-
-
Save warmwaffles/8a5384276f340b25b43f7d4b450cc2a9 to your computer and use it in GitHub Desktop.
Go-like defer for C that works with most optimization flag combinations under GCC/Clang
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include "gc.h" | |
/** | |
* Adds destructor to garbage shadow stack. | |
* | |
* @param frame is passed automatically by wrapper macro | |
* @param fn takes one argument | |
* @param arg is passed to fn(arg) | |
* @return arg | |
*/ | |
void __defer(struct StackFrame *frame, void *fn, void *arg) { | |
if (!arg) return; | |
append(&__garbage, /* note: append() not included */ | |
(&(const struct Garbage){frame->next, (intptr_t)fn, (intptr_t)arg, | |
frame->addr})) != -1) { | |
frame->addr = (intptr_t)&__gc; | |
} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#ifndef GC_H_ | |
#define GC_H_ | |
#define gc(THING) defer(free, (THING)) | |
/** | |
* Calls FN(ARG) when function returns. | |
*/ | |
#define defer(FN, ARG) \ | |
({ \ | |
__typeof(ARG) Arg = (ARG); \ | |
/* force -fno-omit-frame-pointer and */ \ | |
/* prevent weird opts like tail call */ \ | |
asm("" : "+g"(Arg)); \ | |
__defer(__builtin_frame_address(0), FN, Arg); \ | |
asm("" : "+g"(Arg)); \ | |
Arg; \ | |
}) | |
struct StackFrame { | |
struct StackFrame *next; | |
intptr_t addr; | |
}; | |
struct Garbages { | |
size_t i, n; | |
struct Garbage { | |
struct StackFrame *frame; | |
intptr_t fn; | |
intptr_t arg; | |
intptr_t ret; | |
} * p; | |
}; | |
extern struct Garbages __garbage; | |
int64_t __gc(void); | |
void __defer(struct StackFrame *, void *, void *); | |
#endif /* GC_H_ */ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/ Invokes deferred function calls. | |
/ | |
/ This offers behavior similar to std::unique_ptr. Functions | |
/ overwrite their return addresses jumping here, and pushing | |
/ exactly one entry on the shadow stack below. Functions may | |
/ repeat that process multiple times, in which case the body | |
/ of this gadget loops and unwinds as a natural consequence. | |
/ | |
/ @param rax,rdx,xmm0,xmm1,st0,st1 is return value | |
/ @assume system five nexgen32e abi conformant | |
/ <LIMBO> | |
__gc: decq __garbage(%rip) | |
mov __garbage(%rip),%r8 | |
mov __garbage+16(%rip),%r9 | |
js 9f | |
shl $5,%r8 | |
lea (%r9,%r8),%r8 | |
mov 8(%r8),%r9 | |
mov 16(%r8),%rdi | |
push 24(%r8) | |
/ </LIMBO> | |
push %rbp | |
mov %rsp,%rbp | |
sub $0x40,%rsp | |
push %rax | |
push %rdx | |
movdqa %xmm0,-0x20(%rbp) | |
movdqa %xmm1,-0x10(%rbp) | |
call *%r9 | |
movdqa -0x10(%rbp),%xmm1 | |
movdqa -0x20(%rbp),%xmm0 | |
pop %rdx | |
pop %rax | |
leave | |
ret | |
9: call abort | |
.type __gc,@function | |
.size __gc,.-__gc | |
.globl __gc | |
.bss | |
.align 8 | |
__garbage: | |
.quad 0 # garbage.i | |
.quad 0 # garbage.n | |
.quad 0 # garbage.p | |
.rept INITIAL_CAPACITY | |
.quad 0 # garbage.p[π].frame | |
.quad 0 # garbage.p[π].fn | |
.quad 0 # garbage.p[π].arg | |
.quad 0 # garbage.p[π].ret | |
.endr | |
.size __garbage,.-__garbage | |
.type __gc,@object | |
.globl __garbage | |
.previous | |
.section .init | |
movq $INITIAL_CAPACITY,__garbage+8 | |
movq $__garbage+24,__garbage+16 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/ -*-unix-assembly-*- | |
/ Jumps up stack to previous setjmp() invocation. | |
/ | |
/ This is the same as longjmp() but also unwinds the stack to free | |
/ memory, etc. that was registered using gc() or defer(). If GC | |
/ isn't linked, this behaves the same as longjmp(). | |
/ | |
/ @param rdi points to the jmp_buf which must be the same stack | |
/ @param esi is returned by setjmp() invocation (coerced nonzero) | |
/ @assume system five nexgen32e abi conformant | |
/ @noreturn | |
gclongjmp: | |
push %rbp | |
mov %rsp,%rbp | |
.weak __garbage | |
lea __garbage(%rip),%r12 | |
test %r12,%r12 | |
jnz .L.unwind.destructors | |
0: jmp longjmp | |
.L.unwind.destructors: | |
push %rdi | |
push %rsi | |
mov (%r12),%r13 # garbage.i | |
mov 16(%r12),%r14 # garbage.p | |
mov (%rdi),%r15 # jmp_buf[0] is new %rsp | |
shl $5,%r13 | |
1: test %r13,%r13 | |
jz 2f | |
sub $32,%r13 | |
cmp (%r14,%r13),%r15 | |
ja 2f | |
mov 8(%r14,%r13),%rax # garbage.p[π].fn | |
mov 16(%r14,%r13),%rdi # garbage.p[π].arg | |
call *%rax | |
decq (%r12) | |
jmp 1b | |
2: pop %rsi | |
pop %rdi | |
jmp 0b | |
.size gclongjmp,.-gclongjmp | |
.type gclongjmp,@function | |
.globl gclongjmp |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment