• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 //===--- CrashRecoveryContext.cpp - Crash Recovery ------------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 
10 #include "llvm/Support/CrashRecoveryContext.h"
11 #include "llvm/ADT/SmallString.h"
12 #include "llvm/Config/config.h"
13 #include "llvm/Support/ErrorHandling.h"
14 #include "llvm/Support/ManagedStatic.h"
15 #include "llvm/Support/Mutex.h"
16 #include "llvm/Support/ThreadLocal.h"
17 #include <cstdio>
18 #include <setjmp.h>
19 using namespace llvm;
20 
21 namespace {
22 
23 struct CrashRecoveryContextImpl;
24 
25 static ManagedStatic<
26     sys::ThreadLocal<const CrashRecoveryContextImpl> > CurrentContext;
27 
28 struct CrashRecoveryContextImpl {
29   CrashRecoveryContext *CRC;
30   std::string Backtrace;
31   ::jmp_buf JumpBuffer;
32   volatile unsigned Failed : 1;
33   unsigned SwitchedThread : 1;
34 
35 public:
CrashRecoveryContextImpl__anon90b41d9a0111::CrashRecoveryContextImpl36   CrashRecoveryContextImpl(CrashRecoveryContext *CRC) : CRC(CRC),
37                                                         Failed(false),
38                                                         SwitchedThread(false) {
39     CurrentContext->set(this);
40   }
~CrashRecoveryContextImpl__anon90b41d9a0111::CrashRecoveryContextImpl41   ~CrashRecoveryContextImpl() {
42     if (!SwitchedThread)
43       CurrentContext->erase();
44   }
45 
46   /// \brief Called when the separate crash-recovery thread was finished, to
47   /// indicate that we don't need to clear the thread-local CurrentContext.
setSwitchedThread__anon90b41d9a0111::CrashRecoveryContextImpl48   void setSwitchedThread() { SwitchedThread = true; }
49 
HandleCrash__anon90b41d9a0111::CrashRecoveryContextImpl50   void HandleCrash() {
51     // Eliminate the current context entry, to avoid re-entering in case the
52     // cleanup code crashes.
53     CurrentContext->erase();
54 
55     assert(!Failed && "Crash recovery context already failed!");
56     Failed = true;
57 
58     // FIXME: Stash the backtrace.
59 
60     // Jump back to the RunSafely we were called under.
61     longjmp(JumpBuffer, 1);
62   }
63 };
64 
65 }
66 
67 static ManagedStatic<sys::Mutex> gCrashRecoveryContextMutex;
68 static bool gCrashRecoveryEnabled = false;
69 
70 static ManagedStatic<sys::ThreadLocal<const CrashRecoveryContextCleanup> >
71        tlIsRecoveringFromCrash;
72 
~CrashRecoveryContextCleanup()73 CrashRecoveryContextCleanup::~CrashRecoveryContextCleanup() {}
74 
~CrashRecoveryContext()75 CrashRecoveryContext::~CrashRecoveryContext() {
76   // Reclaim registered resources.
77   CrashRecoveryContextCleanup *i = head;
78   tlIsRecoveringFromCrash->set(head);
79   while (i) {
80     CrashRecoveryContextCleanup *tmp = i;
81     i = tmp->next;
82     tmp->cleanupFired = true;
83     tmp->recoverResources();
84     delete tmp;
85   }
86   tlIsRecoveringFromCrash->erase();
87 
88   CrashRecoveryContextImpl *CRCI = (CrashRecoveryContextImpl *) Impl;
89   delete CRCI;
90 }
91 
isRecoveringFromCrash()92 bool CrashRecoveryContext::isRecoveringFromCrash() {
93   return tlIsRecoveringFromCrash->get() != nullptr;
94 }
95 
GetCurrent()96 CrashRecoveryContext *CrashRecoveryContext::GetCurrent() {
97   if (!gCrashRecoveryEnabled)
98     return nullptr;
99 
100   const CrashRecoveryContextImpl *CRCI = CurrentContext->get();
101   if (!CRCI)
102     return nullptr;
103 
104   return CRCI->CRC;
105 }
106 
registerCleanup(CrashRecoveryContextCleanup * cleanup)107 void CrashRecoveryContext::registerCleanup(CrashRecoveryContextCleanup *cleanup)
108 {
109   if (!cleanup)
110     return;
111   if (head)
112     head->prev = cleanup;
113   cleanup->next = head;
114   head = cleanup;
115 }
116 
117 void
unregisterCleanup(CrashRecoveryContextCleanup * cleanup)118 CrashRecoveryContext::unregisterCleanup(CrashRecoveryContextCleanup *cleanup) {
119   if (!cleanup)
120     return;
121   if (cleanup == head) {
122     head = cleanup->next;
123     if (head)
124       head->prev = nullptr;
125   }
126   else {
127     cleanup->prev->next = cleanup->next;
128     if (cleanup->next)
129       cleanup->next->prev = cleanup->prev;
130   }
131   delete cleanup;
132 }
133 
134 #ifdef LLVM_ON_WIN32
135 
136 #include "Windows/WindowsSupport.h"
137 
138 // On Windows, we can make use of vectored exception handling to
139 // catch most crashing situations.  Note that this does mean
140 // we will be alerted of exceptions *before* structured exception
141 // handling has the opportunity to catch it.  But that isn't likely
142 // to cause problems because nowhere in the project is SEH being
143 // used.
