Home | History | Annotate | Line # | Download | only in asan
asan_new_delete.cpp revision 1.1.1.1
      1 //===-- asan_interceptors.cpp ---------------------------------------------===//
      2 //
      3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
      4 // See https://llvm.org/LICENSE.txt for license information.
      5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
      6 //
      7 //===----------------------------------------------------------------------===//
      8 //
      9 // This file is a part of AddressSanitizer, an address sanity checker.
     10 //
     11 // Interceptors for operators new and delete.
     12 //===----------------------------------------------------------------------===//
     13 
     14 #include "asan_allocator.h"
     15 #include "asan_internal.h"
     16 #include "asan_malloc_local.h"
     17 #include "asan_report.h"
     18 #include "asan_stack.h"
     19 
     20 #include "interception/interception.h"
     21 
     22 #include <stddef.h>
     23 
     24 // C++ operators can't have dllexport attributes on Windows. We export them
     25 // anyway by passing extra -export flags to the linker, which is exactly that
     26 // dllexport would normally do. We need to export them in order to make the
     27 // VS2015 dynamic CRT (MD) work.
     28 #if SANITIZER_WINDOWS && defined(_MSC_VER)
     29 #define CXX_OPERATOR_ATTRIBUTE
     30 #define COMMENT_EXPORT(sym) __pragma(comment(linker, "/export:" sym))
     31 #ifdef _WIN64
     32 COMMENT_EXPORT("??2@YAPEAX_K@Z")                     // operator new
     33 COMMENT_EXPORT("??2@YAPEAX_KAEBUnothrow_t@std@@@Z")  // operator new nothrow
     34 COMMENT_EXPORT("??3@YAXPEAX@Z")                      // operator delete
     35 COMMENT_EXPORT("??3@YAXPEAX_K@Z")                    // sized operator delete
     36 COMMENT_EXPORT("??_U@YAPEAX_K@Z")                    // operator new[]
     37 COMMENT_EXPORT("??_V@YAXPEAX@Z")                     // operator delete[]
     38 #else
     39 COMMENT_EXPORT("??2@YAPAXI@Z")                    // operator new
     40 COMMENT_EXPORT("??2@YAPAXIABUnothrow_t@std@@@Z")  // operator new nothrow
     41 COMMENT_EXPORT("??3@YAXPAX@Z")                    // operator delete
     42 COMMENT_EXPORT("??3@YAXPAXI@Z")                   // sized operator delete
     43 COMMENT_EXPORT("??_U@YAPAXI@Z")                   // operator new[]
     44 COMMENT_EXPORT("??_V@YAXPAX@Z")                   // operator delete[]
     45 #endif
     46 #undef COMMENT_EXPORT
     47 #else
     48 #define CXX_OPERATOR_ATTRIBUTE INTERCEPTOR_ATTRIBUTE
     49 #endif
     50 
     51 using namespace __asan;
     52 
     53 // FreeBSD prior v9.2 have wrong definition of 'size_t'.
     54 // http://svnweb.freebsd.org/base?view=revision&revision=232261
     55 #if SANITIZER_FREEBSD && SANITIZER_WORDSIZE == 32
     56 #include <sys/param.h>
     57 #if __FreeBSD_version <= 902001  // v9.2
     58 #define size_t unsigned
     59 #endif  // __FreeBSD_version
     60 #endif  // SANITIZER_FREEBSD && SANITIZER_WORDSIZE == 32
     61 
     62 // This code has issues on OSX.
     63 // See https://github.com/google/sanitizers/issues/131.
     64 
     65 // Fake std::nothrow_t and std::align_val_t to avoid including <new>.
     66 namespace std {
     67 struct nothrow_t {};
     68 enum class align_val_t: size_t {};
     69 }  // namespace std
     70 
     71 // TODO(alekseyshl): throw std::bad_alloc instead of dying on OOM.
     72 // For local pool allocation, align to SHADOW_GRANULARITY to match asan
     73 // allocator behavior.
