mirror of
https://github.com/chromium/crashpad.git
synced 2024-12-28 07:48:14 +08:00
af594c8deb
While making crashpad_minidump_test run in Chromium’s try- and buildbots (https://crbug.com/779790), crashes in the MinidumpThreadWriter.OneThread_AMD64_Stack test were observed in 32-bit x86 Windows builds produced by Clang in the release configuration. These crashes occurred in crashpad::test::InitializeMinidumpContextAMD64, which heap-allocates a MinidumpContextAMD64Writer object. These objects have an alignment requirement of 16, based on the alignment requirement of their MinidumpContextAMD64 member. Although this problem was never observed with MSVC, Clang was making use of the known strict alignment and producing code that depended on it. This code crashed if the requirement was not met. MSVC had raised a warning about this usage (C4316), but the warning was disabled as it did not appear to have any ill effect on code produced by that compiler. The problem surfaced in test code, but heap-allocated MinidumpContextAMD64Writer objects are created in non-test code as well. The impact is limited, because a 32-bit Windows Crashpad handler would not have a need to allocate one of these objects. As a fix, MinidumpContextAMD64Writer is given a custom allocation function (a static “operator new()” member and matching “operator delete()”) that returns properly aligned memory. Change-Id: I0cb924da91716eb01b88ec2ae952a69262cc2de6 Reviewed-on: https://chromium-review.googlesource.com/746539 Reviewed-by: Leonard Mosescu <mosescu@chromium.org>
243 lines
7.7 KiB
C++
243 lines
7.7 KiB
C++
// Copyright 2014 The Crashpad Authors. All rights reserved.
|
||
//
|
||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||
// you may not use this file except in compliance with the License.
|
||
// You may obtain a copy of the License at
|
||
//
|
||
// http://www.apache.org/licenses/LICENSE-2.0
|
||
//
|
||
// Unless required by applicable law or agreed to in writing, software
|
||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
// See the License for the specific language governing permissions and
|
||
// limitations under the License.
|
||
|
||
#include "minidump/minidump_context_writer.h"
|
||
|
||
#include <windows.h>
|
||
#include <dbghelp.h>
|
||
#include <stdint.h>
|
||
#include <string.h>
|
||
|
||
#include "base/compiler_specific.h"
|
||
#include "base/logging.h"
|
||
#include "snapshot/cpu_context.h"
|
||
#include "util/file/file_writer.h"
|
||
#include "util/stdlib/aligned_allocator.h"
|
||
|
||
namespace crashpad {
|
||
|
||
namespace {
|
||
|
||
// Sanity-check complex structures to ensure interoperability.
|
||
static_assert(sizeof(MinidumpContextX86) == 716, "MinidumpContextX86 size");
|
||
static_assert(sizeof(MinidumpContextAMD64) == 1232,
|
||
"MinidumpContextAMD64 size");
|
||
|
||
// These structures can also be checked against definitions in the Windows SDK.
|
||
#if defined(OS_WIN)
|
||
#if defined(ARCH_CPU_X86_FAMILY)
|
||
static_assert(sizeof(MinidumpContextX86) == sizeof(WOW64_CONTEXT),
|
||
"WOW64_CONTEXT size");
|
||
#if defined(ARCH_CPU_X86)
|
||
static_assert(sizeof(MinidumpContextX86) == sizeof(CONTEXT), "CONTEXT size");
