Mar*_*han 9 c linux signals system-calls linux-kernel
我开发了一个处理SIGILL信号的库.因为我想避免libc依赖,并直接使用Linux系统调用.我注意到我的库挂在一些Linux系统上,经过大量的调试后我发现使用rt_sigaction系统调用而不是sigaction解决问题.但是,我没有找到两个系统调用之间差异的描述.SO上有人知道底层细节吗?
更新:我使用信号处理程序来检测某些ARM指令扩展的CPU支持,例如XScale指令MIATT.这是指令探测功能:
static uint32_t probe_xscale() {
register uint32_t retValue asm("r0") = 0;
asm volatile (
// Equivalent of the following code:
// ".arch xscale\n"
// "MIATT acc0, r0, r0;"
// If the next line raises SIGILL, the signal handle will change r0 to 1 and skip the instruction (4 bytes)
"MCR P0, 0x1, r0, c15, c0, 0;"
: "+r" (retValue)
:
:
);
return retValue;
}
Run Code Online (Sandbox Code Playgroud)
在SIGILL处理程序中,我将PC寄存器前进4个字节(此指令的大小),并更改其中一个寄存器以指示已调用SIGILL处理程序.这是信号处理程序代码.
static void probe_signal_handler(int, siginfo_t *, void* ptr) {
ucontext_t* ctx = (ucontext_t*)ptr;
ctx->uc_mcontext.arm_pc += 4;
ctx->uc_mcontext.arm_r0 = 1;
}
Run Code Online (Sandbox Code Playgroud)
以下是我如何进行探测(如果指令未导致SIGILL,则函数返回0,如果调用SIGILL处理程序,则返回1,如果sigaction syscall失败,则返回2):
static uint32_t probeInstruction(uint32_t (*ProbeFunction)()) {
struct sigaction oldSigillAction;
struct sigaction probeSigillAction;
memset(&probeSigillAction, 0, sizeof(probeSigillAction));
probeSigillAction.sa_sigaction = &probe_signal_handler;
// Needs Linux >= 2.2
probeSigillAction.sa_flags = SA_ONSTACK | SA_RESTART | SA_SIGINFO;
int sigactionResult = _syscall_sigaction(SIGILL, &probeSigillAction, &oldSigillAction);
if (sigactionResult == 0) {
const uint32_t probeResult = ProbeFunction();
_syscall_sigaction(SIGILL, &oldSigillAction, NULL);
return probeResult;
} else {
return 2;
}
}
Run Code Online (Sandbox Code Playgroud)
这是我的sigaction syscall存根函数的实现:
static int _syscall_sigaction(int signum, const struct sigaction *new_action, struct sigaction *old_action) __attribute__((noinline));
static int _syscall_sigaction(int signalNumberParameter, const struct sigaction *newActionParameter, struct sigaction *oldActionParameter) {
register int result asm ("r0");
register int signalNumber asm ("r0") = signalNumberParameter;
register const struct sigaction *newAction asm ("r1") = newActionParameter;
register struct sigaction *oldAction asm ("r2") = oldActionParameter;
register int syscallNumber asm ("r7") = __NR_rt_sigaction;
asm volatile (
"swi $0;"
: "=r" (result)
: "r" (signalNumber), "r" (newAction), "r" (oldAction), "r" (syscallNumber)
:
);
return result;
}
Run Code Online (Sandbox Code Playgroud)
我在Android SDK(qemu)和运行Ubuntu的Pandaboard的模拟器中测试了这段代码.在模拟器中,代码运行良好(在模拟ARM9和Cortex-A8 CPU时),但在Pandaboard上,如果我使用__NR_sigaction,它会挂起MIATT指令:似乎在信号处理程序之后代码不会跳过4个字节,而是运行同样的指示.