1//===-- sanitizer_common_interceptors_ioctl.inc -----------------*- C++ -*-===//
2//
3//                     The LLVM Compiler Infrastructure
4//
5// This file is distributed under the University of Illinois Open Source
6// License. See LICENSE.TXT for details.
7//
8//===----------------------------------------------------------------------===//
9//
10// Ioctl handling in common sanitizer interceptors.
11//===----------------------------------------------------------------------===//
12
13#include "sanitizer_flags.h"
14
15struct ioctl_desc {
16  unsigned req;
17  // FIXME: support read+write arguments. Those are currently marked as WRITE.
18  enum {
19    NONE,
20    READ,
21    WRITE,
22    CUSTOM
23  } type : 2;
24  unsigned size : 30;
25  const char* name;
26};
27
28const unsigned ioctl_table_max = 500;
29static ioctl_desc ioctl_table[ioctl_table_max];
30static unsigned ioctl_table_size = 0;
31
32// This can not be declared as a global, because references to struct_*_sz
33// require a global initializer. And this table must be available before global
34// initializers are run.
35static void ioctl_table_fill() {
36#define _(rq, tp, sz)                                    \
37  if (IOCTL_##rq != IOCTL_NOT_PRESENT) {                 \
38    CHECK(ioctl_table_size < ioctl_table_max);           \
39    ioctl_table[ioctl_table_size].req = IOCTL_##rq;      \
40    ioctl_table[ioctl_table_size].type = ioctl_desc::tp; \
41    ioctl_table[ioctl_table_size].size = sz;             \
42    ioctl_table[ioctl_table_size].name = #rq;            \
43    ++ioctl_table_size;                                  \
44  }
45
46  _(FIOASYNC, READ, sizeof(int));
47  _(FIOCLEX, NONE, 0);
48  _(FIOGETOWN, WRITE, sizeof(int));
49  _(FIONBIO, READ, sizeof(int));
50  _(FIONCLEX, NONE, 0);
51  _(FIOSETOWN, READ, sizeof(int));
52  _(SIOCADDMULTI, READ, struct_ifreq_sz);
53  _(SIOCATMARK, WRITE, sizeof(int));
54  _(SIOCDELMULTI, READ, struct_ifreq_sz);
55  _(SIOCGIFADDR, WRITE, struct_ifreq_sz);
56  _(SIOCGIFBRDADDR, WRITE, struct_ifreq_sz);
57  _(SIOCGIFCONF, CUSTOM, 0);
58  _(SIOCGIFDSTADDR, WRITE, struct_ifreq_sz);
59  _(SIOCGIFFLAGS, WRITE, struct_ifreq_sz);
60  _(SIOCGIFMETRIC, WRITE, struct_ifreq_sz);
61  _(SIOCGIFMTU, WRITE, struct_ifreq_sz);
62  _(SIOCGIFNETMASK, WRITE, struct_ifreq_sz);
63  _(SIOCGPGRP, WRITE, sizeof(int));
64  _(SIOCSIFADDR, READ, struct_ifreq_sz);
65  _(SIOCSIFBRDADDR, READ, struct_ifreq_sz);
66  _(SIOCSIFDSTADDR, READ, struct_ifreq_sz);
67  _(SIOCSIFFLAGS, READ, struct_ifreq_sz);
68  _(SIOCSIFMETRIC, READ, struct_ifreq_sz);
69  _(SIOCSIFMTU, READ, struct_ifreq_sz);
70  _(SIOCSIFNETMASK, READ, struct_ifreq_sz);
71  _(SIOCSPGRP, READ, sizeof(int));
72  _(TIOCCONS, NONE, 0);
73  _(TIOCEXCL, NONE, 0);
74  _(TIOCGETD, WRITE, sizeof(int));
75  _(TIOCGPGRP, WRITE, pid_t_sz);
76  _(TIOCGWINSZ, WRITE, struct_winsize_sz);
77  _(TIOCMBIC, READ, sizeof(int));
78  _(TIOCMBIS, READ, sizeof(int));
79  _(TIOCMGET, WRITE, sizeof(int));
80  _(TIOCMSET, READ, sizeof(int));
81  _(TIOCNOTTY, NONE, 0);
82  _(TIOCNXCL, NONE, 0);
83  _(TIOCOUTQ, WRITE, sizeof(int));
84  _(TIOCPKT, READ, sizeof(int));
85  _(TIOCSCTTY, NONE, 0);
86  _(TIOCSETD, READ, sizeof(int));
87  _(TIOCSPGRP, READ, pid_t_sz);
88  _(TIOCSTI, READ, sizeof(char));
89  _(TIOCSWINSZ, READ, struct_winsize_sz);
90
91#if (SANITIZER_LINUX && !SANITIZER_ANDROID) || SANITIZER_MAC
92  _(SIOCGETSGCNT, WRITE, struct_sioc_sg_req_sz);
93  _(SIOCGETVIFCNT, WRITE, struct_sioc_vif_req_sz);
94#endif
95
96#if SANITIZER_LINUX
97  // Conflicting request ids.
