287 lines
8.8 KiB
C++
287 lines
8.8 KiB
C++
// Copyright 2018 The Chromium Authors
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
#include "base/win/scoped_handle_verifier.h"
|
|
|
|
#include <windows.h>
|
|
|
|
#include <stddef.h>
|
|
|
|
#include <unordered_map>
|
|
#include <utility>
|
|
|
|
#include "base/auto_reset.h"
|
|
#include "base/compiler_specific.h"
|
|
#include "base/debug/alias.h"
|
|
#include "base/debug/stack_trace.h"
|
|
#include "base/memory/raw_ref.h"
|
|
#include "base/synchronization/lock_impl.h"
|
|
#include "base/trace_event/base_tracing.h"
|
|
#include "base/win/base_win_buildflags.h"
|
|
#include "base/win/current_module.h"
|
|
#include "base/win/scoped_handle.h"
|
|
#include "third_party/abseil-cpp/absl/base/attributes.h"
|
|
|
|
extern "C" {
|
|
__declspec(dllexport) void* GetHandleVerifier();
|
|
|
|
void* GetHandleVerifier() {
|
|
return base::win::internal::ScopedHandleVerifier::Get();
|
|
}
|
|
} // extern C
|
|
|
|
namespace base {
|
|
namespace win {
|
|
namespace internal {
|
|
|
|
namespace {
|
|
|
|
ScopedHandleVerifier* g_active_verifier = nullptr;
|
|
ABSL_CONST_INIT thread_local bool closing = false;
|
|
using GetHandleVerifierFn = void* (*)();
|
|
using HandleMap =
|
|
std::unordered_map<HANDLE, ScopedHandleVerifierInfo, HandleHash>;
|
|
using NativeLock = base::internal::LockImpl;
|
|
|
|
NOINLINE void ReportErrorOnScopedHandleOperation(
|
|
const debug::StackTrace& creation_stack,
|
|
HandleOperation operation) {
|
|
auto creation_stack_copy = creation_stack;
|
|
debug::Alias(&creation_stack_copy);
|
|
debug::Alias(&operation);
|
|
CHECK(false) << operation;
|
|
__builtin_unreachable();
|
|
}
|
|
|
|
NOINLINE void ReportErrorOnScopedHandleOperation(
|
|
const debug::StackTrace& creation_stack,
|
|
const ScopedHandleVerifierInfo& other,
|
|
HandleOperation operation) {
|
|
auto other_stack_copy = *other.stack;
|
|
debug::Alias(&other_stack_copy);
|
|
auto creation_stack_copy = creation_stack;
|
|
debug::Alias(&creation_stack_copy);
|
|
debug::Alias(&operation);
|
|
CHECK(false) << operation;
|
|
__builtin_unreachable();
|
|
}
|
|
|
|
} // namespace
|
|
|
|
// Simple automatic locking using a native critical section so it supports
|
|
// recursive locking.
|
|
class AutoNativeLock {
|
|
public:
|
|
explicit AutoNativeLock(NativeLock& lock) : lock_(lock) { lock_->Lock(); }
|
|
|
|
AutoNativeLock(const AutoNativeLock&) = delete;
|
|
AutoNativeLock& operator=(const AutoNativeLock&) = delete;
|
|
|
|
~AutoNativeLock() { lock_->Unlock(); }
|
|
|
|
private:
|
|
const raw_ref<NativeLock> lock_;
|
|
};
|
|
|
|
ScopedHandleVerifierInfo::ScopedHandleVerifierInfo(
|
|
const void* owner,
|
|
const void* pc1,
|
|
const void* pc2,
|
|
std::unique_ptr<debug::StackTrace> stack,
|
|
DWORD thread_id)
|
|
: owner(owner),
|
|
pc1(pc1),
|
|
pc2(pc2),
|
|
stack(std::move(stack)),
|
|
thread_id(thread_id) {}
|
|
|
|
ScopedHandleVerifierInfo::~ScopedHandleVerifierInfo() = default;
|
|
|
|
ScopedHandleVerifierInfo::ScopedHandleVerifierInfo(
|
|
ScopedHandleVerifierInfo&&) noexcept = default;
|
|
ScopedHandleVerifierInfo& ScopedHandleVerifierInfo::operator=(
|
|
ScopedHandleVerifierInfo&&) noexcept = default;
|
|
|
|
ScopedHandleVerifier::ScopedHandleVerifier(bool enabled)
|
|
: enabled_(enabled), lock_(GetLock()) {}
|
|
|
|
// static
|
|
ScopedHandleVerifier* ScopedHandleVerifier::Get() {
|
|
if (!g_active_verifier)
|
|
ScopedHandleVerifier::InstallVerifier();
|
|
|
|
return g_active_verifier;
|
|
}
|
|
|
|
bool CloseHandleWrapper(HANDLE handle) {
|
|
if (!::CloseHandle(handle))
|
|
CHECK(false) << "CloseHandle failed";
|
|
return true;
|
|
}
|
|
|
|
// Assigns the g_active_verifier global within the ScopedHandleVerifier lock.
