Update cmplog-routines-pass.cc (#1589)
This commit is contained in:
Dongjia "toka" Zhang
GitHub
parent
2474691623
commit
d2ff88f6ff
@ -172,12 +172,14 @@ char CmpLogRoutines::ID = 0;
|
|||||||
#endif
|
#endif
|
||||||
|
|
||||||
bool CmpLogRoutines::hookRtns(Module &M) {
|
bool CmpLogRoutines::hookRtns(Module &M) {
|
||||||
std::vector<CallInst *> calls, llvmStdStd, llvmStdC, gccStdStd, gccStdC;
|
std::vector<CallInst *> calls, llvmStdStd, llvmStdC, gccStdStd, gccStdC,
|
||||||
LLVMContext &C = M.getContext();
|
Memcmp, Strcmp, Strncmp;
|
||||||
|
LLVMContext &C = M.getContext();
|
||||||
|
|
||||||
Type *VoidTy = Type::getVoidTy(C);
|
Type *VoidTy = Type::getVoidTy(C);
|
||||||
// PointerType *VoidPtrTy = PointerType::get(VoidTy, 0);
|
// PointerType *VoidPtrTy = PointerType::get(VoidTy, 0);
|
||||||
IntegerType *Int8Ty = IntegerType::getInt8Ty(C);
|
IntegerType *Int8Ty = IntegerType::getInt8Ty(C);
|
||||||
|
IntegerType *Int64Ty = IntegerType::getInt64Ty(C);
|
||||||
PointerType *i8PtrTy = PointerType::get(Int8Ty, 0);
|
PointerType *i8PtrTy = PointerType::get(Int8Ty, 0);
|
||||||
|
|
||||||
#if LLVM_VERSION_MAJOR < 9
|
#if LLVM_VERSION_MAJOR < 9
|
||||||
@ -269,6 +271,60 @@ bool CmpLogRoutines::hookRtns(Module &M) {
|
|||||||
FunctionCallee cmplogGccStdC = c4;
|
FunctionCallee cmplogGccStdC = c4;
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
|
#if LLVM_VERSION_MAJOR >= 9
|
||||||
|
FunctionCallee
|
||||||
|
#else
|
||||||
|
Constant *
|
||||||
|
#endif
|
||||||
|
c5 = M.getOrInsertFunction("__cmplog_rtn_hook_n", VoidTy, i8PtrTy,
|
||||||
|
i8PtrTy, Int64Ty
|
||||||
|
#if LLVM_VERSION_MAJOR < 5
|
||||||
|
,
|
||||||
|
NULL
|
||||||
|
#endif
|
||||||
|
);
|
||||||
|
#if LLVM_VERSION_MAJOR >= 9
|
||||||
|
FunctionCallee cmplogHookFnN = c5;
|
||||||
|
#else
|
||||||
|
Function *cmplogHookFnN = cast<Function>(c5);
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if LLVM_VERSION_MAJOR >= 9
|
||||||
|
FunctionCallee
|
||||||
|
#else
|
||||||
|
Constant *
|
||||||
|
#endif
|
||||||
|
c6 = M.getOrInsertFunction("__cmplog_rtn_hook_strn", VoidTy, i8PtrTy,
|
||||||
|
i8PtrTy, Int64Ty
|
||||||
|
#if LLVM_VERSION_MAJOR < 5
|
||||||
|
,
|
||||||
|
NULL
|
||||||
|
#endif
|
||||||
|
);
|
||||||
|
#if LLVM_VERSION_MAJOR >= 9
|
||||||
|
FunctionCallee cmplogHookFnStrN = c6;
|
||||||
|
#else
|
||||||
|
Function *cmplogHookFnStrN = cast<Function>(c6);
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if LLVM_VERSION_MAJOR >= 9
|
||||||
|
FunctionCallee
|
||||||
|
#else
|
||||||
|
Constant *
|
||||||
|
#endif
|
||||||
|
c7 = M.getOrInsertFunction("__cmplog_rtn_hook_str", VoidTy, i8PtrTy,
|
||||||
|
i8PtrTy
|
||||||
|
#if LLVM_VERSION_MAJOR < 5
|
||||||
|
,
|
||||||
|
NULL
|
||||||
|
#endif
|
||||||
|
);
|
||||||
|
#if LLVM_VERSION_MAJOR >= 9
|
||||||
|
FunctionCallee cmplogHookFnStr = c7;
|
||||||
|
#else
|
||||||
|
Function *cmplogHookFnStr = cast<Function>(c7);
|
||||||
|
#endif
|
||||||
|
|
||||||
/* iterate over all functions, bbs and instruction and add suitable calls */
|
