| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 // This is the Android-specific content linker, a tiny shared library | |
| 6 // implementing a custom dynamic linker that can be used to load the | |
| 7 // real content-based libraries (e.g. libcontentshell.so). | |
| 8 | |
| 9 // The main point of this linker is to be able to share the RELRO | |
| 10 // section of libcontentshell.so (or equivalent) between the browser and | |
| 11 // renderer process. | |
| 12 | |
| 13 // This source code *cannot* depend on anything from base/ or the C++ | |
| 14 // STL, to keep the final library small, and avoid ugly dependency issues. | |
| 15 | |
| 16 #include <android/log.h> | |
| 17 #include <crazy_linker.h> | |
| 18 #include <jni.h> | |
| 19 #include <stdlib.h> | |
| 20 #include <unistd.h> | |
| 21 | |
| 22 // Set this to 1 to enable debug traces to the Android log. | |
| 23 // Note that LOG() from "base/logging.h" cannot be used, since it is | |
| 24 // in base/ which hasn't been loaded yet. | |
| 25 #define DEBUG 0 | |
| 26 | |
| 27 #define TAG "content_android_linker" | |
| 28 | |
| 29 #if DEBUG | |
| 30 #define LOG_INFO(...) __android_log_print(ANDROID_LOG_INFO, TAG, __VA_ARGS__) | |
| 31 #define LOG_ERROR(...) __android_log_print(ANDROID_LOG_ERROR, TAG, __VA_ARGS__) | |
| 32 #else | |
| 33 #define LOG_INFO(...) ((void)0) | |
| 34 #define LOG_ERROR(...) ((void)0) | |
| 35 #endif | |
| 36 | |
| 37 #define UNUSED __attribute__((unused)) | |
| 38 | |
| 39 namespace { | |
| 40 | |
| 41 // A simply scoped UTF String class that can be initialized from | |
| 42 // a Java jstring handle. Modeled like std::string, which cannot | |
| 43 // be used here. | |
| 44 class String { | |
| 45 public: | |
| 46 String(JNIEnv* env, jstring str); | |
| 47 | |
| 48 ~String() { | |
| 49 if (ptr_) | |
| 50 ::free(ptr_); | |
| 51 } | |
| 52 | |
| 53 const char* c_str() const { return ptr_ ? ptr_ : ""; } | |
| 54 size_t size() const { return size_; } | |
| 55 | |
| 56 private: | |
| 57 char* ptr_; | |
| 58 size_t size_; | |
| 59 }; | |
| 60 | |
| 61 String::String(JNIEnv* env, jstring str) { | |
| 62 size_ = env->GetStringUTFLength(str); | |
| 63 ptr_ = static_cast<char*>(::malloc(size_ + 1)); | |
| 64 | |
| 65 // Note: the result contains Java "modified UTF-8" bytes. | |
| 66 // Good enough for the linker though. | |
| 67 const char* bytes = env->GetStringUTFChars(str, NULL); | |
| 68 ::memcpy(ptr_, bytes, size_); | |
| 69 ptr_[size_] = '\0'; | |
| 70 | |
| 71 env->ReleaseStringUTFChars(str, bytes); | |
| 72 } | |
| 73 | |
| 74 // A scoped crazy_library_t that automatically closes the handle | |
| 75 // on scope exit, unless Release() has been called. | |
| 76 class ScopedLibrary { | |
| 77 public: | |
| 78 ScopedLibrary() : lib_(NULL) {} | |
| 79 | |
| 80 ~ScopedLibrary() { | |
| 81 if (lib_) | |
| 82 crazy_library_close(lib_); | |
| 83 } | |
| 84 | |
| 85 crazy_library_t* Get() { return lib_; } | |
| 86 | |
| 87 crazy_library_t** GetPtr() { return &lib_; } | |
| 88 | |
| 89 crazy_library_t* Release() { | |
| 90 crazy_library_t* ret = lib_; | |
| 91 lib_ = NULL; | |
| 92 return ret; | |
| 93 } | |
| 94 | |
| 95 private: | |
| 96 crazy_library_t* lib_; | |
| 97 }; | |
| 98 | |
| 99 // Return a pointer to the base name from an input |path| string. | |
| 100 const char* GetBaseNamePtr(const char* path) { | |
