1*eb293b8fSAndroid Build Coastguard Worker /*
2*eb293b8fSAndroid Build Coastguard Worker * Copyright (C) 2016 The Android Open Source Project
3*eb293b8fSAndroid Build Coastguard Worker *
4*eb293b8fSAndroid Build Coastguard Worker * Licensed under the Apache License, Version 2.0 (the "License");
5*eb293b8fSAndroid Build Coastguard Worker * you may not use this file except in compliance with the License.
6*eb293b8fSAndroid Build Coastguard Worker * You may obtain a copy of the License at
7*eb293b8fSAndroid Build Coastguard Worker *
8*eb293b8fSAndroid Build Coastguard Worker * http://www.apache.org/licenses/LICENSE-2.0
9*eb293b8fSAndroid Build Coastguard Worker *
10*eb293b8fSAndroid Build Coastguard Worker * Unless required by applicable law or agreed to in writing, software
11*eb293b8fSAndroid Build Coastguard Worker * distributed under the License is distributed on an "AS IS" BASIS,
12*eb293b8fSAndroid Build Coastguard Worker * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*eb293b8fSAndroid Build Coastguard Worker * See the License for the specific language governing permissions and
14*eb293b8fSAndroid Build Coastguard Worker * limitations under the License.
15*eb293b8fSAndroid Build Coastguard Worker */
16*eb293b8fSAndroid Build Coastguard Worker
17*eb293b8fSAndroid Build Coastguard Worker #include <stdint.h>
18*eb293b8fSAndroid Build Coastguard Worker #include <string.h>
19*eb293b8fSAndroid Build Coastguard Worker
20*eb293b8fSAndroid Build Coastguard Worker #include <functional>
21*eb293b8fSAndroid Build Coastguard Worker
22*eb293b8fSAndroid Build Coastguard Worker #if defined(__BIONIC__)
23*eb293b8fSAndroid Build Coastguard Worker #include <bionic/pac.h>
24*eb293b8fSAndroid Build Coastguard Worker #endif
25*eb293b8fSAndroid Build Coastguard Worker
26*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/Elf.h>
27*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/MachineArm64.h>
28*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/MapInfo.h>
29*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/Memory.h>
30*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/RegsArm64.h>
31*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/UcontextArm64.h>
32*eb293b8fSAndroid Build Coastguard Worker #include <unwindstack/UserArm64.h>
33*eb293b8fSAndroid Build Coastguard Worker
34*eb293b8fSAndroid Build Coastguard Worker namespace unwindstack {
35*eb293b8fSAndroid Build Coastguard Worker
RegsArm64()36*eb293b8fSAndroid Build Coastguard Worker RegsArm64::RegsArm64()
37*eb293b8fSAndroid Build Coastguard Worker : RegsImpl<uint64_t>(ARM64_REG_LAST, Location(LOCATION_REGISTER, ARM64_REG_LR)) {
38*eb293b8fSAndroid Build Coastguard Worker ResetPseudoRegisters();
39*eb293b8fSAndroid Build Coastguard Worker pac_mask_ = 0;
40*eb293b8fSAndroid Build Coastguard Worker }
41*eb293b8fSAndroid Build Coastguard Worker
Arch()42*eb293b8fSAndroid Build Coastguard Worker ArchEnum RegsArm64::Arch() {
43*eb293b8fSAndroid Build Coastguard Worker return ARCH_ARM64;
44*eb293b8fSAndroid Build Coastguard Worker }
45*eb293b8fSAndroid Build Coastguard Worker
pc()46*eb293b8fSAndroid Build Coastguard Worker uint64_t RegsArm64::pc() {
47*eb293b8fSAndroid Build Coastguard Worker return regs_[ARM64_REG_PC];
48*eb293b8fSAndroid Build Coastguard Worker }
49*eb293b8fSAndroid Build Coastguard Worker
sp()50*eb293b8fSAndroid Build Coastguard Worker uint64_t RegsArm64::sp() {
51*eb293b8fSAndroid Build Coastguard Worker return regs_[ARM64_REG_SP];
52*eb293b8fSAndroid Build Coastguard Worker }
53*eb293b8fSAndroid Build Coastguard Worker
strip_pac(uint64_t pc,uint64_t mask)54*eb293b8fSAndroid Build Coastguard Worker static uint64_t strip_pac(uint64_t pc, uint64_t mask) {
55*eb293b8fSAndroid Build Coastguard Worker // If the target is aarch64 then the return address may have been
56*eb293b8fSAndroid Build Coastguard Worker // signed using the Armv8.3-A Pointer Authentication extension. The
57*eb293b8fSAndroid Build Coastguard Worker // original return address can be restored by stripping out the
58*eb293b8fSAndroid Build Coastguard Worker // authentication code using a mask or xpaclri. xpaclri is a NOP on
59*eb293b8fSAndroid Build Coastguard Worker // pre-Armv8.3-A architectures.