/* iterate over all functions, bbs and instruction and add suitable calls */
|
||||||
for (auto &F : M) {
|
for (auto &F : M) {
|
||||||
if (isIgnoreFunction(&F)) { continue; }
|
if (isIgnoreFunction(&F)) { continue; }
|
||||||
@ -283,12 +339,87 @@ bool CmpLogRoutines::hookRtns(Module &M) {
|
|||||||
if (callInst->getCallingConv() != llvm::CallingConv::C) { continue; }
|
if (callInst->getCallingConv() != llvm::CallingConv::C) { continue; }
|
||||||
|
|
||||||
FunctionType *FT = Callee->getFunctionType();
|
FunctionType *FT = Callee->getFunctionType();
|
||||||
|
std::string FuncName = Callee->getName().str();
|
||||||
|
|
||||||
bool isPtrRtn = FT->getNumParams() >= 2 &&
|
bool isPtrRtn = FT->getNumParams() >= 2 &&
|
||||||
!FT->getReturnType()->isVoidTy() &&
|
!FT->getReturnType()->isVoidTy() &&
|
||||||
FT->getParamType(0) == FT->getParamType(1) &&
|
FT->getParamType(0) == FT->getParamType(1) &&
|
||||||
FT->getParamType(0)->isPointerTy();
|
FT->getParamType(0)->isPointerTy();
|
||||||
|
|
||||||
|
bool isPtrRtnN = FT->getNumParams() >= 3 &&
|
||||||
|
!FT->getReturnType()->isVoidTy() &&
|
||||||
|
FT->getParamType(0) == FT->getParamType(1) &&
|
||||||
|
FT->getParamType(0)->isPointerTy() &&
|
||||||
|
FT->getParamType(2)->isIntegerTy();
|
||||||
|
if (isPtrRtnN) {
|
||||||
|
auto intTyOp =
|
||||||
|
dyn_cast<IntegerType>(callInst->getArgOperand(2)->getType());
|
||||||
|
if (intTyOp) {
|
||||||
|
if (intTyOp->getBitWidth() != 32 &&
|
||||||
|
intTyOp->getBitWidth() != 64) {
|
||||||
|
isPtrRtnN = false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
bool isMemcmp =
|
||||||
|
(!FuncName.compare("memcmp") || !FuncName.compare("bcmp") ||
|
||||||
|
!FuncName.compare("CRYPTO_memcmp") ||
|
||||||
|
!FuncName.compare("OPENSSL_memcmp") ||
|
||||||
|
!FuncName.compare("memcmp_const_time") ||
|
||||||
|
!FuncName.compare("memcmpct"));
|
||||||
|
isMemcmp &= FT->getNumParams() == 3 &&
|
||||||
|
FT->getReturnType()->isIntegerTy(32) &&
|
||||||
|
FT->getParamType(0)->isPointerTy() &&
|
||||||
|
FT->getParamType(1)->isPointerTy() &&
|
||||||
|
FT->getParamType(2)->isIntegerTy();
|
||||||
|
|
||||||
|
bool isStrcmp =
|
||||||
|
(!FuncName.compare("strcmp") || !FuncName.compare("xmlStrcmp") ||
|
||||||
|
!FuncName.compare("xmlStrEqual") ||
|
||||||
|
!FuncName.compare("g_strcmp0") ||
|
||||||
|
!FuncName.compare("curl_strequal") ||
|
||||||
|
!FuncName.compare("strcsequal") ||
|
||||||
|
!FuncName.compare("strcasecmp") ||
|
||||||
|
!FuncName.compare("stricmp") ||
|
||||||
|
!FuncName.compare("ap_cstr_casecmp") ||
|
||||||
|
!FuncName.compare("OPENSSL_strcasecmp") ||
|
||||||
|
!FuncName.compare("xmlStrcasecmp") ||
|
||||||
|
!FuncName.compare("g_strcasecmp") ||
|
||||||
|
!FuncName.compare("g_ascii_strcasecmp") ||
|
||||||
|
!FuncName.compare("Curl_strcasecompare") ||
|
||||||
|
!FuncName.compare("Curl_safe_strcasecompare") ||
|
||||||
|
!FuncName.compare("cmsstrcasecmp") ||
|
||||||
|
!FuncName.compare("strstr") ||
|
||||||
|
!FuncName.compare("g_strstr_len") ||
|
||||||
|
!FuncName.compare("ap_strcasestr") ||