98  // _(CDROMAUDIOBUFSIZ, NONE, 0);
99  // _(SNDCTL_TMR_CONTINUE, NONE, 0);
100  // _(SNDCTL_TMR_START, NONE, 0);
101  // _(SNDCTL_TMR_STOP, NONE, 0);
102  // _(SOUND_MIXER_READ_LOUD, WRITE, sizeof(int)); // same as ...READ_ENHANCE
103  // _(SOUND_MIXER_READ_MUTE, WRITE, sizeof(int)); // same as ...READ_ENHANCE
104  // _(SOUND_MIXER_WRITE_LOUD, WRITE, sizeof(int)); // same as ...WRITE_ENHANCE
105  // _(SOUND_MIXER_WRITE_MUTE, WRITE, sizeof(int)); // same as ...WRITE_ENHANCE
106  _(BLKFLSBUF, NONE, 0);
107  _(BLKGETSIZE, WRITE, sizeof(uptr));
108  _(BLKRAGET, WRITE, sizeof(int));
109  _(BLKRASET, NONE, 0);
110  _(BLKROGET, WRITE, sizeof(int));
111  _(BLKROSET, READ, sizeof(int));
112  _(BLKRRPART, NONE, 0);
113  _(CDROMEJECT, NONE, 0);
114  _(CDROMEJECT_SW, NONE, 0);
115  _(CDROMMULTISESSION, WRITE, struct_cdrom_multisession_sz);
116  _(CDROMPAUSE, NONE, 0);
117  _(CDROMPLAYMSF, READ, struct_cdrom_msf_sz);
118  _(CDROMPLAYTRKIND, READ, struct_cdrom_ti_sz);
119  _(CDROMREADAUDIO, READ, struct_cdrom_read_audio_sz);
120  _(CDROMREADCOOKED, READ, struct_cdrom_msf_sz);
121  _(CDROMREADMODE1, READ, struct_cdrom_msf_sz);
122  _(CDROMREADMODE2, READ, struct_cdrom_msf_sz);
123  _(CDROMREADRAW, READ, struct_cdrom_msf_sz);
124  _(CDROMREADTOCENTRY, WRITE, struct_cdrom_tocentry_sz);
125  _(CDROMREADTOCHDR, WRITE, struct_cdrom_tochdr_sz);
126  _(CDROMRESET, NONE, 0);
127  _(CDROMRESUME, NONE, 0);
128  _(CDROMSEEK, READ, struct_cdrom_msf_sz);
129  _(CDROMSTART, NONE, 0);
130  _(CDROMSTOP, NONE, 0);
131  _(CDROMSUBCHNL, WRITE, struct_cdrom_subchnl_sz);
132  _(CDROMVOLCTRL, READ, struct_cdrom_volctrl_sz);
133  _(CDROMVOLREAD, WRITE, struct_cdrom_volctrl_sz);
134  _(CDROM_GET_UPC, WRITE, 8);
135  _(EVIOCGABS, WRITE, struct_input_absinfo_sz); // fixup
136  _(EVIOCGBIT, WRITE, struct_input_id_sz); // fixup
137  _(EVIOCGEFFECTS, WRITE, sizeof(int));
138  _(EVIOCGID, WRITE, struct_input_id_sz);
139  _(EVIOCGKEY, WRITE, 0);
140  _(EVIOCGKEYCODE, WRITE, sizeof(int) * 2);
141  _(EVIOCGLED, WRITE, 0);
142  _(EVIOCGNAME, WRITE, 0);
143  _(EVIOCGPHYS, WRITE, 0);
144  _(EVIOCGRAB, READ, sizeof(int));
145  _(EVIOCGREP, WRITE, sizeof(int) * 2);
146  _(EVIOCGSND, WRITE, 0);
147  _(EVIOCGSW, WRITE, 0);
148  _(EVIOCGUNIQ, WRITE, 0);
149  _(EVIOCGVERSION, WRITE, sizeof(int));
150  _(EVIOCRMFF, READ, sizeof(int));
151  _(EVIOCSABS, READ, struct_input_absinfo_sz); // fixup
152  _(EVIOCSFF, READ, struct_ff_effect_sz);
153  _(EVIOCSKEYCODE, READ, sizeof(int) * 2);
154  _(EVIOCSREP, READ, sizeof(int) * 2);