60*eb293b8fSAndroid Build Coastguard Worker if (mask) {
61*eb293b8fSAndroid Build Coastguard Worker pc &= ~mask;
62*eb293b8fSAndroid Build Coastguard Worker } else {
63*eb293b8fSAndroid Build Coastguard Worker #if defined(__BIONIC__)
64*eb293b8fSAndroid Build Coastguard Worker pc = __bionic_clear_pac_bits(pc);
65*eb293b8fSAndroid Build Coastguard Worker #endif
66*eb293b8fSAndroid Build Coastguard Worker }
67*eb293b8fSAndroid Build Coastguard Worker return pc;
68*eb293b8fSAndroid Build Coastguard Worker }
69*eb293b8fSAndroid Build Coastguard Worker
set_pc(uint64_t pc)70*eb293b8fSAndroid Build Coastguard Worker void RegsArm64::set_pc(uint64_t pc) {
71*eb293b8fSAndroid Build Coastguard Worker if ((0 != pc) && IsRASigned()) {
72*eb293b8fSAndroid Build Coastguard Worker pc = strip_pac(pc, pac_mask_);
73*eb293b8fSAndroid Build Coastguard Worker }
74*eb293b8fSAndroid Build Coastguard Worker regs_[ARM64_REG_PC] = pc;
75*eb293b8fSAndroid Build Coastguard Worker }
76*eb293b8fSAndroid Build Coastguard Worker
set_sp(uint64_t sp)77*eb293b8fSAndroid Build Coastguard Worker void RegsArm64::set_sp(uint64_t sp) {
78*eb293b8fSAndroid Build Coastguard Worker regs_[ARM64_REG_SP] = sp;
79*eb293b8fSAndroid Build Coastguard Worker }
80*eb293b8fSAndroid Build Coastguard Worker
fallback_pc()81*eb293b8fSAndroid Build Coastguard Worker void RegsArm64::fallback_pc() {
82*eb293b8fSAndroid Build Coastguard Worker // As a last resort, try stripping the PC of the pointer
83*eb293b8fSAndroid Build Coastguard Worker // authentication code.
84*eb293b8fSAndroid Build Coastguard Worker regs_[ARM64_REG_PC] = strip_pac(regs_[ARM64_REG_PC], pac_mask_);
85*eb293b8fSAndroid Build Coastguard Worker }
86*eb293b8fSAndroid Build Coastguard Worker
SetPcFromReturnAddress(Memory *)87*eb293b8fSAndroid Build Coastguard Worker bool RegsArm64::SetPcFromReturnAddress(Memory*) {
88*eb293b8fSAndroid Build Coastguard Worker uint64_t lr = regs_[ARM64_REG_LR];
89*eb293b8fSAndroid Build Coastguard Worker if (regs_[ARM64_REG_PC] == lr) {
90*eb293b8fSAndroid Build Coastguard Worker return false;
91*eb293b8fSAndroid Build Coastguard Worker }
92*eb293b8fSAndroid Build Coastguard Worker
93*eb293b8fSAndroid Build Coastguard Worker regs_[ARM64_REG_PC] = lr;
94*eb293b8fSAndroid Build Coastguard Worker return true;
95*eb293b8fSAndroid Build Coastguard Worker }
96*eb293b8fSAndroid Build Coastguard Worker
IterateRegisters(std::function<void (const char *,uint64_t)> fn)97*eb293b8fSAndroid Build Coastguard Worker void RegsArm64::IterateRegisters(std::function<void(const char*, uint64_t)> fn) {
98*eb293b8fSAndroid Build Coastguard Worker fn("x0", regs_[ARM64_REG_R0]);
99*eb293b8fSAndroid Build Coastguard Worker fn("x1", regs_[ARM64_REG_R1]);
100*eb293b8fSAndroid Build Coastguard Worker fn("x2", regs_[ARM64_REG_R2]);