| 101 const char* p = strrchr(path, '/'); | |
| 102 if (p) | |
| 103 return p + 1; | |
| 104 return path; | |
| 105 } | |
| 106 | |
| 107 // Return true iff |address| is a valid address for the target CPU. | |
| 108 bool IsValidAddress(jlong address) { | |
| 109 return static_cast<jlong>(static_cast<size_t>(address)) == address; | |
| 110 } | |
| 111 | |
| 112 // Find the jclass JNI reference corresponding to a given |class_name|. | |
| 113 // |env| is the current JNI environment handle. | |
| 114 // On success, return true and set |*clazz|. | |
| 115 bool InitClassReference(JNIEnv* env, const char* class_name, jclass* clazz) { | |
| 116 *clazz = env->FindClass(class_name); | |
| 117 if (!*clazz) { | |
| 118 LOG_ERROR("Could not find class for %s", class_name); | |
| 119 return false; | |
| 120 } | |
| 121 return true; | |
| 122 } | |
| 123 | |
| 124 // Initialize a jfieldID corresponding to the field of a given |clazz|, | |
| 125 // with name |field_name| and signature |field_sig|. | |
| 126 // |env| is the current JNI environment handle. | |
| 127 // On success, return true and set |*field_id|. | |
| 128 bool InitFieldId(JNIEnv* env, | |
| 129 jclass clazz, | |
| 130 const char* field_name, | |
| 131 const char* field_sig, | |
| 132 jfieldID* field_id) { | |
| 133 *field_id = env->GetFieldID(clazz, field_name, field_sig); | |
| 134 if (!*field_id) { | |
| 135 LOG_ERROR("Could not find ID for field '%s'", field_name); | |
| 136 return false; | |
| 137 } | |
| 138 LOG_INFO( | |
| 139 "%s: Found ID %p for field '%s'", __FUNCTION__, *field_id, field_name); | |
| 140 return true; | |
| 141 } | |
| 142 | |
| 143 // A class used to model the field IDs of the org.chromium.base.Linker | |
| 144 // LibInfo inner class, used to communicate data with the Java side | |
| 145 // of the linker. | |
| 146 struct LibInfo_class { | |
| 147 jfieldID load_address_id; | |
| 148 jfieldID load_size_id; | |
| 149 jfieldID relro_start_id; | |
| 150 jfieldID relro_size_id; | |
| 151 jfieldID relro_fd_id; | |
| 152 | |
| 153 // Initialize an instance. | |
| 154 bool Init(JNIEnv* env) { | |
| 155 jclass clazz; | |
| 156 if (!InitClassReference( | |
| 157 env, "org/chromium/content/app/Linker$LibInfo", &clazz)) { | |
| 158 return false; | |
| 159 } | |
| 160 | |
| 161 return InitFieldId(env, clazz, "mLoadAddress", "J", &load_address_id) && | |
| 162 InitFieldId(env, clazz, "mLoadSize", "J", &load_size_id) && | |
| 163 InitFieldId(env, clazz, "mRelroStart", "J", &relro_start_id) && | |
| 164 InitFieldId(env, clazz, "mRelroSize", "J", &relro_size_id) && | |
| 165 InitFieldId(env, clazz, "mRelroFd", "I", &relro_fd_id); | |
| 166 } | |
| 167 | |
| 168 void SetLoadInfo(JNIEnv* env, | |
| 169 jobject library_info_obj, | |
| 170 size_t load_address, | |
| 171 size_t load_size) { | |
| 172 env->SetLongField(library_info_obj, load_address_id, load_address); | |
| 173 env->SetLongField(library_info_obj, load_size_id, load_size); | |
| 174 } | |
| 175 | |
| 176 // Use this instance to convert a RelroInfo reference into | |
| 177 // a crazy_library_info_t. | |
| 178 void GetRelroInfo(JNIEnv* env, | |
| 179 jobject library_info_obj, | |
| 180 size_t* relro_start, | |
| 181 size_t* relro_size, | |
| 182 int* relro_fd) { | |
| 183 *relro_start = static_cast<size_t>( | |
