1 //===-- interception.h ------------------------------------------*- C++ -*-===//
2 //
3 // This file is distributed under the University of Illinois Open Source
4 // License. See LICENSE.TXT for details.
5 //
6 //===----------------------------------------------------------------------===//
7 //
8 // This file is a part of AddressSanitizer, an address sanity checker.
9 //
10 // Machinery for providing replacements/wrappers for system functions.
11 //===----------------------------------------------------------------------===//
12 
13 #ifndef INTERCEPTION_H
14 #define INTERCEPTION_H
15 
16 #if !defined(__linux__) && !defined(__FreeBSD__) && \
17   !defined(__APPLE__) && !defined(_WIN32)
18 # error "Interception doesn't work on this operating system."
19 #endif
20 
21 #include "sanitizer_common/sanitizer_internal_defs.h"
22 
23 // These typedefs should be used only in the interceptor definitions to replace
24 // the standard system types (e.g. SSIZE_T instead of ssize_t)
25 typedef __sanitizer::uptr    SIZE_T;
26 typedef __sanitizer::sptr    SSIZE_T;
27 typedef __sanitizer::sptr    PTRDIFF_T;
28 typedef __sanitizer::s64     INTMAX_T;
29 typedef __sanitizer::OFF_T   OFF_T;
30 typedef __sanitizer::OFF64_T OFF64_T;
31 
32 // How to add an interceptor:
33 // Suppose you need to wrap/replace system function (generally, from libc):
34 //      int foo(const char *bar, double baz);
35 // You'll need to:
36 //      1) define INTERCEPTOR(int, foo, const char *bar, double baz) { ... } in
37 //         your source file. See the notes below for cases when
38 //         INTERCEPTOR_WITH_SUFFIX(...) should be used instead.
39 //      2) Call "INTERCEPT_FUNCTION(foo)" prior to the first call of "foo".
40 //         INTERCEPT_FUNCTION(foo) evaluates to "true" iff the function was
41 //         intercepted successfully.
42 // You can access original function by calling REAL(foo)(bar, baz).
43 // By default, REAL(foo) will be visible only inside your interceptor, and if
44 // you want to use it in other parts of RTL, you'll need to:
45 //      3a) add DECLARE_REAL(int, foo, const char*, double) to a
46 //          header file.
47 // However, if the call "INTERCEPT_FUNCTION(foo)" and definition for
48 // INTERCEPTOR(..., foo, ...) are in different files, you'll instead need to:
49 //      3b) add DECLARE_REAL_AND_INTERCEPTOR(int, foo, const char*, double)
50 //          to a header file.
51 
52 // Notes: 1. Things may not work properly if macro INTERCEPTOR(...) {...} or
53 //           DECLARE_REAL(...) are located inside namespaces.
54 //        2. On Mac you can also use: "OVERRIDE_FUNCTION(foo, zoo)" to
55 //           effectively redirect calls from "foo" to "zoo". In this case
56 //           you aren't required to implement
57 //           INTERCEPTOR(int, foo, const char *bar, double baz) {...}
58 //           but instead you'll have to add
59 //           DECLARE_REAL(int, foo, const char *bar, double baz) in your
60 //           source file (to define a pointer to overriden function).
61 //        3. Some Mac functions have symbol variants discriminated by
62 //           additional suffixes, e.g. _$UNIX2003 (see
63 //           https://developer.apple.com/library/mac/#releasenotes/Darwin/SymbolVariantsRelNotes/index.html
64 //           for more details). To intercept such functions you need to use the
65 //           INTERCEPTOR_WITH_SUFFIX(...) macro.
66 
67 // How it works:
68 // To replace system functions on Linux we just need to declare functions
69 // with same names in our library and then obtain the real function pointers
70 // using dlsym().
71 // There is one complication. A user may also intercept some of the functions
72 // we intercept. To resolve this we declare our interceptors with __interceptor_
73 // prefix, and then make actual interceptors weak aliases to __interceptor_
74 // functions.
75 //
76 // This is not so on Mac OS, where the two-level namespace makes
77 // our replacement functions invisible to other libraries. This may be overcomed
78 // using the DYLD_FORCE_FLAT_NAMESPACE, but some errors loading the shared
79 // libraries in Chromium were noticed when doing so.
80 // Instead we create a dylib containing a __DATA,__interpose section that
81 // associates library functions with their wrappers. When this dylib is
82 // preloaded before an executable using DYLD_INSERT_LIBRARIES, it routes all
83 // the calls to interposed functions done through stubs to the wrapper
84 // functions.
85 // As it's decided at compile time which functions are to be intercepted on Mac,
86 // INTERCEPT_FUNCTION() is effectively a no-op on this system.
