Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2011 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Brian Carlstrom | fc0e321 | 2013-07-17 14:40:12 -0700 | [diff] [blame] | 17 | #ifndef ART_RUNTIME_VERIFIER_METHOD_VERIFIER_H_ |
| 18 | #define ART_RUNTIME_VERIFIER_METHOD_VERIFIER_H_ |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 19 | |
Ian Rogers | 700a402 | 2014-05-19 16:49:03 -0700 | [diff] [blame] | 20 | #include <memory> |
Vladimir Marko | 637ee0b | 2015-09-04 12:47:41 +0100 | [diff] [blame] | 21 | #include <sstream> |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 22 | #include <vector> |
| 23 | |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 24 | #include "base/arena_allocator.h" |
Elliott Hughes | 7616005 | 2012-12-12 16:31:20 -0800 | [diff] [blame] | 25 | #include "base/macros.h" |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 26 | #include "base/scoped_arena_containers.h" |
| 27 | #include "base/stl_util.h" |
Andreas Gampe | 9fcfb8a | 2016-02-04 20:52:54 -0800 | [diff] [blame] | 28 | #include "base/value_object.h" |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 29 | #include "dex_file.h" |
Hiroshi Yamauchi | dc37617 | 2014-08-22 11:13:12 -0700 | [diff] [blame] | 30 | #include "handle.h" |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 31 | #include "instruction_flags.h" |
Brian Carlstrom | 51c2467 | 2013-07-11 16:00:56 -0700 | [diff] [blame] | 32 | #include "method_reference.h" |
Mathieu Chartier | 361e04a | 2016-02-16 14:06:35 -0800 | [diff] [blame^] | 33 | #include "register_line.h" |
Ian Rogers | 576ca0c | 2014-06-06 15:58:22 -0700 | [diff] [blame] | 34 | #include "reg_type_cache.h" |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 35 | |
| 36 | namespace art { |
| 37 | |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 38 | class CompilerCallbacks; |
Ian Rogers | 8e1f4f8 | 2014-11-05 11:07:30 -0800 | [diff] [blame] | 39 | class Instruction; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 40 | struct ReferenceMap2Visitor; |
Mathieu Chartier | d0ad2ee | 2015-03-31 14:59:59 -0700 | [diff] [blame] | 41 | class Thread; |
Vladimir Marko | 8f1e08a | 2015-06-26 12:06:30 +0100 | [diff] [blame] | 42 | class VariableIndentationOutputStream; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 43 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 44 | namespace verifier { |
| 45 | |
Ian Rogers | 46c6bb2 | 2012-09-18 13:47:36 -0700 | [diff] [blame] | 46 | class DexPcToReferenceMap; |
Ian Rogers | 8e1f4f8 | 2014-11-05 11:07:30 -0800 | [diff] [blame] | 47 | class MethodVerifier; |
| 48 | class RegisterLine; |
Mathieu Chartier | 361e04a | 2016-02-16 14:06:35 -0800 | [diff] [blame^] | 49 | using RegisterLineArenaUniquePtr = std::unique_ptr<RegisterLine, RegisterLineArenaDelete>; |
Ian Rogers | 8e1f4f8 | 2014-11-05 11:07:30 -0800 | [diff] [blame] | 50 | class RegType; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 51 | |
| 52 | /* |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 53 | * "Direct" and "virtual" methods are stored independently. The type of call used to invoke the |
| 54 | * method determines which list we search, and whether we travel up into superclasses. |
| 55 | * |
| 56 | * (<clinit>, <init>, and methods declared "private" or "static" are stored in the "direct" list. |
| 57 | * All others are stored in the "virtual" list.) |
| 58 | */ |
| 59 | enum MethodType { |
| 60 | METHOD_UNKNOWN = 0, |
| 61 | METHOD_DIRECT, // <init>, private |
| 62 | METHOD_STATIC, // static |
Alex Light | 7268d47 | 2016-01-20 15:50:01 -0800 | [diff] [blame] | 63 | METHOD_VIRTUAL, // virtual |
| 64 | METHOD_SUPER, // super |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 65 | METHOD_INTERFACE // interface |
| 66 | }; |
Ian Rogers | 2fc1427 | 2012-08-30 10:56:57 -0700 | [diff] [blame] | 67 | std::ostream& operator<<(std::ostream& os, const MethodType& rhs); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 68 | |
| 69 | /* |
| 70 | * An enumeration of problems that can turn up during verification. |
| 71 | * Both VERIFY_ERROR_BAD_CLASS_SOFT and VERIFY_ERROR_BAD_CLASS_HARD denote failures that cause |
| 72 | * the entire class to be rejected. However, VERIFY_ERROR_BAD_CLASS_SOFT denotes a soft failure |
| 73 | * that can potentially be corrected, and the verifier will try again at runtime. |
| 74 | * VERIFY_ERROR_BAD_CLASS_HARD denotes a hard failure that can't be corrected, and will cause |
| 75 | * the class to remain uncompiled. Other errors denote verification errors that cause bytecode |
| 76 | * to be rewritten to fail at runtime. |
| 77 | */ |
| 78 | enum VerifyError { |
Andreas Gampe | a727e37 | 2015-08-25 09:22:37 -0700 | [diff] [blame] | 79 | VERIFY_ERROR_BAD_CLASS_HARD = 1, // VerifyError; hard error that skips compilation. |
| 80 | VERIFY_ERROR_BAD_CLASS_SOFT = 2, // VerifyError; soft error that verifies again at runtime. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 81 | |
Andreas Gampe | a727e37 | 2015-08-25 09:22:37 -0700 | [diff] [blame] | 82 | VERIFY_ERROR_NO_CLASS = 4, // NoClassDefFoundError. |
| 83 | VERIFY_ERROR_NO_FIELD = 8, // NoSuchFieldError. |
| 84 | VERIFY_ERROR_NO_METHOD = 16, // NoSuchMethodError. |
| 85 | VERIFY_ERROR_ACCESS_CLASS = 32, // IllegalAccessError. |
| 86 | VERIFY_ERROR_ACCESS_FIELD = 64, // IllegalAccessError. |
| 87 | VERIFY_ERROR_ACCESS_METHOD = 128, // IllegalAccessError. |
| 88 | VERIFY_ERROR_CLASS_CHANGE = 256, // IncompatibleClassChangeError. |
| 89 | VERIFY_ERROR_INSTANTIATION = 512, // InstantiationError. |
Igor Murashkin | 158f35c | 2015-06-10 15:55:30 -0700 | [diff] [blame] | 90 | // For opcodes that don't have complete verifier support (such as lambda opcodes), |
| 91 | // we need a way to continue execution at runtime without attempting to re-verify |
| 92 | // (since we know it will fail no matter what). Instead, run as the interpreter |
| 93 | // in a special "do access checks" mode which will perform verifier-like checking |
| 94 | // on the fly. |
| 95 | // |
| 96 | // TODO: Once all new opcodes have implemented full verifier support, this can be removed. |
Andreas Gampe | a727e37 | 2015-08-25 09:22:37 -0700 | [diff] [blame] | 97 | VERIFY_ERROR_FORCE_INTERPRETER = 1024, // Skip the verification phase at runtime; |
| 98 | // force the interpreter to do access checks. |
| 99 | // (sets a soft fail at compile time). |
| 100 | VERIFY_ERROR_LOCKING = 2048, // Could not guarantee balanced locking. This should be |
| 101 | // punted to the interpreter with access checks. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 102 | }; |
| 103 | std::ostream& operator<<(std::ostream& os, const VerifyError& rhs); |
| 104 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 105 | // We don't need to store the register data for many instructions, because we either only need |
| 106 | // it at branch points (for verification) or GC points and branches (for verification + |
| 107 | // type-precise register analysis). |
| 108 | enum RegisterTrackingMode { |
| 109 | kTrackRegsBranches, |
Sameer Abu Asal | 02c4223 | 2013-04-30 12:09:45 -0700 | [diff] [blame] | 110 | kTrackCompilerInterestPoints, |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 111 | kTrackRegsAll, |
| 112 | }; |
| 113 | |
Ian Rogers | 2bcb4a4 | 2012-11-08 10:39:18 -0800 | [diff] [blame] | 114 | // A mapping from a dex pc to the register line statuses as they are immediately prior to the |
| 115 | // execution of that instruction. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 116 | class PcToRegisterLineTable { |
| 117 | public: |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 118 | explicit PcToRegisterLineTable(ScopedArenaAllocator& arena); |