|
||||||
|
!FuncName.compare("xmlStrstr") ||
|
||||||
|
!FuncName.compare("xmlStrcasestr") ||
|
||||||
|
!FuncName.compare("g_str_has_prefix") ||
|
||||||
|
!FuncName.compare("g_str_has_suffix"));
|
||||||
|
isStrcmp &=
|
||||||
|
FT->getNumParams() == 2 && FT->getReturnType()->isIntegerTy(32) &&
|
||||||
|
FT->getParamType(0) == FT->getParamType(1) &&
|
||||||
|
FT->getParamType(0) == IntegerType::getInt8PtrTy(M.getContext());
|
||||||
|
|
||||||
|
bool isStrncmp = (!FuncName.compare("strncmp") ||
|
||||||
|
!FuncName.compare("xmlStrncmp") ||
|
||||||
|
!FuncName.compare("curl_strnequal") ||
|
||||||
|
!FuncName.compare("strncasecmp") ||
|
||||||
|
!FuncName.compare("strnicmp") ||
|
||||||
|
!FuncName.compare("ap_cstr_casecmpn") ||
|
||||||
|
!FuncName.compare("OPENSSL_strncasecmp") ||
|
||||||
|
!FuncName.compare("xmlStrncasecmp") ||
|
||||||
|
!FuncName.compare("g_ascii_strncasecmp") ||
|
||||||
|
!FuncName.compare("Curl_strncasecompare") ||
|
||||||
|
!FuncName.compare("g_strncasecmp"));
|
||||||
|
isStrncmp &= FT->getNumParams() == 3 &&
|
||||||
|
FT->getReturnType()->isIntegerTy(32) &&
|
||||||
|
FT->getParamType(0) == FT->getParamType(1) &&
|
||||||
|
FT->getParamType(0) ==
|
||||||
|
IntegerType::getInt8PtrTy(M.getContext()) &&
|
||||||
|
FT->getParamType(2)->isIntegerTy();
|
||||||
|
|
||||||
bool isGccStdStringStdString =
|
bool isGccStdStringStdString =
|
||||||
Callee->getName().find("__is_charIT_EE7__value") !=
|
Callee->getName().find("__is_charIT_EE7__value") !=
|
||||||
std::string::npos &&
|
std::string::npos &&
|
||||||
@ -336,10 +467,13 @@ bool CmpLogRoutines::hookRtns(Module &M) {
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
if (isGccStdStringCString || isGccStdStringStdString ||
|
if (isGccStdStringCString || isGccStdStringStdString ||
|
||||||
isLlvmStdStringStdString || isLlvmStdStringCString) {
|
isLlvmStdStringStdString || isLlvmStdStringCString || isMemcmp ||
|
||||||
isPtrRtn = false;
|
isStrcmp || isStrncmp) {
|
||||||
|
isPtrRtnN = isPtrRtn = false;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (isPtrRtnN) { isPtrRtn = false; }
|
||||||
|
|
||||||
if (isPtrRtn) { calls.push_back(callInst); }
|
if (isPtrRtn) { calls.push_back(callInst); }
|
||||||
if (isGccStdStringStdString) { gccStdStd.push_back(callInst); }
|
if (isGccStdStringStdString) { gccStdStd.push_back(callInst); }
|
||||||
if (isGccStdStringCString) { gccStdC.push_back(callInst); }
|
if (isGccStdStringCString) { gccStdC.push_back(callInst); }
|
||||||
@ -351,9 +485,9 @@ bool CmpLogRoutines::hookRtns(Module &M) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
if (!calls.size() && !gccStdStd.size() && !gccStdC.size() &&
|
if (!calls.size() && !gccStdStd.size() && !gccStdC.size() &&
|
||||||
!llvmStdStd.size() && !llvmStdC.size()) {
|
!llvmStdStd.size() && !llvmStdC.size() && !Memcmp.size() &&
|
||||||
|
Strcmp.size() && Strncmp.size())
|
||||||
return false;
|
return false;
|
||||||
}
|
|
||||||
|
|
||||||
for (auto &callInst : calls) {
|
for (auto &callInst : calls) {
|
||||||
