| /* |
| * Unit test suite for ntdll exceptions |
| * |
| * Copyright 2005 Alexandre Julliard |
| * |
| * This library is free software; you can redistribute it and/or |
| * modify it under the terms of the GNU Lesser General Public |
| * License as published by the Free Software Foundation; either |
| * version 2.1 of the License, or (at your option) any later version. |
| * |
| * This library is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| * Lesser General Public License for more details. |
| * |
| * You should have received a copy of the GNU Lesser General Public |
| * License along with this library; if not, write to the Free Software |
| * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA |
| */ |
| |
| #include <stdarg.h> |
| #include <stdio.h> |
| |
| #ifndef _WIN32_WINNT |
| #define _WIN32_WINNT 0x500 /* For NTSTATUS */ |
| #endif |
| |
| #include "ntstatus.h" |
| #define WIN32_NO_STATUS |
| #include "windef.h" |
| #include "winbase.h" |
| #include "winnt.h" |
| #include "winreg.h" |
| #include "winternl.h" |
| #include "excpt.h" |
| #include "wine/test.h" |
| |
| #ifdef __i386__ |
| static int my_argc; |
| static char** my_argv; |
| static int test_stage; |
| |
| static struct _TEB * (WINAPI *pNtCurrentTeb)(void); |
| static NTSTATUS (WINAPI *pNtGetContextThread)(HANDLE,CONTEXT*); |
| static NTSTATUS (WINAPI *pNtSetContextThread)(HANDLE,CONTEXT*); |
| static NTSTATUS (WINAPI *pRtlRaiseException)(EXCEPTION_RECORD *rec); |
| static PVOID (WINAPI *pRtlAddVectoredExceptionHandler)(ULONG first, PVECTORED_EXCEPTION_HANDLER func); |
| static ULONG (WINAPI *pRtlRemoveVectoredExceptionHandler)(PVOID handler); |
| static NTSTATUS (WINAPI *pNtReadVirtualMemory)(HANDLE, const void*, void*, SIZE_T, SIZE_T*); |
| static NTSTATUS (WINAPI *pNtTerminateProcess)(HANDLE handle, LONG exit_code); |
| static void *code_mem; |
| |
| /* Test various instruction combinations that cause a protection fault on the i386, |
| * and check what the resulting exception looks like. |
| */ |
| |
| static const struct exception |
| { |
| BYTE code[18]; /* asm code */ |
| BYTE offset; /* offset of faulting instruction */ |
| BYTE length; /* length of faulting instruction */ |
| NTSTATUS status; /* expected status code */ |
| DWORD nb_params; /* expected number of parameters */ |
| DWORD params[4]; /* expected parameters */ |
| } exceptions[] = |
| { |
| /* test some privileged instructions */ |
| { { 0xfb, 0xc3 }, /* sti; ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x6c, 0xc3 }, /* insb (%dx); ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x6d, 0xc3 }, /* insl (%dx); ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x6e, 0xc3 }, /* outsb (%dx); ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x6f, 0xc3 }, /* outsl (%dx); ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xe4, 0x11, 0xc3 }, /* inb $0x11,%al; ret */ |
| 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xe5, 0x11, 0xc3 }, /* inl $0x11,%eax; ret */ |
| 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xe6, 0x11, 0xc3 }, /* outb %al,$0x11; ret */ |
| 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xe7, 0x11, 0xc3 }, /* outl %eax,$0x11; ret */ |
| 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xed, 0xc3 }, /* inl (%dx),%eax; ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xee, 0xc3 }, /* outb %al,(%dx); ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xef, 0xc3 }, /* outl %eax,(%dx); ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xf4, 0xc3 }, /* hlt; ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0xfa, 0xc3 }, /* cli; ret */ |
| 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| |
| /* test long jump to invalid selector */ |
| { { 0xea, 0, 0, 0, 0, 0, 0, 0xc3 }, /* ljmp $0,$0; ret */ |
| 0, 7, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, |
| |
| /* test iret to invalid selector */ |
| { { 0x6a, 0x00, 0x6a, 0x00, 0x6a, 0x00, 0xcf, 0x83, 0xc4, 0x0c, 0xc3 }, |
