Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2011 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
| 17 | #ifndef ART_SRC_VERIFIER_METHOD_VERIFIER_H_ |
| 18 | #define ART_SRC_VERIFIER_METHOD_VERIFIER_H_ |
| 19 | |
| 20 | #include <deque> |
| 21 | #include <limits> |
| 22 | #include <set> |
| 23 | #include <vector> |
| 24 | |
| 25 | #include "casts.h" |
| 26 | #include "compiler.h" |
| 27 | #include "dex_file.h" |
| 28 | #include "dex_instruction.h" |
| 29 | #include "macros.h" |
| 30 | #include "object.h" |
| 31 | #include "reg_type.h" |
| 32 | #include "reg_type_cache.h" |
| 33 | #include "register_line.h" |
| 34 | #include "safe_map.h" |
| 35 | #include "stl_util.h" |
| 36 | #include "UniquePtr.h" |
| 37 | |
| 38 | namespace art { |
| 39 | |
| 40 | struct ReferenceMap2Visitor; |
| 41 | |
Shih-wei Liao | 21d28f5 | 2012-06-12 05:55:00 -0700 | [diff] [blame^] | 42 | #if defined(ART_USE_LLVM_COMPILER) || defined(ART_USE_GREENLAND_COMPILER) |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 43 | namespace compiler_llvm { |
| 44 | class InferredRegCategoryMap; |
| 45 | } // namespace compiler_llvm |
| 46 | #endif |
| 47 | |
| 48 | namespace verifier { |
| 49 | |
| 50 | class MethodVerifier; |
| 51 | class InsnFlags; |
| 52 | class PcToReferenceMap; |
| 53 | |
| 54 | /* |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 55 | * "Direct" and "virtual" methods are stored independently. The type of call used to invoke the |
| 56 | * method determines which list we search, and whether we travel up into superclasses. |
| 57 | * |
| 58 | * (<clinit>, <init>, and methods declared "private" or "static" are stored in the "direct" list. |
| 59 | * All others are stored in the "virtual" list.) |
| 60 | */ |
| 61 | enum MethodType { |
| 62 | METHOD_UNKNOWN = 0, |
| 63 | METHOD_DIRECT, // <init>, private |
| 64 | METHOD_STATIC, // static |
| 65 | METHOD_VIRTUAL, // virtual, super |
| 66 | METHOD_INTERFACE // interface |
| 67 | }; |
Ian Rogers | 2fc1427 | 2012-08-30 10:56:57 -0700 | [diff] [blame] | 68 | std::ostream& operator<<(std::ostream& os, const MethodType& rhs); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 69 | |
| 70 | /* |
| 71 | * An enumeration of problems that can turn up during verification. |
| 72 | * Both VERIFY_ERROR_BAD_CLASS_SOFT and VERIFY_ERROR_BAD_CLASS_HARD denote failures that cause |
| 73 | * the entire class to be rejected. However, VERIFY_ERROR_BAD_CLASS_SOFT denotes a soft failure |
| 74 | * that can potentially be corrected, and the verifier will try again at runtime. |
| 75 | * VERIFY_ERROR_BAD_CLASS_HARD denotes a hard failure that can't be corrected, and will cause |
| 76 | * the class to remain uncompiled. Other errors denote verification errors that cause bytecode |
| 77 | * to be rewritten to fail at runtime. |
| 78 | */ |
| 79 | enum VerifyError { |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 80 | VERIFY_ERROR_BAD_CLASS_HARD, // VerifyError; hard error that skips compilation. |
| 81 | VERIFY_ERROR_BAD_CLASS_SOFT, // VerifyError; soft error that verifies again at runtime. |
| 82 | |
| 83 | VERIFY_ERROR_NO_CLASS, // NoClassDefFoundError. |
| 84 | VERIFY_ERROR_NO_FIELD, // NoSuchFieldError. |
| 85 | VERIFY_ERROR_NO_METHOD, // NoSuchMethodError. |
| 86 | VERIFY_ERROR_ACCESS_CLASS, // IllegalAccessError. |
| 87 | VERIFY_ERROR_ACCESS_FIELD, // IllegalAccessError. |
| 88 | VERIFY_ERROR_ACCESS_METHOD, // IllegalAccessError. |
| 89 | VERIFY_ERROR_CLASS_CHANGE, // IncompatibleClassChangeError. |
| 90 | VERIFY_ERROR_INSTANTIATION, // InstantiationError. |
| 91 | }; |
| 92 | std::ostream& operator<<(std::ostream& os, const VerifyError& rhs); |
| 93 | |
| 94 | /* |
| 95 | * Identifies the type of reference in the instruction that generated the verify error |
| 96 | * (e.g. VERIFY_ERROR_ACCESS_CLASS could come from a method, field, or class reference). |
| 97 | * |
| 98 | * This must fit in two bits. |
| 99 | */ |
| 100 | enum VerifyErrorRefType { |
| 101 | VERIFY_ERROR_REF_CLASS = 0, |
| 102 | VERIFY_ERROR_REF_FIELD = 1, |
| 103 | VERIFY_ERROR_REF_METHOD = 2, |
| 104 | }; |
| 105 | const int kVerifyErrorRefTypeShift = 6; |
| 106 | |
| 107 | // We don't need to store the register data for many instructions, because we either only need |
| 108 | // it at branch points (for verification) or GC points and branches (for verification + |
| 109 | // type-precise register analysis). |
| 110 | enum RegisterTrackingMode { |
| 111 | kTrackRegsBranches, |
| 112 | kTrackRegsGcPoints, |
| 113 | kTrackRegsAll, |
| 114 | }; |
| 115 | |
| 116 | class PcToRegisterLineTable { |
| 117 | public: |
| 118 | PcToRegisterLineTable() {} |
| 119 | ~PcToRegisterLineTable() { |
| 120 | STLDeleteValues(&pc_to_register_line_); |
| 121 | } |
| 122 | |
| 123 | // Initialize the RegisterTable. Every instruction address can have a different set of information |