     74 #define OPERATOR_NEW_BODY(type, nothrow)            \
     75   MAYBE_ALLOCATE_FROM_LOCAL_POOL(nothrow);          \
     76   GET_STACK_TRACE_MALLOC;                           \
     77   void *res = asan_memalign(0, size, &stack, type); \
     78   if (!nothrow && UNLIKELY(!res))                   \
     79     ReportOutOfMemory(size, &stack);                \
     80   return res;
     81 #define OPERATOR_NEW_BODY_ALIGN(type, nothrow)                \
     82   MAYBE_ALLOCATE_FROM_LOCAL_POOL(nothrow);                    \
     83   GET_STACK_TRACE_MALLOC;                                     \
     84   void *res = asan_memalign((uptr)align, size, &stack, type); \
     85   if (!nothrow && UNLIKELY(!res))                             \
     86     ReportOutOfMemory(size, &stack);                          \
     87   return res;
     88 
     89 // On OS X it's not enough to just provide our own 'operator new' and
     90 // 'operator delete' implementations, because they're going to be in the
     91 // runtime dylib, and the main executable will depend on both the runtime
     92 // dylib and libstdc++, each of those'll have its implementation of new and
     93 // delete.
     94 // To make sure that C++ allocation/deallocation operators are overridden on
     95 // OS X we need to intercept them using their mangled names.
     96 #if !SANITIZER_MAC
     97 CXX_OPERATOR_ATTRIBUTE
     98 void *operator new(size_t size)
     99 { OPERATOR_NEW_BODY(FROM_NEW, false /*nothrow*/); }
    100 CXX_OPERATOR_ATTRIBUTE
    101 void *operator new[](size_t size)
    102 { OPERATOR_NEW_BODY(FROM_NEW_BR, false /*nothrow*/); }
    103 CXX_OPERATOR_ATTRIBUTE
    104 void *operator new(size_t size, std::nothrow_t const&)
    105 { OPERATOR_NEW_BODY(FROM_NEW, true /*nothrow*/); }
    106 CXX_OPERATOR_ATTRIBUTE
    107 void *operator new[](size_t size, std::nothrow_t const&)
    108 { OPERATOR_NEW_BODY(FROM_NEW_BR, true /*nothrow*/); }
    109 CXX_OPERATOR_ATTRIBUTE
    110 void *operator new(size_t size, std::align_val_t align)
    111 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW, false /*nothrow*/); }
    112 CXX_OPERATOR_ATTRIBUTE
    113 void *operator new[](size_t size, std::align_val_t align)
    114 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW_BR, false /*nothrow*/); }
    115 CXX_OPERATOR_ATTRIBUTE
    116 void *operator new(size_t size, std::align_val_t align, std::nothrow_t const&)
    117 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW, true /*nothrow*/); }
    118 CXX_OPERATOR_ATTRIBUTE
    119 void *operator new[](size_t size, std::align_val_t align, std::nothrow_t const&)
    120 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW_BR, true /*nothrow*/); }
    121 
    122 #else  // SANITIZER_MAC
    123 INTERCEPTOR(void *, _Znwm, size_t size) {
    124   OPERATOR_NEW_BODY(FROM_NEW, false /*nothrow*/);
    125 }
    126 INTERCEPTOR(void *, _Znam, size_t size) {
    127   OPERATOR_NEW_BODY(FROM_NEW_BR, false /*nothrow*/);
    128 }
    129 INTERCEPTOR(void *, _ZnwmRKSt9nothrow_t, size_t size, std::nothrow_t const&) {
    130   OPERATOR_NEW_BODY(FROM_NEW, true /*nothrow*/);
    131 }
    132 INTERCEPTOR(void *, _ZnamRKSt9nothrow_t, size_t size, std::nothrow_t const&) {
    133   OPERATOR_NEW_BODY(FROM_NEW_BR, true /*nothrow*/);
