1*f6217f89SApple OSS Distributions""" 2*f6217f89SApple OSS DistributionsCustom pointer support 3*f6217f89SApple OSS Distributions 4*f6217f89SApple OSS DistributionsThis module provides support for special pointer types that are not native to the 5*f6217f89SApple OSS Distributionslanguage used by the target being debugged. Such pointers may be represented as a struct 6*f6217f89SApple OSS Distributionsor class (for example IOKit's shared pointers). 7*f6217f89SApple OSS Distributions 8*f6217f89SApple OSS DistributionsA custom pointer class must subclass the PointerPolicy class and implement all of its 9*f6217f89SApple OSS Distributionsabstract methods. The MetaPointerPolicy metaclass ensures that all known subclasses are 10*f6217f89SApple OSS Distributionsregistered in a global list (wherever they are located in the lldb macro sources). 11*f6217f89SApple OSS Distributions 12*f6217f89SApple OSS DistributionsA client can obtain a PointerPolicy instance by calling the match method with an SBValue 13*f6217f89SApple OSS Distributionsinstance as an argument. The returned value is one of: 14*f6217f89SApple OSS Distributions 15*f6217f89SApple OSS Distributions * None - the match was unsuccessful and this SBValue instance is not a pointer. 16*f6217f89SApple OSS Distributions * Concrete instance - An instance of the concrete PointerPolicy class that will handle 17*f6217f89SApple OSS Distributions pointer operations for the given SBValue. 18*f6217f89SApple OSS Distributions 19*f6217f89SApple OSS DistributionsConcrete policy instances implement an API that allows a client to operate on a value 20*f6217f89SApple OSS Distributionslike a native pointer (for example unwrapping a native pointer from a smart pointer). 21*f6217f89SApple OSS Distributions 22*f6217f89SApple OSS DistributionsExample: 23*f6217f89SApple OSS Distributions 24*f6217f89SApple OSS Distributions # Obtain an SBValue instance. 25*f6217f89SApple OSS Distributions val = kern.global.GlobalVariable.GetSBValue() 26*f6217f89SApple OSS Distributions 27*f6217f89SApple OSS Distributions # Try to match the pointer policy for the given value. 28*f6217f89SApple OSS Distributions policy = PointerPolicy.match(val) 29*f6217f89SApple OSS Distributions 30*f6217f89SApple OSS Distributions # Unwrap the pointer SBValue. 31*f6217f89SApple OSS Distributions if policy: 32*f6217f89SApple OSS Distributions val = policy.GetPointerSBValue(val) 33*f6217f89SApple OSS Distributions 34*f6217f89SApple OSS Distributions ... Operate on val as usual. 35*f6217f89SApple OSS Distributions""" 36*f6217f89SApple OSS Distributionsfrom operator import methodcaller 37*f6217f89SApple OSS Distributionsfrom abc import ABCMeta, abstractmethod 38*f6217f89SApple OSS Distributions 39*f6217f89SApple OSS Distributionsimport lldb 40*f6217f89SApple OSS Distributions 41*f6217f89SApple OSS Distributionsfrom .caching import cache_statically 42*f6217f89SApple OSS Distributions 43*f6217f89SApple OSS Distributions 44*f6217f89SApple OSS Distributionsclass MetaPointerPolicy(ABCMeta): 45*f6217f89SApple OSS Distributions """ Register a custom pointer policy in global list. """ 46*f6217f89SApple OSS Distributions 47*f6217f89SApple OSS Distributions classes = [] 48*f6217f89SApple OSS Distributions 49*f6217f89SApple OSS Distributions def __new__(cls, clsname, bases, args): 50*f6217f89SApple OSS Distributions newcls = super(MetaPointerPolicy, cls).__new__(cls, clsname, bases, args) 51*f6217f89SApple OSS Distributions cls.classes.append(newcls) 52*f6217f89SApple OSS Distributions return newcls 53*f6217f89SApple OSS Distributions 54*f6217f89SApple OSS Distributions 55*f6217f89SApple OSS Distributionsclass Singleton(MetaPointerPolicy): 56*f6217f89SApple OSS Distributions """ Meta class for creation of singleton instances. """ 57*f6217f89SApple OSS Distributions 58*f6217f89SApple OSS Distributions _instances = {} 59*f6217f89SApple OSS Distributions 60*f6217f89SApple OSS Distributions def __call__(cls, *args, **kwargs): 61*f6217f89SApple OSS Distributions if cls not in cls._instances: 62*f6217f89SApple OSS Distributions cls._instances[cls] = super(Singleton, cls).