| 124 | // about what's in which register, but for verification purposes we only need to store it at |
| 125 | // branch target addresses (because we merge into that). |
| 126 | void Init(RegisterTrackingMode mode, InsnFlags* flags, uint32_t insns_size, |
| 127 | uint16_t registers_size, MethodVerifier* verifier); |
| 128 | |
| 129 | RegisterLine* GetLine(size_t idx) { |
| 130 | Table::iterator result = pc_to_register_line_.find(idx); // TODO: C++0x auto |
| 131 | if (result == pc_to_register_line_.end()) { |
| 132 | return NULL; |
| 133 | } else { |
| 134 | return result->second; |
| 135 | } |
| 136 | } |
| 137 | |
| 138 | private: |
| 139 | typedef SafeMap<int32_t, RegisterLine*> Table; |
| 140 | // Map from a dex pc to the register status associated with it |
| 141 | Table pc_to_register_line_; |
| 142 | }; |
| 143 | |
| 144 | // The verifier |
| 145 | class MethodVerifier { |
Shih-wei Liao | 21d28f5 | 2012-06-12 05:55:00 -0700 | [diff] [blame^] | 146 | #if defined(ART_USE_LLVM_COMPILER) || defined(ART_USE_GREENLAND_COMPILER) |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 147 | typedef compiler_llvm::InferredRegCategoryMap InferredRegCategoryMap; |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 148 | #endif |
Elliott Hughes | a21039c | 2012-06-21 12:09:25 -0700 | [diff] [blame] | 149 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 150 | public: |
jeffhao | f1e6b7c | 2012-06-05 18:33:30 -0700 | [diff] [blame] | 151 | enum FailureKind { |
| 152 | kNoFailure, |
| 153 | kSoftFailure, |
| 154 | kHardFailure, |
| 155 | }; |
| 156 | |
| 157 | /* Verify a class. Returns "kNoFailure" on success. */ |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 158 | static FailureKind VerifyClass(const Class* klass, std::string& error) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 159 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
jeffhao | f1e6b7c | 2012-06-05 18:33:30 -0700 | [diff] [blame] | 160 | static FailureKind VerifyClass(const DexFile* dex_file, DexCache* dex_cache, |
Ian Rogers | 365c102 | 2012-06-22 15:05:28 -0700 | [diff] [blame] | 161 | ClassLoader* class_loader, uint32_t class_def_idx, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 162 | std::string& error) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 163 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 164 | |
| 165 | uint8_t EncodePcToReferenceMapData() const; |
| 166 | |
| 167 | uint32_t DexFileVersion() const { |
| 168 | return dex_file_->GetVersion(); |
| 169 | } |
| 170 | |
| 171 | RegTypeCache* GetRegTypeCache() { |
| 172 | return ®_types_; |
| 173 | } |
| 174 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 175 | // Log a verification failure. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 176 | std::ostream& Fail(VerifyError error); |
| 177 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 178 | // Log for verification information. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 179 | std::ostream& LogVerifyInfo() { |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 180 | return info_messages_ << "VFY: " << PrettyMethod(method_idx_, *dex_file_) |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 181 | << '[' << reinterpret_cast<void*>(work_insn_idx_) << "] : "; |
| 182 | } |
| 183 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 184 | // Dump the failures encountered by the verifier. |
| 185 | std::ostream& DumpFailures(std::ostream& os); |
| 186 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 187 | // Dump the state of the verifier, namely each instruction, what flags are set on it, register |
| 188 | // information |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 189 | void Dump(std::ostream& os) SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 190 | |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 191 | static const std::vector<uint8_t>* GetGcMap(Compiler::MethodReference ref) |
| 192 | LOCKS_EXCLUDED(gc_maps_lock_); |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 193 | |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 194 | // Fills 'monitor_enter_dex_pcs' with the dex pcs of the monitor-enter instructions corresponding |
| 195 | // to the locks held at 'dex_pc' in 'm'. |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 196 | static void FindLocksAtDexPc(Method* m, uint32_t dex_pc, |
| 197 | std::vector<uint32_t>& monitor_enter_dex_pcs) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 198 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 199 | |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 200 | static void Init(); |
| 201 | static void Shutdown(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 202 | |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 203 | #if defined(ART_USE_LLVM_COMPILER) || defined(ART_USE_GREENLAND_COMPILER) |
