1 //===-- asan_interceptors.cpp ---------------------------------------------===// 2 // 3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. 4 // See https://llvm.org/LICENSE.txt for license information. 5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception 6 // 7 //===----------------------------------------------------------------------===// 8 // 9 // This file is a part of AddressSanitizer, an address sanity checker. 10 // 11 // Interceptors for operators new and delete. 12 //===----------------------------------------------------------------------===// 13 14 #include <stddef.h> 15 16 #include "asan_allocator.h" 17 #include "asan_internal.h" 18 #include "asan_report.h" 19 #include "asan_stack.h" 20 #include "interception/interception.h" 21 22 // C++ operators can't have dllexport attributes on Windows. We export them 23 // anyway by passing extra -export flags to the linker, which is exactly that 24 // dllexport would normally do. We need to export them in order to make the 25 // VS2015 dynamic CRT (MD) work. 26 #if SANITIZER_WINDOWS && defined(_MSC_VER) 27 #define CXX_OPERATOR_ATTRIBUTE 28 #define COMMENT_EXPORT(sym) __pragma(comment(linker, "/export:" sym)) 29 #ifdef _WIN64 30 COMMENT_EXPORT("??2@YAPEAX_K@Z") // operator new 31 COMMENT_EXPORT("??2@YAPEAX_KAEBUnothrow_t@std@@@Z") // operator new nothrow 32 COMMENT_EXPORT("??3@YAXPEAX@Z") // operator delete 33 COMMENT_EXPORT("??3@YAXPEAX_K@Z") // sized operator delete 34 COMMENT_EXPORT("??_U@YAPEAX_K@Z") // operator new[] 35 COMMENT_EXPORT("??_V@YAXPEAX@Z") // operator delete[] 36 #else 37 COMMENT_EXPORT("??2@YAPAXI@Z") // operator new 38 COMMENT_EXPORT("??2@YAPAXIABUnothrow_t@std@@@Z") // operator new nothrow 39 COMMENT_EXPORT("??3@YAXPAX@Z") // operator delete 40 COMMENT_EXPORT("??3@YAXPAXI@Z") // sized operator delete 41 COMMENT_EXPORT("??_U@YAPAXI@Z") // operator new[] 42 COMMENT_EXPORT("??_V@YAXPAX@Z") // operator delete[] 43 #endif 44 #undef COMMENT_EXPORT 45 #else 46 #define CXX_OPERATOR_ATTRIBUTE INTERCEPTOR_ATTRIBUTE SANITIZER_WEAK_ATTRIBUTE 47 #endif 48 49 using namespace __asan; 50 51 // This code has issues on OSX. 52 // See https://github.com/google/sanitizers/issues/131. 53 54 // Fake std::nothrow_t and std::align_val_t to avoid including <new>. 55 namespace std { 56 struct nothrow_t {}; 57 enum class align_val_t: size_t {}; 58 } // namespace std 59 60 // TODO(alekseyshl): throw std::bad_alloc instead of dying on OOM. 61 // For local pool allocation, align to SHADOW_GRANULARITY to match asan 62 // allocator behavior. 63 #define OPERATOR_NEW_BODY(type, nothrow) \ 64 GET_STACK_TRACE_MALLOC; \ 65 void *res = asan_memalign(0, size, &stack, type); \ 66 if (!nothrow && UNLIKELY(!res)) \ 67 ReportOutOfMemory(size, &stack); \ 68 return res; 69 #define OPERATOR_NEW_BODY_ALIGN(type, nothrow) \ 70 GET_STACK_TRACE_MALLOC; \ 71 void *res = asan_memalign((uptr)align, size, &stack, type); \ 72 if (!nothrow && UNLIKELY(!res)) \ 73 ReportOutOfMemory(size, &stack); \ 74 return res; 75 76 // On OS X it's not enough to just provide our own 'operator new' and 77 // 'operator delete' implementations, because they're going to be in the 78 // runtime dylib, and the main executable will depend on both the runtime 79 // dylib and libstdc++, each of those'll have its implementation of new and 80 // delete. 81 // To make sure that C++ allocation/deallocation operators are overridden on 82 // OS X we need to intercept them using their mangled names. 