tsan_interceptors.cc revision f109267c5320210e69c1b66add801fd5f2e2a452
1//===-- tsan_interceptors.cc ----------------------------------------------===// 2// 3// The LLVM Compiler Infrastructure 4// 5// This file is distributed under the University of Illinois Open Source 6// License. See LICENSE.TXT for details. 7// 8//===----------------------------------------------------------------------===// 9// 10// This file is a part of ThreadSanitizer (TSan), a race detector. 11// 12// FIXME: move as many interceptors as possible into 13// sanitizer_common/sanitizer_common_interceptors.inc 14//===----------------------------------------------------------------------===// 15 16#include "sanitizer_common/sanitizer_atomic.h" 17#include "sanitizer_common/sanitizer_libc.h" 18#include "sanitizer_common/sanitizer_linux.h" 19#include "sanitizer_common/sanitizer_platform_limits_posix.h" 20#include "sanitizer_common/sanitizer_placement_new.h" 21#include "sanitizer_common/sanitizer_stacktrace.h" 22#include "interception/interception.h" 23#include "tsan_interface.h" 24#include "tsan_platform.h" 25#include "tsan_rtl.h" 26#include "tsan_mman.h" 27#include "tsan_fd.h" 28 29using namespace __tsan; // NOLINT 30 31const int kSigCount = 64; 32 33struct my_siginfo_t { 34 // The size is determined by looking at sizeof of real siginfo_t on linux. 35 u64 opaque[128 / sizeof(u64)]; 36}; 37 38struct sigset_t { 39 // The size is determined by looking at sizeof of real sigset_t on linux. 40 u64 val[128 / sizeof(u64)]; 41}; 42 43struct ucontext_t { 44 // The size is determined by looking at sizeof of real ucontext_t on linux. 45 u64 opaque[936 / sizeof(u64) + 1]; 46}; 47 48extern "C" int pthread_attr_init(void *attr); 49extern "C" int pthread_attr_destroy(void *attr); 50extern "C" int pthread_attr_getdetachstate(void *attr, int *v); 51extern "C" int pthread_attr_setstacksize(void *attr, uptr stacksize); 52extern "C" int pthread_attr_getstacksize(void *attr, uptr *stacksize); 53extern "C" int pthread_key_create(unsigned *key, void (*destructor)(void* v)); 54extern "C" int pthread_setspecific(unsigned key, const void *v); 55extern "C" int pthread_mutexattr_gettype(void *a, int *type); 56extern "C" int pthread_yield(); 57extern "C" int pthread_sigmask(int how, const sigset_t *set, sigset_t *oldset); 58extern "C" int sigfillset(sigset_t *set); 59extern "C" void *pthread_self(); 60extern "C" void _exit(int status); 61extern "C" int *__errno_location(); 62extern "C" int fileno_unlocked(void *stream); 63extern "C" void *__libc_malloc(uptr size); 64extern "C" void *__libc_calloc(uptr size, uptr n); 65extern "C" void *__libc_realloc(void *ptr, uptr size); 66extern "C" void __libc_free(void *ptr); 67extern "C" int mallopt(int param, int value); 68const int PTHREAD_MUTEX_RECURSIVE = 1; 69const int PTHREAD_MUTEX_RECURSIVE_NP = 1; 70const int kPthreadAttrSize = 56; 71const int EINVAL = 22; 72const int EBUSY = 16; 73const int EPOLL_CTL_ADD = 1; 74const int SIGILL = 4; 75const int SIGABRT = 6; 76const int SIGFPE = 8; 77const int SIGSEGV = 11; 78const int SIGPIPE = 13; 79const int SIGBUS = 7; 80const int SIGSYS = 31; 81void *const MAP_FAILED = (void*)-1; 82const int PTHREAD_BARRIER_SERIAL_THREAD = -1; 83const int MAP_FIXED = 0x10; 84typedef long long_t; // NOLINT 85 86// From /usr/include/unistd.h 87# define F_ULOCK 0 /* Unlock a previously locked region. */ 88# define F_LOCK 1 /* Lock a region for exclusive use. */ 89# define F_TLOCK 2 /* Test and lock a region for exclusive use. */ 90# define F_TEST 3 /* Test a region for other processes locks. */ 91 92typedef void (*sighandler_t)(int sig); 93 94#define errno (*__errno_location()) 95 96struct sigaction_t { 97 union { 98 sighandler_t sa_handler; 99 void (*sa_sigaction)(int sig, my_siginfo_t *siginfo, void *uctx); 100 }; 101 sigset_t sa_mask; 102 int sa_flags; 103 void (*sa_restorer)(); 104}; 105 106const sighandler_t SIG_DFL = (sighandler_t)0; 107const sighandler_t SIG_IGN = (sighandler_t)1; 108const sighandler_t SIG_ERR = (sighandler_t)-1; 109const int SA_SIGINFO = 4; 110const int SIG_SETMASK = 2; 111 112namespace std { 113struct nothrow_t {}; 114} // namespace std 115 116static sigaction_t sigactions[kSigCount]; 117 118namespace __tsan { 119struct SignalDesc { 120 bool armed; 121 bool sigaction; 122 my_siginfo_t siginfo; 123 ucontext_t ctx; 124}; 125 126struct SignalContext { 127 int in_blocking_func; 128 int int_signal_send; 129 int pending_signal_count; 130 SignalDesc pending_signals[kSigCount]; 131}; 132} // namespace __tsan 133 134static SignalContext *SigCtx(ThreadState *thr) { 135 SignalContext *ctx = (SignalContext*)thr->signal_ctx; 136 if (ctx == 0 && thr->is_alive) { 137 ScopedInRtl in_rtl; 138 ctx = (SignalContext*)MmapOrDie(sizeof(*ctx), "SignalContext"); 139 MemoryResetRange(thr, (uptr)&SigCtx, (uptr)ctx, sizeof(*ctx)); 140 thr->signal_ctx = ctx; 141 } 142 return ctx; 143} 144 145static unsigned g_thread_finalize_key; 146 147class ScopedInterceptor { 148 public: 149 ScopedInterceptor(ThreadState *thr, const char *fname, uptr pc); 150 ~ScopedInterceptor(); 151 private: 152 ThreadState *const thr_; 153 const int in_rtl_; 154}; 155 156ScopedInterceptor::ScopedInterceptor(ThreadState *thr, const char *fname, 157 uptr pc) 158 : thr_(thr) 159 , in_rtl_(thr->in_rtl) { 160 if (thr_->in_rtl == 0) { 161 Initialize(thr); 162 FuncEntry(thr, pc); 163 thr_->in_rtl++; 164 DPrintf("#%d: intercept %s()\n", thr_->tid, fname); 165 } else { 166 thr_->in_rtl++; 167 } 168} 169 170ScopedInterceptor::~ScopedInterceptor() { 171 thr_->in_rtl--; 172 if (thr_->in_rtl == 0) { 173 FuncExit(thr_); 174 ProcessPendingSignals(thr_); 175 } 176 CHECK_EQ(in_rtl_, thr_->in_rtl); 177} 178 179#define SCOPED_INTERCEPTOR_RAW(func, ...) \ 180 ThreadState *thr = cur_thread(); \ 181 StatInc(thr, StatInterceptor); \ 182 StatInc(thr, StatInt_##func); \ 183 const uptr caller_pc = GET_CALLER_PC(); \ 184 ScopedInterceptor si(thr, #func, caller_pc); \ 185 const uptr pc = __sanitizer::StackTrace::GetCurrentPc(); \ 186 (void)pc; \ 187/**/ 188 189#define SCOPED_TSAN_INTERCEPTOR(func, ...) \ 190 SCOPED_INTERCEPTOR_RAW(func, __VA_ARGS__); \ 191 if (REAL(func) == 0) { \ 192 Printf("FATAL: ThreadSanitizer: failed to intercept %s\n", #func); \ 193 Die(); \ 194 } \ 195 if (thr->in_rtl > 1) \ 196 return REAL(func)(__VA_ARGS__); \ 197/**/ 198 199#define TSAN_INTERCEPTOR(ret, func, ...) INTERCEPTOR(ret, func, __VA_ARGS__) 200#define TSAN_INTERCEPT(func) INTERCEPT_FUNCTION(func) 201 202#define BLOCK_REAL(name) (BlockingCall(thr), REAL(name)) 203 204struct BlockingCall { 205 explicit BlockingCall(ThreadState *thr) 206 : ctx(SigCtx(thr)) { 207 ctx->in_blocking_func++; 208 } 209 210 ~BlockingCall() { 211 ctx->in_blocking_func--; 212 } 213 214 SignalContext *ctx; 215}; 216 217TSAN_INTERCEPTOR(unsigned, sleep, unsigned sec) { 218 SCOPED_TSAN_INTERCEPTOR(sleep, sec); 219 unsigned res = BLOCK_REAL(sleep)(sec); 220 AfterSleep(thr, pc); 221 return res; 222} 223 224TSAN_INTERCEPTOR(int, usleep, long_t usec) { 225 SCOPED_TSAN_INTERCEPTOR(usleep, usec); 226 int res = BLOCK_REAL(usleep)(usec); 227 AfterSleep(thr, pc); 228 return res; 229} 230 231TSAN_INTERCEPTOR(int, nanosleep, void *req, void *rem) { 232 SCOPED_TSAN_INTERCEPTOR(nanosleep, req, rem); 233 int res = BLOCK_REAL(nanosleep)(req, rem); 234 AfterSleep(thr, pc); 235 return res; 236} 237 238class AtExitContext { 239 public: 240 AtExitContext() 241 : mtx_(MutexTypeAtExit, StatMtxAtExit) 242 , pos_() { 243 } 244 245 typedef void(*atexit_t)(); 246 247 int atexit(ThreadState *thr, uptr pc, bool is_on_exit, 248 atexit_t f, void *arg) { 249 Lock l(&mtx_); 250 if (pos_ == kMaxAtExit) 251 return 1; 252 Release(thr, pc, (uptr)this); 253 stack_[pos_] = f; 254 args_[pos_] = arg; 255 is_on_exits_[pos_] = is_on_exit; 256 pos_++; 257 return 0; 258 } 259 260 void exit(ThreadState *thr, uptr pc) { 261 CHECK_EQ(thr->in_rtl, 0); 262 for (;;) { 263 atexit_t f = 0; 264 void *arg = 0; 265 bool is_on_exit = false; 266 { 267 Lock l(&mtx_); 268 if (pos_) { 269 pos_--; 270 f = stack_[pos_]; 271 arg = args_[pos_]; 272 is_on_exit = is_on_exits_[pos_]; 273 ScopedInRtl in_rtl; 