1 // Copyright (c) 2010 Google Inc.
2 // All rights reserved.
3 //
4 // Redistribution and use in source and binary forms, with or without
5 // modification, are permitted provided that the following conditions are
6 // met:
7 //
8 // * Redistributions of source code must retain the above copyright
9 // notice, this list of conditions and the following disclaimer.
10 // * Redistributions in binary form must reproduce the above
11 // copyright notice, this list of conditions and the following disclaimer
12 // in the documentation and/or other materials provided with the
13 // distribution.
14 // * Neither the name of Google Inc. nor the names of its
15 // contributors may be used to endorse or promote products derived from
16 // this software without specific prior written permission.
17 //
18 // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
19 // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
20 // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
21 // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
22 // OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
23 // SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
24 // LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
25 // DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
26 // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
27 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
28 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
29
30 // stackwalker_arm.cc: arm-specific stackwalker.
31 //
32 // See stackwalker_arm.h for documentation.
33 //
34 // Author: Mark Mentovai, Ted Mielczarek, Jim Blandy
35
36 #include <vector>
37
38 #include "common/scoped_ptr.h"
39 #include "google_breakpad/processor/call_stack.h"
40 #include "google_breakpad/processor/memory_region.h"
41 #include "google_breakpad/processor/source_line_resolver_interface.h"
42 #include "google_breakpad/processor/stack_frame_cpu.h"
43 #include "processor/cfi_frame_info.h"
44 #include "processor/logging.h"
45 #include "processor/stackwalker_arm.h"
46
47 namespace google_breakpad {
48
49
StackwalkerARM(const SystemInfo * system_info,const MDRawContextARM * context,int fp_register,MemoryRegion * memory,const CodeModules * modules,StackFrameSymbolizer * resolver_helper)50 StackwalkerARM::StackwalkerARM(const SystemInfo* system_info,
51 const MDRawContextARM* context,
52 int fp_register,
53 MemoryRegion* memory,
54 const CodeModules* modules,
55 StackFrameSymbolizer* resolver_helper)
56 : Stackwalker(system_info, memory, modules, resolver_helper),
57 context_(context), fp_register_(fp_register),
58 context_frame_validity_(StackFrameARM::CONTEXT_VALID_ALL) { }
59
60
GetContextFrame()61 StackFrame* StackwalkerARM::GetContextFrame() {
62 if (!context_) {
63 BPLOG(ERROR) << "Can't get context frame without context";
64 return NULL;
65 }
66
67 StackFrameARM* frame = new StackFrameARM();
68
69 // The instruction pointer is stored directly in a register (r15), so pull it
70 // straight out of the CPU context structure.
71 frame->context = *context_;
72 frame->context_validity = context_frame_validity_;
73 frame->trust = StackFrame::FRAME_TRUST_CONTEXT;
74 frame->instruction = frame->context.iregs[MD_CONTEXT_ARM_REG_PC];
75
76 return frame;
77 }
78
GetCallerByCFIFrameInfo(const vector<StackFrame * > & frames,CFIFrameInfo * cfi_frame_info)79 StackFrameARM* StackwalkerARM::GetCallerByCFIFrameInfo(
80 const vector<StackFrame*> &frames,
81 CFIFrameInfo* cfi_frame_info) {
82 StackFrameARM* last_frame = static_cast<StackFrameARM*>(frames.back());
83
84 static const char* register_names[] = {
85 "r0", "r1", "r2", "r3", "r4", "r5", "r6", "r7",
86 "r8", "r9", "r10", "r11", "r12", "sp", "lr", "pc",
87 "f0", "f1", "f2", "f3", "f4", "f5", "f6", "f7",
88 "fps", "cpsr",
89 NULL
90 };
91
92 // Populate a dictionary with the valid register values in last_frame.
93 CFIFrameInfo::RegisterValueMap<uint32_t> callee_registers;
94 for (int i = 0; register_names[i]; i++)
95 if (last_frame->context_validity & StackFrameARM::RegisterValidFlag(i))
96 callee_registers[register_names[i]] = last_frame->context.iregs[i];
97
98 // Use the STACK CFI data to recover the caller's register values.
99 CFIFrameInfo::RegisterValueMap<uint32_t> caller_registers;
100 if (!cfi_frame_info->FindCallerRegs(callee_registers, *memory_,
101 &caller_registers))
102 return NULL;
103
104 // Construct a new stack frame given the values the CFI recovered.
105 scoped_ptr<StackFrameARM> frame(new StackFrameARM());
106 for (int i = 0; register_names[i]; i++) {
107 CFIFrameInfo::RegisterValueMap<uint32_t>::iterator entry =
108 caller_registers.find(register_names[i]);
109 if (entry != caller_registers.end()) {
110 // We recovered the value of this register; fill the context with the
111 // value from caller_registers.