Ian Rogers | d0fbd85 | 2013-09-24 18:17:04 -0700 | [diff] [blame] | 119 | ~PcToRegisterLineTable(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 120 | |
| 121 | // Initialize the RegisterTable. Every instruction address can have a different set of information |
| 122 | // about what's in which register, but for verification purposes we only need to store it at |
| 123 | // branch target addresses (because we merge into that). |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 124 | void Init(RegisterTrackingMode mode, InstructionFlags* flags, uint32_t insns_size, |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 125 | uint16_t registers_size, MethodVerifier* verifier); |
| 126 | |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 127 | RegisterLine* GetLine(size_t idx) const { |
| 128 | return register_lines_[idx].get(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 129 | } |
| 130 | |
| 131 | private: |
Mathieu Chartier | 361e04a | 2016-02-16 14:06:35 -0800 | [diff] [blame^] | 132 | ScopedArenaVector<RegisterLineArenaUniquePtr> register_lines_; |
Ian Rogers | 8e1f4f8 | 2014-11-05 11:07:30 -0800 | [diff] [blame] | 133 | |
| 134 | DISALLOW_COPY_AND_ASSIGN(PcToRegisterLineTable); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 135 | }; |
| 136 | |
| 137 | // The verifier |
| 138 | class MethodVerifier { |
| 139 | public: |
jeffhao | f1e6b7c | 2012-06-05 18:33:30 -0700 | [diff] [blame] | 140 | enum FailureKind { |
| 141 | kNoFailure, |
| 142 | kSoftFailure, |
| 143 | kHardFailure, |
| 144 | }; |
| 145 | |
| 146 | /* Verify a class. Returns "kNoFailure" on success. */ |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 147 | static FailureKind VerifyClass(Thread* self, |
| 148 | mirror::Class* klass, |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 149 | CompilerCallbacks* callbacks, |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 150 | bool allow_soft_failures, |
| 151 | bool log_hard_failures, |
Ian Rogers | 7b078e8 | 2014-09-10 14:44:24 -0700 | [diff] [blame] | 152 | std::string* error) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 153 | SHARED_REQUIRES(Locks::mutator_lock_); |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 154 | static FailureKind VerifyClass(Thread* self, |
| 155 | const DexFile* dex_file, |
Andreas Gampe | 5a4b8a2 | 2014-09-11 08:30:08 -0700 | [diff] [blame] | 156 | Handle<mirror::DexCache> dex_cache, |
| 157 | Handle<mirror::ClassLoader> class_loader, |
Ian Rogers | 8b2c0b9 | 2013-09-19 02:56:49 -0700 | [diff] [blame] | 158 | const DexFile::ClassDef* class_def, |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 159 | CompilerCallbacks* callbacks, |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 160 | bool allow_soft_failures, |
| 161 | bool log_hard_failures, |
| 162 | std::string* error) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 163 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 164 | |
Vladimir Marko | 8f1e08a | 2015-06-26 12:06:30 +0100 | [diff] [blame] | 165 | static MethodVerifier* VerifyMethodAndDump(Thread* self, |
| 166 | VariableIndentationOutputStream* vios, |
| 167 | uint32_t method_idx, |
Andreas Gampe | 2ed8def | 2014-08-28 14:41:02 -0700 | [diff] [blame] | 168 | const DexFile* dex_file, |
Andreas Gampe | 5a4b8a2 | 2014-09-11 08:30:08 -0700 | [diff] [blame] | 169 | Handle<mirror::DexCache> dex_cache, |
| 170 | Handle<mirror::ClassLoader> class_loader, |
Andreas Gampe | 2ed8def | 2014-08-28 14:41:02 -0700 | [diff] [blame] | 171 | const DexFile::ClassDef* class_def, |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 172 | const DexFile::CodeItem* code_item, ArtMethod* method, |
Andreas Gampe | 2ed8def | 2014-08-28 14:41:02 -0700 | [diff] [blame] | 173 | uint32_t method_access_flags) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 174 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 2bcb4a4 | 2012-11-08 10:39:18 -0800 | [diff] [blame] | 175 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 176 | uint8_t EncodePcToReferenceMapData() const; |
| 177 | |
| 178 | uint32_t DexFileVersion() const { |
| 179 | return dex_file_->GetVersion(); |
| 180 | } |
| 181 | |
| 182 | RegTypeCache* GetRegTypeCache() { |
| 183 | return ®_types_; |
| 184 | } |
| 185 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 186 | // Log a verification failure. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 187 | std::ostream& Fail(VerifyError error); |
| 188 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 189 | // Log for verification information. |
Ian Rogers | 576ca0c | 2014-06-06 15:58:22 -0700 | [diff] [blame] | 190 | std::ostream& LogVerifyInfo(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 191 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 192 | // Dump the failures encountered by the verifier. |
| 193 | std::ostream& DumpFailures(std::ostream& os); |
| 194 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 195 | // Dump the state of the verifier, namely each instruction, what flags are set on it, register |
| 196 | // information |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 197 | void Dump(std::ostream& os) SHARED_REQUIRES(Locks::mutator_lock_); |
| 198 | void Dump(VariableIndentationOutputStream* vios) SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 199 | |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 200 | // Fills 'monitor_enter_dex_pcs' with the dex pcs of the monitor-enter instructions corresponding |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 201 | // to the locks held at 'dex_pc' in method 'm'. |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 202 | static void FindLocksAtDexPc(ArtMethod* m, uint32_t dex_pc, |
Ian Rogers | 46960fe | 2014-05-23 10:43:43 -0700 | [diff] [blame] | 203 | std::vector<uint32_t>* monitor_enter_dex_pcs) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 204 | SHARED_REQUIRES(Locks::mutator_lock_); |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 205 | |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 206 | // Returns the accessed field corresponding to the quick instruction's field |
| 207 | // offset at 'dex_pc' in method 'm'. |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 208 | static ArtField* FindAccessedFieldAtDexPc(ArtMethod* m, uint32_t dex_pc) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 209 | SHARED_REQUIRES(Locks::mutator_lock_); |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 210 | |
| 211 | // Returns the invoked method corresponding to the quick instruction's vtable |
| 212 | // index at 'dex_pc' in method 'm'. |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 213 | static ArtMethod* FindInvokedMethodAtDexPc(ArtMethod* m, uint32_t dex_pc) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 214 | SHARED_REQUIRES(Locks::mutator_lock_); |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 215 | |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 216 | static SafeMap<uint32_t, std::set<uint32_t>> FindStringInitMap(ArtMethod* m) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 217 | SHARED_REQUIRES(Locks::mutator_lock_); |
Jeff Hao | 848f70a | 2014-01-15 13:49:50 -0800 | [diff] [blame] | 218 | |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 219 | static void Init() SHARED_REQUIRES(Locks::mutator_lock_); |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 220 | static void Shutdown(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 221 | |
Elliott Hughes | 4993bbc | 2013-01-10 15:41:25 -0800 | [diff] [blame] | 222 | bool CanLoadClasses() const { |