87 
88 #if defined(__APPLE__)
89 #include <sys/cdefs.h>  // For __DARWIN_ALIAS_C().
90 
91 // Just a pair of pointers.
92 struct interpose_substitution {
93   const uptr replacement;
94   const uptr original;
95 };
96 
97 // For a function foo() create a global pair of pointers { wrap_foo, foo } in
98 // the __DATA,__interpose section.
99 // As a result all the calls to foo() will be routed to wrap_foo() at runtime.
100 #define INTERPOSER(func_name) __attribute__((used)) \
101 const interpose_substitution substitution_##func_name[] \
102     __attribute__((section("__DATA, __interpose"))) = { \
103     { reinterpret_cast<const uptr>(WRAP(func_name)), \
104       reinterpret_cast<const uptr>(func_name) } \
105 }
106 
107 // For a function foo() and a wrapper function bar() create a global pair
108 // of pointers { bar, foo } in the __DATA,__interpose section.
109 // As a result all the calls to foo() will be routed to bar() at runtime.
110 #define INTERPOSER_2(func_name, wrapper_name) __attribute__((used)) \
111 const interpose_substitution substitution_##func_name[] \
112     __attribute__((section("__DATA, __interpose"))) = { \
113     { reinterpret_cast<const uptr>(wrapper_name), \
114       reinterpret_cast<const uptr>(func_name) } \
115 }
116 
117 # define WRAP(x) wrap_##x
118 # define WRAPPER_NAME(x) "wrap_"#x
119 # define INTERCEPTOR_ATTRIBUTE
120 # define DECLARE_WRAPPER(ret_type, func, ...)
121 
122 #elif defined(_WIN32)
123 # define WRAP(x) __asan_wrap_##x
124 # define WRAPPER_NAME(x) "__asan_wrap_"#x
125 # define INTERCEPTOR_ATTRIBUTE __declspec(dllexport)
126 # define DECLARE_WRAPPER(ret_type, func, ...) \
127     extern "C" ret_type func(__VA_ARGS__);
128 # define DECLARE_WRAPPER_WINAPI(ret_type, func, ...) \
129     extern "C" __declspec(dllimport) ret_type __stdcall func(__VA_ARGS__);
130 #elif defined(__FreeBSD__)
131 # define WRAP(x) __interceptor_ ## x
132 # define WRAPPER_NAME(x) "__interceptor_" #x
133 # define INTERCEPTOR_ATTRIBUTE __attribute__((visibility("default")))
134 // FreeBSD's dynamic linker (incompliantly) gives non-weak symbols higher
135 // priority than weak ones so weak aliases won't work for indirect calls
136 // in position-independent (-fPIC / -fPIE) mode.
137 # define DECLARE_WRAPPER(ret_type, func, ...) \
138      extern "C" ret_type func(__VA_ARGS__) \
139      __attribute__((alias("__interceptor_" #func), visibility("default")));
140 #else
141 # define WRAP(x) __interceptor_ ## x
142 # define WRAPPER_NAME(x) "__interceptor_" #x
143 # define INTERCEPTOR_ATTRIBUTE __attribute__((visibility("default")))
144 # define DECLARE_WRAPPER(ret_type, func, ...) \
145     extern "C" ret_type func(__VA_ARGS__) \
146     __attribute__((weak, alias("__interceptor_" #func), visibility("default")));
147 #endif
148 
149 #if !defined(__APPLE__)
150 # define PTR_TO_REAL(x) real_##x
151 # define REAL(x) __interception::PTR_TO_REAL(x)
152 # define FUNC_TYPE(x) x##_f
153 
154 # define DECLARE_REAL(ret_type, func, ...) \
155     typedef ret_type (*FUNC_TYPE(func))(__VA_ARGS__); \
156     namespace __interception { \
157       extern FUNC_TYPE(func) PTR_TO_REAL(func); \
158     }
159 #else  // __APPLE__
160 # define REAL(x) x
161 # define DECLARE_REAL(ret_type, func, ...) \
162     extern "C" ret_type func(__VA_ARGS__);
163 #endif  // __APPLE__
164 
165 #define DECLARE_REAL_AND_INTERCEPTOR(ret_type, func, ...) \
166   DECLARE_REAL(ret_type, func, __VA_ARGS__) \
167   extern "C" ret_type WRAP(func)(__VA_ARGS__);
168 
169 // Generally, you don't need to use DEFINE_REAL by itself, as INTERCEPTOR
170 // macros does its job. In exceptional cases you may need to call REAL(foo)
171 // without defining INTERCEPTOR(..., foo, ...). For example, if you override
172 // foo with an interceptor for other function.
