1 //===-- AppleObjCRuntimeV1.cpp --------------------------------------------===//
2 //
3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4 // See https://llvm.org/LICENSE.txt for license information.
5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6 //
7 //===----------------------------------------------------------------------===//
8 
9 #include "AppleObjCRuntimeV1.h"
10 #include "AppleObjCDeclVendor.h"
11 #include "AppleObjCTrampolineHandler.h"
12 
13 #include "clang/AST/Type.h"
14 
15 #include "Plugins/TypeSystem/Clang/TypeSystemClang.h"
16 #include "lldb/Breakpoint/BreakpointLocation.h"
17 #include "lldb/Core/Module.h"
18 #include "lldb/Core/PluginManager.h"
19 #include "lldb/Expression/FunctionCaller.h"
20 #include "lldb/Expression/UtilityFunction.h"
21 #include "lldb/Symbol/Symbol.h"
22 #include "lldb/Target/ExecutionContext.h"
23 #include "lldb/Target/Process.h"
24 #include "lldb/Target/RegisterContext.h"
25 #include "lldb/Target/Target.h"
26 #include "lldb/Target/Thread.h"
27 #include "lldb/Utility/ConstString.h"
28 #include "lldb/Utility/Log.h"
29 #include "lldb/Utility/Scalar.h"
30 #include "lldb/Utility/Status.h"
31 #include "lldb/Utility/StreamString.h"
32 
33 #include <memory>
34 #include <vector>
35 
36 using namespace lldb;
37 using namespace lldb_private;
38 
39 char AppleObjCRuntimeV1::ID = 0;
40 
41 AppleObjCRuntimeV1::AppleObjCRuntimeV1(Process *process)
42     : AppleObjCRuntime(process), m_hash_signature(),
43       m_isa_hash_table_ptr(LLDB_INVALID_ADDRESS) {}
44 
45 // for V1 runtime we just try to return a class name as that is the minimum
46 // level of support required for the data formatters to work
47 bool AppleObjCRuntimeV1::GetDynamicTypeAndAddress(
48     ValueObject &in_value, lldb::DynamicValueType use_dynamic,
49     TypeAndOrName &class_type_or_name, Address &address,
50     Value::ValueType &value_type) {
51   class_type_or_name.Clear();
52   value_type = Value::ValueType::Scalar;
53   if (CouldHaveDynamicValue(in_value)) {
54     auto class_descriptor(GetClassDescriptor(in_value));
55     if (class_descriptor && class_descriptor->IsValid() &&
56         class_descriptor->GetClassName()) {
57       const addr_t object_ptr = in_value.GetPointerValue();
58       address.SetRawAddress(object_ptr);
59       class_type_or_name.SetName(class_descriptor->GetClassName());
60     }
61   }
62   return !class_type_or_name.IsEmpty();
63 }
64 
65 // Static Functions
66 lldb_private::LanguageRuntime *
67 AppleObjCRuntimeV1::CreateInstance(Process *process,
68                                    lldb::LanguageType language) {
69   // FIXME: This should be a MacOS or iOS process, and we need to look for the
70   // OBJC section to make
71   // sure we aren't using the V1 runtime.
72   if (language == eLanguageTypeObjC) {
73     ModuleSP objc_module_sp;
74 
75     if (AppleObjCRuntime::GetObjCVersion(process, objc_module_sp) ==
76         ObjCRuntimeVersions::eAppleObjC_V1)
77       return new AppleObjCRuntimeV1(process);
78     else
79       return nullptr;
80   } else
81     return nullptr;
82 }
83 
84 void AppleObjCRuntimeV1::Initialize() {
85   PluginManager::RegisterPlugin(
86       GetPluginNameStatic(), "Apple Objective-C Language Runtime - Version 1",
87       CreateInstance,
88       /*command_callback = */ nullptr, GetBreakpointExceptionPrecondition);
89 }
90 
91 void AppleObjCRuntimeV1::Terminate() {
92   PluginManager::UnregisterPlugin(CreateInstance);
93 }
94 
95 lldb_private::ConstString AppleObjCRuntimeV1::GetPluginNameStatic() {
96   static ConstString g_name("apple-objc-v1");
97   return g_name;
98 }
99 
100 // PluginInterface protocol
101 ConstString AppleObjCRuntimeV1::GetPluginName() {
102   return GetPluginNameStatic();
103 }
104 
105 uint32_t AppleObjCRuntimeV1::GetPluginVersion() { return 1; }
106 
107 BreakpointResolverSP
108 AppleObjCRuntimeV1::CreateExceptionResolver(const BreakpointSP &bkpt,
109                                             bool catch_bp, bool throw_bp) {
110   BreakpointResolverSP resolver_sp;
111 
112   if (throw_bp)
113     resolver_sp = std::make_shared<BreakpointResolverName>(
114         bkpt, std::get<1>(GetExceptionThrowLocation()).AsCString(),
115         eFunctionNameTypeBase, eLanguageTypeUnknown, Breakpoint::Exact, 0,
116         eLazyBoolNo);
117   // FIXME: don't do catch yet.
