| /* |
| * Copyright 2005-2006 Sun Microsystems, Inc. All Rights Reserved. |
| * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
| * |
| * This code is free software; you can redistribute it and/or modify it |
| * under the terms of the GNU General Public License version 2 only, as |
| * published by the Free Software Foundation. Sun designates this |
| * particular file as subject to the "Classpath" exception as provided |
| * by Sun in the LICENSE file that accompanied this code. |
| * |
| * This code is distributed in the hope that it will be useful, but WITHOUT |
| * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
| * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
| * version 2 for more details (a copy is included in the LICENSE file that |
| * accompanied this code). |
| * |
| * You should have received a copy of the GNU General Public License version |
| * 2 along with this work; if not, write to the Free Software Foundation, |
| * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
| * |
| * Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, |
| * CA 95054 USA or visit www.sun.com if you need additional information or |
| * have any questions. |
| */ |
| #include <windows.h> |
| #include <string.h> |
| |
| #include "jni.h" |
| #include "jni_util.h" |
| |
| #include "sun_tools_attach_WindowsVirtualMachine.h" |
| |
| |
| /* kernel32 */ |
| typedef HINSTANCE (WINAPI* LoadLibraryFunc) (LPCTSTR); |
| typedef FARPROC (WINAPI* GetProcAddressFunc)(HMODULE, LPCSTR); |
| |
| /* only on Windows 64-bit or 32-bit application running under WOW64 */ |
| typedef BOOL (WINAPI *IsWow64ProcessFunc) (HANDLE, PBOOL); |
| |
| static LoadLibraryFunc _LoadLibrary; |
| static GetProcAddressFunc _GetProcAddress; |
| static IsWow64ProcessFunc _IsWow64Process; |
| |
| /* psapi */ |
| typedef BOOL (WINAPI *EnumProcessModulesFunc) (HANDLE, HMODULE *, DWORD, LPDWORD ); |
| typedef DWORD (WINAPI *GetModuleFileNameExFunc) ( HANDLE, HMODULE, LPTSTR, DWORD ); |
| |
| /* exported function in target VM */ |
| typedef jint (WINAPI* EnqueueOperationFunc) |
| (const char* cmd, const char* arg1, const char* arg2, const char* arg3, const char* pipename); |
| |
| /* OpenProcess with SE_DEBUG_NAME privilege */ |
| static HANDLE |
| doPrivilegedOpenProcess(DWORD dwDesiredAccess, BOOL bInheritHandle, DWORD dwProcessId); |
| |
| /* convert jstring to C string */ |
| static void jstring_to_cstring(JNIEnv* env, jstring jstr, char* cstr, int len); |
| |
| |
| /* |
| * Data copied to target process |
| */ |
| |
| #define MAX_LIBNAME_LENGTH 16 |
| #define MAX_FUNC_LENGTH 32 |
| #define MAX_CMD_LENGTH 16 |
| #define MAX_ARG_LENGTH 1024 |
| #define MAX_ARGS 3 |
| #define MAX_PIPE_NAME_LENGTH 256 |
| |
| typedef struct { |
| LoadLibraryFunc _LoadLibrary; |
| GetProcAddressFunc _GetProcAddress; |
| char jvmLib[MAX_LIBNAME_LENGTH]; /* "jvm.dll" */ |
| char func1[MAX_FUNC_LENGTH]; |
| char func2[MAX_FUNC_LENGTH]; |
| char cmd[MAX_CMD_LENGTH]; /* "load", "dump", ... */ |
| char arg[MAX_ARGS][MAX_ARG_LENGTH]; /* arguments to command */ |
| char pipename[MAX_PIPE_NAME_LENGTH]; |
| } DataBlock; |
| |
| /* |
| * Return codes from enqueue function executed in target VM |
| */ |
| #define ERR_OPEN_JVM_FAIL 200 |
| #define ERR_GET_ENQUEUE_FUNC_FAIL 201 |
