diff options
Diffstat (limited to 'libs/libc/sanitize.c')
| -rw-r--r-- | libs/libc/sanitize.c | 228 |
1 files changed, 228 insertions, 0 deletions
diff --git a/libs/libc/sanitize.c b/libs/libc/sanitize.c new file mode 100644 index 0000000..02eef84 --- /dev/null +++ b/libs/libc/sanitize.c @@ -0,0 +1,228 @@ +// MIT License, Copyright (c) 2021 Marvin Borner +// Detect stack overflows and other bugs + +#include <def.h> +#include <print.h> + +/** + * Stack protector + */ + +#define STACK_CHK_GUARD 0xdeadbeef + +u32 __stack_chk_guard = STACK_CHK_GUARD; + +void __stack_chk_fail(void); +NORETURN void __stack_chk_fail(void) +{ + panic("FATAL: Stack smashing detected\n"); +} + +void __stack_chk_fail_local(void); +NORETURN void __stack_chk_fail_local(void) +{ + panic("FATAL: Local stack smashing detected\n"); +} + +/** + * UBSan + * TODO: Fix san-paths for userspace (maybe due to -fPIE?) + */ + +#define is_aligned(value, alignment) !(value & (alignment - 1)) + +struct source_location { + const char *file; + u32 line; + u32 column; +}; + +struct type_descriptor { + u16 kind; + u16 info; + char name[]; +}; + +struct type_mismatch { + struct source_location location; + struct type_descriptor *type; + u8 alignment; + u8 type_check_kind; +}; + +struct overflow { + struct source_location location; + struct type_descriptor *type; +}; + +struct out_of_bounds { + struct source_location location; + struct type_descriptor *left_type; + struct type_descriptor *right_type; +}; + +void __ubsan_handle_load_invalid_value(void); +void __ubsan_handle_load_invalid_value(void) +{ + panic("UBSAN: load-invalid-value\n"); +} + +void __ubsan_handle_nonnull_arg(void); +void __ubsan_handle_nonnull_arg(void) +{ + panic("UBSAN: nonnull-arg\n"); +} + +void __ubsan_handle_nullability_arg(void); +void __ubsan_handle_nullability_arg(void) +{ + panic("UBSAN: nullability-arg\n"); +} + +void __ubsan_handle_nonnull_return_v1(void); +void __ubsan_handle_nonnull_return_v1(void) +{ + panic("UBSAN: nonnull-return-v1\n"); +} + +void __ubsan_handle_nullability_return_v1(void); +void __ubsan_handle_nullability_return_v1(void) +{ + panic("UBSAN: nullability-return-v1\n"); +} + +void __ubsan_handle_vla_bound_not_positive(void); +void __ubsan_handle_vla_bound_not_positive(void) +{ + panic("UBSAN: vla-bound-not-positive\n"); +} + +void __ubsan_handle_add_overflow(struct overflow *data, void *left, void *right); +void __ubsan_handle_add_overflow(struct overflow *data, void *left, void *right) +{ + UNUSED(left); + UNUSED(right); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: add-overflow [type: %s]\n", loc->file, loc->line, data->type->name); +} + +void __ubsan_handle_sub_overflow(struct overflow *data, void *left, void *right); +void __ubsan_handle_sub_overflow(struct overflow *data, void *left, void *right) +{ + UNUSED(left); + UNUSED(right); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: sub-overflow [type: %s]\n", loc->file, loc->line, data->type->name); +} + +void __ubsan_handle_negate_overflow(struct overflow *data, void *left, void *right); +void __ubsan_handle_negate_overflow(struct overflow *data, void *left, void *right) +{ + UNUSED(left); + UNUSED(right); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: negate-overflow [type: %s]\n", loc->file, loc->line, data->type->name); +} + +void __ubsan_handle_mul_overflow(struct overflow *data, void *left, void *right); +void __ubsan_handle_mul_overflow(struct overflow *data, void *left, void *right) +{ + UNUSED(left); + UNUSED(right); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: mul-overflow [type: %s]\n", loc->file, loc->line, data->type->name); +} + +void __ubsan_handle_shift_out_of_bounds(struct overflow *data, void *left, void *right); +void __ubsan_handle_shift_out_of_bounds(struct overflow *data, void *left, void *right) +{ + UNUSED(left); + UNUSED(right); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: shift-out-of-bounds [type: %s]\n", loc->file, loc->line, + data->type->name); +} + +void __ubsan_handle_divrem_overflow(struct overflow *data, void *left, void *right); +void __ubsan_handle_divrem_overflow(struct overflow *data, void *left, void *right) +{ + UNUSED(left); + UNUSED(right); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: divrem-overflow (probably div-by-zero) [type: %s]\n", loc->file, + loc->line, data->type->name); +} + +void __ubsan_handle_out_of_bounds(struct out_of_bounds *data, void *value); +void __ubsan_handle_out_of_bounds(struct out_of_bounds *data, void *value) +{ + UNUSED(value); + struct source_location *loc = &data->location; + panic("%s:%d: UBSAN: out-of-bounds\n", loc->file, loc->line); +} + +void __ubsan_handle_type_mismatch_v1(struct type_mismatch *data, u32 ptr); +void __ubsan_handle_type_mismatch_v1(struct type_mismatch *data, u32 ptr) +{ + static const char *kinds[] = { + "Load of", + "Store to", + "Reference binding to", + "Member access within", + "Member call on", + "Constructor call on", + "Downcast of", + "Downcast of", + "Upcast of", + "Cast to virtual base of", + "Nonnull binding to", + "Dynamic operation on", + }; + + struct source_location *loc = &data->location; + const char *msg = ""; + if (ptr == 0) { + msg = "null pointer"; + } else if (data->alignment != 0 && is_aligned(ptr, data->alignment)) + msg = "misaligned memory address"; + else + msg = "address with insufficient space"; + panic("%s:%d: UBSAN: %s %s [type: %s; addr: 0x%x; align: %d]\n", loc->file, loc->line, + kinds[data->type_check_kind], msg, data->type->name, ptr, data->alignment); +} + +void __ubsan_handle_alignment_assumption(void); +void __ubsan_handle_alignment_assumption(void) +{ + panic("UBSAN: alignment-assumption\n"); +} + +void __ubsan_handle_builtin_unreachable(void); +void __ubsan_handle_builtin_unreachable(void) +{ + panic("UBSAN: builtin-unreachable\n"); +} + +void __ubsan_handle_missing_return(void); +void __ubsan_handle_missing_return(void) +{ + panic("UBSAN: missing-return\n"); +} + +void __ubsan_handle_implicit_conversion(void); +void __ubsan_handle_implicit_conversion(void) +{ + panic("UBSAN: implicit-conversion\n"); +} + +void __ubsan_handle_invalid_builtin(void); +void __ubsan_handle_invalid_builtin(void) +{ + panic("UBSAN: invalid-builtin\n"); +} + +void __ubsan_handle_pointer_overflow(void); +void __ubsan_handle_pointer_overflow(void) +{ + panic("UBSAN: pointer-overflow\n"); +} |