| 223 | return can_load_classes_; |
| 224 | } |
| 225 | |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 226 | MethodVerifier(Thread* self, |
| 227 | const DexFile* dex_file, |
| 228 | Handle<mirror::DexCache> dex_cache, |
| 229 | Handle<mirror::ClassLoader> class_loader, |
| 230 | const DexFile::ClassDef* class_def, |
| 231 | const DexFile::CodeItem* code_item, |
| 232 | uint32_t method_idx, |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 233 | ArtMethod* method, |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 234 | uint32_t access_flags, |
| 235 | bool can_load_classes, |
| 236 | bool allow_soft_failures, |
| 237 | bool need_precise_constants, |
| 238 | bool allow_thread_suspension) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 239 | SHARED_REQUIRES(Locks::mutator_lock_) |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 240 | : MethodVerifier(self, |
| 241 | dex_file, |
| 242 | dex_cache, |
| 243 | class_loader, |
| 244 | class_def, |
| 245 | code_item, |
| 246 | method_idx, |
| 247 | method, |
| 248 | access_flags, |
| 249 | can_load_classes, |
| 250 | allow_soft_failures, |
| 251 | need_precise_constants, |
| 252 | false, |
| 253 | allow_thread_suspension) {} |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 254 | |
Mathieu Chartier | 590fee9 | 2013-09-13 13:46:47 -0700 | [diff] [blame] | 255 | ~MethodVerifier(); |
Sebastien Hertz | 33691ab | 2013-08-02 14:19:57 +0200 | [diff] [blame] | 256 | |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 257 | // Run verification on the method. Returns true if verification completes and false if the input |
| 258 | // has an irrecoverable corruption. |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 259 | bool Verify() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 260 | |
| 261 | // Describe VRegs at the given dex pc. |
| 262 | std::vector<int32_t> DescribeVRegs(uint32_t dex_pc); |
| 263 | |
Mathieu Chartier | bb87e0f | 2015-04-03 11:21:55 -0700 | [diff] [blame] | 264 | static void VisitStaticRoots(RootVisitor* visitor) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 265 | SHARED_REQUIRES(Locks::mutator_lock_); |
Mathieu Chartier | bb87e0f | 2015-04-03 11:21:55 -0700 | [diff] [blame] | 266 | void VisitRoots(RootVisitor* visitor, const RootInfo& roots) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 267 | SHARED_REQUIRES(Locks::mutator_lock_); |
Mathieu Chartier | c528dba | 2013-11-26 12:00:11 -0800 | [diff] [blame] | 268 | |
Vladimir Marko | 2b5eaa2 | 2013-12-13 13:59:30 +0000 | [diff] [blame] | 269 | // Accessors used by the compiler via CompilerCallback |
| 270 | const DexFile::CodeItem* CodeItem() const; |
| 271 | RegisterLine* GetRegLine(uint32_t dex_pc); |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 272 | ALWAYS_INLINE const InstructionFlags& GetInstructionFlags(size_t index) const; |
| 273 | ALWAYS_INLINE InstructionFlags& GetInstructionFlags(size_t index); |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 274 | mirror::ClassLoader* GetClassLoader() SHARED_REQUIRES(Locks::mutator_lock_); |
| 275 | mirror::DexCache* GetDexCache() SHARED_REQUIRES(Locks::mutator_lock_); |
Vladimir Marko | be10e8e | 2016-01-22 12:09:44 +0000 | [diff] [blame] | 276 | ArtMethod* GetMethod() const SHARED_REQUIRES(Locks::mutator_lock_); |
Vladimir Marko | 2b5eaa2 | 2013-12-13 13:59:30 +0000 | [diff] [blame] | 277 | MethodReference GetMethodReference() const; |
| 278 | uint32_t GetAccessFlags() const; |
| 279 | bool HasCheckCasts() const; |
| 280 | bool HasVirtualOrInterfaceInvokes() const; |
| 281 | bool HasFailures() const; |
Nicolas Geoffray | 4824c27 | 2015-06-24 15:53:03 +0100 | [diff] [blame] | 282 | bool HasInstructionThatWillThrow() const { |
Andreas Gampe | d12e782 | 2015-06-25 10:26:40 -0700 | [diff] [blame] | 283 | return have_any_pending_runtime_throw_failure_; |
Nicolas Geoffray | 4824c27 | 2015-06-24 15:53:03 +0100 | [diff] [blame] | 284 | } |
| 285 | |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 286 | const RegType& ResolveCheckedClass(uint32_t class_idx) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 287 | SHARED_REQUIRES(Locks::mutator_lock_); |
Mathieu Chartier | 2cebb24 | 2015-04-21 16:50:40 -0700 | [diff] [blame] | 288 | // Returns the method of a quick invoke or null if it cannot be found. |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 289 | ArtMethod* GetQuickInvokedMethod(const Instruction* inst, RegisterLine* reg_line, |
Mathieu Chartier | 091d238 | 2015-03-06 10:59:06 -0800 | [diff] [blame] | 290 | bool is_range, bool allow_failure) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 291 | SHARED_REQUIRES(Locks::mutator_lock_); |
Mathieu Chartier | 2cebb24 | 2015-04-21 16:50:40 -0700 | [diff] [blame] | 292 | // Returns the access field of a quick field access (iget/iput-quick) or null |
Mathieu Chartier | e5f13e5 | 2015-02-24 09:37:21 -0800 | [diff] [blame] | 293 | // if it cannot be found. |
Mathieu Chartier | c785344 | 2015-03-27 14:35:38 -0700 | [diff] [blame] | 294 | ArtField* GetQuickFieldAccess(const Instruction* inst, RegisterLine* reg_line) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 295 | SHARED_REQUIRES(Locks::mutator_lock_); |
Vladimir Marko | 2b5eaa2 | 2013-12-13 13:59:30 +0000 | [diff] [blame] | 296 | |
Jeff Hao | 848f70a | 2014-01-15 13:49:50 -0800 | [diff] [blame] | 297 | SafeMap<uint32_t, std::set<uint32_t>>& GetStringInitPcRegMap() { |
| 298 | return string_init_pc_reg_map_; |
| 299 | } |
| 300 | |
Andreas Gampe | 0760a81 | 2015-08-26 17:12:51 -0700 | [diff] [blame] | 301 | uint32_t GetEncounteredFailureTypes() { |
| 302 | return encountered_failure_types_; |
| 303 | } |
| 304 | |
Andreas Gampe | e6215c0 | 2015-08-31 18:54:38 -0700 | [diff] [blame] | 305 | bool IsInstanceConstructor() const { |
| 306 | return IsConstructor() && !IsStatic(); |
| 307 | } |
| 308 | |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 309 | ScopedArenaAllocator& GetArena() { |
| 310 | return arena_; |
| 311 | } |
| 312 | |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 313 | private: |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 314 | void UninstantiableError(const char* descriptor); |
| 315 | static bool IsInstantiableOrPrimitive(mirror::Class* klass) SHARED_REQUIRES(Locks::mutator_lock_); |
| 316 | |
Andreas Gampe | e6215c0 | 2015-08-31 18:54:38 -0700 | [diff] [blame] | 317 | // Is the method being verified a constructor? See the comment on the field. |
| 318 | bool IsConstructor() const { |
| 319 | return is_constructor_; |
| 320 | } |
| 321 | |
| 322 | // Is the method verified static? |
| 323 | bool IsStatic() const { |
| 324 | return (method_access_flags_ & kAccStatic) != 0; |
| 325 | } |
| 326 | |
Andreas Gampe | 2ed8def | 2014-08-28 14:41:02 -0700 | [diff] [blame] | 327 | // Private constructor for dumping. |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 328 | MethodVerifier(Thread* self, |
| 329 | const DexFile* dex_file, |
| 330 | Handle<mirror::DexCache> dex_cache, |
| 331 | Handle<mirror::ClassLoader> class_loader, |
| 332 | const DexFile::ClassDef* class_def, |
| 333 | const DexFile::CodeItem* code_item, |
| 334 | uint32_t method_idx, |
| 335 | ArtMethod* method, |
| 336 | uint32_t access_flags, |
| 337 | bool can_load_classes, |
| 338 | bool allow_soft_failures, |
| 339 | bool need_precise_constants, |
| 340 | bool verify_to_dump, |
| 341 | bool allow_thread_suspension) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 342 | SHARED_REQUIRES(Locks::mutator_lock_); |
Andreas Gampe | 2ed8def | 2014-08-28 14:41:02 -0700 | [diff] [blame] | 343 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 344 | // Adds the given string to the beginning of the last failure message. |