| 184 env->GetLongField(library_info_obj, relro_start_id)); | |
| 185 | |
| 186 *relro_size = | |
| 187 static_cast<size_t>(env->GetLongField(library_info_obj, relro_size_id)); | |
| 188 | |
| 189 *relro_fd = env->GetIntField(library_info_obj, relro_fd_id); | |
| 190 } | |
| 191 | |
| 192 void SetRelroInfo(JNIEnv* env, | |
| 193 jobject library_info_obj, | |
| 194 size_t relro_start, | |
| 195 size_t relro_size, | |
| 196 int relro_fd) { | |
| 197 env->SetLongField(library_info_obj, relro_start_id, relro_start); | |
| 198 env->SetLongField(library_info_obj, relro_size_id, relro_size); | |
| 199 env->SetIntField(library_info_obj, relro_fd_id, relro_fd); | |
| 200 } | |
| 201 }; | |
| 202 | |
| 203 static LibInfo_class s_lib_info_fields; | |
| 204 | |
| 205 // The linker uses a single crazy_context_t object created on demand. | |
| 206 // There is no need to protect this against concurrent access, locking | |
| 207 // is already handled on the Java side. | |
| 208 static crazy_context_t* s_crazy_context; | |
| 209 | |
| 210 crazy_context_t* GetCrazyContext() { | |
| 211 if (!s_crazy_context) { | |
| 212 // Create new context. | |
| 213 s_crazy_context = crazy_context_create(); | |
| 214 | |
| 215 // Ensure libraries located in the same directory as the linker | |
| 216 // can be loaded before system ones. | |
| 217 crazy_context_add_search_path_for_address( | |
| 218 s_crazy_context, reinterpret_cast<void*>(&s_crazy_context)); | |
| 219 } | |
| 220 | |
| 221 return s_crazy_context; | |
| 222 } | |
| 223 | |
| 224 // Load a library with the content linker. This will also call its | |
| 225 // JNI_OnLoad() method, which shall register its methods. Note that | |
| 226 // lazy native method resolution will _not_ work after this, because | |
| 227 // Dalvik uses the system's dlsym() which won't see the new library, | |
| 228 // so explicit registration is mandatory. | |
| 229 // |env| is the current JNI environment handle. | |
| 230 // |clazz| is the static class handle for org.chromium.base.Linker, | |
| 231 // and is ignored here. | |
| 232 // |library_name| is the library name (e.g. libfoo.so). | |
| 233 // |load_address| is an explicit load address. | |
| 234 // |library_info| is a LibInfo handle used to communicate information | |
| 235 // with the Java side. | |
| 236 // Return true on success. | |
| 237 jboolean LoadLibrary(JNIEnv* env, | |
| 238 jclass clazz, | |
| 239 jstring library_name, | |
| 240 jlong load_address, | |
| 241 jobject lib_info_obj) { | |
| 242 String lib_name(env, library_name); | |
| 243 const char* UNUSED lib_basename = GetBaseNamePtr(lib_name.c_str()); | |
| 244 | |
| 245 crazy_context_t* context = GetCrazyContext(); | |
| 246 | |
| 247 if (!IsValidAddress(load_address)) { | |
| 248 LOG_ERROR("%s: Invalid address 0x%llx", __FUNCTION__, load_address); | |
| 249 return false; | |
| 250 } | |
| 251 | |
| 252 // Set the desired load address (0 means randomize it). | |
| 253 crazy_context_set_load_address(context, static_cast<size_t>(load_address)); | |
| 254 | |
| 255 // Open the library now. | |
| 256 LOG_INFO("%s: Opening shared library: %s", __FUNCTION__, lib_name.c_str()); | |
| 257 | |
| 258 ScopedLibrary library; | |
| 259 if (!crazy_library_open(library.GetPtr(), lib_name.c_str(), context)) { | |
| 260 LOG_ERROR("%s: Could not open %s: %s", | |
| 261 __FUNCTION__, | |
