/* * Unit test suite for ntdll exceptions * * Copyright 2005 Alexandre Julliard * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 2.1 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this library; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA */ #include #include #ifndef _WIN32_WINNT #define _WIN32_WINNT 0x500 /* For NTSTATUS */ #endif #include "ntstatus.h" #define WIN32_NO_STATUS #define NONAMELESSUNION #include "windef.h" #include "winbase.h" #include "winnt.h" #include "winreg.h" #include "winternl.h" #include "excpt.h" #include "wine/test.h" static void *code_mem; static NTSTATUS (WINAPI *pNtGetContextThread)(HANDLE,CONTEXT*); static NTSTATUS (WINAPI *pNtSetContextThread)(HANDLE,CONTEXT*); static NTSTATUS (WINAPI *pRtlRaiseException)(EXCEPTION_RECORD *rec); static PVOID (WINAPI *pRtlUnwind)(PVOID, PVOID, PEXCEPTION_RECORD, PVOID); static VOID (WINAPI *pRtlCaptureContext)(CONTEXT*); static PVOID (WINAPI *pRtlAddVectoredExceptionHandler)(ULONG first, PVECTORED_EXCEPTION_HANDLER func); static ULONG (WINAPI *pRtlRemoveVectoredExceptionHandler)(PVOID handler); static PVOID (WINAPI *pRtlAddVectoredContinueHandler)(ULONG first, PVECTORED_EXCEPTION_HANDLER func); static ULONG (WINAPI *pRtlRemoveVectoredContinueHandler)(PVOID handler); static NTSTATUS (WINAPI *pNtReadVirtualMemory)(HANDLE, const void*, void*, SIZE_T, SIZE_T*); static NTSTATUS (WINAPI *pNtTerminateProcess)(HANDLE handle, LONG exit_code); static NTSTATUS (WINAPI *pNtQueryInformationProcess)(HANDLE, PROCESSINFOCLASS, PVOID, ULONG, PULONG); static NTSTATUS (WINAPI *pNtQueryInformationThread)(HANDLE, THREADINFOCLASS, PVOID, ULONG, PULONG); static NTSTATUS (WINAPI *pNtSetInformationProcess)(HANDLE, PROCESSINFOCLASS, PVOID, ULONG); static BOOL (WINAPI *pIsWow64Process)(HANDLE, PBOOL); static NTSTATUS (WINAPI *pNtClose)(HANDLE); static NTSTATUS (WINAPI *pNtSuspendProcess)(HANDLE process); static NTSTATUS (WINAPI *pNtResumeProcess)(HANDLE process); #define RTL_UNLOAD_EVENT_TRACE_NUMBER 64 typedef struct _RTL_UNLOAD_EVENT_TRACE { void *BaseAddress; SIZE_T SizeOfImage; ULONG Sequence; ULONG TimeDateStamp; ULONG CheckSum; WCHAR ImageName[32]; } RTL_UNLOAD_EVENT_TRACE, *PRTL_UNLOAD_EVENT_TRACE; static RTL_UNLOAD_EVENT_TRACE *(WINAPI *pRtlGetUnloadEventTrace)(void); static void (WINAPI *pRtlGetUnloadEventTraceEx)(ULONG **element_size, ULONG **element_count, void **event_trace); #if defined(__x86_64__) typedef struct { ULONG Count; struct { ULONG BeginAddress; ULONG EndAddress; ULONG HandlerAddress; ULONG JumpTarget; } ScopeRecord[1]; } SCOPE_TABLE; typedef struct _SETJMP_FLOAT128 { unsigned __int64 DECLSPEC_ALIGN(16) Part[2]; } SETJMP_FLOAT128; typedef struct _JUMP_BUFFER { unsigned __int64 Frame; unsigned __int64 Rbx; unsigned __int64 Rsp; unsigned __int64 Rbp; unsigned __int64 Rsi; unsigned __int64 Rdi; unsigned __int64 R12; unsigned __int64 R13; unsigned __int64 R14; unsigned __int64 R15; unsigned __int64 Rip; unsigned __int64 Spare; SETJMP_FLOAT128 Xmm6; SETJMP_FLOAT128 Xmm7; SETJMP_FLOAT128 Xmm8; SETJMP_FLOAT128 Xmm9; SETJMP_FLOAT128 Xmm10; SETJMP_FLOAT128 Xmm11; SETJMP_FLOAT128 Xmm12; SETJMP_FLOAT128 Xmm13; SETJMP_FLOAT128 Xmm14; SETJMP_FLOAT128 Xmm15; } _JUMP_BUFFER; typedef union _UNWIND_CODE { struct { BYTE CodeOffset; BYTE UnwindOp : 4; BYTE OpInfo : 4; } s; USHORT FrameOffset; } UNWIND_CODE; typedef struct _UNWIND_INFO { BYTE Version : 3; BYTE Flags : 5; BYTE SizeOfProlog; BYTE CountOfCodes; BYTE FrameRegister : 4; BYTE FrameOffset : 4; UNWIND_CODE UnwindCode[1]; /* actually CountOfCodes (aligned) */ /* * union * { * OPTIONAL ULONG ExceptionHandler; * OPTIONAL ULONG FunctionEntry; * }; * OPTIONAL ULONG ExceptionData[]; */ } UNWIND_INFO; static BOOLEAN (CDECL *pRtlAddFunctionTable)(RUNTIME_FUNCTION*, DWORD, DWORD64); static BOOLEAN (CDECL *pRtlDeleteFunctionTable)(RUNTIME_FUNCTION*); static BOOLEAN (CDECL *pRtlInstallFunctionTableCallback)(DWORD64, DWORD64, DWORD, PGET_RUNTIME_FUNCTION_CALLBACK, PVOID, PCWSTR); static PRUNTIME_FUNCTION (WINAPI *pRtlLookupFunctionEntry)(ULONG64, ULONG64*, UNWIND_HISTORY_TABLE*); static DWORD (WINAPI *pRtlAddGrowableFunctionTable)(void**, RUNTIME_FUNCTION*, DWORD, DWORD, ULONG_PTR, ULONG_PTR); static void (WINAPI *pRtlGrowFunctionTable)(void*, DWORD); static void (WINAPI *pRtlDeleteGrowableFunctionTable)(void*); static EXCEPTION_DISPOSITION (WINAPI *p__C_specific_handler)(EXCEPTION_RECORD*, ULONG64, CONTEXT*, DISPATCHER_CONTEXT*); static VOID (WINAPI *pRtlCaptureContext)(CONTEXT*); static VOID (CDECL *pRtlRestoreContext)(CONTEXT*, EXCEPTION_RECORD*); static NTSTATUS (WINAPI *pRtlWow64GetThreadContext)(HANDLE, WOW64_CONTEXT *); static NTSTATUS (WINAPI *pRtlWow64SetThreadContext)(HANDLE, const WOW64_CONTEXT *); static VOID (WINAPI *pRtlUnwindEx)(VOID*, VOID*, EXCEPTION_RECORD*, VOID*, CONTEXT*, UNWIND_HISTORY_TABLE*); static int (CDECL *p_setjmp)(_JUMP_BUFFER*); #endif static int my_argc; static char** my_argv; #ifdef __i386__ #ifndef __WINE_WINTRNL_H #define ProcessExecuteFlags 0x22 #define MEM_EXECUTE_OPTION_DISABLE 0x01 #define MEM_EXECUTE_OPTION_ENABLE 0x02 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04 #define MEM_EXECUTE_OPTION_PERMANENT 0x08 #endif static int test_stage; static BOOL is_wow64; /* Test various instruction combinations that cause a protection fault on the i386, * and check what the resulting exception looks like. */ static const struct exception { BYTE code[18]; /* asm code */ BYTE offset; /* offset of faulting instruction */ BYTE length; /* length of faulting instruction */ BOOL wow64_broken; /* broken on Wow64, should be skipped */ NTSTATUS status; /* expected status code */ DWORD nb_params; /* expected number of parameters */ DWORD params[4]; /* expected parameters */ NTSTATUS alt_status; /* alternative status code */ DWORD alt_nb_params; /* alternative number of parameters */ DWORD alt_params[4]; /* alternative parameters */ } exceptions[] = { /* 0 */ /* test some privileged instructions */ { { 0xfb, 0xc3 }, /* 0: sti; ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6c, 0xc3 }, /* 1: insb (%dx); ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6d, 0xc3 }, /* 2: insl (%dx); ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6e, 0xc3 }, /* 3: outsb (%dx); ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6f, 0xc3 }, /* 4: outsl (%dx); ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 5 */ { { 0xe4, 0x11, 0xc3 }, /* 5: inb $0x11,%al; ret */ 0, 2, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xe5, 0x11, 0xc3 }, /* 6: inl $0x11,%eax; ret */ 0, 2, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xe6, 0x11, 0xc3 }, /* 7: outb %al,$0x11; ret */ 0, 2, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xe7, 0x11, 0xc3 }, /* 8: outl %eax,$0x11; ret */ 0, 2, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xed, 0xc3 }, /* 9: inl (%dx),%eax; ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 10 */ { { 0xee, 0xc3 }, /* 10: outb %al,(%dx); ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xef, 0xc3 }, /* 11: outl %eax,(%dx); ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xf4, 0xc3 }, /* 12: hlt; ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xfa, 0xc3 }, /* 13: cli; ret */ 0, 1, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test long jump to invalid selector */ { { 0xea, 0, 0, 0, 0, 0, 0, 0xc3 }, /* 14: ljmp $0,$0; ret */ 0, 7, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, /* 15 */ /* test iret to invalid selector */ { { 0x6a, 0x00, 0x6a, 0x00, 0x6a, 0x00, 0xcf, 0x83, 0xc4, 0x0c, 0xc3 }, /* 15: pushl $0; pushl $0; pushl $0; iret; addl $12,%esp; ret */ 6, 1, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, /* test loading an invalid selector */ { { 0xb8, 0xef, 0xbe, 0x00, 0x00, 0x8e, 0xe8, 0xc3 }, /* 16: mov $beef,%ax; mov %ax,%gs; ret */ 5, 2, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xbee8 } }, /* 0xbee8 or 0xffffffff */ /* test accessing a zero selector (%es broken on Wow64) */ { { 0x06, 0x31, 0xc0, 0x8e, 0xc0, 0x26, 0xa1, 0, 0, 0, 0, 0x07, 0xc3 }, /* push %es; xor %eax,%eax; mov %ax,%es; mov %es:(0),%ax; pop %es; ret */ 5, 6, TRUE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, { { 0x0f, 0xa8, 0x31, 0xc0, 0x8e, 0xe8, 0x65, 0xa1, 0, 0, 0, 0, 0x0f, 0xa9, 0xc3 }, /* push %gs; xor %eax,%eax; mov %ax,%gs; mov %gs:(0),%ax; pop %gs; ret */ 6, 6, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, /* test moving %cs -> %ss */ { { 0x0e, 0x17, 0x58, 0xc3 }, /* pushl %cs; popl %ss; popl %eax; ret */ 1, 1, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, /* 20 */ /* test overlong instruction (limit is 15 bytes, 5 on Win7) */ { { 0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0xfa,0xc3 }, 0, 16, TRUE, STATUS_ILLEGAL_INSTRUCTION, 0, { 0 }, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, { { 0x64,0x64,0x64,0x64,0xfa,0xc3 }, 0, 5, TRUE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test invalid interrupt */ { { 0xcd, 0xff, 0xc3 }, /* int $0xff; ret */ 0, 2, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, /* test moves to/from Crx */ { { 0x0f, 0x20, 0xc0, 0xc3 }, /* movl %cr0,%eax; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x20, 0xe0, 0xc3 }, /* movl %cr4,%eax; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 25 */ { { 0x0f, 0x22, 0xc0, 0xc3 }, /* movl %eax,%cr0; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x22, 0xe0, 0xc3 }, /* movl %eax,%cr4; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test moves to/from Drx */ { { 0x0f, 0x21, 0xc0, 0xc3 }, /* movl %dr0,%eax; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x21, 0xc8, 0xc3 }, /* movl %dr1,%eax; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x21, 0xf8, 0xc3 }, /* movl %dr7,%eax; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 30 */ { { 0x0f, 0x23, 0xc0, 0xc3 }, /* movl %eax,%dr0; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x23, 0xc8, 0xc3 }, /* movl %eax,%dr1; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x23, 0xf8, 0xc3 }, /* movl %eax,%dr7; ret */ 0, 3, FALSE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test memory reads */ { { 0xa1, 0xfc, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffc,%eax; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffc } }, { { 0xa1, 0xfd, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffd,%eax; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffd } }, /* 35 */ { { 0xa1, 0xfe, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffe,%eax; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffe } }, { { 0xa1, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xffffffff,%eax; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffff } }, /* test memory writes */ { { 0xa3, 0xfc, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffc; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffc } }, { { 0xa3, 0xfd, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffd; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffd } }, { { 0xa3, 0xfe, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffe; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffe } }, /* 40 */ { { 0xa3, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xffffffff; ret */ 0, 5, FALSE, STATUS_ACCESS_VIOLATION, 2, { 1, 0xffffffff } }, /* test exception with cleared %ds and %es (broken on Wow64) */ { { 0x1e, 0x06, 0x31, 0xc0, 0x8e, 0xd8, 0x8e, 0xc0, 0xfa, 0x07, 0x1f, 0xc3 }, /* push %ds; push %es; xorl %eax,%eax; mov %ax,%ds; mov %ax,%es; cli; pop %es; pop %ds; ret */ 8, 1, TRUE, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xf1, 0x90, 0xc3 }, /* icebp; nop; ret */ 1, 1, FALSE, STATUS_SINGLE_STEP, 0 }, { { 0xb8, 0xb8, 0xb8, 0xb8, 0xb8, /* mov $0xb8b8b8b8, %eax */ 0xb9, 0xb9, 0xb9, 0xb9, 0xb9, /* mov $0xb9b9b9b9, %ecx */ 0xba, 0xba, 0xba, 0xba, 0xba, /* mov $0xbabababa, %edx */ 0xcd, 0x2d, 0xc3 }, /* int $0x2d; ret */ 17, 0, FALSE, STATUS_BREAKPOINT, 3, { 0xb8b8b8b8, 0xb9b9b9b9, 0xbabababa } }, }; static int got_exception; static BOOL have_vectored_api; static void run_exception_test(void *handler, const void* context, const void *code, unsigned int code_size, DWORD access) { struct { EXCEPTION_REGISTRATION_RECORD frame; const void *context; } exc_frame; void (*func)(void) = code_mem; DWORD oldaccess, oldaccess2; exc_frame.frame.Handler = handler; exc_frame.frame.Prev = NtCurrentTeb()->Tib.ExceptionList; exc_frame.context = context; memcpy(code_mem, code, code_size); if(access) VirtualProtect(code_mem, code_size, access, &oldaccess); NtCurrentTeb()->Tib.ExceptionList = &exc_frame.frame; func(); NtCurrentTeb()->Tib.ExceptionList = exc_frame.frame.Prev; if(access) VirtualProtect(code_mem, code_size, oldaccess, &oldaccess2); } static LONG CALLBACK rtlraiseexception_vectored_handler(EXCEPTION_POINTERS *ExceptionInfo) { PCONTEXT context = ExceptionInfo->ContextRecord; PEXCEPTION_RECORD rec = ExceptionInfo->ExceptionRecord; trace("vect. handler %08x addr:%p context.Eip:%x\n", rec->ExceptionCode, rec->ExceptionAddress, context->Eip); ok(rec->ExceptionAddress == (char *)code_mem + 0xb || broken(rec->ExceptionAddress == code_mem || !rec->ExceptionAddress) /* 2008 */, "ExceptionAddress at %p instead of %p\n", rec->ExceptionAddress, (char *)code_mem + 0xb); if (NtCurrentTeb()->Peb->BeingDebugged) ok((void *)context->Eax == pRtlRaiseException || broken( is_wow64 && context->Eax == 0xf00f00f1 ), /* broken on vista */ "debugger managed to modify Eax to %x should be %p\n", context->Eax, pRtlRaiseException); /* check that context.Eip is fixed up only for EXCEPTION_BREAKPOINT * even if raised by RtlRaiseException */ if(rec->ExceptionCode == EXCEPTION_BREAKPOINT) { ok(context->Eip == (DWORD)code_mem + 0xa || broken(context->Eip == (DWORD)code_mem + 0xb), /* win2k3 */ "Eip at %x instead of %x or %x\n", context->Eip, (DWORD)code_mem + 0xa, (DWORD)code_mem + 0xb); } else { ok(context->Eip == (DWORD)code_mem + 0xb, "Eip at %x instead of %x\n", context->Eip, (DWORD)code_mem + 0xb); } /* test if context change is preserved from vectored handler to stack handlers */ context->Eax = 0xf00f00f0; return EXCEPTION_CONTINUE_SEARCH; } static DWORD rtlraiseexception_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { trace( "exception: %08x flags:%x addr:%p context: Eip:%x\n", rec->ExceptionCode, rec->ExceptionFlags, rec->ExceptionAddress, context->Eip ); ok(rec->ExceptionAddress == (char *)code_mem + 0xb || broken(rec->ExceptionAddress == code_mem || !rec->ExceptionAddress) /* 2008 */, "ExceptionAddress at %p instead of %p\n", rec->ExceptionAddress, (char *)code_mem + 0xb); ok( context->ContextFlags == CONTEXT_ALL || context->ContextFlags == (CONTEXT_ALL | CONTEXT_XSTATE) || broken(context->ContextFlags == CONTEXT_FULL), /* win2003 */ "wrong context flags %x\n", context->ContextFlags ); /* check that context.Eip is fixed up only for EXCEPTION_BREAKPOINT * even if raised by RtlRaiseException */ if(rec->ExceptionCode == EXCEPTION_BREAKPOINT) { ok(context->Eip == (DWORD)code_mem + 0xa || broken(context->Eip == (DWORD)code_mem + 0xb), /* win2k3 */ "Eip at %x instead of %x or %x\n", context->Eip, (DWORD)code_mem + 0xa, (DWORD)code_mem + 0xb); } else { ok(context->Eip == (DWORD)code_mem + 0xb, "Eip at %x instead of %x\n", context->Eip, (DWORD)code_mem + 0xb); } if(have_vectored_api) ok(context->Eax == 0xf00f00f0, "Eax is %x, should have been set to 0xf00f00f0 in vectored handler\n", context->Eax); /* give the debugger a chance to examine the state a second time */ /* without the exception handler changing Eip */ if (test_stage == 2) return ExceptionContinueSearch; /* Eip in context is decreased by 1 * Increase it again, else execution will continue in the middle of an instruction */ if(rec->ExceptionCode == EXCEPTION_BREAKPOINT && (context->Eip == (DWORD)code_mem + 0xa)) context->Eip += 1; return ExceptionContinueExecution; } static const BYTE call_one_arg_code[] = { 0x8b, 0x44, 0x24, 0x08, /* mov 0x8(%esp),%eax */ 0x50, /* push %eax */ 0x8b, 0x44, 0x24, 0x08, /* mov 0x8(%esp),%eax */ 0xff, 0xd0, /* call *%eax */ 0x90, /* nop */ 0x90, /* nop */ 0x90, /* nop */ 0x90, /* nop */ 0xc3, /* ret */ }; static void run_rtlraiseexception_test(DWORD exceptioncode) { EXCEPTION_REGISTRATION_RECORD frame; EXCEPTION_RECORD record; PVOID vectored_handler = NULL; void (*func)(void* function, EXCEPTION_RECORD* record) = code_mem; record.ExceptionCode = exceptioncode; record.ExceptionFlags = 0; record.ExceptionRecord = NULL; record.ExceptionAddress = NULL; /* does not matter, copied return address */ record.NumberParameters = 0; frame.Handler = rtlraiseexception_handler; frame.Prev = NtCurrentTeb()->Tib.ExceptionList; memcpy(code_mem, call_one_arg_code, sizeof(call_one_arg_code)); NtCurrentTeb()->Tib.ExceptionList = &frame; if (have_vectored_api) { vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &rtlraiseexception_vectored_handler); ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); } func(pRtlRaiseException, &record); ok( record.ExceptionAddress == (char *)code_mem + 0x0b, "address set to %p instead of %p\n", record.ExceptionAddress, (char *)code_mem + 0x0b ); if (have_vectored_api) pRtlRemoveVectoredExceptionHandler(vectored_handler); NtCurrentTeb()->Tib.ExceptionList = frame.Prev; } static void test_rtlraiseexception(void) { if (!pRtlRaiseException) { skip("RtlRaiseException not found\n"); return; } /* test without debugger */ run_rtlraiseexception_test(0x12345); run_rtlraiseexception_test(EXCEPTION_BREAKPOINT); run_rtlraiseexception_test(EXCEPTION_INVALID_HANDLE); } static DWORD unwind_expected_eax; static DWORD unwind_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { trace("exception: %08x flags:%x addr:%p context: Eip:%x\n", rec->ExceptionCode, rec->ExceptionFlags, rec->ExceptionAddress, context->Eip); ok(rec->ExceptionCode == STATUS_UNWIND, "ExceptionCode is %08x instead of %08x\n", rec->ExceptionCode, STATUS_UNWIND); ok(rec->ExceptionAddress == (char *)code_mem + 0x22 || broken(TRUE) /* Win10 1709 */, "ExceptionAddress at %p instead of %p\n", rec->ExceptionAddress, (char *)code_mem + 0x22); ok(context->Eip == (DWORD)code_mem + 0x22, "context->Eip is %08x instead of %08x\n", context->Eip, (DWORD)code_mem + 0x22); ok(context->Eax == unwind_expected_eax, "context->Eax is %08x instead of %08x\n", context->Eax, unwind_expected_eax); context->Eax += 1; return ExceptionContinueSearch; } static const BYTE call_unwind_code[] = { 0x55, /* push %ebp */ 0x53, /* push %ebx */ 0x56, /* push %esi */ 0x57, /* push %edi */ 0xe8, 0x00, 0x00, 0x00, 0x00, /* call 0 */ 0x58, /* 0: pop %eax */ 0x05, 0x1e, 0x00, 0x00, 0x00, /* add $0x1e,%eax */ 0xff, 0x74, 0x24, 0x20, /* push 0x20(%esp) */ 0xff, 0x74, 0x24, 0x20, /* push 0x20(%esp) */ 0x50, /* push %eax */ 0xff, 0x74, 0x24, 0x24, /* push 0x24(%esp) */ 0x8B, 0x44, 0x24, 0x24, /* mov 0x24(%esp),%eax */ 0xff, 0xd0, /* call *%eax */ 0x5f, /* pop %edi */ 0x5e, /* pop %esi */ 0x5b, /* pop %ebx */ 0x5d, /* pop %ebp */ 0xc3, /* ret */ 0xcc, /* int $3 */ }; static void test_unwind(void) { EXCEPTION_REGISTRATION_RECORD frames[2], *frame2 = &frames[0], *frame1 = &frames[1]; DWORD (*func)(void* function, EXCEPTION_REGISTRATION_RECORD *pEndFrame, EXCEPTION_RECORD* record, DWORD retval) = code_mem; DWORD retval; memcpy(code_mem, call_unwind_code, sizeof(call_unwind_code)); /* add first unwind handler */ frame1->Handler = unwind_handler; frame1->Prev = NtCurrentTeb()->Tib.ExceptionList; NtCurrentTeb()->Tib.ExceptionList = frame1; /* add second unwind handler */ frame2->Handler = unwind_handler; frame2->Prev = NtCurrentTeb()->Tib.ExceptionList; NtCurrentTeb()->Tib.ExceptionList = frame2; /* test unwind to current frame */ unwind_expected_eax = 0xDEAD0000; retval = func(pRtlUnwind, frame2, NULL, 0xDEAD0000); ok(retval == 0xDEAD0000, "RtlUnwind returned eax %08x instead of %08x\n", retval, 0xDEAD0000); ok(NtCurrentTeb()->Tib.ExceptionList == frame2, "Exception record points to %p instead of %p\n", NtCurrentTeb()->Tib.ExceptionList, frame2); /* unwind to frame1 */ unwind_expected_eax = 0xDEAD0000; retval = func(pRtlUnwind, frame1, NULL, 0xDEAD0000); ok(retval == 0xDEAD0001, "RtlUnwind returned eax %08x instead of %08x\n", retval, 0xDEAD0001); ok(NtCurrentTeb()->Tib.ExceptionList == frame1, "Exception record points to %p instead of %p\n", NtCurrentTeb()->Tib.ExceptionList, frame1); /* restore original handler */ NtCurrentTeb()->Tib.ExceptionList = frame1->Prev; } static DWORD handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { const struct exception *except = *(const struct exception **)(frame + 1); unsigned int i, parameter_count, entry = except - exceptions; got_exception++; trace( "exception %u: %x flags:%x addr:%p\n", entry, rec->ExceptionCode, rec->ExceptionFlags, rec->ExceptionAddress ); ok( rec->ExceptionCode == except->status || (except->alt_status != 0 && rec->ExceptionCode == except->alt_status), "%u: Wrong exception code %x/%x\n", entry, rec->ExceptionCode, except->status ); ok( context->Eip == (DWORD_PTR)code_mem + except->offset, "%u: Unexpected eip %#x/%#lx\n", entry, context->Eip, (DWORD_PTR)code_mem + except->offset ); ok( rec->ExceptionAddress == (char*)context->Eip || (rec->ExceptionCode == STATUS_BREAKPOINT && rec->ExceptionAddress == (char*)context->Eip + 1), "%u: Unexpected exception address %p/%p\n", entry, rec->ExceptionAddress, (char*)context->Eip ); if (except->status == STATUS_BREAKPOINT && is_wow64) parameter_count = 1; else if (except->alt_status == 0 || rec->ExceptionCode != except->alt_status) parameter_count = except->nb_params; else parameter_count = except->alt_nb_params; ok( rec->NumberParameters == parameter_count, "%u: Unexpected parameter count %u/%u\n", entry, rec->NumberParameters, parameter_count ); /* Most CPUs (except Intel Core apparently) report a segment limit violation */ /* instead of page faults for accesses beyond 0xffffffff */ if (except->nb_params == 2 && except->params[1] >= 0xfffffffd) { if (rec->ExceptionInformation[0] == 0 && rec->ExceptionInformation[1] == 0xffffffff) goto skip_params; } /* Seems that both 0xbee8 and 0xfffffffff can be returned in windows */ if (except->nb_params == 2 && rec->NumberParameters == 2 && except->params[1] == 0xbee8 && rec->ExceptionInformation[1] == 0xffffffff && except->params[0] == rec->ExceptionInformation[0]) { goto skip_params; } if (except->alt_status == 0 || rec->ExceptionCode != except->alt_status) { for (i = 0; i < rec->NumberParameters; i++) ok( rec->ExceptionInformation[i] == except->params[i], "%u: Wrong parameter %d: %lx/%x\n", entry, i, rec->ExceptionInformation[i], except->params[i] ); } else { for (i = 0; i < rec->NumberParameters; i++) ok( rec->ExceptionInformation[i] == except->alt_params[i], "%u: Wrong parameter %d: %lx/%x\n", entry, i, rec->ExceptionInformation[i], except->alt_params[i] ); } skip_params: /* don't handle exception if it's not the address we expected */ if (context->Eip != (DWORD_PTR)code_mem + except->offset) return ExceptionContinueSearch; context->Eip += except->length; return ExceptionContinueExecution; } static void test_prot_fault(void) { unsigned int i; for (i = 0; i < ARRAY_SIZE(exceptions); i++) { if (is_wow64 && exceptions[i].wow64_broken && !strcmp( winetest_platform, "windows" )) { skip( "Exception %u broken on Wow64\n", i ); continue; } got_exception = 0; run_exception_test(handler, &exceptions[i], &exceptions[i].code, sizeof(exceptions[i].code), 0); if (!i && !got_exception) { trace( "No exception, assuming win9x, no point in testing further\n" ); break; } ok( got_exception == (exceptions[i].status != 0), "%u: bad exception count %d\n", i, got_exception ); } } struct dbgreg_test { DWORD dr0, dr1, dr2, dr3, dr6, dr7; }; /* test handling of debug registers */ static DWORD dreg_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { const struct dbgreg_test *test = *(const struct dbgreg_test **)(frame + 1); context->Eip += 2; /* Skips the popl (%eax) */ context->Dr0 = test->dr0; context->Dr1 = test->dr1; context->Dr2 = test->dr2; context->Dr3 = test->dr3; context->Dr6 = test->dr6; context->Dr7 = test->dr7; return ExceptionContinueExecution; } #define CHECK_DEBUG_REG(n, m) \ ok((ctx.Dr##n & m) == test->dr##n, "(%d) failed to set debug register " #n " to %x, got %x\n", \ test_num, test->dr##n, ctx.Dr##n) static void check_debug_registers(int test_num, const struct dbgreg_test *test) { CONTEXT ctx; NTSTATUS status; ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; status = pNtGetContextThread(GetCurrentThread(), &ctx); ok(status == STATUS_SUCCESS, "NtGetContextThread failed with %x\n", status); CHECK_DEBUG_REG(0, ~0); CHECK_DEBUG_REG(1, ~0); CHECK_DEBUG_REG(2, ~0); CHECK_DEBUG_REG(3, ~0); CHECK_DEBUG_REG(6, 0x0f); CHECK_DEBUG_REG(7, ~0xdc00); } static const BYTE segfault_code[5] = { 0x31, 0xc0, /* xor %eax,%eax */ 0x8f, 0x00, /* popl (%eax) - cause exception */ 0xc3 /* ret */ }; /* test the single step exception behaviour */ static DWORD single_step_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { got_exception++; ok (!(context->EFlags & 0x100), "eflags has single stepping bit set\n"); if( got_exception < 3) context->EFlags |= 0x100; /* single step until popf instruction */ else { /* show that the last single step exception on the popf instruction * (which removed the TF bit), still is a EXCEPTION_SINGLE_STEP exception */ ok( rec->ExceptionCode == EXCEPTION_SINGLE_STEP, "exception is not EXCEPTION_SINGLE_STEP: %x\n", rec->ExceptionCode); } return ExceptionContinueExecution; } static const BYTE single_stepcode[] = { 0x9c, /* pushf */ 0x58, /* pop %eax */ 0x0d,0,1,0,0, /* or $0x100,%eax */ 0x50, /* push %eax */ 0x9d, /* popf */ 0x35,0,1,0,0, /* xor $0x100,%eax */ 0x50, /* push %eax */ 0x9d, /* popf */ 0xc3 }; /* Test the alignment check (AC) flag handling. */ static const BYTE align_check_code[] = { 0x55, /* push %ebp */ 0x89,0xe5, /* mov %esp,%ebp */ 0x9c, /* pushf */ 0x58, /* pop %eax */ 0x0d,0,0,4,0, /* or $0x40000,%eax */ 0x50, /* push %eax */ 0x9d, /* popf */ 0x89,0xe0, /* mov %esp, %eax */ 0x8b,0x40,0x1, /* mov 0x1(%eax), %eax - cause exception */ 0x9c, /* pushf */ 0x58, /* pop %eax */ 0x35,0,0,4,0, /* xor $0x40000,%eax */ 0x50, /* push %eax */ 0x9d, /* popf */ 0x5d, /* pop %ebp */ 0xc3, /* ret */ }; static DWORD align_check_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { ok (!(context->EFlags & 0x40000), "eflags has AC bit set\n"); got_exception++; return ExceptionContinueExecution; } /* Test the direction flag handling. */ static const BYTE direction_flag_code[] = { 0x55, /* push %ebp */ 0x89,0xe5, /* mov %esp,%ebp */ 0xfd, /* std */ 0xfa, /* cli - cause exception */ 0x5d, /* pop %ebp */ 0xc3, /* ret */ }; static DWORD direction_flag_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { #ifdef __GNUC__ unsigned int flags; __asm__("pushfl; popl %0; cld" : "=r" (flags) ); /* older windows versions don't clear DF properly so don't test */ if (flags & 0x400) trace( "eflags has DF bit set\n" ); #endif ok( context->EFlags & 0x400, "context eflags has DF bit cleared\n" ); got_exception++; context->Eip++; /* skip cli */ context->EFlags &= ~0x400; /* make sure it is cleared on return */ return ExceptionContinueExecution; } /* test single stepping over hardware breakpoint */ static DWORD bpx_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { got_exception++; ok( rec->ExceptionCode == EXCEPTION_SINGLE_STEP, "wrong exception code: %x\n", rec->ExceptionCode); if(got_exception == 1) { /* hw bp exception on first nop */ ok( context->Eip == (DWORD)code_mem, "eip is wrong: %x instead of %x\n", context->Eip, (DWORD)code_mem); ok( (context->Dr6 & 0xf) == 1, "B0 flag is not set in Dr6\n"); ok( !(context->Dr6 & 0x4000), "BS flag is set in Dr6\n"); context->Dr0 = context->Dr0 + 1; /* set hw bp again on next instruction */ context->EFlags |= 0x100; /* enable single stepping */ } else if( got_exception == 2) { /* single step exception on second nop */ ok( context->Eip == (DWORD)code_mem + 1, "eip is wrong: %x instead of %x\n", context->Eip, (DWORD)code_mem + 1); ok( (context->Dr6 & 0x4000), "BS flag is not set in Dr6\n"); /* depending on the win version the B0 bit is already set here as well ok( (context->Dr6 & 0xf) == 0, "B0...3 flags in Dr6 shouldn't be set\n"); */ context->EFlags |= 0x100; } else if( got_exception == 3) { /* hw bp exception on second nop */ ok( context->Eip == (DWORD)code_mem + 1, "eip is wrong: %x instead of %x\n", context->Eip, (DWORD)code_mem + 1); ok( (context->Dr6 & 0xf) == 1, "B0 flag is not set in Dr6\n"); ok( !