| |
| |
| /* |
| * Code copied to target process |
| */ |
| #pragma check_stack (off) |
| static DWORD WINAPI thread_func(DataBlock *pData) |
| { |
| HINSTANCE h; |
| EnqueueOperationFunc addr; |
| |
| h = pData->_LoadLibrary(pData->jvmLib); |
| if (h == NULL) { |
| return ERR_OPEN_JVM_FAIL; |
| } |
| |
| addr = (EnqueueOperationFunc)(pData->_GetProcAddress(h, pData->func1)); |
| if (addr == NULL) { |
| addr = (EnqueueOperationFunc)(pData->_GetProcAddress(h, pData->func2)); |
| } |
| if (addr == NULL) { |
| return ERR_GET_ENQUEUE_FUNC_FAIL; |
| } |
| |
| /* "null" command - does nothing in the target VM */ |
| if (pData->cmd[0] == '\0') { |
| return 0; |
| } else { |
| return (*addr)(pData->cmd, pData->arg[0], pData->arg[1], pData->arg[2], pData->pipename); |
| } |
| } |
| |
| /* This function marks the end of thread_func. */ |
| static void thread_end (void) { |
| } |
| #pragma check_stack |
| |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: init |
| * Signature: ()V |
| */ |
| JNIEXPORT void JNICALL Java_sun_tools_attach_WindowsVirtualMachine_init |
| (JNIEnv *env, jclass cls) |
| { |
| HINSTANCE h = LoadLibrary("kernel32"); |
| if (h != NULL) { |
| _LoadLibrary = (LoadLibraryFunc) GetProcAddress(h, "LoadLibraryA"); |
| _GetProcAddress = (GetProcAddressFunc)GetProcAddress(h, "GetProcAddress"); |
| _IsWow64Process = (IsWow64ProcessFunc)GetProcAddress(h, "IsWow64Process"); |
| } |
| if (_LoadLibrary == NULL || _GetProcAddress == NULL) { |
| JNU_ThrowInternalError(env, "Unable to get address of LoadLibraryA or GetProcAddress"); |
| } |
| } |
| |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: generateStub |
| * Signature: ()[B |
| */ |
| JNIEXPORT jbyteArray JNICALL Java_sun_tools_attach_WindowsVirtualMachine_generateStub |
| (JNIEnv *env, jclass cls) |
| { |
| /* |
| * We should replace this with a real stub generator at some point |
| */ |
| DWORD len; |
| jbyteArray array; |
| |
| len = (DWORD)((LPBYTE) thread_end - (LPBYTE) thread_func); |
| array= (*env)->NewByteArray(env, (jsize)len); |
| if (array != NULL) { |
| (*env)->SetByteArrayRegion(env, array, 0, (jint)len, (jbyte*)&thread_func); |
| } |
| return array; |
| } |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: openProcess |
| * Signature: (I)J |
| */ |
| JNIEXPORT jlong JNICALL Java_sun_tools_attach_WindowsVirtualMachine_openProcess |
| (JNIEnv *env, jclass cls, jint pid) |
| { |
| HANDLE hProcess; |
| |
| /* |
| * Attempt to open process. If it fails then we try to enable the |
| * SE_DEBUG_NAME privilege and retry. |
| */ |
| hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, (DWORD)pid); |
| if (hProcess == NULL && GetLastError() == ERROR_ACCESS_DENIED) { |
| hProcess = doPrivilegedOpenProcess(PROCESS_ALL_ACCESS, FALSE, (DWORD)pid); |
| } |
| |
| if (hProcess == NULL) { |
| if (GetLastError() == ERROR_INVALID_PARAMETER) { |
| JNU_ThrowIOException(env, "no such process"); |
| } else { |
| JNU_ThrowIOExceptionWithLastError(env, "OpenProcess failed"); |
| } |
| return (jlong)0; |
| } |
| |
| /* |
| * On Windows 64-bit we need to handle 32-bit tools trying to attach to 64-bit |
| * processes (and visa versa). X-architecture attaching is currently not supported |
| * by this implementation. |
| */ |
| if (_IsWow64Process != NULL) { |