173 #if !defined(__APPLE__)
174 # define DEFINE_REAL(ret_type, func, ...) \
175     typedef ret_type (*FUNC_TYPE(func))(__VA_ARGS__); \
176     namespace __interception { \
177       FUNC_TYPE(func) PTR_TO_REAL(func); \
178     }
179 #else
180 # define DEFINE_REAL(ret_type, func, ...)
181 #endif
182 
183 #if !defined(__APPLE__)
184 #define INTERCEPTOR(ret_type, func, ...) \
185   DEFINE_REAL(ret_type, func, __VA_ARGS__) \
186   DECLARE_WRAPPER(ret_type, func, __VA_ARGS__) \
187   extern "C" \
188   INTERCEPTOR_ATTRIBUTE \
189   ret_type WRAP(func)(__VA_ARGS__)
190 
191 // We don't need INTERCEPTOR_WITH_SUFFIX on non-Darwin for now.
192 #define INTERCEPTOR_WITH_SUFFIX(ret_type, func, ...) \
193   INTERCEPTOR(ret_type, func, __VA_ARGS__)
194 
195 #else  // __APPLE__
196 
197 #define INTERCEPTOR_ZZZ(suffix, ret_type, func, ...) \
198   extern "C" ret_type func(__VA_ARGS__) suffix; \
199   extern "C" ret_type WRAP(func)(__VA_ARGS__); \
200   INTERPOSER(func); \
201   extern "C" INTERCEPTOR_ATTRIBUTE ret_type WRAP(func)(__VA_ARGS__)
202 
203 #define INTERCEPTOR(ret_type, func, ...) \
204   INTERCEPTOR_ZZZ(/*no symbol variants*/, ret_type, func, __VA_ARGS__)
205 
206 #define INTERCEPTOR_WITH_SUFFIX(ret_type, func, ...) \
207   INTERCEPTOR_ZZZ(__DARWIN_ALIAS_C(func), ret_type, func, __VA_ARGS__)
208 
209 // Override |overridee| with |overrider|.
210 #define OVERRIDE_FUNCTION(overridee, overrider) \
211   INTERPOSER_2(overridee, WRAP(overrider))
212 #endif
213 
214 #if defined(_WIN32)
215 # define INTERCEPTOR_WINAPI(ret_type, func, ...) \
216     typedef ret_type (__stdcall *FUNC_TYPE(func))(__VA_ARGS__); \
217     namespace __interception { \
218       FUNC_TYPE(func) PTR_TO_REAL(func); \
219     } \
220     extern "C" \
221     INTERCEPTOR_ATTRIBUTE \
222     ret_type __stdcall WRAP(func)(__VA_ARGS__)
223 #endif
224 
225 // ISO C++ forbids casting between pointer-to-function and pointer-to-object,
226 // so we use casting via an integral type __interception::uptr,
227 // assuming that system is POSIX-compliant. Using other hacks seem
228 // challenging, as we don't even pass function type to
229 // INTERCEPT_FUNCTION macro, only its name.
230 namespace __interception {
231 #if defined(_WIN64)
232 typedef unsigned long long uptr;  // NOLINT
233 #else
234 typedef unsigned long uptr;  // NOLINT
235 #endif  // _WIN64
236 }  // namespace __interception
237 
238 #define INCLUDED_FROM_INTERCEPTION_LIB
239 
240 #if defined(__linux__) || defined(__FreeBSD__)
241 # include "interception_linux.h"
242 # define INTERCEPT_FUNCTION(func) INTERCEPT_FUNCTION_LINUX_OR_FREEBSD(func)
243 # define INTERCEPT_FUNCTION_VER(func, symver) \
244     INTERCEPT_FUNCTION_VER_LINUX_OR_FREEBSD(func, symver)
245 #elif defined(__APPLE__)
246 # include "interception_mac.h"
247 # define INTERCEPT_FUNCTION(func) INTERCEPT_FUNCTION_MAC(func)
248 # define INTERCEPT_FUNCTION_VER(func, symver) \
249     INTERCEPT_FUNCTION_VER_MAC(func, symver)
250 #else  // defined(_WIN32)
251 # include "interception_win.h"
252 # define INTERCEPT_FUNCTION(func) INTERCEPT_FUNCTION_WIN(func)
253 # define INTERCEPT_FUNCTION_VER(func, symver) \
254     INTERCEPT_FUNCTION_VER_WIN(func, symver)
255 #endif
256 
257 #undef INCLUDED_FROM_INTERCEPTION_LIB
258 
259 #endif  // INTERCEPTION_H
260