(context->Dr6 & 0x4000), "BS flag is set in Dr6\n"); context->Dr0 = 0; /* clear breakpoint */ context->EFlags |= 0x100; } else { /* single step exception on ret */ ok( context->Eip == (DWORD)code_mem + 2, "eip is wrong: %x instead of %x\n", context->Eip, (DWORD)code_mem + 2); ok( (context->Dr6 & 0xf) == 0, "B0...3 flags in Dr6 shouldn't be set\n"); ok( (context->Dr6 & 0x4000), "BS flag is not set in Dr6\n"); } context->Dr6 = 0; /* clear status register */ return ExceptionContinueExecution; } static const BYTE dummy_code[] = { 0x90, 0x90, 0xc3 }; /* nop, nop, ret */ /* test int3 handling */ static DWORD int3_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { ok( rec->ExceptionAddress == code_mem, "exception address not at: %p, but at %p\n", code_mem, rec->ExceptionAddress); ok( context->Eip == (DWORD)code_mem, "eip not at: %p, but at %#x\n", code_mem, context->Eip); if(context->Eip == (DWORD)code_mem) context->Eip++; /* skip breakpoint */ return ExceptionContinueExecution; } static const BYTE int3_code[] = { 0xCC, 0xc3 }; /* int 3, ret */ static DWORD WINAPI hw_reg_exception_thread( void *arg ) { int expect = (ULONG_PTR)arg; got_exception = 0; run_exception_test( bpx_handler, NULL, dummy_code, sizeof(dummy_code), 0 ); ok( got_exception == expect, "expected %u exceptions, got %d\n", expect, got_exception ); return 0; } static void test_exceptions(void) { CONTEXT ctx; NTSTATUS res; struct dbgreg_test dreg_test; HANDLE h; if (!pNtGetContextThread || !pNtSetContextThread) { skip( "NtGetContextThread/NtSetContextThread not found\n" ); return; } /* test handling of debug registers */ memset(&dreg_test, 0, sizeof(dreg_test)); dreg_test.dr0 = 0x42424240; dreg_test.dr2 = 0x126bb070; dreg_test.dr3 = 0x0badbad0; dreg_test.dr7 = 0xffff0115; run_exception_test(dreg_handler, &dreg_test, &segfault_code, sizeof(segfault_code), 0); check_debug_registers(1, &dreg_test); dreg_test.dr0 = 0x42424242; dreg_test.dr2 = 0x100f0fe7; dreg_test.dr3 = 0x0abebabe; dreg_test.dr7 = 0x115; run_exception_test(dreg_handler, &dreg_test, &segfault_code, sizeof(segfault_code), 0); check_debug_registers(2, &dreg_test); /* test single stepping behavior */ got_exception = 0; run_exception_test(single_step_handler, NULL, &single_stepcode, sizeof(single_stepcode), 0); ok(got_exception == 3, "expected 3 single step exceptions, got %d\n", got_exception); /* test alignment exceptions */ got_exception = 0; run_exception_test(align_check_handler, NULL, align_check_code, sizeof(align_check_code), 0); ok(got_exception == 0, "got %d alignment faults, expected 0\n", got_exception); /* test direction flag */ got_exception = 0; run_exception_test(direction_flag_handler, NULL, direction_flag_code, sizeof(direction_flag_code), 0); ok(got_exception == 1, "got %d exceptions, expected 1\n", got_exception); /* test single stepping over hardware breakpoint */ memset(&ctx, 0, sizeof(ctx)); ctx.Dr0 = (DWORD) code_mem; /* set hw bp on first nop */ ctx.Dr7 = 3; ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; res = pNtSetContextThread( GetCurrentThread(), &ctx); ok( res == STATUS_SUCCESS, "NtSetContextThread failed with %x\n", res); got_exception = 0; run_exception_test(bpx_handler, NULL, dummy_code, sizeof(dummy_code), 0); ok( got_exception == 4,"expected 4 exceptions, got %d\n", got_exception); /* test int3 handling */ run_exception_test(int3_handler, NULL, int3_code, sizeof(int3_code), 0); /* test that hardware breakpoints are not inherited by created threads */ res = pNtSetContextThread( GetCurrentThread(), &ctx ); ok( res == STATUS_SUCCESS, "NtSetContextThread failed with %x\n", res ); h = CreateThread( NULL, 0, hw_reg_exception_thread, 0, 0, NULL ); WaitForSingleObject( h, 10000 ); CloseHandle( h ); h = CreateThread( NULL, 0, hw_reg_exception_thread, (void *)4, CREATE_SUSPENDED, NULL ); ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; res = pNtGetContextThread( h, &ctx ); ok( res == STATUS_SUCCESS, "NtGetContextThread failed with %x\n", res ); ok( ctx.Dr0 == 0, "dr0 %x\n", ctx.Dr0 ); ok( ctx.Dr7 == 0, "dr7 %x\n", ctx.Dr7 ); ctx.Dr0 = (DWORD)code_mem; ctx.Dr7 = 3; res = pNtSetContextThread( h, &ctx ); ok( res == STATUS_SUCCESS, "NtSetContextThread failed with %x\n", res ); ResumeThread( h ); WaitForSingleObject( h, 10000 ); CloseHandle( h ); ctx.Dr0 = 0; ctx.Dr7 = 0; res = pNtSetContextThread( GetCurrentThread(), &ctx ); ok( res == STATUS_SUCCESS, "NtSetContextThread failed with %x\n", res ); } static void test_debugger(void) { char cmdline[MAX_PATH]; PROCESS_INFORMATION pi; STARTUPINFOA si = { 0 }; DEBUG_EVENT de; DWORD continuestatus; PVOID code_mem_address = NULL; NTSTATUS status; SIZE_T size_read; BOOL ret; int counter = 0; si.cb = sizeof(si); if(!pNtGetContextThread || !pNtSetContextThread || !pNtReadVirtualMemory || !pNtTerminateProcess) { skip("NtGetContextThread, NtSetContextThread, NtReadVirtualMemory or NtTerminateProcess not found\n"); return; } sprintf(cmdline, "%s %s %s %p", my_argv[0], my_argv[1], "debuggee", &test_stage); ret = CreateProcessA(NULL, cmdline, NULL, NULL, FALSE, DEBUG_PROCESS, NULL, NULL, &si, &pi); ok(ret, "could not create child process error: %u\n", GetLastError()); if (!ret) return; do { continuestatus = DBG_CONTINUE; ok(WaitForDebugEvent(&de, INFINITE), "reading debug event\n"); if (de.dwThreadId != pi.dwThreadId) { trace("event %d not coming from main thread, ignoring\n", de.dwDebugEventCode); ContinueDebugEvent(de.dwProcessId, de.dwThreadId, DBG_CONTINUE); continue; } if (de.dwDebugEventCode == CREATE_PROCESS_DEBUG_EVENT) { if(de.u.CreateProcessInfo.lpBaseOfImage != NtCurrentTeb()->Peb->ImageBaseAddress) { skip("child process loaded at different address, terminating it\n"); pNtTerminateProcess(pi.hProcess, 0); } } else if (de.dwDebugEventCode == EXCEPTION_DEBUG_EVENT) { CONTEXT ctx; int stage; counter++; status = pNtReadVirtualMemory(pi.hProcess, &code_mem, &code_mem_address, sizeof(code_mem_address), &size_read); ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); status = pNtReadVirtualMemory(pi.hProcess, &test_stage, &stage, sizeof(stage), &size_read); ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); ctx.ContextFlags = CONTEXT_FULL; status = pNtGetContextThread(pi.hThread, &ctx); ok(!status, "NtGetContextThread failed with 0x%x\n", status); trace("exception 0x%x at %p firstchance=%d Eip=0x%x, Eax=0x%x\n", de.u.Exception.ExceptionRecord.ExceptionCode, de.u.Exception.ExceptionRecord.ExceptionAddress, de.u.Exception.dwFirstChance, ctx.Eip, ctx.Eax); if (counter > 100) { ok(FALSE, "got way too many exceptions, probably caught in an infinite loop, terminating child\n"); pNtTerminateProcess(pi.hProcess, 1); } else if (counter >= 2) /* skip startup breakpoint */ { if (stage == 1) { ok((char *)ctx.Eip == (char *)code_mem_address + 0xb, "Eip at %x instead of %p\n", ctx.Eip, (char *)code_mem_address + 0xb); /* setting the context from debugger does not affect the context, the exception handlers gets */ /* uncomment once wine is fixed */ /* ctx.Eip = 0x12345; */ ctx.Eax = 0xf00f00f1; /* let the debuggee handle the exception */ continuestatus = DBG_EXCEPTION_NOT_HANDLED; } else if (stage == 2) { if (de.u.Exception.dwFirstChance) { /* debugger gets first chance exception with unmodified ctx.Eip */ ok((char *)ctx.Eip == (char *)code_mem_address + 0xb, "Eip at 0x%x instead of %p\n", ctx.Eip, (char *)code_mem_address + 0xb); /* setting the context from debugger does not affect the context, the exception handlers gets */ /* uncomment once wine is fixed */ /* ctx.Eip = 0x12345; */ ctx.Eax = 0xf00f00f1; /* pass exception to debuggee * exception will not be handled and * a second chance exception will be raised */ continuestatus = DBG_EXCEPTION_NOT_HANDLED; } else { /* debugger gets context after exception handler has played with it */ /* ctx.Eip is the same value the exception handler got */ if (de.u.Exception.ExceptionRecord.ExceptionCode == EXCEPTION_BREAKPOINT) { ok((char *)ctx.Eip == (char *)code_mem_address + 0xa || broken(is_wow64 && (char *)ctx.Eip == (char *)code_mem_address + 0xb), "Eip at 0x%x instead of %p\n", ctx.Eip, (char *)code_mem_address + 0xa); /* need to fixup Eip for debuggee */ if ((char *)ctx.Eip == (char *)code_mem_address + 0xa) ctx.Eip += 1; } else ok((char *)ctx.Eip == (char *)code_mem_address + 0xb, "Eip at 0x%x instead of %p\n", ctx.Eip, (char *)code_mem_address + 0xb); /* here we handle exception */ } } else if (stage == 7 || stage == 8) { ok(de.u.Exception.ExceptionRecord.ExceptionCode == EXCEPTION_BREAKPOINT, "expected EXCEPTION_BREAKPOINT, got %08x\n", de.u.Exception.ExceptionRecord.ExceptionCode); ok((char *)ctx.Eip == (char *)code_mem_address + 0x1d, "expected Eip = %p, got 0x%x\n", (char *)code_mem_address + 0x1d, ctx.Eip); if (stage == 8) continuestatus = DBG_EXCEPTION_NOT_HANDLED; } else if (stage == 9 || stage == 10) { ok(de.u.Exception.ExceptionRecord.ExceptionCode == EXCEPTION_BREAKPOINT, "expected EXCEPTION_BREAKPOINT, got %08x\n", de.u.Exception.ExceptionRecord.ExceptionCode); ok((char *)ctx.Eip == (char *)code_mem_address + 2, "expected Eip = %p, got 0x%x\n", (char *)code_mem_address + 2, ctx.Eip); if (stage == 10) continuestatus = DBG_EXCEPTION_NOT_HANDLED; } else if (stage == 11 || stage == 12 || stage == 13) { ok(de.u.Exception.ExceptionRecord.ExceptionCode == EXCEPTION_INVALID_HANDLE, "unexpected exception code %08x, expected %08x\n", de.u.Exception.ExceptionRecord.ExceptionCode, EXCEPTION_INVALID_HANDLE); ok(de.u.Exception.ExceptionRecord.NumberParameters == 0, "unexpected number of parameters %d, expected 0\n", de.u.Exception.ExceptionRecord.NumberParameters); if (stage == 12|| stage == 13) continuestatus = DBG_EXCEPTION_NOT_HANDLED; } else ok(FALSE, "unexpected stage %x\n", stage); status = pNtSetContextThread(pi.hThread, &ctx); ok(!status, "NtSetContextThread failed with 0x%x\n", status); } } else if (de.dwDebugEventCode == OUTPUT_DEBUG_STRING_EVENT) { int stage; char buffer[64]; status = pNtReadVirtualMemory(pi.hProcess, &test_stage, &stage, sizeof(stage), &size_read); ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); ok(!de.u.DebugString.fUnicode, "unexpected unicode debug string event\n"); ok(de.u.DebugString.nDebugStringLength < sizeof(buffer) - 1, "buffer not large enough to hold %d bytes\n", de.u.DebugString.nDebugStringLength); memset(buffer, 0, sizeof(buffer)); status = pNtReadVirtualMemory(pi.hProcess, de.u.DebugString.lpDebugStringData, buffer, de.u.DebugString.nDebugStringLength, &size_read); ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); if (stage == 3 || stage == 4) ok(!strcmp(buffer, "Hello World"), "got unexpected debug string '%s'\n", buffer); else /* ignore unrelated debug strings like 'SHIMVIEW: ShimInfo(Complete)' */ ok(strstr(buffer, "SHIMVIEW") != NULL, "unexpected stage %x, got debug string event '%s'\n", stage, buffer); if (stage == 4) continuestatus = DBG_EXCEPTION_NOT_HANDLED; } else if (de.dwDebugEventCode == RIP_EVENT) { int stage; status = pNtReadVirtualMemory(pi.hProcess, &test_stage, &stage, sizeof(stage), &size_read); ok(!status,"NtReadVirtualMemory failed with 0x%x\n", status); if (stage == 5 || stage == 6) { ok(de.u.RipInfo.dwError == 0x11223344, "got unexpected rip error code %08x, expected %08x\n", de.u.RipInfo.dwError, 0x11223344); ok(de.u.RipInfo.dwType == 0x55667788, "got unexpected rip type %08x, expected %08x\n", de.u.RipInfo.dwType, 0x55667788); } else ok(FALSE, "unexpected stage %x\n", stage); if (stage == 6) continuestatus = DBG_EXCEPTION_NOT_HANDLED; } ContinueDebugEvent(de.dwProcessId, de.dwThreadId, continuestatus); } while (de.dwDebugEventCode != EXIT_PROCESS_DEBUG_EVENT); winetest_wait_child_process( pi.hProcess ); ret = CloseHandle(pi.hThread); ok(ret, "error %u\n", GetLastError()); ret = CloseHandle(pi.hProcess); ok(ret, "error %u\n", GetLastError()); return; } static DWORD simd_fault_handler( EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher ) { int *stage = *(int **)(frame + 1); got_exception++; if( *stage == 1) { /* fault while executing sse instruction */ context->Eip += 3; /* skip addps */ return ExceptionContinueExecution; } else if ( *stage == 2 || *stage == 3 ) { /* stage 2 - divide by zero fault */ /* stage 3 - invalid operation fault */ if( rec->ExceptionCode == EXCEPTION_ILLEGAL_INSTRUCTION) skip("system doesn't support SIMD exceptions\n"); else { ok( rec->ExceptionCode == STATUS_FLOAT_MULTIPLE_TRAPS, "exception code: %#x, should be %#x\n", rec->ExceptionCode, STATUS_FLOAT_MULTIPLE_TRAPS); ok( rec->NumberParameters == 1 || broken(is_wow64 && rec->NumberParameters == 2), "# of params: %i, should be 1\n", rec->NumberParameters); if( rec->NumberParameters == 1 ) ok( rec->ExceptionInformation[0] == 0, "param #1: %lx, should be 0\n", rec->ExceptionInformation[0]); } context->Eip += 3; /* skip divps */ } else ok(FALSE, "unexpected stage %x\n", *stage); return ExceptionContinueExecution; } static const BYTE simd_exception_test[] = { 0x83, 0xec, 0x4, /* sub $0x4, %esp */ 0x0f, 0xae, 0x1c, 0x24, /* stmxcsr (%esp) */ 0x8b, 0x04, 0x24, /* mov (%esp),%eax * store mxcsr */ 0x66, 0x81, 0x24, 0x24, 0xff, 0xfd, /* andw $0xfdff,(%esp) * enable divide by */ 0x0f, 0xae, 0x14, 0x24, /* ldmxcsr (%esp) * zero exceptions */ 0x6a, 0x01, /* push $0x1 */ 0x6a, 0x01, /* push $0x1 */ 0x6a, 0x01, /* push $0x1 */ 0x6a, 0x01, /* push $0x1 */ 0x0f, 0x10, 0x0c, 0x24, /* movups (%esp),%xmm1 * fill dividend */ 0x0f, 0x57, 0xc0, /* xorps %xmm0,%xmm0 * clear divisor */ 0x0f, 0x5e, 0xc8, /* divps %xmm0,%xmm1 * generate fault */ 0x83, 0xc4, 0x10, /* add $0x10,%esp */ 0x89, 0x04, 0x24, /* mov %eax,(%esp) * restore to old mxcsr */ 0x0f, 0xae, 0x14, 0x24, /* ldmxcsr (%esp) */ 0x83, 0xc4, 0x04, /* add $0x4,%esp */ 0xc3, /* ret */ }; static const BYTE simd_exception_test2[] = { 0x83, 0xec, 0x4, /* sub $0x4, %esp */ 0x0f, 0xae, 0x1c, 0x24, /* stmxcsr (%esp) */ 0x8b, 0x04, 0x24, /* mov (%esp),%eax * store mxcsr */ 0x66, 0x81, 0x24, 0x24, 0x7f, 0xff, /* andw $0xff7f,(%esp) * enable invalid */ 0x0f, 0xae, 0x14, 0x24, /* ldmxcsr (%esp) * operation exceptions */ 0x0f, 0x57, 0xc9, /* xorps %xmm1,%xmm1 * clear dividend */ 0x0f, 0x57, 0xc0, /* xorps %xmm0,%xmm0 * clear divisor */ 0x0f, 0x5e, 0xc8, /* divps %xmm0,%xmm1 * generate fault */ 0x89, 0x04, 0x24, /* mov %eax,(%esp) * restore to old mxcsr */ 0x0f, 0xae, 0x14, 0x24, /* ldmxcsr (%esp) */ 0x83, 0xc4, 0x04, /* add $0x4,%esp */ 0xc3, /* ret */ }; static const BYTE sse_check[] = { 0x0f, 0x58, 0xc8, /* addps %xmm0,%xmm1 */ 0xc3, /* ret */ }; static void test_simd_exceptions(void) { int stage; /* test if CPU & OS can do sse */ stage = 1; got_exception = 0; run_exception_test(simd_fault_handler, &stage, sse_check, sizeof(sse_check), 0); if(got_exception) { skip("system doesn't support SSE\n"); return; } /* generate a SIMD exception */ stage = 2; got_exception = 0; run_exception_test(simd_fault_handler, &stage, simd_exception_test, sizeof(simd_exception_test), 0); ok(got_exception == 1, "got exception: %i, should be 1\n", got_exception); /* generate a SIMD exception, test FPE_FLTINV */ stage = 3; got_exception = 0; run_exception_test(simd_fault_handler, &stage, simd_exception_test2, sizeof(simd_exception_test2), 0); ok(got_exception == 1, "got exception: %i, should be 1\n", got_exception); } struct fpu_exception_info { DWORD exception_code; DWORD exception_offset; DWORD eip_offset; }; static DWORD fpu_exception_handler(EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher) { struct fpu_exception_info *info = *(struct fpu_exception_info **)(frame + 1); info->exception_code = rec->ExceptionCode; info->exception_offset = (BYTE *)rec->ExceptionAddress - (BYTE *)code_mem; info->eip_offset = context->Eip - (DWORD)code_mem; ++context->Eip; return ExceptionContinueExecution; } static void test_fpu_exceptions(void) { static const BYTE fpu_exception_test_ie[] = { 0x83, 0xec, 0x04, /* sub $0x4,%esp */ 0x66, 0xc7, 0x04, 0x24, 0xfe, 0x03, /* movw $0x3fe,(%esp) */ 0x9b, 0xd9, 0x7c, 0x24, 0x02, /* fstcw 0x2(%esp) */ 0xd9, 0x2c, 0x24, /* fldcw (%esp) */ 0xd9, 0xee, /* fldz */ 0xd9, 0xe8, /* fld1 */ 0xde, 0xf1, /* fdivp */ 0xdd, 0xd8, /* fstp %st(0) */ 0xdd, 0xd8, /* fstp %st(0) */ 0x9b, /* fwait */ 0xdb, 0xe2, /* fnclex */ 0xd9, 0x6c, 0x24, 0x02, /* fldcw 0x2(%esp) */ 0x83, 0xc4, 0x04, /* add $0x4,%esp */ 0xc3, /* ret */ }; static const BYTE fpu_exception_test_de[] = { 0x83, 0xec, 0x04, /* sub $0x4,%esp */ 0x66, 0xc7, 0x04, 0x24, 0xfb, 0x03, /* movw $0x3fb,(%esp) */ 0x9b, 0xd9, 0x7c, 