| BOOL isCurrent32bit, isTarget32bit; |
| (*_IsWow64Process)(GetCurrentProcess(), &isCurrent32bit); |
| (*_IsWow64Process)(hProcess, &isTarget32bit); |
| |
| if (isCurrent32bit != isTarget32bit) { |
| CloseHandle(hProcess); |
| #ifdef _WIN64 |
| JNU_ThrowByName(env, "com/sun/tools/attach/AttachNotSupportedException", |
| "Unable to attach to 32-bit process running under WOW64"); |
| #else |
| JNU_ThrowByName(env, "com/sun/tools/attach/AttachNotSupportedException", |
| "Unable to attach to 64-bit process"); |
| #endif |
| } |
| } |
| |
| return (jlong)hProcess; |
| } |
| |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: closeProcess |
| * Signature: (J)V |
| */ |
| JNIEXPORT void JNICALL Java_sun_tools_attach_WindowsVirtualMachine_closeProcess |
| (JNIEnv *env, jclass cls, jlong hProcess) |
| { |
| CloseHandle((HANDLE)hProcess); |
| } |
| |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: createPipe |
| * Signature: (Ljava/lang/String;)J |
| */ |
| JNIEXPORT jlong JNICALL Java_sun_tools_attach_WindowsVirtualMachine_createPipe |
| (JNIEnv *env, jclass cls, jstring pipename) |
| { |
| HANDLE hPipe; |
| char name[MAX_PIPE_NAME_LENGTH]; |
| |
| jstring_to_cstring(env, pipename, name, MAX_PIPE_NAME_LENGTH); |
| |
| hPipe = CreateNamedPipe( |
| name, // pipe name |
| PIPE_ACCESS_INBOUND, // read access |
| PIPE_TYPE_BYTE | // byte mode |
| PIPE_READMODE_BYTE | |
| PIPE_WAIT, // blocking mode |
| 1, // max. instances |
| 128, // output buffer size |
| 8192, // input buffer size |
| NMPWAIT_USE_DEFAULT_WAIT, // client time-out |
| NULL); // default security attribute |
| |
| if (hPipe == INVALID_HANDLE_VALUE) { |
| JNU_ThrowIOExceptionWithLastError(env, "CreateNamedPipe failed"); |
| } |
| return (jlong)hPipe; |
| } |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: closePipe |
| * Signature: (J)V |
| */ |
| JNIEXPORT void JNICALL Java_sun_tools_attach_WindowsVirtualMachine_closePipe |
| (JNIEnv *env, jclass cls, jlong hPipe) |
| { |
| CloseHandle( (HANDLE)hPipe ); |
| } |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: connectPipe |
| * Signature: (J)V |
| */ |
| JNIEXPORT void JNICALL Java_sun_tools_attach_WindowsVirtualMachine_connectPipe |
| (JNIEnv *env, jclass cls, jlong hPipe) |
| { |
| BOOL fConnected; |
| |
| fConnected = ConnectNamedPipe((HANDLE)hPipe, NULL) ? |
| TRUE : (GetLastError() == ERROR_PIPE_CONNECTED); |
| if (!fConnected) { |
| JNU_ThrowIOExceptionWithLastError(env, "ConnectNamedPipe failed"); |
| } |
| } |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: readPipe |
| * Signature: (J[BII)I |
| */ |
| JNIEXPORT jint JNICALL Java_sun_tools_attach_WindowsVirtualMachine_readPipe |
| (JNIEnv *env, jclass cls, jlong hPipe, jbyteArray ba, jint off, jint baLen) |
| { |
| unsigned char buf[128]; |
| DWORD len, nread, remaining; |
| BOOL fSuccess; |
| |
| len = sizeof(buf); |
| remaining = (DWORD)(baLen - off); |
| if (len > remaining) { |
| len = remaining; |
| } |
| |
| fSuccess = ReadFile( |
| (HANDLE)hPipe, // handle to pipe |
| buf, // buffer to receive data |
| len, // size of buffer |
| &nread, // number of bytes read |
| NULL); // not overlapped I/O |
| |
| if (!fSuccess) { |
| if (GetLastError() == ERROR_BROKEN_PIPE) { |
| return (jint)-1; |
| } else { |
| JNU_ThrowIOExceptionWithLastError(env, "ReadFile"); |
