1 | /* |
2 | * Copyright (c) 1999, 2018, Oracle and/or its affiliates. All rights reserved. |
3 | * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
4 | * |
5 | * This code is free software; you can redistribute it and/or modify it |
6 | * under the terms of the GNU General Public License version 2 only, as |
7 | * published by the Free Software Foundation. |
8 | * |
9 | * This code is distributed in the hope that it will be useful, but WITHOUT |
10 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
11 | * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
12 | * version 2 for more details (a copy is included in the LICENSE file that |
13 | * accompanied this code). |
14 | * |
15 | * You should have received a copy of the GNU General Public License version |
16 | * 2 along with this work; if not, write to the Free Software Foundation, |
17 | * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
18 | * |
19 | * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
20 | * or visit www.oracle.com if you need additional information or have any |
21 | * questions. |
22 | * |
23 | */ |
24 | |
25 | // no precompiled headers |
26 | #include "jvm.h" |
27 | #include "asm/macroAssembler.hpp" |
28 | #include "classfile/classLoader.hpp" |
29 | #include "classfile/systemDictionary.hpp" |
30 | #include "classfile/vmSymbols.hpp" |
31 | #include "code/codeCache.hpp" |
32 | #include "code/icBuffer.hpp" |
33 | #include "code/vtableStubs.hpp" |
34 | #include "interpreter/interpreter.hpp" |
35 | #include "logging/log.hpp" |
36 | #include "memory/allocation.inline.hpp" |
37 | #include "os_share_linux.hpp" |
38 | #include "prims/jniFastGetField.hpp" |
39 | #include "prims/jvm_misc.hpp" |
40 | #include "runtime/arguments.hpp" |
41 | #include "runtime/extendedPC.hpp" |
42 | #include "runtime/frame.inline.hpp" |
43 | #include "runtime/interfaceSupport.inline.hpp" |
44 | #include "runtime/java.hpp" |
45 | #include "runtime/javaCalls.hpp" |
46 | #include "runtime/mutexLocker.hpp" |
47 | #include "runtime/osThread.hpp" |
48 | #include "runtime/sharedRuntime.hpp" |
49 | #include "runtime/stubRoutines.hpp" |
50 | #include "runtime/thread.inline.hpp" |
51 | #include "runtime/timer.hpp" |
52 | #include "services/memTracker.hpp" |
53 | #include "utilities/align.hpp" |
54 | #include "utilities/debug.hpp" |
55 | #include "utilities/events.hpp" |
56 | #include "utilities/vmError.hpp" |
57 | |
58 | // put OS-includes here |
59 | # include <sys/types.h> |
60 | # include <sys/mman.h> |
61 | # include <pthread.h> |
62 | # include <signal.h> |
63 | # include <errno.h> |
64 | # include <dlfcn.h> |
65 | # include <stdlib.h> |
66 | # include <stdio.h> |
67 | # include <unistd.h> |
68 | # include <sys/resource.h> |
69 | # include <pthread.h> |
70 | # include <sys/stat.h> |
71 | # include <sys/time.h> |
72 | # include <sys/utsname.h> |
73 | # include <sys/socket.h> |
74 | # include <sys/wait.h> |
75 | # include <pwd.h> |
76 | # include <poll.h> |
77 | # include <ucontext.h> |
78 | #ifndef AMD64 |
79 | # include <fpu_control.h> |
80 | #endif |
81 | |
82 | #ifdef AMD64 |
83 | #define REG_SP REG_RSP |
84 | #define REG_PC REG_RIP |
85 | #define REG_FP REG_RBP |
86 | #define SPELL_REG_SP "rsp" |
87 | #define SPELL_REG_FP "rbp" |
88 | #else |
89 | #define REG_SP REG_UESP |
90 | #define REG_PC REG_EIP |
91 | #define REG_FP REG_EBP |
92 | #define SPELL_REG_SP "esp" |
93 | #define SPELL_REG_FP "ebp" |
94 | #endif // AMD64 |
95 | |
96 | address os::current_stack_pointer() { |
97 | #ifdef SPARC_WORKS |
98 | void *esp; |
99 | __asm__("mov %%" SPELL_REG_SP ", %0" :"=r" (esp)); |
100 | return (address) ((char*)esp + sizeof(long)*2); |
101 | #elif defined(__clang__) |
102 | void* esp; |
103 | __asm__ __volatile__ ("mov %%" SPELL_REG_SP ", %0" :"=r" (esp):); |
104 | return (address) esp; |
105 | #else |
106 | register void *esp __asm__ (SPELL_REG_SP); |
107 | return (address) esp; |
108 | #endif |
109 | } |
110 | |
111 | char* os::non_memory_address_word() { |
112 | // Must never look like an address returned by reserve_memory, |
113 | // even in its subfields (as defined by the CPU immediate fields, |
114 | // if the CPU splits constants across multiple instructions). |
115 | |
116 | return (char*) -1; |
117 | } |
118 | |
119 | address os::Linux::ucontext_get_pc(const ucontext_t * uc) { |
120 | return (address)uc->uc_mcontext.gregs[REG_PC]; |
121 | } |
122 | |
123 | void os::Linux::ucontext_set_pc(ucontext_t * uc, address pc) { |
124 | uc->uc_mcontext.gregs[REG_PC] = (intptr_t)pc; |
125 | } |
126 | |
127 | intptr_t* os::Linux::ucontext_get_sp(const ucontext_t * uc) { |
128 | return (intptr_t*)uc->uc_mcontext.gregs[REG_SP]; |
129 | } |
130 | |