144 //
145 // Vectored exception handling is built on top of SEH, and so it
146 // works on a per-thread basis.
147 //
148 // The vectored exception handler functionality was added in Windows
149 // XP, so if support for older versions of Windows is required,
150 // it will have to be added.
151 //
152 // If we want to support as far back as Win2k, we could use the
153 // SetUnhandledExceptionFilter API, but there's a risk of that
154 // being entirely overwritten (it's not a chain).
155 
ExceptionHandler(PEXCEPTION_POINTERS ExceptionInfo)156 static LONG CALLBACK ExceptionHandler(PEXCEPTION_POINTERS ExceptionInfo)
157 {
158   // Lookup the current thread local recovery object.
159   const CrashRecoveryContextImpl *CRCI = CurrentContext->get();
160 
161   if (!CRCI) {
162     // Something has gone horribly wrong, so let's just tell everyone
163     // to keep searching
164     CrashRecoveryContext::Disable();
165     return EXCEPTION_CONTINUE_SEARCH;
166   }
167 
168   // TODO: We can capture the stack backtrace here and store it on the
169   // implementation if we so choose.
170 
171   // Handle the crash
172   const_cast<CrashRecoveryContextImpl*>(CRCI)->HandleCrash();
173 
174   // Note that we don't actually get here because HandleCrash calls
175   // longjmp, which means the HandleCrash function never returns.
176   llvm_unreachable("Handled the crash, should have longjmp'ed out of here");
177 }
178 
179 // Because the Enable and Disable calls are static, it means that
180 // there may not actually be an Impl available, or even a current
181 // CrashRecoveryContext at all.  So we make use of a thread-local
182 // exception table.  The handles contained in here will either be
183 // non-NULL, valid VEH handles, or NULL.
184 static sys::ThreadLocal<const void> sCurrentExceptionHandle;
185 
Enable()186 void CrashRecoveryContext::Enable() {
187   sys::ScopedLock L(*gCrashRecoveryContextMutex);
188 
189   if (gCrashRecoveryEnabled)
190     return;
191 
192   gCrashRecoveryEnabled = true;
193 
194   // We can set up vectored exception handling now.  We will install our
195   // handler as the front of the list, though there's no assurances that
196   // it will remain at the front (another call could install itself before
197   // our handler).  This 1) isn't likely, and 2) shouldn't cause problems.
198   PVOID handle = ::AddVectoredExceptionHandler(1, ExceptionHandler);
199   sCurrentExceptionHandle.set(handle);
200 }
201 
Disable()202 void CrashRecoveryContext::Disable() {
203   sys::ScopedLock L(*gCrashRecoveryContextMutex);
204 
205   if (!gCrashRecoveryEnabled)
206     return;
207 
208   gCrashRecoveryEnabled = false;
209 
210   PVOID currentHandle = const_cast<PVOID>(sCurrentExceptionHandle.get());
211   if (currentHandle) {
212     // Now we can remove the vectored exception handler from the chain
213     ::RemoveVectoredExceptionHandler(currentHandle);
214 
215     // Reset the handle in our thread-local set.
216     sCurrentExceptionHandle.set(NULL);
217   }
218 }
219 
220 #else
221 
222 // Generic POSIX implementation.
223 //
224 // This implementation relies on synchronous signals being delivered to the
225 // current thread. We use a thread local object to keep track of the active
226 // crash recovery context, and install signal handlers to invoke HandleCrash on
227 // the active object.
228 //
229 // This implementation does not to attempt to chain signal handlers in any
230 // reliable fashion -- if we get a signal outside of a crash recovery context we
231 // simply disable crash recovery and raise the signal again.
232 
233 #include <signal.h>
234 
235 static const int Signals[] =
236     { SIGABRT, SIGBUS, SIGFPE, SIGILL, SIGSEGV, SIGTRAP };
237 static const unsigned NumSignals = sizeof(Signals) / sizeof(Signals[0]);
238 static struct sigaction PrevActions[NumSignals];
239 
CrashRecoverySignalHandler(int Signal)240 static void CrashRecoverySignalHandler(int Signal) {
241   // Lookup the current thread local recovery object.
242   const CrashRecoveryContextImpl *CRCI = CurrentContext->get();
243 
244   if (!CRCI) {
245     // We didn't find a crash recovery context -- this means either we got a
246     // signal on a thread we didn't expect it on, the application got a signal
247     // outside of a crash recovery context, or something else went horribly
248     // wrong.
249     //
250     // Disable crash recovery and raise the signal again. The assumption here is
251     // that the enclosing application will terminate soon, and we won't want to
252     // attempt crash recovery again.
253     //
254     // This call of Disable isn't thread safe, but it doesn't actually matter.
255     CrashRecoveryContext::Disable();
256     raise(Signal);
257 
258     // The signal will be thrown once the signal mask is restored.
259     return;
260   }
261 
262   // Unblock the signal we received.
263   sigset_t SigMask;
264   sigemptyset(&SigMask);
265   sigaddset(&SigMask, Signal);
266   sigprocmask(SIG_UNBLOCK, &SigMask, nullptr);
267 
268   if (CRCI)
269     const_cast<CrashRecoveryContextImpl*>(CRCI)->HandleCrash();
270 }
271 
Enable()272 void CrashRecoveryContext::Enable() {
273   sys::ScopedLock L(*gCrashRecoveryContextMutex);
274 
275   if (gCrashRecoveryEnabled)
276     return;
277 
278   gCrashRecoveryEnabled = true;
279 
280   // Setup the signal handler.
281   struct sigaction Handler;
282   Handler.sa_handler = CrashRecoverySignalHandler;
283   Handler.sa_flags = 0;
284   sigemptyset(&Handler.sa_mask);
285 
286   for (unsigned i = 0; i != NumSignals; ++i) {
287     sigaction(Signals[i], &Handler, &PrevActions[i]);
288   }
289 }
290 
Disable()291 void CrashRecoveryContext::Disable() {
292   sys::ScopedLock L(*gCrashRecoveryContextMutex);
293 
294   if (!gCrashRecoveryEnabled)
295     return;
296 
297   gCrashRecoveryEnabled = false;
298 
299   // Restore the previous signal handlers.
300   for (unsigned i = 0; i != NumSignals; ++i)
301     sigaction(Signals[i], &PrevActions[i], nullptr);
302 }
303 
304 #endif
305 
RunSafely(function_ref<void ()> Fn)306 bool CrashRecoveryContext::RunSafely(function_ref<void()> Fn) {
307   // If crash recovery is disabled, do nothing.
308   if (gCrashRecoveryEnabled) {
309     assert(!Impl && "Crash recovery context already initialized!");
310     CrashRecoveryContextImpl *CRCI = new CrashRecoveryContextImpl(this);
311     Impl = CRCI;
312 
313     if (setjmp(CRCI->JumpBuffer) != 0) {
314       return false;
315     }
316   }
317 
318   Fn();
319   return true;
320 }
321 
HandleCrash()322 void CrashRecoveryContext::HandleCrash() {
323   CrashRecoveryContextImpl *CRCI = (CrashRecoveryContextImpl *) Impl;
324   assert(CRCI && "Crash recovery context never initialized!");
325   CRCI->HandleCrash();
326 }
327 
getBacktrace() const328 const std::string &CrashRecoveryContext::getBacktrace() const {
329   CrashRecoveryContextImpl *CRC = (CrashRecoveryContextImpl *) Impl;
330   assert(CRC && "Crash recovery context never initialized!");
331   assert(CRC->Failed && "No crash was detected!");
332   return CRC->Backtrace;
333 }
334 
335 // FIXME: Portability.
setThreadBackgroundPriority()336 static void setThreadBackgroundPriority() {
337 #ifdef __APPLE__
338   setpriority(PRIO_DARWIN_THREAD, 0, PRIO_DARWIN_BG);
339 #endif
340 }
341 
hasThreadBackgroundPriority()342 static bool hasThreadBackgroundPriority() {
343 #ifdef __APPLE__
344   return getpriority(PRIO_DARWIN_THREAD, 0) == 1;
345 #else
346   return false;
347 #endif
348 }
349 
350 namespace {
351 struct RunSafelyOnThreadInfo {
352   function_ref<void()> Fn;
353   CrashRecoveryContext *CRC;
354   bool UseBackgroundPriority;
355   bool Result;
356 };
357 }
358 
RunSafelyOnThread_Dispatch(void * UserData)359 static void RunSafelyOnThread_Dispatch(void *UserData) {
360   RunSafelyOnThreadInfo *Info =
361     reinterpret_cast<RunSafelyOnThreadInfo*>(UserData);
362 
363   if (Info->UseBackgroundPriority)
364     setThreadBackgroundPriority();
365 
366   Info->Result = Info->CRC->RunSafely(Info->Fn);
367 }
RunSafelyOnThread(function_ref<void ()> Fn,unsigned RequestedStackSize)368 bool CrashRecoveryContext::RunSafelyOnThread(function_ref<void()> Fn,
369                                              unsigned RequestedStackSize) {
370   bool UseBackgroundPriority = hasThreadBackgroundPriority();
371   RunSafelyOnThreadInfo Info = { Fn, this, UseBackgroundPriority, false };
372   llvm_execute_on_thread(RunSafelyOnThread_Dispatch, &Info, RequestedStackSize);
373   if (CrashRecoveryContextImpl *CRC = (CrashRecoveryContextImpl *)Impl)
374     CRC->setSwitchedThread();
375   return Info.Result;
376 }
377