; 6568d75effSDimitry Andric zx_handle_t Vmo; 6668d75effSDimitry Andric uint64_t VmoSize = 0; 6768d75effSDimitry Andric if (Data && Data->Vmo != ZX_HANDLE_INVALID) { 6868d75effSDimitry Andric // If a Vmo was specified, it's a resize operation. 6968d75effSDimitry Andric CHECK(Addr); 7068d75effSDimitry Andric DCHECK(Flags & MAP_RESIZABLE); 7168d75effSDimitry Andric Vmo = Data->Vmo; 7268d75effSDimitry Andric VmoSize = Data->VmoSize; 7368d75effSDimitry Andric Status = _zx_vmo_set_size(Vmo, VmoSize + Size); 7468d75effSDimitry Andric if (Status != ZX_OK) { 7568d75effSDimitry Andric if (Status != ZX_ERR_NO_MEMORY || !AllowNoMem) 76fe6060f1SDimitry Andric dieOnMapUnmapError(Status == ZX_ERR_NO_MEMORY ? Size : 0); 7768d75effSDimitry Andric return nullptr; 7868d75effSDimitry Andric } 7968d75effSDimitry Andric } else { 8068d75effSDimitry Andric // Otherwise, create a Vmo and set its name. 8168d75effSDimitry Andric Status = _zx_vmo_create(Size, ZX_VMO_RESIZABLE, &Vmo); 8268d75effSDimitry Andric if (UNLIKELY(Status != ZX_OK)) { 8368d75effSDimitry Andric if (Status != ZX_ERR_NO_MEMORY || !AllowNoMem) 84fe6060f1SDimitry Andric dieOnMapUnmapError(Status == ZX_ERR_NO_MEMORY ? Size : 0); 8568d75effSDimitry Andric return nullptr; 8668d75effSDimitry Andric } 8768d75effSDimitry Andric _zx_object_set_property(Vmo, ZX_PROP_NAME, Name, strlen(Name)); 8868d75effSDimitry Andric } 8968d75effSDimitry Andric 9068d75effSDimitry Andric uintptr_t P; 9168d75effSDimitry Andric zx_vm_option_t MapFlags = 9268d75effSDimitry Andric ZX_VM_PERM_READ | ZX_VM_PERM_WRITE | ZX_VM_ALLOW_FAULTS; 9381ad6265SDimitry Andric if (Addr) 9481ad6265SDimitry Andric DCHECK(Data); 9568d75effSDimitry Andric const uint64_t Offset = 9668d75effSDimitry Andric Addr ? reinterpret_cast<uintptr_t>(Addr) - Data->VmarBase : 0; 9768d75effSDimitry Andric if (Offset) 9868d75effSDimitry Andric MapFlags |= ZX_VM_SPECIFIC; 9968d75effSDimitry Andric Status = _zx_vmar_map(Vmar, MapFlags, Offset, Vmo, VmoSize, Size, &P); 100*bdd1243dSDimitry Andric if (UNLIKELY(Status != ZX_OK)) { 101*bdd1243dSDimitry Andric if (Status != ZX_ERR_NO_MEMORY || !AllowNoMem) 102*bdd1243dSDimitry Andric dieOnMapUnmapError(Status == ZX_ERR_NO_MEMORY ? Size : 0); 103*bdd1243dSDimitry Andric return nullptr; 104*bdd1243dSDimitry Andric } 105*bdd1243dSDimitry Andric 106*bdd1243dSDimitry Andric if (Flags & MAP_PRECOMMIT) { 107*bdd1243dSDimitry Andric Status = _zx_vmar_op_range(Vmar, ZX_VMAR_OP_COMMIT, P, Size, 108*bdd1243dSDimitry Andric /*buffer=*/nullptr, /*buffer_size=*/0); 109*bdd1243dSDimitry Andric } 110*bdd1243dSDimitry Andric 11168d75effSDimitry Andric // No need to track the Vmo if we don't intend on resizing it. Close it. 11268d75effSDimitry Andric if (Flags & MAP_RESIZABLE) { 11368d75effSDimitry Andric DCHECK(Data); 114fe6060f1SDimitry Andric if (Data->Vmo == ZX_HANDLE_INVALID) 11568d75effSDimitry Andric Data->Vmo = Vmo; 116fe6060f1SDimitry Andric else 117fe6060f1SDimitry Andric