0x24, 0x02, /* fstcw 0x2(%esp) */ 0xd9, 0x2c, 0x24, /* fldcw (%esp) */ 0xdd, 0xd8, /* fstp %st(0) */ 0xd9, 0xee, /* fldz */ 0xd9, 0xe8, /* fld1 */ 0xde, 0xf1, /* fdivp */ 0x9b, /* fwait */ 0xdb, 0xe2, /* fnclex */ 0xdd, 0xd8, /* fstp %st(0) */ 0xdd, 0xd8, /* fstp %st(0) */ 0xd9, 0x6c, 0x24, 0x02, /* fldcw 0x2(%esp) */ 0x83, 0xc4, 0x04, /* add $0x4,%esp */ 0xc3, /* ret */ }; struct fpu_exception_info info; memset(&info, 0, sizeof(info)); run_exception_test(fpu_exception_handler, &info, fpu_exception_test_ie, sizeof(fpu_exception_test_ie), 0); ok(info.exception_code == EXCEPTION_FLT_STACK_CHECK, "Got exception code %#x, expected EXCEPTION_FLT_STACK_CHECK\n", info.exception_code); ok(info.exception_offset == 0x19 || broken( info.exception_offset == info.eip_offset ), "Got exception offset %#x, expected 0x19\n", info.exception_offset); ok(info.eip_offset == 0x1b, "Got EIP offset %#x, expected 0x1b\n", info.eip_offset); memset(&info, 0, sizeof(info)); run_exception_test(fpu_exception_handler, &info, fpu_exception_test_de, sizeof(fpu_exception_test_de), 0); ok(info.exception_code == EXCEPTION_FLT_DIVIDE_BY_ZERO, "Got exception code %#x, expected EXCEPTION_FLT_DIVIDE_BY_ZERO\n", info.exception_code); ok(info.exception_offset == 0x17 || broken( info.exception_offset == info.eip_offset ), "Got exception offset %#x, expected 0x17\n", info.exception_offset); ok(info.eip_offset == 0x19, "Got EIP offset %#x, expected 0x19\n", info.eip_offset); } struct dpe_exception_info { BOOL exception_caught; DWORD exception_info; }; static DWORD dpe_exception_handler(EXCEPTION_RECORD *rec, EXCEPTION_REGISTRATION_RECORD *frame, CONTEXT *context, EXCEPTION_REGISTRATION_RECORD **dispatcher) { DWORD old_prot; struct dpe_exception_info *info = *(struct dpe_exception_info **)(frame + 1); ok(rec->ExceptionCode == EXCEPTION_ACCESS_VIOLATION, "Exception code %08x\n", rec->ExceptionCode); ok(rec->NumberParameters == 2, "Parameter count: %d\n", rec->NumberParameters); ok((LPVOID)rec->ExceptionInformation[1] == code_mem, "Exception address: %p, expected %p\n", (LPVOID)rec->ExceptionInformation[1], code_mem); info->exception_info = rec->ExceptionInformation[0]; info->exception_caught = TRUE; VirtualProtect(code_mem, 1, PAGE_EXECUTE_READWRITE, &old_prot); return ExceptionContinueExecution; } static void test_dpe_exceptions(void) { static const BYTE single_ret[] = {0xC3}; struct dpe_exception_info info; NTSTATUS stat; BOOL has_hw_support; BOOL is_permanent = FALSE, can_test_without = TRUE, can_test_with = TRUE; DWORD val; ULONG len; /* Query DEP with len too small */ stat = pNtQueryInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val - 1, &len); if(stat == STATUS_INVALID_INFO_CLASS) { skip("This software platform does not support DEP\n"); return; } ok(stat == STATUS_INFO_LENGTH_MISMATCH, "buffer too small: %08x\n", stat); /* Query DEP */ stat = pNtQueryInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val, &len); ok(stat == STATUS_SUCCESS, "querying DEP: status %08x\n", stat); if(stat == STATUS_SUCCESS) { ok(len == sizeof val, "returned length: %d\n", len); if(val & MEM_EXECUTE_OPTION_PERMANENT) { skip("toggling DEP impossible - status locked\n"); is_permanent = TRUE; if(val & MEM_EXECUTE_OPTION_DISABLE) can_test_without = FALSE; else can_test_with = FALSE; } } if(!is_permanent) { /* Enable DEP */ val = MEM_EXECUTE_OPTION_DISABLE; stat = pNtSetInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val); ok(stat == STATUS_SUCCESS, "enabling DEP: status %08x\n", stat); } if(can_test_with) { /* Try access to locked page with DEP on*/ info.exception_caught = FALSE; run_exception_test(dpe_exception_handler, &info, single_ret, sizeof(single_ret), PAGE_NOACCESS); ok(info.exception_caught == TRUE, "Execution of disabled memory succeeded\n"); ok(info.exception_info == EXCEPTION_READ_FAULT || info.exception_info == EXCEPTION_EXECUTE_FAULT, "Access violation type: %08x\n", (unsigned)info.exception_info); has_hw_support = info.exception_info == EXCEPTION_EXECUTE_FAULT; trace("DEP hardware support: %s\n", has_hw_support?"Yes":"No"); /* Try execution of data with DEP on*/ info.exception_caught = FALSE; run_exception_test(dpe_exception_handler, &info, single_ret, sizeof(single_ret), PAGE_READWRITE); if(has_hw_support) { ok(info.exception_caught == TRUE, "Execution of data memory succeeded\n"); ok(info.exception_info == EXCEPTION_EXECUTE_FAULT, "Access violation type: %08x\n", (unsigned)info.exception_info); } else ok(info.exception_caught == FALSE, "Execution trapped without hardware support\n"); } else skip("DEP is in AlwaysOff state\n"); if(!is_permanent) { /* Disable DEP */ val = MEM_EXECUTE_OPTION_ENABLE; stat = pNtSetInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val); ok(stat == STATUS_SUCCESS, "disabling DEP: status %08x\n", stat); } /* page is read without exec here */ if(can_test_without) { /* Try execution of data with DEP off */ info.exception_caught = FALSE; run_exception_test(dpe_exception_handler, &info, single_ret, sizeof(single_ret), PAGE_READWRITE); ok(info.exception_caught == FALSE, "Execution trapped with DEP turned off\n"); /* Try access to locked page with DEP off - error code is different than with hardware DEP on */ info.exception_caught = FALSE; run_exception_test(dpe_exception_handler, &info, single_ret, sizeof(single_ret), PAGE_NOACCESS); ok(info.exception_caught == TRUE, "Execution of disabled memory succeeded\n"); ok(info.exception_info == EXCEPTION_READ_FAULT, "Access violation type: %08x\n", (unsigned)info.exception_info); } else skip("DEP is in AlwaysOn state\n"); if(!is_permanent) { /* Turn off DEP permanently */ val = MEM_EXECUTE_OPTION_ENABLE | MEM_EXECUTE_OPTION_PERMANENT; stat = pNtSetInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val); ok(stat == STATUS_SUCCESS, "disabling DEP permanently: status %08x\n", stat); } /* Try to turn off DEP */ val = MEM_EXECUTE_OPTION_ENABLE; stat = pNtSetInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val); ok(stat == STATUS_ACCESS_DENIED, "disabling DEP while permanent: status %08x\n", stat); /* Try to turn on DEP */ val = MEM_EXECUTE_OPTION_DISABLE; stat = pNtSetInformationProcess(GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val); ok(stat == STATUS_ACCESS_DENIED, "enabling DEP while permanent: status %08x\n", stat); } static void test_thread_context(void) { CONTEXT context; NTSTATUS status; struct expected { DWORD Eax, Ebx, Ecx, Edx, Esi, Edi, Ebp, Esp, Eip, SegCs, SegDs, SegEs, SegFs, SegGs, SegSs, EFlags, prev_frame, x87_control; } expect; NTSTATUS (*func_ptr)( struct expected *res, void *func, void *arg1, void *arg2, DWORD *new_x87_control ) = (void *)code_mem; DWORD new_x87_control; static const BYTE call_func[] = { 0x55, /* pushl %ebp */ 0x89, 0xe5, /* mov %esp,%ebp */ 0x50, /* pushl %eax ; add a bit of offset to the stack */ 0x50, /* pushl %eax */ 0x50, /* pushl %eax */ 0x50, /* pushl %eax */ 0x8b, 0x45, 0x08, /* mov 0x8(%ebp),%eax */ 0x8f, 0x00, /* popl (%eax) */ 0x89, 0x58, 0x04, /* mov %ebx,0x4(%eax) */ 0x89, 0x48, 0x08, /* mov %ecx,0x8(%eax) */ 0x89, 0x50, 0x0c, /* mov %edx,0xc(%eax) */ 0x89, 0x70, 0x10, /* mov %esi,0x10(%eax) */ 0x89, 0x78, 0x14, /* mov %edi,0x14(%eax) */ 0x89, 0x68, 0x18, /* mov %ebp,0x18(%eax) */ 0x89, 0x60, 0x1c, /* mov %esp,0x1c(%eax) */ 0xff, 0x75, 0x04, /* pushl 0x4(%ebp) */ 0x8f, 0x40, 0x20, /* popl 0x20(%eax) */ 0x8c, 0x48, 0x24, /* mov %cs,0x24(%eax) */ 0x8c, 0x58, 0x28, /* mov %ds,0x28(%eax) */ 0x8c, 0x40, 0x2c, /* mov %es,0x2c(%eax) */ 0x8c, 0x60, 0x30, /* mov %fs,0x30(%eax) */ 0x8c, 0x68, 0x34, /* mov %gs,0x34(%eax) */ 0x8c, 0x50, 0x38, /* mov %ss,0x38(%eax) */ 0x9c, /* pushf */ 0x8f, 0x40, 0x3c, /* popl 0x3c(%eax) */ 0xff, 0x75, 0x00, /* pushl 0x0(%ebp) ; previous stack frame */ 0x8f, 0x40, 0x40, /* popl 0x40(%eax) */ /* pushl $0x47f */ 0x68, 0x7f, 0x04, 0x00, 0x00, 0x8f, 0x40, 0x44, /* popl 0x44(%eax) */ 0xd9, 0x68, 0x44, /* fldcw 0x44(%eax) */ 0x8b, 0x00, /* mov (%eax),%eax */ 0xff, 0x75, 0x14, /* pushl 0x14(%ebp) */ 0xff, 0x75, 0x10, /* pushl 0x10(%ebp) */ 0xff, 0x55, 0x0c, /* call *0xc(%ebp) */ 0x8b, 0x55, 0x18, /* mov 0x18(%ebp),%edx */ 0x9b, 0xd9, 0x3a, /* fstcw (%edx) */ 0xdb, 0xe3, /* fninit */ 0xc9, /* leave */ 0xc3, /* ret */ }; memcpy( func_ptr, call_func, sizeof(call_func) ); #define COMPARE(reg) \ ok( context.reg == expect.reg, "wrong " #reg " %08x/%08x\n", context.reg, expect.reg ) memset( &context, 0xcc, sizeof(context) ); memset( &expect, 0xcc, sizeof(expect) ); func_ptr( &expect, pRtlCaptureContext, &context, 0, &new_x87_control ); trace( "expect: eax=%08x ebx=%08x ecx=%08x edx=%08x esi=%08x edi=%08x ebp=%08x esp=%08x " "eip=%08x cs=%04x ds=%04x es=%04x fs=%04x gs=%04x ss=%04x flags=%08x prev=%08x\n", expect.Eax, expect.Ebx, expect.Ecx, expect.Edx, expect.Esi, expect.Edi, expect.Ebp, expect.Esp, expect.Eip, expect.SegCs, expect.SegDs, expect.SegEs, expect.SegFs, expect.SegGs, expect.SegSs, expect.EFlags, expect.prev_frame ); trace( "actual: eax=%08x ebx=%08x ecx=%08x edx=%08x esi=%08x edi=%08x ebp=%08x esp=%08x " "eip=%08x cs=%04x ds=%04x es=%04x fs=%04x gs=%04x ss=%04x flags=%08x\n", context.Eax, context.Ebx, context.Ecx, context.Edx, context.Esi, context.Edi, context.Ebp, context.Esp, context.Eip, context.SegCs, context.SegDs, context.SegEs, context.SegFs, context.SegGs, context.SegSs, context.EFlags ); ok( context.ContextFlags == (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_SEGMENTS) || broken( context.ContextFlags == 0xcccccccc ), /* <= vista */ "wrong flags %08x\n", context.ContextFlags ); COMPARE( Eax ); COMPARE( Ebx ); COMPARE( Ecx ); COMPARE( Edx ); COMPARE( Esi ); COMPARE( Edi ); COMPARE( Eip ); COMPARE( SegCs ); COMPARE( SegDs ); COMPARE( SegEs ); COMPARE( SegFs ); COMPARE( SegGs ); COMPARE( SegSs ); COMPARE( EFlags ); /* Ebp is from the previous stackframe */ ok( context.Ebp == expect.prev_frame, "wrong Ebp %08x/%08x\n", context.Ebp, expect.prev_frame ); /* Esp is the value on entry to the previous stackframe */ ok( context.Esp == expect.Ebp + 8, "wrong Esp %08x/%08x\n", context.Esp, expect.Ebp + 8 ); memset( &context, 0xcc, sizeof(context) ); memset( &expect, 0xcc, sizeof(expect) ); context.ContextFlags = CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_SEGMENTS | CONTEXT_FLOATING_POINT; status = func_ptr( &expect, pNtGetContextThread, (void *)GetCurrentThread(), &context, &new_x87_control ); ok( status == STATUS_SUCCESS, "NtGetContextThread failed %08x\n", status ); trace( "expect: eax=%08x ebx=%08x ecx=%08x edx=%08x esi=%08x edi=%08x ebp=%08x esp=%08x " "eip=%08x cs=%04x ds=%04x es=%04x fs=%04x gs=%04x ss=%04x flags=%08x prev=%08x\n", expect.Eax, expect.Ebx, expect.Ecx, expect.Edx, expect.Esi, expect.Edi, expect.Ebp, expect.Esp, expect.Eip, expect.SegCs, expect.SegDs, expect.SegEs, expect.SegFs, expect.SegGs, expect.SegSs, expect.EFlags, expect.prev_frame ); trace( "actual: eax=%08x ebx=%08x ecx=%08x edx=%08x esi=%08x edi=%08x ebp=%08x esp=%08x " "eip=%08x cs=%04x ds=%04x es=%04x fs=%04x gs=%04x ss=%04x flags=%08x\n", context.Eax, context.Ebx, context.Ecx, context.Edx, context.Esi, context.Edi, context.Ebp, context.Esp, context.Eip, context.SegCs, context.SegDs, context.SegEs, context.SegFs, context.SegGs, context.SegSs, context.EFlags ); /* Eax, Ecx, Edx, EFlags are not preserved */ COMPARE( Ebx ); COMPARE( Esi ); COMPARE( Edi ); COMPARE( Ebp ); /* Esp is the stack upon entry to NtGetContextThread */ ok( context.Esp == expect.Esp - 12 || context.Esp == expect.Esp - 16, "wrong Esp %08x/%08x\n", context.Esp, expect.Esp ); /* Eip is somewhere close to the NtGetContextThread implementation */ ok( (char *)context.Eip >= (char *)pNtGetContextThread - 0x10000 && (char *)context.Eip <= (char *)pNtGetContextThread + 0x10000, "wrong Eip %08x/%08x\n", context.Eip, (DWORD)pNtGetContextThread ); /* segment registers clear the high word */ ok( context.SegCs == LOWORD(expect.SegCs), "wrong SegCs %08x/%08x\n", context.SegCs, expect.SegCs ); ok( context.SegDs == LOWORD(expect.SegDs), "wrong SegDs %08x/%08x\n", context.SegDs, expect.SegDs ); ok( context.SegEs == LOWORD(expect.SegEs), "wrong SegEs %08x/%08x\n", context.SegEs, expect.SegEs ); ok( context.SegFs == LOWORD(expect.SegFs), "wrong SegFs %08x/%08x\n", context.SegFs, expect.SegFs ); ok( context.SegGs == LOWORD(expect.SegGs), "wrong SegGs %08x/%08x\n", context.SegGs, expect.SegGs ); ok( context.SegSs == LOWORD(expect.SegSs), "wrong SegSs %08x/%08x\n", context.SegSs, expect.SegGs ); ok( LOWORD(context.FloatSave.ControlWord) == LOWORD(expect.x87_control), "wrong x87 control word %#x/%#x.\n", context.FloatSave.ControlWord, expect.x87_control ); ok( LOWORD(expect.x87_control) == LOWORD(new_x87_control), "x87 control word changed in NtGetContextThread() %#x/%#x.