| /* pushl $0; pushl $0; pushl $0; iret; addl $12,%esp; ret */ |
| 6, 1, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, |
| |
| /* test loading an invalid selector */ |
| { { 0xb8, 0xef, 0xbe, 0x00, 0x00, 0x8e, 0xe8, 0xc3 }, /* mov $beef,%ax; mov %ax,%gs; ret */ |
| 5, 2, STATUS_ACCESS_VIOLATION, 2, { 0, 0xbee8 } }, |
| |
| /* test accessing a zero selector */ |
| { { 0x06, 0x31, 0xc0, 0x8e, 0xc0, 0x26, 0xa1, 0, 0, 0, 0, 0x07, 0xc3 }, |
| /* push %es; xor %eax,%eax; mov %ax,%es; mov %es:(0),%ax; pop %es */ |
| 5, 6, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, |
| |
| /* test moving %cs -> %ss */ |
| { { 0x0e, 0x17, 0x58, 0xc3 }, /* pushl %cs; popl %ss; popl %eax; ret */ |
| 1, 1, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, |
| |
| /* test overlong instruction (limit is 16 bytes) */ |
| { { 0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0xfa,0xc3 }, |
| 0, 16, STATUS_ILLEGAL_INSTRUCTION, 0 }, |
| { { 0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0xfa,0xc3 }, |
| 0, 15, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| |
| /* test invalid interrupt */ |
| { { 0xcd, 0xff, 0xc3 }, /* int $0xff; ret */ |
| 0, 2, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, |
| |
| /* test moves to/from Crx */ |
| { { 0x0f, 0x20, 0xc0, 0xc3 }, /* movl %cr0,%eax; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x20, 0xe0, 0xc3 }, /* movl %cr4,%eax; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x22, 0xc0, 0xc3 }, /* movl %eax,%cr0; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x22, 0xe0, 0xc3 }, /* movl %eax,%cr4; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| |
| /* test moves to/from Drx */ |
| { { 0x0f, 0x21, 0xc0, 0xc3 }, /* movl %dr0,%eax; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x21, 0xc8, 0xc3 }, /* movl %dr1,%eax; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x21, 0xf8, 0xc3 }, /* movl %dr7,%eax; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x23, 0xc0, 0xc3 }, /* movl %eax,%dr0; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x23, 0xc8, 0xc3 }, /* movl %eax,%dr1; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| { { 0x0f, 0x23, 0xf8, 0xc3 }, /* movl %eax,%dr7; ret */ |
| 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, |
| |
| /* test memory reads */ |
| { { 0xa1, 0xfc, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffc,%eax; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffc } }, |
| { { 0xa1, 0xfd, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffd,%eax; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffd } }, |
| { { 0xa1, 0xfe, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffe,%eax; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffe } }, |
| { { 0xa1, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xffffffff,%eax; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, |
| |
| /* test memory writes */ |
| { { 0xa3, 0xfc, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffc; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffc } }, |
| { { 0xa3, 0xfd, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffd; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffd } }, |
| { { 0xa3, 0xfe, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffe; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffe } }, |
| { { 0xa3, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xffffffff; ret */ |
| 0, 5, STATUS_ACCESS_VIOLATION, 2, { 1, 0xffffffff } }, |
| }; |
| |
| static int got_exception; |
| static BOOL have_vectored_api; |
| |
| static void run_exception_test(void *handler, const void* context, |
| const void *code, unsigned int code_size) |
| { |
| struct { |
| EXCEPTION_REGISTRATION_RECORD frame; |
| const void *context; |
| } exc_frame; |
| void (*func)(void) = code_mem; |
| |
| exc_frame.frame.Handler = handler; |
| exc_frame.frame.Prev = pNtCurrentTeb()->Tib.ExceptionList; |
| exc_frame.context = context; |
| |
| memcpy(code_mem, code, code_size); |