Shih-wei Liao | cd05a62 | 2012-08-15 00:02:05 -0700 | [diff] [blame] | 204 | static const InferredRegCategoryMap* GetInferredRegCategoryMap(Compiler::MethodReference ref) |
| 205 | LOCKS_EXCLUDED(inferred_reg_category_maps_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 206 | #endif |
| 207 | |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 208 | static bool IsClassRejected(Compiler::ClassReference ref) |
| 209 | LOCKS_EXCLUDED(rejected_classes_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 210 | |
| 211 | private: |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 212 | explicit MethodVerifier(const DexFile* dex_file, DexCache* dex_cache, |
Ian Rogers | 365c102 | 2012-06-22 15:05:28 -0700 | [diff] [blame] | 213 | ClassLoader* class_loader, uint32_t class_def_idx, const DexFile::CodeItem* code_item, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 214 | uint32_t method_idx, Method* method, uint32_t access_flags) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 215 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 216 | |
| 217 | // Adds the given string to the beginning of the last failure message. |
| 218 | void PrependToLastFailMessage(std::string); |
| 219 | |
| 220 | // Adds the given string to the end of the last failure message. |
| 221 | void AppendToLastFailMessage(std::string); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 222 | |
| 223 | /* |
| 224 | * Perform verification on a single method. |
| 225 | * |
| 226 | * We do this in three passes: |
| 227 | * (1) Walk through all code units, determining instruction locations, |
| 228 | * widths, and other characteristics. |
| 229 | * (2) Walk through all code units, performing static checks on |
| 230 | * operands. |
| 231 | * (3) Iterate through the method, checking type safety and looking |
| 232 | * for code flow problems. |
Ian Rogers | e1758fe | 2012-04-19 11:31:15 -0700 | [diff] [blame] | 233 | */ |
jeffhao | f1e6b7c | 2012-06-05 18:33:30 -0700 | [diff] [blame] | 234 | static FailureKind VerifyMethod(uint32_t method_idx, const DexFile* dex_file, DexCache* dex_cache, |
Ian Rogers | 365c102 | 2012-06-22 15:05:28 -0700 | [diff] [blame] | 235 | ClassLoader* class_loader, uint32_t class_def_idx, const DexFile::CodeItem* code_item, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 236 | Method* method, uint32_t method_access_flags) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 237 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 238 | static void VerifyMethodAndDump(Method* method) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 239 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | e1758fe | 2012-04-19 11:31:15 -0700 | [diff] [blame] | 240 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 241 | // Run verification on the method. Returns true if verification completes and false if the input |
| 242 | // has an irrecoverable corruption. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 243 | bool Verify() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 244 | |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 245 | void FindLocksAtDexPc() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 246 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 247 | /* |
| 248 | * Compute the width of the instruction at each address in the instruction stream, and store it in |
| 249 | * insn_flags_. Addresses that are in the middle of an instruction, or that are part of switch |
| 250 | * table data, are not touched (so the caller should probably initialize "insn_flags" to zero). |
| 251 | * |
| 252 | * The "new_instance_count_" and "monitor_enter_count_" fields in vdata are also set. |
| 253 | * |
| 254 | * Performs some static checks, notably: |
| 255 | * - opcode of first instruction begins at index 0 |
| 256 | * - only documented instructions may appear |
| 257 | * - each instruction follows the last |
| 258 | * - last byte of last instruction is at (code_length-1) |
| 259 | * |
| 260 | * Logs an error and returns "false" on failure. |
| 261 | */ |
| 262 | bool ComputeWidthsAndCountOps(); |
| 263 | |
| 264 | /* |
| 265 | * Set the "in try" flags for all instructions protected by "try" statements. Also sets the |
| 266 | * "branch target" flags for exception handlers. |
| 267 | * |
| 268 | * Call this after widths have been set in "insn_flags". |
| 269 | * |
| 270 | * Returns "false" if something in the exception table looks fishy, but we're expecting the |
| 271 | * exception table to be somewhat sane. |
| 272 | */ |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 273 | bool ScanTryCatchBlocks() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 274 | |
| 275 | /* |
| 276 | * Perform static verification on all instructions in a method. |
| 277 | * |
| 278 | * Walks through instructions in a method calling VerifyInstruction on each. |
| 279 | */ |
| 280 | bool VerifyInstructions(); |
| 281 | |
| 282 | /* |