| 345 | void PrependToLastFailMessage(std::string); |
| 346 | |
| 347 | // Adds the given string to the end of the last failure message. |
| 348 | void AppendToLastFailMessage(std::string); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 349 | |
Andreas Gampe | 9fcfb8a | 2016-02-04 20:52:54 -0800 | [diff] [blame] | 350 | // Verification result for method(s). Includes a (maximum) failure kind, and (the union of) |
| 351 | // all failure types. |
| 352 | struct FailureData : ValueObject { |
| 353 | FailureKind kind = kNoFailure; |
| 354 | uint32_t types = 0U; |
| 355 | |
| 356 | // Merge src into this. Uses the most severe failure kind, and the union of types. |
| 357 | void Merge(const FailureData& src); |
| 358 | }; |
| 359 | |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 360 | // Verify all direct or virtual methods of a class. The method assumes that the iterator is |
| 361 | // positioned correctly, and the iterator will be updated. |
| 362 | template <bool kDirect> |
Andreas Gampe | 9fcfb8a | 2016-02-04 20:52:54 -0800 | [diff] [blame] | 363 | static FailureData VerifyMethods(Thread* self, |
| 364 | ClassLinker* linker, |
| 365 | const DexFile* dex_file, |
| 366 | const DexFile::ClassDef* class_def, |
| 367 | ClassDataItemIterator* it, |
| 368 | Handle<mirror::DexCache> dex_cache, |
| 369 | Handle<mirror::ClassLoader> class_loader, |
| 370 | CompilerCallbacks* callbacks, |
| 371 | bool allow_soft_failures, |
| 372 | bool log_hard_failures, |
| 373 | bool need_precise_constants, |
| 374 | std::string* error_string) |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 375 | SHARED_REQUIRES(Locks::mutator_lock_); |
| 376 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 377 | /* |
| 378 | * Perform verification on a single method. |
| 379 | * |
| 380 | * We do this in three passes: |
| 381 | * (1) Walk through all code units, determining instruction locations, |
| 382 | * widths, and other characteristics. |
| 383 | * (2) Walk through all code units, performing static checks on |
| 384 | * operands. |
| 385 | * (3) Iterate through the method, checking type safety and looking |
| 386 | * for code flow problems. |
Ian Rogers | e1758fe | 2012-04-19 11:31:15 -0700 | [diff] [blame] | 387 | */ |
Andreas Gampe | 9fcfb8a | 2016-02-04 20:52:54 -0800 | [diff] [blame] | 388 | static FailureData VerifyMethod(Thread* self, uint32_t method_idx, |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 389 | const DexFile* dex_file, |
Andreas Gampe | 5a4b8a2 | 2014-09-11 08:30:08 -0700 | [diff] [blame] | 390 | Handle<mirror::DexCache> dex_cache, |
| 391 | Handle<mirror::ClassLoader> class_loader, |
Ian Rogers | 8b2c0b9 | 2013-09-19 02:56:49 -0700 | [diff] [blame] | 392 | const DexFile::ClassDef* class_def_idx, |
Ian Rogers | 2dd0e2c | 2013-01-24 12:42:14 -0800 | [diff] [blame] | 393 | const DexFile::CodeItem* code_item, |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 394 | ArtMethod* method, |
| 395 | uint32_t method_access_flags, |
Andreas Gampe | 53e32d1 | 2015-12-09 21:03:23 -0800 | [diff] [blame] | 396 | CompilerCallbacks* callbacks, |
Andreas Gampe | ec6e6c1 | 2015-11-05 20:39:56 -0800 | [diff] [blame] | 397 | bool allow_soft_failures, |
| 398 | bool log_hard_failures, |
| 399 | bool need_precise_constants, |
| 400 | std::string* hard_failure_msg) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 401 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | e1758fe | 2012-04-19 11:31:15 -0700 | [diff] [blame] | 402 | |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 403 | void FindLocksAtDexPc() SHARED_REQUIRES(Locks::mutator_lock_); |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 404 | |
Mathieu Chartier | c785344 | 2015-03-27 14:35:38 -0700 | [diff] [blame] | 405 | ArtField* FindAccessedFieldAtDexPc(uint32_t dex_pc) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 406 | SHARED_REQUIRES(Locks::mutator_lock_); |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 407 | |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 408 | ArtMethod* FindInvokedMethodAtDexPc(uint32_t dex_pc) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 409 | SHARED_REQUIRES(Locks::mutator_lock_); |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 410 | |
Jeff Hao | 848f70a | 2014-01-15 13:49:50 -0800 | [diff] [blame] | 411 | SafeMap<uint32_t, std::set<uint32_t>>& FindStringInitMap() |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 412 | SHARED_REQUIRES(Locks::mutator_lock_); |
Jeff Hao | 848f70a | 2014-01-15 13:49:50 -0800 | [diff] [blame] | 413 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 414 | /* |
| 415 | * Compute the width of the instruction at each address in the instruction stream, and store it in |
| 416 | * insn_flags_. Addresses that are in the middle of an instruction, or that are part of switch |
| 417 | * table data, are not touched (so the caller should probably initialize "insn_flags" to zero). |
| 418 | * |
| 419 | * The "new_instance_count_" and "monitor_enter_count_" fields in vdata are also set. |
| 420 | * |
| 421 | * Performs some static checks, notably: |
| 422 | * - opcode of first instruction begins at index 0 |
| 423 | * - only documented instructions may appear |
| 424 | * - each instruction follows the last |
| 425 | * - last byte of last instruction is at (code_length-1) |
| 426 | * |
| 427 | * Logs an error and returns "false" on failure. |
| 428 | */ |
| 429 | bool ComputeWidthsAndCountOps(); |
| 430 | |
| 431 | /* |
| 432 | * Set the "in try" flags for all instructions protected by "try" statements. Also sets the |
| 433 | * "branch target" flags for exception handlers. |
| 434 | * |
| 435 | * Call this after widths have been set in "insn_flags". |
| 436 | * |
| 437 | * Returns "false" if something in the exception table looks fishy, but we're expecting the |
| 438 | * exception table to be somewhat sane. |
| 439 | */ |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 440 | bool ScanTryCatchBlocks() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 441 | |
| 442 | /* |
| 443 | * Perform static verification on all instructions in a method. |
| 444 | * |
| 445 | * Walks through instructions in a method calling VerifyInstruction on each. |
| 446 | */ |
| 447 | bool VerifyInstructions(); |
| 448 | |
| 449 | /* |
| 450 | * Perform static verification on an instruction. |
| 451 | * |
| 452 | * As a side effect, this sets the "branch target" flags in InsnFlags. |
| 453 | * |
| 454 | * "(CF)" items are handled during code-flow analysis. |
| 455 | * |
| 456 | * v3 4.10.1 |
| 457 | * - target of each jump and branch instruction must be valid |
| 458 | * - targets of switch statements must be valid |
| 459 | * - operands referencing constant pool entries must be valid |
| 460 | * - (CF) operands of getfield, putfield, getstatic, putstatic must be valid |
| 461 | * - (CF) operands of method invocation instructions must be valid |
| 462 | * - (CF) only invoke-direct can call a method starting with '<' |
| 463 | * - (CF) <clinit> must never be called explicitly |
| 464 | * - operands of instanceof, checkcast, new (and variants) must be valid |
| 465 | * - new-array[-type] limited to 255 dimensions |
| 466 | * - can't use "new" on an array class |
| 467 | * - (?) limit dimensions in multi-array creation |
| 468 | * - local variable load/store register values must be in valid range |
| 469 | * |
| 470 | * v3 4.11.1.2 |
| 471 | * - branches must be within the bounds of the code array |
| 472 | * - targets of all control-flow instructions are the start of an instruction |