155  _(FDCLRPRM, NONE, 0);
156  _(FDDEFPRM, READ, struct_floppy_struct_sz);
157  _(FDFLUSH, NONE, 0);
158  _(FDFMTBEG, NONE, 0);
159  _(FDFMTEND, NONE, 0);
160  _(FDFMTTRK, READ, struct_format_descr_sz);
161  _(FDGETDRVPRM, WRITE, struct_floppy_drive_params_sz);
162  _(FDGETDRVSTAT, WRITE, struct_floppy_drive_struct_sz);
163  _(FDGETDRVTYP, WRITE, 16);
164  _(FDGETFDCSTAT, WRITE, struct_floppy_fdc_state_sz);
165  _(FDGETMAXERRS, WRITE, struct_floppy_max_errors_sz);
166  _(FDGETPRM, WRITE, struct_floppy_struct_sz);
167  _(FDMSGOFF, NONE, 0);
168  _(FDMSGON, NONE, 0);
169  _(FDPOLLDRVSTAT, WRITE, struct_floppy_drive_struct_sz);
170  _(FDRAWCMD, WRITE, struct_floppy_raw_cmd_sz);
171  _(FDRESET, NONE, 0);
172  _(FDSETDRVPRM, READ, struct_floppy_drive_params_sz);
173  _(FDSETEMSGTRESH, NONE, 0);
174  _(FDSETMAXERRS, READ, struct_floppy_max_errors_sz);
175  _(FDSETPRM, READ, struct_floppy_struct_sz);
176  _(FDTWADDLE, NONE, 0);
177  _(FDWERRORCLR, NONE, 0);
178  _(FDWERRORGET, WRITE, struct_floppy_write_errors_sz);
179  _(HDIO_DRIVE_CMD, WRITE, sizeof(int));
180  _(HDIO_GETGEO, WRITE, struct_hd_geometry_sz);
181  _(HDIO_GET_32BIT, WRITE, sizeof(int));
182  _(HDIO_GET_DMA, WRITE, sizeof(int));
183  _(HDIO_GET_IDENTITY, WRITE, struct_hd_driveid_sz);
184  _(HDIO_GET_KEEPSETTINGS, WRITE, sizeof(int));
185  _(HDIO_GET_MULTCOUNT, WRITE, sizeof(int));
186  _(HDIO_GET_NOWERR, WRITE, sizeof(int));
187  _(HDIO_GET_UNMASKINTR, WRITE, sizeof(int));
188  _(HDIO_SET_32BIT, NONE, 0);
189  _(HDIO_SET_DMA, NONE, 0);
190  _(HDIO_SET_KEEPSETTINGS, NONE, 0);
191  _(HDIO_SET_MULTCOUNT, NONE, 0);
192  _(HDIO_SET_NOWERR, NONE, 0);
193  _(HDIO_SET_UNMASKINTR, NONE, 0);
194  _(MTIOCGET, WRITE, struct_mtget_sz);
195  _(MTIOCPOS, WRITE, struct_mtpos_sz);
196  _(MTIOCTOP, READ, struct_mtop_sz);
197  _(PPPIOCGASYNCMAP, WRITE, sizeof(int));
198  _(PPPIOCGDEBUG, WRITE, sizeof(int));
199  _(PPPIOCGFLAGS, WRITE, sizeof(int));
200  _(PPPIOCGUNIT, WRITE, sizeof(int));
201  _(PPPIOCGXASYNCMAP, WRITE, sizeof(int) * 8);
202  _(PPPIOCSASYNCMAP, READ, sizeof(int));
203  _(PPPIOCSDEBUG, READ, sizeof(int));
204  _(PPPIOCSFLAGS, READ, sizeof(int));
205  _(PPPIOCSMAXCID, READ, sizeof(int));
206  _(PPPIOCSMRU, READ, sizeof(int));
207  _(PPPIOCSXASYNCMAP, READ, sizeof(int) * 8);
208  _(SIOCADDRT, READ, struct_rtentry_sz);
209  _(SIOCDARP, READ, struct_arpreq_sz);
210  _(SIOCDELRT, READ, struct_rtentry_sz);
211  _(SIOCDRARP, READ, struct_arpreq_sz);
212  _(SIOCGARP, WRITE, struct_arpreq_sz);
213  _(SIOCGIFENCAP, WRITE, sizeof(int));