| } |
| } else { |
| if (nread == 0) { |
| return (jint)-1; // EOF |
| } else { |
| (*env)->SetByteArrayRegion(env, ba, off, (jint)nread, (jbyte *)(buf+off)); |
| } |
| } |
| |
| return (jint)nread; |
| } |
| |
| |
| /* |
| * Class: sun_tools_attach_WindowsVirtualMachine |
| * Method: enqueue |
| * Signature: (JZLjava/lang/String;[Ljava/lang/Object;)V |
| */ |
| JNIEXPORT void JNICALL Java_sun_tools_attach_WindowsVirtualMachine_enqueue |
| (JNIEnv *env, jclass cls, jlong handle, jbyteArray stub, jstring cmd, |
| jstring pipename, jobjectArray args) |
| { |
| DataBlock data; |
| DataBlock* pData; |
| DWORD* pCode; |
| DWORD numBytes; |
| DWORD stubLen; |
| HANDLE hProcess, hThread; |
| jint argsLen, i; |
| jbyte* stubCode; |
| jboolean isCopy; |
| |
| /* |
| * Setup data to copy to target process |
| */ |
| data._LoadLibrary = _LoadLibrary; |
| data._GetProcAddress = _GetProcAddress; |
| |
| strcpy(data.jvmLib, "jvm"); |
| strcpy(data.func1, "JVM_EnqueueOperation"); |
| strcpy(data.func2, "_JVM_EnqueueOperation@20"); |
| |
| /* |
| * Command and arguments |
| */ |
| jstring_to_cstring(env, cmd, data.cmd, MAX_CMD_LENGTH); |
| argsLen = (*env)->GetArrayLength(env, args); |
| |
| if (argsLen > 0) { |
| if (argsLen > MAX_ARGS) { |
| JNU_ThrowInternalError(env, "Too many arguments"); |
| } |
| for (i=0; i<argsLen; i++) { |
| jobject obj = (*env)->GetObjectArrayElement(env, args, i); |
| if (obj == NULL) { |
| data.arg[i][0] = '\0'; |
| } else { |
| jstring_to_cstring(env, obj, data.arg[i], MAX_ARG_LENGTH); |
| } |
| if ((*env)->ExceptionOccurred(env)) return; |
| } |
| } |
| for (i=argsLen; i<MAX_ARGS; i++) { |
| data.arg[i][0] = '\0'; |
| } |
| |
| /* pipe name */ |
| jstring_to_cstring(env, pipename, data.pipename, MAX_PIPE_NAME_LENGTH); |
| |
| /* |
| * Allocate memory in target process for data and code stub |
| * (assumed aligned and matches architecture of target process) |
| */ |
| hProcess = (HANDLE)handle; |
| |
| pData = (DataBlock*) VirtualAllocEx( hProcess, 0, sizeof(DataBlock), MEM_COMMIT, PAGE_READWRITE ); |
| if (pData == NULL) { |
| JNU_ThrowIOExceptionWithLastError(env, "VirtualAllocEx failed"); |
| return; |
| } |
| WriteProcessMemory( hProcess, (LPVOID)pData, (LPVOID)&data, (DWORD)sizeof(DataBlock), &numBytes ); |
| |
| |
| stubLen = (DWORD)(*env)->GetArrayLength(env, stub); |
| stubCode = (*env)->GetByteArrayElements(env, stub, &isCopy); |
| |
| pCode = (PDWORD) VirtualAllocEx( hProcess, 0, stubLen, MEM_COMMIT, PAGE_EXECUTE_READWRITE ); |
| if (pCode == NULL) { |
| JNU_ThrowIOExceptionWithLastError(env, "VirtualAllocEx failed"); |
| VirtualFreeEx(hProcess, pData, 0, MEM_RELEASE); |
| return; |
| } |
| WriteProcessMemory( hProcess, (LPVOID)pCode, (LPVOID)stubCode, (DWORD)stubLen, &numBytes ); |
| if (isCopy) { |
| (*env)->ReleaseByteArrayElements(env, stub, stubCode, JNI_ABORT); |
| } |
| |
| /* |
| * Create thread in target process to execute code |
| */ |
| hThread = CreateRemoteThread( hProcess, |
| NULL, |
| 0, |
| (LPTHREAD_START_ROUTINE) pCode, |
| pData, |
| 0, |
| NULL ); |
| if (hThread != NULL) { |
| if (WaitForSingleObject(hThread, INFINITE) != WAIT_OBJECT_0) { |
| JNU_ThrowIOExceptionWithLastError(env, "WaitForSingleObject failed"); |
| } else { |
| DWORD exitCode; |