| 473 | * - register accesses fall within range of allocated registers |
| 474 | * - (N/A) access to constant pool must be of appropriate type |
| 475 | * - code does not end in the middle of an instruction |
| 476 | * - execution cannot fall off the end of the code |
| 477 | * - (earlier) for each exception handler, the "try" area must begin and |
| 478 | * end at the start of an instruction (end can be at the end of the code) |
| 479 | * - (earlier) for each exception handler, the handler must start at a valid |
| 480 | * instruction |
| 481 | */ |
| 482 | bool VerifyInstruction(const Instruction* inst, uint32_t code_offset); |
| 483 | |
| 484 | /* Ensure that the register index is valid for this code item. */ |
| 485 | bool CheckRegisterIndex(uint32_t idx); |
| 486 | |
| 487 | /* Ensure that the wide register index is valid for this code item. */ |
| 488 | bool CheckWideRegisterIndex(uint32_t idx); |
| 489 | |
Mathieu Chartier | eb8167a | 2014-05-07 15:43:14 -0700 | [diff] [blame] | 490 | // Perform static checks on a field Get or set instruction. All we do here is ensure that the |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 491 | // field index is in the valid range. |
| 492 | bool CheckFieldIndex(uint32_t idx); |
| 493 | |
| 494 | // Perform static checks on a method invocation instruction. All we do here is ensure that the |
| 495 | // method index is in the valid range. |
| 496 | bool CheckMethodIndex(uint32_t idx); |
| 497 | |
| 498 | // Perform static checks on a "new-instance" instruction. Specifically, make sure the class |
| 499 | // reference isn't for an array class. |
| 500 | bool CheckNewInstance(uint32_t idx); |
| 501 | |
| 502 | /* Ensure that the string index is in the valid range. */ |
| 503 | bool CheckStringIndex(uint32_t idx); |
| 504 | |
| 505 | // Perform static checks on an instruction that takes a class constant. Ensure that the class |
| 506 | // index is in the valid range. |
| 507 | bool CheckTypeIndex(uint32_t idx); |
| 508 | |
| 509 | // Perform static checks on a "new-array" instruction. Specifically, make sure they aren't |
| 510 | // creating an array of arrays that causes the number of dimensions to exceed 255. |
| 511 | bool CheckNewArray(uint32_t idx); |
| 512 | |
| 513 | // Verify an array data table. "cur_offset" is the offset of the fill-array-data instruction. |
| 514 | bool CheckArrayData(uint32_t cur_offset); |
| 515 | |
| 516 | // Verify that the target of a branch instruction is valid. We don't expect code to jump directly |
| 517 | // into an exception handler, but it's valid to do so as long as the target isn't a |
| 518 | // "move-exception" instruction. We verify that in a later stage. |
| 519 | // The dex format forbids certain instructions from branching to themselves. |
Elliott Hughes | 24edeb5 | 2012-06-18 15:29:46 -0700 | [diff] [blame] | 520 | // Updates "insn_flags_", setting the "branch target" flag. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 521 | bool CheckBranchTarget(uint32_t cur_offset); |
| 522 | |
| 523 | // Verify a switch table. "cur_offset" is the offset of the switch instruction. |
Elliott Hughes | 24edeb5 | 2012-06-18 15:29:46 -0700 | [diff] [blame] | 524 | // Updates "insn_flags_", setting the "branch target" flag. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 525 | bool CheckSwitchTargets(uint32_t cur_offset); |
| 526 | |
| 527 | // Check the register indices used in a "vararg" instruction, such as invoke-virtual or |
| 528 | // filled-new-array. |
| 529 | // - vA holds word count (0-5), args[] have values. |
| 530 | // There are some tests we don't do here, e.g. we don't try to verify that invoking a method that |
| 531 | // takes a double is done with consecutive registers. This requires parsing the target method |
| 532 | // signature, which we will be doing later on during the code flow analysis. |
| 533 | bool CheckVarArgRegs(uint32_t vA, uint32_t arg[]); |
| 534 | |
| 535 | // Check the register indices used in a "vararg/range" instruction, such as invoke-virtual/range |
| 536 | // or filled-new-array/range. |
| 537 | // - vA holds word count, vC holds index of first reg. |
| 538 | bool CheckVarArgRangeRegs(uint32_t vA, uint32_t vC); |
| 539 | |
| 540 | // Extract the relative offset from a branch instruction. |
| 541 | // Returns "false" on failure (e.g. this isn't a branch instruction). |
| 542 | bool GetBranchOffset(uint32_t cur_offset, int32_t* pOffset, bool* pConditional, |
| 543 | bool* selfOkay); |
| 544 | |
| 545 | /* Perform detailed code-flow analysis on a single method. */ |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 546 | bool VerifyCodeFlow() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 547 | |
| 548 | // Set the register types for the first instruction in the method based on the method signature. |
| 549 | // This has the side-effect of validating the signature. |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 550 | bool SetTypesFromSignature() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 551 | |
| 552 | /* |
| 553 | * Perform code flow on a method. |
| 554 | * |
| 555 | * The basic strategy is as outlined in v3 4.11.1.2: set the "changed" bit on the first |
| 556 | * instruction, process it (setting additional "changed" bits), and repeat until there are no |
| 557 | * more. |
| 558 | * |
| 559 | * v3 4.11.1.1 |
| 560 | * - (N/A) operand stack is always the same size |
| 561 | * - operand stack [registers] contain the correct types of values |
| 562 | * - local variables [registers] contain the correct types of values |
| 563 | * - methods are invoked with the appropriate arguments |
| 564 | * - fields are assigned using values of appropriate types |
| 565 | * - opcodes have the correct type values in operand registers |
| 566 | * - there is never an uninitialized class instance in a local variable in code protected by an |
| 567 | * exception handler (operand stack is okay, because the operand stack is discarded when an |
| 568 | * exception is thrown) [can't know what's a local var w/o the debug info -- should fall out of |
| 569 | * register typing] |
| 570 | * |
| 571 | * v3 4.11.1.2 |
| 572 | * - execution cannot fall off the end of the code |
| 573 | * |
| 574 | * (We also do many of the items described in the "static checks" sections, because it's easier to |
| 575 | * do them here.) |
| 576 | * |
| 577 | * We need an array of RegType values, one per register, for every instruction. If the method uses |
| 578 | * monitor-enter, we need extra data for every register, and a stack for every "interesting" |
| 579 | * instruction. In theory this could become quite large -- up to several megabytes for a monster |
| 580 | * function. |
| 581 | * |
| 582 | * NOTE: |
| 583 | * The spec forbids backward branches when there's an uninitialized reference in a register. The |
| 584 | * idea is to prevent something like this: |
| 585 | * loop: |
| 586 | * move r1, r0 |
| 587 | * new-instance r0, MyClass |
| 588 | * ... |
| 589 | * if-eq rN, loop // once |
| 590 | * initialize r0 |
| 591 | * |
| 592 | * This leaves us with two different instances, both allocated by the same instruction, but only |
| 593 | * one is initialized. The scheme outlined in v3 4.11.1.4 wouldn't catch this, so they work around |
| 594 | * it by preventing backward branches. We achieve identical results without restricting code |
| 595 | * reordering by specifying that you can't execute the new-instance instruction if a register |
| 596 | * contains an uninitialized instance created by that same instruction. |