__call__(*args, **kwargs) 63*f6217f89SApple OSS Distributions return cls._instances[cls] 64*f6217f89SApple OSS Distributions 65*f6217f89SApple OSS Distributions 66*f6217f89SApple OSS Distributionsclass PointerPolicy(object, metaclass=ABCMeta): 67*f6217f89SApple OSS Distributions """ Abstract base class common to every custom pointer policy. """ 68*f6217f89SApple OSS Distributions 69*f6217f89SApple OSS Distributions @classmethod 70*f6217f89SApple OSS Distributions def match(cls, sbvalue): 71*f6217f89SApple OSS Distributions """ Match pointer representation based on given SBValue. """ 72*f6217f89SApple OSS Distributions matching = filter(bool, map(methodcaller('match', sbvalue), MetaPointerPolicy.classes)) 73*f6217f89SApple OSS Distributions return next(matching, None) 74*f6217f89SApple OSS Distributions 75*f6217f89SApple OSS Distributions @abstractmethod 76*f6217f89SApple OSS Distributions def GetPointerSBValue(self, sbvalue): 77*f6217f89SApple OSS Distributions """ Returns pointer value that debugger should operate on. """ 78*f6217f89SApple OSS Distributions 79*f6217f89SApple OSS Distributions 80*f6217f89SApple OSS Distributions# Pointers need to have their TBI byte stripped if in use. TBI KASan, 81*f6217f89SApple OSS Distributions# for instance, tags pointers to detect improper memory accesses. Reading 82*f6217f89SApple OSS Distributions# values from such tagged pointers fails. 83*f6217f89SApple OSS Distributions# 84*f6217f89SApple OSS Distributions# Stripping the pointers requires to learn whether TBI is in use or not. 85*f6217f89SApple OSS Distributions# We do that by checking presence of 'kasan_tbi_enabled' symbol which only 86*f6217f89SApple OSS Distributions# exists on the TBI KASan variant. Since KASan is one of more TBI 87*f6217f89SApple OSS Distributions# consumers (along with PAC or Sandbox) this is not an ideal approach. 88*f6217f89SApple OSS Distributions# Inspecting respective CPU state would be more appropriate. 89*f6217f89SApple OSS Distributions 90*f6217f89SApple OSS Distributions 91*f6217f89SApple OSS Distributionsclass NativePointer(PointerPolicy, metaclass=Singleton): 92*f6217f89SApple OSS Distributions """ Policy for native pointers. 93*f6217f89SApple OSS Distributions 94*f6217f89SApple OSS Distributions Strips top bits of a pointer if TBI is in use. Otherwise 95*f6217f89SApple OSS Distributions pointer is used as-is. 96*f6217f89SApple OSS Distributions 97*f6217f89SApple OSS Distributions Native pointers do not have any per-pointer attributes so this policy 98*f6217f89SApple OSS Distributions can be singleton instance. 99*f6217f89SApple OSS Distributions """ 100*f6217f89SApple OSS Distributions 101*f6217f89SApple OSS Distributions @staticmethod 102*f6217f89SApple OSS Distributions @cache_statically 103*f6217f89SApple OSS Distributions def isTagged(target=None): 104*f6217f89SApple OSS Distributions """ Pointer stripping isn't required as of recent lldb changes that fixed ignoring 105*f6217f89SApple OSS Distributions non-addresable bits. 106*f6217f89SApple OSS Distributions Due to performance degredation on relevant coredumps, stripping is being 107*f6217f89SApple OSS Distributions as a quick remedy. 108*f6217f89SApple OSS Distributions Depending on future debugging needs, it'll be removed completely, or improved 109*f6217f89SApple OSS Distributions to have acceptable performance. 110*f6217f89SApple OSS Distributions """ 111*f6217f89SApple OSS Distributions is_tagged = False 112*f6217f89SApple OSS Distributions 113*f6217f89SApple OSS Distributions """ Returns true on TBI KASan targets, false otherwise. """ 114*f6217f89SApple OSS Distributions # is_tagged = target.FindFirstGlobalVariable('kasan_tbi_enabled').IsValid() 115*f6217f89SApple OSS Distributions return is_tagged 116*f6217f89SApple OSS Distributions 117*f6217f89SApple OSS Distributions def __init__(self): 118*f6217f89SApple OSS Distributions if self.isTagged(): 119*f6217f89SApple OSS Distributions self._stripPtr = self.stripPtr 120*f6217f89SApple OSS Distributions else: 121*f6217f89SApple OSS Distributions self._stripPtr = lambda val: val 122*f6217f89SApple OSS Distributions 123*f6217f89SApple OSS Distributions @classmethod 124*f6217f89SApple OSS Distributions def match(cls, sbvalue): 125*f6217f89SApple OSS Distributions return cls() if sbvalue.GetType().IsPointerType() else None 126*f6217f89SApple OSS Distributions 127*f6217f89SApple OSS Distributions @staticmethod 128*f6217f89SApple OSS Distributions def stripPtr(sbvalue: lldb.SBValue): 129*f6217f89SApple OSS Distributions """ Strips the TBI byte value. Since the value is not a plain value but 130*f6217f89SApple OSS Distributions represents a value of a variable, a register or an expression the 131*f6217f89SApple OSS Distributions conversion is performed by (re-)creating the value through expression. 132*f6217f89SApple OSS Distributions """ 133*f6217f89SApple OSS Distributions if sbvalue.GetValueAsAddress() != sbvalue.GetValueAsUnsigned(): 134*f6217f89SApple OSS Distributions addr = sbvalue.GetValueAsAddress() 135*f6217f89SApple OSS Distributions sbv_new = sbvalue.CreateValueFromExpression(None, '(void *)' + str(addr)) 136*f6217f89SApple OSS Distributions return sbv_new.Cast(sbvalue.GetType()) 137*f6217f89SApple OSS Distributions 138*f6217f89SApple OSS Distributions return sbvalue 139*f6217f89SApple OSS Distributions 140*f6217f89SApple OSS Distributions def GetPointerSBValue(self, sbvalue): 141*f6217f89SApple OSS Distributions return self._stripPtr(sbvalue) 142