101*eb293b8fSAndroid Build Coastguard Worker fn("x3", regs_[ARM64_REG_R3]);
102*eb293b8fSAndroid Build Coastguard Worker fn("x4", regs_[ARM64_REG_R4]);
103*eb293b8fSAndroid Build Coastguard Worker fn("x5", regs_[ARM64_REG_R5]);
104*eb293b8fSAndroid Build Coastguard Worker fn("x6", regs_[ARM64_REG_R6]);
105*eb293b8fSAndroid Build Coastguard Worker fn("x7", regs_[ARM64_REG_R7]);
106*eb293b8fSAndroid Build Coastguard Worker fn("x8", regs_[ARM64_REG_R8]);
107*eb293b8fSAndroid Build Coastguard Worker fn("x9", regs_[ARM64_REG_R9]);
108*eb293b8fSAndroid Build Coastguard Worker fn("x10", regs_[ARM64_REG_R10]);
109*eb293b8fSAndroid Build Coastguard Worker fn("x11", regs_[ARM64_REG_R11]);
110*eb293b8fSAndroid Build Coastguard Worker fn("x12", regs_[ARM64_REG_R12]);
111*eb293b8fSAndroid Build Coastguard Worker fn("x13", regs_[ARM64_REG_R13]);
112*eb293b8fSAndroid Build Coastguard Worker fn("x14", regs_[ARM64_REG_R14]);
113*eb293b8fSAndroid Build Coastguard Worker fn("x15", regs_[ARM64_REG_R15]);
114*eb293b8fSAndroid Build Coastguard Worker fn("x16", regs_[ARM64_REG_R16]);
115*eb293b8fSAndroid Build Coastguard Worker fn("x17", regs_[ARM64_REG_R17]);
116*eb293b8fSAndroid Build Coastguard Worker fn("x18", regs_[ARM64_REG_R18]);
117*eb293b8fSAndroid Build Coastguard Worker fn("x19", regs_[ARM64_REG_R19]);
118*eb293b8fSAndroid Build Coastguard Worker fn("x20", regs_[ARM64_REG_R20]);
119*eb293b8fSAndroid Build Coastguard Worker fn("x21", regs_[ARM64_REG_R21]);
120*eb293b8fSAndroid Build Coastguard Worker fn("x22", regs_[ARM64_REG_R22]);
121*eb293b8fSAndroid Build Coastguard Worker fn("x23", regs_[ARM64_REG_R23]);
122*eb293b8fSAndroid Build Coastguard Worker fn("x24", regs_[ARM64_REG_R24]);
123*eb293b8fSAndroid Build Coastguard Worker fn("x25", regs_[ARM64_REG_R25]);
124*eb293b8fSAndroid Build Coastguard Worker fn("x26", regs_[ARM64_REG_R26]);
125*eb293b8fSAndroid Build Coastguard Worker fn("x27", regs_[ARM64_REG_R27]);
126*eb293b8fSAndroid Build Coastguard Worker fn("x28", regs_[ARM64_REG_R28]);
127*eb293b8fSAndroid Build Coastguard Worker fn("x29", regs_[ARM64_REG_R29]);
128*eb293b8fSAndroid Build Coastguard Worker fn("lr", regs_[ARM64_REG_LR]);
129*eb293b8fSAndroid Build Coastguard Worker fn("sp", regs_[ARM64_REG_SP]);
130*eb293b8fSAndroid Build Coastguard Worker fn("pc", regs_[ARM64_REG_PC]);
131*eb293b8fSAndroid Build Coastguard Worker fn("pst", regs_[ARM64_REG_PSTATE]);
132*eb293b8fSAndroid Build Coastguard Worker }
133*eb293b8fSAndroid Build Coastguard Worker
Read(const void * remote_data)134*eb293b8fSAndroid Build Coastguard Worker Regs* RegsArm64::Read(const void* remote_data) {
135*eb293b8fSAndroid Build Coastguard Worker const arm64_user_regs* user = reinterpret_cast<const arm64_user_regs*>(remote_data);