274 Acquire(thr, pc, (uptr)this); 275 } 276 } 277 if (f == 0) 278 break; 279 DPrintf("#%d: executing atexit func %p\n", thr->tid, f); 280 CHECK_EQ(thr->in_rtl, 0); 281 if (is_on_exit) 282 ((void(*)(int status, void *arg))f)(0, arg); 283 else 284 ((void(*)(void *arg, void *dso))f)(arg, 0); 285 } 286 } 287 288 private: 289 static const int kMaxAtExit = 128; 290 Mutex mtx_; 291 atexit_t stack_[kMaxAtExit]; 292 void *args_[kMaxAtExit]; 293 bool is_on_exits_[kMaxAtExit]; 294 int pos_; 295}; 296 297static AtExitContext *atexit_ctx; 298 299TSAN_INTERCEPTOR(int, atexit, void (*f)()) { 300 if (cur_thread()->in_symbolizer) 301 return 0; 302 SCOPED_TSAN_INTERCEPTOR(atexit, f); 303 return atexit_ctx->atexit(thr, pc, false, (void(*)())f, 0); 304} 305 306TSAN_INTERCEPTOR(int, on_exit, void(*f)(int, void*), void *arg) { 307 if (cur_thread()->in_symbolizer) 308 return 0; 309 SCOPED_TSAN_INTERCEPTOR(on_exit, f, arg); 310 return atexit_ctx->atexit(thr, pc, true, (void(*)())f, arg); 311} 312 313TSAN_INTERCEPTOR(int, __cxa_atexit, void (*f)(void *a), void *arg, void *dso) { 314 if (cur_thread()->in_symbolizer) 315 return 0; 316 SCOPED_TSAN_INTERCEPTOR(__cxa_atexit, f, arg, dso); 317 if (dso) 318 return REAL(__cxa_atexit)(f, arg, dso); 319 return atexit_ctx->atexit(thr, pc, false, (void(*)())f, arg); 320} 321 322// Cleanup old bufs. 323static void JmpBufGarbageCollect(ThreadState *thr, uptr sp) { 324 for (uptr i = 0; i < thr->jmp_bufs.Size(); i++) { 325 JmpBuf *buf = &thr->jmp_bufs[i]; 326 if (buf->sp <= sp) { 327 uptr sz = thr->jmp_bufs.Size(); 328 thr->jmp_bufs[i] = thr->jmp_bufs[sz - 1]; 329 thr->jmp_bufs.PopBack(); 330 i--; 331 } 332 } 333} 334 335static void SetJmp(ThreadState *thr, uptr sp, uptr mangled_sp) { 336 if (thr->shadow_stack_pos == 0) // called from libc guts during bootstrap 337 return; 338 // Cleanup old bufs. 339 JmpBufGarbageCollect(thr, sp); 340 // Remember the buf. 341 JmpBuf *buf = thr->jmp_bufs.PushBack(); 342 buf->sp = sp; 343 buf->mangled_sp = mangled_sp; 344 buf->shadow_stack_pos = thr->shadow_stack_pos; 345} 346 347static void LongJmp(ThreadState *thr, uptr *env) { 348 uptr mangled_sp = env[6]; 349 // Find the saved buf by mangled_sp. 350 for (uptr i = 0; i < thr->jmp_bufs.Size(); i++) { 351 JmpBuf *buf = &thr->jmp_bufs[i]; 352 if (buf->mangled_sp == mangled_sp) { 353 CHECK_GE(thr->shadow_stack_pos, buf->shadow_stack_pos); 354 // Unwind the stack. 355 while (thr->shadow_stack_pos > buf->shadow_stack_pos) 356 FuncExit(thr); 357 JmpBufGarbageCollect(thr, buf->sp - 1); // do not collect buf->sp 358 return; 359 } 360 } 361 Printf("ThreadSanitizer: can't find longjmp buf\n"); 362 CHECK(0); 363} 364 365// FIXME: put everything below into a common extern "C" block? 366extern "C" void __tsan_setjmp(uptr sp, uptr mangled_sp) { 367 ScopedInRtl in_rtl; 368 SetJmp(cur_thread(), sp, mangled_sp); 369} 370 371// Not called. Merely to satisfy TSAN_INTERCEPT(). 372extern "C" SANITIZER_INTERFACE_ATTRIBUTE 373int __interceptor_setjmp(void *env); 374extern "C" int __interceptor_setjmp(void *env) { 375 CHECK(0); 376 return 0; 377} 378 379// FIXME: any reason to have a separate declaration? 380extern "C" SANITIZER_INTERFACE_ATTRIBUTE 381int __interceptor__setjmp(void *env); 382extern "C" int __interceptor__setjmp(void *env) { 383 CHECK(0); 384 return 0; 385} 386 387extern "C" SANITIZER_INTERFACE_ATTRIBUTE 388int __interceptor_sigsetjmp(void *env); 389extern "C" int __interceptor_sigsetjmp(void *env) { 390 CHECK(0); 391 return 0; 392} 393 394extern "C" SANITIZER_INTERFACE_ATTRIBUTE 395int __interceptor___sigsetjmp(void *env); 396extern "C" int __interceptor___sigsetjmp(void *env) { 397 CHECK(0); 398 return 0; 399} 400 401extern "C" int setjmp(void *env); 402extern "C" int _setjmp(void *env); 403extern "C" int sigsetjmp(void *env); 404extern "C" int __sigsetjmp(void *env); 405DEFINE_REAL(int, setjmp, void *env) 406DEFINE_REAL(int, _setjmp, void *env) 407DEFINE_REAL(int, sigsetjmp, void *env) 408DEFINE_REAL(int, __sigsetjmp, void *env) 409 410TSAN_INTERCEPTOR(void, longjmp, uptr *env, int val) { 411 { 412 SCOPED_TSAN_INTERCEPTOR(longjmp, env, val); 413 } 414 LongJmp(cur_thread(), env); 415 REAL(longjmp)(env, val); 416} 417 418TSAN_INTERCEPTOR(void, siglongjmp, uptr *env, int val) { 419 { 420 SCOPED_TSAN_INTERCEPTOR(siglongjmp, env, val); 421 } 422 LongJmp(cur_thread(), env); 423 REAL(siglongjmp)(env, val); 424} 425 426TSAN_INTERCEPTOR(void*, malloc, uptr size) { 427 if (cur_thread()->in_symbolizer) 428 return __libc_malloc(size); 429 void *p = 0; 430 { 431 SCOPED_INTERCEPTOR_RAW(malloc, size); 432 p = user_alloc(thr, pc, size); 433 } 434 invoke_malloc_hook(p, size); 435 return p; 436} 437 438TSAN_INTERCEPTOR(void*, __libc_memalign, uptr align, uptr sz) { 439 SCOPED_TSAN_INTERCEPTOR(__libc_memalign, align, sz); 440 return user_alloc(thr, pc, sz, align); 441} 442 443TSAN_INTERCEPTOR(void*, calloc, uptr size, uptr n) { 444 if (cur_thread()->in_symbolizer) 445 return __libc_calloc(size, n); 446 if (__sanitizer::CallocShouldReturnNullDueToOverflow(size, n)) return 0; 447 void *p = 0; 448 { 449 SCOPED_INTERCEPTOR_RAW(calloc, size, n); 450 p = user_alloc(thr, pc, n * size); 451 if (p) 452 internal_memset(p, 0, n * size); 453 } 454 invoke_malloc_hook(p, n * size); 455 return p; 456} 457 458TSAN_INTERCEPTOR(void*, realloc, void *p, uptr size) { 459 if (cur_thread()->in_symbolizer) 460 return __libc_realloc(p, size); 461 if (p) 462 invoke_free_hook(p); 463 { 464 SCOPED_INTERCEPTOR_RAW(realloc, p, size); 465 p = user_realloc(thr, pc, p, size); 466 } 467 invoke_malloc_hook(p, size); 468 return p; 469} 470 471TSAN_INTERCEPTOR(void, free, void *p) { 472 if (p == 0) 473 return; 474 if (cur_thread()->in_symbolizer) 475 return __libc_free(p); 476 invoke_free_hook(p); 477 SCOPED_INTERCEPTOR_RAW(free, p); 478 user_free(thr, pc, p); 479} 480 481TSAN_INTERCEPTOR(void, cfree, void *p) { 482 if (p == 0) 483 return; 484 if (cur_thread()->in_symbolizer) 485 return __libc_free(p); 486 invoke_free_hook(p); 487 SCOPED_INTERCEPTOR_RAW(cfree, p); 488 user_free(thr, pc, p); 489} 490 491TSAN_INTERCEPTOR(uptr, malloc_usable_size, void *p) { 492 SCOPED_INTERCEPTOR_RAW(malloc_usable_size, p); 493 return user_alloc_usable_size(thr, pc, p); 494} 495 496#define OPERATOR_NEW_BODY(mangled_name) \ 497 if (cur_thread()->in_symbolizer) \ 498 return __libc_malloc(size); \ 499 void *p = 0; \ 500 { \ 501 SCOPED_INTERCEPTOR_RAW(mangled_name, size); \ 502 p = user_alloc(thr, pc, size); \ 503 } \ 504 invoke_malloc_hook(p, size); \ 505 return p; 506 507SANITIZER_INTERFACE_ATTRIBUTE 508void *operator new(__sanitizer::uptr size); 509void *operator new(__sanitizer::uptr size) { 510 OPERATOR_NEW_BODY(_Znwm); 511} 512 513SANITIZER_INTERFACE_ATTRIBUTE 514void *operator new[](__sanitizer::uptr size); 515void *operator new[](__sanitizer::uptr size) { 516 OPERATOR_NEW_BODY(_Znam); 517} 518 519SANITIZER_INTERFACE_ATTRIBUTE 520void *operator new(__sanitizer::uptr size, std::nothrow_t const&); 521void *operator new(__sanitizer::uptr size, std::nothrow_t const&) { 522 OPERATOR_NEW_BODY(_ZnwmRKSt9nothrow_t); 523} 524 525SANITIZER_INTERFACE_ATTRIBUTE 526void *operator new[](__sanitizer::uptr size, std::nothrow_t const&); 527void *operator new[](__sanitizer::uptr size, std::nothrow_t const&) { 528 OPERATOR_NEW_BODY(_ZnamRKSt9nothrow_t); 529} 530 531#define OPERATOR_DELETE_BODY(mangled_name) \ 532 if (ptr == 0) return; \ 533 if (cur_thread()->in_symbolizer) \ 534 return __libc_free(ptr); \ 535 invoke_free_hook(ptr); \ 536 SCOPED_INTERCEPTOR_RAW(mangled_name, ptr); \ 537 user_free(thr, pc, ptr); 538 539SANITIZER_INTERFACE_ATTRIBUTE 540void operator delete(void *ptr); 541void operator delete(void *ptr) { 542 OPERATOR_DELETE_BODY(_ZdlPv); 543} 544 545SANITIZER_INTERFACE_ATTRIBUTE 546void operator delete[](void *ptr); 547void operator delete[](void *ptr) { 548 OPERATOR_DELETE_BODY(_ZdlPvRKSt9nothrow_t); 549} 550 551SANITIZER_INTERFACE_ATTRIBUTE 552void operator delete(void *ptr, std::nothrow_t const&); 553void operator delete(void *ptr, std::nothrow_t const&) { 554 OPERATOR_DELETE_BODY(_ZdaPv); 555} 556 557SANITIZER_INTERFACE_ATTRIBUTE 