| 283 | * Perform static verification on an instruction. |
| 284 | * |
| 285 | * As a side effect, this sets the "branch target" flags in InsnFlags. |
| 286 | * |
| 287 | * "(CF)" items are handled during code-flow analysis. |
| 288 | * |
| 289 | * v3 4.10.1 |
| 290 | * - target of each jump and branch instruction must be valid |
| 291 | * - targets of switch statements must be valid |
| 292 | * - operands referencing constant pool entries must be valid |
| 293 | * - (CF) operands of getfield, putfield, getstatic, putstatic must be valid |
| 294 | * - (CF) operands of method invocation instructions must be valid |
| 295 | * - (CF) only invoke-direct can call a method starting with '<' |
| 296 | * - (CF) <clinit> must never be called explicitly |
| 297 | * - operands of instanceof, checkcast, new (and variants) must be valid |
| 298 | * - new-array[-type] limited to 255 dimensions |
| 299 | * - can't use "new" on an array class |
| 300 | * - (?) limit dimensions in multi-array creation |
| 301 | * - local variable load/store register values must be in valid range |
| 302 | * |
| 303 | * v3 4.11.1.2 |
| 304 | * - branches must be within the bounds of the code array |
| 305 | * - targets of all control-flow instructions are the start of an instruction |
| 306 | * - register accesses fall within range of allocated registers |
| 307 | * - (N/A) access to constant pool must be of appropriate type |
| 308 | * - code does not end in the middle of an instruction |
| 309 | * - execution cannot fall off the end of the code |
| 310 | * - (earlier) for each exception handler, the "try" area must begin and |
| 311 | * end at the start of an instruction (end can be at the end of the code) |
| 312 | * - (earlier) for each exception handler, the handler must start at a valid |
| 313 | * instruction |
| 314 | */ |
| 315 | bool VerifyInstruction(const Instruction* inst, uint32_t code_offset); |
| 316 | |
| 317 | /* Ensure that the register index is valid for this code item. */ |
| 318 | bool CheckRegisterIndex(uint32_t idx); |
| 319 | |
| 320 | /* Ensure that the wide register index is valid for this code item. */ |
| 321 | bool CheckWideRegisterIndex(uint32_t idx); |
| 322 | |
| 323 | // Perform static checks on a field get or set instruction. All we do here is ensure that the |
| 324 | // field index is in the valid range. |
| 325 | bool CheckFieldIndex(uint32_t idx); |
| 326 | |
| 327 | // Perform static checks on a method invocation instruction. All we do here is ensure that the |
| 328 | // method index is in the valid range. |
| 329 | bool CheckMethodIndex(uint32_t idx); |
| 330 | |
| 331 | // Perform static checks on a "new-instance" instruction. Specifically, make sure the class |
| 332 | // reference isn't for an array class. |
| 333 | bool CheckNewInstance(uint32_t idx); |
| 334 | |
| 335 | /* Ensure that the string index is in the valid range. */ |
| 336 | bool CheckStringIndex(uint32_t idx); |
| 337 | |
| 338 | // Perform static checks on an instruction that takes a class constant. Ensure that the class |
| 339 | // index is in the valid range. |
| 340 | bool CheckTypeIndex(uint32_t idx); |
| 341 | |
| 342 | // Perform static checks on a "new-array" instruction. Specifically, make sure they aren't |
| 343 | // creating an array of arrays that causes the number of dimensions to exceed 255. |
| 344 | bool CheckNewArray(uint32_t idx); |
| 345 | |
| 346 | // Verify an array data table. "cur_offset" is the offset of the fill-array-data instruction. |
| 347 | bool CheckArrayData(uint32_t cur_offset); |
| 348 | |
| 349 | // Verify that the target of a branch instruction is valid. We don't expect code to jump directly |
| 350 | // into an exception handler, but it's valid to do so as long as the target isn't a |
| 351 | // "move-exception" instruction. We verify that in a later stage. |
| 352 | // The dex format forbids certain instructions from branching to themselves. |
Elliott Hughes | 24edeb5 | 2012-06-18 15:29:46 -0700 | [diff] [blame] | 353 | // Updates "insn_flags_", setting the "branch target" flag. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 354 | bool CheckBranchTarget(uint32_t cur_offset); |
| 355 | |
| 356 | // Verify a switch table. "cur_offset" is the offset of the switch instruction. |
Elliott Hughes | 24edeb5 | 2012-06-18 15:29:46 -0700 | [diff] [blame] | 357 | // Updates "insn_flags_", setting the "branch target" flag. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 358 | bool CheckSwitchTargets(uint32_t cur_offset); |
| 359 | |
| 360 | // Check the register indices used in a "vararg" instruction, such as invoke-virtual or |
| 361 | // filled-new-array. |
| 362 | // - vA holds word count (0-5), args[] have values. |
| 363 | // There are some tests we don't do here, e.g. we don't try to verify that invoking a method that |
| 364 | // takes a double is done with consecutive registers. This requires parsing the target method |