136*eb293b8fSAndroid Build Coastguard Worker
137*eb293b8fSAndroid Build Coastguard Worker RegsArm64* regs = new RegsArm64();
138*eb293b8fSAndroid Build Coastguard Worker memcpy(regs->RawData(), &user->regs[0], (ARM64_REG_R30 + 1) * sizeof(uint64_t));
139*eb293b8fSAndroid Build Coastguard Worker uint64_t* reg_data = reinterpret_cast<uint64_t*>(regs->RawData());
140*eb293b8fSAndroid Build Coastguard Worker reg_data[ARM64_REG_SP] = user->sp;
141*eb293b8fSAndroid Build Coastguard Worker reg_data[ARM64_REG_PC] = user->pc;
142*eb293b8fSAndroid Build Coastguard Worker reg_data[ARM64_REG_PSTATE] = user->pstate;
143*eb293b8fSAndroid Build Coastguard Worker return regs;
144*eb293b8fSAndroid Build Coastguard Worker }
145*eb293b8fSAndroid Build Coastguard Worker
CreateFromUcontext(void * ucontext)146*eb293b8fSAndroid Build Coastguard Worker Regs* RegsArm64::CreateFromUcontext(void* ucontext) {
147*eb293b8fSAndroid Build Coastguard Worker arm64_ucontext_t* arm64_ucontext = reinterpret_cast<arm64_ucontext_t*>(ucontext);
148*eb293b8fSAndroid Build Coastguard Worker
149*eb293b8fSAndroid Build Coastguard Worker RegsArm64* regs = new RegsArm64();
150*eb293b8fSAndroid Build Coastguard Worker memcpy(regs->RawData(), &arm64_ucontext->uc_mcontext.regs[0], ARM64_REG_LAST * sizeof(uint64_t));
151*eb293b8fSAndroid Build Coastguard Worker return regs;
152*eb293b8fSAndroid Build Coastguard Worker }
153*eb293b8fSAndroid Build Coastguard Worker
StepIfSignalHandler(uint64_t elf_offset,Elf * elf,Memory * process_memory)154*eb293b8fSAndroid Build Coastguard Worker bool RegsArm64::StepIfSignalHandler(uint64_t elf_offset, Elf* elf, Memory* process_memory) {
155*eb293b8fSAndroid Build Coastguard Worker // Read from elf memory since it is usually more expensive to read from
156*eb293b8fSAndroid Build Coastguard Worker // process memory.
157*eb293b8fSAndroid Build Coastguard Worker uint64_t data;
158*eb293b8fSAndroid Build Coastguard Worker if (!elf->memory()->ReadFully(elf_offset, &data, sizeof(data))) {
159*eb293b8fSAndroid Build Coastguard Worker return false;
160*eb293b8fSAndroid Build Coastguard Worker }
161*eb293b8fSAndroid Build Coastguard Worker
162*eb293b8fSAndroid Build Coastguard Worker // Look for the kernel sigreturn function.
163*eb293b8fSAndroid Build Coastguard Worker // __kernel_rt_sigreturn:
164*eb293b8fSAndroid Build Coastguard Worker // 0xd2801168 mov x8, #0x8b
165*eb293b8fSAndroid Build Coastguard Worker // 0xd4000001 svc #0x0
166*eb293b8fSAndroid Build Coastguard Worker if (data != 0xd4000001d2801168ULL) {
167*eb293b8fSAndroid Build Coastguard Worker return false;
168*eb293b8fSAndroid Build Coastguard Worker }
169*eb293b8fSAndroid Build Coastguard Worker
170*eb293b8fSAndroid Build Coastguard Worker // SP + sizeof(siginfo_t) + uc_mcontext offset + X0 offset.