83 #if !SANITIZER_APPLE 84 CXX_OPERATOR_ATTRIBUTE 85 void *operator new(size_t size) 86 { OPERATOR_NEW_BODY(FROM_NEW, false /*nothrow*/); } 87 CXX_OPERATOR_ATTRIBUTE 88 void *operator new[](size_t size) 89 { OPERATOR_NEW_BODY(FROM_NEW_BR, false /*nothrow*/); } 90 CXX_OPERATOR_ATTRIBUTE 91 void *operator new(size_t size, std::nothrow_t const&) 92 { OPERATOR_NEW_BODY(FROM_NEW, true /*nothrow*/); } 93 CXX_OPERATOR_ATTRIBUTE 94 void *operator new[](size_t size, std::nothrow_t const&) 95 { OPERATOR_NEW_BODY(FROM_NEW_BR, true /*nothrow*/); } 96 CXX_OPERATOR_ATTRIBUTE 97 void *operator new(size_t size, std::align_val_t align) 98 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW, false /*nothrow*/); } 99 CXX_OPERATOR_ATTRIBUTE 100 void *operator new[](size_t size, std::align_val_t align) 101 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW_BR, false /*nothrow*/); } 102 CXX_OPERATOR_ATTRIBUTE 103 void *operator new(size_t size, std::align_val_t align, std::nothrow_t const&) 104 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW, true /*nothrow*/); } 105 CXX_OPERATOR_ATTRIBUTE 106 void *operator new[](size_t size, std::align_val_t align, std::nothrow_t const&) 107 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW_BR, true /*nothrow*/); } 108 109 #else // SANITIZER_APPLE 110 INTERCEPTOR(void *, _Znwm, size_t size) { 111 OPERATOR_NEW_BODY(FROM_NEW, false /*nothrow*/); 112 } 113 INTERCEPTOR(void *, _Znam, size_t size) { 114 OPERATOR_NEW_BODY(FROM_NEW_BR, false /*nothrow*/); 115 } 116 INTERCEPTOR(void *, _ZnwmRKSt9nothrow_t, size_t size, std::nothrow_t const&) { 117 OPERATOR_NEW_BODY(FROM_NEW, true /*nothrow*/); 118 } 119 INTERCEPTOR(void *, _ZnamRKSt9nothrow_t, size_t size, std::nothrow_t const&) { 120 OPERATOR_NEW_BODY(FROM_NEW_BR, true /*nothrow*/); 121 } 122 #endif // !SANITIZER_APPLE 123 124 #define OPERATOR_DELETE_BODY(type) \ 125 GET_STACK_TRACE_FREE; \ 126 asan_delete(ptr, 0, 0, &stack, type); 127 128 #define OPERATOR_DELETE_BODY_SIZE(type) \ 129 GET_STACK_TRACE_FREE; \ 130 asan_delete(ptr, size, 0, &stack, type); 131 132 #define OPERATOR_DELETE_BODY_ALIGN(type) \ 133 GET_STACK_TRACE_FREE; \ 134 asan_delete(ptr, 0, static_cast<uptr>(align), &stack, type); 135 136 #define OPERATOR_DELETE_BODY_SIZE_ALIGN(type) \ 137 GET_STACK_TRACE_FREE; \ 138 asan_delete(ptr, size, static_cast<uptr>(align), &stack, type); 139 140 #if !SANITIZER_APPLE 141 CXX_OPERATOR_ATTRIBUTE 142 void operator delete(void *ptr) NOEXCEPT 143 { OPERATOR_DELETE_BODY(FROM_NEW); } 144 CXX_OPERATOR_ATTRIBUTE 145 void operator delete[](void *ptr) NOEXCEPT 146 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 147 CXX_OPERATOR_ATTRIBUTE 148 void operator delete(void *ptr, std::nothrow_t const&) 149 { OPERATOR_DELETE_BODY(FROM_NEW); } 150 CXX_OPERATOR_ATTRIBUTE 151 void operator delete[](void *ptr, std::nothrow_t const&) 152 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 153 CXX_OPERATOR_ATTRIBUTE 154 void operator delete(void *ptr, size_t size) NOEXCEPT 155 { OPERATOR_DELETE_BODY_SIZE(FROM_NEW); } 156 CXX_OPERATOR_ATTRIBUTE 157 void operator delete[](void *ptr, size_t size) NOEXCEPT 158 { OPERATOR_DELETE_BODY_SIZE(FROM_NEW_BR); } 159 CXX_OPERATOR_ATTRIBUTE 160 void operator delete(void *ptr, std::align_val_t align) NOEXCEPT 161 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW); } 162 CXX_OPERATOR_ATTRIBUTE 163 void operator delete[](void *ptr, std::align_val_t align) NOEXCEPT 164 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW_BR); } 165 CXX_OPERATOR_ATTRIBUTE 166 void operator delete(void *ptr, std::align_val_t align, std::nothrow_t const&) 167 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW); } 168 CXX_OPERATOR_ATTRIBUTE 169 void operator delete[](void *ptr, std::align_val_t align, std::nothrow_t const&) 170 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW_BR); } 171 CXX_OPERATOR_ATTRIBUTE 172 void operator delete(void *ptr, size_t size, std::align_val_t align) NOEXCEPT 173 { OPERATOR_DELETE_BODY_SIZE_ALIGN(FROM_NEW); } 174 CXX_OPERATOR_ATTRIBUTE 175 void operator delete[](void *ptr, size_t size, std::align_val_t align) NOEXCEPT 176 { OPERATOR_DELETE_BODY_SIZE_ALIGN(FROM_NEW_BR); } 177 178 #else // SANITIZER_APPLE 179 INTERCEPTOR(void, _ZdlPv, void *ptr) 180 { OPERATOR_DELETE_BODY(FROM_NEW); } 181 INTERCEPTOR(void, _ZdaPv, void *ptr) 182 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 183 INTERCEPTOR(void, _ZdlPvRKSt9nothrow_t, void *ptr, std::nothrow_t const&) 184 { OPERATOR_DELETE_BODY(FROM_NEW); } 185 INTERCEPTOR(void, _ZdaPvRKSt9nothrow_t, void *ptr, std::nothrow_t const&) 186 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 187 #endif // !SANITIZER_APPLE 188