1 //===-- asan_interceptors.cpp ---------------------------------------------===// 2 // 3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. 4 // See https://llvm.org/LICENSE.txt for license information. 5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception 6 // 7 //===----------------------------------------------------------------------===// 8 // 9 // This file is a part of AddressSanitizer, an address sanity checker. 10 // 11 // Interceptors for operators new and delete. 12 //===----------------------------------------------------------------------===// 13 14 #include "asan_allocator.h" 15 #include "asan_internal.h" 16 #include "asan_malloc_local.h" 17 #include "asan_report.h" 18 #include "asan_stack.h" 19 20 #include "interception/interception.h" 21 22 #include <stddef.h> 23 24 // C++ operators can't have dllexport attributes on Windows. We export them 25 // anyway by passing extra -export flags to the linker, which is exactly that 26 // dllexport would normally do. We need to export them in order to make the 27 // VS2015 dynamic CRT (MD) work. 28 #if SANITIZER_WINDOWS && defined(_MSC_VER) 29 #define CXX_OPERATOR_ATTRIBUTE 30 #define COMMENT_EXPORT(sym) __pragma(comment(linker, "/export:" sym)) 31 #ifdef _WIN64 32 COMMENT_EXPORT("??2@YAPEAX_K@Z") // operator new 33 COMMENT_EXPORT("??2@YAPEAX_KAEBUnothrow_t@std@@@Z") // operator new nothrow 34 COMMENT_EXPORT("??3@YAXPEAX@Z") // operator delete 35 COMMENT_EXPORT("??3@YAXPEAX_K@Z") // sized operator delete 36 COMMENT_EXPORT("??_U@YAPEAX_K@Z") // operator new[] 37 COMMENT_EXPORT("??_V@YAXPEAX@Z") // operator delete[] 38 #else 39 COMMENT_EXPORT("??2@YAPAXI@Z") // operator new 40 COMMENT_EXPORT("??2@YAPAXIABUnothrow_t@std@@@Z") // operator new nothrow 41 COMMENT_EXPORT("??3@YAXPAX@Z") // operator delete 42 COMMENT_EXPORT("??3@YAXPAXI@Z") // sized operator delete 43 COMMENT_EXPORT("??_U@YAPAXI@Z") // operator new[] 44 COMMENT_EXPORT("??_V@YAXPAX@Z") // operator delete[] 45 #endif 46 #undef COMMENT_EXPORT 47 #else 48 #define CXX_OPERATOR_ATTRIBUTE INTERCEPTOR_ATTRIBUTE 49 #endif 50 51 using namespace __asan; 52 53 // FreeBSD prior v9.2 have wrong definition of 'size_t'. 54 // http://svnweb.freebsd.org/base?view=revision&revision=232261 55 #if SANITIZER_FREEBSD && SANITIZER_WORDSIZE == 32 56 #include <sys/param.h> 57 #if __FreeBSD_version <= 902001 // v9.2 58 #define size_t unsigned 59 #endif // __FreeBSD_version 60 #endif // SANITIZER_FREEBSD && SANITIZER_WORDSIZE == 32 61 62 // This code has issues on OSX. 63 // See https://github.com/google/sanitizers/issues/131. 64 65 // Fake std::nothrow_t and std::align_val_t to avoid including <new>. 66 namespace std { 67 struct nothrow_t {}; 68 enum class align_val_t: size_t {}; 69 } // namespace std 70 71 // TODO(alekseyshl): throw std::bad_alloc instead of dying on OOM. 72 // For local pool allocation, align to SHADOW_GRANULARITY to match asan 73 // allocator behavior. 