214  _(SIOCGIFHWADDR, WRITE, struct_ifreq_sz);
215  _(SIOCGIFMAP, WRITE, struct_ifreq_sz);
216  _(SIOCGIFMEM, WRITE, struct_ifreq_sz);
217  _(SIOCGIFNAME, NONE, 0);
218  _(SIOCGIFSLAVE, NONE, 0);
219  _(SIOCGRARP, WRITE, struct_arpreq_sz);
220  _(SIOCGSTAMP, WRITE, timeval_sz);
221  _(SIOCSARP, READ, struct_arpreq_sz);
222  _(SIOCSIFENCAP, READ, sizeof(int));
223  _(SIOCSIFHWADDR, READ, struct_ifreq_sz);
224  _(SIOCSIFLINK, NONE, 0);
225  _(SIOCSIFMAP, READ, struct_ifreq_sz);
226  _(SIOCSIFMEM, READ, struct_ifreq_sz);
227  _(SIOCSIFSLAVE, NONE, 0);
228  _(SIOCSRARP, READ, struct_arpreq_sz);
229  _(SNDCTL_COPR_HALT, WRITE, struct_copr_debug_buf_sz);
230  _(SNDCTL_COPR_LOAD, READ, struct_copr_buffer_sz);
231  _(SNDCTL_COPR_RCODE, WRITE, struct_copr_debug_buf_sz);
232  _(SNDCTL_COPR_RCVMSG, WRITE, struct_copr_msg_sz);
233  _(SNDCTL_COPR_RDATA, WRITE, struct_copr_debug_buf_sz);
234  _(SNDCTL_COPR_RESET, NONE, 0);
235  _(SNDCTL_COPR_RUN, WRITE, struct_copr_debug_buf_sz);
236  _(SNDCTL_COPR_SENDMSG, READ, struct_copr_msg_sz);
237  _(SNDCTL_COPR_WCODE, READ, struct_copr_debug_buf_sz);
238  _(SNDCTL_COPR_WDATA, READ, struct_copr_debug_buf_sz);
239  _(SNDCTL_DSP_GETBLKSIZE, WRITE, sizeof(int));
240  _(SNDCTL_DSP_GETFMTS, WRITE, sizeof(int));
241  _(SNDCTL_DSP_NONBLOCK, NONE, 0);
242  _(SNDCTL_DSP_POST, NONE, 0);
243  _(SNDCTL_DSP_RESET, NONE, 0);
244  _(SNDCTL_DSP_SETFMT, WRITE, sizeof(int));
245  _(SNDCTL_DSP_SETFRAGMENT, WRITE, sizeof(int));
246  _(SNDCTL_DSP_SPEED, WRITE, sizeof(int));
247  _(SNDCTL_DSP_STEREO, WRITE, sizeof(int));
248  _(SNDCTL_DSP_SUBDIVIDE, WRITE, sizeof(int));
249  _(SNDCTL_DSP_SYNC, NONE, 0);
250  _(SNDCTL_FM_4OP_ENABLE, READ, sizeof(int));
251  _(SNDCTL_FM_LOAD_INSTR, READ, struct_sbi_instrument_sz);
252  _(SNDCTL_MIDI_INFO, WRITE, struct_midi_info_sz);
253  _(SNDCTL_MIDI_PRETIME, WRITE, sizeof(int));
254  _(SNDCTL_SEQ_CTRLRATE, WRITE, sizeof(int));
255  _(SNDCTL_SEQ_GETINCOUNT, WRITE, sizeof(int));
256  _(SNDCTL_SEQ_GETOUTCOUNT, WRITE, sizeof(int));
257  _(SNDCTL_SEQ_NRMIDIS, WRITE, sizeof(int));
258  _(SNDCTL_SEQ_NRSYNTHS, WRITE, sizeof(int));
259  _(SNDCTL_SEQ_OUTOFBAND, READ, struct_seq_event_rec_sz);
260  _(SNDCTL_SEQ_PANIC, NONE, 0);
261  _(SNDCTL_SEQ_PERCMODE, NONE, 0);
262  _(SNDCTL_SEQ_RESET, NONE, 0);
263  _(SNDCTL_SEQ_RESETSAMPLES, READ, sizeof(int));
264  _(SNDCTL_SEQ_SYNC, NONE, 0);
265  _(SNDCTL_SEQ_TESTMIDI, READ, sizeof(int));
266  _(SNDCTL_SEQ_THRESHOLD, READ, sizeof(int));
267  _(SNDCTL_SYNTH_INFO, WRITE, struct_synth_info_sz);
268  _(SNDCTL_SYNTH_MEMAVL, WRITE, sizeof(int));