118   return resolver_sp;
119 }
120 
121 struct BufStruct {
122   char contents[2048];
123 };
124 
125 llvm::Expected<std::unique_ptr<UtilityFunction>>
126 AppleObjCRuntimeV1::CreateObjectChecker(std::string name,
127                                         ExecutionContext &exe_ctx) {
128   std::unique_ptr<BufStruct> buf(new BufStruct);
129 
130   int strformatsize =
131       snprintf(&buf->contents[0], sizeof(buf->contents),
132                "struct __objc_class                                         "
133                "           \n"
134                "{                                                           "
135                "           \n"
136                "   struct __objc_class *isa;                                "
137                "           \n"
138                "   struct __objc_class *super_class;                        "
139                "           \n"
140                "   const char *name;                                        "
141                "           \n"
142                "   // rest of struct elided because unused                  "
143                "           \n"
144                "};                                                          "
145                "           \n"
146                "                                                            "
147                "           \n"
148                "struct __objc_object                                        "
149                "           \n"
150                "{                                                           "
151                "           \n"
152                "   struct __objc_class *isa;                                "
153                "           \n"
154                "};                                                          "
155                "           \n"
156                "                                                            "
157                "           \n"
158                "extern \"C\" void                                           "
159                "           \n"
160                "%s(void *$__lldb_arg_obj, void *$__lldb_arg_selector)       "
161                "           \n"
162                "{                                                           "
163                "           \n"
164                "   struct __objc_object *obj = (struct "
165                "__objc_object*)$__lldb_arg_obj; \n"
166                "   if ($__lldb_arg_obj == (void *)0)                     "
167                "                                \n"
168                "       return; // nil is ok                              "
169                "   (int)strlen(obj->isa->name);                             "
170                "           \n"
171                "}                                                           "
172                "           \n",
173                name.c_str());
174   assert(strformatsize < (int)sizeof(buf->contents));
175   (void)strformatsize;
176 
177   return GetTargetRef().CreateUtilityFunction(buf->contents, std::move(name),
178                                               eLanguageTypeC, exe_ctx);
179 }
180 
181 AppleObjCRuntimeV1::ClassDescriptorV1::ClassDescriptorV1(
182     ValueObject &isa_pointer) {
183   Initialize(isa_pointer.GetValueAsUnsigned(0), isa_pointer.GetProcessSP());
184 }
185 
186 AppleObjCRuntimeV1::ClassDescriptorV1::ClassDescriptorV1(
187     ObjCISA isa, lldb::ProcessSP process_sp) {
188   Initialize(isa, process_sp);
189 }
190 
191 void AppleObjCRuntimeV1::ClassDescriptorV1::Initialize(
192     ObjCISA isa, lldb::ProcessSP process_sp) {
193   if (!isa || !process_sp) {
194     m_valid = false;
195     return;
196   }
197 
198   m_valid = true;
199 
200   Status error;
201 
202   m_isa = process_sp->ReadPointerFromMemory(isa, error);
203 
204   if (error.Fail()) {
205     m_valid = false;
206     return;
207   }
208 
209   uint32_t ptr_size = process_sp->GetAddressByteSize();
210 