131 | intptr_t* os::Linux::ucontext_get_fp(const ucontext_t * uc) { |
132 | return (intptr_t*)uc->uc_mcontext.gregs[REG_FP]; |
133 | } |
134 | |
135 | // For Forte Analyzer AsyncGetCallTrace profiling support - thread |
136 | // is currently interrupted by SIGPROF. |
137 | // os::Solaris::fetch_frame_from_ucontext() tries to skip nested signal |
138 | // frames. Currently we don't do that on Linux, so it's the same as |
139 | // os::fetch_frame_from_context(). |
140 | // This method is also used for stack overflow signal handling. |
141 | ExtendedPC os::Linux::fetch_frame_from_ucontext(Thread* thread, |
142 | const ucontext_t* uc, intptr_t** ret_sp, intptr_t** ret_fp) { |
143 | |
144 | assert(thread != NULL, "just checking" ); |
145 | assert(ret_sp != NULL, "just checking" ); |
146 | assert(ret_fp != NULL, "just checking" ); |
147 | |
148 | return os::fetch_frame_from_context(uc, ret_sp, ret_fp); |
149 | } |
150 | |
151 | ExtendedPC os::fetch_frame_from_context(const void* ucVoid, |
152 | intptr_t** ret_sp, intptr_t** ret_fp) { |
153 | |
154 | ExtendedPC epc; |
155 | const ucontext_t* uc = (const ucontext_t*)ucVoid; |
156 | |
157 | if (uc != NULL) { |
158 | epc = ExtendedPC(os::Linux::ucontext_get_pc(uc)); |
159 | if (ret_sp) *ret_sp = os::Linux::ucontext_get_sp(uc); |
160 | if (ret_fp) *ret_fp = os::Linux::ucontext_get_fp(uc); |
161 | } else { |
162 | // construct empty ExtendedPC for return value checking |
163 | epc = ExtendedPC(NULL); |
164 | if (ret_sp) *ret_sp = (intptr_t *)NULL; |
165 | if (ret_fp) *ret_fp = (intptr_t *)NULL; |
166 | } |
167 | |
168 | return epc; |
169 | } |
170 | |
171 | frame os::fetch_frame_from_context(const void* ucVoid) { |
172 | intptr_t* sp; |
173 | intptr_t* fp; |
174 | ExtendedPC epc = fetch_frame_from_context(ucVoid, &sp, &fp); |
175 | return frame(sp, fp, epc.pc()); |
176 | } |
177 | |
178 | frame os::fetch_frame_from_ucontext(Thread* thread, void* ucVoid) { |
179 | intptr_t* sp; |
180 | intptr_t* fp; |
181 | ExtendedPC epc = os::Linux::fetch_frame_from_ucontext(thread, (ucontext_t*)ucVoid, &sp, &fp); |
182 | return frame(sp, fp, epc.pc()); |
183 | } |
184 | |
185 | bool os::Linux::get_frame_at_stack_banging_point(JavaThread* thread, ucontext_t* uc, frame* fr) { |
186 | address pc = (address) os::Linux::ucontext_get_pc(uc); |
187 | if (Interpreter::contains(pc)) { |
188 | // interpreter performs stack banging after the fixed frame header has |
189 | // been generated while the compilers perform it before. To maintain |
190 | // semantic consistency between interpreted and compiled frames, the |
191 | // method returns the Java sender of the current frame. |
192 | *fr = os::fetch_frame_from_ucontext(thread, uc); |
193 | if (!fr->is_first_java_frame()) { |
194 | // get_frame_at_stack_banging_point() is only called when we |
195 | // have well defined stacks so java_sender() calls do not need |
196 | // to assert safe_for_sender() first. |
197 | *fr = fr->java_sender(); |
198 | } |
199 | } else { |
200 | // more complex code with compiled code |
201 | assert(!Interpreter::contains(pc), "Interpreted methods should have been handled above" ); |
202 | CodeBlob* cb = CodeCache::find_blob(pc); |
203 | if (cb == NULL || !cb->is_nmethod() || cb->is_frame_complete_at(pc)) { |
204 | // Not sure where the pc points to, fallback to default |
205 | // stack overflow handling |
206 | return false; |
207 | } else { |
208 | // in compiled code, the stack banging is performed just after the return pc |
209 | // has been pushed on the stack |
210 | intptr_t* fp = os::Linux::ucontext_get_fp(uc); |
211 | intptr_t* sp = os::Linux::ucontext_get_sp(uc); |
212 | *fr = frame(sp + 1, fp, (address)*sp); |
213 | if (!fr->is_java_frame()) { |
214 | assert(!fr->is_first_frame(), "Safety check" ); |
215 | // See java_sender() comment above. |
216 | *fr = fr->java_sender(); |
217 | } |
218 | } |
219 | } |
220 | assert(fr->is_java_frame(), "Safety check" ); |
221 | return true; |
222 | } |
223 | |
224 | // By default, gcc always save frame pointer (%ebp/%rbp) on stack. It may get |
225 | // turned off by -fomit-frame-pointer, |
226 | frame os::get_sender_for_C_frame(frame* fr) { |
227 | return frame(fr->sender_sp(), fr->link(), fr->sender_pc()); |
228 | } |
229 | |
230 | intptr_t* _get_previous_fp() { |
231 | #ifdef SPARC_WORKS |
232 | intptr_t **ebp; |
233 | __asm__("mov %%" SPELL_REG_FP ", %0" :"=r" (ebp)); |
234 | #elif defined(__clang__) |
235 | intptr_t **ebp; |
236 | __asm__ __volatile__ ("mov %%" SPELL_REG_FP ", %0" :"=r" (ebp):); |
237 | #else |
238 | register intptr_t **ebp __asm__ (SPELL_REG_FP); |
239 | #endif |
240 | // ebp is for this frame (_get_previous_fp). We want the ebp for the |