171*eb293b8fSAndroid Build Coastguard Worker if (!process_memory->ReadFully(regs_[ARM64_REG_SP] + 0x80 + 0xb0 + 0x08, regs_.data(),
172*eb293b8fSAndroid Build Coastguard Worker sizeof(uint64_t) * ARM64_REG_LAST)) {
173*eb293b8fSAndroid Build Coastguard Worker return false;
174*eb293b8fSAndroid Build Coastguard Worker }
175*eb293b8fSAndroid Build Coastguard Worker return true;
176*eb293b8fSAndroid Build Coastguard Worker }
177*eb293b8fSAndroid Build Coastguard Worker
ResetPseudoRegisters(void)178*eb293b8fSAndroid Build Coastguard Worker void RegsArm64::ResetPseudoRegisters(void) {
179*eb293b8fSAndroid Build Coastguard Worker // DWARF for AArch64 says RA_SIGN_STATE should be initialized to 0.
180*eb293b8fSAndroid Build Coastguard Worker this->SetPseudoRegister(Arm64Reg::ARM64_PREG_RA_SIGN_STATE, 0);
181*eb293b8fSAndroid Build Coastguard Worker }
182*eb293b8fSAndroid Build Coastguard Worker
SetPseudoRegister(uint16_t id,uint64_t value)183*eb293b8fSAndroid Build Coastguard Worker bool RegsArm64::SetPseudoRegister(uint16_t id, uint64_t value) {
184*eb293b8fSAndroid Build Coastguard Worker if ((id >= Arm64Reg::ARM64_PREG_FIRST) && (id < Arm64Reg::ARM64_PREG_LAST)) {
185*eb293b8fSAndroid Build Coastguard Worker pseudo_regs_[id - Arm64Reg::ARM64_PREG_FIRST] = value;
186*eb293b8fSAndroid Build Coastguard Worker return true;
187*eb293b8fSAndroid Build Coastguard Worker }
188*eb293b8fSAndroid Build Coastguard Worker return false;
189*eb293b8fSAndroid Build Coastguard Worker }
190*eb293b8fSAndroid Build Coastguard Worker
GetPseudoRegister(uint16_t id,uint64_t * value)191*eb293b8fSAndroid Build Coastguard Worker bool RegsArm64::GetPseudoRegister(uint16_t id, uint64_t* value) {
192*eb293b8fSAndroid Build Coastguard Worker if ((id >= Arm64Reg::ARM64_PREG_FIRST) && (id < Arm64Reg::ARM64_PREG_LAST)) {
193*eb293b8fSAndroid Build Coastguard Worker *value = pseudo_regs_[id - Arm64Reg::ARM64_PREG_FIRST];
194*eb293b8fSAndroid Build Coastguard Worker return true;
195*eb293b8fSAndroid Build Coastguard Worker }
196*eb293b8fSAndroid Build Coastguard Worker return false;
197*eb293b8fSAndroid Build Coastguard Worker }
198*eb293b8fSAndroid Build Coastguard Worker
IsRASigned()199*eb293b8fSAndroid Build Coastguard Worker bool RegsArm64::IsRASigned() {
200*eb293b8fSAndroid Build Coastguard Worker uint64_t value;
201*eb293b8fSAndroid Build Coastguard Worker auto result = this->GetPseudoRegister(Arm64Reg::ARM64_PREG_RA_SIGN_STATE, &value);
202*eb293b8fSAndroid Build Coastguard Worker return (result && (value != 0));
203*eb293b8fSAndroid Build Coastguard Worker }
204*eb293b8fSAndroid Build Coastguard Worker
SetPACMask(uint64_t mask)205*eb293b8fSAndroid Build Coastguard Worker void RegsArm64::SetPACMask(uint64_t mask) {
206*eb293b8fSAndroid Build Coastguard Worker pac_mask_ = mask;
207*eb293b8fSAndroid Build Coastguard Worker }
208*eb293b8fSAndroid Build Coastguard Worker
Clone()209*eb293b8fSAndroid Build Coastguard Worker Regs* RegsArm64::Clone() {
210*eb293b8fSAndroid Build Coastguard Worker return new RegsArm64(*this);
211*eb293b8fSAndroid Build Coastguard Worker }
212*eb293b8fSAndroid Build Coastguard Worker
213*eb293b8fSAndroid Build Coastguard Worker } // namespace unwindstack
214