269  _(SNDCTL_TMR_METRONOME, READ, sizeof(int));
270  _(SNDCTL_TMR_SELECT, WRITE, sizeof(int));
271  _(SNDCTL_TMR_SOURCE, WRITE, sizeof(int));
272  _(SNDCTL_TMR_TEMPO, WRITE, sizeof(int));
273  _(SNDCTL_TMR_TIMEBASE, WRITE, sizeof(int));
274  _(SOUND_MIXER_READ_ALTPCM, WRITE, sizeof(int));
275  _(SOUND_MIXER_READ_BASS, WRITE, sizeof(int));
276  _(SOUND_MIXER_READ_CAPS, WRITE, sizeof(int));
277  _(SOUND_MIXER_READ_CD, WRITE, sizeof(int));
278  _(SOUND_MIXER_READ_DEVMASK, WRITE, sizeof(int));
279  _(SOUND_MIXER_READ_ENHANCE, WRITE, sizeof(int));
280  _(SOUND_MIXER_READ_IGAIN, WRITE, sizeof(int));
281  _(SOUND_MIXER_READ_IMIX, WRITE, sizeof(int));
282  _(SOUND_MIXER_READ_LINE, WRITE, sizeof(int));
283  _(SOUND_MIXER_READ_LINE1, WRITE, sizeof(int));
284  _(SOUND_MIXER_READ_LINE2, WRITE, sizeof(int));
285  _(SOUND_MIXER_READ_LINE3, WRITE, sizeof(int));
286  _(SOUND_MIXER_READ_MIC, WRITE, sizeof(int));
287  _(SOUND_MIXER_READ_OGAIN, WRITE, sizeof(int));
288  _(SOUND_MIXER_READ_PCM, WRITE, sizeof(int));
289  _(SOUND_MIXER_READ_RECLEV, WRITE, sizeof(int));
290  _(SOUND_MIXER_READ_RECMASK, WRITE, sizeof(int));
291  _(SOUND_MIXER_READ_RECSRC, WRITE, sizeof(int));
292  _(SOUND_MIXER_READ_SPEAKER, WRITE, sizeof(int));
293  _(SOUND_MIXER_READ_STEREODEVS, WRITE, sizeof(int));
294  _(SOUND_MIXER_READ_SYNTH, WRITE, sizeof(int));
295  _(SOUND_MIXER_READ_TREBLE, WRITE, sizeof(int));
296  _(SOUND_MIXER_READ_VOLUME, WRITE, sizeof(int));
297  _(SOUND_MIXER_WRITE_ALTPCM, WRITE, sizeof(int));
298  _(SOUND_MIXER_WRITE_BASS, WRITE, sizeof(int));
299  _(SOUND_MIXER_WRITE_CD, WRITE, sizeof(int));
300  _(SOUND_MIXER_WRITE_ENHANCE, WRITE, sizeof(int));
301  _(SOUND_MIXER_WRITE_IGAIN, WRITE, sizeof(int));
302  _(SOUND_MIXER_WRITE_IMIX, WRITE, sizeof(int));
303  _(SOUND_MIXER_WRITE_LINE, WRITE, sizeof(int));
304  _(SOUND_MIXER_WRITE_LINE1, WRITE, sizeof(int));
305  _(SOUND_MIXER_WRITE_LINE2, WRITE, sizeof(int));
306  _(SOUND_MIXER_WRITE_LINE3, WRITE, sizeof(int));
307  _(SOUND_MIXER_WRITE_MIC, WRITE, sizeof(int));
308  _(SOUND_MIXER_WRITE_OGAIN, WRITE, sizeof(int));
309  _(SOUND_MIXER_WRITE_PCM, WRITE, sizeof(int));
310  _(SOUND_MIXER_WRITE_RECLEV, WRITE, sizeof(int));
311  _(SOUND_MIXER_WRITE_RECSRC, WRITE, sizeof(int));
312  _(SOUND_MIXER_WRITE_SPEAKER, WRITE, sizeof(int));
313  _(SOUND_MIXER_WRITE_SYNTH, WRITE, sizeof(int));
314  _(SOUND_MIXER_WRITE_TREBLE, WRITE, sizeof(int));
315  _(SOUND_MIXER_WRITE_VOLUME, WRITE, sizeof(int));
316  _(SOUND_PCM_READ_BITS, WRITE, sizeof(int));
