/* * Copyright (C) 2014 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "elf_patcher.h" #include <vector> #include <set> #include "elf_file.h" #include "elf_utils.h" #include "mirror/art_field-inl.h" #include "mirror/art_method-inl.h" #include "mirror/array-inl.h" #include "mirror/class-inl.h" #include "mirror/class_loader.h" #include "mirror/dex_cache-inl.h" #include "mirror/object-inl.h" #include "mirror/object_array-inl.h" #include "mirror/string-inl.h" #include "oat.h" #include "os.h" #include "utils.h" namespace art { bool ElfPatcher::Patch(const CompilerDriver* driver, ElfFile* elf_file, const std::string& oat_location, ImageAddressCallback cb, void* cb_data, std::string* error_msg) { ClassLinker* class_linker = Runtime::Current()->GetClassLinker(); const OatFile* oat_file = class_linker->FindOpenedOatFileFromOatLocation(oat_location); if (oat_file == nullptr) { CHECK(Runtime::Current()->IsCompiler()); oat_file = OatFile::Open(oat_location, oat_location, nullptr, nullptr, false, error_msg); if (oat_file == nullptr) { *error_msg = StringPrintf("Unable to find or open oat file at '%s': %s", oat_location.c_str(), error_msg->c_str()); return false; } CHECK_EQ(class_linker->RegisterOatFile(oat_file), oat_file); } return ElfPatcher::Patch(driver, elf_file, oat_file, reinterpret_cast<uintptr_t>(oat_file->Begin()), cb, cb_data, error_msg); } bool ElfPatcher::Patch(const CompilerDriver* driver, ElfFile* elf, const OatFile* oat_file, uintptr_t oat_data_start, ImageAddressCallback cb, void* cb_data, std::string* error_msg) { Elf32_Shdr* data_sec = elf->FindSectionByName(".rodata"); if (data_sec == nullptr) { *error_msg = "Unable to find .rodata section and oat header"; return false; } OatHeader* oat_header = reinterpret_cast<OatHeader*>(elf->Begin() + data_sec->sh_offset); if (!oat_header->IsValid()) { *error_msg = "Oat header was not valid"; return false; } ElfPatcher p(driver, elf, oat_file, oat_header, oat_data_start, cb, cb_data, error_msg); return p.PatchElf(); } mirror::ArtMethod* ElfPatcher::GetTargetMethod(const CompilerDriver::CallPatchInformation* patch) { ClassLinker* class_linker = Runtime::Current()->GetClassLinker(); StackHandleScope<1> hs(Thread::Current()); Handle<mirror::DexCache> dex_cache( hs.NewHandle(class_linker->FindDexCache(*patch->GetTargetDexFile()))); mirror::ArtMethod* method = class_linker->ResolveMethod(*patch->GetTargetDexFile(), patch->GetTargetMethodIdx(), dex_cache, NullHandle<mirror::ClassLoader>(), NullHandle<mirror::ArtMethod>(), patch->GetTargetInvokeType()); CHECK(method != NULL) << patch->GetTargetDexFile()->GetLocation() << " " << patch->GetTargetMethodIdx(); CHECK(!method->IsRuntimeMethod()) << patch->GetTargetDexFile()->GetLocation() << " " << patch->GetTargetMethodIdx(); CHECK(dex_cache->GetResolvedMethods()->Get(patch->GetTargetMethodIdx()) == method) << patch->GetTargetDexFile()->GetLocation() << " " << patch->GetReferrerMethodIdx() << " " << PrettyMethod(dex_cache->GetResolvedMethods()->Get(patch->GetTargetMethodIdx())) << " " << PrettyMethod(method); return method; } mirror::String* ElfPatcher::GetTargetString(const CompilerDriver::StringPatchInformation* patch) { ClassLinker* class_linker = Runtime::Current()->GetClassLinker(); StackHandleScope<1> hs(Thread::Current()); Handle<mirror::DexCache> dex_cache(hs.NewHandle(class_linker->FindDexCache(patch->GetDexFile()))); mirror::String* string = class_linker->ResolveString(patch->GetDexFile(), patch->GetStringIdx(), dex_cache); CHECK(string != nullptr) << patch->GetDexFile().GetLocation() << " " << patch->GetStringIdx(); return string; } mirror::Class* ElfPatcher::GetTargetType(const CompilerDriver::TypePatchInformation* patch) { ClassLinker* class_linker = Runtime::Current()->GetClassLinker(); StackHandleScope<2> hs(Thread::Current()); Handle<mirror::DexCache> dex_cache(hs.NewHandle(class_linker->FindDexCache(patch->GetDexFile()))); mirror::Class* klass = class_linker->ResolveType(patch->GetDexFile(), patch->GetTargetTypeIdx(), dex_cache, NullHandle<mirror::ClassLoader>()); CHECK(klass != NULL) << patch->GetDexFile().GetLocation() << " " << patch->GetTargetTypeIdx(); CHECK(dex_cache->GetResolvedTypes()->Get(patch->GetTargetTypeIdx()) == klass) << patch->GetDexFile().GetLocation() << " " << patch->GetReferrerMethodIdx() << " " << PrettyClass(dex_cache->GetResolvedTypes()->Get(patch->GetTargetTypeIdx())) << " " << PrettyClass(klass); return klass; } void ElfPatcher::AddPatch(uintptr_t p) { if (write_patches_ && patches_set_.find(p) == patches_set_.end()) { patches_set_.insert(p); patches_.push_back(p); } } uint32_t* ElfPatcher::GetPatchLocation(uintptr_t patch_ptr) { CHECK_GE(patch_ptr, reinterpret_cast<uintptr_t>(oat_file_->Begin())); CHECK_LE(patch_ptr, reinterpret_cast<uintptr_t>(oat_file_->End())); uintptr_t off = patch_ptr - reinterpret_cast<uintptr_t>(oat_file_->Begin()); uintptr_t ret = reinterpret_cast<uintptr_t>(oat_header_) + off; CHECK_GE(ret, reinterpret_cast<uintptr_t>(elf_file_->Begin())); CHECK_LT(ret, reinterpret_cast<uintptr_t>(elf_file_->End())); return reinterpret_cast<uint32_t*>(ret); } void ElfPatcher::SetPatchLocation(const CompilerDriver::PatchInformation* patch, uint32_t value) { ClassLinker* class_linker = Runtime::Current()->GetClassLinker(); const void* quick_oat_code = class_linker->GetQuickOatCodeFor(patch->GetDexFile(), patch->GetReferrerClassDefIdx(), patch->GetReferrerMethodIdx()); // TODO: make this Thumb2 specific uint8_t* base = reinterpret_cast<uint8_t*>(reinterpret_cast<uintptr_t>(quick_oat_code) & ~0x1); uintptr_t patch_ptr = reinterpret_cast<uintptr_t>(base + patch->GetLiteralOffset()); uint32_t* patch_location = GetPatchLocation(patch_ptr); if (kIsDebugBuild) { if (patch->IsCall()) { const CompilerDriver::CallPatchInformation* cpatch = patch->AsCall(); const DexFile::MethodId& id = cpatch->GetTargetDexFile()->GetMethodId(cpatch->GetTargetMethodIdx()); uint32_t expected = reinterpret_cast<uintptr_t>(&id) & 0xFFFFFFFF; uint32_t actual = *patch_location; CHECK(actual == expected || actual == value) << "Patching call failed: " << std::hex << " actual=" << actual << " expected=" << expected << " value=" << value; } if (patch->IsType()) { const CompilerDriver::TypePatchInformation* tpatch = patch->AsType(); const DexFile::TypeId& id = tpatch->GetDexFile().GetTypeId(tpatch->GetTargetTypeIdx()); uint32_t expected = reinterpret_cast<uintptr_t>(&id) & 0xFFFFFFFF; uint32_t actual = *patch_location; CHECK(actual == expected || actual == value) << "Patching type failed: " << std::hex << " actual=" << actual << " expected=" << expected << " value=" << value; } } *patch_location = value; oat_header_->UpdateChecksum(patch_location, sizeof(value)); if (patch->IsCall() && patch->AsCall()->IsRelative()) { // We never record relative patches. return; } uintptr_t loc = patch_ptr - (reinterpret_cast<uintptr_t>(oat_file_->Begin()) + oat_header_->GetExecutableOffset()); CHECK_GT(patch_ptr, reinterpret_cast<uintptr_t>(oat_file_->Begin()) + oat_header_->GetExecutableOffset()); CHECK_LT(loc, oat_file_->Size() - oat_header_->GetExecutableOffset()); AddPatch(loc); } bool ElfPatcher::PatchElf() { // TODO if we are adding patches the resulting ELF file might have a // potentially rather large amount of free space where patches might have been // placed. We should adjust the ELF file to get rid of this excess space. if (write_patches_) { patches_.reserve(compiler_driver_->GetCodeToPatch().size() + compiler_driver_->GetMethodsToPatch().size() + compiler_driver_->GetClassesToPatch().size() + compiler_driver_->GetStringsToPatch().size()); } Thread* self = Thread::Current(); ClassLinker* class_linker = Runtime::Current()->GetClassLinker(); const char* old_cause = self->StartAssertNoThreadSuspension("ElfPatcher"); typedef std::vector<const CompilerDriver::CallPatchInformation*> CallPatches; const CallPatches& code_to_patch = compiler_driver_->GetCodeToPatch(); for (size_t i = 0; i < code_to_patch.size(); i++) { const CompilerDriver::CallPatchInformation* patch = code_to_patch[i]; mirror::ArtMethod* target = GetTargetMethod(patch); uintptr_t quick_code = reinterpret_cast<uintptr_t>(class_linker->GetQuickOatCodeFor(target)); DCHECK_NE(quick_code, 0U) << PrettyMethod(target); const OatFile* target_oat = class_linker->FindOpenedOatDexFileForDexFile(*patch->GetTargetDexFile())->GetOatFile(); // Get where the data actually starts. if target is this oat_file_ it is oat_data_start_, // otherwise it is wherever target_oat is loaded. uintptr_t oat_data_addr = GetBaseAddressFor(target_oat); uintptr_t code_base = reinterpret_cast<uintptr_t>(target_oat->Begin()); uintptr_t code_offset = quick_code - code_base; bool is_quick_offset = false; if (quick_code == reinterpret_cast<uintptr_t>(GetQuickToInterpreterBridge())) { is_quick_offset = true; code_offset = oat_header_->GetQuickToInterpreterBridgeOffset(); } else if (quick_code == reinterpret_cast<uintptr_t>(class_linker->GetQuickGenericJniTrampoline())) { CHECK(target->IsNative()); is_quick_offset = true; code_offset = oat_header_->GetQuickGenericJniTrampolineOffset(); } uintptr_t value; if (patch->IsRelative()) { // value to patch is relative to the location being patched const void* quick_oat_code = class_linker->GetQuickOatCodeFor(patch->GetDexFile(), patch->GetReferrerClassDefIdx(), patch->GetReferrerMethodIdx()); if (is_quick_offset) { // If its a quick offset it means that we are doing a relative patch from the class linker // oat_file to the elf_patcher oat_file so we need to adjust the quick oat code to be the // one in the output oat_file (ie where it is actually going to be loaded). quick_code = PointerToLowMemUInt32(reinterpret_cast<void*>(oat_data_addr + code_offset)); quick_oat_code = reinterpret_cast<const void*>(reinterpret_cast<uintptr_t>(quick_oat_code) + oat_data_addr - code_base); } uintptr_t base = reinterpret_cast<uintptr_t>(quick_oat_code); uintptr_t patch_location = base + patch->GetLiteralOffset(); value = quick_code - patch_location + patch->RelativeOffset(); } else if (code_offset != 0) { value = PointerToLowMemUInt32(reinterpret_cast<void*>(oat_data_addr + code_offset)); } else { value = 0; } SetPatchLocation(patch, value); } const CallPatches& methods_to_patch = compiler_driver_->GetMethodsToPatch(); for (size_t i = 0; i < methods_to_patch.size(); i++) { const CompilerDriver::CallPatchInformation* patch = methods_to_patch[i]; mirror::ArtMethod* target = GetTargetMethod(patch); SetPatchLocation(patch, PointerToLowMemUInt32(get_image_address_(cb_data_, target))); } for (const CompilerDriver::TypePatchInformation* patch : compiler_driver_->GetClassesToPatch()) { mirror::Class* target = GetTargetType(patch); SetPatchLocation(patch, PointerToLowMemUInt32(get_image_address_(cb_data_, target))); } for (const CompilerDriver::StringPatchInformation* patch : compiler_driver_->GetStringsToPatch()) { mirror::String* target = GetTargetString(patch); SetPatchLocation(patch, PointerToLowMemUInt32(get_image_address_(cb_data_, target))); } self->EndAssertNoThreadSuspension(old_cause); if (write_patches_) { return WriteOutPatchData(); } return true; } bool ElfPatcher::WriteOutPatchData() { Elf32_Shdr* shdr = elf_file_->FindSectionByName(".oat_patches"); if (shdr != nullptr) { CHECK_EQ(shdr, elf_file_->FindSectionByType(SHT_OAT_PATCH)) << "Incorrect type for .oat_patches section"; CHECK_LE(patches_.size() * sizeof(uintptr_t), shdr->sh_size) << "We got more patches than anticipated"; CHECK_LE(reinterpret_cast<uintptr_t>(elf_file_->Begin()) + shdr->sh_offset + shdr->sh_size, reinterpret_cast<uintptr_t>(elf_file_->End())) << "section is too large"; CHECK(shdr == elf_file_->GetSectionHeader(elf_file_->GetSectionHeaderNum() - 1) || shdr->sh_offset + shdr->sh_size <= (shdr + 1)->sh_offset) << "Section overlaps onto next section"; // It's mmap'd so we can just memcpy. memcpy(elf_file_->Begin() + shdr->sh_offset, patches_.data(), patches_.size() * sizeof(uintptr_t)); // TODO We should fill in the newly empty space between the last patch and // the start of the next section by moving the following sections down if // possible. shdr->sh_size = patches_.size() * sizeof(uintptr_t); return true; } else { LOG(ERROR) << "Unable to find section header for SHT_OAT_PATCH"; *error_msg_ = "Unable to find section to write patch information to in "; *error_msg_ += elf_file_->GetFile().GetPath(); return false; } } } // namespace art