112 frame->context_validity |= StackFrameARM::RegisterValidFlag(i);
113 frame->context.iregs[i] = entry->second;
114 } else if (4 <= i && i <= 11 && (last_frame->context_validity &
115 StackFrameARM::RegisterValidFlag(i))) {
116 // If the STACK CFI data doesn't mention some callee-saves register, and
117 // it is valid in the callee, assume the callee has not yet changed it.
118 // Registers r4 through r11 are callee-saves, according to the Procedure
119 // Call Standard for the ARM Architecture, which the Linux ABI follows.
120 frame->context_validity |= StackFrameARM::RegisterValidFlag(i);
121 frame->context.iregs[i] = last_frame->context.iregs[i];
122 }
123 }
124 // If the CFI doesn't recover the PC explicitly, then use .ra.
125 if (!(frame->context_validity & StackFrameARM::CONTEXT_VALID_PC)) {
126 CFIFrameInfo::RegisterValueMap<uint32_t>::iterator entry =
127 caller_registers.find(".ra");
128 if (entry != caller_registers.end()) {
129 if (fp_register_ == -1) {
130 frame->context_validity |= StackFrameARM::CONTEXT_VALID_PC;
131 frame->context.iregs[MD_CONTEXT_ARM_REG_PC] = entry->second;
132 } else {
133 // The CFI updated the link register and not the program counter.
134 // Handle getting the program counter from the link register.
135 frame->context_validity |= StackFrameARM::CONTEXT_VALID_PC;
136 frame->context_validity |= StackFrameARM::CONTEXT_VALID_LR;
137 frame->context.iregs[MD_CONTEXT_ARM_REG_LR] = entry->second;
138 frame->context.iregs[MD_CONTEXT_ARM_REG_PC] =
139 last_frame->context.iregs[MD_CONTEXT_ARM_REG_LR];
140 }
141 }
142 }
143 // If the CFI doesn't recover the SP explicitly, then use .cfa.
144 if (!(frame->context_validity & StackFrameARM::CONTEXT_VALID_SP)) {
145 CFIFrameInfo::RegisterValueMap<uint32_t>::iterator entry =
146 caller_registers.find(".cfa");
147 if (entry != caller_registers.end()) {
148 frame->context_validity |= StackFrameARM::CONTEXT_VALID_SP;
149 frame->context.iregs[MD_CONTEXT_ARM_REG_SP] = entry->second;
150 }
151 }
152
153 // If we didn't recover the PC and the SP, then the frame isn't very useful.
154 static const int essentials = (StackFrameARM::CONTEXT_VALID_SP
155 | StackFrameARM::CONTEXT_VALID_PC);
156 if ((frame->context_validity & essentials) != essentials)
157 return NULL;
158
159 frame->trust = StackFrame::FRAME_TRUST_CFI;
160 return frame.release();
161 }
162
GetCallerByStackScan(const vector<StackFrame * > & frames)163 StackFrameARM* StackwalkerARM::GetCallerByStackScan(
164 const vector<StackFrame*> &frames) {
165 StackFrameARM* last_frame = static_cast<StackFrameARM*>(frames.back());
166 uint32_t last_sp = last_frame->context.iregs[MD_CONTEXT_ARM_REG_SP];
167 uint32_t caller_sp, caller_pc;
168
169 if (!ScanForReturnAddress(last_sp, &caller_sp, &caller_pc,
170 frames.size() == 1 /* is_context_frame */)) {
171 // No plausible return address was found.
172 return NULL;
173 }
174
175 // ScanForReturnAddress found a reasonable return address. Advance
176 // %sp to the location above the one where the return address was
177 // found.
178 caller_sp += 4;
179
180 // Create a new stack frame (ownership will be transferred to the caller)
181 // and fill it in.