317  _(SOUND_PCM_READ_CHANNELS, WRITE, sizeof(int));
318  _(SOUND_PCM_READ_FILTER, WRITE, sizeof(int));
319  _(SOUND_PCM_READ_RATE, WRITE, sizeof(int));
320  _(SOUND_PCM_WRITE_CHANNELS, WRITE, sizeof(int));
321  _(SOUND_PCM_WRITE_FILTER, WRITE, sizeof(int));
322  _(TCFLSH, NONE, 0);
323  _(TCGETA, WRITE, struct_termio_sz);
324  _(TCGETS, WRITE, struct_termios_sz);
325  _(TCSBRK, NONE, 0);
326  _(TCSBRKP, NONE, 0);
327  _(TCSETA, READ, struct_termio_sz);
328  _(TCSETAF, READ, struct_termio_sz);
329  _(TCSETAW, READ, struct_termio_sz);
330  _(TCSETS, READ, struct_termios_sz);
331  _(TCSETSF, READ, struct_termios_sz);
332  _(TCSETSW, READ, struct_termios_sz);
333  _(TCXONC, NONE, 0);
334  _(TIOCGLCKTRMIOS, WRITE, struct_termios_sz);
335  _(TIOCGSOFTCAR, WRITE, sizeof(int));
336  _(TIOCINQ, WRITE, sizeof(int));
337  _(TIOCLINUX, READ, sizeof(char));
338  _(TIOCSERCONFIG, NONE, 0);
339  _(TIOCSERGETLSR, WRITE, sizeof(int));
340  _(TIOCSERGWILD, WRITE, sizeof(int));
341  _(TIOCSERSWILD, READ, sizeof(int));
342  _(TIOCSLCKTRMIOS, READ, struct_termios_sz);
343  _(TIOCSSOFTCAR, READ, sizeof(int));
344  _(VT_ACTIVATE, NONE, 0);
345  _(VT_DISALLOCATE, NONE, 0);
346  _(VT_GETMODE, WRITE, struct_vt_mode_sz);
347  _(VT_GETSTATE, WRITE, struct_vt_stat_sz);
348  _(VT_OPENQRY, WRITE, sizeof(int));
349  _(VT_RELDISP, NONE, 0);
350  _(VT_RESIZE, READ, struct_vt_sizes_sz);
351  _(VT_RESIZEX, READ, struct_vt_consize_sz);
352  _(VT_SENDSIG, NONE, 0);
353  _(VT_SETMODE, READ, struct_vt_mode_sz);
354  _(VT_WAITACTIVE, NONE, 0);
355#endif
356
357#if SANITIZER_LINUX && !SANITIZER_ANDROID
358  // _(SIOCDEVPLIP, WRITE, struct_ifreq_sz); // the same as EQL_ENSLAVE
359  _(CYGETDEFTHRESH, WRITE, sizeof(int));
360  _(CYGETDEFTIMEOUT, WRITE, sizeof(int));
361  _(CYGETMON, WRITE, struct_cyclades_monitor_sz);
362  _(CYGETTHRESH, WRITE, sizeof(int));
363  _(CYGETTIMEOUT, WRITE, sizeof(int));
364  _(CYSETDEFTHRESH, NONE, 0);
365  _(CYSETDEFTIMEOUT, NONE, 0);
366  _(CYSETTHRESH, NONE, 0);
367  _(CYSETTIMEOUT, NONE, 0);
368  _(EQL_EMANCIPATE, WRITE, struct_ifreq_sz);
369  _(EQL_ENSLAVE, WRITE, struct_ifreq_sz);
370  _(EQL_GETMASTRCFG, WRITE, struct_ifreq_sz);
371  _(EQL_GETSLAVECFG, WRITE, struct_ifreq_sz);
372  _(EQL_SETMASTRCFG, WRITE, struct_ifreq_sz);
373  _(EQL_SETSLAVECFG, WRITE, struct_ifreq_sz);
374  _(EVIOCGKEYCODE_V2, WRITE, struct_input_keymap_entry_sz);
375  _(EVIOCGPROP, WRITE, 0);
376  _(EVIOCSKEYCODE_V2, READ, struct_input_keymap_entry_sz);
377  _(FS_IOC_GETFLAGS, WRITE, sizeof(int));
378  _(FS_IOC_GETVERSION, WRITE, sizeof(int));