74 #define OPERATOR_NEW_BODY(type, nothrow) \ 75 MAYBE_ALLOCATE_FROM_LOCAL_POOL(nothrow); \ 76 GET_STACK_TRACE_MALLOC; \ 77 void *res = asan_memalign(0, size, &stack, type); \ 78 if (!nothrow && UNLIKELY(!res)) \ 79 ReportOutOfMemory(size, &stack); \ 80 return res; 81 #define OPERATOR_NEW_BODY_ALIGN(type, nothrow) \ 82 MAYBE_ALLOCATE_FROM_LOCAL_POOL(nothrow); \ 83 GET_STACK_TRACE_MALLOC; \ 84 void *res = asan_memalign((uptr)align, size, &stack, type); \ 85 if (!nothrow && UNLIKELY(!res)) \ 86 ReportOutOfMemory(size, &stack); \ 87 return res; 88 89 // On OS X it's not enough to just provide our own 'operator new' and 90 // 'operator delete' implementations, because they're going to be in the 91 // runtime dylib, and the main executable will depend on both the runtime 92 // dylib and libstdc++, each of those'll have its implementation of new and 93 // delete. 94 // To make sure that C++ allocation/deallocation operators are overridden on 95 // OS X we need to intercept them using their mangled names. 96 #if !SANITIZER_MAC 97 CXX_OPERATOR_ATTRIBUTE 98 void *operator new(size_t size) 99 { OPERATOR_NEW_BODY(FROM_NEW, false /*nothrow*/); } 100 CXX_OPERATOR_ATTRIBUTE 101 void *operator new[](size_t size) 102 { OPERATOR_NEW_BODY(FROM_NEW_BR, false /*nothrow*/); } 103 CXX_OPERATOR_ATTRIBUTE 104 void *operator new(size_t size, std::nothrow_t const&) 105 { OPERATOR_NEW_BODY(FROM_NEW, true /*nothrow*/); } 106 CXX_OPERATOR_ATTRIBUTE 107 void *operator new[](size_t size, std::nothrow_t const&) 108 { OPERATOR_NEW_BODY(FROM_NEW_BR, true /*nothrow*/); } 109 CXX_OPERATOR_ATTRIBUTE 110 void *operator new(size_t size, std::align_val_t align) 111 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW, false /*nothrow*/); } 112 CXX_OPERATOR_ATTRIBUTE 113 void *operator new[](size_t size, std::align_val_t align) 114 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW_BR, false /*nothrow*/); } 115 CXX_OPERATOR_ATTRIBUTE 116 void *operator new(size_t size, std::align_val_t align, std::nothrow_t const&) 117 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW, true /*nothrow*/); } 118 CXX_OPERATOR_ATTRIBUTE 119 void *operator new[](size_t size, std::align_val_t align, std::nothrow_t const&) 120 { OPERATOR_NEW_BODY_ALIGN(FROM_NEW_BR, true /*nothrow*/); } 121 122 #else // SANITIZER_MAC 123 INTERCEPTOR(void *, _Znwm, size_t size) { 124 OPERATOR_NEW_BODY(FROM_NEW, false /*nothrow*/); 125 } 126 INTERCEPTOR(void *, _Znam, size_t size) { 127 OPERATOR_NEW_BODY(FROM_NEW_BR, false /*nothrow*/); 128 } 129 INTERCEPTOR(void *, _ZnwmRKSt9nothrow_t, size_t size, std::nothrow_t const&) { 130 OPERATOR_NEW_BODY(FROM_NEW, true /*nothrow*/); 131 } 132 INTERCEPTOR(void *, _ZnamRKSt9nothrow_t, size_t size, std::nothrow_t const&) { 133 OPERATOR_NEW_BODY(FROM_NEW_BR, true /*nothrow*/); 134 } 135 #endif // !SANITIZER_MAC 136 137 #define OPERATOR_DELETE_BODY(type) \ 138 if (IS_FROM_LOCAL_POOL(ptr)) return;\ 139 GET_STACK_TRACE_FREE;\ 140 asan_delete(ptr, 0, 0, &stack, type); 141 142 #define OPERATOR_DELETE_BODY_SIZE(type) \ 143 if (IS_FROM_LOCAL_POOL(ptr)) return;\ 144 GET_STACK_TRACE_FREE;\ 145 asan_delete(ptr, size, 0, &stack, type); 146 147 #define OPERATOR_DELETE_BODY_ALIGN(type) \ 148 if (IS_FROM_LOCAL_POOL(ptr)) return;\ 149 GET_STACK_TRACE_FREE;\ 150 asan_delete(ptr, 0, static_cast<uptr>(align), &stack, type); 151 152 #define OPERATOR_DELETE_BODY_SIZE_ALIGN(type) \ 153 if (IS_FROM_LOCAL_POOL(ptr)) return;\ 154 GET_STACK_TRACE_FREE;\ 155 asan_delete(ptr, size, static_cast<uptr>(align), &stack, type); 156 157 #if !SANITIZER_MAC 158 CXX_OPERATOR_ATTRIBUTE 159 void operator delete(void *ptr) NOEXCEPT 160 { OPERATOR_DELETE_BODY(FROM_NEW); } 161 CXX_OPERATOR_ATTRIBUTE 162 void operator delete[](void *ptr) NOEXCEPT 163 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 164 CXX_OPERATOR_ATTRIBUTE 165 void operator delete(void *ptr, std::nothrow_t const&) 166 { OPERATOR_DELETE_BODY(FROM_NEW); } 167 CXX_OPERATOR_ATTRIBUTE 168 void operator delete[](void *ptr, std::nothrow_t const&) 169 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 170 CXX_OPERATOR_ATTRIBUTE 171 void operator delete(void *ptr, size_t size) NOEXCEPT 172 { OPERATOR_DELETE_BODY_SIZE(FROM_NEW); } 173 CXX_OPERATOR_ATTRIBUTE 174 void operator delete[](void *ptr, size_t size) NOEXCEPT 175 { OPERATOR_DELETE_BODY_SIZE(FROM_NEW_BR); } 176 CXX_OPERATOR_ATTRIBUTE 177 void operator delete(void *ptr, std::align_val_t align) NOEXCEPT 178 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW); } 179 CXX_OPERATOR_ATTRIBUTE 180 void operator delete[](void *ptr, std::align_val_t align) NOEXCEPT 181 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW_BR); } 182 CXX_OPERATOR_ATTRIBUTE 183 void operator delete(void *ptr, std::align_val_t align, std::nothrow_t const&) 184 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW); } 185 CXX_OPERATOR_ATTRIBUTE 186 void operator delete[](void *ptr, std::align_val_t align, std::nothrow_t const&) 187 { OPERATOR_DELETE_BODY_ALIGN(FROM_NEW_BR); } 188 CXX_OPERATOR_ATTRIBUTE 189 void operator delete(void *ptr, size_t size, std::align_val_t align) NOEXCEPT 190 { OPERATOR_DELETE_BODY_SIZE_ALIGN(FROM_NEW); } 191 CXX_OPERATOR_ATTRIBUTE 192 void operator delete[](void *ptr, size_t size, std::align_val_t align) NOEXCEPT 193 { OPERATOR_DELETE_BODY_SIZE_ALIGN(FROM_NEW_BR); } 194 195 #else // SANITIZER_MAC 196 INTERCEPTOR(void, _ZdlPv, void *ptr) 197 { OPERATOR_DELETE_BODY(FROM_NEW); } 198 INTERCEPTOR(void, _ZdaPv, void *ptr) 199 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 200 INTERCEPTOR(void, _ZdlPvRKSt9nothrow_t, void *ptr, std::nothrow_t const&) 201 { OPERATOR_DELETE_BODY(FROM_NEW); } 202 INTERCEPTOR(void, _ZdaPvRKSt9nothrow_t, void *ptr, std::nothrow_t const&) 203 { OPERATOR_DELETE_BODY(FROM_NEW_BR); } 204 #endif // !SANITIZER_MAC 205