DCHECK_EQ(Data->Vmo, Vmo); 11868d75effSDimitry Andric } else { 11968d75effSDimitry Andric CHECK_EQ(_zx_handle_close(Vmo), ZX_OK); 12068d75effSDimitry Andric } 12168d75effSDimitry Andric if (UNLIKELY(Status != ZX_OK)) { 12268d75effSDimitry Andric if (Status != ZX_ERR_NO_MEMORY || !AllowNoMem) 123fe6060f1SDimitry Andric dieOnMapUnmapError(Status == ZX_ERR_NO_MEMORY ? Size : 0); 12468d75effSDimitry Andric return nullptr; 12568d75effSDimitry Andric } 126*bdd1243dSDimitry Andric 12768d75effSDimitry Andric if (Data) 12868d75effSDimitry Andric Data->VmoSize += Size; 12968d75effSDimitry Andric 13068d75effSDimitry Andric return reinterpret_cast<void *>(P); 13168d75effSDimitry Andric } 13268d75effSDimitry Andric 13368d75effSDimitry Andric void unmap(void *Addr, uptr Size, uptr Flags, MapPlatformData *Data) { 13468d75effSDimitry Andric if (Flags & UNMAP_ALL) { 13568d75effSDimitry Andric DCHECK_NE(Data, nullptr); 13668d75effSDimitry Andric const zx_handle_t Vmar = Data->Vmar; 13768d75effSDimitry Andric DCHECK_NE(Vmar, _zx_vmar_root_self()); 13868d75effSDimitry Andric // Destroying the vmar effectively unmaps the whole mapping. 13968d75effSDimitry Andric CHECK_EQ(_zx_vmar_destroy(Vmar), ZX_OK); 14068d75effSDimitry Andric CHECK_EQ(_zx_handle_close(Vmar), ZX_OK); 14168d75effSDimitry Andric } else { 142753f127fSDimitry Andric const zx_handle_t Vmar = (Data && Data->Vmar != ZX_HANDLE_INVALID) 143753f127fSDimitry Andric ? Data->Vmar 144753f127fSDimitry Andric : _zx_vmar_root_self(); 14568d75effSDimitry Andric const zx_status_t Status = 14668d75effSDimitry Andric _zx_vmar_unmap(Vmar, reinterpret_cast<uintptr_t>(Addr), Size); 14768d75effSDimitry Andric if (UNLIKELY(Status != ZX_OK)) 14868d75effSDimitry Andric dieOnMapUnmapError(); 14968d75effSDimitry Andric } 15068d75effSDimitry Andric if (Data) { 15168d75effSDimitry Andric if (Data->Vmo != ZX_HANDLE_INVALID) 15268d75effSDimitry Andric CHECK_EQ(_zx_handle_close(Data->Vmo), ZX_OK); 15368d75effSDimitry Andric memset(Data, 0, sizeof(*Data)); 15468d75effSDimitry Andric } 15568d75effSDimitry Andric } 15668d75effSDimitry Andric 157fe6060f1SDimitry Andric void setMemoryPermission(UNUSED uptr Addr, UNUSED uptr Size, UNUSED uptr Flags, 158fe6060f1SDimitry Andric UNUSED MapPlatformData *Data) { 159fe6060f1SDimitry Andric const zx_vm_option_t Prot = 160fe6060f1SDimitry Andric (Flags & MAP_NOACCESS) ? 0 : (ZX_VM_PERM_READ | ZX_VM_PERM_WRITE); 161fe6060f1SDimitry Andric DCHECK(Data); 162fe6060f1SDimitry Andric DCHECK_NE(Data->Vmar, ZX_HANDLE_INVALID); 163fe6060f1SDimitry Andric if (_zx_vmar_protect(Data->Vmar, Prot, Addr, Size) != ZX_OK) 164fe6060f1SDimitry Andric dieOnMapUnmapError(); 165fe6060f1SDimitry Andric } 166fe6060f1SDimitry Andric 16768d75effSDimitry Andric void releasePagesToOS(UNUSED uptr BaseAddress, uptr Offset, uptr Size, 16868d75effSDimitry Andric MapPlatformData *Data) { 16968d75effSDimitry Andric DCHECK(Data); 17068d75effSDimitry Andric