241 | // caller of os::current_frame*(), so go up two frames. However, for |
242 | // optimized builds, _get_previous_fp() will be inlined, so only go |
243 | // up 1 frame in that case. |
244 | #ifdef _NMT_NOINLINE_ |
245 | return **(intptr_t***)ebp; |
246 | #else |
247 | return *ebp; |
248 | #endif |
249 | } |
250 | |
251 | |
252 | frame os::current_frame() { |
253 | intptr_t* fp = _get_previous_fp(); |
254 | frame myframe((intptr_t*)os::current_stack_pointer(), |
255 | (intptr_t*)fp, |
256 | CAST_FROM_FN_PTR(address, os::current_frame)); |
257 | if (os::is_first_C_frame(&myframe)) { |
258 | // stack is not walkable |
259 | return frame(); |
260 | } else { |
261 | return os::get_sender_for_C_frame(&myframe); |
262 | } |
263 | } |
264 | |
265 | // Utility functions |
266 | |
267 | // From IA32 System Programming Guide |
268 | enum { |
269 | trap_page_fault = 0xE |
270 | }; |
271 | |
272 | extern "C" JNIEXPORT int |
273 | JVM_handle_linux_signal(int sig, |
274 | siginfo_t* info, |
275 | void* ucVoid, |
276 | int abort_if_unrecognized) { |
277 | ucontext_t* uc = (ucontext_t*) ucVoid; |
278 | |
279 | Thread* t = Thread::current_or_null_safe(); |
280 | |
281 | // Must do this before SignalHandlerMark, if crash protection installed we will longjmp away |
282 | // (no destructors can be run) |
283 | os::ThreadCrashProtection::check_crash_protection(sig, t); |
284 | |
285 | SignalHandlerMark shm(t); |
286 | |
287 | // Note: it's not uncommon that JNI code uses signal/sigset to install |
288 | // then restore certain signal handler (e.g. to temporarily block SIGPIPE, |
289 | // or have a SIGILL handler when detecting CPU type). When that happens, |
290 | // JVM_handle_linux_signal() might be invoked with junk info/ucVoid. To |
291 | // avoid unnecessary crash when libjsig is not preloaded, try handle signals |
292 | // that do not require siginfo/ucontext first. |
293 | |
294 | if (sig == SIGPIPE || sig == SIGXFSZ) { |
295 | // allow chained handler to go first |
296 | if (os::Linux::chained_handler(sig, info, ucVoid)) { |
297 | return true; |
298 | } else { |
299 | // Ignoring SIGPIPE/SIGXFSZ - see bugs 4229104 or 6499219 |
300 | return true; |
301 | } |
302 | } |
303 | |
304 | #ifdef CAN_SHOW_REGISTERS_ON_ASSERT |
305 | if ((sig == SIGSEGV || sig == SIGBUS) && info != NULL && info->si_addr == g_assert_poison) { |
306 | handle_assert_poison_fault(ucVoid, info->si_addr); |
307 | return 1; |
308 | } |
309 | #endif |
310 | |
311 | JavaThread* thread = NULL; |
312 | VMThread* vmthread = NULL; |
313 | if (os::Linux::signal_handlers_are_installed) { |
314 | if (t != NULL ){ |
315 | if(t->is_Java_thread()) { |
316 | thread = (JavaThread*)t; |
317 | } |
318 | else if(t->is_VM_thread()){ |
319 | vmthread = (VMThread *)t; |
320 | } |
321 | } |
322 | } |
323 | /* |
324 | NOTE: does not seem to work on linux. |
325 | if (info == NULL || info->si_code <= 0 || info->si_code == SI_NOINFO) { |
326 | // can't decode this kind of signal |
327 | info = NULL; |
328 | } else { |
329 | assert(sig == info->si_signo, "bad siginfo"); |
330 | } |
331 | */ |
332 | // decide if this trap can be handled by a stub |
333 | address stub = NULL; |
334 | |
335 | address pc = NULL; |
336 | |
337 | //%note os_trap_1 |
338 | if (info != NULL && uc != NULL && thread != NULL) { |
339 | pc = (address) os::Linux::ucontext_get_pc(uc); |
340 | |
341 | if (StubRoutines::is_safefetch_fault(pc)) { |
342 | os::Linux::ucontext_set_pc(uc, StubRoutines::continuation_for_safefetch_fault(pc)); |
343 | return 1; |
344 | } |
345 | |
346 | #ifndef AMD64 |
347 | // Halt if SI_KERNEL before more crashes get misdiagnosed as Java bugs |
348 | // This can happen in any running code (currently more frequently in |
349 | // interpreter code but has been seen in compiled code) |
350 | if (sig == SIGSEGV && info->si_addr == 0 && info->si_code == SI_KERNEL) { |
351 | fatal("An irrecoverable SI_KERNEL SIGSEGV has occurred due " |
352 | "to unstable signal handling in this distribution." ); |
353 | } |
354 | #endif // AMD64 |
355 | |
356 | // Handle ALL stack overflow variations here |
357 | if (sig == SIGSEGV) { |
358 | address addr = (address) info->si_addr; |
359 | |
360 | // check if fault address is within thread stack |
361 | if (thread->on_local_stack(addr)) { |
362 | // stack overflow |
363 | if (thread->in_stack_yellow_reserved_zone(addr)) { |
364 | if (thread->thread_state() == _thread_in_Java) { |
365 | if (thread->in_stack_reserved_zone(addr)) { |
366 | frame fr; |
367 | if (os::Linux::get_frame_at_stack_banging_point(thread, uc, &fr)) { |
368 | assert(fr.is_java_frame(), "Must be a Java frame" ); |
369 | frame activation = |