\n", LOWORD(expect.x87_control), LOWORD(new_x87_control) ); #undef COMPARE } #elif defined(__x86_64__) #define is_wow64 0 #define UNW_FLAG_NHANDLER 0 #define UNW_FLAG_EHANDLER 1 #define UNW_FLAG_UHANDLER 2 #define UNW_FLAG_CHAININFO 4 #define UWOP_PUSH_NONVOL 0 #define UWOP_ALLOC_LARGE 1 #define UWOP_ALLOC_SMALL 2 #define UWOP_SET_FPREG 3 #define UWOP_SAVE_NONVOL 4 #define UWOP_SAVE_NONVOL_FAR 5 #define UWOP_SAVE_XMM128 8 #define UWOP_SAVE_XMM128_FAR 9 #define UWOP_PUSH_MACHFRAME 10 struct results { int rip_offset; /* rip offset from code start */ int rbp_offset; /* rbp offset from stack pointer */ int handler; /* expect handler to be set? */ int rip; /* expected final rip value */ int frame; /* expected frame return value */ int regs[8][2]; /* expected values for registers */ }; struct unwind_test { const BYTE *function; size_t function_size; const BYTE *unwind_info; const struct results *results; unsigned int nb_results; }; enum regs { rax, rcx, rdx, rbx, rsp, rbp, rsi, rdi, r8, r9, r10, r11, r12, r13, r14, r15 }; static const char * const reg_names[16] = { "rax", "rcx", "rdx", "rbx", "rsp", "rbp", "rsi", "rdi", "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15" }; #define UWOP(code,info) (UWOP_##code | ((info) << 4)) static void call_virtual_unwind( int testnum, const struct unwind_test *test ) { static const int code_offset = 1024; static const int unwind_offset = 2048; void *handler, *data; CONTEXT context; RUNTIME_FUNCTION runtime_func; KNONVOLATILE_CONTEXT_POINTERS ctx_ptr; UINT i, j, k; ULONG64 fake_stack[256]; ULONG64 frame, orig_rip, orig_rbp, unset_reg; UINT unwind_size = 4 + 2 * test->unwind_info[2] + 8; memcpy( (char *)code_mem + code_offset, test->function, test->function_size ); memcpy( (char *)code_mem + unwind_offset, test->unwind_info, unwind_size ); runtime_func.BeginAddress = code_offset; runtime_func.EndAddress = code_offset + test->function_size; runtime_func.UnwindData = unwind_offset; trace( "code: %p stack: %p\n", code_mem, fake_stack ); for (i = 0; i < test->nb_results; i++) { memset( &ctx_ptr, 0, sizeof(ctx_ptr) ); memset( &context, 0x55, sizeof(context) ); memset( &unset_reg, 0x55, sizeof(unset_reg) ); for (j = 0; j < 256; j++) fake_stack[j] = j * 8; context.Rsp = (ULONG_PTR)fake_stack; context.Rbp = (ULONG_PTR)fake_stack + test->results[i].rbp_offset; orig_rbp = context.Rbp; orig_rip = (ULONG64)code_mem + code_offset + test->results[i].rip_offset; trace( "%u/%u: rip=%p (%02x) rbp=%p rsp=%p\n", testnum, i, (void *)orig_rip, *(BYTE *)orig_rip, (void *)orig_rbp, (void *)context.Rsp ); data = (void *)0xdeadbeef; handler = RtlVirtualUnwind( UNW_FLAG_EHANDLER, (ULONG64)code_mem, orig_rip, &runtime_func, &context, &data, &frame, &ctx_ptr ); if (test->results[i].handler) { ok( (char *)handler == (char *)code_mem + 0x200, "%u/%u: wrong handler %p/%p\n", testnum, i, handler, (char *)code_mem + 0x200 ); if (handler) ok( *(DWORD *)data == 0x08070605, "%u/%u: wrong handler data %p\n", testnum, i, data ); } else { ok( handler == NULL, "%u/%u: handler %p instead of NULL\n", testnum, i, handler ); ok( data == (void *)0xdeadbeef, "%u/%u: handler data set to %p\n", testnum, i, data ); } ok( context.Rip == test->results[i].rip, "%u/%u: wrong rip %p/%x\n", testnum, i, (void *)context.Rip, test->results[i].rip ); ok( frame == (ULONG64)fake_stack + test->results[i].frame, "%u/%u: wrong frame %p/%p\n", testnum, i, (void *)frame, (char *)fake_stack + test->results[i].frame ); for (j = 0; j < 16; j++) { static const UINT nb_regs = ARRAY_SIZE(test->results[i].regs); for (k = 0; k < nb_regs; k++) { if (test->results[i].regs[k][0] == -1) { k = nb_regs; break; } if (test->results[i].regs[k][0] == j) break; } if (j == rsp) /* rsp is special */ { ok( !ctx_ptr.u2.IntegerContext[j], "%u/%u: rsp should not be set in ctx_ptr\n", testnum, i ); ok( context.Rsp == (ULONG64)fake_stack + test->results[i].regs[k][1], "%u/%u: register rsp wrong %p/%p\n", testnum, i, (void *)context.Rsp, (char *)fake_stack + test->results[i].regs[k][1] ); continue; } if (ctx_ptr.u2.IntegerContext[j]) { ok( k < nb_regs, "%u/%u: register %s should not be set to %lx\n", testnum, i, reg_names[j], *(&context.Rax + j) ); if (k < nb_regs) ok( *(&context.Rax + j) == test->results[i].regs[k][1], "%u/%u: register %s wrong %p/%x\n", testnum, i, reg_names[j], (void *)*(&context.Rax + j), test->results[i].regs[k][1] ); } else { ok( k == nb_regs, "%u/%u: register %s should be set\n", testnum, i, reg_names[j] ); if (j == rbp) ok( context.Rbp == orig_rbp, "%u/%u: register rbp wrong %p/unset\n", testnum, i, (void *)context.Rbp ); else ok( *(&context.Rax + j) == unset_reg, "%u/%u: register %s wrong %p/unset\n", testnum, i, reg_names[j], (void *)*(&context.Rax + j)); } } } } static void test_virtual_unwind(void) { static const BYTE function_0[] = { 0xff, 0xf5, /* 00: push %rbp */ 0x48, 0x81, 0xec, 0x10, 0x01, 0x00, 0x00, /* 02: sub $0x110,%rsp */ 0x48, 0x8d, 0x6c, 0x24, 0x30, /* 09: lea 0x30(%rsp),%rbp */ 0x48, 0x89, 0x9d, 0xf0, 0x00, 0x00, 0x00, /* 0e: mov %rbx,0xf0(%rbp) */ 0x48, 0x89, 0xb5, 0xf8, 0x00, 0x00, 0x00, /* 15: mov %rsi,0xf8(%rbp) */ 0x90, /* 1c: nop */ 0x48, 0x8b, 0x9d, 0xf0, 0x00, 0x00, 0x00, /* 1d: mov 0xf0(%rbp),%rbx */ 0x48, 0x8b, 0xb5, 0xf8, 0x00, 0x00, 0x00, /* 24: mov 0xf8(%rbp),%rsi */ 0x48, 0x8d, 0xa5, 0xe0, 0x00, 0x00, 0x00, /* 2b: lea 0xe0(%rbp),%rsp */ 0x5d, /* 32: pop %rbp */ 0xc3 /* 33: ret */ }; static const BYTE unwind_info_0[] = { 1 | (UNW_FLAG_EHANDLER << 3), /* version + flags */ 0x1c, /* prolog size */ 8, /* opcode count */ (0x03 << 4) | rbp, /* frame reg rbp offset 0x30 */ 0x1c, UWOP(SAVE_NONVOL, rsi), 0x25, 0, /* 1c: mov %rsi,0x128(%rsp) */ 0x15, UWOP(SAVE_NONVOL, rbx), 0x24, 0, /* 15: mov %rbx,0x120(%rsp) */ 0x0e, UWOP(SET_FPREG, rbp), /* 0e: lea 0x30(%rsp),rbp */ 0x09, UWOP(ALLOC_LARGE, 0), 0x22, 0, /* 09: sub $0x110,%rsp */ 0x02, UWOP(PUSH_NONVOL, rbp), /* 02: push %rbp */ 0x00, 0x02, 0x00, 0x00, /* handler */ 0x05, 0x06, 0x07, 0x08, /* data */ }; static const struct results results_0[] = { /* offset rbp handler rip frame registers */ { 0x00, 0x40, FALSE, 0x000, 0x000, { {rsp,0x008}, {-1,-1} }}, { 0x02, 0x40, FALSE, 0x008, 0x000, { {rsp,0x010}, {rbp,0x000}, {-1,-1} }}, { 0x09, 0x40, FALSE, 0x118, 0x000, { {rsp,0x120}, {rbp,0x110}, {-1,-1} }}, { 0x0e, 0x40, FALSE, 0x128, 0x010, { {rsp,0x130}, {rbp,0x120}, {-1,-1} }}, { 0x15, 0x40, FALSE, 0x128, 0x010, { {rsp,0x130}, {rbp,0x120}, {rbx,0x130}, {-1,-1} }}, { 0x1c, 0x40, TRUE, 0x128, 0x010, { {rsp,0x130}, {rbp,0x120}, {rbx,0x130}, {rsi,0x138}, {-1,-1}}}, { 0x1d, 0x40, TRUE, 0x128, 0x010, { {rsp,0x130}, {rbp,0x120}, {rbx,0x130}, {rsi,0x138}, {-1,-1}}}, { 0x24, 0x40, TRUE, 0x128, 0x010, { {rsp,0x130}, {rbp,0x120}, {rbx,0x130}, {rsi,0x138}, {-1,-1}}}, { 0x2b, 0x40, FALSE, 0x128, 0x010, { {rsp,0x130}, {rbp,0x120}, {-1,-1}}}, { 0x32, 0x40, FALSE, 0x008, 0x010, { {rsp,0x010}, {rbp,0x000}, {-1,-1}}}, { 0x33, 0x40, FALSE, 0x000, 0x010, { {rsp,0x008}, {-1,-1}}}, }; static const BYTE function_1[] = { 0x53, /* 00: push %rbx */ 0x55, /* 01: push %rbp */ 0x56, /* 02: push %rsi */ 0x57, /* 03: push %rdi */ 0x41, 0x54, /* 04: push %r12 */ 0x48, 0x83, 0xec, 0x30, /* 06: sub $0x30,%rsp */ 0x90, 0x90, /* 0a: nop; nop */ 0x48, 0x83, 0xc4, 0x30, /* 0c: add $0x30,%rsp */ 0x41, 0x5c, /* 10: pop %r12 */ 0x5f, /* 12: pop %rdi */ 0x5e, /* 13: pop %rsi */ 0x5d, /* 14: pop %rbp */ 0x5b, /* 15: pop %rbx */ 0xc3 /* 16: ret */ }; static const BYTE unwind_info_1[] = { 1 | (UNW_FLAG_EHANDLER << 3), /* version + flags */ 0x0a, /* prolog size */ 6, /* opcode count */ 0, /* frame reg */ 0x0a, UWOP(ALLOC_SMALL, 5), /* 0a: sub $0x30,%rsp */ 0x06, UWOP(PUSH_NONVOL, r12), /* 06: push %r12 */ 0x04, UWOP(PUSH_NONVOL, rdi), /* 04: push %rdi */ 0x03, UWOP(PUSH_NONVOL, rsi), /* 03: push %rsi */ 0x02, UWOP(PUSH_NONVOL, rbp), /* 02: push %rbp */ 0x01, UWOP(PUSH_NONVOL, rbx), /* 01: push %rbx */ 0x00, 0x02, 0x00, 0x00, /* handler */ 0x05, 0x06, 0x07, 0x08, /* data */ }; static const struct results results_1[] = { /* offset rbp handler rip frame registers */ { 0x00, 0x50, FALSE, 0x000, 0x000, { {rsp,0x008}, {-1,-1} }}, { 0x01, 0x50, FALSE, 0x008, 0x000, { {rsp,0x010}, {rbx,0x000}, {-1,-1} }}, { 0x02, 0x50, FALSE, 0x010, 0x000, { {rsp,0x018}, {rbx,0x008}, {rbp,0x000}, {-1,-1} }}, { 0x03, 0x50, FALSE, 0x018, 0x000, { {rsp,0x020}, {rbx,0x010}, {rbp,0x008}, {rsi,0x000}, {-1,-1} }}, { 0x04, 0x50, FALSE, 0x020, 0x000, { {rsp,0x028}, {rbx,0x018}, {rbp,0x010}, {rsi,0x008}, {rdi,0x000}, {-1,-1} }}, { 0x06, 0x50, FALSE, 0x028, 0x000, { {rsp,0x030}, {rbx,0x020}, {rbp,0x018}, {rsi,0x010}, {rdi,0x008}, {r12,0x000}, {-1,-1} }}, { 0x0a, 0x50, TRUE, 0x058, 0x000, { {rsp,0x060}, {rbx,0x050}, {rbp,0x048}, {rsi,0x040}, {rdi,0x038}, {r12,0x030}, {-1,-1} }}, { 0x0c, 0x50, FALSE, 0x058, 0x000, { {rsp,0x060}, {rbx,0x050}, {rbp,0x048}, {rsi,0x040}, {rdi,0x038}, {r12,0x030}, {-1,-1} }}, { 0x10, 0x50, FALSE, 0x028, 0x000, { {rsp,0x030}, {rbx,0x020}, {rbp,0x018}, {rsi,0x010}, {rdi,0x008}, {r12,0x000}, {-1,-1} }}, { 0x12, 0x50, FALSE, 0x020, 0x000, { {rsp,0x028}, {rbx,0x018}, {rbp,0x010}, {rsi,0x008}, {rdi,0x000}, {-1,-1} }}, { 0x13, 0x50, FALSE, 0x018, 0x000, { {rsp,0x020}, {rbx,0x010}, {rbp,0x008}, {rsi,0x000}, {-1,-1} }}, { 0x14, 0x50, FALSE, 0x010, 0x000, { {rsp,0x018}, {rbx,0x008}, {rbp,0x000}, {-1,-1} }}, { 0x15, 0x50, FALSE, 0x008, 0x000, { {rsp,0x010}, {rbx,0x000}, {-1,-1} }}, { 0x16, 0x50, FALSE, 0x000, 0x000, { {rsp,0x008}, {-1,-1} }}, }; static const struct unwind_test tests[] = { { function_0, sizeof(function_0), unwind_info_0, results_0, ARRAY_SIZE(results_0) }, { function_1, sizeof(function_1), unwind_info_1, results_1, ARRAY_SIZE(results_1) } }; unsigned int i; for (i = 0; i < ARRAY_SIZE(tests); i++) call_virtual_unwind( i, &tests[i] ); } static int consolidate_dummy_called; static PVOID CALLBACK test_consolidate_dummy(EXCEPTION_RECORD *rec) { CONTEXT *ctx = (CONTEXT *)rec->ExceptionInformation[1]; consolidate_dummy_called = 1; ok(ctx->Rip == 0xdeadbeef, "test_consolidate_dummy failed for Rip, expected: 0xdeadbeef, got: %lx\n", ctx->Rip); return (PVOID)rec->ExceptionInformation[2]; } static void test_restore_context(void) { SETJMP_FLOAT128 *fltsave; EXCEPTION_RECORD rec; _JUMP_BUFFER buf; CONTEXT ctx; int i, pass; if (!pRtlUnwindEx || !pRtlRestoreContext || !pRtlCaptureContext || !p_setjmp) { skip("RtlUnwindEx/RtlCaptureContext/RtlRestoreContext/_setjmp not found\n"); return; } /* RtlRestoreContext(NULL, NULL); crashes on Windows */ /* test simple case of capture and restore context */ pass = 0; InterlockedIncrement(&pass); /* interlocked to prevent compiler from moving after capture */ pRtlCaptureContext(&ctx); if (InterlockedIncrement(&pass) == 2) /* interlocked to prevent compiler from moving before capture */ { pRtlRestoreContext(&ctx, NULL); ok(0, "shouldn't be reached\n"); } else ok(pass < 4, "unexpected pass %d\n", pass); /* test with jmp using RltRestoreContext */ pass = 0; InterlockedIncrement(&pass); RtlCaptureContext(&ctx); InterlockedIncrement(&pass); /* only called once */ p_setjmp(&buf); InterlockedIncrement(&pass); if (pass == 3) { rec.ExceptionCode = STATUS_LONGJUMP; rec.NumberParameters = 1; rec.ExceptionInformation[0] = (DWORD64)&buf; /* uses buf.Rip instead of ctx.Rip */ pRtlRestoreContext(&ctx, &rec); ok(0, "shouldn't be reached\n"); } else if (pass == 4) { ok(buf.Rbx == ctx.Rbx, "longjmp failed for Rbx, expected: %lx, got: %lx\n", buf.Rbx, ctx.Rbx); ok(buf.Rsp == ctx.Rsp, "longjmp failed for Rsp, expected: %lx, got: %lx\n", buf.Rsp, ctx.Rsp); ok(buf.Rbp == ctx.Rbp, "longjmp failed for Rbp, expected: %lx, got: %lx\n", buf.Rbp, ctx.Rbp); ok(buf.Rsi == ctx.Rsi, "longjmp failed for Rsi, expected: %lx, got: %lx\n", buf.Rsi, ctx.Rsi); ok(buf.Rdi == ctx.Rdi, "longjmp failed for Rdi, expected: %lx, got: %lx\n", buf.Rdi, ctx.Rdi); ok(buf.R12 == ctx.R12, "longjmp failed for R12, expected: %lx, got: %lx\n", buf.R12, ctx.R12); ok(buf.R13 == ctx.R13, "longjmp failed for R13, expected: %lx, got: %lx\n", buf.R13, ctx.R13); ok(buf.R14 == ctx.R14, "longjmp failed for R14, expected: %lx, got: %lx\n", buf.R14, ctx.R14); ok(buf.R15 == ctx.R15, "longjmp failed for R15, expected: %lx, got: %lx\n", buf.R15, ctx.R15); fltsave = &buf.Xmm6; for (i = 0; i < 10; i++) { ok(fltsave[i].Part[0] == ctx.u.FltSave.XmmRegisters[i + 6].Low, "longjmp failed for Xmm%d, expected %lx, got %lx\n", i + 6, fltsave[i].Part[0], ctx.u.FltSave.XmmRegisters[i + 6].Low); ok(fltsave[i].Part[1] == ctx.u.FltSave.XmmRegisters[i + 6].High, "longjmp failed for Xmm%d, expected %lx, got %lx\n", i + 6, fltsave[i].Part[1], ctx.u.FltSave.XmmRegisters[i + 6].High); } } else ok(0, "unexpected pass %d\n", pass); /* test with jmp through RtlUnwindEx */ pass = 0; InterlockedIncrement(&pass); pRtlCaptureContext(&ctx); InterlockedIncrement(&pass); /* only called once */ p_setjmp(&buf); InterlockedIncrement(&pass); if (pass == 3) { rec.ExceptionCode = STATUS_LONGJUMP; rec.NumberParameters = 1; rec.ExceptionInformation[0] = (DWORD64)&buf; /* uses buf.Rip instead of bogus 0xdeadbeef */ pRtlUnwindEx((void*)buf.Rsp, (void*)0xdeadbeef, &rec, NULL, &ctx, NULL); ok(0, "shouldn't be reached\n"); } else ok(pass == 4, "unexpected pass %d\n", pass); /* test with consolidate */ pass = 0; InterlockedIncrement(&pass); RtlCaptureContext(&ctx); InterlockedIncrement(&pass); if (pass == 2) { rec.ExceptionCode = STATUS_UNWIND_CONSOLIDATE; rec.NumberParameters = 3; rec.ExceptionInformation[0] = (DWORD64)test_consolidate_dummy; rec.ExceptionInformation[1] = (DWORD64)&ctx; rec.ExceptionInformation[2] = ctx.Rip; ctx.Rip = 0xdeadbeef; pRtlRestoreContext(&ctx, &rec); ok(0, "shouldn't be reached\n"); } else if (pass == 3) ok(consolidate_dummy_called, "test_consolidate_dummy not called\n"); else ok(0, "unexpected pass %d\n", pass); } static RUNTIME_FUNCTION* CALLBACK dynamic_unwind_callback( DWORD64 pc, PVOID context ) { static const int code_offset = 1024; static RUNTIME_FUNCTION runtime_func; (*(DWORD *)context)++; runtime_func.BeginAddress = code_offset + 16; runtime_func.EndAddress = code_offset + 32; runtime_func.UnwindData = 0; return &runtime_func; } static void test_dynamic_unwind(void) { static const int code_offset = 1024; char buf[2 * sizeof(RUNTIME_FUNCTION) + 4]; RUNTIME_FUNCTION *runtime_func, *func; ULONG_PTR table, base; void *growable_table; NTSTATUS status; DWORD count; /* Test RtlAddFunctionTable with aligned RUNTIME_FUNCTION pointer */ runtime_func = (RUNTIME_FUNCTION *)buf; runtime_func->BeginAddress = code_offset; runtime_func->EndAddress = code_offset + 16; runtime_func->UnwindData = 0; ok( pRtlAddFunctionTable( runtime_func, 1, (ULONG_PTR)code_mem ), "RtlAddFunctionTable failed for runtime_func = %p (aligned)\n", runtime_func ); /* Lookup function outside of any function table */ base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 16, &base, NULL ); ok( func == NULL, "RtlLookupFunctionEntry returned unexpected function, expected: NULL, got: %p\n", func ); ok( !base || broken(base == 0xdeadbeef), "RtlLookupFunctionEntry modified base address, expected: 0, got: %lx\n", base ); /* Test with pointer inside of our function */ base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 8, &base, NULL ); ok( func == runtime_func, "RtlLookupFunctionEntry didn't return expected function, expected: %p, got: %p\n", runtime_func, func ); ok( base == (ULONG_PTR)code_mem, "RtlLookupFunctionEntry returned invalid base, expected: %lx, got: %lx\n", (ULONG_PTR)code_mem, base ); /* Test RtlDeleteFunctionTable */ ok( pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable failed for runtime_func = %p (aligned)\n", runtime_func ); ok( !pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable returned success for nonexistent table runtime_func = %p\n", runtime_func ); /* Unaligned RUNTIME_FUNCTION pointer */ runtime_func = (RUNTIME_FUNCTION *)((ULONG_PTR)buf | 0x3); runtime_func->BeginAddress = code_offset; runtime_func->EndAddress = code_offset + 16; runtime_func->UnwindData = 0; ok( pRtlAddFunctionTable( runtime_func, 1, (ULONG_PTR)code_mem ), "RtlAddFunctionTable failed for runtime_func = %p (unaligned)\n", runtime_func ); ok( pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable failed for runtime_func = %p (unaligned)\n", runtime_func ); /* Attempt to insert the same entry twice */ runtime_func = (RUNTIME_FUNCTION *)buf; runtime_func->BeginAddress = code_offset; runtime_func->EndAddress = code_offset + 16; runtime_func->UnwindData = 0; ok( pRtlAddFunctionTable( runtime_func, 1, (ULONG_PTR)code_mem ), "RtlAddFunctionTable failed for runtime_func = %p (first attempt)\n", runtime_func ); ok( pRtlAddFunctionTable( runtime_func, 1, (ULONG_PTR)code_mem ), "RtlAddFunctionTable failed for runtime_func = %p (second attempt)\n", runtime_func ); ok( pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable failed for runtime_func = %p (first attempt)\n", runtime_func ); ok( pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable failed for runtime_func = %p (second attempt)\n", runtime_func ); ok( !pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable returned success for nonexistent table runtime_func = %p\n", runtime_func ); /* Empty table */ ok( pRtlAddFunctionTable( runtime_func, 0, (ULONG_PTR)code_mem ), "RtlAddFunctionTable failed for empty table\n" ); ok( pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable failed for empty table\n" ); ok( !pRtlDeleteFunctionTable( runtime_func ), "RtlDeleteFunctionTable succeeded twice for empty table\n" ); /* Test RtlInstallFunctionTableCallback with both low bits unset */ table = (ULONG_PTR)code_mem; ok( !pRtlInstallFunctionTableCallback( table, (ULONG_PTR)code_mem, code_offset + 32, &dynamic_unwind_callback, (PVOID*)&count, NULL ), "RtlInstallFunctionTableCallback returned success for table = %lx\n", table ); /* Test RtlInstallFunctionTableCallback with both low bits set */ table = (ULONG_PTR)code_mem | 0x3; ok( pRtlInstallFunctionTableCallback( table, (ULONG_PTR)code_mem, code_offset + 32, &dynamic_unwind_callback, (PVOID*)&count, NULL ), "RtlInstallFunctionTableCallback failed for table = %lx\n", table ); /* Lookup function outside of any function table */ count = 0; base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 32, &base, NULL ); ok( func == NULL, "RtlLookupFunctionEntry returned unexpected function, expected: NULL, got: %p\n", func ); ok( !base || broken(base == 0xdeadbeef), "RtlLookupFunctionEntry modified base address, expected: 0, got: %lx\n", base ); ok( !count, "RtlLookupFunctionEntry issued %d unexpected calls to dynamic_unwind_callback\n", count ); /* Test with pointer inside of our function */ count = 0; base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 24, &base, NULL ); ok( func != NULL && func->BeginAddress == code_offset + 16 && func->EndAddress == code_offset + 32, "RtlLookupFunctionEntry didn't return expected function, got: %p\n", func ); ok( base == (ULONG_PTR)code_mem, "RtlLookupFunctionEntry returned invalid base, expected: %lx, got: %lx\n", (ULONG_PTR)code_mem, base ); ok( count == 1, "RtlLookupFunctionEntry issued %d calls to dynamic_unwind_callback, expected: 1\n", count ); /* Clean up again */ ok( pRtlDeleteFunctionTable( (PRUNTIME_FUNCTION)table ), "RtlDeleteFunctionTable failed for table = %p\n", (PVOID)table ); ok( !pRtlDeleteFunctionTable( (PRUNTIME_FUNCTION)table ), "RtlDeleteFunctionTable returned success for nonexistent table = %p\n", (PVOID)table ); if (!pRtlAddGrowableFunctionTable) { win_skip("Growable function tables are not supported.\n"); return; } runtime_func = (RUNTIME_FUNCTION *)buf; runtime_func->BeginAddress = code_offset; runtime_func->EndAddress = code_offset + 16; runtime_func->UnwindData = 0; runtime_func++; runtime_func->BeginAddress = code_offset + 16; runtime_func->EndAddress = code_offset + 32; runtime_func->UnwindData = 0; runtime_func = (RUNTIME_FUNCTION *)buf; growable_table = NULL; status = pRtlAddGrowableFunctionTable( &growable_table, runtime_func, 1, 1, (ULONG_PTR)code_mem, (ULONG_PTR)code_mem + 64 ); ok(!status, "RtlAddGrowableFunctionTable failed for runtime_func = %p (aligned), %#x.\n", runtime_func, status ); ok(growable_table != 0, "Unexpected table value.\n"); pRtlDeleteGrowableFunctionTable( growable_table ); growable_table = NULL; status = pRtlAddGrowableFunctionTable( &growable_table, runtime_func, 2, 2, (ULONG_PTR)code_mem, (ULONG_PTR)code_mem + 64 ); ok(!status, "RtlAddGrowableFunctionTable failed for runtime_func = %p (aligned), %#x.\n", runtime_func, status ); ok(growable_table != 0, "Unexpected table value.\n"); pRtlDeleteGrowableFunctionTable( growable_table ); growable_table = NULL; status = pRtlAddGrowableFunctionTable( &growable_table, runtime_func, 1, 2, (ULONG_PTR)code_mem, (ULONG_PTR)code_mem + 64 ); ok(!status, "RtlAddGrowableFunctionTable failed for runtime_func = %p (aligned), %#x.\n", runtime_func, status ); ok(growable_table != 0, "Unexpected table value.\n"); pRtlDeleteGrowableFunctionTable( growable_table ); growable_table = NULL; status = pRtlAddGrowableFunctionTable( &growable_table, runtime_func, 0, 2, (ULONG_PTR)code_mem, (ULONG_PTR)code_mem + code_offset + 64 ); ok(!status, "RtlAddGrowableFunctionTable failed for runtime_func = %p (aligned), %#x.\n", runtime_func, status ); ok(growable_table != 0, "Unexpected table value.\n"); /* Current count is 0. */ func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 8, &base, NULL ); ok( func == NULL, "RtlLookupFunctionEntry didn't return expected function, expected: %p, got: %p\n", runtime_func, func ); pRtlGrowFunctionTable( growable_table, 1 ); base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 8, &base, NULL ); ok( func == runtime_func, "RtlLookupFunctionEntry didn't return expected function, expected: %p, got: %p\n", runtime_func, func ); ok( base == (ULONG_PTR)code_mem, "RtlLookupFunctionEntry returned invalid base, expected: %lx, got: %lx\n", (ULONG_PTR)code_mem, base ); /* Second function is inaccessible yet. */ base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 16, &base, NULL ); ok( func == NULL, "RtlLookupFunctionEntry didn't return expected function, expected: %p, got: %p\n", runtime_func, func ); pRtlGrowFunctionTable( growable_table, 2 ); base = 0xdeadbeef; func = pRtlLookupFunctionEntry( (ULONG_PTR)code_mem + code_offset + 16, &base, NULL ); ok( func == runtime_func + 1, "RtlLookupFunctionEntry didn't return expected function, expected: %p, got: %p\n", runtime_func, func ); ok( base == (ULONG_PTR)code_mem, "RtlLookupFunctionEntry returned invalid base, expected: %lx, got: %lx\n", (ULONG_PTR)code_mem, base ); pRtlDeleteGrowableFunctionTable( growable_table ); } static int termination_handler_called; static void WINAPI termination_handler(ULONG flags, ULONG64 frame) { termination_handler_called++; ok(flags == 1 || broken(flags == 0x401), "flags = %x\n", flags); ok(frame == 0x1234, "frame = %p\n", (void*)frame); } static void test___C_specific_handler(void) { DISPATCHER_CONTEXT dispatch; EXCEPTION_RECORD rec; CONTEXT context; ULONG64 frame; EXCEPTION_DISPOSITION ret; SCOPE_TABLE scope_table; if (!p__C_specific_handler) { win_skip("__C_specific_handler not available\n"); return; } memset(&rec, 0, sizeof(rec)); rec.ExceptionFlags = 2; /* EH_UNWINDING */ frame = 0x1234; memset(&dispatch, 0, sizeof(dispatch)); dispatch.ImageBase = (ULONG_PTR)GetModuleHandleA(NULL); dispatch.ControlPc = dispatch.ImageBase + 0x200; dispatch.HandlerData = &scope_table; dispatch.ContextRecord = &context; scope_table.Count = 1; scope_table.ScopeRecord[0].BeginAddress = 0x200; scope_table.ScopeRecord[0].EndAddress = 0x400; scope_table.ScopeRecord[0].HandlerAddress = (ULONG_PTR)termination_handler-dispatch.ImageBase; scope_table.ScopeRecord[0].JumpTarget = 0; memset(&context, 0, sizeof(context)); termination_handler_called = 0; ret = p__C_specific_handler(&rec, frame, &context, &dispatch); ok(ret == ExceptionContinueSearch, "__C_specific_handler returned %x\n", ret); ok(termination_handler_called == 1, "termination_handler_called = %d\n", termination_handler_called); ok(dispatch.ScopeIndex == 1, "dispatch.ScopeIndex = %d\n", dispatch.ScopeIndex); ret = p__C_specific_handler(&rec, frame, &context, &dispatch); ok(ret == ExceptionContinueSearch, "__C_specific_handler returned %x\n", ret); ok(termination_handler_called == 1, "termination_handler_called = %d\n", termination_handler_called); ok(dispatch.ScopeIndex == 1, "dispatch.ScopeIndex = %d\n", dispatch.ScopeIndex); } /* This is heavily based on the i386 exception tests. */ static const struct exception { BYTE code[18]; /* asm code */ BYTE offset; /* offset of faulting instruction */ BYTE length; /* length of faulting instruction */ NTSTATUS status; /* expected status code */ DWORD nb_params; /* expected number of parameters */ ULONG64 params[4]; /* expected parameters */ NTSTATUS alt_status; /* alternative status code */ DWORD alt_nb_params; /* alternative number of parameters */ ULONG64 alt_params[4]; /* alternative parameters */ } exceptions[] = { /* 0 */ /* test some privileged instructions */ { { 0xfb, 0xc3 }, /* 0: sti; ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6c, 0xc3 }, /* 1: insb (%dx); ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6d, 0xc3 }, /* 2: insl (%dx); ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6e, 0xc3 }, /* 3: outsb (%dx); ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x6f, 0xc3 }, /* 4: outsl (%dx); ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 5 */ { { 0xe4, 0x11, 0xc3 }, /* 5: inb $0x11,%al; ret */ 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xe5, 0x11, 0xc3 }, /* 6: inl $0x11,%eax; ret */ 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xe6, 0x11, 0xc3 }, /* 7: outb %al,$0x11; ret */ 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xe7, 0x11, 0xc3 }, /* 8: outl %eax,$0x11; ret */ 0, 2, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xed, 0xc3 }, /* 9: inl (%dx),%eax; ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 10 */ { { 0xee, 0xc3 }, /* 10: outb %al,(%dx); ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xef, 0xc3 }, /* 11: outl %eax,(%dx); ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xf4, 0xc3 }, /* 12: hlt; ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0xfa, 0xc3 }, /* 13: cli; ret */ 0, 1, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test iret to invalid selector */ { { 0x6a, 0x00, 0x6a, 0x00, 0x6a, 0x00, 0xcf, 0x83, 0xc4, 0x18, 0xc3 }, /* 15: pushq $0; pushq $0; pushq $0; iret; addl $24,%esp; ret */ 6, 1, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffffffffffff } }, /* 15 */ /* test loading an invalid selector */ { { 0xb8, 0xef, 0xbe, 0x00, 0x00, 0x8e, 0xe8, 0xc3 }, /* 16: mov $beef,%ax; mov %ax,%gs; ret */ 5, 2, STATUS_ACCESS_VIOLATION, 2, { 0, 0xbee8 } }, /* 0xbee8 or 0xffffffff */ /* test overlong instruction (limit is 15 bytes) */ { { 0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0xfa,0xc3 }, 0, 16, STATUS_ILLEGAL_INSTRUCTION, 0, { 0 }, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffffffffffff } }, /* test invalid interrupt */ { { 0xcd, 0xff, 0xc3 }, /* int $0xff; ret */ 0, 2, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffffffffffff } }, /* test moves to/from Crx */ { { 0x0f, 0x20, 0xc0, 0xc3 }, /* movl %cr0,%eax; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x20, 0xe0, 0xc3 }, /* movl %cr4,%eax; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 20 */ { { 0x0f, 0x22, 0xc0, 0xc3 }, /* movl %eax,%cr0; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x22, 0xe0, 0xc3 }, /* movl %eax,%cr4; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test moves to/from Drx */ { { 0x0f, 0x21, 0xc0, 0xc3 }, /* movl %dr0,%eax; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x21, 0xc8, 0xc3 }, /* movl %dr1,%eax; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x21, 0xf8, 0xc3 }, /* movl %dr7,%eax; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* 25 */ { { 0x0f, 0x23, 0xc0, 0xc3 }, /* movl %eax,%dr0; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x23, 0xc8, 0xc3 }, /* movl %eax,%dr1; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, { { 0x0f, 0x23, 0xf8, 0xc3 }, /* movl %eax,%dr7; ret */ 0, 3, STATUS_PRIVILEGED_INSTRUCTION, 0 }, /* test memory reads */ { { 0xa1, 0xfc, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffffffffffc,%eax; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffffffffffc } }, { { 0xa1, 0xfd, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffffffffffd,%eax; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffffffffffd } }, /* 30 */ { { 0xa1, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xfffffffffffffffe,%eax; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 0, 0xfffffffffffffffe } }, { { 0xa1, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl 0xffffffffffffffff,%eax; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 0, 0xffffffffffffffff } }, /* test memory writes */ { { 0xa3, 0xfc, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffffffffffc; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffffffffffc } }, { { 0xa3, 0xfd, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffffffffffd; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffffffffffd } }, { { 0xa3, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xfffffffffffffffe; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 1, 0xfffffffffffffffe } }, /* 35 */ { { 0xa3, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xc3 }, /* movl %eax,0xffffffffffffffff; ret */ 0, 9, STATUS_ACCESS_VIOLATION, 2, { 1, 0xffffffffffffffff } }, { { 0xf1, 0x90, 0xc3 }, /* icebp; nop; ret */ 1, 1, STATUS_SINGLE_STEP, 0 }, { { 0xcd, 0x2c, 0xc3 }, 0, 2, STATUS_ASSERTION_FAILURE, 0 }, }; static int got_exception; static void run_exception_test(void *handler, const void* context, const void *code, unsigned int code_size, DWORD access) { unsigned char buf[8 + 6 + 8 + 8]; RUNTIME_FUNCTION runtime_func; UNWIND_INFO *unwind = (UNWIND_INFO *)buf; void (*func)(void) = code_mem; DWORD oldaccess, oldaccess2; runtime_func.BeginAddress = 0; runtime_func.EndAddress = code_size; runtime_func.UnwindData = 0x1000; unwind->Version = 1; unwind->Flags = UNW_FLAG_EHANDLER; unwind->SizeOfProlog = 0; unwind->CountOfCodes = 0; unwind->FrameRegister = 0; unwind->FrameOffset = 0; *(ULONG *)&buf[4] = 0x1010; *(const void **)&buf[8] = context; /* jmp near */ buf[16] = 0xff; buf[17] = 0x25; *(ULONG *)&buf[18] = 0; *(void **)&buf[22] = handler; memcpy((unsigned char *)code_mem + 0x1000, buf, sizeof(buf)); memcpy(code_mem, code, code_size); if(access) VirtualProtect(code_mem, code_size, access, &oldaccess); pRtlAddFunctionTable(&runtime_func, 1, (ULONG_PTR)code_mem); func(); pRtlDeleteFunctionTable(&runtime_func); if(access) VirtualProtect(code_mem, code_size, oldaccess, &oldaccess2); } static DWORD WINAPI handler( EXCEPTION_RECORD *rec, ULONG64 frame, CONTEXT *context, DISPATCHER_CONTEXT *dispatcher ) { const struct exception *except = *(const struct exception **)(dispatcher->HandlerData); unsigned int i, parameter_count, entry = except - exceptions; got_exception++; trace( "exception %u: %x flags:%x addr:%p\n", entry, rec->ExceptionCode, rec->ExceptionFlags, rec->ExceptionAddress ); ok( rec->ExceptionCode == except->status || (except->alt_status != 0 && rec->ExceptionCode == except->alt_status), "%u: Wrong exception code %x/%x\n", entry, rec->ExceptionCode, except->status ); ok( context->Rip == (DWORD_PTR)code_mem + except->offset, "%u: Unexpected eip %#lx/%#lx\n", entry, context->Rip, (DWORD_PTR)code_mem + except->offset ); ok( rec->ExceptionAddress == (char*)context->Rip || (rec->ExceptionCode == STATUS_BREAKPOINT && rec->ExceptionAddress == (char*)context->Rip + 1), "%u: Unexpected exception address %p/%p\n", entry, rec->ExceptionAddress, (char*)context->Rip ); if (except->status == STATUS_BREAKPOINT && is_wow64) parameter_count = 1; else if (except->alt_status == 0 || rec->ExceptionCode != except->alt_status) parameter_count = except->nb_params; else parameter_count = except->alt_nb_params; ok( rec->NumberParameters == parameter_count, "%u: Unexpected parameter count %u/%u\n", entry, rec->NumberParameters, parameter_count ); /* Most CPUs (except Intel Core apparently) report a segment limit violation */ /* instead of page faults for accesses beyond 0xffffffffffffffff */ if (except->nb_params == 2 && except->params[1] >= 0xfffffffffffffffd) { if (rec->ExceptionInformation[0] == 0 && rec->ExceptionInformation[1] == 0xffffffffffffffff) goto skip_params; } /* Seems that both 0xbee8 and 0xfffffffffffffffff can be returned in windows */ if (except->nb_params == 2 && rec->NumberParameters == 2 && except->params[1] == 0xbee8 && rec->ExceptionInformation[1] == 0xffffffffffffffff && except->params[0] == rec->ExceptionInformation[0]) { goto skip_params; } if (except->alt_status == 0 || rec->ExceptionCode != except->alt_status) { for (i = 0; i < rec->NumberParameters; i++) ok( rec->ExceptionInformation[i] == except->params[i], "%u: Wrong parameter %d: %lx/%lx\n", entry, i, rec->ExceptionInformation[i], except->params[i] ); } else { for (i = 0; i < rec->NumberParameters; i++) ok( rec->ExceptionInformation[i] == except->alt_params[i], "%u: Wrong parameter %d: %lx/%lx\n", entry, i, rec->ExceptionInformation[i], except->alt_params[i] ); } skip_params: /* don't handle exception if it's not the address we expected */ if (context->Rip != (DWORD_PTR)code_mem + except->offset) return ExceptionContinueSearch; context->Rip += except->length; return ExceptionContinueExecution; } static void test_prot_fault(void) { unsigned int i; for (i = 0; i < ARRAY_SIZE(exceptions); i++) { got_exception = 0; run_exception_test(handler, &exceptions[i], &exceptions[i].code, sizeof(exceptions[i].code), 0); ok( got_exception == (exceptions[i].status != 0), "%u: bad exception count %d\n", i, got_exception ); } } static LONG CALLBACK dpe_handler(EXCEPTION_POINTERS *info) { EXCEPTION_RECORD *rec = info->ExceptionRecord; DWORD old_prot; trace("vect. handler %08x addr:%p\n", rec->ExceptionCode, rec->ExceptionAddress); got_exception++; ok(rec->ExceptionCode == EXCEPTION_ACCESS_VIOLATION, "got %#x\n", rec->ExceptionCode); ok(rec->NumberParameters == 2, "got %u params\n", rec->NumberParameters); ok(rec->ExceptionInformation[0] == EXCEPTION_EXECUTE_FAULT, "got %#lx\n", rec->ExceptionInformation[0]); ok((void *)rec->ExceptionInformation[1] == code_mem, "got %p\n", (void *)rec->ExceptionInformation[1]); VirtualProtect(code_mem, 1, PAGE_EXECUTE_READWRITE, &old_prot); return EXCEPTION_CONTINUE_EXECUTION; } static void test_dpe_exceptions(void) { static const BYTE ret[] = {0xc3}; DWORD (CDECL *func)(void) = code_mem; DWORD old_prot, val = 0, len = 0xdeadbeef; NTSTATUS status; void *handler; status = pNtQueryInformationProcess( GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val, &len ); ok( status == STATUS_SUCCESS || status == STATUS_INVALID_PARAMETER, "got status %08x\n", status ); if (!status) { ok( len == sizeof(val), "wrong len %u\n", len ); ok( val == (MEM_EXECUTE_OPTION_DISABLE | MEM_EXECUTE_OPTION_PERMANENT | MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION), "wrong val %08x\n", val ); } else ok( len == 0xdeadbeef, "wrong len %u\n", len ); val = MEM_EXECUTE_OPTION_DISABLE; status = pNtSetInformationProcess( GetCurrentProcess(), ProcessExecuteFlags, &val, sizeof val ); ok( status == STATUS_INVALID_PARAMETER, "got status %08x\n", status ); memcpy(code_mem, ret, sizeof(ret)); handler = pRtlAddVectoredExceptionHandler(TRUE, &dpe_handler); ok(!!handler, "RtlAddVectoredExceptionHandler failed\n"); VirtualProtect(code_mem, 1, PAGE_NOACCESS, &old_prot); got_exception = 0; func(); ok(got_exception == 1, "got %u exceptions\n", got_exception); VirtualProtect(code_mem, 1, old_prot, &old_prot); VirtualProtect(code_mem, 1, PAGE_READWRITE, &old_prot); got_exception = 0; func(); ok(got_exception == 1, "got %u exceptions\n", got_exception); VirtualProtect(code_mem, 1, old_prot, &old_prot); pRtlRemoveVectoredExceptionHandler(handler); } static void test_wow64_context(void) { char cmdline[] = "C:\\windows\\syswow64\\notepad.exe"; PROCESS_INFORMATION pi; STARTUPINFOA si = {0}; WOW64_CONTEXT ctx; NTSTATUS ret; memset(&ctx, 0x55, sizeof(ctx)); ctx.ContextFlags = WOW64_CONTEXT_ALL; ret = pRtlWow64GetThreadContext( GetCurrentThread(), &ctx ); ok(ret == STATUS_INVALID_PARAMETER || broken(ret == STATUS_PARTIAL_COPY), "got %#x\n", ret); CreateProcessA(NULL, cmdline, NULL, NULL, FALSE, CREATE_SUSPENDED, NULL, NULL, &si, &pi); ret = pRtlWow64GetThreadContext( pi.hThread, &ctx ); ok(ret == STATUS_SUCCESS, "got %#x\n", ret); ok(ctx.ContextFlags == WOW64_CONTEXT_ALL, "got context flags %#x\n", ctx.ContextFlags); ok(!ctx.Ebp, "got ebp %08x\n", ctx.Ebp); ok(!ctx.Ecx, "got ecx %08x\n", ctx.Ecx); ok(!ctx.Edx, "got edx %08x\n", ctx.Edx); ok(!ctx.Esi, "got esi %08x\n", ctx.Esi); ok(!ctx.Edi, "got edi %08x\n", ctx.Edi); ok((ctx.EFlags & ~2) == 0x200, "got eflags %08x\n", ctx.EFlags); ok((WORD) ctx.FloatSave.ControlWord == 0x27f, "got control word %08x\n", ctx.FloatSave.ControlWord); ok(*(WORD *)ctx.ExtendedRegisters == 0x27f, "got SSE control word %04x\n", *(WORD *)ctx.ExtendedRegisters); ret = pRtlWow64SetThreadContext( pi.hThread, &ctx ); ok(ret == STATUS_SUCCESS, "got %#x\n", ret); pNtTerminateProcess(pi.hProcess, 0); } #endif /* __x86_64__ */ #if defined(__i386__) || defined(__x86_64__) static DWORD WINAPI register_check_thread(void *arg) { NTSTATUS status; CONTEXT ctx; memset(&ctx, 0, sizeof(ctx)); ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; status = pNtGetContextThread(GetCurrentThread(), &ctx); ok(status == STATUS_SUCCESS, "NtGetContextThread failed with %x\n", status); ok(!ctx.Dr0, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr0); ok(!ctx.Dr1, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr1); ok(!ctx.Dr2, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr2); ok(!ctx.Dr3, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr3); ok(!ctx.Dr6, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr6); ok(!ctx.Dr7, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr7); return 0; } static void test_debug_registers(void) { static const struct { ULONG_PTR dr0, dr1, dr2, dr3, dr6, dr7; } tests[] = { { 0x42424240, 0, 0x126bb070, 0x0badbad0, 0, 0xffff0115 }, { 0x42424242, 0, 0x100f0fe7, 0x0abebabe, 0, 0x115 }, }; NTSTATUS status; CONTEXT ctx; HANDLE thread; int i; for (i = 0; i < ARRAY_SIZE(tests); i++) { memset(&ctx, 0, sizeof(ctx)); ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; ctx.Dr0 = tests[i].dr0; ctx.Dr1 = tests[i].dr1; ctx.Dr2 = tests[i].dr2; ctx.Dr3 = tests[i].dr3; ctx.Dr6 = tests[i].dr6; ctx.Dr7 = tests[i].dr7; status = pNtSetContextThread(GetCurrentThread(), &ctx); ok(status == STATUS_SUCCESS, "NtGetContextThread failed with %08x\n", status); memset(&ctx, 0, sizeof(ctx)); ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; status = pNtGetContextThread(GetCurrentThread(), &ctx); ok(status == STATUS_SUCCESS, "NtGetContextThread failed with %08x\n", status); ok(ctx.Dr0 == tests[i].dr0, "test %d: expected %lx, got %lx\n", i, tests[i].dr0, (DWORD_PTR)ctx.Dr0); ok(ctx.Dr1 == tests[i].dr1, "test %d: expected %lx, got %lx\n", i, tests[i].dr1, (DWORD_PTR)ctx.Dr1); ok(ctx.Dr2 == tests[i].dr2, "test %d: expected %lx, got %lx\n", i, tests[i].dr2, (DWORD_PTR)ctx.Dr2); ok(ctx.Dr3 == tests[i].dr3, "test %d: expected %lx, got %lx\n", i, tests[i].dr3, (DWORD_PTR)ctx.Dr3); ok((ctx.Dr6 & 0xf00f) == tests[i].dr6, "test %d: expected %lx, got %lx\n", i, tests[i].dr6, (DWORD_PTR)ctx.Dr6); ok((ctx.Dr7 & ~0xdc00) == tests[i].dr7, "test %d: expected %lx, got %lx\n", i, tests[i].dr7, (DWORD_PTR)ctx.Dr7); } memset(&ctx, 0, sizeof(ctx)); ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; ctx.Dr0 = 0xffffffff; ctx.Dr1 = 0xffffffff; ctx.Dr2 = 0xffffffff; ctx.Dr3 = 0xffffffff; ctx.Dr6 = 0xffffffff; ctx.Dr7 = 0x00000400; status = pNtSetContextThread(GetCurrentThread(), &ctx); ok(status == STATUS_SUCCESS, "NtSetContextThread failed with %x\n", status); thread = CreateThread(NULL, 0, register_check_thread, NULL, CREATE_SUSPENDED, NULL); ok(thread != INVALID_HANDLE_VALUE, "CreateThread failed with %d\n", GetLastError()); ctx.ContextFlags = CONTEXT_DEBUG_REGISTERS; status = pNtGetContextThread(thread, &ctx); ok(status == STATUS_SUCCESS, "NtGetContextThread failed with %x\n", status); ok(!ctx.Dr0, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr0); ok(!ctx.Dr1, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr1); ok(!ctx.Dr2, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr2); ok(!ctx.Dr3, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr3); ok(!ctx.Dr6, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr6); ok(!ctx.Dr7, "expected 0, got %lx\n", (DWORD_PTR)ctx.Dr7); ResumeThread(thread); WaitForSingleObject(thread, 10000); CloseHandle(thread); } static DWORD outputdebugstring_exceptions; static LONG CALLBACK outputdebugstring_vectored_handler(EXCEPTION_POINTERS *ExceptionInfo) { PEXCEPTION_RECORD rec = ExceptionInfo->ExceptionRecord; trace("vect. handler %08x addr:%p\n", rec->ExceptionCode, rec->ExceptionAddress); ok(rec->ExceptionCode == DBG_PRINTEXCEPTION_C, "ExceptionCode is %08x instead of %08x\n", rec->ExceptionCode, DBG_PRINTEXCEPTION_C); ok(rec->NumberParameters == 2, "ExceptionParameters is %d instead of 2\n", rec->NumberParameters); ok(rec->ExceptionInformation[0] == 12, "ExceptionInformation[0] = %d instead of 12\n", (DWORD)rec->ExceptionInformation[0]); ok(!strcmp((char *)rec->ExceptionInformation[1], "Hello World"), "ExceptionInformation[1] = '%s' instead of 'Hello World'\n", (char *)rec->ExceptionInformation[1]); outputdebugstring_exceptions++; return EXCEPTION_CONTINUE_SEARCH; } static void test_outputdebugstring(DWORD numexc, BOOL todo) { PVOID vectored_handler; if (!pRtlAddVectoredExceptionHandler || !pRtlRemoveVectoredExceptionHandler) { skip("RtlAddVectoredExceptionHandler or RtlRemoveVectoredExceptionHandler not found\n"); return; } vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &outputdebugstring_vectored_handler); ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); outputdebugstring_exceptions = 0; OutputDebugStringA("Hello World"); todo_wine_if(todo) ok(outputdebugstring_exceptions == numexc, "OutputDebugStringA generated %d exceptions, expected %d\n", outputdebugstring_exceptions, numexc); pRtlRemoveVectoredExceptionHandler(vectored_handler); } static DWORD ripevent_exceptions; static LONG CALLBACK ripevent_vectored_handler(EXCEPTION_POINTERS *ExceptionInfo) { PEXCEPTION_RECORD rec = ExceptionInfo->ExceptionRecord; trace("vect. handler %08x addr:%p\n", rec->ExceptionCode, rec->ExceptionAddress); ok(rec->ExceptionCode == DBG_RIPEXCEPTION, "ExceptionCode is %08x instead of %08x\n", rec->ExceptionCode, DBG_RIPEXCEPTION); ok(rec->NumberParameters == 2, "ExceptionParameters is %d instead of 2\n", rec->NumberParameters); ok(rec->ExceptionInformation[0] == 0x11223344, "ExceptionInformation[0] = %08x instead of %08x\n", (NTSTATUS)rec->ExceptionInformation[0], 0x11223344); ok(rec->ExceptionInformation[1] == 0x55667788, "ExceptionInformation[1] = %08x instead of %08x\n", (NTSTATUS)rec->ExceptionInformation[1], 0x55667788); ripevent_exceptions++; return (rec->ExceptionCode == DBG_RIPEXCEPTION) ? EXCEPTION_CONTINUE_EXECUTION : EXCEPTION_CONTINUE_SEARCH; } static void test_ripevent(DWORD numexc) { EXCEPTION_RECORD record; PVOID vectored_handler; if (!pRtlAddVectoredExceptionHandler || !pRtlRemoveVectoredExceptionHandler || !pRtlRaiseException) { skip("RtlAddVectoredExceptionHandler or RtlRemoveVectoredExceptionHandler or RtlRaiseException not found\n"); return; } vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &ripevent_vectored_handler); ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); record.ExceptionCode = DBG_RIPEXCEPTION; record.ExceptionFlags = 0; record.ExceptionRecord = NULL; record.ExceptionAddress = NULL; record.NumberParameters = 2; record.ExceptionInformation[0] = 0x11223344; record.ExceptionInformation[1] = 0x55667788; ripevent_exceptions = 0; pRtlRaiseException(&record); ok(ripevent_exceptions == numexc, "RtlRaiseException generated %d exceptions, expected %d\n", ripevent_exceptions, numexc); pRtlRemoveVectoredExceptionHandler(vectored_handler); } static DWORD debug_service_exceptions; static LONG CALLBACK debug_service_handler(EXCEPTION_POINTERS *ExceptionInfo) { EXCEPTION_RECORD *rec = ExceptionInfo->ExceptionRecord; trace("vect. handler %08x addr:%p\n", rec->ExceptionCode, rec->ExceptionAddress); ok(rec->ExceptionCode == EXCEPTION_BREAKPOINT, "ExceptionCode is %08x instead of %08x\n", rec->ExceptionCode, EXCEPTION_BREAKPOINT); #ifdef __i386__ ok(ExceptionInfo->ContextRecord->Eip == (DWORD)code_mem + 0x1c, "expected Eip = %x, got %x\n", (DWORD)code_mem + 0x1c, ExceptionInfo->ContextRecord->Eip); ok(rec->NumberParameters == (is_wow64 ? 1 : 3), "ExceptionParameters is %d instead of %d\n", rec->NumberParameters, is_wow64 ? 