379  _(FS_IOC_SETFLAGS, READ, sizeof(int));
380  _(FS_IOC_SETVERSION, READ, sizeof(int));
381  _(GIO_CMAP, WRITE, 48);
382  _(GIO_FONT, WRITE, 8192);
383  _(GIO_SCRNMAP, WRITE, e_tabsz);
384  _(GIO_UNIMAP, WRITE, struct_unimapdesc_sz);
385  _(GIO_UNISCRNMAP, WRITE, sizeof(short) * e_tabsz);
386  _(KDADDIO, NONE, 0);
387  _(KDDELIO, NONE, 0);
388  _(KDDISABIO, NONE, 0);
389  _(KDENABIO, NONE, 0);
390  _(KDGETKEYCODE, WRITE, struct_kbkeycode_sz);
391  _(KDGETLED, WRITE, 1);
392  _(KDGETMODE, WRITE, sizeof(int));
393  _(KDGKBDIACR, WRITE, struct_kbdiacrs_sz);
394  _(KDGKBENT, WRITE, struct_kbentry_sz);
395  _(KDGKBLED, WRITE, sizeof(int));
396  _(KDGKBMETA, WRITE, sizeof(int));
397  _(KDGKBMODE, WRITE, sizeof(int));
398  _(KDGKBSENT, WRITE, struct_kbsentry_sz);
399  _(KDGKBTYPE, WRITE, 1);
400  _(KDMAPDISP, NONE, 0);
401  _(KDMKTONE, NONE, 0);
402  _(KDSETKEYCODE, READ, struct_kbkeycode_sz);
403  _(KDSETLED, NONE, 0);
404  _(KDSETMODE, NONE, 0);
405  _(KDSIGACCEPT, NONE, 0);
406  _(KDSKBDIACR, READ, struct_kbdiacrs_sz);
407  _(KDSKBENT, READ, struct_kbentry_sz);
408  _(KDSKBLED, NONE, 0);
409  _(KDSKBMETA, NONE, 0);
410  _(KDSKBMODE, NONE, 0);
411  _(KDSKBSENT, READ, struct_kbsentry_sz);
412  _(KDUNMAPDISP, NONE, 0);
413  _(KIOCSOUND, NONE, 0);
414  _(LPABORT, NONE, 0);
415  _(LPABORTOPEN, NONE, 0);
416  _(LPCAREFUL, NONE, 0);
417  _(LPCHAR, NONE, 0);
418  _(LPGETIRQ, WRITE, sizeof(int));
419  _(LPGETSTATUS, WRITE, sizeof(int));
420  _(LPRESET, NONE, 0);
421  _(LPSETIRQ, NONE, 0);
422  _(LPTIME, NONE, 0);
423  _(LPWAIT, NONE, 0);
424  _(MTIOCGETCONFIG, WRITE, struct_mtconfiginfo_sz);
425  _(MTIOCSETCONFIG, READ, struct_mtconfiginfo_sz);
426  _(PIO_CMAP, NONE, 0);
427  _(PIO_FONT, READ, 8192);
428  _(PIO_SCRNMAP, READ, e_tabsz);
429  _(PIO_UNIMAP, READ, struct_unimapdesc_sz);
430  _(PIO_UNIMAPCLR, READ, struct_unimapinit_sz);
431  _(PIO_UNISCRNMAP, READ, sizeof(short) * e_tabsz);
432  _(SCSI_IOCTL_PROBE_HOST, READ, sizeof(int));
433  _(SCSI_IOCTL_TAGGED_DISABLE, NONE, 0);
434  _(SCSI_IOCTL_TAGGED_ENABLE, NONE, 0);
435  _(SNDCTL_DSP_GETISPACE, WRITE, struct_audio_buf_info_sz);
436  _(SNDCTL_DSP_GETOSPACE, WRITE, struct_audio_buf_info_sz);
437  _(TIOCGSERIAL, WRITE, struct_serial_struct_sz);
438  _(TIOCSERGETMULTI, WRITE, struct_serial_multiport_struct_sz);
439  _(TIOCSERSETMULTI, READ, struct_serial_multiport_struct_sz);
440  _(TIOCSSERIAL, READ, struct_serial_struct_sz);
441
442  // The following ioctl requests are shared between AX25, IPX, netrom and
443  // mrouted.