    134 }
    135 #endif  // !SANITIZER_MAC
    136 
    137 #define OPERATOR_DELETE_BODY(type) \
    138   if (IS_FROM_LOCAL_POOL(ptr)) return;\
    139   GET_STACK_TRACE_FREE;\
    140   asan_delete(ptr, 0, 0, &stack, type);
    141 
    142 #define OPERATOR_DELETE_BODY_SIZE(type) \
    143   if (IS_FROM_LOCAL_POOL(ptr)) return;\
    144   GET_STACK_TRACE_FREE;\
    145   asan_delete(ptr, size, 0, &stack, type);
    146 
    147 #define OPERATOR_DELETE_BODY_ALIGN(type) \
    148   if (IS_FROM_LOCAL_POOL(ptr)) return;\
    149   GET_STACK_TRACE_FREE;\
    150   asan_delete(ptr, 0, static_cast<uptr>(align), &stack, type);
    151 
    152 #define OPERATOR_DELETE_BODY_SIZE_ALIGN(type) \
    153   if (IS_FROM_LOCAL_POOL(ptr)) return;\
    154   GET_STACK_TRACE_FREE;\
    155   asan_delete(ptr, size, static_cast<uptr>(align), &stack, type);
    156 
    157 #if !SANITIZER_MAC
    158 CXX_OPERATOR_ATTRIBUTE
    159 void operator delete(void *ptr) NOEXCEPT
    160 { OPERATOR_DELETE_BODY(FROM_NEW); }
    161 CXX_OPERATOR_ATTRIBUTE
    162 void operator delete[](void *ptr) NOEXCEPT
    163 { OPERATOR_DELETE_BODY(FROM_NEW_BR); }
    164 CXX_OPERATOR_ATTRIBUTE
    165 void operator delete(void *ptr, std::nothrow_t const&)
    166 { OPERATOR_DELETE_BODY(FROM_NEW); }
    167 CXX_OPERATOR_ATTRIBUTE
    168 void operator delete[](void *ptr, std::nothrow_t const&)
    169 { OPERATOR_DELETE_BODY(FROM_NEW_BR); }
    170 CXX_OPERATOR_ATTRIBUTE
    171 void operator delete(void *ptr, size_t size) NOEXCEPT
    172 { OPERATOR_DELETE_BODY_SIZE(FROM_NEW); }
    173 CXX_OPERATOR_ATTRIBUTE
    174 void operator delete[](void *ptr, size_t size) NOEXCEPT
    175 { OPERATOR_DELETE_BODY_SIZE(FROM_NEW_BR); }
    176 CXX_OPERATOR_ATTRIBUTE
    177 void operator delete(void *ptr, std::align_val_t align) NOEXCEPT
    178 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW); }
    179 CXX_OPERATOR_ATTRIBUTE
    180 void operator delete[](void *ptr, std::align_val_t align) NOEXCEPT
    181 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW_BR); }
    182 CXX_OPERATOR_ATTRIBUTE
    183 void operator delete(void *ptr, std::align_val_t align, std::nothrow_t const&)
    184 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW); }
    185 CXX_OPERATOR_ATTRIBUTE
    186 void operator delete[](void *ptr, std::align_val_t align, std::nothrow_t const&)
    187 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW_BR); }
    188 CXX_OPERATOR_ATTRIBUTE
    189 void operator delete(void *ptr, size_t size, std::align_val_t align) NOEXCEPT
    190 { OPERATOR_DELETE_BODY_SIZE_ALIGN(FROM_NEW); }
    191 CXX_OPERATOR_ATTRIBUTE
    192 void operator delete[](void *ptr, size_t size, std::align_val_t align) NOEXCEPT
    193 { OPERATOR_DELETE_BODY_SIZE_ALIGN(FROM_NEW_BR); }
    194 
    195 #else  // SANITIZER_MAC
    196 INTERCEPTOR(void, _ZdlPv, void *ptr)
    197 { OPERATOR_DELETE_BODY(FROM_NEW); }
    198 INTERCEPTOR(void, _ZdaPv, void *ptr)
    199 { OPERATOR_DELETE_BODY(FROM_NEW_BR); }
    200 INTERCEPTOR(void, _ZdlPvRKSt9nothrow_t, void *ptr, std::nothrow_t const&)
    201 { OPERATOR_DELETE_BODY(FROM_NEW); }
    202 INTERCEPTOR(void, _ZdaPvRKSt9nothrow_t, void *ptr, std::nothrow_t const&)
    203 { OPERATOR_DELETE_BODY(FROM_NEW_BR); }
    204 #endif  // !SANITIZER_MAC
    205