| |
| pNtCurrentTeb()->Tib.ExceptionList = &exc_frame.frame; |
| func(); |
| pNtCurrentTeb()->Tib.ExceptionList = exc_frame.frame.Prev; |
| } |
| |
| LONG CALLBACK rtlraiseexception_vectored_handler(EXCEPTION_POINTERS *ExceptionInfo) |
| { |
| PCONTEXT context = ExceptionInfo->ContextRecord; |
| PEXCEPTION_RECORD rec = ExceptionInfo->ExceptionRecord; |
| trace("vect. handler %08x addr:%p context.Eip:%x\n", rec->ExceptionCode, |
| rec->ExceptionAddress, context->Eip); |
| |
| todo_wine { |
| ok(rec->ExceptionAddress == (char *)code_mem + 0xb, "ExceptionAddress at %p instead of %p\n", |
| rec->ExceptionAddress, (char *)code_mem + 0xb); |
| |
| if (pNtCurrentTeb()->Peb->BeingDebugged) |
| ok((void *)context->Eax == pRtlRaiseException, "debugger managed to modify Eax to %x should be %p\n", |
| context->Eax, pRtlRaiseException); |
| } |
| |
| /* check that context.Eip is fixed up only for EXCEPTION_BREAKPOINT |
| * even if raised by RtlRaiseException |
| */ |
| if(rec->ExceptionCode == EXCEPTION_BREAKPOINT) |
| { |
| ok(context->Eip == (DWORD)code_mem + 0xa, "Eip at %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 0xa); |
| } |
| else |
| { |
| ok(context->Eip == (DWORD)code_mem + 0xb, "Eip at %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 0xb); |
| } |
| |
| /* test if context change is preserved from vectored handler to stack handlers */ |
| context->Eax = 0xf00f00f0; |
| return EXCEPTION_CONTINUE_SEARCH; |
| } |
| |
| static DWORD rtlraiseexception_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| trace( "exception: %08x flags:%x addr:%p context: Eip:%x\n", |
| rec->ExceptionCode, rec->ExceptionFlags, rec->ExceptionAddress, context->Eip ); |
| |
| todo_wine { |
| ok(rec->ExceptionAddress == (char *)code_mem + 0xb, "ExceptionAddress at %p instead of %p\n", |
| rec->ExceptionAddress, (char *)code_mem + 0xb); |
| } |
| |
| /* check that context.Eip is fixed up only for EXCEPTION_BREAKPOINT |
| * even if raised by RtlRaiseException |
| */ |
| if(rec->ExceptionCode == EXCEPTION_BREAKPOINT) |
| { |
| ok(context->Eip == (DWORD)code_mem + 0xa, "Eip at %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 0xa); |
| } |
| else |
| { |
| ok(context->Eip == (DWORD)code_mem + 0xb, "Eip at %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 0xb); |
| } |
| |
| if(have_vectored_api) |
| ok(context->Eax == 0xf00f00f0, "Eax is %x, should have been set to 0xf00f00f0 in vectored handler\n", |
| context->Eax); |
| |
| /* give the debugger a chance to examine the state a second time */ |
| /* without the exception handler changing Eip */ |
| if (test_stage == 2) |
| return ExceptionContinueSearch; |
| |
| /* Eip in context is decreased by 1 |
| * Increase it again, else execution will continue in the middle of a instruction */ |
| if(rec->ExceptionCode == EXCEPTION_BREAKPOINT && (context->Eip == (DWORD)code_mem + 0xa)) |
| context->Eip += 1; |
| return ExceptionContinueExecution; |
| } |
| |
| |
| static const BYTE call_one_arg_code[] = { |
| 0x8b, 0x44, 0x24, 0x08, /* mov 0x8(%esp),%eax */ |
| 0x50, /* push %eax */ |
| 0x8b, 0x44, 0x24, 0x08, /* mov 0x8(%esp),%eax */ |
| 0xff, 0xd0, /* call *%eax */ |
| 0x90, /* nop */ |
| 0x90, /* nop */ |
| 0x90, /* nop */ |
| 0x90, /* nop */ |
| 0xc3, /* ret */ |
| }; |
| |
| |
| static void run_rtlraiseexception_test(DWORD exceptioncode) |
| { |
| EXCEPTION_REGISTRATION_RECORD frame; |
| EXCEPTION_RECORD record; |
| PVOID vectored_handler = NULL; |
| |
| void (*func)(void* function, EXCEPTION_RECORD* record) = code_mem; |
| |
| record.ExceptionCode = exceptioncode; |
| record.ExceptionFlags = 0; |
| record.ExceptionRecord = NULL; |
| record.ExceptionAddress = NULL; /* does not matter, copied return address */ |
| record.NumberParameters = 0; |
| |
| frame.Handler = rtlraiseexception_handler; |
| frame.Prev = pNtCurrentTeb()->Tib.ExceptionList; |
| |
| memcpy(code_mem, call_one_arg_code, sizeof(call_one_arg_code)); |