558void operator delete[](void *ptr, std::nothrow_t const&); 559void operator delete[](void *ptr, std::nothrow_t const&) { 560 OPERATOR_DELETE_BODY(_ZdaPvRKSt9nothrow_t); 561} 562 563TSAN_INTERCEPTOR(uptr, strlen, const char *s) { 564 SCOPED_TSAN_INTERCEPTOR(strlen, s); 565 uptr len = internal_strlen(s); 566 MemoryAccessRange(thr, pc, (uptr)s, len + 1, false); 567 return len; 568} 569 570TSAN_INTERCEPTOR(void*, memset, void *dst, int v, uptr size) { 571 SCOPED_TSAN_INTERCEPTOR(memset, dst, v, size); 572 MemoryAccessRange(thr, pc, (uptr)dst, size, true); 573 return internal_memset(dst, v, size); 574} 575 576TSAN_INTERCEPTOR(void*, memcpy, void *dst, const void *src, uptr size) { 577 SCOPED_TSAN_INTERCEPTOR(memcpy, dst, src, size); 578 MemoryAccessRange(thr, pc, (uptr)dst, size, true); 579 MemoryAccessRange(thr, pc, (uptr)src, size, false); 580 return internal_memcpy(dst, src, size); 581} 582 583TSAN_INTERCEPTOR(int, memcmp, const void *s1, const void *s2, uptr n) { 584 SCOPED_TSAN_INTERCEPTOR(memcmp, s1, s2, n); 585 int res = 0; 586 uptr len = 0; 587 for (; len < n; len++) { 588 if ((res = ((unsigned char*)s1)[len] - ((unsigned char*)s2)[len])) 589 break; 590 } 591 MemoryAccessRange(thr, pc, (uptr)s1, len < n ? len + 1 : n, false); 592 MemoryAccessRange(thr, pc, (uptr)s2, len < n ? len + 1 : n, false); 593 return res; 594} 595 596TSAN_INTERCEPTOR(void*, memchr, void *s, int c, uptr n) { 597 SCOPED_TSAN_INTERCEPTOR(memchr, s, c, n); 598 void *res = REAL(memchr)(s, c, n); 599 uptr len = res ? (char*)res - (char*)s + 1 : n; 600 MemoryAccessRange(thr, pc, (uptr)s, len, false); 601 return res; 602} 603 604TSAN_INTERCEPTOR(void*, memrchr, char *s, int c, uptr n) { 605 SCOPED_TSAN_INTERCEPTOR(memrchr, s, c, n); 606 MemoryAccessRange(thr, pc, (uptr)s, n, false); 607 return REAL(memrchr)(s, c, n); 608} 609 610TSAN_INTERCEPTOR(void*, memmove, void *dst, void *src, uptr n) { 611 SCOPED_TSAN_INTERCEPTOR(memmove, dst, src, n); 612 MemoryAccessRange(thr, pc, (uptr)dst, n, true); 613 MemoryAccessRange(thr, pc, (uptr)src, n, false); 614 return REAL(memmove)(dst, src, n); 615} 616 617TSAN_INTERCEPTOR(char*, strchr, char *s, int c) { 618 SCOPED_TSAN_INTERCEPTOR(strchr, s, c); 619 char *res = REAL(strchr)(s, c); 620 uptr len = res ? (char*)res - (char*)s + 1 : internal_strlen(s) + 1; 621 MemoryAccessRange(thr, pc, (uptr)s, len, false); 622 return res; 623} 624 625TSAN_INTERCEPTOR(char*, strchrnul, char *s, int c) { 626 SCOPED_TSAN_INTERCEPTOR(strchrnul, s, c); 627 char *res = REAL(strchrnul)(s, c); 628 uptr len = (char*)res - (char*)s + 1; 629 MemoryAccessRange(thr, pc, (uptr)s, len, false); 630 return res; 631} 632 633TSAN_INTERCEPTOR(char*, strrchr, char *s, int c) { 634 SCOPED_TSAN_INTERCEPTOR(strrchr, s, c); 635 MemoryAccessRange(thr, pc, (uptr)s, internal_strlen(s) + 1, false); 636 return REAL(strrchr)(s, c); 637} 638 639TSAN_INTERCEPTOR(char*, strcpy, char *dst, const char *src) { // NOLINT 640 SCOPED_TSAN_INTERCEPTOR(strcpy, dst, src); // NOLINT 641 uptr srclen = internal_strlen(src); 642 MemoryAccessRange(thr, pc, (uptr)dst, srclen + 1, true); 643 MemoryAccessRange(thr, pc, (uptr)src, srclen + 1, false); 644 return REAL(strcpy)(dst, src); // NOLINT 645} 646 647TSAN_INTERCEPTOR(char*, strncpy, char *dst, char *src, uptr n) { 648 SCOPED_TSAN_INTERCEPTOR(strncpy, dst, src, n); 649 uptr srclen = internal_strnlen(src, n); 650 MemoryAccessRange(thr, pc, (uptr)dst, n, true); 651 MemoryAccessRange(thr, pc, (uptr)src, min(srclen + 1, n), false); 652 return REAL(strncpy)(dst, src, n); 653} 654 655TSAN_INTERCEPTOR(const char*, strstr, const char *s1, const char *s2) { 656 SCOPED_TSAN_INTERCEPTOR(strstr, s1, s2); 657 const char *res = REAL(strstr)(s1, s2); 658 uptr len1 = internal_strlen(s1); 659 uptr len2 = internal_strlen(s2); 660 MemoryAccessRange(thr, pc, (uptr)s1, len1 + 1, false); 661 MemoryAccessRange(thr, pc, (uptr)s2, len2 + 1, false); 662 return res; 663} 664 665static bool fix_mmap_addr(void **addr, long_t sz, int flags) { 666 if (*addr) { 667 if (!IsAppMem((uptr)*addr) || !IsAppMem((uptr)*addr + sz - 1)) { 668 if (flags & MAP_FIXED) { 669 errno = EINVAL; 670 return false; 671 } else { 672 *addr = 0; 673 } 674 } 675 } 676 return true; 677} 678 679TSAN_INTERCEPTOR(void*, mmap, void *addr, long_t sz, int prot, 680 int flags, int fd, unsigned off) { 681 SCOPED_TSAN_INTERCEPTOR(mmap, addr, sz, prot, flags, fd, off); 682 if (!fix_mmap_addr(&addr, sz, flags)) 683 return MAP_FAILED; 684 void *res = REAL(mmap)(addr, sz, prot, flags, fd, off); 685 if (res != MAP_FAILED) { 686 if (fd > 0) 687 FdAccess(thr, pc, fd); 688 MemoryRangeImitateWrite(thr, pc, (uptr)res, sz); 689 } 690 return res; 691} 692 693TSAN_INTERCEPTOR(void*, mmap64, void *addr, long_t sz, int prot, 694 int flags, int fd, u64 off) { 695 SCOPED_TSAN_INTERCEPTOR(mmap64, addr, sz, prot, flags, fd, off); 696 if (!fix_mmap_addr(&addr, sz, flags)) 697 return MAP_FAILED; 698 void *res = REAL(mmap64)(addr, sz, prot, flags, fd, off); 699 if (res != MAP_FAILED) { 700 if (fd > 0) 701 FdAccess(thr, pc, fd); 702 MemoryRangeImitateWrite(thr, pc, (uptr)res, sz); 703 } 704 return res; 705} 706 707TSAN_INTERCEPTOR(int, munmap, void *addr, long_t sz) { 708 SCOPED_TSAN_INTERCEPTOR(munmap, addr, sz); 709 DontNeedShadowFor((uptr)addr, sz); 710 int res = REAL(munmap)(addr, sz); 711 return res; 712} 713 714TSAN_INTERCEPTOR(void*, memalign, uptr align, uptr sz) { 715 SCOPED_TSAN_INTERCEPTOR(memalign, align, sz); 716 return user_alloc(thr, pc, sz, align); 717} 718 719TSAN_INTERCEPTOR(void*, valloc, uptr sz) { 720 SCOPED_TSAN_INTERCEPTOR(valloc, sz); 721 return user_alloc(thr, pc, sz, GetPageSizeCached()); 722} 723 724TSAN_INTERCEPTOR(void*, pvalloc, uptr sz) { 725 SCOPED_TSAN_INTERCEPTOR(pvalloc, sz); 726 sz = RoundUp(sz, GetPageSizeCached()); 727 return user_alloc(thr, pc, sz, GetPageSizeCached()); 728} 729 730TSAN_INTERCEPTOR(int, posix_memalign, void **memptr, uptr align, uptr sz) { 731 SCOPED_TSAN_INTERCEPTOR(posix_memalign, memptr, align, sz); 732 *memptr = user_alloc(thr, pc, sz, align); 733 return 0; 734} 735 736// Used in thread-safe function static initialization. 737extern "C" int INTERFACE_ATTRIBUTE __cxa_guard_acquire(atomic_uint32_t *g) { 738 SCOPED_INTERCEPTOR_RAW(__cxa_guard_acquire, g); 739 for (;;) { 740 u32 cmp = atomic_load(g, memory_order_acquire); 741 if (cmp == 0) { 742 if (atomic_compare_exchange_strong(g, &cmp, 1<<16, memory_order_relaxed)) 743 return 1; 744 } else if (cmp == 1) { 745 Acquire(thr, pc, (uptr)g); 746 return 0; 747 } else { 748 internal_sched_yield(); 749 } 750 } 751} 752 753extern "C" void INTERFACE_ATTRIBUTE __cxa_guard_release(atomic_uint32_t *g) { 754 SCOPED_INTERCEPTOR_RAW(__cxa_guard_release, g); 755 Release(thr, pc, (uptr)g); 756 atomic_store(g, 1, memory_order_release); 757} 758 759extern "C" void INTERFACE_ATTRIBUTE __cxa_guard_abort(atomic_uint32_t *g) { 760 SCOPED_INTERCEPTOR_RAW(__cxa_guard_abort, g); 761 atomic_store(g, 0, memory_order_relaxed); 762} 763 764static void thread_finalize(void *v) { 765 uptr iter = (uptr)v; 766 if (iter > 1) { 767 if (pthread_setspecific(g_thread_finalize_key, (void*)(iter - 1))) { 768 Printf("ThreadSanitizer: failed to set thread key\n"); 769 Die(); 770 } 771 return; 772 } 773 { 774 ScopedInRtl in_rtl; 775 ThreadState *thr = cur_thread(); 776 ThreadFinish(thr); 777 SignalContext *sctx = thr->signal_ctx; 778 if (sctx) { 779 thr->signal_ctx = 0; 780 UnmapOrDie(sctx, sizeof(*sctx)); 781 } 782 } 783} 784 785 786struct ThreadParam { 787 void* (*callback)(void *arg); 788 void *param; 789 atomic_uintptr_t tid; 790}; 791 792extern "C" void *__tsan_thread_start_func(void *arg) { 793 ThreadParam *p = (ThreadParam*)arg; 794 void* (*callback)(void *arg) = p->callback; 795 void *param = p->param; 796 int tid = 0; 797 { 798 ThreadState *thr = cur_thread(); 799 ScopedInRtl in_rtl; 800 if (pthread_setspecific(g_thread_finalize_key, (void*)4)) { 801 Printf("ThreadSanitizer: failed to set thread key\n"); 802 Die(); 803 } 804 while ((tid = atomic_load(&p->tid, memory_order_acquire)) == 0) 805 pthread_yield(); 806 atomic_store(&p->tid, 0, memory_order_release); 807 ThreadStart(thr, tid, GetTid()); 808 CHECK_EQ(thr->in_rtl, 1); 809 } 810 void *res = callback(param); 811 // Prevent the callback from being tail called, 812 // it mixes up stack traces. 