#include <sys/param.h>
#include <signal.h>
#include <string.h>
#include <stdlib.h>
#include <asl.h>
#include <unistd.h>
#include <sys/types.h>
#include <fcntl.h>
#include <CrashReporterClient.h>
#include "libproc.h"
#include "_simple.h"
#define GUARD_MAX 8
long __stack_chk_guard[GUARD_MAX] = {0, 0, 0, 0, 0, 0, 0, 0};
void __abort(void) __dead2;
void __guard_setup(const char *apple[]) __attribute__ ((visibility ("hidden")));
void __stack_chk_fail(void);
static void
__guard_from_kernel(const char *str)
{
unsigned long long val;
char tmp[20], *p;
int idx = 0;
str = strchr(str, '=');
if (str == NULL)
return;
str++;
while (str && idx < GUARD_MAX) {
strlcpy(tmp, str, 20);
p = strchr(tmp, ',');
if (p)
*p = '\0';
val = strtoull(tmp, NULL, 0);
__stack_chk_guard[idx] = (long)(val & ((unsigned long) -1));
idx++;
if ((str = strchr(str, ',')) != NULL)
str++;
}
}
void
__guard_setup(const char *apple[])
{
int fd;
size_t len;
const char **p;
if (__stack_chk_guard[0] != 0)
return;
for (p = apple; p && *p; p++) {
if (strstr(*p, "stack_guard") == *p) {
__guard_from_kernel(*p);
bzero((void*)*p, strlen(*p));
if (__stack_chk_guard[0] != 0) {
return;
}
}
}
fd = open ("/dev/urandom", 0);
if (fd != -1) {
len = read (fd, (char*)&__stack_chk_guard, sizeof(__stack_chk_guard));
close(fd);
if (len == sizeof(__stack_chk_guard) &&
*__stack_chk_guard != 0)
return;
}
((unsigned char *)__stack_chk_guard)[0] = 0;
((unsigned char *)__stack_chk_guard)[1] = 0;
((unsigned char *)__stack_chk_guard)[2] = '\n';
((unsigned char *)__stack_chk_guard)[3] = 255;
}
#define STACKOVERFLOW "] stack overflow"
void
__stack_chk_fail()
{
char n[16]; char *np;
int pid = getpid();
char message[sizeof(n) + sizeof(STACKOVERFLOW)] = "[";
char prog[2*MAXCOMLEN+1] = {0};
proc_name(pid, prog, 2*MAXCOMLEN);
prog[2*MAXCOMLEN] = 0;
np = n + sizeof(n);
*--np = 0;
while(pid > 0) {
*--np = (pid % 10) + '0';
pid /= 10;
}
strlcat(message, np, sizeof(message));
strlcat(message, STACKOVERFLOW, sizeof(message));
_simple_asl_log_prog(ASL_LEVEL_CRIT, "user", message, prog);
CRSetCrashLogMessage(message);
__abort();
}