| |
| pNtCurrentTeb()->Tib.ExceptionList = &frame; |
| if (have_vectored_api) |
| { |
| vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &rtlraiseexception_vectored_handler); |
| ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); |
| } |
| |
| func(pRtlRaiseException, &record); |
| |
| if (have_vectored_api) |
| pRtlRemoveVectoredExceptionHandler(vectored_handler); |
| pNtCurrentTeb()->Tib.ExceptionList = frame.Prev; |
| } |
| |
| static void test_rtlraiseexception(void) |
| { |
| if (!pRtlRaiseException) |
| { |
| skip("RtlRaiseException not found\n"); |
| return; |
| } |
| |
| /* test without debugger */ |
| run_rtlraiseexception_test(0x12345); |
| run_rtlraiseexception_test(EXCEPTION_BREAKPOINT); |
| run_rtlraiseexception_test(EXCEPTION_INVALID_HANDLE); |
| } |
| |
| static DWORD handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| const struct exception *except = *(const struct exception **)(frame + 1); |
| unsigned int i, entry = except - exceptions; |
| |
| got_exception++; |
| trace( "exception: %x flags:%x addr:%p\n", |
| rec->ExceptionCode, rec->ExceptionFlags, rec->ExceptionAddress ); |
| |
| ok( rec->ExceptionCode == except->status, |
| "%u: Wrong exception code %x/%x\n", entry, rec->ExceptionCode, except->status ); |
| ok( rec->ExceptionAddress == (char*)code_mem + except->offset, |
| "%u: Wrong exception address %p/%p\n", entry, |
| rec->ExceptionAddress, (char*)code_mem + except->offset ); |
| |
| ok( rec->NumberParameters == except->nb_params, |
| "%u: Wrong number of parameters %u/%u\n", entry, rec->NumberParameters, except->nb_params ); |
| |
| /* Most CPUs (except Intel Core apparently) report a segment limit violation */ |
| /* instead of page faults for accesses beyond 0xffffffff */ |
| if (except->nb_params == 2 && except->params[1] >= 0xfffffffd) |
| { |
| if (rec->ExceptionInformation[0] == 0 && rec->ExceptionInformation[1] == 0xffffffff) |
| goto skip_params; |
| } |
| |
| for (i = 0; i < rec->NumberParameters; i++) |
| ok( rec->ExceptionInformation[i] == except->params[i], |
| "%u: Wrong parameter %d: %lx/%x\n", |
| entry, i, rec->ExceptionInformation[i], except->params[i] ); |
| |
| skip_params: |
| /* don't handle exception if it's not the address we expected */ |
| if (rec->ExceptionAddress != (char*)code_mem + except->offset) return ExceptionContinueSearch; |
| |
| context->Eip += except->length; |
| return ExceptionContinueExecution; |
| } |
| |
| static void test_prot_fault(void) |
| { |
| unsigned int i; |
| |
| for (i = 0; i < sizeof(exceptions)/sizeof(exceptions[0]); i++) |
| { |
| got_exception = 0; |
| run_exception_test(handler, &exceptions[i], &exceptions[i].code, |
| sizeof(exceptions[i].code)); |
| if (!i && !got_exception) |
| { |
| trace( "No exception, assuming win9x, no point in testing further\n" ); |
| break; |
| } |
| ok( got_exception == (exceptions[i].status != 0), |
| "%u: bad exception count %d\n", i, got_exception ); |
| } |
| } |
| |
| /* test handling of debug registers */ |
| static DWORD dreg_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| context->Eip += 2; /* Skips the popl (%eax) */ |
| context->Dr0 = 0x42424242; |
| context->Dr1 = 0; |
| context->Dr2 = 0; |
| context->Dr3 = 0; |
| context->Dr6 = 0; |
| context->Dr7 = 0x155; |
| return ExceptionContinueExecution; |
| } |
| |
| static const BYTE segfault_code[5] = { |
| 0x31, 0xc0, /* xor %eax,%eax */ |
| 0x8f, 0x00, /* popl (%eax) - cause exception */ |
| 0xc3 /* ret */ |
| }; |
| |
| /* test the single step exception behaviour */ |
| static DWORD single_step_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| got_exception++; |
| ok (!(context->EFlags & 0x100), "eflags has single stepping bit set\n"); |
| |
| if( got_exception < 3) |
| context->EFlags |= 0x100; /* single step until popf instruction */ |
| else { |
| /* show that the last single step exception on the popf instruction |
| * (which removed the TF bit), still is a EXCEPTION_SINGLE_STEP exception */ |