813 volatile int foo = 42; 814 foo++; 815 return res; 816} 817 818TSAN_INTERCEPTOR(int, pthread_create, 819 void *th, void *attr, void *(*callback)(void*), void * param) { 820 SCOPED_TSAN_INTERCEPTOR(pthread_create, th, attr, callback, param); 821 __sanitizer_pthread_attr_t myattr; 822 if (attr == 0) { 823 pthread_attr_init(&myattr); 824 attr = &myattr; 825 } 826 int detached = 0; 827 pthread_attr_getdetachstate(attr, &detached); 828 829#if defined(TSAN_DEBUG_OUTPUT) 830 int verbosity = (TSAN_DEBUG_OUTPUT); 831#else 832 int verbosity = 0; 833#endif 834 AdjustStackSizeLinux(attr, verbosity); 835 836 ThreadParam p; 837 p.callback = callback; 838 p.param = param; 839 atomic_store(&p.tid, 0, memory_order_relaxed); 840 int res = REAL(pthread_create)(th, attr, __tsan_thread_start_func, &p); 841 if (res == 0) { 842 int tid = ThreadCreate(thr, pc, *(uptr*)th, detached); 843 CHECK_NE(tid, 0); 844 atomic_store(&p.tid, tid, memory_order_release); 845 while (atomic_load(&p.tid, memory_order_acquire) != 0) 846 pthread_yield(); 847 } 848 if (attr == &myattr) 849 pthread_attr_destroy(&myattr); 850 return res; 851} 852 853TSAN_INTERCEPTOR(int, pthread_join, void *th, void **ret) { 854 SCOPED_TSAN_INTERCEPTOR(pthread_join, th, ret); 855 int tid = ThreadTid(thr, pc, (uptr)th); 856 int res = BLOCK_REAL(pthread_join)(th, ret); 857 if (res == 0) { 858 ThreadJoin(thr, pc, tid); 859 } 860 return res; 861} 862 863TSAN_INTERCEPTOR(int, pthread_detach, void *th) { 864 SCOPED_TSAN_INTERCEPTOR(pthread_detach, th); 865 int tid = ThreadTid(thr, pc, (uptr)th); 866 int res = REAL(pthread_detach)(th); 867 if (res == 0) { 868 ThreadDetach(thr, pc, tid); 869 } 870 return res; 871} 872 873TSAN_INTERCEPTOR(int, pthread_mutex_init, void *m, void *a) { 874 SCOPED_TSAN_INTERCEPTOR(pthread_mutex_init, m, a); 875 int res = REAL(pthread_mutex_init)(m, a); 876 if (res == 0) { 877 bool recursive = false; 878 if (a) { 879 int type = 0; 880 if (pthread_mutexattr_gettype(a, &type) == 0) 881 recursive = (type == PTHREAD_MUTEX_RECURSIVE 882 || type == PTHREAD_MUTEX_RECURSIVE_NP); 883 } 884 MutexCreate(thr, pc, (uptr)m, false, recursive, false); 885 } 886 return res; 887} 888 889TSAN_INTERCEPTOR(int, pthread_mutex_destroy, void *m) { 890 SCOPED_TSAN_INTERCEPTOR(pthread_mutex_destroy, m); 891 int res = REAL(pthread_mutex_destroy)(m); 892 if (res == 0 || res == EBUSY) { 893 MutexDestroy(thr, pc, (uptr)m); 894 } 895 return res; 896} 897 898TSAN_INTERCEPTOR(int, pthread_mutex_lock, void *m) { 899 SCOPED_TSAN_INTERCEPTOR(pthread_mutex_lock, m); 900 int res = REAL(pthread_mutex_lock)(m); 901 if (res == 0) { 902 MutexLock(thr, pc, (uptr)m); 903 } 904 return res; 905} 906 907TSAN_INTERCEPTOR(int, pthread_mutex_trylock, void *m) { 908 SCOPED_TSAN_INTERCEPTOR(pthread_mutex_trylock, m); 909 int res = REAL(pthread_mutex_trylock)(m); 910 if (res == 0) { 911 MutexLock(thr, pc, (uptr)m); 912 } 913 return res; 914} 915 916TSAN_INTERCEPTOR(int, pthread_mutex_timedlock, void *m, void *abstime) { 917 SCOPED_TSAN_INTERCEPTOR(pthread_mutex_timedlock, m, abstime); 918 int res = REAL(pthread_mutex_timedlock)(m, abstime); 919 if (res == 0) { 920 MutexLock(thr, pc, (uptr)m); 921 } 922 return res; 923} 924 925TSAN_INTERCEPTOR(int, pthread_mutex_unlock, void *m) { 926 SCOPED_TSAN_INTERCEPTOR(pthread_mutex_unlock, m); 927 MutexUnlock(thr, pc, (uptr)m); 928 int res = REAL(pthread_mutex_unlock)(m); 929 return res; 930} 931 932TSAN_INTERCEPTOR(int, pthread_spin_init, void *m, int pshared) { 933 SCOPED_TSAN_INTERCEPTOR(pthread_spin_init, m, pshared); 934 int res = REAL(pthread_spin_init)(m, pshared); 935 if (res == 0) { 936 MutexCreate(thr, pc, (uptr)m, false, false, false); 937 } 938 return res; 939} 940 941TSAN_INTERCEPTOR(int, pthread_spin_destroy, void *m) { 942 SCOPED_TSAN_INTERCEPTOR(pthread_spin_destroy, m); 943 int res = REAL(pthread_spin_destroy)(m); 944 if (res == 0) { 945 MutexDestroy(thr, pc, (uptr)m); 946 } 947 return res; 948} 949 950TSAN_INTERCEPTOR(int, pthread_spin_lock, void *m) { 951 SCOPED_TSAN_INTERCEPTOR(pthread_spin_lock, m); 952 int res = REAL(pthread_spin_lock)(m); 953 if (res == 0) { 954 MutexLock(thr, pc, (uptr)m); 955 } 956 return res; 957} 958 959TSAN_INTERCEPTOR(int, pthread_spin_trylock, void *m) { 960 SCOPED_TSAN_INTERCEPTOR(pthread_spin_trylock, m); 961 int res = REAL(pthread_spin_trylock)(m); 962 if (res == 0) { 963 MutexLock(thr, pc, (uptr)m); 964 } 965 return res; 966} 967 968TSAN_INTERCEPTOR(int, pthread_spin_unlock, void *m) { 969 SCOPED_TSAN_INTERCEPTOR(pthread_spin_unlock, m); 970 MutexUnlock(thr, pc, (uptr)m); 971 int res = REAL(pthread_spin_unlock)(m); 972 return res; 973} 974 975TSAN_INTERCEPTOR(int, pthread_rwlock_init, void *m, void *a) { 976 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_init, m, a); 977 int res = REAL(pthread_rwlock_init)(m, a); 978 if (res == 0) { 979 MutexCreate(thr, pc, (uptr)m, true, false, false); 980 } 981 return res; 982} 983 984TSAN_INTERCEPTOR(int, pthread_rwlock_destroy, void *m) { 985 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_destroy, m); 986 int res = REAL(pthread_rwlock_destroy)(m); 987 if (res == 0) { 988 MutexDestroy(thr, pc, (uptr)m); 989 } 990 return res; 991} 992 993TSAN_INTERCEPTOR(int, pthread_rwlock_rdlock, void *m) { 994 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_rdlock, m); 995 int res = REAL(pthread_rwlock_rdlock)(m); 996 if (res == 0) { 997 MutexReadLock(thr, pc, (uptr)m); 998 } 999 return res; 1000} 1001 1002TSAN_INTERCEPTOR(int, pthread_rwlock_tryrdlock, void *m) { 1003 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_tryrdlock, m); 1004 int res = REAL(pthread_rwlock_tryrdlock)(m); 1005 if (res == 0) { 1006 MutexReadLock(thr, pc, (uptr)m); 1007 } 1008 return res; 1009} 1010 1011TSAN_INTERCEPTOR(int, pthread_rwlock_timedrdlock, void *m, void *abstime) { 1012 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_timedrdlock, m, abstime); 1013 int res = REAL(pthread_rwlock_timedrdlock)(m, abstime); 1014 if (res == 0) { 1015 MutexReadLock(thr, pc, (uptr)m); 1016 } 1017 return res; 1018} 1019 1020TSAN_INTERCEPTOR(int, pthread_rwlock_wrlock, void *m) { 1021 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_wrlock, m); 1022 int res = REAL(pthread_rwlock_wrlock)(m); 1023 if (res == 0) { 1024 MutexLock(thr, pc, (uptr)m); 1025 } 1026 return res; 1027} 1028 1029TSAN_INTERCEPTOR(int, pthread_rwlock_trywrlock, void *m) { 1030 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_trywrlock, m); 1031 int res = REAL(pthread_rwlock_trywrlock)(m); 1032 if (res == 0) { 1033 MutexLock(thr, pc, (uptr)m); 1034 } 1035 return res; 1036} 1037 1038TSAN_INTERCEPTOR(int, pthread_rwlock_timedwrlock, void *m, void *abstime) { 1039 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_timedwrlock, m, abstime); 1040 int res = REAL(pthread_rwlock_timedwrlock)(m, abstime); 1041 if (res == 0) { 1042 MutexLock(thr, pc, (uptr)m); 1043 } 1044 return res; 1045} 1046 1047TSAN_INTERCEPTOR(int, pthread_rwlock_unlock, void *m) { 1048 SCOPED_TSAN_INTERCEPTOR(pthread_rwlock_unlock, m); 1049 MutexReadOrWriteUnlock(thr, pc, (uptr)m); 1050 int res = REAL(pthread_rwlock_unlock)(m); 1051 return res; 1052} 1053 1054// libpthread.so contains several versions of pthread_cond_init symbol. 1055// When we just dlsym() it, we get the wrong (old) version. 