Elliott Hughes | ad88a08 | 2012-10-24 18:37:21 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2012 The Android Open Source Project |
| 3 | * All rights reserved. |
| 4 | * |
| 5 | * Redistribution and use in source and binary forms, with or without |
| 6 | * modification, are permitted provided that the following conditions |
| 7 | * are met: |
| 8 | * * Redistributions of source code must retain the above copyright |
| 9 | * notice, this list of conditions and the following disclaimer. |
| 10 | * * Redistributions in binary form must reproduce the above copyright |
| 11 | * notice, this list of conditions and the following disclaimer in |
| 12 | * the documentation and/or other materials provided with the |
| 13 | * distribution. |
| 14 | * |
| 15 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
| 16 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
| 17 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS |
| 18 | * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE |
| 19 | * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, |
| 20 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, |
| 21 | * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS |
| 22 | * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED |
| 23 | * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
| 24 | * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT |
| 25 | * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
| 26 | * SUCH DAMAGE. |
| 27 | */ |
| 28 | |
| 29 | #ifndef _PRIVATE_SSP_H |
| 30 | #define _PRIVATE_SSP_H |
| 31 | |
Nick Kralevich | 36bd371 | 2013-01-16 13:13:22 -0800 | [diff] [blame] | 32 | #include <errno.h> |
| 33 | #include <sys/cdefs.h> |
Elliott Hughes | ad88a08 | 2012-10-24 18:37:21 -0700 | [diff] [blame] | 34 | |
| 35 | __BEGIN_DECLS |
| 36 | |
| 37 | /** WARNING WARNING WARNING |
| 38 | ** |
| 39 | ** This header file is *NOT* part of the public Bionic ABI/API |
| 40 | ** and should not be used/included by user-serviceable parts of |
| 41 | ** the system (e.g. applications). |
| 42 | **/ |
| 43 | |
| 44 | /* GCC uses this on ARM and MIPS. */ |
| 45 | extern void* __stack_chk_guard; |
| 46 | |
| 47 | /* GCC calls this if a stack guard check fails. */ |
| 48 | extern void __stack_chk_fail(); |
| 49 | |
| 50 | __inline__ static void* __attribute__((always_inline)) __generate_stack_chk_guard(void) { |
Nick Kralevich | 36bd371 | 2013-01-16 13:13:22 -0800 | [diff] [blame] | 51 | union { |
| 52 | uintptr_t value; |
| 53 | char bytes[sizeof(uintptr_t)]; |
| 54 | } u; |
Elliott Hughes | ad88a08 | 2012-10-24 18:37:21 -0700 | [diff] [blame] | 55 | |
Nick Kralevich | 36bd371 | 2013-01-16 13:13:22 -0800 | [diff] [blame] | 56 | /* Try pulling random bytes from /dev/urandom. */ |
| 57 | int fd = TEMP_FAILURE_RETRY(open("/dev/urandom", O_RDONLY)); |
| 58 | if (fd != -1) { |
| 59 | ssize_t byte_count = TEMP_FAILURE_RETRY(read(fd, &u.bytes, sizeof(u))); |
| 60 | close(fd); |
| 61 | if (byte_count == sizeof(u)) { |
| 62 | return (void*) u.value; |
| 63 | } |
| 64 | } |
| 65 | |
| 66 | /* If that failed, switch to 'terminator canary'. */ |
| 67 | u.bytes[0] = 0; |
| 68 | u.bytes[1] = 0; |
| 69 | u.bytes[2] = '\n'; |
| 70 | u.bytes[3] = 255; |
| 71 | return (void*) u.value; |
Elliott Hughes | ad88a08 | 2012-10-24 18:37:21 -0700 | [diff] [blame] | 72 | } |
| 73 | |
| 74 | __END_DECLS |
| 75 | |
| 76 | #endif |