|
|
// If |existing_verifier| is non-null then |enabled| is ignored.
|
|
// static
|
|
void ScopedHandleVerifier::ThreadSafeAssignOrCreateScopedHandleVerifier(
|
|
ScopedHandleVerifier* existing_verifier,
|
|
bool enabled) {
|
|
AutoNativeLock lock(*GetLock());
|
|
// Another thread in this module might be trying to assign the global
|
|
// verifier, so check that within the lock here.
|
|
if (g_active_verifier)
|
|
return;
|
|
g_active_verifier =
|
|
existing_verifier ? existing_verifier : new ScopedHandleVerifier(enabled);
|
|
}
|
|
|
|
// static
|
|
void ScopedHandleVerifier::InstallVerifier() {
|
|
#if BUILDFLAG(SINGLE_MODULE_MODE_HANDLE_VERIFIER)
|
|
// Component build has one Active Verifier per module.
|
|
ThreadSafeAssignOrCreateScopedHandleVerifier(nullptr, true);
|
|
#else
|
|
// If you are reading this, wondering why your process seems deadlocked, take
|
|
// a look at your DllMain code and remove things that should not be done
|
|
// there, like doing whatever gave you that nice windows handle you are trying
|
|
// to store in a ScopedHandle.
|
|
HMODULE main_module = ::GetModuleHandle(NULL);
|
|
GetHandleVerifierFn get_handle_verifier =
|
|
reinterpret_cast<GetHandleVerifierFn>(
|
|
::GetProcAddress(main_module, "GetHandleVerifier"));
|
|
|
|
// This should only happen if running in a DLL is linked with base but the
|
|
// hosting EXE is not. In this case, create a ScopedHandleVerifier for the
|
|
// current module but leave it disabled.
|
|
if (!get_handle_verifier) {
|
|
ThreadSafeAssignOrCreateScopedHandleVerifier(nullptr, false);
|
|
return;
|
|
}
|
|
|
|
// Check if in the main module.
|
|
if (get_handle_verifier == GetHandleVerifier) {
|
|
ThreadSafeAssignOrCreateScopedHandleVerifier(nullptr, true);
|
|
return;
|
|
}
|
|
|
|
ScopedHandleVerifier* main_module_verifier =
|
|
reinterpret_cast<ScopedHandleVerifier*>(get_handle_verifier());
|
|
|
|
// Main module should always on-demand create a verifier.