182 StackFrameARM* frame = new StackFrameARM();
183
184 frame->trust = StackFrame::FRAME_TRUST_SCAN;
185 frame->context = last_frame->context;
186 frame->context.iregs[MD_CONTEXT_ARM_REG_PC] = caller_pc;
187 frame->context.iregs[MD_CONTEXT_ARM_REG_SP] = caller_sp;
188 frame->context_validity = StackFrameARM::CONTEXT_VALID_PC |
189 StackFrameARM::CONTEXT_VALID_SP;
190
191 return frame;
192 }
193
GetCallerByFramePointer(const vector<StackFrame * > & frames)194 StackFrameARM* StackwalkerARM::GetCallerByFramePointer(
195 const vector<StackFrame*> &frames) {
196 StackFrameARM* last_frame = static_cast<StackFrameARM*>(frames.back());
197
198 if (!(last_frame->context_validity &
199 StackFrameARM::RegisterValidFlag(fp_register_))) {
200 return NULL;
201 }
202
203 uint32_t last_fp = last_frame->context.iregs[fp_register_];
204
205 uint32_t caller_fp = 0;
206 if (last_fp && !memory_->GetMemoryAtAddress(last_fp, &caller_fp)) {
207 BPLOG(ERROR) << "Unable to read caller_fp from last_fp: 0x"
208 << std::hex << last_fp;
209 return NULL;
210 }
211
212 uint32_t caller_lr = 0;
213 if (last_fp && !memory_->GetMemoryAtAddress(last_fp + 4, &caller_lr)) {
214 BPLOG(ERROR) << "Unable to read caller_lr from last_fp + 4: 0x"
215 << std::hex << (last_fp + 4);
216 return NULL;
217 }
218
219 uint32_t caller_sp = last_fp ? last_fp + 8 :
220 last_frame->context.iregs[MD_CONTEXT_ARM_REG_SP];
221
222 // Create a new stack frame (ownership will be transferred to the caller)
223 // and fill it in.
224 StackFrameARM* frame = new StackFrameARM();
225
226 frame->trust = StackFrame::FRAME_TRUST_FP;
227 frame->context = last_frame->context;
228 frame->context.iregs[fp_register_] = caller_fp;
229 frame->context.iregs[MD_CONTEXT_ARM_REG_SP] = caller_sp;
230 frame->context.iregs[MD_CONTEXT_ARM_REG_PC] =
231 last_frame->context.iregs[MD_CONTEXT_ARM_REG_LR];
232 frame->context.iregs[MD_CONTEXT_ARM_REG_LR] = caller_lr;
233 frame->context_validity = StackFrameARM::CONTEXT_VALID_PC |
234 StackFrameARM::CONTEXT_VALID_LR |
235 StackFrameARM::RegisterValidFlag(fp_register_) |
236 StackFrameARM::CONTEXT_VALID_SP;
237 return frame;
238 }
239
GetCallerFrame(const CallStack * stack,bool stack_scan_allowed)240 StackFrame* StackwalkerARM::GetCallerFrame(const CallStack* stack,
241 bool stack_scan_allowed) {
242 if (!memory_ || !stack) {
243 BPLOG(ERROR) << "Can't get caller frame without memory or stack";
244 return NULL;
245 }
246
247 const vector<StackFrame*> &frames = *stack->frames();
248 StackFrameARM* last_frame = static_cast<StackFrameARM*>(frames.back());
249 scoped_ptr<StackFrameARM> frame;
250
251 // See if there is DWARF call frame information covering this address.
252 scoped_ptr<CFIFrameInfo> cfi_frame_info(
253 frame_symbolizer_->FindCFIFrameInfo(last_frame));
254 if (cfi_frame_info.get())
255 frame.reset(GetCallerByCFIFrameInfo(frames, cfi_frame_info.get()));
256
257 // If CFI failed, or there wasn't CFI available, fall back
258 // to frame pointer, if this is configured.
259 if (fp_register_ >= 0 && !frame.get())
260 frame.reset(GetCallerByFramePointer(frames));
261
262 // If everuthing failed, fall back to stack scanning.
263 if (stack_scan_allowed && !frame.get())
264 frame.reset(GetCallerByStackScan(frames));
265
266 // If nothing worked, tell the caller.
267 if (!frame.get())
268 return NULL;
269
270
271 // An instruction address of zero marks the end of the stack.
272 if (frame->context.iregs[MD_CONTEXT_ARM_REG_PC] == 0)
273 return NULL;
274
275 // If the new stack pointer is at a lower address than the old, then
276 // that's clearly incorrect. Treat this as end-of-stack to enforce
277 // progress and avoid infinite loops.
278 if (frame->context.iregs[MD_CONTEXT_ARM_REG_SP]
279 < last_frame->context.iregs[MD_CONTEXT_ARM_REG_SP])
280 return NULL;
281
282 // The new frame's context's PC is the return address, which is one
283 // instruction past the instruction that caused us to arrive at the
284 // callee. Set new_frame->instruction to one less than the PC. This won't
285 // reference the beginning of the call instruction, but it's at least
286 // within it, which is sufficient to get the source line information to
287 // match up with the line that contains the function call. Callers that
288 // require the exact return address value may access
289 // frame->context.iregs[MD_CONTEXT_ARM_REG_PC].
290 frame->instruction = frame->context.iregs[MD_CONTEXT_ARM_REG_PC] - 2;
291
292 return frame.release();
293 }
294
295
296 } // namespace google_breakpad
297