211   if (!IsPointerValid(m_isa, ptr_size)) {
212     m_valid = false;
213     return;
214   }
215 
216   m_parent_isa = process_sp->ReadPointerFromMemory(m_isa + ptr_size, error);
217 
218   if (error.Fail()) {
219     m_valid = false;
220     return;
221   }
222 
223   if (!IsPointerValid(m_parent_isa, ptr_size, true)) {
224     m_valid = false;
225     return;
226   }
227 
228   lldb::addr_t name_ptr =
229       process_sp->ReadPointerFromMemory(m_isa + 2 * ptr_size, error);
230 
231   if (error.Fail()) {
232     m_valid = false;
233     return;
234   }
235 
236   lldb::DataBufferSP buffer_sp(new DataBufferHeap(1024, 0));
237 
238   size_t count = process_sp->ReadCStringFromMemory(
239       name_ptr, (char *)buffer_sp->GetBytes(), 1024, error);
240 
241   if (error.Fail()) {
242     m_valid = false;
243     return;
244   }
245 
246   if (count)
247     m_name = ConstString((char *)buffer_sp->GetBytes());
248   else
249     m_name = ConstString();
250 
251   m_instance_size = process_sp->ReadUnsignedIntegerFromMemory(
252       m_isa + 5 * ptr_size, ptr_size, 0, error);
253 
254   if (error.Fail()) {
255     m_valid = false;
256     return;
257   }
258 
259   m_process_wp = lldb::ProcessWP(process_sp);
260 }
261 
262 AppleObjCRuntime::ClassDescriptorSP
263 AppleObjCRuntimeV1::ClassDescriptorV1::GetSuperclass() {
264   if (!m_valid)
265     return AppleObjCRuntime::ClassDescriptorSP();
266   ProcessSP process_sp = m_process_wp.lock();
267   if (!process_sp)
268     return AppleObjCRuntime::ClassDescriptorSP();
269   return ObjCLanguageRuntime::ClassDescriptorSP(
270       new AppleObjCRuntimeV1::ClassDescriptorV1(m_parent_isa, process_sp));
271 }
272 
273 AppleObjCRuntime::ClassDescriptorSP
274 AppleObjCRuntimeV1::ClassDescriptorV1::GetMetaclass() const {
275   return ClassDescriptorSP();
276 }
277 
278 bool AppleObjCRuntimeV1::ClassDescriptorV1::Describe(
279     std::function<void(ObjCLanguageRuntime::ObjCISA)> const &superclass_func,
280     std::function<bool(const char *, const char *)> const &instance_method_func,
281     std::function<bool(const char *, const char *)> const &class_method_func,
282     std::function<bool(const char *, const char *, lldb::addr_t,
283                        uint64_t)> const &ivar_func) const {
284   return false;
285 }
286 
287 lldb::addr_t AppleObjCRuntimeV1::GetTaggedPointerObfuscator() {
288   return 0;
289 }
290 
291 lldb::addr_t AppleObjCRuntimeV1::GetISAHashTablePointer() {
292   if (m_isa_hash_table_ptr == LLDB_INVALID_ADDRESS) {
293     ModuleSP objc_module_sp(GetObjCModule());
294 
295     if (!objc_module_sp)
296       return LLDB_INVALID_ADDRESS;
297 
298     static ConstString g_objc_debug_class_hash("_objc_debug_class_hash");
299 
300     const Symbol *symbol = objc_module_sp->FindFirstSymbolWithNameAndType(
301         g_objc_debug_class_hash, lldb::eSymbolTypeData);
302     if (symbol && symbol->ValueIsAddress()) {
303       Process *process = GetProcess();
304       if (process) {
305 
306         lldb::addr_t objc_debug_class_hash_addr =
307             symbol->GetAddressRef().GetLoadAddress(&process->GetTarget());
308 
309         if (objc_debug_class_hash_addr != LLDB_INVALID_ADDRESS) {
310           Status error;
311           lldb::addr_t objc_debug_class_hash_ptr =
312               process->ReadPointerFromMemory(objc_debug_class_hash_addr, error);
313           if (objc_debug_class_hash_ptr != 0 &&
314               objc_debug_class_hash_ptr != LLDB_INVALID_ADDRESS) {
315             m_isa_hash_table_ptr = objc_debug_class_hash_ptr;
316           }
317         }
318       }
319     }
320   }
321   return m_isa_hash_table_ptr;
322 }
323 
324 void AppleObjCRuntimeV1::UpdateISAToDescriptorMapIfNeeded() {
325   // TODO: implement HashTableSignature...
326   Process *process = GetProcess();
327 
328   if (process) {
329     // Update the process stop ID that indicates the last time we updated the
330     // map, whether it was successful or not.
