1*a1e26a70SApple OSS Distributions""" 2*a1e26a70SApple OSS DistributionsCustom pointer support 3*a1e26a70SApple OSS Distributions 4*a1e26a70SApple OSS DistributionsThis module provides support for special pointer types that are not native to the 5*a1e26a70SApple OSS Distributionslanguage used by the target being debugged. Such pointers may be represented as a struct 6*a1e26a70SApple OSS Distributionsor class (for example IOKit's shared pointers). 7*a1e26a70SApple OSS Distributions 8*a1e26a70SApple OSS DistributionsA custom pointer class must subclass the PointerPolicy class and implement all of its 9*a1e26a70SApple OSS Distributionsabstract methods. The MetaPointerPolicy metaclass ensures that all known subclasses are 10*a1e26a70SApple OSS Distributionsregistered in a global list (wherever they are located in the lldb macro sources). 11*a1e26a70SApple OSS Distributions 12*a1e26a70SApple OSS DistributionsA client can obtain a PointerPolicy instance by calling the match method with an SBValue 13*a1e26a70SApple OSS Distributionsinstance as an argument. The returned value is one of: 14*a1e26a70SApple OSS Distributions 15*a1e26a70SApple OSS Distributions * None - the match was unsuccessful and this SBValue instance is not a pointer. 16*a1e26a70SApple OSS Distributions * Concrete instance - An instance of the concrete PointerPolicy class that will handle 17*a1e26a70SApple OSS Distributions pointer operations for the given SBValue. 18*a1e26a70SApple OSS Distributions 19*a1e26a70SApple OSS DistributionsConcrete policy instances implement an API that allows a client to operate on a value 20*a1e26a70SApple OSS Distributionslike a native pointer (for example unwrapping a native pointer from a smart pointer). 21*a1e26a70SApple OSS Distributions 22*a1e26a70SApple OSS DistributionsExample: 23*a1e26a70SApple OSS Distributions 24*a1e26a70SApple OSS Distributions # Obtain an SBValue instance. 25*a1e26a70SApple OSS Distributions val = kern.global.GlobalVariable.GetSBValue() 26*a1e26a70SApple OSS Distributions 27*a1e26a70SApple OSS Distributions # Try to match the pointer policy for the given value. 28*a1e26a70SApple OSS Distributions policy = PointerPolicy.match(val) 29*a1e26a70SApple OSS Distributions 30*a1e26a70SApple OSS Distributions # Unwrap the pointer SBValue. 31*a1e26a70SApple OSS Distributions if policy: 32*a1e26a70SApple OSS Distributions val = policy.GetPointerSBValue(val) 33*a1e26a70SApple OSS Distributions 34*a1e26a70SApple OSS Distributions ... Operate on val as usual. 35*a1e26a70SApple OSS Distributions""" 36*a1e26a70SApple OSS Distributionsfrom operator import methodcaller 37*a1e26a70SApple OSS Distributionsfrom abc import ABCMeta, abstractmethod 38*a1e26a70SApple OSS Distributions 39*a1e26a70SApple OSS Distributionsimport lldb 40*a1e26a70SApple OSS Distributions 41*a1e26a70SApple OSS Distributionsfrom .caching import cache_statically 42*a1e26a70SApple OSS Distributions 43*a1e26a70SApple OSS Distributions 44*a1e26a70SApple OSS Distributionsclass MetaPointerPolicy(ABCMeta): 45*a1e26a70SApple OSS Distributions """ Register a custom pointer policy in global list. """ 46*a1e26a70SApple OSS Distributions 47*a1e26a70SApple OSS Distributions classes = [] 48*a1e26a70SApple OSS Distributions 49*a1e26a70SApple OSS Distributions def __new__(cls, clsname, bases, args): 50*a1e26a70SApple OSS Distributions newcls = super(MetaPointerPolicy, cls).__new__(cls, clsname, bases, args) 51*a1e26a70SApple OSS Distributions cls.classes.append(newcls) 52*a1e26a70SApple OSS Distributions return newcls 53*a1e26a70SApple OSS Distributions 54*a1e26a70SApple OSS Distributions 55*a1e26a70SApple OSS Distributionsclass Singleton(MetaPointerPolicy): 56*a1e26a70SApple OSS Distributions """ Meta class for creation of singleton instances. """ 57*a1e26a70SApple OSS Distributions 58*a1e26a70SApple OSS Distributions _instances = {} 59*a1e26a70SApple OSS Distributions 60*a1e26a70SApple OSS Distributions def __call__(cls, *args, **kwargs): 61*a1e26a70SApple OSS Distributions if cls not in cls._instances: 62*a1e26a70SApple OSS Distributions cls._instances[cls] = super(Singleton, cls).