1056/* 1057TSAN_INTERCEPTOR(int, pthread_cond_init, void *c, void *a) { 1058 SCOPED_TSAN_INTERCEPTOR(pthread_cond_init, c, a); 1059 int res = REAL(pthread_cond_init)(c, a); 1060 return res; 1061} 1062*/ 1063 1064TSAN_INTERCEPTOR(int, pthread_cond_destroy, void *c) { 1065 SCOPED_TSAN_INTERCEPTOR(pthread_cond_destroy, c); 1066 int res = REAL(pthread_cond_destroy)(c); 1067 return res; 1068} 1069 1070TSAN_INTERCEPTOR(int, pthread_cond_signal, void *c) { 1071 SCOPED_TSAN_INTERCEPTOR(pthread_cond_signal, c); 1072 int res = REAL(pthread_cond_signal)(c); 1073 return res; 1074} 1075 1076TSAN_INTERCEPTOR(int, pthread_cond_broadcast, void *c) { 1077 SCOPED_TSAN_INTERCEPTOR(pthread_cond_broadcast, c); 1078 int res = REAL(pthread_cond_broadcast)(c); 1079 return res; 1080} 1081 1082TSAN_INTERCEPTOR(int, pthread_cond_wait, void *c, void *m) { 1083 SCOPED_TSAN_INTERCEPTOR(pthread_cond_wait, c, m); 1084 MutexUnlock(thr, pc, (uptr)m); 1085 int res = REAL(pthread_cond_wait)(c, m); 1086 MutexLock(thr, pc, (uptr)m); 1087 return res; 1088} 1089 1090TSAN_INTERCEPTOR(int, pthread_cond_timedwait, void *c, void *m, void *abstime) { 1091 SCOPED_TSAN_INTERCEPTOR(pthread_cond_timedwait, c, m, abstime); 1092 MutexUnlock(thr, pc, (uptr)m); 1093 int res = REAL(pthread_cond_timedwait)(c, m, abstime); 1094 MutexLock(thr, pc, (uptr)m); 1095 return res; 1096} 1097 1098TSAN_INTERCEPTOR(int, pthread_barrier_init, void *b, void *a, unsigned count) { 1099 SCOPED_TSAN_INTERCEPTOR(pthread_barrier_init, b, a, count); 1100 MemoryWrite(thr, pc, (uptr)b, kSizeLog1); 1101 int res = REAL(pthread_barrier_init)(b, a, count); 1102 return res; 1103} 1104 1105TSAN_INTERCEPTOR(int, pthread_barrier_destroy, void *b) { 1106 SCOPED_TSAN_INTERCEPTOR(pthread_barrier_destroy, b); 1107 MemoryWrite(thr, pc, (uptr)b, kSizeLog1); 1108 int res = REAL(pthread_barrier_destroy)(b); 1109 return res; 1110} 1111 1112TSAN_INTERCEPTOR(int, pthread_barrier_wait, void *b) { 1113 SCOPED_TSAN_INTERCEPTOR(pthread_barrier_wait, b); 1114 Release(thr, pc, (uptr)b); 1115 MemoryRead(thr, pc, (uptr)b, kSizeLog1); 1116 int res = REAL(pthread_barrier_wait)(b); 1117 MemoryRead(thr, pc, (uptr)b, kSizeLog1); 1118 if (res == 0 || res == PTHREAD_BARRIER_SERIAL_THREAD) { 1119 Acquire(thr, pc, (uptr)b); 1120 } 1121 return res; 1122} 1123 1124TSAN_INTERCEPTOR(int, pthread_once, void *o, void (*f)()) { 1125 SCOPED_TSAN_INTERCEPTOR(pthread_once, o, f); 1126 if (o == 0 || f == 0) 1127 return EINVAL; 1128 atomic_uint32_t *a = static_cast<atomic_uint32_t*>(o); 1129 u32 v = atomic_load(a, memory_order_acquire); 1130 if (v == 0 && atomic_compare_exchange_strong(a, &v, 1, 1131 memory_order_relaxed)) { 1132 const int old_in_rtl = thr->in_rtl; 1133 thr->in_rtl = 0; 1134 (*f)(); 1135 CHECK_EQ(thr->in_rtl, 0); 1136 thr->in_rtl = old_in_rtl; 1137 Release(thr, pc, (uptr)o); 1138 atomic_store(a, 2, memory_order_release); 1139 } else { 1140 while (v != 2) { 1141 pthread_yield(); 1142 v = atomic_load(a, memory_order_acquire); 1143 } 1144 Acquire(thr, pc, (uptr)o); 1145 } 1146 return 0; 1147} 1148 1149TSAN_INTERCEPTOR(int, sem_init, void *s, int pshared, unsigned value) { 1150 SCOPED_TSAN_INTERCEPTOR(sem_init, s, pshared, value); 1151 int res = REAL(sem_init)(s, pshared, value); 1152 return res; 1153} 1154 1155TSAN_INTERCEPTOR(int, sem_destroy, void *s) { 1156 SCOPED_TSAN_INTERCEPTOR(sem_destroy, s); 1157 int res = REAL(sem_destroy)(s); 1158 return res; 1159} 1160 1161TSAN_INTERCEPTOR(int, sem_wait, void *s) { 1162 SCOPED_TSAN_INTERCEPTOR(sem_wait, s); 1163 int res = BLOCK_REAL(sem_wait)(s); 1164 if (res == 0) { 1165 Acquire(thr, pc, (uptr)s); 1166 } 1167 return res; 1168} 1169 1170TSAN_INTERCEPTOR(int, sem_trywait, void *s) { 1171 SCOPED_TSAN_INTERCEPTOR(sem_trywait, s); 1172 int res = BLOCK_REAL(sem_trywait)(s); 1173 if (res == 0) { 1174 Acquire(thr, pc, (uptr)s); 1175 } 1176 return res; 1177} 1178 1179TSAN_INTERCEPTOR(int, sem_timedwait, void *s, void *abstime) { 1180 SCOPED_TSAN_INTERCEPTOR(sem_timedwait, s, abstime); 1181 int res = BLOCK_REAL(sem_timedwait)(s, abstime); 1182 if (res == 0) { 1183 Acquire(thr, pc, (uptr)s); 1184 } 1185 return res; 1186} 1187 1188TSAN_INTERCEPTOR(int, sem_post, void *s) { 1189 SCOPED_TSAN_INTERCEPTOR(sem_post, s); 1190 Release(thr, pc, (uptr)s); 1191 int res = REAL(sem_post)(s); 1192 return res; 1193} 1194 1195TSAN_INTERCEPTOR(int, sem_getvalue, void *s, int *sval) { 1196 SCOPED_TSAN_INTERCEPTOR(sem_getvalue, s, sval); 1197 int res = REAL(sem_getvalue)(s, sval); 1198 if (res == 0) { 1199 Acquire(thr, pc, (uptr)s); 1200 } 1201 return res; 1202} 1203 1204TSAN_INTERCEPTOR(int, __xstat, int version, const char *path, void *buf) { 1205 SCOPED_TSAN_INTERCEPTOR(__xstat, version, path, buf); 1206 return REAL(__xstat)(version, path, buf); 1207} 1208 1209TSAN_INTERCEPTOR(int, stat, const char *path, void *buf) { 1210 SCOPED_TSAN_INTERCEPTOR(__xstat, 0, path, buf); 1211 return REAL(__xstat)(0, path, buf); 1212} 1213 1214TSAN_INTERCEPTOR(int, __xstat64, int version, const char *path, void *buf) { 1215 SCOPED_TSAN_INTERCEPTOR(__xstat64, version, path, buf); 1216 return REAL(__xstat64)(version, path, buf); 1217} 1218 1219TSAN_INTERCEPTOR(int, stat64, const char *path, void *buf) { 1220 SCOPED_TSAN_INTERCEPTOR(__xstat64, 0, path, buf); 1221 return REAL(__xstat64)(0, path, buf); 1222} 1223 1224TSAN_INTERCEPTOR(int, __lxstat, int version, const char *path, void *buf) { 1225 SCOPED_TSAN_INTERCEPTOR(__lxstat, version, path, buf); 1226 return REAL(__lxstat)(version, path, buf); 1227} 1228 1229TSAN_INTERCEPTOR(int, lstat, const char *path, void *buf) { 1230 SCOPED_TSAN_INTERCEPTOR(__lxstat, 0, path, buf); 1231 return REAL(__lxstat)(0, path, buf); 1232} 1233 1234TSAN_INTERCEPTOR(int, __lxstat64, int version, const char *path, void *buf) { 1235 SCOPED_TSAN_INTERCEPTOR(__lxstat64, version, path, buf); 1236 return REAL(__lxstat64)(version, path, buf); 1237} 1238 1239TSAN_INTERCEPTOR(int, lstat64, const char *path, void *buf) { 1240 SCOPED_TSAN_INTERCEPTOR(__lxstat64, 0, path, buf); 1241 return REAL(__lxstat64)(0, path, buf); 1242} 1243 1244TSAN_INTERCEPTOR(int, __fxstat, int version, int fd, void *buf) { 1245 SCOPED_TSAN_INTERCEPTOR(__fxstat, version, fd, buf); 1246 if (fd > 0) 1247 FdAccess(thr, pc, fd); 1248 return REAL(__fxstat)(version, fd, buf); 1249} 1250 1251TSAN_INTERCEPTOR(int, fstat, int fd, void *buf) { 1252 SCOPED_TSAN_INTERCEPTOR(__fxstat, 0, fd, buf); 1253 if (fd > 0) 1254 FdAccess(thr, pc, fd); 1255 return REAL(__fxstat)(0, fd, buf); 1256} 1257 1258TSAN_INTERCEPTOR(int, __fxstat64, int version, int fd, void *buf) { 1259 SCOPED_TSAN_INTERCEPTOR(__fxstat64, version, fd, buf); 1260 if (fd > 0) 1261 FdAccess(thr, pc, fd); 1262 return REAL(__fxstat64)(version, fd, buf); 1263} 1264 1265TSAN_INTERCEPTOR(int, fstat64, int fd, void *buf) { 1266 SCOPED_TSAN_INTERCEPTOR(__fxstat64, 0, fd, buf); 1267 if (fd > 0) 1268 FdAccess(thr, pc, fd); 1269 return REAL(__fxstat64)(0, fd, buf); 1270} 1271 1272TSAN_INTERCEPTOR(int, open, const char *name, int flags, int mode) { 1273 SCOPED_TSAN_INTERCEPTOR(open, name, flags, mode); 1274 int fd = REAL(open)(name, flags, mode); 1275 if (fd >= 0) 1276 FdFileCreate(thr, pc, fd); 1277 return fd; 1278} 1279 1280TSAN_INTERCEPTOR(int, open64, const char *name, int flags, int mode) { 1281 SCOPED_TSAN_INTERCEPTOR(open64, name, flags, mode); 1282 int fd = REAL(open64)(name, flags, mode); 1283 if (fd >= 0) 1284 FdFileCreate(thr, pc, fd); 1285 return fd; 1286} 1287 1288TSAN_INTERCEPTOR(int, creat, const char *name, int mode) { 1289 SCOPED_TSAN_INTERCEPTOR(creat, name, mode); 1290 int fd = REAL(creat)(name, mode); 1291 if (fd >= 0) 1292 FdFileCreate(thr, pc, fd); 1293 return fd; 1294} 1295 1296TSAN_INTERCEPTOR(int, creat64, const char *name, int mode) { 1297 SCOPED_TSAN_INTERCEPTOR(creat64, name, mode); 1298 int fd = REAL(creat64)(name, mode); 1299 if (fd >= 0) 1300 FdFileCreate(thr, pc, fd); 1301 return fd; 1302} 1303 1304TSAN_INTERCEPTOR(int, dup, int oldfd) { 1305 SCOPED_TSAN_INTERCEPTOR(dup, oldfd); 1306 int newfd = REAL(dup)(oldfd); 1307 if (oldfd >= 0 && newfd >= 0 && newfd != oldfd) 1308 FdDup(thr, pc, oldfd, newfd); 1309 return newfd; 1310} 1311 1312TSAN_INTERCEPTOR(int, dup2, int oldfd, int newfd) { 1313 SCOPED_TSAN_INTERCEPTOR(dup2, oldfd, newfd); 1314 int newfd2 = REAL(dup2)(oldfd, newfd); 1315 if (oldfd >= 0 && newfd2 >= 0 && newfd2 != oldfd) 1316 FdDup(thr, pc, oldfd, newfd2); 1317 return newfd2; 1318} 1319 1320TSAN_INTERCEPTOR(int, dup3, int oldfd, int newfd, int flags) { 1321 SCOPED_TSAN_INTERCEPTOR(dup3, oldfd, newfd, flags); 1322 int newfd2 = REAL(dup3)(oldfd, newfd, flags); 1323 if (oldfd >= 0 && newfd2 >= 0 && newfd2 != oldfd) 1324 FdDup(thr, pc, oldfd, newfd2); 1325 return newfd2; 1326} 1327 