444  // _(SIOCAIPXITFCRT, READ, sizeof(char));
445  // _(SIOCAX25GETUID, READ, struct_sockaddr_ax25_sz);
446  // _(SIOCNRGETPARMS, WRITE, struct_nr_parms_struct_sz);
447  // _(SIOCAIPXPRISLT, READ, sizeof(char));
448  // _(SIOCNRSETPARMS, READ, struct_nr_parms_struct_sz);
449  // _(SIOCAX25ADDUID, READ, struct_sockaddr_ax25_sz);
450  // _(SIOCNRDECOBS, NONE, 0);
451  // _(SIOCAX25DELUID, READ, struct_sockaddr_ax25_sz);
452  // _(SIOCIPXCFGDATA, WRITE, struct_ipx_config_data_sz);
453  // _(SIOCAX25NOUID, READ, sizeof(int));
454  // _(SIOCNRRTCTL, READ, sizeof(int));
455  // _(SIOCAX25DIGCTL, READ, sizeof(int));
456  // _(SIOCAX25GETPARMS, WRITE, struct_ax25_parms_struct_sz);
457  // _(SIOCAX25SETPARMS, READ, struct_ax25_parms_struct_sz);
458#endif
459#undef _
460}
461
462static bool ioctl_initialized = false;
463
464struct ioctl_desc_compare {
465  bool operator()(const ioctl_desc& left, const ioctl_desc& right) const {
466    return left.req < right.req;
467  }
468};
469
470static void ioctl_init() {
471  ioctl_table_fill();
472  InternalSort(&ioctl_table, ioctl_table_size, ioctl_desc_compare());
473
474  bool bad = false;
475  for (unsigned i = 0; i < ioctl_table_size - 1; ++i) {
476    if (ioctl_table[i].req >= ioctl_table[i + 1].req) {
477      Printf("Duplicate or unsorted ioctl request id %x >= %x (%s vs %s)\n",
478             ioctl_table[i].req, ioctl_table[i + 1].req, ioctl_table[i].name,
479             ioctl_table[i + 1].name);
480      bad = true;
481    }
482  }
483
484  if (bad) Die();
485
486  ioctl_initialized = true;
487}
488
489// Handle the most evil ioctls that encode argument value as part of request id.
490static unsigned ioctl_request_fixup(unsigned req) {
491#if SANITIZER_LINUX
492  if ((req & ~0x3fff001fU) == IOCTL_EVIOCGBIT)
493    return IOCTL_EVIOCGBIT;
494  if ((req & ~0x3fU) == IOCTL_EVIOCGABS)
495    return IOCTL_EVIOCGABS;
496  if ((req & ~0x3fU) == IOCTL_EVIOCSABS)
497    return IOCTL_EVIOCSABS;
498#endif
499  return req;
500}
501
502static const ioctl_desc *ioctl_table_lookup(unsigned req) {
503  int left = 0;
504  int right = ioctl_table_size;
505  while (left < right) {
506    int mid = (left + right) / 2;
507    if (ioctl_table[mid].req < req)
508      left = mid + 1;
509    else
510      right = mid;
511  }
512  if (left == right && ioctl_table[left].req == req)
513    return ioctl_table + left;
514  else
515    return 0;
516}
517
518static const ioctl_desc *ioctl_lookup(unsigned req) {
519  req = ioctl_request_fixup(req);
520  const ioctl_desc *desc = ioctl_table_lookup(req);
521  if (desc) return desc;
522
523  // Try stripping access size from the request id.
524  desc = ioctl_table_lookup(req & ~0x3fff0000U);
525  // Sanity check: requests that encode access size are either read or write and
526  // have size of 0 in the table.
527  if (desc && desc->size == 0 &&
528      (desc->type == ioctl_desc::WRITE || desc->type == ioctl_desc::READ))
529    return desc;
530  return 0;
531}
532
533static void ioctl_common_pre(void *ctx, const ioctl_desc *desc, int d,
534                             unsigned request, void *arg) {
535  if (desc->type == ioctl_desc::READ) {
536    unsigned size = desc->size ? desc->size : IOC_SIZE(request);
537    COMMON_INTERCEPTOR_READ_RANGE(ctx, arg, size);
538  }
539  if (desc->type != ioctl_desc::CUSTOM)
540    return;
541  switch (request) {
542    case 0x00008912: {  // SIOCGIFCONF
543      struct __sanitizer_ifconf *ifc = (__sanitizer_ifconf *)arg;
544      COMMON_INTERCEPTOR_READ_RANGE(ctx, &ifc->ifc_len, sizeof(ifc->ifc_len));
545      break;
546    }
547  }
548  return;
549}
550
551static void ioctl_common_post(void *ctx, const ioctl_desc *desc, int res, int d,
552                              unsigned request, void *arg) {
553  if (desc->type == ioctl_desc::WRITE) {
554    // FIXME: add verbose output
555    unsigned size = desc->size ? desc->size : IOC_SIZE(request);
556    COMMON_INTERCEPTOR_WRITE_RANGE(ctx, arg, size);
557  }
558  if (desc->type != ioctl_desc::CUSTOM)
559    return;
560  switch (request) {
561    case 0x00008912: {  // SIOCGIFCONF
562      struct __sanitizer_ifconf *ifc = (__sanitizer_ifconf *)arg;
563      COMMON_INTERCEPTOR_WRITE_RANGE(ctx, ifc->ifc_ifcu.ifcu_req, ifc->ifc_len);
564      break;
565    }
566  }
567  return;
568}
569