| ok( rec->ExceptionCode == EXCEPTION_SINGLE_STEP, |
| "exception is not EXCEPTION_SINGLE_STEP: %x\n", rec->ExceptionCode); |
| } |
| |
| return ExceptionContinueExecution; |
| } |
| |
| static const BYTE single_stepcode[] = { |
| 0x9c, /* pushf */ |
| 0x58, /* pop %eax */ |
| 0x0d,0,1,0,0, /* or $0x100,%eax */ |
| 0x50, /* push %eax */ |
| 0x9d, /* popf */ |
| 0x35,0,1,0,0, /* xor $0x100,%eax */ |
| 0x50, /* push %eax */ |
| 0x9d, /* popf */ |
| 0xc3 |
| }; |
| |
| /* Test the alignment check (AC) flag handling. */ |
| static const BYTE align_check_code[] = { |
| 0x55, /* push %ebp */ |
| 0x89,0xe5, /* mov %esp,%ebp */ |
| 0x9c, /* pushf */ |
| 0x58, /* pop %eax */ |
| 0x0d,0,0,4,0, /* or $0x40000,%eax */ |
| 0x50, /* push %eax */ |
| 0x9d, /* popf */ |
| 0x89,0xe0, /* mov %esp, %eax */ |
| 0x8b,0x40,0x1, /* mov 0x1(%eax), %eax - cause exception */ |
| 0x9c, /* pushf */ |
| 0x58, /* pop %eax */ |
| 0x35,0,0,4,0, /* xor $0x40000,%eax */ |
| 0x50, /* push %eax */ |
| 0x9d, /* popf */ |
| 0x5d, /* pop %ebp */ |
| 0xc3, /* ret */ |
| }; |
| |
| static DWORD align_check_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| ok (!(context->EFlags & 0x40000), "eflags has AC bit set\n"); |
| got_exception++; |
| return ExceptionContinueExecution; |
| } |
| |
| /* test single stepping over hardware breakpoint */ |
| static DWORD bpx_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| got_exception++; |
| ok( rec->ExceptionCode == EXCEPTION_SINGLE_STEP, |
| "wrong exception code: %x\n", rec->ExceptionCode); |
| |
| if(got_exception == 1) { |
| /* hw bp exception on first nop */ |
| ok( context->Eip == (DWORD)code_mem, "eip is wrong: %x instead of %x\n", |
| context->Eip, (DWORD)code_mem); |
| ok( (context->Dr6 & 0xf) == 1, "B0 flag is not set in Dr6\n"); |
| ok( !(context->Dr6 & 0x4000), "BS flag is set in Dr6\n"); |
| context->Dr0 = context->Dr0 + 1; /* set hw bp again on next instruction */ |
| context->EFlags |= 0x100; /* enable single stepping */ |
| } else if( got_exception == 2) { |
| /* single step exception on second nop */ |
| ok( context->Eip == (DWORD)code_mem + 1, "eip is wrong: %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 1); |
| ok( (context->Dr6 & 0x4000), "BS flag is not set in Dr6\n"); |
| /* depending on the win version the B0 bit is already set here as well |
| ok( (context->Dr6 & 0xf) == 0, "B0...3 flags in Dr6 shouldn't be set\n"); */ |
| context->EFlags |= 0x100; |
| } else if( got_exception == 3) { |
| /* hw bp exception on second nop */ |
| ok( context->Eip == (DWORD)code_mem + 1, "eip is wrong: %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 1); |
| ok( (context->Dr6 & 0xf) == 1, "B0 flag is not set in Dr6\n"); |
| ok( !(context->Dr6 & 0x4000), "BS flag is set in Dr6\n"); |
| context->Dr0 = 0; /* clear breakpoint */ |
| context->EFlags |= 0x100; |
| } else { |
| /* single step exception on ret */ |
| ok( context->Eip == (DWORD)code_mem + 2, "eip is wrong: %x instead of %x\n", |
| context->Eip, (DWORD)code_mem + 2); |
| ok( (context->Dr6 & 0xf) == 0, "B0...3 flags in Dr6 shouldn't be set\n"); |
| ok( (context->Dr6 & 0x4000), "BS flag is not set in Dr6\n"); |
| } |
| |
| context->Dr6 = 0; /* clear status register */ |
| return ExceptionContinueExecution; |
| } |
| |
| static const BYTE dummy_code[] = { 0x90, 0x90, 0xc3 }; /* nop, nop, ret */ |
| |
| /* test int3 handling */ |
| static DWORD int3_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| ok( rec->ExceptionAddress == code_mem, "exception address not at: %p, but at %p\n", |
| code_mem, rec->ExceptionAddress); |
| ok( context->Eip == (DWORD)code_mem, "eip not at: %p, but at %#x\n", code_mem, context->Eip); |
| if(context->Eip == (DWORD)code_mem) context->Eip++; /* skip breakpoint */ |
| |
| return ExceptionContinueExecution; |
| } |
| |
| static const BYTE int3_code[] = { 0xCC, 0xc3 }; /* int 3, ret */ |
| |
| |
| static void test_exceptions(void) |
| { |