331     m_isa_to_descriptor_stop_id = process->GetStopID();
332 
333     Log *log(GetLogIfAllCategoriesSet(LIBLLDB_LOG_PROCESS));
334 
335     ProcessSP process_sp = process->shared_from_this();
336 
337     ModuleSP objc_module_sp(GetObjCModule());
338 
339     if (!objc_module_sp)
340       return;
341 
342     lldb::addr_t hash_table_ptr = GetISAHashTablePointer();
343     if (hash_table_ptr != LLDB_INVALID_ADDRESS) {
344       // Read the NXHashTable struct:
345       //
346       // typedef struct {
347       //     const NXHashTablePrototype *prototype;
348       //     unsigned   count;
349       //     unsigned   nbBuckets;
350       //     void       *buckets;
351       //     const void *info;
352       // } NXHashTable;
353 
354       Status error;
355       DataBufferHeap buffer(1024, 0);
356       if (process->ReadMemory(hash_table_ptr, buffer.GetBytes(), 20, error) ==
357           20) {
358         const uint32_t addr_size = m_process->GetAddressByteSize();
359         const ByteOrder byte_order = m_process->GetByteOrder();
360         DataExtractor data(buffer.GetBytes(), buffer.GetByteSize(), byte_order,
361                            addr_size);
362         lldb::offset_t offset = addr_size; // Skip prototype
363         const uint32_t count = data.GetU32(&offset);
364         const uint32_t num_buckets = data.GetU32(&offset);
365         const addr_t buckets_ptr = data.GetAddress(&offset);
366         if (m_hash_signature.NeedsUpdate(count, num_buckets, buckets_ptr)) {
367           m_hash_signature.UpdateSignature(count, num_buckets, buckets_ptr);
368 
369           const uint32_t data_size = num_buckets * 2 * sizeof(uint32_t);
370           buffer.SetByteSize(data_size);
371 
372           if (process->ReadMemory(buckets_ptr, buffer.GetBytes(), data_size,
373                                   error) == data_size) {
374             data.SetData(buffer.GetBytes(), buffer.GetByteSize(), byte_order);
375             offset = 0;
376             for (uint32_t bucket_idx = 0; bucket_idx < num_buckets;
377                  ++bucket_idx) {
378               const uint32_t bucket_isa_count = data.GetU32(&offset);
379               const lldb::addr_t bucket_data = data.GetU32(&offset);
380 
381               if (bucket_isa_count == 0)
382                 continue;
383 
384               ObjCISA isa;
385               if (bucket_isa_count == 1) {
386                 // When we only have one entry in the bucket, the bucket data
387                 // is the "isa"
388                 isa = bucket_data;
389                 if (isa) {
390                   if (!ISAIsCached(isa)) {
391                     ClassDescriptorSP descriptor_sp(
392                         new ClassDescriptorV1(isa, process_sp));
393 
394                     if (log && log->GetVerbose())
395                       LLDB_LOGF(log,
396                                 "AppleObjCRuntimeV1 added (ObjCISA)0x%" PRIx64
397                                 " from _objc_debug_class_hash to "
398                                 "isa->descriptor cache",
399                                 isa);
400 
401                     AddClass(isa, descriptor_sp);
402                   }
403                 }
404               } else {
405                 // When we have more than one entry in the bucket, the bucket
406                 // data is a pointer to an array of "isa" values
407                 addr_t isa_addr = bucket_data;
408                 for (uint32_t isa_idx = 0; isa_idx < bucket_isa_count;
409                      ++isa_idx, isa_addr += addr_size) {
410                   isa = m_process->ReadPointerFromMemory(isa_addr, error);
411 
412                   if (isa && isa != LLDB_INVALID_ADDRESS) {
413                     if (!ISAIsCached(isa)) {
414                       ClassDescriptorSP descriptor_sp(
415                           new ClassDescriptorV1(isa, process_sp));
416 
417                       if (log && log->GetVerbose())
418                         LLDB_LOGF(
419                             log,
420                             "AppleObjCRuntimeV1 added (ObjCISA)0x%" PRIx64
421                             " from _objc_debug_class_hash to isa->descriptor "
422                             "cache",
423                             isa);
424 
425                       AddClass(isa, descriptor_sp);
426                     }
427                   }
428                 }
429               }
430             }
431           }
432         }
433       }
434     }
435   } else {
436     m_isa_to_descriptor_stop_id = UINT32_MAX;
437   }
438 }
439 
440 DeclVendor *AppleObjCRuntimeV1::GetDeclVendor() {
441   return nullptr;
442 }
443