| 365 | // signature, which we will be doing later on during the code flow analysis. |
| 366 | bool CheckVarArgRegs(uint32_t vA, uint32_t arg[]); |
| 367 | |
| 368 | // Check the register indices used in a "vararg/range" instruction, such as invoke-virtual/range |
| 369 | // or filled-new-array/range. |
| 370 | // - vA holds word count, vC holds index of first reg. |
| 371 | bool CheckVarArgRangeRegs(uint32_t vA, uint32_t vC); |
| 372 | |
| 373 | // Extract the relative offset from a branch instruction. |
| 374 | // Returns "false" on failure (e.g. this isn't a branch instruction). |
| 375 | bool GetBranchOffset(uint32_t cur_offset, int32_t* pOffset, bool* pConditional, |
| 376 | bool* selfOkay); |
| 377 | |
| 378 | /* Perform detailed code-flow analysis on a single method. */ |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 379 | bool VerifyCodeFlow() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 380 | |
| 381 | // Set the register types for the first instruction in the method based on the method signature. |
| 382 | // This has the side-effect of validating the signature. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 383 | bool SetTypesFromSignature() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 384 | |
| 385 | /* |
| 386 | * Perform code flow on a method. |
| 387 | * |
| 388 | * The basic strategy is as outlined in v3 4.11.1.2: set the "changed" bit on the first |
| 389 | * instruction, process it (setting additional "changed" bits), and repeat until there are no |
| 390 | * more. |
| 391 | * |
| 392 | * v3 4.11.1.1 |
| 393 | * - (N/A) operand stack is always the same size |
| 394 | * - operand stack [registers] contain the correct types of values |
| 395 | * - local variables [registers] contain the correct types of values |
| 396 | * - methods are invoked with the appropriate arguments |
| 397 | * - fields are assigned using values of appropriate types |
| 398 | * - opcodes have the correct type values in operand registers |
| 399 | * - there is never an uninitialized class instance in a local variable in code protected by an |
| 400 | * exception handler (operand stack is okay, because the operand stack is discarded when an |
| 401 | * exception is thrown) [can't know what's a local var w/o the debug info -- should fall out of |
| 402 | * register typing] |
| 403 | * |
| 404 | * v3 4.11.1.2 |
| 405 | * - execution cannot fall off the end of the code |
| 406 | * |
| 407 | * (We also do many of the items described in the "static checks" sections, because it's easier to |
| 408 | * do them here.) |
| 409 | * |
| 410 | * We need an array of RegType values, one per register, for every instruction. If the method uses |
| 411 | * monitor-enter, we need extra data for every register, and a stack for every "interesting" |
| 412 | * instruction. In theory this could become quite large -- up to several megabytes for a monster |
| 413 | * function. |
| 414 | * |
| 415 | * NOTE: |
| 416 | * The spec forbids backward branches when there's an uninitialized reference in a register. The |
| 417 | * idea is to prevent something like this: |
| 418 | * loop: |
| 419 | * move r1, r0 |
| 420 | * new-instance r0, MyClass |
| 421 | * ... |
| 422 | * if-eq rN, loop // once |
| 423 | * initialize r0 |
| 424 | * |
| 425 | * This leaves us with two different instances, both allocated by the same instruction, but only |
| 426 | * one is initialized. The scheme outlined in v3 4.11.1.4 wouldn't catch this, so they work around |
| 427 | * it by preventing backward branches. We achieve identical results without restricting code |
| 428 | * reordering by specifying that you can't execute the new-instance instruction if a register |
| 429 | * contains an uninitialized instance created by that same instruction. |
| 430 | */ |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 431 | bool CodeFlowVerifyMethod() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 432 | |
| 433 | /* |
| 434 | * Perform verification for a single instruction. |
| 435 | * |
| 436 | * This requires fully decoding the instruction to determine the effect it has on registers. |
| 437 | * |
| 438 | * Finds zero or more following instructions and sets the "changed" flag if execution at that |
| 439 | * point needs to be (re-)evaluated. Register changes are merged into "reg_types_" at the target |
| 440 | * addresses. Does not set or clear any other flags in "insn_flags_". |
| 441 | */ |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 442 | bool CodeFlowVerifyInstruction(uint32_t* start_guess) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 443 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 444 | |
| 445 | // Perform verification of a new array instruction |