| 597 | */ |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 598 | bool CodeFlowVerifyMethod() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 599 | |
| 600 | /* |
| 601 | * Perform verification for a single instruction. |
| 602 | * |
| 603 | * This requires fully decoding the instruction to determine the effect it has on registers. |
| 604 | * |
| 605 | * Finds zero or more following instructions and sets the "changed" flag if execution at that |
| 606 | * point needs to be (re-)evaluated. Register changes are merged into "reg_types_" at the target |
| 607 | * addresses. Does not set or clear any other flags in "insn_flags_". |
| 608 | */ |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 609 | bool CodeFlowVerifyInstruction(uint32_t* start_guess) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 610 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 611 | |
| 612 | // Perform verification of a new array instruction |
Sebastien Hertz | 5243e91 | 2013-05-21 10:55:07 +0200 | [diff] [blame] | 613 | void VerifyNewArray(const Instruction* inst, bool is_filled, bool is_range) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 614 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 615 | |
Jeff Hao | fe1f7c8 | 2013-08-01 14:50:24 -0700 | [diff] [blame] | 616 | // Helper to perform verification on puts of primitive type. |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 617 | void VerifyPrimitivePut(const RegType& target_type, const RegType& insn_type, |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 618 | const uint32_t vregA) SHARED_REQUIRES(Locks::mutator_lock_); |
Jeff Hao | fe1f7c8 | 2013-08-01 14:50:24 -0700 | [diff] [blame] | 619 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 620 | // Perform verification of an aget instruction. The destination register's type will be set to |
| 621 | // be that of component type of the array unless the array type is unknown, in which case a |
| 622 | // bottom type inferred from the type of instruction is used. is_primitive is false for an |
| 623 | // aget-object. |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 624 | void VerifyAGet(const Instruction* inst, const RegType& insn_type, |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 625 | bool is_primitive) SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 626 | |
| 627 | // Perform verification of an aput instruction. |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 628 | void VerifyAPut(const Instruction* inst, const RegType& insn_type, |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 629 | bool is_primitive) SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 630 | |
| 631 | // Lookup instance field and fail for resolution violations |
Mathieu Chartier | c785344 | 2015-03-27 14:35:38 -0700 | [diff] [blame] | 632 | ArtField* GetInstanceField(const RegType& obj_type, int field_idx) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 633 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 634 | |
| 635 | // Lookup static field and fail for resolution violations |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 636 | ArtField* GetStaticField(int field_idx) SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 637 | |
Andreas Gampe | 896df40 | 2014-10-20 22:25:29 -0700 | [diff] [blame] | 638 | // Perform verification of an iget/sget/iput/sput instruction. |
| 639 | enum class FieldAccessType { // private |
| 640 | kAccGet, |
| 641 | kAccPut |
| 642 | }; |
| 643 | template <FieldAccessType kAccType> |
| 644 | void VerifyISFieldAccess(const Instruction* inst, const RegType& insn_type, |
| 645 | bool is_primitive, bool is_static) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 646 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 647 | |
Andreas Gampe | 896df40 | 2014-10-20 22:25:29 -0700 | [diff] [blame] | 648 | template <FieldAccessType kAccType> |
| 649 | void VerifyQuickFieldAccess(const Instruction* inst, const RegType& insn_type, bool is_primitive) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 650 | SHARED_REQUIRES(Locks::mutator_lock_); |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 651 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 652 | // Resolves a class based on an index and performs access checks to ensure the referrer can |
| 653 | // access the resolved class. |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 654 | const RegType& ResolveClassAndCheckAccess(uint32_t class_idx) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 655 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 656 | |
| 657 | /* |
| 658 | * For the "move-exception" instruction at "work_insn_idx_", which must be at an exception handler |
| 659 | * address, determine the Join of all exceptions that can land here. Fails if no matching |
| 660 | * exception handler can be found or if the Join of exception types fails. |
| 661 | */ |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 662 | const RegType& GetCaughtExceptionType() |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 663 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 664 | |
| 665 | /* |
| 666 | * Resolves a method based on an index and performs access checks to ensure |
| 667 | * the referrer can access the resolved method. |
| 668 | * Does not throw exceptions. |
| 669 | */ |
Alex Light | 7268d47 | 2016-01-20 15:50:01 -0800 | [diff] [blame] | 670 | ArtMethod* ResolveMethodAndCheckAccess(uint32_t method_idx, MethodType method_type) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 671 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 672 | |
| 673 | /* |
| 674 | * Verify the arguments to a method. We're executing in "method", making |
| 675 | * a call to the method reference in vB. |
| 676 | * |
| 677 | * If this is a "direct" invoke, we allow calls to <init>. For calls to |
| 678 | * <init>, the first argument may be an uninitialized reference. Otherwise, |
| 679 | * calls to anything starting with '<' will be rejected, as will any |
| 680 | * uninitialized reference arguments. |
| 681 | * |
| 682 | * For non-static method calls, this will verify that the method call is |
| 683 | * appropriate for the "this" argument. |
| 684 | * |
| 685 | * The method reference is in vBBBB. The "is_range" parameter determines |
| 686 | * whether we use 0-4 "args" values or a range of registers defined by |
| 687 | * vAA and vCCCC. |
| 688 | * |
| 689 | * Widening conversions on integers and references are allowed, but |
| 690 | * narrowing conversions are not. |
| 691 | * |
Mathieu Chartier | 2cebb24 | 2015-04-21 16:50:40 -0700 | [diff] [blame] | 692 | * Returns the resolved method on success, null on failure (with *failure |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 693 | * set appropriately). |
| 694 | */ |
Alex Light | 7268d47 | 2016-01-20 15:50:01 -0800 | [diff] [blame] | 695 | ArtMethod* VerifyInvocationArgs(const Instruction* inst, MethodType method_type, bool is_range) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 696 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 697 | |
Andreas Gampe | 95c0bf8 | 2014-06-16 14:06:52 -0700 | [diff] [blame] | 698 | // Similar checks to the above, but on the proto. Will be used when the method cannot be |
| 699 | // resolved. |
| 700 | void VerifyInvocationArgsUnresolvedMethod(const Instruction* inst, MethodType method_type, |
| 701 | bool is_range) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 702 | SHARED_REQUIRES(Locks::mutator_lock_); |
Andreas Gampe | 95c0bf8 | 2014-06-16 14:06:52 -0700 | [diff] [blame] | 703 | |