|
|
DCHECK(main_module_verifier);
|
|
|
|
ThreadSafeAssignOrCreateScopedHandleVerifier(main_module_verifier, false);
|
|
#endif
|
|
}
|
|
|
|
bool ScopedHandleVerifier::CloseHandle(HANDLE handle) {
|
|
if (!enabled_)
|
|
return CloseHandleWrapper(handle);
|
|
|
|
const AutoReset<bool> resetter(&closing, true);
|
|
CloseHandleWrapper(handle);
|
|
|
|
return true;
|
|
}
|
|
|
|
// static
|
|
NativeLock* ScopedHandleVerifier::GetLock() {
|
|
static auto* native_lock = new NativeLock();
|
|
return native_lock;
|
|
}
|
|
|
|
void ScopedHandleVerifier::StartTracking(HANDLE handle,
|
|
const void* owner,
|
|
const void* pc1,
|
|
const void* pc2) {
|
|
if (enabled_)
|
|
StartTrackingImpl(handle, owner, pc1, pc2);
|
|
}
|
|
|
|
void ScopedHandleVerifier::StopTracking(HANDLE handle,
|
|
const void* owner,
|
|
const void* pc1,
|
|
const void* pc2) {
|
|
if (enabled_)
|
|
StopTrackingImpl(handle, owner, pc1, pc2);
|
|
}
|
|
|
|
void ScopedHandleVerifier::Disable() {
|
|
enabled_ = false;
|
|
}
|
|
|
|
void ScopedHandleVerifier::OnHandleBeingClosed(HANDLE handle,
|
|
HandleOperation operation) {
|
|
if (enabled_)
|
|
OnHandleBeingClosedImpl(handle, operation);
|
|
}
|
|
|
|
HMODULE ScopedHandleVerifier::GetModule() const {
|
|
return CURRENT_MODULE();
|
|
}
|
|
|
|
NOINLINE void ScopedHandleVerifier::StartTrackingImpl(HANDLE handle,
|
|
const void* owner,
|
|
const void* pc1,
|
|
const void* pc2) {
|
|
// Grab the thread id before the lock.
|
|
DWORD thread_id = GetCurrentThreadId();
|
|
|
|
// Grab the thread stacktrace before the lock.
|
|
auto stacktrace = std::make_unique<debug::StackTrace>();
|
|
|
|
AutoNativeLock lock(*lock_);
|
|
std::pair<HandleMap::iterator, bool> result = map_.emplace(
|
|
handle, ScopedHandleVerifierInfo{owner, pc1, pc2, std::move(stacktrace),
|
|
thread_id});
|
|
if (!result.second) {
|
|
// Attempt to start tracking already tracked handle.
|
|
ReportErrorOnScopedHandleOperation(creation_stack_, result.first->second,
|
|
HandleOperation::kHandleAlreadyTracked);
|
|
}
|
|
}
|
|
|
|
NOINLINE void ScopedHandleVerifier::StopTrackingImpl(HANDLE handle,
|
|
const void* owner,
|
|
const void* pc1,
|
|
const void* pc2) {
|
|
AutoNativeLock lock(*lock_);
|
|
HandleMap::iterator i = map_.find(handle);
|
|
if (i == map_.end()) {
|
|
// Attempting to close an untracked handle.
|
|
ReportErrorOnScopedHandleOperation(creation_stack_,
|
|
HandleOperation::kCloseHandleNotTracked);
|
|
}
|
|
|
|
if (i->second.owner != owner) {
|
|
// Attempting to close a handle not owned by opener.
|
|
ReportErrorOnScopedHandleOperation(creation_stack_, i->second,
|
|
HandleOperation::kCloseHandleNotOwner);
|
|
}
|
|
|
|
map_.erase(i);
|
|
}
|
|
|
|
NOINLINE void ScopedHandleVerifier::OnHandleBeingClosedImpl(
|
|
HANDLE handle,
|
|
HandleOperation operation) {
|
|
if (closing) {
|
|
return;
|
|
}
|
|
|
|
AutoNativeLock lock(*lock_);
|
|
HandleMap::iterator i = map_.find(handle);
|
|
if (i != map_.end()) {
|
|
// CloseHandle called on tracked handle.
|
|
ReportErrorOnScopedHandleOperation(creation_stack_, i->second, operation);
|
|
}
|
|
}
|
|
|
|
HMODULE GetHandleVerifierModuleForTesting() {
|
|
return g_active_verifier->GetModule();
|
|
}
|
|
|
|
} // namespace internal
|
|
} // namespace win
|
|
} // namespace base
|