370 | SharedRuntime::look_for_reserved_stack_annotated_method(thread, fr); |
371 | if (activation.sp() != NULL) { |
372 | thread->disable_stack_reserved_zone(); |
373 | if (activation.is_interpreted_frame()) { |
374 | thread->set_reserved_stack_activation((address)( |
375 | activation.fp() + frame::interpreter_frame_initial_sp_offset)); |
376 | } else { |
377 | thread->set_reserved_stack_activation((address)activation.unextended_sp()); |
378 | } |
379 | return 1; |
380 | } |
381 | } |
382 | } |
383 | // Throw a stack overflow exception. Guard pages will be reenabled |
384 | // while unwinding the stack. |
385 | thread->disable_stack_yellow_reserved_zone(); |
386 | stub = SharedRuntime::continuation_for_implicit_exception(thread, pc, SharedRuntime::STACK_OVERFLOW); |
387 | } else { |
388 | // Thread was in the vm or native code. Return and try to finish. |
389 | thread->disable_stack_yellow_reserved_zone(); |
390 | return 1; |
391 | } |
392 | } else if (thread->in_stack_red_zone(addr)) { |
393 | // Fatal red zone violation. Disable the guard pages and fall through |
394 | // to handle_unexpected_exception way down below. |
395 | thread->disable_stack_red_zone(); |
396 | tty->print_raw_cr("An irrecoverable stack overflow has occurred." ); |
397 | |
398 | // This is a likely cause, but hard to verify. Let's just print |
399 | // it as a hint. |
400 | tty->print_raw_cr("Please check if any of your loaded .so files has " |
401 | "enabled executable stack (see man page execstack(8))" ); |
402 | } else { |
403 | // Accessing stack address below sp may cause SEGV if current |
404 | // thread has MAP_GROWSDOWN stack. This should only happen when |
405 | // current thread was created by user code with MAP_GROWSDOWN flag |
406 | // and then attached to VM. See notes in os_linux.cpp. |
407 | if (thread->osthread()->expanding_stack() == 0) { |
408 | thread->osthread()->set_expanding_stack(); |
409 | if (os::Linux::manually_expand_stack(thread, addr)) { |
410 | thread->osthread()->clear_expanding_stack(); |
411 | return 1; |
412 | } |
413 | thread->osthread()->clear_expanding_stack(); |
414 | } else { |
415 | fatal("recursive segv. expanding stack." ); |
416 | } |
417 | } |
418 | } |
419 | } |
420 | |
421 | if ((sig == SIGSEGV) && VM_Version::is_cpuinfo_segv_addr(pc)) { |
422 | // Verify that OS save/restore AVX registers. |
423 | stub = VM_Version::cpuinfo_cont_addr(); |
424 | } |
425 | |
426 | if (thread->thread_state() == _thread_in_Java) { |
427 | // Java thread running in Java code => find exception handler if any |
428 | // a fault inside compiled code, the interpreter, or a stub |
429 | |
430 | if (sig == SIGSEGV && os::is_poll_address((address)info->si_addr)) { |
431 | stub = SharedRuntime::get_poll_stub(pc); |
432 | } else if (sig == SIGBUS /* && info->si_code == BUS_OBJERR */) { |
433 | // BugId 4454115: A read from a MappedByteBuffer can fault |
434 | // here if the underlying file has been truncated. |
435 | // Do not crash the VM in such a case. |
436 | CodeBlob* cb = CodeCache::find_blob_unsafe(pc); |
437 | CompiledMethod* nm = (cb != NULL) ? cb->as_compiled_method_or_null() : NULL; |
438 | if (nm != NULL && nm->has_unsafe_access()) { |
439 | address next_pc = Assembler::locate_next_instruction(pc); |
440 | stub = SharedRuntime::handle_unsafe_access(thread, next_pc); |
441 | } |
442 | } |
443 | else |
444 | |
445 | #ifdef AMD64 |
446 | if (sig == SIGFPE && |
447 | (info->si_code == FPE_INTDIV || info->si_code == FPE_FLTDIV)) { |
448 | stub = |
449 | SharedRuntime:: |
450 | continuation_for_implicit_exception(thread, |
451 | pc, |
452 | SharedRuntime:: |
453 | IMPLICIT_DIVIDE_BY_ZERO); |
454 | #else |
455 | if (sig == SIGFPE /* && info->si_code == FPE_INTDIV */) { |
456 | // HACK: si_code does not work on linux 2.2.12-20!!! |
457 | int op = pc[0]; |
458 | if (op == 0xDB) { |
459 | // FIST |
460 | // TODO: The encoding of D2I in i486.ad can cause an exception |
461 | // prior to the fist instruction if there was an invalid operation |
462 | // pending. We want to dismiss that exception. From the win_32 |
463 | // side it also seems that if it really was the fist causing |
464 | // the exception that we do the d2i by hand with different |
465 | // rounding. Seems kind of weird. |
466 | // NOTE: that we take the exception at the NEXT floating point instruction. |
467 | assert(pc[0] == 0xDB, "not a FIST opcode" ); |
468 | assert(pc[1] == 0x14, "not a FIST opcode" ); |
469 | assert(pc[2] == 0x24, "not a FIST opcode" ); |
470 | return true; |
471 | } else if (op == 0xF7) { |
472 | // IDIV |
473 | stub = SharedRuntime::continuation_for_implicit_exception(thread, pc, SharedRuntime::IMPLICIT_DIVIDE_BY_ZERO); |
474 | } else { |