| 446 | void VerifyNewArray(const DecodedInstruction& dec_insn, bool is_filled, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 447 | bool is_range) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 448 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 449 | |
| 450 | // Perform verification of an aget instruction. The destination register's type will be set to |
| 451 | // be that of component type of the array unless the array type is unknown, in which case a |
| 452 | // bottom type inferred from the type of instruction is used. is_primitive is false for an |
| 453 | // aget-object. |
| 454 | void VerifyAGet(const DecodedInstruction& insn, const RegType& insn_type, |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 455 | bool is_primitive) SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 456 | |
| 457 | // Perform verification of an aput instruction. |
| 458 | void VerifyAPut(const DecodedInstruction& insn, const RegType& insn_type, |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 459 | bool is_primitive) SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 460 | |
| 461 | // Lookup instance field and fail for resolution violations |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 462 | Field* GetInstanceField(const RegType& obj_type, int field_idx) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 463 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 464 | |
| 465 | // Lookup static field and fail for resolution violations |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 466 | Field* GetStaticField(int field_idx) SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 467 | |
| 468 | // Perform verification of an iget or sget instruction. |
| 469 | void VerifyISGet(const DecodedInstruction& insn, const RegType& insn_type, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 470 | bool is_primitive, bool is_static) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 471 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 472 | |
| 473 | // Perform verification of an iput or sput instruction. |
| 474 | void VerifyISPut(const DecodedInstruction& insn, const RegType& insn_type, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 475 | bool is_primitive, bool is_static) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 476 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 477 | |
| 478 | // Resolves a class based on an index and performs access checks to ensure the referrer can |
| 479 | // access the resolved class. |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 480 | const RegType& ResolveClassAndCheckAccess(uint32_t class_idx) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 481 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 482 | |
| 483 | /* |
| 484 | * For the "move-exception" instruction at "work_insn_idx_", which must be at an exception handler |
| 485 | * address, determine the Join of all exceptions that can land here. Fails if no matching |
| 486 | * exception handler can be found or if the Join of exception types fails. |
| 487 | */ |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 488 | const RegType& GetCaughtExceptionType() |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 489 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 490 | |
| 491 | /* |
| 492 | * Resolves a method based on an index and performs access checks to ensure |
| 493 | * the referrer can access the resolved method. |
| 494 | * Does not throw exceptions. |
| 495 | */ |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 496 | Method* ResolveMethodAndCheckAccess(uint32_t method_idx, MethodType method_type) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 497 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 498 | |
| 499 | /* |
| 500 | * Verify the arguments to a method. We're executing in "method", making |
| 501 | * a call to the method reference in vB. |
| 502 | * |
| 503 | * If this is a "direct" invoke, we allow calls to <init>. For calls to |
| 504 | * <init>, the first argument may be an uninitialized reference. Otherwise, |
| 505 | * calls to anything starting with '<' will be rejected, as will any |
| 506 | * uninitialized reference arguments. |
| 507 | * |
| 508 | * For non-static method calls, this will verify that the method call is |
| 509 | * appropriate for the "this" argument. |
| 510 | * |
| 511 | * The method reference is in vBBBB. The "is_range" parameter determines |
| 512 | * whether we use 0-4 "args" values or a range of registers defined by |
| 513 | * vAA and vCCCC. |
| 514 | * |
| 515 | * Widening conversions on integers and references are allowed, but |
| 516 | * narrowing conversions are not. |
| 517 | * |
| 518 | * Returns the resolved method on success, NULL on failure (with *failure |
| 519 | * set appropriately). |
| 520 | */ |
| 521 | Method* VerifyInvocationArgs(const DecodedInstruction& dec_insn, |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 522 | MethodType method_type, bool is_range, bool is_super) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 523 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 524 | |