|
||
#elif defined(ARCH_CPU_X86_64)
|
||
static_assert(sizeof(MinidumpContextAMD64) == sizeof(CONTEXT), "CONTEXT size");
|
||
#endif
|
||
#endif // ARCH_CPU_X86_FAMILY
|
||
#endif // OS_WIN
|
||
|
||
} // namespace
|
||
|
||
MinidumpContextWriter::~MinidumpContextWriter() {
|
||
}
|
||
|
||
// static
|
||
std::unique_ptr<MinidumpContextWriter>
|
||
MinidumpContextWriter::CreateFromSnapshot(const CPUContext* context_snapshot) {
|
||
std::unique_ptr<MinidumpContextWriter> context;
|
||
|
||
switch (context_snapshot->architecture) {
|
||
case kCPUArchitectureX86: {
|
||
MinidumpContextX86Writer* context_x86 = new MinidumpContextX86Writer();
|
||
context.reset(context_x86);
|
||
context_x86->InitializeFromSnapshot(context_snapshot->x86);
|
||
break;
|
||
}
|
||
|
||
case kCPUArchitectureX86_64: {
|
||
MinidumpContextAMD64Writer* context_amd64 =
|
||
new MinidumpContextAMD64Writer();
|
||
context.reset(context_amd64);
|
||
context_amd64->InitializeFromSnapshot(context_snapshot->x86_64);
|
||
break;
|
||
}
|
||
|
||
default: {
|
||
LOG(ERROR) << "unknown context architecture "
|
||
<< context_snapshot->architecture;
|
||
break;
|
||
}
|
||
}
|
||
|
||
return context;
|
||
}
|
||
|
||
size_t MinidumpContextWriter::SizeOfObject() {
|
||
DCHECK_GE(state(), kStateFrozen);
|
||
|
||
return ContextSize();
|
||
}
|
||
|
||
MinidumpContextX86Writer::MinidumpContextX86Writer()
|
||
: MinidumpContextWriter(), context_() {
|
||
context_.context_flags = kMinidumpContextX86;
|
||
}
|
||
|
||
MinidumpContextX86Writer::~MinidumpContextX86Writer() {
|
||
}
|
||
|
||
|
||
void MinidumpContextX86Writer::InitializeFromSnapshot(
|
||
const CPUContextX86* context_snapshot) {
|
||
DCHECK_EQ(state(), kStateMutable);
|
||
DCHECK_EQ(context_.context_flags, kMinidumpContextX86);
|
||
|
||
context_.context_flags = kMinidumpContextX86All;
|
||
|
||
context_.dr0 = context_snapshot->dr0;
|
||
context_.dr1 = context_snapshot->dr1;
|
||
context_.dr2 = context_snapshot->dr2;
|
||
context_.dr3 = context_snapshot->dr3;
|
||
context_.dr6 = context_snapshot->dr6;
|
||
context_.dr7 = context_snapshot->dr7;
|
||
|
||
// The contents of context_.fsave effectively alias everything in
|
||
// context_.fxsave that’s related to x87 FPU state. context_.fsave doesn’t
|
||
// carry state specific to SSE (or later), such as mxcsr and the xmm
|
||
// registers.
|
||
CPUContextX86::FxsaveToFsave(context_snapshot->fxsave, &context_.fsave);
|
||
|
||
context_.gs = context_snapshot->gs;
|
||
context_.fs = context_snapshot->fs;
|
||
context_.es = context_snapshot->es;
|
||
context_.ds = context_snapshot->ds;
|
||
context_.edi = context_snapshot->edi;
|
||
context_.esi = context_snapshot->esi;
|
||
context_.ebx = context_snapshot->ebx;
|
||
context_.edx = context_snapshot->edx;
|
||
context_.ecx = context_snapshot->ecx;
|
||
context_.eax = context_snapshot->eax;
|
||
context_.ebp = context_snapshot->ebp;
|
||
context_.eip = context_snapshot->eip;
|
||
context_.cs = context_snapshot->cs;
|
||
context_.eflags = context_snapshot->eflags;
|
||
context_.esp = context_snapshot->esp;
|
||
context_.ss = context_snapshot->ss;
|
||
|
||
// This is effectively a memcpy() of a big structure.