475 | // TODO: handle more cases if we are using other x86 instructions |
476 | // that can generate SIGFPE signal on linux. |
477 | tty->print_cr("unknown opcode 0x%X with SIGFPE." , op); |
478 | fatal("please update this code." ); |
479 | } |
480 | #endif // AMD64 |
481 | } else if (sig == SIGSEGV && |
482 | MacroAssembler::uses_implicit_null_check(info->si_addr)) { |
483 | // Determination of interpreter/vtable stub/compiled code null exception |
484 | stub = SharedRuntime::continuation_for_implicit_exception(thread, pc, SharedRuntime::IMPLICIT_NULL); |
485 | } |
486 | } else if (thread->thread_state() == _thread_in_vm && |
487 | sig == SIGBUS && /* info->si_code == BUS_OBJERR && */ |
488 | thread->doing_unsafe_access()) { |
489 | address next_pc = Assembler::locate_next_instruction(pc); |
490 | stub = SharedRuntime::handle_unsafe_access(thread, next_pc); |
491 | } |
492 | |
493 | // jni_fast_Get<Primitive>Field can trap at certain pc's if a GC kicks in |
494 | // and the heap gets shrunk before the field access. |
495 | if ((sig == SIGSEGV) || (sig == SIGBUS)) { |
496 | address addr = JNI_FastGetField::find_slowcase_pc(pc); |
497 | if (addr != (address)-1) { |
498 | stub = addr; |
499 | } |
500 | } |
501 | } |
502 | |
503 | #ifndef AMD64 |
504 | // Execution protection violation |
505 | // |
506 | // This should be kept as the last step in the triage. We don't |
507 | // have a dedicated trap number for a no-execute fault, so be |
508 | // conservative and allow other handlers the first shot. |
509 | // |
510 | // Note: We don't test that info->si_code == SEGV_ACCERR here. |
511 | // this si_code is so generic that it is almost meaningless; and |
512 | // the si_code for this condition may change in the future. |
513 | // Furthermore, a false-positive should be harmless. |
514 | if (UnguardOnExecutionViolation > 0 && |
515 | (sig == SIGSEGV || sig == SIGBUS) && |
516 | uc->uc_mcontext.gregs[REG_TRAPNO] == trap_page_fault) { |
517 | int page_size = os::vm_page_size(); |
518 | address addr = (address) info->si_addr; |
519 | address pc = os::Linux::ucontext_get_pc(uc); |
520 | // Make sure the pc and the faulting address are sane. |
521 | // |
522 | // If an instruction spans a page boundary, and the page containing |
523 | // the beginning of the instruction is executable but the following |
524 | // page is not, the pc and the faulting address might be slightly |
525 | // different - we still want to unguard the 2nd page in this case. |
526 | // |
527 | // 15 bytes seems to be a (very) safe value for max instruction size. |
528 | bool pc_is_near_addr = |
529 | (pointer_delta((void*) addr, (void*) pc, sizeof(char)) < 15); |
530 | bool instr_spans_page_boundary = |
531 | (align_down((intptr_t) pc ^ (intptr_t) addr, |
532 | (intptr_t) page_size) > 0); |
533 | |
534 | if (pc == addr || (pc_is_near_addr && instr_spans_page_boundary)) { |
535 | static volatile address last_addr = |
536 | (address) os::non_memory_address_word(); |
537 | |
538 | // In conservative mode, don't unguard unless the address is in the VM |
539 | if (addr != last_addr && |
540 | (UnguardOnExecutionViolation > 1 || os::address_is_in_vm(addr))) { |
541 | |
542 | // Set memory to RWX and retry |
543 | address page_start = align_down(addr, page_size); |
544 | bool res = os::protect_memory((char*) page_start, page_size, |
545 | os::MEM_PROT_RWX); |
546 | |
547 | log_debug(os)("Execution protection violation " |
548 | "at " INTPTR_FORMAT |
549 | ", unguarding " INTPTR_FORMAT ": %s, errno=%d" , p2i(addr), |
550 | p2i(page_start), (res ? "success" : "failed" ), errno); |
551 | stub = pc; |
552 | |
553 | // Set last_addr so if we fault again at the same address, we don't end |
554 | // up in an endless loop. |
555 | // |
556 | // There are two potential complications here. Two threads trapping at |
557 | // the same address at the same time could cause one of the threads to |
558 | // think it already unguarded, and abort the VM. Likely very rare. |
559 | // |
560 | // The other race involves two threads alternately trapping at |
561 | // different addresses and failing to unguard the page, resulting in |
562 | // an endless loop. This condition is probably even more unlikely than |
563 | // the first. |
564 | // |
565 | // Although both cases could be avoided by using locks or thread local |
566 | // last_addr, these solutions are unnecessary complication: this |
567 | // handler is a best-effort safety net, not a complete solution. It is |
568 | // disabled by default and should only be used as a workaround in case |
569 | // we missed any no-execute-unsafe VM code. |
570 | |
571 | last_addr = addr; |
572 | } |
573 | } |
574 | } |