1328TSAN_INTERCEPTOR(int, eventfd, unsigned initval, int flags) { 1329 SCOPED_TSAN_INTERCEPTOR(eventfd, initval, flags); 1330 int fd = REAL(eventfd)(initval, flags); 1331 if (fd >= 0) 1332 FdEventCreate(thr, pc, fd); 1333 return fd; 1334} 1335 1336TSAN_INTERCEPTOR(int, signalfd, int fd, void *mask, int flags) { 1337 SCOPED_TSAN_INTERCEPTOR(signalfd, fd, mask, flags); 1338 if (fd >= 0) 1339 FdClose(thr, pc, fd); 1340 fd = REAL(signalfd)(fd, mask, flags); 1341 if (fd >= 0) 1342 FdSignalCreate(thr, pc, fd); 1343 return fd; 1344} 1345 1346TSAN_INTERCEPTOR(int, inotify_init, int fake) { 1347 SCOPED_TSAN_INTERCEPTOR(inotify_init, fake); 1348 int fd = REAL(inotify_init)(fake); 1349 if (fd >= 0) 1350 FdInotifyCreate(thr, pc, fd); 1351 return fd; 1352} 1353 1354TSAN_INTERCEPTOR(int, inotify_init1, int flags) { 1355 SCOPED_TSAN_INTERCEPTOR(inotify_init1, flags); 1356 int fd = REAL(inotify_init1)(flags); 1357 if (fd >= 0) 1358 FdInotifyCreate(thr, pc, fd); 1359 return fd; 1360} 1361 1362TSAN_INTERCEPTOR(int, socket, int domain, int type, int protocol) { 1363 SCOPED_TSAN_INTERCEPTOR(socket, domain, type, protocol); 1364 int fd = REAL(socket)(domain, type, protocol); 1365 if (fd >= 0) 1366 FdSocketCreate(thr, pc, fd); 1367 return fd; 1368} 1369 1370TSAN_INTERCEPTOR(int, socketpair, int domain, int type, int protocol, int *fd) { 1371 SCOPED_TSAN_INTERCEPTOR(socketpair, domain, type, protocol, fd); 1372 int res = REAL(socketpair)(domain, type, protocol, fd); 1373 if (res == 0 && fd[0] >= 0 && fd[1] >= 0) 1374 FdPipeCreate(thr, pc, fd[0], fd[1]); 1375 return res; 1376} 1377 1378TSAN_INTERCEPTOR(int, connect, int fd, void *addr, unsigned addrlen) { 1379 SCOPED_TSAN_INTERCEPTOR(connect, fd, addr, addrlen); 1380 FdSocketConnecting(thr, pc, fd); 1381 int res = REAL(connect)(fd, addr, addrlen); 1382 if (res == 0 && fd >= 0) 1383 FdSocketConnect(thr, pc, fd); 1384 return res; 1385} 1386 1387TSAN_INTERCEPTOR(int, bind, int fd, void *addr, unsigned addrlen) { 1388 SCOPED_TSAN_INTERCEPTOR(bind, fd, addr, addrlen); 1389 int res = REAL(bind)(fd, addr, addrlen); 1390 if (fd > 0 && res == 0) 1391 FdAccess(thr, pc, fd); 1392 return res; 1393} 1394 1395TSAN_INTERCEPTOR(int, listen, int fd, int backlog) { 1396 SCOPED_TSAN_INTERCEPTOR(listen, fd, backlog); 1397 int res = REAL(listen)(fd, backlog); 1398 if (fd > 0 && res == 0) 1399 FdAccess(thr, pc, fd); 1400 return res; 1401} 1402 1403TSAN_INTERCEPTOR(int, epoll_create, int size) { 1404 SCOPED_TSAN_INTERCEPTOR(epoll_create, size); 1405 int fd = REAL(epoll_create)(size); 1406 if (fd >= 0) 1407 FdPollCreate(thr, pc, fd); 1408 return fd; 1409} 1410 1411TSAN_INTERCEPTOR(int, epoll_create1, int flags) { 1412 SCOPED_TSAN_INTERCEPTOR(epoll_create1, flags); 1413 int fd = REAL(epoll_create1)(flags); 1414 if (fd >= 0) 1415 FdPollCreate(thr, pc, fd); 1416 return fd; 1417} 1418 1419TSAN_INTERCEPTOR(int, close, int fd) { 1420 SCOPED_TSAN_INTERCEPTOR(close, fd); 1421 if (fd >= 0) 1422 FdClose(thr, pc, fd); 1423 return REAL(close)(fd); 1424} 1425 1426TSAN_INTERCEPTOR(int, __close, int fd) { 1427 SCOPED_TSAN_INTERCEPTOR(__close, fd); 1428 if (fd >= 0) 1429 FdClose(thr, pc, fd); 1430 return REAL(__close)(fd); 1431} 1432 1433// glibc guts 1434TSAN_INTERCEPTOR(void, __res_iclose, void *state, bool free_addr) { 1435 SCOPED_TSAN_INTERCEPTOR(__res_iclose, state, free_addr); 1436 int fds[64]; 1437 int cnt = ExtractResolvFDs(state, fds, ARRAY_SIZE(fds)); 1438 for (int i = 0; i < cnt; i++) { 1439 if (fds[i] > 0) 1440 FdClose(thr, pc, fds[i]); 1441 } 1442 REAL(__res_iclose)(state, free_addr); 1443} 1444 1445TSAN_INTERCEPTOR(int, pipe, int *pipefd) { 1446 SCOPED_TSAN_INTERCEPTOR(pipe, pipefd); 1447 int res = REAL(pipe)(pipefd); 1448 if (res == 0 && pipefd[0] >= 0 && pipefd[1] >= 0) 1449 FdPipeCreate(thr, pc, pipefd[0], pipefd[1]); 1450 return res; 1451} 1452 1453TSAN_INTERCEPTOR(int, pipe2, int *pipefd, int flags) { 1454 SCOPED_TSAN_INTERCEPTOR(pipe2, pipefd, flags); 1455 int res = REAL(pipe2)(pipefd, flags); 1456 if (res == 0 && pipefd[0] >= 0 && pipefd[1] >= 0) 1457 FdPipeCreate(thr, pc, pipefd[0], pipefd[1]); 1458 return res; 1459} 1460 1461TSAN_INTERCEPTOR(long_t, send, int fd, void *buf, long_t len, int flags) { 1462 SCOPED_TSAN_INTERCEPTOR(send, fd, buf, len, flags); 1463 if (fd >= 0) 1464 FdRelease(thr, pc, fd); 1465 int res = REAL(send)(fd, buf, len, flags); 1466 return res; 1467} 1468 1469TSAN_INTERCEPTOR(long_t, sendmsg, int fd, void *msg, int flags) { 1470 SCOPED_TSAN_INTERCEPTOR(sendmsg, fd, msg, flags); 1471 if (fd >= 0) 1472 FdRelease(thr, pc, fd); 1473 int res = REAL(sendmsg)(fd, msg, flags); 1474 return res; 1475} 1476 1477TSAN_INTERCEPTOR(long_t, recv, int fd, void *buf, long_t len, int flags) { 1478 SCOPED_TSAN_INTERCEPTOR(recv, fd, buf, len, flags); 1479 int res = REAL(recv)(fd, buf, len, flags); 1480 if (res >= 0 && fd >= 0) { 1481 FdAcquire(thr, pc, fd); 1482 } 1483 return res; 1484} 1485 1486TSAN_INTERCEPTOR(int, unlink, char *path) { 1487 SCOPED_TSAN_INTERCEPTOR(unlink, path); 1488 Release(thr, pc, File2addr(path)); 1489 int res = REAL(unlink)(path); 1490 return res; 1491} 1492 1493TSAN_INTERCEPTOR(void*, fopen, char *path, char *mode) { 1494 SCOPED_TSAN_INTERCEPTOR(fopen, path, mode); 1495 void *res = REAL(fopen)(path, mode); 1496 Acquire(thr, pc, File2addr(path)); 1497 if (res) { 1498 int fd = fileno_unlocked(res); 1499 if (fd >= 0) 1500 FdFileCreate(thr, pc, fd); 1501 } 1502 return res; 1503} 1504 1505TSAN_INTERCEPTOR(void*, freopen, char *path, char *mode, void *stream) { 1506 SCOPED_TSAN_INTERCEPTOR(freopen, path, mode, stream); 1507 if (stream) { 1508 int fd = fileno_unlocked(stream); 1509 if (fd >= 0) 1510 FdClose(thr, pc, fd); 1511 } 1512 void *res = REAL(freopen)(path, mode, stream); 1513 Acquire(thr, pc, File2addr(path)); 1514 if (res) { 1515 int fd = fileno_unlocked(res); 1516 if (fd >= 0) 1517 FdFileCreate(thr, pc, fd); 1518 } 1519 return res; 1520} 1521 1522TSAN_INTERCEPTOR(int, fclose, void *stream) { 1523 { 1524 SCOPED_TSAN_INTERCEPTOR(fclose, stream); 1525 if (stream) { 1526 int fd = fileno_unlocked(stream); 1527 if (fd >= 0) 1528 FdClose(thr, pc, fd); 1529 } 1530 } 1531 return REAL(fclose)(stream); 1532} 1533 1534TSAN_INTERCEPTOR(uptr, fread, void *ptr, uptr size, uptr nmemb, void *f) { 1535 { 1536 SCOPED_TSAN_INTERCEPTOR(fread, ptr, size, nmemb, f); 1537 MemoryAccessRange(thr, pc, (uptr)ptr, size * nmemb, true); 1538 } 1539 return REAL(fread)(ptr, size, nmemb, f); 1540} 1541 1542TSAN_INTERCEPTOR(uptr, fwrite, const void *p, uptr size, uptr nmemb, void *f) { 1543 { 1544 SCOPED_TSAN_INTERCEPTOR(fwrite, p, size, nmemb, f); 1545 MemoryAccessRange(thr, pc, (uptr)p, size * nmemb, false); 1546 } 1547 return REAL(fwrite)(p, size, nmemb, f); 1548} 1549 1550TSAN_INTERCEPTOR(int, fflush, void *stream) { 1551 SCOPED_TSAN_INTERCEPTOR(fflush, stream); 1552 return REAL(fflush)(stream); 1553} 1554 1555TSAN_INTERCEPTOR(void, abort, int fake) { 1556 SCOPED_TSAN_INTERCEPTOR(abort, fake); 1557 REAL(fflush)(0); 1558 REAL(abort)(fake); 1559} 1560 1561TSAN_INTERCEPTOR(int, puts, const char *s) { 1562 SCOPED_TSAN_INTERCEPTOR(puts, s); 1563 MemoryAccessRange(thr, pc, (uptr)s, internal_strlen(s), false); 1564 return REAL(puts)(s); 1565} 1566 1567TSAN_INTERCEPTOR(int, rmdir, char *path) { 1568 SCOPED_TSAN_INTERCEPTOR(rmdir, path); 1569 Release(thr, pc, Dir2addr(path)); 1570 int res = REAL(rmdir)(path); 1571 return res; 1572} 1573 1574TSAN_INTERCEPTOR(void*, opendir, char *path) { 1575 SCOPED_TSAN_INTERCEPTOR(opendir, path); 1576 void *res = REAL(opendir)(path); 1577 if (res != 0) 1578 Acquire(thr, pc, Dir2addr(path)); 1579 return res; 1580} 1581 1582TSAN_INTERCEPTOR(int, epoll_ctl, int epfd, int op, int fd, void *ev) { 1583 SCOPED_TSAN_INTERCEPTOR(epoll_ctl, epfd, op, fd, ev); 1584 if (op == EPOLL_CTL_ADD && epfd >= 0) { 1585 FdRelease(thr, pc, epfd); 1586 } 1587 int res = REAL(epoll_ctl)(epfd, op, fd, ev); 1588 if (fd >= 0) 1589 FdAccess(thr, pc, fd); 1590 return res; 1591} 1592 1593TSAN_INTERCEPTOR(int, epoll_wait, int epfd, void *ev, int cnt, int timeout) { 1594 SCOPED_TSAN_INTERCEPTOR(epoll_wait, epfd, ev, cnt, timeout); 1595 int res = BLOCK_REAL(epoll_wait)(epfd, ev, cnt, timeout); 1596 if (res > 0 && epfd >= 0) { 1597 FdAcquire(thr, pc, epfd); 1598 } 1599 return res; 1600} 1601 1602void ALWAYS_INLINE rtl_generic_sighandler(bool sigact, int sig, 1603 my_siginfo_t *info, void *ctx) { 1604 ThreadState *thr = cur_thread(); 1605 SignalContext *sctx = SigCtx(thr); 1606 // Don't mess with synchronous signals. 