| CONTEXT ctx; |
| NTSTATUS res; |
| |
| if (!pNtGetContextThread || !pNtSetContextThread) |
| { |
| skip( "NtGetContextThread/NtSetContextThread not found\n" ); |
| return; |
| } |
| |
| /* test handling of debug registers */ |
| run_exception_test(dreg_handler, NULL, &segfault_code, sizeof(segfault_code)); |
| |
| ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; |
| res = pNtGetContextThread(GetCurrentThread(), &ctx); |
| ok (res == STATUS_SUCCESS,"NtGetContextThread failed with %x\n", res); |
| ok(ctx.Dr0 == 0x42424242,"failed to set debugregister 0 to 0x42424242, got %x\n", ctx.Dr0); |
| ok((ctx.Dr7 & ~0xdc00) == 0x155,"failed to set debugregister 7 to 0x155, got %x\n", ctx.Dr7); |
| |
| /* test single stepping behavior */ |
| got_exception = 0; |
| run_exception_test(single_step_handler, NULL, &single_stepcode, sizeof(single_stepcode)); |
| ok(got_exception == 3, "expected 3 single step exceptions, got %d\n", got_exception); |
| |
| /* test alignment exceptions */ |
| got_exception = 0; |
| run_exception_test(align_check_handler, NULL, align_check_code, sizeof(align_check_code)); |
| ok(got_exception == 0, "got %d alignment faults, expected 0\n", got_exception); |
| |
| /* test single stepping over hardware breakpoint */ |
| memset(&ctx, 0, sizeof(ctx)); |
| ctx.Dr0 = (DWORD) code_mem; /* set hw bp on first nop */ |
| ctx.Dr7 = 3; |
| ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; |
| res = pNtSetContextThread( GetCurrentThread(), &ctx); |
| ok( res == STATUS_SUCCESS, "NtSetContextThread faild with %x\n", res); |
| |
| got_exception = 0; |
| run_exception_test(bpx_handler, NULL, dummy_code, sizeof(dummy_code)); |
| ok( got_exception == 4,"expected 4 exceptions, got %d\n", got_exception); |
| |
| /* test int3 handling */ |
| run_exception_test(int3_handler, NULL, int3_code, sizeof(int3_code)); |
| } |
| |
| static void test_debugger(void) |
| { |
| char cmdline[MAX_PATH]; |
| PROCESS_INFORMATION pi; |
| STARTUPINFO si = { 0 }; |
| DEBUG_EVENT de; |
| DWORD continuestatus; |
| PVOID code_mem_address = NULL; |
| NTSTATUS status; |
| SIZE_T size_read; |
| BOOL ret; |
| int counter = 0; |
| si.cb = sizeof(si); |
| |
| if(!pNtGetContextThread || !pNtSetContextThread || !pNtReadVirtualMemory || !pNtTerminateProcess) |
| { |
| skip("NtGetContextThread, NtSetContextThread, NtReadVirtualMemory or NtTerminateProcess not found\n)"); |
| return; |
| } |
| |
| sprintf(cmdline, "%s %s %s %p", my_argv[0], my_argv[1], "debuggee", &test_stage); |
| ret = CreateProcess(NULL, cmdline, NULL, NULL, FALSE, DEBUG_PROCESS, NULL, NULL, &si, &pi); |
| ok(ret, "could not create child process error: %u\n", GetLastError()); |
| if (!ret) |
| return; |
| |
| do |
| { |
| continuestatus = DBG_CONTINUE; |
| ok(WaitForDebugEvent(&de, INFINITE), "reading debug event\n"); |
| |
| if (de.dwThreadId != pi.dwThreadId) |
| { |
| trace("event %d not coming from main thread, ignoring\n", de.dwDebugEventCode); |
| ContinueDebugEvent(de.dwProcessId, de.dwThreadId, DBG_CONTINUE); |
| continue; |
| } |
| |
| if (de.dwDebugEventCode == CREATE_PROCESS_DEBUG_EVENT) |
| { |
| if(de.u.CreateProcessInfo.lpBaseOfImage != pNtCurrentTeb()->Peb->ImageBaseAddress) |
| { |
| skip("child process loaded at different address, terminating it\n"); |
| pNtTerminateProcess(pi.hProcess, 1); |
| } |
| } |
| else if (de.dwDebugEventCode == EXCEPTION_DEBUG_EVENT) |
| { |
| CONTEXT ctx; |
| int stage; |
| |
| counter++; |
| status = pNtReadVirtualMemory(pi.hProcess, &code_mem, &code_mem_address, |
| sizeof(code_mem_address), &size_read); |
| ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); |
| status = pNtReadVirtualMemory(pi.hProcess, &test_stage, &stage, |
| sizeof(stage), &size_read); |
| ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); |
| |
| ctx.ContextFlags = CONTEXT_FULL; |
| status = pNtGetContextThread(pi.hThread, &ctx); |
| ok(!status, "NtGetContextThread failed with 0x%x\n", status); |
| |