575 | #endif // !AMD64 |
576 | |
577 | if (stub != NULL) { |
578 | // save all thread context in case we need to restore it |
579 | if (thread != NULL) thread->set_saved_exception_pc(pc); |
580 | |
581 | os::Linux::ucontext_set_pc(uc, stub); |
582 | return true; |
583 | } |
584 | |
585 | // signal-chaining |
586 | if (os::Linux::chained_handler(sig, info, ucVoid)) { |
587 | return true; |
588 | } |
589 | |
590 | if (!abort_if_unrecognized) { |
591 | // caller wants another chance, so give it to him |
592 | return false; |
593 | } |
594 | |
595 | if (pc == NULL && uc != NULL) { |
596 | pc = os::Linux::ucontext_get_pc(uc); |
597 | } |
598 | |
599 | // unmask current signal |
600 | sigset_t newset; |
601 | sigemptyset(&newset); |
602 | sigaddset(&newset, sig); |
603 | sigprocmask(SIG_UNBLOCK, &newset, NULL); |
604 | |
605 | VMError::report_and_die(t, sig, pc, info, ucVoid); |
606 | |
607 | ShouldNotReachHere(); |
608 | return true; // Mute compiler |
609 | } |
610 | |
611 | void os::Linux::init_thread_fpu_state(void) { |
612 | #ifndef AMD64 |
613 | // set fpu to 53 bit precision |
614 | set_fpu_control_word(0x27f); |
615 | #endif // !AMD64 |
616 | } |
617 | |
618 | int os::Linux::get_fpu_control_word(void) { |
619 | #ifdef AMD64 |
620 | return 0; |
621 | #else |
622 | int fpu_control; |
623 | _FPU_GETCW(fpu_control); |
624 | return fpu_control & 0xffff; |
625 | #endif // AMD64 |
626 | } |
627 | |
628 | void os::Linux::set_fpu_control_word(int fpu_control) { |
629 | #ifndef AMD64 |
630 | _FPU_SETCW(fpu_control); |
631 | #endif // !AMD64 |
632 | } |
633 | |
634 | // Check that the linux kernel version is 2.4 or higher since earlier |
635 | // versions do not support SSE without patches. |
636 | bool os::supports_sse() { |
637 | #ifdef AMD64 |
638 | return true; |
639 | #else |
640 | struct utsname uts; |
641 | if( uname(&uts) != 0 ) return false; // uname fails? |
642 | char *minor_string; |
643 | int major = strtol(uts.release,&minor_string,10); |
644 | int minor = strtol(minor_string+1,NULL,10); |
645 | bool result = (major > 2 || (major==2 && minor >= 4)); |
646 | log_info(os)("OS version is %d.%d, which %s support SSE/SSE2" , |
647 | major,minor, result ? "DOES" : "does NOT" ); |
648 | return result; |
649 | #endif // AMD64 |
650 | } |
651 | |
652 | bool os::is_allocatable(size_t bytes) { |
653 | #ifdef AMD64 |
654 | // unused on amd64? |
655 | return true; |
656 | #else |
657 | |
658 | if (bytes < 2 * G) { |
659 | return true; |
660 | } |
661 | |
662 | char* addr = reserve_memory(bytes, NULL); |
663 | |
664 | if (addr != NULL) { |
665 | release_memory(addr, bytes); |
666 | } |
667 | |
668 | return addr != NULL; |
669 | #endif // AMD64 |
670 | } |
671 | |
672 | //////////////////////////////////////////////////////////////////////////////// |
673 | // thread stack |
674 | |
675 | // Minimum usable stack sizes required to get to user code. Space for |
676 | // HotSpot guard pages is added later. |
677 | size_t os::Posix::_compiler_thread_min_stack_allowed = 48 * K; |
678 | size_t os::Posix::_java_thread_min_stack_allowed = 40 * K; |
679 | #ifdef _LP64 |
680 | size_t os::Posix::_vm_internal_thread_min_stack_allowed = 64 * K; |
681 | #else |
682 | size_t os::Posix::_vm_internal_thread_min_stack_allowed = (48 DEBUG_ONLY(+ 4)) * K; |
683 | #endif // _LP64 |
684 | |
685 | // return default stack size for thr_type |
686 | size_t os::Posix::default_stack_size(os::ThreadType thr_type) { |
687 | // default stack size (compiler thread needs larger stack) |
688 | #ifdef AMD64 |
689 | size_t s = (thr_type == os::compiler_thread ? 4 * M : 1 * M); |
690 | #else |
691 | size_t s = (thr_type == os::compiler_thread ? 2 * M : 512 * K); |
692 | #endif // AMD64 |
693 | return s; |
694 | } |
695 | |
696 | ///////////////////////////////////////////////////////////////////////////// |
697 | // helper functions for fatal error handler |
698 | |
699 | void os::print_context(outputStream *st, const void *context) { |
700 | if (context == NULL) return; |
701 | |
702 | const ucontext_t *uc = (const ucontext_t*)context; |
703 | st->print_cr("Registers:" ); |
704 | #ifdef AMD64 |
705 | st->print( "RAX=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RAX]); |
706 | st->print(", RBX=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RBX]); |
707 | st->print(", RCX=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RCX]); |
708 | st->print(", RDX=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RDX]); |
709 | st->cr(); |
710 | st->print( "RSP=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RSP]); |
711 | st->print(", RBP=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RBP]); |