| 525 | /* |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 526 | * Verify that the target instruction is not "move-exception". It's important that the only way |
| 527 | * to execute a move-exception is as the first instruction of an exception handler. |
| 528 | * Returns "true" if all is well, "false" if the target instruction is move-exception. |
| 529 | */ |
| 530 | bool CheckNotMoveException(const uint16_t* insns, int insn_idx); |
| 531 | |
| 532 | /* |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 533 | * Control can transfer to "next_insn". Merge the registers from merge_line into the table at |
| 534 | * next_insn, and set the changed flag on the target address if any of the registers were changed. |
| 535 | * Returns "false" if an error is encountered. |
| 536 | */ |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 537 | bool UpdateRegisters(uint32_t next_insn, const RegisterLine* merge_line) |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 538 | SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 539 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 540 | // Is the method being verified a constructor? |
| 541 | bool IsConstructor() const { |
| 542 | return (method_access_flags_ & kAccConstructor) != 0; |
| 543 | } |
| 544 | |
| 545 | // Is the method verified static? |
| 546 | bool IsStatic() const { |
| 547 | return (method_access_flags_ & kAccStatic) != 0; |
| 548 | } |
| 549 | |
| 550 | // Return the register type for the method. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 551 | const RegType& GetMethodReturnType() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 552 | |
| 553 | // Get a type representing the declaring class of the method. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 554 | const RegType& GetDeclaringClass() SHARED_LOCKS_REQUIRED(Locks::mutator_lock_); |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 555 | |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 556 | #if defined(ART_USE_LLVM_COMPILER) || defined(ART_USE_GREENLAND_COMPILER) |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 557 | /* |
| 558 | * Generate the inferred register category for LLVM-based code generator. |
| 559 | * Returns a pointer to a two-dimension Class array, or NULL on failure. |
| 560 | */ |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 561 | const InferredRegCategoryMap* GenerateInferredRegCategoryMap(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 562 | #endif |
| 563 | |
| 564 | /* |
| 565 | * Generate the GC map for a method that has just been verified (i.e. we're doing this as part of |
| 566 | * verification). For type-precise determination we have all the data we need, so we just need to |
| 567 | * encode it in some clever fashion. |
| 568 | * Returns a pointer to a newly-allocated RegisterMap, or NULL on failure. |
| 569 | */ |
| 570 | const std::vector<uint8_t>* GenerateGcMap(); |
| 571 | |
| 572 | // Verify that the GC map associated with method_ is well formed |
| 573 | void VerifyGcMap(const std::vector<uint8_t>& data); |
| 574 | |
| 575 | // Compute sizes for GC map data |
| 576 | void ComputeGcMapSizes(size_t* gc_points, size_t* ref_bitmap_bits, size_t* log2_max_gc_pc); |
| 577 | |
| 578 | InsnFlags* CurrentInsnFlags(); |
| 579 | |
| 580 | // All the GC maps that the verifier has created |
| 581 | typedef SafeMap<const Compiler::MethodReference, const std::vector<uint8_t>*> GcMapTable; |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 582 | static Mutex* gc_maps_lock_ DEFAULT_MUTEX_ACQUIRED_AFTER; |
| 583 | static GcMapTable* gc_maps_ GUARDED_BY(gc_maps_lock_); |
| 584 | static void SetGcMap(Compiler::MethodReference ref, const std::vector<uint8_t>& gc_map) |
| 585 | LOCKS_EXCLUDED(gc_maps_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 586 | |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 587 | typedef std::set<Compiler::ClassReference> RejectedClassesTable; |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 588 | static Mutex* rejected_classes_lock_ DEFAULT_MUTEX_ACQUIRED_AFTER; |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 589 | static RejectedClassesTable* rejected_classes_; |
| 590 | |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 591 | #if defined(ART_USE_LLVM_COMPILER) || defined(ART_USE_GREENLAND_COMPILER) |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 592 | // All the inferred register category maps that the verifier has created. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 593 | typedef SafeMap<const Compiler::MethodReference, |
Shih-wei Liao | e94d9b2 | 2012-05-22 09:01:24 -0700 | [diff] [blame] | 594 | const InferredRegCategoryMap*> InferredRegCategoryMapTable; |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 595 | static Mutex* inferred_reg_category_maps_lock_ DEFAULT_MUTEX_ACQUIRED_AFTER; |