| trace("exception 0x%x at %p firstchance=%d Eip=0x%x, Eax=0x%x\n", |
| de.u.Exception.ExceptionRecord.ExceptionCode, |
| de.u.Exception.ExceptionRecord.ExceptionAddress, de.u.Exception.dwFirstChance, ctx.Eip, ctx.Eax); |
| |
| if (counter > 100) |
| { |
| ok(FALSE, "got way too many exceptions, probaby caught in a infinite loop, terminating child\n"); |
| pNtTerminateProcess(pi.hProcess, 1); |
| } |
| else if (counter >= 2) /* skip startup breakpoint */ |
| { |
| if (stage == 1) |
| { |
| ok((char *)ctx.Eip == (char *)code_mem_address + 0xb, "Eip at %x instead of %p\n", |
| ctx.Eip, (char *)code_mem_address + 0xb); |
| /* setting the context from debugger does not affect the context, the exception handlers gets */ |
| /* uncomment once wine is fixed */ |
| /* ctx.Eip = 0x12345; */ |
| ctx.Eax = 0xf00f00f1; |
| |
| /* let the debuggee handle the exception */ |
| continuestatus = DBG_EXCEPTION_NOT_HANDLED; |
| } |
| else if (stage == 2) |
| { |
| if (de.u.Exception.dwFirstChance) |
| { |
| /* debugger gets first chance exception with unmodified ctx.Eip */ |
| ok((char *)ctx.Eip == (char *)code_mem_address + 0xb, "Eip at 0x%x instead of %p\n", |
| ctx.Eip, (char *)code_mem_address + 0xb); |
| |
| /* setting the context from debugger does not affect the context, the exception handlers gets */ |
| /* uncomment once wine is fixed */ |
| /* ctx.Eip = 0x12345; */ |
| ctx.Eax = 0xf00f00f1; |
| |
| /* pass exception to debuggee |
| * exception will not be handled and |
| * a second chance exception will be raised */ |
| continuestatus = DBG_EXCEPTION_NOT_HANDLED; |
| } |
| else |
| { |
| /* debugger gets context after exception handler has played with it */ |
| /* ctx.Eip is the same value the exception handler got */ |
| if (de.u.Exception.ExceptionRecord.ExceptionCode == EXCEPTION_BREAKPOINT) |
| { |
| ok((char *)ctx.Eip == (char *)code_mem_address + 0xa, "Eip at 0x%x instead of %p\n", |
| ctx.Eip, (char *)code_mem_address + 0xa); |
| /* need to fixup Eip for debuggee */ |
| if ((char *)ctx.Eip == (char *)code_mem_address + 0xa) |
| ctx.Eip += 1; |
| } |
| else |
| ok((char *)ctx.Eip == (char *)code_mem_address + 0xb, "Eip at 0x%x instead of %p\n", |
| ctx.Eip, (char *)code_mem_address + 0xb); |
| /* here we handle exception */ |
| } |
| } |
| else |
| ok(FALSE, "unexpected stage %x\n", stage); |
| |
| status = pNtSetContextThread(pi.hThread, &ctx); |
| ok(!status, "NtSetContextThread failed with 0x%x\n", status); |
| } |
| } |
| |
| ContinueDebugEvent(de.dwProcessId, de.dwThreadId, continuestatus); |
| |
| } while (de.dwDebugEventCode != EXIT_PROCESS_DEBUG_EVENT); |
| |
| ok(CloseHandle(pi.hThread) != 0, "error %u\n", GetLastError()); |
| ok(CloseHandle(pi.hProcess) != 0, "error %u\n", GetLastError()); |
| |
| return; |
| } |
| |
| static DWORD simd_fault_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, |
| CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) |
| { |
| int *stage = *(int **)(frame + 1); |
| |
| got_exception++; |
| |
| if( *stage == 1) { |
| /* fault while executing sse instruction */ |
| context->Eip += 3; /* skip addps */ |
| return ExceptionContinueExecution; |
| } |
| |
| /* stage 2 - divide by zero fault */ |
| if( rec->ExceptionCode == EXCEPTION_ILLEGAL_INSTRUCTION) |
| skip("system doesn't support SIMD exceptions\n"); |
| else { |
| ok( rec->ExceptionCode == STATUS_FLOAT_MULTIPLE_TRAPS, |
| "exception code: %#x, should be %#x\n", |
| rec->ExceptionCode, STATUS_FLOAT_MULTIPLE_TRAPS); |
| ok( rec->NumberParameters == 1, "# of params: %i, should be 1\n", |
| rec->NumberParameters); |
| if( rec->NumberParameters == 1 ) |
| ok( rec->ExceptionInformation[0] == 0, "param #1: %lx, should be 0\n", rec->ExceptionInformation[0]); |
| } |
| |
| context->Eip += 3; /* skip divps */ |
| |
| return ExceptionContinueExecution; |
| } |
| |
| static const BYTE simd_exception_test[] = { |
| 0x83, 0xec, 0x4, /* sub $0x4, %esp */ |
| 0x0f, 0xae, 0x1c, 0x24, /* stmxcsr (%esp) */ |