1607 if (sig == SIGSEGV || sig == SIGBUS || sig == SIGILL || 1608 sig == SIGABRT || sig == SIGFPE || sig == SIGPIPE || sig == SIGSYS || 1609 // If we are sending signal to ourselves, we must process it now. 1610 (sctx && sig == sctx->int_signal_send) || 1611 // If we are in blocking function, we can safely process it now 1612 // (but check if we are in a recursive interceptor, 1613 // i.e. pthread_join()->munmap()). 1614 (sctx && sctx->in_blocking_func == 1 && thr->in_rtl == 1)) { 1615 int in_rtl = thr->in_rtl; 1616 thr->in_rtl = 0; 1617 CHECK_EQ(thr->in_signal_handler, false); 1618 thr->in_signal_handler = true; 1619 if (sigact) 1620 sigactions[sig].sa_sigaction(sig, info, ctx); 1621 else 1622 sigactions[sig].sa_handler(sig); 1623 CHECK_EQ(thr->in_signal_handler, true); 1624 thr->in_signal_handler = false; 1625 thr->in_rtl = in_rtl; 1626 return; 1627 } 1628 1629 if (sctx == 0) 1630 return; 1631 SignalDesc *signal = &sctx->pending_signals[sig]; 1632 if (signal->armed == false) { 1633 signal->armed = true; 1634 signal->sigaction = sigact; 1635 if (info) 1636 internal_memcpy(&signal->siginfo, info, sizeof(*info)); 1637 if (ctx) 1638 internal_memcpy(&signal->ctx, ctx, sizeof(signal->ctx)); 1639 sctx->pending_signal_count++; 1640 } 1641} 1642 1643static void rtl_sighandler(int sig) { 1644 rtl_generic_sighandler(false, sig, 0, 0); 1645} 1646 1647static void rtl_sigaction(int sig, my_siginfo_t *info, void *ctx) { 1648 rtl_generic_sighandler(true, sig, info, ctx); 1649} 1650 1651TSAN_INTERCEPTOR(int, sigaction, int sig, sigaction_t *act, sigaction_t *old) { 1652 SCOPED_TSAN_INTERCEPTOR(sigaction, sig, act, old); 1653 if (old) 1654 internal_memcpy(old, &sigactions[sig], sizeof(*old)); 1655 if (act == 0) 1656 return 0; 1657 internal_memcpy(&sigactions[sig], act, sizeof(*act)); 1658 sigaction_t newact; 1659 internal_memcpy(&newact, act, sizeof(newact)); 1660 sigfillset(&newact.sa_mask); 1661 if (act->sa_handler != SIG_IGN && act->sa_handler != SIG_DFL) { 1662 if (newact.sa_flags & SA_SIGINFO) 1663 newact.sa_sigaction = rtl_sigaction; 1664 else 1665 newact.sa_handler = rtl_sighandler; 1666 } 1667 int res = REAL(sigaction)(sig, &newact, 0); 1668 return res; 1669} 1670 1671TSAN_INTERCEPTOR(sighandler_t, signal, int sig, sighandler_t h) { 1672 sigaction_t act; 1673 act.sa_handler = h; 1674 REAL(memset)(&act.sa_mask, -1, sizeof(act.sa_mask)); 1675 act.sa_flags = 0; 1676 sigaction_t old; 1677 int res = sigaction(sig, &act, &old); 1678 if (res) 1679 return SIG_ERR; 1680 return old.sa_handler; 1681} 1682 1683TSAN_INTERCEPTOR(int, sigsuspend, const sigset_t *mask) { 1684 SCOPED_TSAN_INTERCEPTOR(sigsuspend, mask); 1685 return REAL(sigsuspend)(mask); 1686} 1687 1688TSAN_INTERCEPTOR(int, raise, int sig) { 1689 SCOPED_TSAN_INTERCEPTOR(raise, sig); 1690 SignalContext *sctx = SigCtx(thr); 1691 CHECK_NE(sctx, 0); 1692 int prev = sctx->int_signal_send; 1693 sctx->int_signal_send = sig; 1694 int res = REAL(raise)(sig); 1695 CHECK_EQ(sctx->int_signal_send, sig); 1696 sctx->int_signal_send = prev; 1697 return res; 1698} 1699 1700TSAN_INTERCEPTOR(int, kill, int pid, int sig) { 1701 SCOPED_TSAN_INTERCEPTOR(kill, pid, sig); 1702 SignalContext *sctx = SigCtx(thr); 1703 CHECK_NE(sctx, 0); 1704 int prev = sctx->int_signal_send; 1705 if (pid == (int)internal_getpid()) { 1706 sctx->int_signal_send = sig; 1707 } 1708 int res = REAL(kill)(pid, sig); 1709 if (pid == (int)internal_getpid()) { 1710 CHECK_EQ(sctx->int_signal_send, sig); 1711 sctx->int_signal_send = prev; 1712 } 1713 return res; 1714} 1715 1716TSAN_INTERCEPTOR(int, pthread_kill, void *tid, int sig) { 1717 SCOPED_TSAN_INTERCEPTOR(pthread_kill, tid, sig); 1718 SignalContext *sctx = SigCtx(thr); 1719 CHECK_NE(sctx, 0); 1720 int prev = sctx->int_signal_send; 1721 if (tid == pthread_self()) { 1722 sctx->int_signal_send = sig; 1723 } 1724 int res = REAL(pthread_kill)(tid, sig); 1725 if (tid == pthread_self()) { 1726 CHECK_EQ(sctx->int_signal_send, sig); 1727 sctx->int_signal_send = prev; 1728 } 1729 return res; 1730} 1731 1732TSAN_INTERCEPTOR(int, gettimeofday, void *tv, void *tz) { 1733 SCOPED_TSAN_INTERCEPTOR(gettimeofday, tv, tz); 1734 // It's intercepted merely to process pending signals. 1735 return REAL(gettimeofday)(tv, tz); 1736} 1737 1738// Linux kernel has a bug that leads to kernel deadlock if a process 1739// maps TBs of memory and then calls mlock(). 1740static void MlockIsUnsupported() { 1741 static atomic_uint8_t printed; 1742 if (atomic_exchange(&printed, 1, memory_order_relaxed)) 1743 return; 1744 if (flags()->verbosity > 0) 1745 Printf("INFO: ThreadSanitizer ignores mlock/mlockall/munlock/munlockall\n"); 1746} 1747 1748TSAN_INTERCEPTOR(int, mlock, const void *addr, uptr len) { 1749 MlockIsUnsupported(); 1750 return 0; 1751} 1752 1753TSAN_INTERCEPTOR(int, munlock, const void *addr, uptr len) { 1754 MlockIsUnsupported(); 1755 return 0; 1756} 1757 1758TSAN_INTERCEPTOR(int, mlockall, int flags) { 1759 MlockIsUnsupported(); 1760 return 0; 1761} 1762 1763TSAN_INTERCEPTOR(int, munlockall, void) { 1764 MlockIsUnsupported(); 1765 return 0; 1766} 1767 1768TSAN_INTERCEPTOR(int, fork, int fake) { 1769 SCOPED_TSAN_INTERCEPTOR(fork, fake); 1770 // It's intercepted merely to process pending signals. 1771 int pid = REAL(fork)(fake); 1772 if (pid == 0) { 1773 // child 1774 FdOnFork(thr, pc); 1775 } else if (pid > 0) { 1776 // parent 1777 } 1778 return pid; 1779} 1780 1781struct TsanInterceptorContext { 1782 ThreadState *thr; 1783 const uptr caller_pc; 1784 const uptr pc; 1785}; 1786 1787#include "sanitizer_common/sanitizer_platform_interceptors.h" 1788// Causes interceptor recursion (getpwuid_r() calls fopen()) 1789#undef SANITIZER_INTERCEPT_GETPWNAM_AND_FRIENDS 1790#undef SANITIZER_INTERCEPT_GETPWNAM_R_AND_FRIENDS 1791// Causes interceptor recursion (getaddrinfo() and fopen()) 1792#undef SANITIZER_INTERCEPT_GETADDRINFO 1793#undef SANITIZER_INTERCEPT_GETNAMEINFO 1794// Causes interceptor recursion (glob64() calls lstat64()) 1795#undef SANITIZER_INTERCEPT_GLOB 1796 1797#define COMMON_INTERCEPTOR_UNPOISON_PARAM(ctx, count) \ 1798 do { \ 1799 } while (false) 1800#define COMMON_INTERCEPTOR_WRITE_RANGE(ctx, ptr, size) \ 1801 MemoryAccessRange(((TsanInterceptorContext *)ctx)->thr, \ 1802 ((TsanInterceptorContext *)ctx)->pc, (uptr)ptr, size, \ 1803 true) 1804#define COMMON_INTERCEPTOR_READ_RANGE(ctx, ptr, size) \ 1805 MemoryAccessRange(((TsanInterceptorContext *) ctx)->thr, \ 1806 ((TsanInterceptorContext *) ctx)->pc, (uptr) ptr, size, \ 1807 false) 1808#define COMMON_INTERCEPTOR_ENTER(ctx, func, ...) \ 1809 SCOPED_TSAN_INTERCEPTOR(func, __VA_ARGS__); \ 1810 TsanInterceptorContext _ctx = {thr, caller_pc, pc}; \ 1811 ctx = (void *)&_ctx; \ 1812 (void) ctx; 1813#define COMMON_INTERCEPTOR_FD_ACQUIRE(ctx, fd) \ 1814 FdAcquire(((TsanInterceptorContext *) ctx)->thr, pc, fd) 1815#define COMMON_INTERCEPTOR_FD_RELEASE(ctx, fd) \ 1816 FdRelease(((TsanInterceptorContext *) ctx)->thr, pc, fd) 1817#define COMMON_INTERCEPTOR_FD_SOCKET_ACCEPT(ctx, fd, newfd) \ 1818 FdSocketAccept(((TsanInterceptorContext *) ctx)->thr, pc, fd, newfd) 1819#define COMMON_INTERCEPTOR_SET_THREAD_NAME(ctx, name) \ 1820 ThreadSetName(((TsanInterceptorContext *) ctx)->thr, name) 1821#define COMMON_INTERCEPTOR_BLOCK_REAL(name) BLOCK_REAL(name) 1822#include "sanitizer_common/sanitizer_common_interceptors.inc" 1823 1824// FIXME: Implement these with MemoryAccessRange(). 1825#define COMMON_SYSCALL_PRE_READ_RANGE(p, s) 1826#define COMMON_SYSCALL_PRE_WRITE_RANGE(p, s) 1827#define COMMON_SYSCALL_POST_READ_RANGE(p, s) 1828#define COMMON_SYSCALL_POST_WRITE_RANGE(p, s) 1829#include "sanitizer_common/sanitizer_common_syscalls.inc" 1830 1831namespace __tsan { 1832 1833void ProcessPendingSignals(ThreadState *thr) { 1834 CHECK_EQ(thr->in_rtl, 0); 1835 SignalContext *sctx = SigCtx(thr); 1836 if (sctx == 0 || sctx->pending_signal_count == 0 || thr->in_signal_handler) 1837 return; 1838 Context *ctx = CTX(); 1839 thr->in_signal_handler = true; 1840 sctx->pending_signal_count = 0; 1841 // These are too big for stack. 