DCHECK_NE(Data->Vmar, ZX_HANDLE_INVALID); 17168d75effSDimitry Andric DCHECK_NE(Data->Vmo, ZX_HANDLE_INVALID); 17268d75effSDimitry Andric const zx_status_t Status = 17368d75effSDimitry Andric _zx_vmo_op_range(Data->Vmo, ZX_VMO_OP_DECOMMIT, Offset, Size, NULL, 0); 17468d75effSDimitry Andric CHECK_EQ(Status, ZX_OK); 17568d75effSDimitry Andric } 17668d75effSDimitry Andric 17768d75effSDimitry Andric const char *getEnv(const char *Name) { return getenv(Name); } 17868d75effSDimitry Andric 17968d75effSDimitry Andric // Note: we need to flag these methods with __TA_NO_THREAD_SAFETY_ANALYSIS 18068d75effSDimitry Andric // because the Fuchsia implementation of sync_mutex_t has clang thread safety 18168d75effSDimitry Andric // annotations. Were we to apply proper capability annotations to the top level 18268d75effSDimitry Andric // HybridMutex class itself, they would not be needed. As it stands, the 18368d75effSDimitry Andric // thread analysis thinks that we are locking the mutex and accidentally leaving 18468d75effSDimitry Andric // it locked on the way out. 18568d75effSDimitry Andric bool HybridMutex::tryLock() __TA_NO_THREAD_SAFETY_ANALYSIS { 18668d75effSDimitry Andric // Size and alignment must be compatible between both types. 18768d75effSDimitry Andric return sync_mutex_trylock(&M) == ZX_OK; 18868d75effSDimitry Andric } 18968d75effSDimitry Andric 19068d75effSDimitry Andric void HybridMutex::lockSlow() __TA_NO_THREAD_SAFETY_ANALYSIS { 19168d75effSDimitry Andric sync_mutex_lock(&M); 19268d75effSDimitry Andric } 19368d75effSDimitry Andric 19468d75effSDimitry Andric void HybridMutex::unlock() __TA_NO_THREAD_SAFETY_ANALYSIS { 19568d75effSDimitry Andric sync_mutex_unlock(&M); 19668d75effSDimitry Andric } 19768d75effSDimitry Andric 19868d75effSDimitry Andric u64 getMonotonicTime() { return _zx_clock_get_monotonic(); } 19968d75effSDimitry Andric 20068d75effSDimitry Andric u32 getNumberOfCPUs() { return _zx_system_get_num_cpus(); } 20168d75effSDimitry Andric 2025ffd83dbSDimitry Andric u32 getThreadID() { return 0; } 2035ffd83dbSDimitry Andric 20468d75effSDimitry Andric bool getRandom(void *Buffer, uptr Length, UNUSED bool Blocking) { 205480093f4SDimitry Andric static_assert(MaxRandomLength <= ZX_CPRNG_DRAW_MAX_LEN, ""); 20668d75effSDimitry Andric if (UNLIKELY(!Buffer || !Length || Length > MaxRandomLength)) 20768d75effSDimitry Andric return false; 20868d75effSDimitry Andric _zx_cprng_draw(Buffer, Length); 20968d75effSDimitry Andric return true; 21068d75effSDimitry Andric } 21168d75effSDimitry Andric 21268d75effSDimitry Andric void outputRaw(const char *Buffer) { 21368d75effSDimitry Andric __sanitizer_log_write(Buffer, strlen(Buffer)); 21468d75effSDimitry Andric } 21568d75effSDimitry Andric 21668d75effSDimitry Andric void setAbortMessage(const char *Message) {} 21768d75effSDimitry Andric 21868d75effSDimitry Andric } // namespace scudo 21968d75effSDimitry Andric 22068d75effSDimitry Andric #endif // SCUDO_FUCHSIA 221