| 704 | template <class T> |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 705 | ArtMethod* VerifyInvocationArgsFromIterator(T* it, const Instruction* inst, |
Andreas Gampe | 95c0bf8 | 2014-06-16 14:06:52 -0700 | [diff] [blame] | 706 | MethodType method_type, bool is_range, |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 707 | ArtMethod* res_method) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 708 | SHARED_REQUIRES(Locks::mutator_lock_); |
Andreas Gampe | 95c0bf8 | 2014-06-16 14:06:52 -0700 | [diff] [blame] | 709 | |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 710 | ArtMethod* VerifyInvokeVirtualQuickArgs(const Instruction* inst, bool is_range) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 711 | SHARED_REQUIRES(Locks::mutator_lock_); |
Sebastien Hertz | 2d6ba51 | 2013-05-17 11:31:37 +0200 | [diff] [blame] | 712 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 713 | /* |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 714 | * Verify that the target instruction is not "move-exception". It's important that the only way |
| 715 | * to execute a move-exception is as the first instruction of an exception handler. |
| 716 | * Returns "true" if all is well, "false" if the target instruction is move-exception. |
| 717 | */ |
| 718 | bool CheckNotMoveException(const uint16_t* insns, int insn_idx); |
| 719 | |
| 720 | /* |
Stephen Kyle | 9bc6199 | 2014-09-22 13:53:15 +0100 | [diff] [blame] | 721 | * Verify that the target instruction is not "move-result". It is important that we cannot |
| 722 | * branch to move-result instructions, but we have to make this a distinct check instead of |
| 723 | * adding it to CheckNotMoveException, because it is legal to continue into "move-result" |
| 724 | * instructions - as long as the previous instruction was an invoke, which is checked elsewhere. |
| 725 | */ |
| 726 | bool CheckNotMoveResult(const uint16_t* insns, int insn_idx); |
| 727 | |
| 728 | /* |
| 729 | * Verify that the target instruction is not "move-result" or "move-exception". This is to |
| 730 | * be used when checking branch and switch instructions, but not instructions that can |
| 731 | * continue. |
| 732 | */ |
| 733 | bool CheckNotMoveExceptionOrMoveResult(const uint16_t* insns, int insn_idx); |
| 734 | |
| 735 | /* |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 736 | * Control can transfer to "next_insn". Merge the registers from merge_line into the table at |
| 737 | * next_insn, and set the changed flag on the target address if any of the registers were changed. |
Ian Rogers | ebbdd87 | 2014-07-07 23:53:08 -0700 | [diff] [blame] | 738 | * In the case of fall-through, update the merge line on a change as its the working line for the |
| 739 | * next instruction. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 740 | * Returns "false" if an error is encountered. |
| 741 | */ |
Ian Rogers | ebbdd87 | 2014-07-07 23:53:08 -0700 | [diff] [blame] | 742 | bool UpdateRegisters(uint32_t next_insn, RegisterLine* merge_line, bool update_merge_line) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 743 | SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 744 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 745 | // Return the register type for the method. |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 746 | const RegType& GetMethodReturnType() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 747 | |
| 748 | // Get a type representing the declaring class of the method. |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 749 | const RegType& GetDeclaringClass() SHARED_REQUIRES(Locks::mutator_lock_); |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 750 | |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 751 | InstructionFlags* CurrentInsnFlags(); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 752 | |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 753 | const RegType& DetermineCat1Constant(int32_t value, bool precise) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 754 | SHARED_REQUIRES(Locks::mutator_lock_); |
Elliott Hughes | 0a1038b | 2012-06-14 16:24:17 -0700 | [diff] [blame] | 755 | |
Andreas Gampe | f23f33d | 2015-06-23 14:18:17 -0700 | [diff] [blame] | 756 | // Try to create a register type from the given class. In case a precise type is requested, but |
| 757 | // the class is not instantiable, a soft error (of type NO_CLASS) will be enqueued and a |
| 758 | // non-precise reference will be returned. |
| 759 | // Note: we reuse NO_CLASS as this will throw an exception at runtime, when the failing class is |
| 760 | // actually touched. |
| 761 | const RegType& FromClass(const char* descriptor, mirror::Class* klass, bool precise) |
Mathieu Chartier | 9044347 | 2015-07-16 20:32:27 -0700 | [diff] [blame] | 762 | SHARED_REQUIRES(Locks::mutator_lock_); |
Andreas Gampe | f23f33d | 2015-06-23 14:18:17 -0700 | [diff] [blame] | 763 | |
Ian Rogers | 7b078e8 | 2014-09-10 14:44:24 -0700 | [diff] [blame] | 764 | // The thread we're verifying on. |
| 765 | Thread* const self_; |
| 766 | |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 767 | // Arena allocator. |
| 768 | ArenaStack arena_stack_; |
| 769 | ScopedArenaAllocator arena_; |
| 770 | |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 771 | RegTypeCache reg_types_; |
| 772 | |
| 773 | PcToRegisterLineTable reg_table_; |
| 774 | |
| 775 | // Storage for the register status we're currently working on. |
Mathieu Chartier | 361e04a | 2016-02-16 14:06:35 -0800 | [diff] [blame^] | 776 | RegisterLineArenaUniquePtr work_line_; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 777 | |
| 778 | // The address of the instruction we're currently working on, note that this is in 2 byte |
| 779 | // quantities |
| 780 | uint32_t work_insn_idx_; |
| 781 | |
| 782 | // Storage for the register status we're saving for later. |
Mathieu Chartier | 361e04a | 2016-02-16 14:06:35 -0800 | [diff] [blame^] | 783 | RegisterLineArenaUniquePtr saved_line_; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 784 | |
Ian Rogers | 637c65b | 2013-05-31 11:46:00 -0700 | [diff] [blame] | 785 | const uint32_t dex_method_idx_; // The method we're working on. |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 786 | // Its object representation if known. |
Mathieu Chartier | e401d14 | 2015-04-22 13:56:20 -0700 | [diff] [blame] | 787 | ArtMethod* mirror_method_ GUARDED_BY(Locks::mutator_lock_); |
Ian Rogers | 637c65b | 2013-05-31 11:46:00 -0700 | [diff] [blame] | 788 | const uint32_t method_access_flags_; // Method's access flags. |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 789 | const RegType* return_type_; // Lazily computed return type of the method. |
Ian Rogers | 637c65b | 2013-05-31 11:46:00 -0700 | [diff] [blame] | 790 | const DexFile* const dex_file_; // The dex file containing the method. |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 791 | // The dex_cache for the declaring class of the method. |
Andreas Gampe | 5a4b8a2 | 2014-09-11 08:30:08 -0700 | [diff] [blame] | 792 | Handle<mirror::DexCache> dex_cache_ GUARDED_BY(Locks::mutator_lock_); |
Ian Rogers | 00f7d0e | 2012-07-19 15:28:27 -0700 | [diff] [blame] | 793 | // The class loader for the declaring class of the method. |
Andreas Gampe | 5a4b8a2 | 2014-09-11 08:30:08 -0700 | [diff] [blame] | 794 | Handle<mirror::ClassLoader> class_loader_ GUARDED_BY(Locks::mutator_lock_); |
Ian Rogers | 8b2c0b9 | 2013-09-19 02:56:49 -0700 | [diff] [blame] | 795 | const DexFile::ClassDef* const class_def_; // The class def of the declaring class of the method. |
Ian Rogers | 637c65b | 2013-05-31 11:46:00 -0700 | [diff] [blame] | 796 | const DexFile::CodeItem* const code_item_; // The code item containing the code for the method. |