| 0x66, 0x81, 0x24, 0x24, 0xff, 0xfd, /* andw $0xfdff,(%esp) * enable divide by */ |
| 0x0f, 0xae, 0x14, 0x24, /* ldmxcsr (%esp) * zero exceptions */ |
| 0x6a, 0x01, /* push $0x1 */ |
| 0x6a, 0x01, /* push $0x1 */ |
| 0x6a, 0x01, /* push $0x1 */ |
| 0x6a, 0x01, /* push $0x1 */ |
| 0x0f, 0x10, 0x0c, 0x24, /* movups (%esp),%xmm1 * fill dividend */ |
| 0x0f, 0x57, 0xc0, /* xorps %xmm0,%xmm0 * clear divisor */ |
| 0x0f, 0x5e, 0xc8, /* divps %xmm0,%xmm1 * generate fault */ |
| 0x83, 0xc4, 0x10, /* add $0x10,%esp */ |
| 0x66, 0x81, 0x0c, 0x24, 0x00, 0x02, /* orw $0x200,(%esp) * disable exceptions */ |
| 0x0f, 0xae, 0x14, 0x24, /* ldmxcsr (%esp) */ |
| 0x83, 0xc4, 0x04, /* add $0x4,%esp */ |
| 0xc3, /* ret */ |
| }; |
| |
| static const BYTE sse_check[] = { |
| 0x0f, 0x58, 0xc8, /* addps %xmm0,%xmm1 */ |
| 0xc3, /* ret */ |
| }; |
| |
| static void test_simd_exceptions(void) |
| { |
| int stage; |
| |
| /* test if CPU & OS can do sse */ |
| stage = 1; |
| got_exception = 0; |
| run_exception_test(simd_fault_handler, &stage, sse_check, sizeof(sse_check)); |
| if(got_exception) { |
| skip("system doesn't support SSE\n"); |
| return; |
| } |
| |
| /* generate a SIMD exception */ |
| stage = 2; |
| got_exception = 0; |
| run_exception_test(simd_fault_handler, &stage, simd_exception_test, |
| sizeof(simd_exception_test)); |
| ok( got_exception == 1, "got exception: %i, should be 1\n", got_exception); |
| } |
| |
| #endif /* __i386__ */ |
| |
| START_TEST(exception) |
| { |
| #ifdef __i386__ |
| HMODULE hntdll = GetModuleHandleA("ntdll.dll"); |
| |
| pNtCurrentTeb = (void *)GetProcAddress( hntdll, "NtCurrentTeb" ); |
| pNtGetContextThread = (void *)GetProcAddress( hntdll, "NtGetContextThread" ); |
| pNtSetContextThread = (void *)GetProcAddress( hntdll, "NtSetContextThread" ); |
| pNtReadVirtualMemory = (void *)GetProcAddress( hntdll, "NtReadVirtualMemory" ); |
| pRtlRaiseException = (void *)GetProcAddress( hntdll, "RtlRaiseException" ); |
| pNtTerminateProcess = (void *)GetProcAddress( hntdll, "NtTerminateProcess" ); |
| pRtlAddVectoredExceptionHandler = (void *)GetProcAddress( hntdll, |
| "RtlAddVectoredExceptionHandler" ); |
| pRtlRemoveVectoredExceptionHandler = (void *)GetProcAddress( hntdll, |
| "RtlRemoveVectoredExceptionHandler" ); |
| if (!pNtCurrentTeb) |
| { |
| skip( "NtCurrentTeb not found\n" ); |
| return; |
| } |
| |
| if (pRtlAddVectoredExceptionHandler && pRtlRemoveVectoredExceptionHandler) |
| have_vectored_api = TRUE; |
| else |
| skip("RtlAddVectoredExceptionHandler or RtlRemoveVectoredExceptionHandler not found\n"); |
| |
| /* 1024 byte should be sufficient */ |
| code_mem = VirtualAlloc(NULL, 1024, MEM_RESERVE | MEM_COMMIT, PAGE_EXECUTE_READWRITE); |
| if(!code_mem) { |
| trace("VirtualAlloc failed\n"); |
| return; |
| } |
| |
| my_argc = winetest_get_mainargs( &my_argv ); |
| if (my_argc >= 4) |
| { |
| void *addr; |
| sscanf( my_argv[3], "%p", &addr ); |
| |
| if (addr != &test_stage) |
| { |
| skip( "child process not mapped at same address (%p/%p)\n", &test_stage, addr); |
| return; |
| } |
| |
| /* child must be run under a debugger */ |
| if (!pNtCurrentTeb()->Peb->BeingDebugged) |
| { |
| ok(FALSE, "child process not being debugged?\n"); |
| return; |
| } |
| |
| if (pRtlRaiseException) |
| { |
| test_stage = 1; |
| run_rtlraiseexception_test(0x12345); |
| run_rtlraiseexception_test(EXCEPTION_BREAKPOINT); |
| run_rtlraiseexception_test(EXCEPTION_INVALID_HANDLE); |
| test_stage = 2; |
| run_rtlraiseexception_test(0x12345); |
| run_rtlraiseexception_test(EXCEPTION_BREAKPOINT); |
| run_rtlraiseexception_test(EXCEPTION_INVALID_HANDLE); |
| } |
| else |
| skip( "RtlRaiseException not found\n" ); |
| |
| /* rest of tests only run in parent */ |
| return; |
| } |
| |
| test_prot_fault(); |
| test_exceptions(); |
| test_rtlraiseexception(); |
| test_debugger(); |
| test_simd_exceptions(); |
| |
| VirtualFree(code_mem, 1024, MEM_RELEASE); |
| #endif |
| } |