1842 static THREADLOCAL sigset_t emptyset, oldset; 1843 sigfillset(&emptyset); 1844 pthread_sigmask(SIG_SETMASK, &emptyset, &oldset); 1845 for (int sig = 0; sig < kSigCount; sig++) { 1846 SignalDesc *signal = &sctx->pending_signals[sig]; 1847 if (signal->armed) { 1848 signal->armed = false; 1849 if (sigactions[sig].sa_handler != SIG_DFL 1850 && sigactions[sig].sa_handler != SIG_IGN) { 1851 // Insure that the handler does not spoil errno. 1852 const int saved_errno = errno; 1853 errno = 0; 1854 if (signal->sigaction) 1855 sigactions[sig].sa_sigaction(sig, &signal->siginfo, &signal->ctx); 1856 else 1857 sigactions[sig].sa_handler(sig); 1858 if (flags()->report_bugs && errno != 0) { 1859 ScopedInRtl in_rtl; 1860 __tsan::StackTrace stack; 1861 uptr pc = signal->sigaction ? 1862 (uptr)sigactions[sig].sa_sigaction : 1863 (uptr)sigactions[sig].sa_handler; 1864 pc += 1; // return address is expected, OutputReport() will undo this 1865 stack.Init(&pc, 1); 1866 ThreadRegistryLock l(ctx->thread_registry); 1867 ScopedReport rep(ReportTypeErrnoInSignal); 1868 if (!IsFiredSuppression(ctx, rep, stack)) { 1869 rep.AddStack(&stack); 1870 OutputReport(ctx, rep, rep.GetReport()->stacks[0]); 1871 } 1872 } 1873 errno = saved_errno; 1874 } 1875 } 1876 } 1877 pthread_sigmask(SIG_SETMASK, &oldset, 0); 1878 CHECK_EQ(thr->in_signal_handler, true); 1879 thr->in_signal_handler = false; 1880} 1881 1882static void finalize(void *arg) { 1883 ThreadState * thr = cur_thread(); 1884 uptr pc = 0; 1885 atexit_ctx->exit(thr, pc); 1886 int status = Finalize(cur_thread()); 1887 REAL(fflush)(0); 1888 if (status) 1889 _exit(status); 1890} 1891 1892static void unreachable() { 1893 Printf("FATAL: ThreadSanitizer: unreachable called\n"); 1894 Die(); 1895} 1896 1897void InitializeInterceptors() { 1898 CHECK_GT(cur_thread()->in_rtl, 0); 1899 1900 // We need to setup it early, because functions like dlsym() can call it. 1901 REAL(memset) = internal_memset; 1902 REAL(memcpy) = internal_memcpy; 1903 REAL(memcmp) = internal_memcmp; 1904 1905 // Instruct libc malloc to consume less memory. 1906 mallopt(1, 0); // M_MXFAST 1907 mallopt(-3, 32*1024); // M_MMAP_THRESHOLD 1908 1909 SANITIZER_COMMON_INTERCEPTORS_INIT; 1910 1911 TSAN_INTERCEPT(setjmp); 1912 TSAN_INTERCEPT(_setjmp); 1913 TSAN_INTERCEPT(sigsetjmp); 1914 TSAN_INTERCEPT(__sigsetjmp); 1915 TSAN_INTERCEPT(longjmp); 1916 TSAN_INTERCEPT(siglongjmp); 1917 1918 TSAN_INTERCEPT(malloc); 1919 TSAN_INTERCEPT(__libc_memalign); 1920 TSAN_INTERCEPT(calloc); 1921 TSAN_INTERCEPT(realloc); 1922 TSAN_INTERCEPT(free); 1923 TSAN_INTERCEPT(cfree); 1924 TSAN_INTERCEPT(mmap); 1925 TSAN_INTERCEPT(mmap64); 1926 TSAN_INTERCEPT(munmap); 1927 TSAN_INTERCEPT(memalign); 1928 TSAN_INTERCEPT(valloc); 1929 TSAN_INTERCEPT(pvalloc); 1930 TSAN_INTERCEPT(posix_memalign); 1931 1932 TSAN_INTERCEPT(strlen); 1933 TSAN_INTERCEPT(memset); 1934 TSAN_INTERCEPT(memcpy); 1935 TSAN_INTERCEPT(memchr); 1936 TSAN_INTERCEPT(memrchr); 1937 TSAN_INTERCEPT(memmove); 1938 TSAN_INTERCEPT(memcmp); 1939 TSAN_INTERCEPT(strchr); 1940 TSAN_INTERCEPT(strchrnul); 1941 TSAN_INTERCEPT(strrchr); 1942 TSAN_INTERCEPT(strcpy); // NOLINT 1943 TSAN_INTERCEPT(strncpy); 1944 TSAN_INTERCEPT(strstr); 1945 1946 TSAN_INTERCEPT(pthread_create); 1947 TSAN_INTERCEPT(pthread_join); 1948 TSAN_INTERCEPT(pthread_detach); 1949 1950 TSAN_INTERCEPT(pthread_mutex_init); 1951 TSAN_INTERCEPT(pthread_mutex_destroy); 1952 TSAN_INTERCEPT(pthread_mutex_lock); 1953 TSAN_INTERCEPT(pthread_mutex_trylock); 1954 TSAN_INTERCEPT(pthread_mutex_timedlock); 1955 TSAN_INTERCEPT(pthread_mutex_unlock); 1956 1957 TSAN_INTERCEPT(pthread_spin_init); 1958 TSAN_INTERCEPT(pthread_spin_destroy); 1959 TSAN_INTERCEPT(pthread_spin_lock); 1960 TSAN_INTERCEPT(pthread_spin_trylock); 1961 TSAN_INTERCEPT(pthread_spin_unlock); 1962 1963 TSAN_INTERCEPT(pthread_rwlock_init); 1964 TSAN_INTERCEPT(pthread_rwlock_destroy); 1965 TSAN_INTERCEPT(pthread_rwlock_rdlock); 1966 TSAN_INTERCEPT(pthread_rwlock_tryrdlock); 1967 TSAN_INTERCEPT(pthread_rwlock_timedrdlock); 1968 TSAN_INTERCEPT(pthread_rwlock_wrlock); 1969 TSAN_INTERCEPT(pthread_rwlock_trywrlock); 1970 TSAN_INTERCEPT(pthread_rwlock_timedwrlock); 1971 TSAN_INTERCEPT(pthread_rwlock_unlock); 1972 1973 // TSAN_INTERCEPT(pthread_cond_init); 1974 TSAN_INTERCEPT(pthread_cond_destroy); 1975 TSAN_INTERCEPT(pthread_cond_signal); 1976 TSAN_INTERCEPT(pthread_cond_broadcast); 1977 TSAN_INTERCEPT(pthread_cond_wait); 1978 TSAN_INTERCEPT(pthread_cond_timedwait); 1979 1980 TSAN_INTERCEPT(pthread_barrier_init); 1981 TSAN_INTERCEPT(pthread_barrier_destroy); 1982 TSAN_INTERCEPT(pthread_barrier_wait); 1983 1984 TSAN_INTERCEPT(pthread_once); 1985 1986 TSAN_INTERCEPT(sem_init); 1987 TSAN_INTERCEPT(sem_destroy); 1988 TSAN_INTERCEPT(sem_wait); 1989 TSAN_INTERCEPT(sem_trywait); 1990 TSAN_INTERCEPT(sem_timedwait); 1991 TSAN_INTERCEPT(sem_post); 1992 TSAN_INTERCEPT(sem_getvalue); 1993 1994 TSAN_INTERCEPT(stat); 1995 TSAN_INTERCEPT(__xstat); 1996 TSAN_INTERCEPT(stat64); 1997 TSAN_INTERCEPT(__xstat64); 1998 TSAN_INTERCEPT(lstat); 1999 TSAN_INTERCEPT(__lxstat); 2000 TSAN_INTERCEPT(lstat64); 2001 TSAN_INTERCEPT(__lxstat64); 2002 TSAN_INTERCEPT(fstat); 2003 TSAN_INTERCEPT(__fxstat); 2004 TSAN_INTERCEPT(fstat64); 2005 TSAN_INTERCEPT(__fxstat64); 2006 TSAN_INTERCEPT(open); 2007 TSAN_INTERCEPT(open64); 2008 TSAN_INTERCEPT(creat); 2009 TSAN_INTERCEPT(creat64); 2010 TSAN_INTERCEPT(dup); 2011 TSAN_INTERCEPT(dup2); 2012 TSAN_INTERCEPT(dup3); 2013 TSAN_INTERCEPT(eventfd); 2014 TSAN_INTERCEPT(signalfd); 2015 TSAN_INTERCEPT(inotify_init); 2016 TSAN_INTERCEPT(inotify_init1); 2017 TSAN_INTERCEPT(socket); 2018 TSAN_INTERCEPT(socketpair); 2019 TSAN_INTERCEPT(connect); 2020 TSAN_INTERCEPT(bind); 2021 TSAN_INTERCEPT(listen); 2022 TSAN_INTERCEPT(epoll_create); 2023 TSAN_INTERCEPT(epoll_create1); 2024 TSAN_INTERCEPT(close); 2025 TSAN_INTERCEPT(__close); 2026 TSAN_INTERCEPT(__res_iclose); 2027 TSAN_INTERCEPT(pipe); 2028 TSAN_INTERCEPT(pipe2); 2029 2030 TSAN_INTERCEPT(send); 2031 TSAN_INTERCEPT(sendmsg); 2032 TSAN_INTERCEPT(recv); 2033 2034 TSAN_INTERCEPT(unlink); 2035 TSAN_INTERCEPT(fopen); 2036 TSAN_INTERCEPT(freopen); 2037 TSAN_INTERCEPT(fclose); 2038 TSAN_INTERCEPT(fread); 2039 TSAN_INTERCEPT(fwrite); 2040 TSAN_INTERCEPT(fflush); 2041 TSAN_INTERCEPT(abort); 2042 TSAN_INTERCEPT(puts); 2043 TSAN_INTERCEPT(rmdir); 2044 TSAN_INTERCEPT(opendir); 2045 2046 TSAN_INTERCEPT(epoll_ctl); 2047 TSAN_INTERCEPT(epoll_wait); 2048 2049 TSAN_INTERCEPT(sigaction); 2050 TSAN_INTERCEPT(signal); 2051 TSAN_INTERCEPT(sigsuspend); 2052 TSAN_INTERCEPT(raise); 2053 TSAN_INTERCEPT(kill); 2054 TSAN_INTERCEPT(pthread_kill); 2055 TSAN_INTERCEPT(sleep); 2056 TSAN_INTERCEPT(usleep); 2057 TSAN_INTERCEPT(nanosleep); 2058 TSAN_INTERCEPT(gettimeofday); 2059 2060 TSAN_INTERCEPT(mlock); 2061 TSAN_INTERCEPT(munlock); 2062 TSAN_INTERCEPT(mlockall); 2063 TSAN_INTERCEPT(munlockall); 2064 2065 TSAN_INTERCEPT(fork); 2066 TSAN_INTERCEPT(on_exit); 2067 TSAN_INTERCEPT(__cxa_atexit); 2068 2069 // Need to setup it, because interceptors check that the function is resolved. 2070 // But atexit is emitted directly into the module, so can't be resolved. 2071 REAL(atexit) = (int(*)(void(*)()))unreachable; 2072 atexit_ctx = new(internal_alloc(MBlockAtExit, sizeof(AtExitContext))) 2073 AtExitContext(); 2074 2075 if (REAL(__cxa_atexit)(&finalize, 0, 0)) { 2076 Printf("ThreadSanitizer: failed to setup atexit callback\n"); 2077 Die(); 2078 } 2079 2080 if (pthread_key_create(&g_thread_finalize_key, &thread_finalize)) { 2081 Printf("ThreadSanitizer: failed to create thread key\n"); 2082 Die(); 2083 } 2084 2085 FdInit(); 2086} 2087 2088void internal_start_thread(void(*func)(void *arg), void *arg) { 2089 void *th; 2090 REAL(pthread_create)(&th, 0, (void*(*)(void *arg))func, arg); 2091 REAL(pthread_detach)(th); 2092} 2093 2094} // namespace __tsan 2095