| 262 lib_basename, | |
| 263 crazy_context_get_error(context)); | |
| 264 return false; | |
| 265 } | |
| 266 | |
| 267 crazy_library_info_t info; | |
| 268 if (!crazy_library_get_info(library.Get(), context, &info)) { | |
| 269 LOG_ERROR("%s: Could not get library information for %s: %s", | |
| 270 __FUNCTION__, | |
| 271 lib_basename, | |
| 272 crazy_context_get_error(context)); | |
| 273 return false; | |
| 274 } | |
| 275 | |
| 276 // Release library object to keep it alive after the function returns. | |
| 277 library.Release(); | |
| 278 | |
| 279 s_lib_info_fields.SetLoadInfo( | |
| 280 env, lib_info_obj, info.load_address, info.load_size); | |
| 281 LOG_INFO("%s: Success loading library %s", __FUNCTION__, lib_basename); | |
| 282 return true; | |
| 283 } | |
| 284 | |
| 285 jboolean CreateSharedRelro(JNIEnv* env, | |
| 286 jclass clazz, | |
| 287 jstring library_name, | |
| 288 jlong load_address, | |
| 289 jobject lib_info_obj) { | |
| 290 String lib_name(env, library_name); | |
| 291 | |
| 292 LOG_INFO("%s: Called for %s", __FUNCTION__, lib_name.c_str()); | |
| 293 | |
| 294 if (!IsValidAddress(load_address)) { | |
| 295 LOG_ERROR("%s: Invalid address 0x%llx", __FUNCTION__, load_address); | |
| 296 return false; | |
| 297 } | |
| 298 | |
| 299 ScopedLibrary library; | |
| 300 if (!crazy_library_find_by_name(lib_name.c_str(), library.GetPtr())) { | |
| 301 LOG_ERROR("%s: Could not find %s", __FUNCTION__, lib_name.c_str()); | |
| 302 return false; | |
| 303 } | |
| 304 | |
| 305 crazy_context_t* context = GetCrazyContext(); | |
| 306 size_t relro_start = 0; | |
| 307 size_t relro_size = 0; | |
| 308 int relro_fd = -1; | |
| 309 | |
| 310 if (!crazy_library_create_shared_relro(library.Get(), | |
| 311 context, | |
| 312 static_cast<size_t>(load_address), | |
| 313 &relro_start, | |
| 314 &relro_size, | |
| 315 &relro_fd)) { | |
| 316 LOG_ERROR("%s: Could not create shared RELRO sharing for %s: %s\n", | |
| 317 __FUNCTION__, | |
| 318 lib_name.c_str(), | |
| 319 crazy_context_get_error(context)); | |
| 320 return false; | |
| 321 } | |
| 322 | |
| 323 s_lib_info_fields.SetRelroInfo( | |
| 324 env, lib_info_obj, relro_start, relro_size, relro_fd); | |
| 325 return true; | |
| 326 } | |
| 327 | |
| 328 jboolean UseSharedRelro(JNIEnv* env, | |
| 329 jclass clazz, | |
| 330 jstring library_name, | |
| 331 jobject lib_info_obj) { | |
| 332 String lib_name(env, library_name); | |
| 333 | |
| 334 LOG_INFO("%s: called for %s, lib_info_ref=%p", | |
| 335 __FUNCTION__, | |
| 336 lib_name.c_str(), | |
| 337 lib_info_obj); | |
| 338 | |
| 339 ScopedLibrary library; | |
| 340 if (!crazy_library_find_by_name(lib_name.c_str(), library.GetPtr())) { | |
| 341 LOG_ERROR("%s: Could not find %s", __FUNCTION__, lib_name.c_str()); | |
| 342 return false; | |
| 343 } | |
| 344 | |
| 345 crazy_context_t* context = GetCrazyContext(); | |
| 346 size_t relro_start = 0; | |
| 347 size_t relro_size = 0; | |
| 348 int relro_fd = -1; | |
| 349 s_lib_info_fields.GetRelroInfo( | |
| 350 env, lib_info_obj, &relro_start, &relro_size, &relro_fd); | |
| 351 | |
| 352 LOG_INFO("%s: library=%s relro start=%p size=%p fd=%d", | |
| 353 __FUNCTION__, | |
| 354 lib_name.c_str(), | |
| 355 (void*)relro_start, | |
| 356 (void*)relro_size, | |
| 357 relro_fd); | |
| 358 | |
| 359 if (!crazy_library_use_shared_relro( | |