712 | st->print(", RSI=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RSI]); |
713 | st->print(", RDI=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RDI]); |
714 | st->cr(); |
715 | st->print( "R8 =" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R8]); |
716 | st->print(", R9 =" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R9]); |
717 | st->print(", R10=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R10]); |
718 | st->print(", R11=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R11]); |
719 | st->cr(); |
720 | st->print( "R12=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R12]); |
721 | st->print(", R13=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R13]); |
722 | st->print(", R14=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R14]); |
723 | st->print(", R15=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_R15]); |
724 | st->cr(); |
725 | st->print( "RIP=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_RIP]); |
726 | st->print(", EFLAGS=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_EFL]); |
727 | st->print(", CSGSFS=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_CSGSFS]); |
728 | st->print(", ERR=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_ERR]); |
729 | st->cr(); |
730 | st->print(" TRAPNO=" INTPTR_FORMAT, (intptr_t)uc->uc_mcontext.gregs[REG_TRAPNO]); |
731 | #else |
732 | st->print( "EAX=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EAX]); |
733 | st->print(", EBX=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EBX]); |
734 | st->print(", ECX=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_ECX]); |
735 | st->print(", EDX=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EDX]); |
736 | st->cr(); |
737 | st->print( "ESP=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_UESP]); |
738 | st->print(", EBP=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EBP]); |
739 | st->print(", ESI=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_ESI]); |
740 | st->print(", EDI=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EDI]); |
741 | st->cr(); |
742 | st->print( "EIP=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EIP]); |
743 | st->print(", EFLAGS=" INTPTR_FORMAT, uc->uc_mcontext.gregs[REG_EFL]); |
744 | st->print(", CR2=" PTR64_FORMAT, (uint64_t)uc->uc_mcontext.cr2); |
745 | #endif // AMD64 |
746 | st->cr(); |
747 | st->cr(); |
748 | |
749 | intptr_t *sp = (intptr_t *)os::Linux::ucontext_get_sp(uc); |
750 | st->print_cr("Top of Stack: (sp=" PTR_FORMAT ")" , p2i(sp)); |
751 | print_hex_dump(st, (address)sp, (address)(sp + 8), sizeof(intptr_t)); |
752 | st->cr(); |
753 | |
754 | // Note: it may be unsafe to inspect memory near pc. For example, pc may |
755 | // point to garbage if entry point in an nmethod is corrupted. Leave |
756 | // this at the end, and hope for the best. |
757 | address pc = os::Linux::ucontext_get_pc(uc); |
758 | print_instructions(st, pc, sizeof(char)); |
759 | st->cr(); |
760 | } |
761 | |
762 | void os::print_register_info(outputStream *st, const void *context) { |
763 | if (context == NULL) return; |
764 | |
765 | const ucontext_t *uc = (const ucontext_t*)context; |
766 | |
767 | st->print_cr("Register to memory mapping:" ); |
768 | st->cr(); |
769 | |
770 | // this is horrendously verbose but the layout of the registers in the |
771 | // context does not match how we defined our abstract Register set, so |
772 | // we can't just iterate through the gregs area |
773 | |
774 | // this is only for the "general purpose" registers |
775 | |
776 | #ifdef AMD64 |
777 | st->print("RAX=" ); print_location(st, uc->uc_mcontext.gregs[REG_RAX]); |
778 | st->print("RBX=" ); print_location(st, uc->uc_mcontext.gregs[REG_RBX]); |
779 | st->print("RCX=" ); print_location(st, uc->uc_mcontext.gregs[REG_RCX]); |
780 | st->print("RDX=" ); print_location(st, uc->uc_mcontext.gregs[REG_RDX]); |
781 | st->print("RSP=" ); print_location(st, uc->uc_mcontext.gregs[REG_RSP]); |
782 | st->print("RBP=" ); print_location(st, uc->uc_mcontext.gregs[REG_RBP]); |
783 | st->print("RSI=" ); print_location(st, uc->uc_mcontext.gregs[REG_RSI]); |
784 | st->print("RDI=" ); print_location(st, uc->uc_mcontext.gregs[REG_RDI]); |
785 | st->print("R8 =" ); print_location(st, uc->uc_mcontext.gregs[REG_R8]); |
786 | st->print("R9 =" ); print_location(st, uc->uc_mcontext.gregs[REG_R9]); |
787 | st->print("R10=" ); print_location(st, uc->uc_mcontext.gregs[REG_R10]); |
788 | st->print("R11=" ); print_location(st, uc->uc_mcontext.gregs[REG_R11]); |
789 | st->print("R12=" ); print_location(st, uc->uc_mcontext.gregs[REG_R12]); |
790 | st->print("R13=" ); print_location(st, uc->uc_mcontext.gregs[REG_R13]); |