|
||
context_.fxsave = context_snapshot->fxsave;
|
||
}
|
||
|
||
bool MinidumpContextX86Writer::WriteObject(FileWriterInterface* file_writer) {
|
||
DCHECK_EQ(state(), kStateWritable);
|
||
|
||
return file_writer->Write(&context_, sizeof(context_));
|
||
}
|
||
|
||
size_t MinidumpContextX86Writer::ContextSize() const {
|
||
DCHECK_GE(state(), kStateFrozen);
|
||
|
||
return sizeof(context_);
|
||
}
|
||
|
||
static_assert(alignof(MinidumpContextAMD64) >= 16,
|
||
"MinidumpContextAMD64 alignment");
|
||
static_assert(alignof(MinidumpContextAMD64Writer) >=
|
||
alignof(MinidumpContextAMD64),
|
||
"MinidumpContextAMD64Writer alignment");
|
||
|
||
MinidumpContextAMD64Writer::MinidumpContextAMD64Writer()
|
||
: MinidumpContextWriter(), context_() {
|
||
context_.context_flags = kMinidumpContextAMD64;
|
||
}
|
||
|
||
MinidumpContextAMD64Writer::~MinidumpContextAMD64Writer() {
|
||
}
|
||
|
||
// static
|
||
void* MinidumpContextAMD64Writer::operator new(size_t size) {
|
||
// MinidumpContextAMD64 requests an alignment of 16, which can be larger than
|
||
// what standard new provides. This may trigger MSVC warning C4316. As a
|
||
// workaround to this language deficiency, provide a custom allocation
|
||
// function to allocate a block meeting the alignment requirement.
|
||
return AlignedAllocate(alignof(MinidumpContextAMD64Writer), size);
|
||
}
|
||
|
||
// static
|
||
void MinidumpContextAMD64Writer::operator delete(void* pointer) {
|
||
return AlignedFree(pointer);
|
||
}
|
||
|
||
void MinidumpContextAMD64Writer::InitializeFromSnapshot(
|
||
const CPUContextX86_64* context_snapshot) {
|
||
DCHECK_EQ(state(), kStateMutable);
|
||
DCHECK_EQ(context_.context_flags, kMinidumpContextAMD64);
|
||
|
||
context_.context_flags = kMinidumpContextAMD64All;
|
||
|
||
context_.mx_csr = context_snapshot->fxsave.mxcsr;
|
||
context_.cs = context_snapshot->cs;
|
||
context_.fs = context_snapshot->fs;
|
||
context_.gs = context_snapshot->gs;
|
||
// The top 32 bits of rflags are reserved/unused.
|
||
context_.eflags = static_cast<uint32_t>(context_snapshot->rflags);
|
||
context_.dr0 = context_snapshot->dr0;
|
||
context_.dr1 = context_snapshot->dr1;
|
||
context_.dr2 = context_snapshot->dr2;
|
||
context_.dr3 = context_snapshot->dr3;
|
||
context_.dr6 = context_snapshot->dr6;
|
||
context_.dr7 = context_snapshot->dr7;
|
||
context_.rax = context_snapshot->rax;
|
||
context_.rcx = context_snapshot->rcx;
|
||
context_.rdx = context_snapshot->rdx;
|
||
context_.rbx = context_snapshot->rbx;
|
||
context_.rsp = context_snapshot->rsp;
|
||
context_.rbp = context_snapshot->rbp;
|
||
context_.rsi = context_snapshot->rsi;
|
||
context_.rdi = context_snapshot->rdi;
|
||
context_.r8 = context_snapshot->r8;
|
||
context_.r9 = context_snapshot->r9;
|
||
context_.r10 = context_snapshot->r10;
|
||
context_.r11 = context_snapshot->r11;
|
||
context_.r12 = context_snapshot->r12;
|
||
context_.r13 = context_snapshot->r13;
|
||
context_.r14 = context_snapshot->r14;
|
||
context_.r15 = context_snapshot->r15;
|
||
context_.rip = context_snapshot->rip;
|
||
|
||
// This is effectively a memcpy() of a big structure.
|
||
context_.fxsave = context_snapshot->fxsave;
|
||
}
|
||
|
||
size_t MinidumpContextAMD64Writer::Alignment() {
|
||
DCHECK_GE(state(), kStateFrozen);
|
||
|
||
// Match the alignment of MinidumpContextAMD64.
|
||
return 16;
|
||
}
|
||
|
||
bool MinidumpContextAMD64Writer::WriteObject(FileWriterInterface* file_writer) {
|
||
DCHECK_EQ(state(), kStateWritable);
|
||
|
||
return file_writer->Write(&context_, sizeof(context_));
|
||
}
|
||
|
||
size_t MinidumpContextAMD64Writer::ContextSize() const {
|
||
DCHECK_GE(state(), kStateFrozen);
|
||
|
||
return sizeof(context_);
|
||
}
|
||
|
||
} // namespace crashpad
|