Shih-wei Liao | cd05a62 | 2012-08-15 00:02:05 -0700 | [diff] [blame] | 596 | static InferredRegCategoryMapTable* inferred_reg_category_maps_ GUARDED_BY(inferred_reg_category_maps_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 597 | static void SetInferredRegCategoryMap(Compiler::MethodReference ref, |
Shih-wei Liao | cd05a62 | 2012-08-15 00:02:05 -0700 | [diff] [blame] | 598 | const InferredRegCategoryMap& m) |
| 599 | LOCKS_EXCLUDED(inferred_reg_category_maps_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 600 | #endif |
| 601 | |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 602 | static void AddRejectedClass(Compiler::ClassReference ref) |
| 603 | LOCKS_EXCLUDED(rejected_classes_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 604 | |
| 605 | RegTypeCache reg_types_; |
| 606 | |
| 607 | PcToRegisterLineTable reg_table_; |
| 608 | |
| 609 | // Storage for the register status we're currently working on. |
| 610 | UniquePtr<RegisterLine> work_line_; |
| 611 | |
| 612 | // The address of the instruction we're currently working on, note that this is in 2 byte |
| 613 | // quantities |
| 614 | uint32_t work_insn_idx_; |
| 615 | |
| 616 | // Storage for the register status we're saving for later. |
| 617 | UniquePtr<RegisterLine> saved_line_; |
| 618 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 619 | uint32_t method_idx_; // The method we're working on. |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 620 | // Its object representation if known. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 621 | Method* foo_method_ GUARDED_BY(Locks::mutator_lock_); |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 622 | uint32_t method_access_flags_; // Method's access flags. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 623 | const DexFile* dex_file_; // The dex file containing the method. |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 624 | // The dex_cache for the declaring class of the method. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 625 | DexCache* dex_cache_ GUARDED_BY(Locks::mutator_lock_); |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 626 | // The class loader for the declaring class of the method. |
Ian Rogers | b726dcb | 2012-09-05 08:57:23 -0700 | [diff] [blame] | 627 | ClassLoader* class_loader_ GUARDED_BY(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 628 | uint32_t class_def_idx_; // The class def index of the declaring class of the method. |
| 629 | const DexFile::CodeItem* code_item_; // The code item containing the code for the method. |
| 630 | UniquePtr<InsnFlags[]> insn_flags_; // Instruction widths and flags, one entry per code unit. |
| 631 | |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 632 | // The dex PC of a FindLocksAtDexPc request, -1 otherwise. |
| 633 | uint32_t interesting_dex_pc_; |
| 634 | // The container into which FindLocksAtDexPc should write the registers containing held locks, |
| 635 | // NULL if we're not doing FindLocksAtDexPc. |
| 636 | std::vector<uint32_t>* monitor_enter_dex_pcs_; |
| 637 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 638 | // The types of any error that occurs. |
| 639 | std::vector<VerifyError> failures_; |
| 640 | // Error messages associated with failures. |
| 641 | std::vector<std::ostringstream*> failure_messages_; |
| 642 | // Is there a pending hard failure? |
| 643 | bool have_pending_hard_failure_; |
jeffhao | faf459e | 2012-08-31 15:32:47 -0700 | [diff] [blame] | 644 | // Is there a pending runtime throw failure? A runtime throw failure is when an instruction |
| 645 | // would fail at runtime throwing an exception. Such an instruction causes the following code |
| 646 | // to be unreachable. This is set by Fail and used to ensure we don't process unreachable |
| 647 | // instructions that would hard fail the verification. |
| 648 | bool have_pending_runtime_throw_failure_; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 649 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 650 | // Info message log use primarily for verifier diagnostics. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 651 | std::ostringstream info_messages_; |
| 652 | |
| 653 | // The number of occurrences of specific opcodes. |
| 654 | size_t new_instance_count_; |
| 655 | size_t monitor_enter_count_; |
| 656 | |
| 657 | friend struct art::ReferenceMap2Visitor; // for VerifyMethodAndDump |
| 658 | }; |
jeffhao | e4f0b2a | 2012-08-30 11:18:57 -0700 | [diff] [blame] | 659 | std::ostream& operator<<(std::ostream& os, const MethodVerifier::FailureKind& rhs); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 660 | |
| 661 | } // namespace verifier |
| 662 | } // namespace art |
| 663 | |
| 664 | #endif // ART_SRC_VERIFIER_METHOD_VERIFIER_H_ |