1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
|
/* Copyright (C) 2001,2004,2005,2006,2009 Free Software Foundation, Inc.
This file is part of the GNU C Library.
The GNU C Library is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 2.1 of the License, or (at your option) any later version.
The GNU C Library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General Public
License along with the GNU C Library; if not, write to the Free
Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
02111-1307 USA. */
#include <sysdep.h>
#include <jmpbuf-offsets.h>
#include <asm-syntax.h>
.section .rodata.str1.1,"aMS",@progbits,1
.type longjmp_msg,@object
longjmp_msg:
.string "longjmp causes uninitialized stack frame"
.size longjmp_msg, .-longjmp_msg
//#define __longjmp ____longjmp_chk
#ifdef PIC
# define CALL_FAIL leaq longjmp_msg(%rip), %rdi; \
call __GI___fortify_fail
#else
# define CALL_FAIL movq $longjmp_msg, %rdi; \
call __fortify_fail
#endif
#define CHECK_RSP(reg) \
cmpq reg, %rsp; \
jbe .Lok; \
CALL_FAIL; \
.Lok:
/* Jump to the position specified by ENV, causing the
setjmp call there to return VAL, or 1 if VAL is 0.
void __longjmp (__jmp_buf env, int val). */
.text
ENTRY(____longjmp_chk)
/* Restore registers. */
movq (JB_RSP*8)(%rdi),%r8
movq (JB_RBP*8)(%rdi),%r9
movq (JB_PC*8)(%rdi),%rdx
#ifdef PTR_DEMANGLE
PTR_DEMANGLE (%r8)
PTR_DEMANGLE (%r9)
PTR_DEMANGLE (%rdx)
#endif
/* Save function parameters. */
movq %rdi, %r10
movl %esi, %ecx
xorl %eax, %eax
cmpq %r8, %rsp
jbe .Lok
subq $24, %rsp
cfi_adjust_cfa_offset(24)
xorl %edi, %edi
movq %rsp, %rsi
movl $__NR_sigaltstack, %eax
syscall
testl %eax, %eax
movl $0, %eax
leaq 24(%rsp), %rsp
cfi_adjust_cfa_offset(-24)
jne .Lok
movl 8(%rsp), %eax
andl $1, %eax
.Lok:
/* We add unwind information for the target here. */
cfi_def_cfa(%r10, 0)
cfi_register(%rsp,%r8)
cfi_register(%rbp,%r9)
cfi_register(%rip,%rdx)
cfi_offset(%rbx,JB_RBX*8)
cfi_offset(%r12,JB_R12*8)
cfi_offset(%r13,JB_R13*8)
cfi_offset(%r14,JB_R14*8)
cfi_offset(%r15,JB_R15*8)
xchgq %r8, %rsp
cfi_restore(%rsp)
xchgq %r9, %rbp
cfi_restore(%rbp)
movq (JB_RBX*8)(%r10),%rbx
movq (JB_R12*8)(%r10),%r12
movq (JB_R13*8)(%r10),%r13
movq (JB_R14*8)(%r10),%r14
movq (JB_R15*8)(%r10),%r15
cmpq %rsp, %r8
jnbe .Lcheck
/* Set return value for setjmp. */
.Lout: movl %ecx, %eax
jmpq *%rdx
.Lcheck:
testl %eax, %eax
je .Lfail
subq $24, %rsp
cfi_adjust_cfa_offset(24)
xorl %edi, %edi
movq %rsp, %rsi
movl $__NR_sigaltstack, %eax
syscall
addq $24, %rsp
cfi_adjust_cfa_offset(-24)
testl $1, 8(%rsp)
je .Lout
.Lfail: xchgq %r8, %rsp
/* We want the stack trace to show that of the caller. */
cfi_def_cfa(%rsp, 8)
cfi_restore(%rsp)
cfi_register(%rbp, %r9)
cfi_restore(%rip)
cfi_restore(%rbx)
cfi_restore(%r12)
cfi_restore(%r13)
cfi_restore(%r14)
cfi_restore(%r15)
xchgq %r9, %rbp
cfi_restore(%rbp)
CALL_FAIL
hlt
END (BP_SYM (____longjmp_chk))
|