791 | st->print("R14=" ); print_location(st, uc->uc_mcontext.gregs[REG_R14]); |
792 | st->print("R15=" ); print_location(st, uc->uc_mcontext.gregs[REG_R15]); |
793 | #else |
794 | st->print("EAX=" ); print_location(st, uc->uc_mcontext.gregs[REG_EAX]); |
795 | st->print("EBX=" ); print_location(st, uc->uc_mcontext.gregs[REG_EBX]); |
796 | st->print("ECX=" ); print_location(st, uc->uc_mcontext.gregs[REG_ECX]); |
797 | st->print("EDX=" ); print_location(st, uc->uc_mcontext.gregs[REG_EDX]); |
798 | st->print("ESP=" ); print_location(st, uc->uc_mcontext.gregs[REG_ESP]); |
799 | st->print("EBP=" ); print_location(st, uc->uc_mcontext.gregs[REG_EBP]); |
800 | st->print("ESI=" ); print_location(st, uc->uc_mcontext.gregs[REG_ESI]); |
801 | st->print("EDI=" ); print_location(st, uc->uc_mcontext.gregs[REG_EDI]); |
802 | #endif // AMD64 |
803 | |
804 | st->cr(); |
805 | } |
806 | |
807 | void os::setup_fpu() { |
808 | #ifndef AMD64 |
809 | address fpu_cntrl = StubRoutines::addr_fpu_cntrl_wrd_std(); |
810 | __asm__ volatile ( "fldcw (%0)" : |
811 | : "r" (fpu_cntrl) : "memory" ); |
812 | #endif // !AMD64 |
813 | } |
814 | |
815 | #ifndef PRODUCT |
816 | void os::verify_stack_alignment() { |
817 | #ifdef AMD64 |
818 | assert(((intptr_t)os::current_stack_pointer() & (StackAlignmentInBytes-1)) == 0, "incorrect stack alignment" ); |
819 | #endif |
820 | } |
821 | #endif |
822 | |
823 | |
824 | /* |
825 | * IA32 only: execute code at a high address in case buggy NX emulation is present. I.e. avoid CS limit |
826 | * updates (JDK-8023956). |
827 | */ |
828 | void os::workaround_expand_exec_shield_cs_limit() { |
829 | #if defined(IA32) |
830 | assert(Linux::initial_thread_stack_bottom() != NULL, "sanity" ); |
831 | size_t page_size = os::vm_page_size(); |
832 | |
833 | /* |
834 | * JDK-8197429 |
835 | * |
836 | * Expand the stack mapping to the end of the initial stack before |
837 | * attempting to install the codebuf. This is needed because newer |
838 | * Linux kernels impose a distance of a megabyte between stack |
839 | * memory and other memory regions. If we try to install the |
840 | * codebuf before expanding the stack the installation will appear |
841 | * to succeed but we'll get a segfault later if we expand the stack |
842 | * in Java code. |
843 | * |
844 | */ |
845 | if (os::is_primordial_thread()) { |
846 | address limit = Linux::initial_thread_stack_bottom(); |
847 | if (! DisablePrimordialThreadGuardPages) { |
848 | limit += JavaThread::stack_red_zone_size() + |
849 | JavaThread::stack_yellow_zone_size(); |
850 | } |
851 | os::Linux::expand_stack_to(limit); |
852 | } |
853 | |
854 | /* |
855 | * Take the highest VA the OS will give us and exec |
856 | * |
857 | * Although using -(pagesz) as mmap hint works on newer kernel as you would |
858 | * think, older variants affected by this work-around don't (search forward only). |
859 | * |
860 | * On the affected distributions, we understand the memory layout to be: |
861 | * |
862 | * TASK_LIMIT= 3G, main stack base close to TASK_LIMT. |
863 | * |
864 | * A few pages south main stack will do it. |
865 | * |
866 | * If we are embedded in an app other than launcher (initial != main stack), |
867 | * we don't have much control or understanding of the address space, just let it slide. |
868 | */ |
869 | char* hint = (char*)(Linux::initial_thread_stack_bottom() - |
870 | (JavaThread::stack_guard_zone_size() + page_size)); |
871 | char* codebuf = os::attempt_reserve_memory_at(page_size, hint); |
872 | |
873 | if (codebuf == NULL) { |
874 | // JDK-8197429: There may be a stack gap of one megabyte between |
875 | // the limit of the stack and the nearest memory region: this is a |
876 | // Linux kernel workaround for CVE-2017-1000364. If we failed to |
877 | // map our codebuf, try again at an address one megabyte lower. |
878 | hint -= 1 * M; |
879 | codebuf = os::attempt_reserve_memory_at(page_size, hint); |
880 | } |
881 | |
882 | if ((codebuf == NULL) || (!os::commit_memory(codebuf, page_size, true))) { |
883 | return; // No matter, we tried, best effort. |
884 | } |
885 | |
886 | MemTracker::record_virtual_memory_type((address)codebuf, mtInternal); |
887 | |
888 | log_info(os)("[CS limit NX emulation work-around, exec code at: %p]" , codebuf); |
889 | |
890 | // Some code to exec: the 'ret' instruction |
891 | codebuf[0] = 0xC3; |
892 | |
893 | // Call the code in the codebuf |
894 | __asm__ volatile("call *%0" : : "r" (codebuf)); |
895 | |
896 | // keep the page mapped so CS limit isn't reduced. |
897 | #endif |
898 | } |
899 | |
900 | int os::() { |
901 | // JDK-8050147 requires the full cache line bang for x86. |
902 | return VM_Version::L1_line_size(); |
903 | } |
904 | |