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1);
|
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1);
|
||||||
@ -372,6 +506,64 @@ bool CmpLogRoutines::hookRtns(Module &M) {
|
|||||||
// errs() << callInst->getCalledFunction()->getName() << "\n";
|
// errs() << callInst->getCalledFunction()->getName() << "\n";
|
||||||
}
|
}
|
||||||
|
|
||||||
|
for (auto &callInst : Memcmp) {
|
||||||
|
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1),
|
||||||
|
*v3P = callInst->getArgOperand(2);
|
||||||
|
|
||||||
|
IRBuilder<> IRB(callInst->getParent());
|
||||||
|
|
||||||
|
std::vector<Value *> args;
|
||||||
|
Value *v1Pcasted = IRB.CreatePointerCast(v1P, i8PtrTy);
|
||||||
|
Value *v2Pcasted = IRB.CreatePointerCast(v2P, i8PtrTy);
|
||||||
|
Value *v3Pbitcast = IRB.CreateBitCast(
|
||||||
|
v3P, IntegerType::get(C, v3P->getType()->getPrimitiveSizeInBits()));
|
||||||
|
Value *v3Pcasted =
|
||||||
|
IRB.CreateIntCast(v3Pbitcast, IntegerType::get(C, 64), false);
|
||||||
|
args.push_back(v1Pcasted);
|
||||||
|
args.push_back(v2Pcasted);
|
||||||
|
args.push_back(v3Pcasted);
|
||||||
|
|
||||||
|
IRB.CreateCall(cmplogHookFnN, args);
|
||||||
|
|
||||||
|
// errs() << callInst->getCalledFunction()->getName() << "\n";
|
||||||
|
}
|
||||||
|
|
||||||
|
for (auto &callInst : Strcmp) {
|
||||||
|
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1);
|
||||||
|
|
||||||
|
IRBuilder<> IRB(callInst->getParent());
|
||||||
|
std::vector<Value *> args;
|
||||||
|
Value *v1Pcasted = IRB.CreatePointerCast(v1P, i8PtrTy);
|
||||||
|
Value *v2Pcasted = IRB.CreatePointerCast(v2P, i8PtrTy);
|
||||||
|
args.push_back(v1Pcasted);
|
||||||
|
args.push_back(v2Pcasted);
|
||||||
|
|
||||||
|
IRB.CreateCall(cmplogHookFnStr, args);
|
||||||
|
|
||||||
|
// errs() << callInst->getCalledFunction()->getName() << "\n";
|
||||||
|
}
|
||||||
|
|
||||||
|
for (auto &callInst : Strncmp) {
|
||||||
|
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1),
|
||||||
|
*v3P = callInst->getArgOperand(2);
|
||||||
|
|
||||||
|
IRBuilder<> IRB(callInst->getParent());
|
||||||
|
std::vector<Value *> args;
|
||||||
|
Value *v1Pcasted = IRB.CreatePointerCast(v1P, i8PtrTy);
|
||||||
|
Value *v2Pcasted = IRB.CreatePointerCast(v2P, i8PtrTy);
|
||||||
|
Value *v3Pbitcast = IRB.CreateBitCast(
|
||||||
|
v3P, IntegerType::get(C, v3P->getType()->getPrimitiveSizeInBits()));
|
||||||
|
Value *v3Pcasted =
|
||||||
|
IRB.CreateIntCast(v3Pbitcast, IntegerType::get(C, 64), false);
|
||||||
|
args.push_back(v1Pcasted);
|
||||||
|
args.push_back(v2Pcasted);
|
||||||
|
args.push_back(v3Pcasted);
|
||||||
|
|
||||||
|
IRB.CreateCall(cmplogHookFnStrN, args);
|
||||||
|
|
||||||
|
// errs() << callInst->getCalledFunction()->getName() << "\n";
|
||||||
|
}
|
||||||
|
|
||||||
for (auto &callInst : gccStdStd) {
|
for (auto &callInst : gccStdStd) {
|
||||||
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1);
|
Value *v1P = callInst->getArgOperand(0), *v2P = callInst->getArgOperand(1);
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user