Ian Rogers | d8f69b0 | 2014-09-10 21:43:52 +0000 | [diff] [blame] | 797 | const RegType* declaring_class_; // Lazily computed reg type of the method's declaring class. |
Ian Rogers | 7b3ddd2 | 2013-02-21 15:19:52 -0800 | [diff] [blame] | 798 | // Instruction widths and flags, one entry per code unit. |
Mathieu Chartier | de40d47 | 2015-10-15 17:47:48 -0700 | [diff] [blame] | 799 | // Owned, but not unique_ptr since insn_flags_ are allocated in arenas. |
| 800 | ArenaUniquePtr<InstructionFlags[]> insn_flags_; |
Sebastien Hertz | c15853b | 2013-06-25 17:36:27 +0200 | [diff] [blame] | 801 | // The dex PC of a FindLocksAtDexPc request, -1 otherwise. |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 802 | uint32_t interesting_dex_pc_; |
| 803 | // The container into which FindLocksAtDexPc should write the registers containing held locks, |
Mathieu Chartier | 2cebb24 | 2015-04-21 16:50:40 -0700 | [diff] [blame] | 804 | // null if we're not doing FindLocksAtDexPc. |
Elliott Hughes | 08fc03a | 2012-06-26 17:34:00 -0700 | [diff] [blame] | 805 | std::vector<uint32_t>* monitor_enter_dex_pcs_; |
| 806 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 807 | // The types of any error that occurs. |
| 808 | std::vector<VerifyError> failures_; |
| 809 | // Error messages associated with failures. |
| 810 | std::vector<std::ostringstream*> failure_messages_; |
| 811 | // Is there a pending hard failure? |
| 812 | bool have_pending_hard_failure_; |
jeffhao | faf459e | 2012-08-31 15:32:47 -0700 | [diff] [blame] | 813 | // Is there a pending runtime throw failure? A runtime throw failure is when an instruction |
| 814 | // would fail at runtime throwing an exception. Such an instruction causes the following code |
| 815 | // to be unreachable. This is set by Fail and used to ensure we don't process unreachable |
| 816 | // instructions that would hard fail the verification. |
Andreas Gampe | d12e782 | 2015-06-25 10:26:40 -0700 | [diff] [blame] | 817 | // Note: this flag is reset after processing each instruction. |
jeffhao | faf459e | 2012-08-31 15:32:47 -0700 | [diff] [blame] | 818 | bool have_pending_runtime_throw_failure_; |
Igor Murashkin | 4d7b75f | 2015-07-21 17:03:36 -0700 | [diff] [blame] | 819 | // Is there a pending experimental failure? |
| 820 | bool have_pending_experimental_failure_; |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 821 | |
Andreas Gampe | d12e782 | 2015-06-25 10:26:40 -0700 | [diff] [blame] | 822 | // A version of the above that is not reset and thus captures if there were *any* throw failures. |
| 823 | bool have_any_pending_runtime_throw_failure_; |
| 824 | |
Ian Rogers | ad0b3a3 | 2012-04-16 14:50:24 -0700 | [diff] [blame] | 825 | // Info message log use primarily for verifier diagnostics. |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 826 | std::ostringstream info_messages_; |
| 827 | |
| 828 | // The number of occurrences of specific opcodes. |
| 829 | size_t new_instance_count_; |
| 830 | size_t monitor_enter_count_; |
Elliott Hughes | 80537bb | 2013-01-04 16:37:26 -0800 | [diff] [blame] | 831 | |
Andreas Gampe | 0760a81 | 2015-08-26 17:12:51 -0700 | [diff] [blame] | 832 | // Bitset of the encountered failure types. Bits are according to the values in VerifyError. |
| 833 | uint32_t encountered_failure_types_; |
| 834 | |
Elliott Hughes | 80537bb | 2013-01-04 16:37:26 -0800 | [diff] [blame] | 835 | const bool can_load_classes_; |
Jeff Hao | ee98895 | 2013-04-16 14:23:47 -0700 | [diff] [blame] | 836 | |
| 837 | // Converts soft failures to hard failures when false. Only false when the compiler isn't |
| 838 | // running and the verifier is called from the class linker. |
| 839 | const bool allow_soft_failures_; |
Sebastien Hertz | 4d4adb1 | 2013-07-24 16:14:19 +0200 | [diff] [blame] | 840 | |
Ian Rogers | 46960fe | 2014-05-23 10:43:43 -0700 | [diff] [blame] | 841 | // An optimization where instead of generating unique RegTypes for constants we use imprecise |
| 842 | // constants that cover a range of constants. This isn't good enough for deoptimization that |
| 843 | // avoids loading from registers in the case of a constant as the dex instruction set lost the |
| 844 | // notion of whether a value should be in a floating point or general purpose register file. |
| 845 | const bool need_precise_constants_; |
| 846 | |
Ian Rogers | a9a8254 | 2013-10-04 11:17:26 -0700 | [diff] [blame] | 847 | // Indicates the method being verified contains at least one check-cast or aput-object |
| 848 | // instruction. Aput-object operations implicitly check for array-store exceptions, similar to |
| 849 | // check-cast. |
Sebastien Hertz | 4d4adb1 | 2013-07-24 16:14:19 +0200 | [diff] [blame] | 850 | bool has_check_casts_; |
| 851 | |
Ian Rogers | a9a8254 | 2013-10-04 11:17:26 -0700 | [diff] [blame] | 852 | // Indicates the method being verified contains at least one invoke-virtual/range |
Sebastien Hertz | 4d4adb1 | 2013-07-24 16:14:19 +0200 | [diff] [blame] | 853 | // or invoke-interface/range. |
| 854 | bool has_virtual_or_interface_invokes_; |
Andreas Gampe | 2ed8def | 2014-08-28 14:41:02 -0700 | [diff] [blame] | 855 | |
| 856 | // Indicates whether we verify to dump the info. In that case we accept quickened instructions |
| 857 | // even though we might detect to be a compiler. Should only be set when running |
| 858 | // VerifyMethodAndDump. |
| 859 | const bool verify_to_dump_; |
Ian Rogers | 8e1f4f8 | 2014-11-05 11:07:30 -0800 | [diff] [blame] | 860 | |
Mathieu Chartier | 4306ef8 | 2014-12-19 18:41:47 -0800 | [diff] [blame] | 861 | // Whether or not we call AllowThreadSuspension periodically, we want a way to disable this for |
| 862 | // thread dumping checkpoints since we may get thread suspension at an inopportune time due to |
| 863 | // FindLocksAtDexPC, resulting in deadlocks. |
| 864 | const bool allow_thread_suspension_; |
| 865 | |
Andreas Gampe | e6215c0 | 2015-08-31 18:54:38 -0700 | [diff] [blame] | 866 | // Whether the method seems to be a constructor. Note that this field exists as we can't trust |
| 867 | // the flags in the dex file. Some older code does not mark methods named "<init>" and "<clinit>" |
| 868 | // correctly. |
| 869 | // |
| 870 | // Note: this flag is only valid once Verify() has started. |
| 871 | bool is_constructor_; |
| 872 | |
Mathieu Chartier | d0ad2ee | 2015-03-31 14:59:59 -0700 | [diff] [blame] | 873 | // Link, for the method verifier root linked list. |
| 874 | MethodVerifier* link_; |
| 875 | |
| 876 | friend class art::Thread; |
Jeff Hao | 848f70a | 2014-01-15 13:49:50 -0800 | [diff] [blame] | 877 | |
| 878 | // Map of dex pcs of invocations of java.lang.String.<init> to the set of other registers that |
| 879 | // contain the uninitialized this pointer to that invoke. Will contain no entry if there are |
| 880 | // no other registers. |
| 881 | SafeMap<uint32_t, std::set<uint32_t>> string_init_pc_reg_map_; |
| 882 | |
Ian Rogers | 8e1f4f8 | 2014-11-05 11:07:30 -0800 | [diff] [blame] | 883 | DISALLOW_COPY_AND_ASSIGN(MethodVerifier); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 884 | }; |
jeffhao | e4f0b2a | 2012-08-30 11:18:57 -0700 | [diff] [blame] | 885 | std::ostream& operator<<(std::ostream& os, const MethodVerifier::FailureKind& rhs); |
Ian Rogers | 776ac1f | 2012-04-13 23:36:36 -0700 | [diff] [blame] | 886 | |
| 887 | } // namespace verifier |
| 888 | } // namespace art |
| 889 | |
Brian Carlstrom | fc0e321 | 2013-07-17 14:40:12 -0700 | [diff] [blame] | 890 | #endif // ART_RUNTIME_VERIFIER_METHOD_VERIFIER_H_ |