__call__(*args, **kwargs) 63*a1e26a70SApple OSS Distributions return cls._instances[cls] 64*a1e26a70SApple OSS Distributions 65*a1e26a70SApple OSS Distributions 66*a1e26a70SApple OSS Distributionsclass PointerPolicy(object, metaclass=ABCMeta): 67*a1e26a70SApple OSS Distributions """ Abstract base class common to every custom pointer policy. """ 68*a1e26a70SApple OSS Distributions 69*a1e26a70SApple OSS Distributions @classmethod 70*a1e26a70SApple OSS Distributions def match(cls, sbvalue): 71*a1e26a70SApple OSS Distributions """ Match pointer representation based on given SBValue. """ 72*a1e26a70SApple OSS Distributions matching = filter(bool, map(methodcaller('match', sbvalue), MetaPointerPolicy.classes)) 73*a1e26a70SApple OSS Distributions return next(matching, None) 74*a1e26a70SApple OSS Distributions 75*a1e26a70SApple OSS Distributions @abstractmethod 76*a1e26a70SApple OSS Distributions def GetPointerSBValue(self, sbvalue): 77*a1e26a70SApple OSS Distributions """ Returns pointer value that debugger should operate on. """ 78*a1e26a70SApple OSS Distributions 79*a1e26a70SApple OSS Distributions 80*a1e26a70SApple OSS Distributions# Pointers need to have their TBI byte stripped if in use. TBI KASan, 81*a1e26a70SApple OSS Distributions# for instance, tags pointers to detect improper memory accesses. Reading 82*a1e26a70SApple OSS Distributions# values from such tagged pointers fails. 83*a1e26a70SApple OSS Distributions# 84*a1e26a70SApple OSS Distributions# Stripping the pointers requires to learn whether TBI is in use or not. 85*a1e26a70SApple OSS Distributions# We do that by checking presence of 'kasan_tbi_enabled' symbol which only 86*a1e26a70SApple OSS Distributions# exists on the TBI KASan variant. Since KASan is one of more TBI 87*a1e26a70SApple OSS Distributions# consumers (along with PAC or Sandbox) this is not an ideal approach. 88*a1e26a70SApple OSS Distributions# Inspecting respective CPU state would be more appropriate. 89*a1e26a70SApple OSS Distributions 90*a1e26a70SApple OSS Distributions 91*a1e26a70SApple OSS Distributionsclass NativePointer(PointerPolicy, metaclass=Singleton): 92*a1e26a70SApple OSS Distributions """ Policy for native pointers. 93*a1e26a70SApple OSS Distributions 94*a1e26a70SApple OSS Distributions Strips top bits of a pointer if TBI is in use. Otherwise 95*a1e26a70SApple OSS Distributions pointer is used as-is. 96*a1e26a70SApple OSS Distributions 97*a1e26a70SApple OSS Distributions Native pointers do not have any per-pointer attributes so this policy 98*a1e26a70SApple OSS Distributions can be singleton instance. 99*a1e26a70SApple OSS Distributions """ 100*a1e26a70SApple OSS Distributions 101*a1e26a70SApple OSS Distributions @staticmethod 102*a1e26a70SApple OSS Distributions @cache_statically 103*a1e26a70SApple OSS Distributions def isTagged(target=None): 104*a1e26a70SApple OSS Distributions """ Pointer stripping isn't required as of recent lldb changes that fixed ignoring 105*a1e26a70SApple OSS Distributions non-addresable bits. 106*a1e26a70SApple OSS Distributions Due to performance degredation on relevant coredumps, stripping is being 107*a1e26a70SApple OSS Distributions as a quick remedy. 108*a1e26a70SApple OSS Distributions Depending on future debugging needs, it'll be removed completely, or improved 109*a1e26a70SApple OSS Distributions to have acceptable performance. 110*a1e26a70SApple OSS Distributions """ 111*a1e26a70SApple OSS Distributions is_tagged = False 112*a1e26a70SApple OSS Distributions 113*a1e26a70SApple OSS Distributions """ Returns true on TBI KASan targets, false otherwise. """ 114*a1e26a70SApple OSS Distributions # is_tagged = target.FindFirstGlobalVariable('kasan_tbi_enabled').IsValid() 115*a1e26a70SApple OSS Distributions return is_tagged 116*a1e26a70SApple OSS Distributions 117*a1e26a70SApple OSS Distributions def __init__(self): 118*a1e26a70SApple OSS Distributions if self.isTagged(): 119*a1e26a70SApple OSS Distributions self._stripPtr = self.stripPtr 120*a1e26a70SApple OSS Distributions else: 121*a1e26a70SApple OSS Distributions self._stripPtr = lambda val: val 122*a1e26a70SApple OSS Distributions 123*a1e26a70SApple OSS Distributions @classmethod 124*a1e26a70SApple OSS Distributions def match(cls, sbvalue): 125*a1e26a70SApple OSS Distributions return cls() if sbvalue.GetType().IsPointerType() else None 126*a1e26a70SApple OSS Distributions 127*a1e26a70SApple OSS Distributions @staticmethod 128*a1e26a70SApple OSS Distributions def stripPtr(sbvalue: lldb.SBValue): 129*a1e26a70SApple OSS Distributions """ Strips the TBI byte value. Since the value is not a plain value but 130*a1e26a70SApple OSS Distributions represents a value of a variable, a register or an expression the 131*a1e26a70SApple OSS Distributions conversion is performed by (re-)creating the value through expression. 132*a1e26a70SApple OSS Distributions """ 133*a1e26a70SApple OSS Distributions if sbvalue.GetValueAsAddress() != sbvalue.GetValueAsUnsigned(): 134*a1e26a70SApple OSS Distributions addr = sbvalue.GetValueAsAddress() 135*a1e26a70SApple OSS Distributions sbv_new = sbvalue.CreateValueFromExpression(None, '(void *)' + str(addr)) 136*a1e26a70SApple OSS Distributions return sbv_new.Cast(sbvalue.GetType()) 137*a1e26a70SApple OSS Distributions 138*a1e26a70SApple OSS Distributions return sbvalue 139*a1e26a70SApple OSS Distributions 140*a1e26a70SApple OSS Distributions def GetPointerSBValue(self, sbvalue): 141*a1e26a70SApple OSS Distributions return self._stripPtr(sbvalue) 142