| 360 library.Get(), context, relro_start, relro_size, relro_fd)) { | |
| 361 LOG_ERROR("%s: Could not use shared RELRO for %s: %s", | |
| 362 __FUNCTION__, | |
| 363 lib_name.c_str(), | |
| 364 crazy_context_get_error(context)); | |
| 365 return false; | |
| 366 } | |
| 367 | |
| 368 LOG_INFO("%s: Library %s using shared RELRO section!", | |
| 369 __FUNCTION__, | |
| 370 lib_name.c_str()); | |
| 371 | |
| 372 return true; | |
| 373 } | |
| 374 | |
| 375 jboolean CanUseSharedRelro(JNIEnv* env, jclass clazz) { | |
| 376 return crazy_system_can_share_relro(); | |
| 377 } | |
| 378 | |
| 379 jlong GetPageSize(JNIEnv* env, jclass clazz) { | |
| 380 jlong result = static_cast<jlong>(sysconf(_SC_PAGESIZE)); | |
| 381 LOG_INFO("%s: System page size is %lld bytes\n", __FUNCTION__, result); | |
| 382 return result; | |
| 383 } | |
| 384 | |
| 385 const JNINativeMethod kNativeMethods[] = { | |
| 386 {"nativeLoadLibrary", | |
| 387 "(" | |
| 388 "Ljava/lang/String;" | |
| 389 "J" | |
| 390 "Lorg/chromium/content/app/Linker$LibInfo;" | |
| 391 ")" | |
| 392 "Z", | |
| 393 reinterpret_cast<void*>(&LoadLibrary)}, | |
| 394 {"nativeCreateSharedRelro", | |
| 395 "(" | |
| 396 "Ljava/lang/String;" | |
| 397 "J" | |
| 398 "Lorg/chromium/content/app/Linker$LibInfo;" | |
| 399 ")" | |
| 400 "Z", | |
| 401 reinterpret_cast<void*>(&CreateSharedRelro)}, | |
| 402 {"nativeUseSharedRelro", | |
| 403 "(" | |
| 404 "Ljava/lang/String;" | |
| 405 "Lorg/chromium/content/app/Linker$LibInfo;" | |
| 406 ")" | |
| 407 "Z", | |
| 408 reinterpret_cast<void*>(&UseSharedRelro)}, | |
| 409 {"nativeCanUseSharedRelro", | |
| 410 "(" | |
| 411 ")" | |
| 412 "Z", | |
| 413 reinterpret_cast<void*>(&CanUseSharedRelro)}, | |
| 414 {"nativeGetPageSize", | |
| 415 "(" | |
| 416 ")" | |
| 417 "J", | |
| 418 reinterpret_cast<void*>(&GetPageSize)}, }; | |
| 419 | |
| 420 } // namespace | |
| 421 | |
| 422 // JNI_OnLoad() hook called when the linker library is loaded through | |
| 423 // the regular System.LoadLibrary) API. This shall save the Java VM | |
| 424 // handle and initialize LibInfo fields. | |
| 425 jint JNI_OnLoad(JavaVM* vm, void* reserved) { | |
| 426 LOG_INFO("%s: Entering", __FUNCTION__); | |
| 427 // Get new JNIEnv | |
| 428 JNIEnv* env; | |
| 429 if (JNI_OK != vm->GetEnv(reinterpret_cast<void**>(&env), JNI_VERSION_1_4)) { | |
| 430 LOG_ERROR("Could not create JNIEnv"); | |
| 431 return -1; | |
| 432 } | |
| 433 | |
| 434 // Register native methods. | |
| 435 jclass linker_class; | |
| 436 if (!InitClassReference( | |
| 437 env, "org/chromium/content/app/Linker", &linker_class)) | |
| 438 return -1; | |
| 439 | |
| 440 LOG_INFO("%s: Registering native methods", __FUNCTION__); | |
| 441 env->RegisterNatives(linker_class, | |
| 442 kNativeMethods, | |
| 443 sizeof(kNativeMethods) / sizeof(kNativeMethods[0])); | |
| 444 | |
| 445 // Find LibInfo field ids. | |
| 446 LOG_INFO("%s: Caching field IDs", __FUNCTION__); | |
| 447 if (!s_lib_info_fields.Init(env)) { | |
| 448 return -1; | |
| 449 } | |
| 450 | |
| 451 // Save JavaVM* handle into context. | |
| 452 crazy_context_t* context = GetCrazyContext(); | |
| 453 crazy_context_set_java_vm(context, vm, JNI_VERSION_1_4); | |
| 454 | |
| 455 LOG_INFO("%s: Done", __FUNCTION__); | |
| 456 return JNI_VERSION_1_4; | |
| 457 } | |
| OLD | NEW |