| GetExitCodeThread(hThread, &exitCode); |
| if (exitCode) { |
| switch (exitCode) { |
| case ERR_OPEN_JVM_FAIL : |
| JNU_ThrowIOException(env, |
| "jvm.dll not loaded by target process"); |
| break; |
| case ERR_GET_ENQUEUE_FUNC_FAIL : |
| JNU_ThrowIOException(env, |
| "Unable to enqueue operation: the target VM does not support attach mechanism"); |
| break; |
| default : |
| JNU_ThrowInternalError(env, |
| "Remote thread failed for unknown reason"); |
| } |
| } |
| } |
| CloseHandle(hThread); |
| } else { |
| JNU_ThrowIOExceptionWithLastError(env, "CreateRemoteThread failed"); |
| } |
| |
| VirtualFreeEx(hProcess, pCode, 0, MEM_RELEASE); |
| VirtualFreeEx(hProcess, pData, 0, MEM_RELEASE); |
| } |
| |
| /* |
| * Attempts to enable the SE_DEBUG_NAME privilege and open the given process. |
| */ |
| static HANDLE |
| doPrivilegedOpenProcess(DWORD dwDesiredAccess, BOOL bInheritHandle, DWORD dwProcessId) { |
| HANDLE hToken; |
| HANDLE hProcess = NULL; |
| LUID luid; |
| TOKEN_PRIVILEGES tp, tpPrevious; |
| DWORD retLength, error; |
| |
| /* |
| * Get the access token |
| */ |
| if (!OpenThreadToken(GetCurrentThread(), |
| TOKEN_ADJUST_PRIVILEGES|TOKEN_QUERY, |
| FALSE, |
| &hToken)) { |
| if (GetLastError() != ERROR_NO_TOKEN) { |
| return (HANDLE)NULL; |
| } |
| |
| /* |
| * No access token for the thread so impersonate the security context |
| * of the process. |
| */ |
| if (!ImpersonateSelf(SecurityImpersonation)) { |
| return (HANDLE)NULL; |
| } |
| if (!OpenThreadToken(GetCurrentThread(), |
| TOKEN_ADJUST_PRIVILEGES|TOKEN_QUERY, |
| FALSE, |
| &hToken)) { |
| return (HANDLE)NULL; |
| } |
| } |
| |
| /* |
| * Get LUID for the privilege |
| */ |
| if(!LookupPrivilegeValue(NULL, SE_DEBUG_NAME, &luid)) { |
| error = GetLastError(); |
| CloseHandle(hToken); |
| SetLastError(error); |
| return (HANDLE)NULL; |
| } |
| |
| /* |
| * Enable the privilege |
| */ |
| ZeroMemory(&tp, sizeof(tp)); |
| tp.PrivilegeCount = 1; |
| tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED; |
| tp.Privileges[0].Luid = luid; |
| |
| error = 0; |
| if (AdjustTokenPrivileges(hToken, |
| FALSE, |
| &tp, |
| sizeof(TOKEN_PRIVILEGES), |
| &tpPrevious, |
| &retLength)) { |
| /* |
| * If we enabled the privilege then attempt to open the |
| * process. |
| */ |
| if (GetLastError() == ERROR_SUCCESS) { |
| hProcess = OpenProcess(dwDesiredAccess, bInheritHandle, dwProcessId); |
| if (hProcess == NULL) { |
| error = GetLastError(); |
| } |
| } else { |
| error = ERROR_ACCESS_DENIED; |
| } |
| |
| /* |
| * Revert to the previous privileges |
| */ |
| AdjustTokenPrivileges(hToken, |
| FALSE, |
| &tpPrevious, |
| retLength, |
| NULL, |
| NULL); |
| } else { |
| error = GetLastError(); |
| } |
| |
| |
| /* |
| * Close token and restore error |
| */ |
| CloseHandle(hToken); |
| SetLastError(error); |
| |
| return hProcess; |
| } |
| |
| /* convert jstring to C string */ |
| static void jstring_to_cstring(JNIEnv* env, jstring jstr, char* cstr, int len) { |
| jboolean isCopy; |
| const char* str; |
| |
| if (jstr == NULL) { |
| cstr[0] = '\0'; |
| } else { |
| str = JNU_GetStringPlatformChars(env, jstr, &isCopy); |
| strncpy(cstr, str, len); |
| cstr[len-1] = '\0'; |
| if (isCopy) { |
| JNU_ReleaseStringPlatformChars(env, jstr, str); |
| } |
| } |
| } |