1 : 3); ok(rec->ExceptionInformation[0] == ExceptionInfo->ContextRecord->Eax, "expected ExceptionInformation[0] = %x, got %lx\n", ExceptionInfo->ContextRecord->Eax, rec->ExceptionInformation[0]); if (!is_wow64) { ok(rec->ExceptionInformation[1] == 0x11111111, "got ExceptionInformation[1] = %lx\n", rec->ExceptionInformation[1]); ok(rec->ExceptionInformation[2] == 0x22222222, "got ExceptionInformation[2] = %lx\n", rec->ExceptionInformation[2]); } #else ok(ExceptionInfo->ContextRecord->Rip == (DWORD_PTR)code_mem + 0x2f, "expected Rip = %lx, got %lx\n", (DWORD_PTR)code_mem + 0x2f, ExceptionInfo->ContextRecord->Rip); ok(rec->NumberParameters == 1, "ExceptionParameters is %d instead of 1\n", rec->NumberParameters); ok(rec->ExceptionInformation[0] == ExceptionInfo->ContextRecord->Rax, "expected ExceptionInformation[0] = %lx, got %lx\n", ExceptionInfo->ContextRecord->Rax, rec->ExceptionInformation[0]); #endif debug_service_exceptions++; return (rec->ExceptionCode == EXCEPTION_BREAKPOINT) ? EXCEPTION_CONTINUE_EXECUTION : EXCEPTION_CONTINUE_SEARCH; } #ifdef __i386__ static const BYTE call_debug_service_code[] = { 0x53, /* pushl %ebx */ 0x57, /* pushl %edi */ 0x8b, 0x44, 0x24, 0x0c, /* movl 12(%esp),%eax */ 0xb9, 0x11, 0x11, 0x11, 0x11, /* movl $0x11111111,%ecx */ 0xba, 0x22, 0x22, 0x22, 0x22, /* movl $0x22222222,%edx */ 0xbb, 0x33, 0x33, 0x33, 0x33, /* movl $0x33333333,%ebx */ 0xbf, 0x44, 0x44, 0x44, 0x44, /* movl $0x44444444,%edi */ 0xcd, 0x2d, /* int $0x2d */ 0xeb, /* jmp $+17 */ 0x0f, 0x1f, 0x00, /* nop */ 0x31, 0xc0, /* xorl %eax,%eax */ 0xeb, 0x0c, /* jmp $+14 */ 0x90, 0x90, 0x90, 0x90, /* nop */ 0x90, 0x90, 0x90, 0x90, 0x90, 0x31, 0xc0, /* xorl %eax,%eax */ 0x40, /* incl %eax */ 0x5f, /* popl %edi */ 0x5b, /* popl %ebx */ 0xc3, /* ret */ }; #else static const BYTE call_debug_service_code[] = { 0x53, /* push %rbx */ 0x57, /* push %rdi */ 0x48, 0x89, 0xc8, /* movl %rcx,%rax */ 0x48, 0xb9, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, 0x11, /* movabs $0x1111111111111111,%rcx */ 0x48, 0xba, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, /* movabs $0x2222222222222222,%rdx */ 0x48, 0xbb, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, /* movabs $0x3333333333333333,%rbx */ 0x48, 0xbf, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, 0x44, /* movabs $0x4444444444444444,%rdi */ 0xcd, 0x2d, /* int $0x2d */ 0xeb, /* jmp $+17 */ 0x0f, 0x1f, 0x00, /* nop */ 0x48, 0x31, 0xc0, /* xor %rax,%rax */ 0xeb, 0x0e, /* jmp $+16 */ 0x90, 0x90, 0x90, 0x90, /* nop */ 0x90, 0x90, 0x90, 0x90, 0x48, 0x31, 0xc0, /* xor %rax,%rax */ 0x48, 0xff, 0xc0, /* inc %rax */ 0x5f, /* pop %rdi */ 0x5b, /* pop %rbx */ 0xc3, /* ret */ }; #endif static void test_debug_service(DWORD numexc) { DWORD (CDECL *func)(DWORD_PTR) = code_mem; DWORD expected_exc, expected_ret; void *vectored_handler; DWORD ret; /* code will return 0 if execution resumes immediately after "int $0x2d", otherwise 1 */ memcpy(code_mem, call_debug_service_code, sizeof(call_debug_service_code)); vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &debug_service_handler); ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); expected_exc = numexc; expected_ret = (numexc != 0); /* BREAKPOINT_BREAK */ debug_service_exceptions = 0; ret = func(0); ok(debug_service_exceptions == expected_exc, "BREAKPOINT_BREAK generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret, "BREAKPOINT_BREAK returned %u, expected %u\n", ret, expected_ret); /* BREAKPOINT_PROMPT */ debug_service_exceptions = 0; ret = func(2); ok(debug_service_exceptions == expected_exc, "BREAKPOINT_PROMPT generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret, "BREAKPOINT_PROMPT returned %u, expected %u\n", ret, expected_ret); /* invalid debug service */ debug_service_exceptions = 0; ret = func(6); ok(debug_service_exceptions == expected_exc, "invalid debug service generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret, "invalid debug service returned %u, expected %u\n", ret, expected_ret); expected_exc = (is_wow64 ? numexc : 0); expected_ret = (is_wow64 && numexc); /* BREAKPOINT_PRINT */ debug_service_exceptions = 0; ret = func(1); ok(debug_service_exceptions == expected_exc, "BREAKPOINT_PRINT generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret, "BREAKPOINT_PRINT returned %u, expected %u\n", ret, expected_ret); /* BREAKPOINT_LOAD_SYMBOLS */ debug_service_exceptions = 0; ret = func(3); ok(debug_service_exceptions == expected_exc, "BREAKPOINT_LOAD_SYMBOLS generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret, "BREAKPOINT_LOAD_SYMBOLS returned %u, expected %u\n", ret, expected_ret); /* BREAKPOINT_UNLOAD_SYMBOLS */ debug_service_exceptions = 0; ret = func(4); ok(debug_service_exceptions == expected_exc, "BREAKPOINT_UNLOAD_SYMBOLS generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret, "BREAKPOINT_UNLOAD_SYMBOLS returned %u, expected %u\n", ret, expected_ret); /* BREAKPOINT_COMMAND_STRING */ debug_service_exceptions = 0; ret = func(5); ok(debug_service_exceptions == expected_exc || broken(debug_service_exceptions == numexc), "BREAKPOINT_COMMAND_STRING generated %u exceptions, expected %u\n", debug_service_exceptions, expected_exc); ok(ret == expected_ret || broken(ret == (numexc != 0)), "BREAKPOINT_COMMAND_STRING returned %u, expected %u\n", ret, expected_ret); pRtlRemoveVectoredExceptionHandler(vectored_handler); } static DWORD breakpoint_exceptions; static LONG CALLBACK breakpoint_handler(EXCEPTION_POINTERS *ExceptionInfo) { EXCEPTION_RECORD *rec = ExceptionInfo->ExceptionRecord; trace("vect. handler %08x addr:%p\n", rec->ExceptionCode, rec->ExceptionAddress); ok(rec->ExceptionCode == EXCEPTION_BREAKPOINT, "ExceptionCode is %08x instead of %08x\n", rec->ExceptionCode, EXCEPTION_BREAKPOINT); #ifdef __i386__ ok(ExceptionInfo->ContextRecord->Eip == (DWORD)code_mem + 1, "expected Eip = %x, got %x\n", (DWORD)code_mem + 1, ExceptionInfo->ContextRecord->Eip); ok(rec->NumberParameters == (is_wow64 ? 1 : 3), "ExceptionParameters is %d instead of %d\n", rec->NumberParameters, is_wow64 ? 1 : 3); ok(rec->ExceptionInformation[0] == 0, "got ExceptionInformation[0] = %lx\n", rec->ExceptionInformation[0]); ExceptionInfo->ContextRecord->Eip = (DWORD)code_mem + 2; #else ok(ExceptionInfo->ContextRecord->Rip == (DWORD_PTR)code_mem + 1, "expected Rip = %lx, got %lx\n", (DWORD_PTR)code_mem + 1, ExceptionInfo->ContextRecord->Rip); ok(rec->NumberParameters == 1, "ExceptionParameters is %d instead of 1\n", rec->NumberParameters); ok(rec->ExceptionInformation[0] == 0, "got ExceptionInformation[0] = %lx\n", rec->ExceptionInformation[0]); ExceptionInfo->ContextRecord->Rip = (DWORD_PTR)code_mem + 2; #endif breakpoint_exceptions++; return (rec->ExceptionCode == EXCEPTION_BREAKPOINT) ? EXCEPTION_CONTINUE_EXECUTION : EXCEPTION_CONTINUE_SEARCH; } static const BYTE breakpoint_code[] = { 0xcd, 0x03, /* int $0x3 */ 0xc3, /* ret */ }; static void test_breakpoint(DWORD numexc) { DWORD (CDECL *func)(void) = code_mem; void *vectored_handler; memcpy(code_mem, breakpoint_code, sizeof(breakpoint_code)); vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &breakpoint_handler); ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); breakpoint_exceptions = 0; func(); ok(breakpoint_exceptions == numexc, "int $0x3 generated %u exceptions, expected %u\n", breakpoint_exceptions, numexc); pRtlRemoveVectoredExceptionHandler(vectored_handler); } static DWORD invalid_handle_exceptions; static LONG CALLBACK invalid_handle_vectored_handler(EXCEPTION_POINTERS *ExceptionInfo) { PEXCEPTION_RECORD rec = ExceptionInfo->ExceptionRecord; trace("vect. handler %08x addr:%p\n", rec->ExceptionCode, rec->ExceptionAddress); ok(rec->ExceptionCode == EXCEPTION_INVALID_HANDLE, "ExceptionCode is %08x instead of %08x\n", rec->ExceptionCode, EXCEPTION_INVALID_HANDLE); ok(rec->NumberParameters == 0, "ExceptionParameters is %d instead of 0\n", rec->NumberParameters); invalid_handle_exceptions++; return (rec->ExceptionCode == EXCEPTION_INVALID_HANDLE) ? EXCEPTION_CONTINUE_EXECUTION : EXCEPTION_CONTINUE_SEARCH; } static void test_closehandle(DWORD numexc, HANDLE handle) { PVOID vectored_handler; NTSTATUS status; DWORD res; if (!pRtlAddVectoredExceptionHandler || !pRtlRemoveVectoredExceptionHandler || !pRtlRaiseException) { skip("RtlAddVectoredExceptionHandler or RtlRemoveVectoredExceptionHandler or RtlRaiseException not found\n"); return; } vectored_handler = pRtlAddVectoredExceptionHandler(TRUE, &invalid_handle_vectored_handler); ok(vectored_handler != 0, "RtlAddVectoredExceptionHandler failed\n"); invalid_handle_exceptions = 0; res = CloseHandle(handle); ok(!res || (is_wow64 && res), "CloseHandle(%p) unexpectedly succeeded\n", handle); ok(GetLastError() == ERROR_INVALID_HANDLE, "wrong error code %d instead of %d\n", GetLastError(), ERROR_INVALID_HANDLE); ok(invalid_handle_exceptions == numexc, "CloseHandle generated %d exceptions, expected %d\n", invalid_handle_exceptions, numexc); invalid_handle_exceptions = 0; status = pNtClose(handle); ok(status == STATUS_INVALID_HANDLE || (is_wow64 && status == 0), "NtClose(%p) returned status %08x\n", handle, status); ok(invalid_handle_exceptions == numexc, "NtClose generated %d exceptions, expected %d\n", invalid_handle_exceptions, numexc); pRtlRemoveVectoredExceptionHandler(vectored_handler); } static void test_vectored_continue_handler(void) { PVOID handler1, handler2; ULONG ret; if (!pRtlAddVectoredContinueHandler || !pRtlRemoveVectoredContinueHandler) { skip("RtlAddVectoredContinueHandler or RtlRemoveVectoredContinueHandler not found\n"); return; } handler1 = pRtlAddVectoredContinueHandler(TRUE, (void *)0xdeadbeef); ok(handler1 != 0, "RtlAddVectoredContinueHandler failed\n"); handler2 = pRtlAddVectoredContinueHandler(TRUE, (void *)0xdeadbeef); ok(handler2 != 0, "RtlAddVectoredContinueHandler failed\n"); ok(handler1 != handler2, "RtlAddVectoredContinueHandler returned same handler\n"); if (pRtlRemoveVectoredExceptionHandler) { ret = pRtlRemoveVectoredExceptionHandler(handler1); ok(!ret, "RtlRemoveVectoredExceptionHandler succeeded\n"); } ret = pRtlRemoveVectoredContinueHandler(handler1); ok(ret, "RtlRemoveVectoredContinueHandler failed\n"); ret = pRtlRemoveVectoredContinueHandler(handler2); ok(ret, "RtlRemoveVectoredContinueHandler failed\n"); ret = pRtlRemoveVectoredContinueHandler(handler1); ok(!ret, "RtlRemoveVectoredContinueHandler succeeded\n"); ret = pRtlRemoveVectoredContinueHandler((void *)0x11223344); ok(!ret, "RtlRemoveVectoredContinueHandler succeeded\n"); } #endif /* defined(__i386__) || defined(__x86_64__) */ static DWORD WINAPI suspend_thread_test( void *arg ) { HANDLE event = arg; WaitForSingleObject(event, INFINITE); return 0; } static void test_suspend_count(HANDLE hthread, ULONG expected_count, int line) { static BOOL supported = TRUE; NTSTATUS status; ULONG count; if (!supported) return; count = ~0u; status = pNtQueryInformationThread(hthread, ThreadSuspendCount, &count, sizeof(count), NULL); if (status) { win_skip("ThreadSuspendCount is not supported.\n"); supported = FALSE; return; } ok_(__FILE__, line)(!status, "Failed to get suspend count, status %#x.\n", status); ok_(__FILE__, line)(count == expected_count, "Unexpected suspend count %u.\n", count); } static void test_suspend_thread(void) { #define TEST_SUSPEND_COUNT(thread, count) test_suspend_count((thread), (count), __LINE__) HANDLE thread, event; ULONG count, len; NTSTATUS status; DWORD ret; status = NtSuspendThread(0, NULL); ok(status == STATUS_INVALID_HANDLE, "Unexpected return value %#x.\n", status); status = NtResumeThread(0, NULL); ok(status == STATUS_INVALID_HANDLE, "Unexpected return value %#x.\n", status); event = CreateEventW(NULL, FALSE, FALSE, NULL); thread = CreateThread(NULL, 0, suspend_thread_test, event, 0, NULL); ok(thread != NULL, "Failed to create a thread.\n"); ret = WaitForSingleObject(thread, 0); ok(ret == WAIT_TIMEOUT, "Unexpected status %d.\n", ret); status = pNtQueryInformationThread(thread, ThreadSuspendCount, &count, sizeof(count), NULL); if (!status) { status = pNtQueryInformationThread(thread, ThreadSuspendCount, NULL, sizeof(count), NULL); ok(status == STATUS_ACCESS_VIOLATION, "Unexpected status %#x.\n", status); status = pNtQueryInformationThread(thread, ThreadSuspendCount, &count, sizeof(count) / 2, NULL); ok(status == STATUS_INFO_LENGTH_MISMATCH, "Unexpected status %#x.\n", status); len = 123; status = pNtQueryInformationThread(thread, ThreadSuspendCount, &count, sizeof(count) / 2, &len); ok(status == STATUS_INFO_LENGTH_MISMATCH, "Unexpected status %#x.\n", status); ok(len == 123, "Unexpected info length %u.\n", len); len = 123; status = pNtQueryInformationThread(thread, ThreadSuspendCount, NULL, 0, &len); ok(status == STATUS_INFO_LENGTH_MISMATCH, "Unexpected status %#x.\n", status); ok(len == 123, "Unexpected info length %u.\n", len); count = 10; status = pNtQueryInformationThread(0, ThreadSuspendCount, &count, sizeof(count), NULL); ok(status, "Unexpected status %#x.\n", status); ok(count == 10, "Unexpected suspend count %u.\n", count); } status = NtResumeThread(thread, NULL); ok(!status, "Unexpected status %#x.\n", status); status = NtResumeThread(thread, &count); ok(!status, "Unexpected status %#x.\n", status); ok(count == 0, "Unexpected suspended count %u.\n", count); TEST_SUSPEND_COUNT(thread, 0); status = NtSuspendThread(thread, NULL); ok(!status, "Failed to suspend a thread, status %#x.\n", status); TEST_SUSPEND_COUNT(thread, 1); status = NtSuspendThread(thread, &count); ok(!status, "Failed to suspend a thread, status %#x.\n", status); ok(count == 1, "Unexpected suspended count %u.\n", count); TEST_SUSPEND_COUNT(thread, 2); status = NtResumeThread(thread, &count); ok(!status, "Failed to resume a thread, status %#x.\n", status); ok(count == 2, "Unexpected suspended count %u.\n", count); TEST_SUSPEND_COUNT(thread, 1); status = NtResumeThread(thread, NULL); ok(!status, "Failed to resume a thread, status %#x.\n", status); TEST_SUSPEND_COUNT(thread, 0); SetEvent(event); WaitForSingleObject(thread, INFINITE); CloseHandle(thread); #undef TEST_SUSPEND_COUNT } static const char *suspend_process_event_name = "suspend_process_event"; static const char *suspend_process_event2_name = "suspend_process_event2"; static DWORD WINAPI dummy_thread_proc( void *arg ) { return 0; } static void suspend_process_proc(void) { HANDLE event = OpenEventA(SYNCHRONIZE, FALSE, suspend_process_event_name); HANDLE event2 = OpenEventA(SYNCHRONIZE | EVENT_MODIFY_STATE, FALSE, suspend_process_event2_name); unsigned int count; NTSTATUS status; HANDLE thread; ok(event != NULL, "Failed to open event handle.\n"); ok(event2 != NULL, "Failed to open event handle.\n"); thread = CreateThread(NULL, 0, dummy_thread_proc, 0, CREATE_SUSPENDED, NULL); ok(thread != NULL, "Failed to create auxiliary thread.\n"); /* Suspend up to limit. */ while (!(status = NtSuspendThread(thread, NULL))) ; ok(status == STATUS_SUSPEND_COUNT_EXCEEDED, "Unexpected status %#x.\n", status); for (;;) { SetEvent(event2); if (WaitForSingleObject(event, 100) == WAIT_OBJECT_0) break; } status = NtSuspendThread(thread, &count); ok(!status, "Failed to suspend a thread, status %#x.\n", status); ok(count == 125, "Unexpected suspend count %u.\n", count); status = NtResumeThread(thread, NULL); ok(!status, "Failed to resume a thread, status %#x.\n", status); CloseHandle(event); CloseHandle(event2); } static void test_suspend_process(void) { PROCESS_INFORMATION info; char path_name[MAX_PATH]; STARTUPINFOA startup; HANDLE event, event2; NTSTATUS status; char **argv; DWORD ret; event = CreateEventA(NULL, FALSE, FALSE, suspend_process_event_name); ok(event != NULL, "Failed to create event.\n"); event2 = CreateEventA(NULL, FALSE, FALSE, suspend_process_event2_name); ok(event2 != NULL, "Failed to create event.\n"); winetest_get_mainargs(&argv); memset(&startup, 0, sizeof(startup)); startup.cb = sizeof(startup); sprintf(path_name, "%s exception suspend_process", argv[0]); ret = CreateProcessA(NULL, path_name, NULL, NULL, FALSE, 0, NULL, NULL, &startup, &info); ok(ret, "Failed to create target process.\n"); /* New process signals this event. */ ResetEvent(event2); ret = WaitForSingleObject(event2, INFINITE); ok(ret == WAIT_OBJECT_0, "Wait failed, %#x.\n", ret); /* Suspend main thread */ status = NtSuspendThread(info.hThread, &ret); ok(!status && !ret, "Failed to suspend main thread, status %#x.\n", status); /* Process wasn't suspended yet. */ status = pNtResumeProcess(info.hProcess); ok(!status, "Failed to resume a process, status %#x.\n", status); status = pNtSuspendProcess(0); ok(status == STATUS_INVALID_HANDLE, "Unexpected status %#x.\n", status); status = pNtResumeProcess(info.hProcess); ok(!status, "Failed to resume a process, status %#x.\n", status); ResetEvent(event2); ret = WaitForSingleObject(event2, 200); ok(ret == WAIT_OBJECT_0, "Wait failed.\n"); status = pNtSuspendProcess(info.hProcess); ok(!status, "Failed to suspend a process, status %#x.\n", status); status = NtSuspendThread(info.hThread, &ret); ok(!status && ret == 1, "Failed to suspend main thread, status %#x.\n", status); status = NtResumeThread(info.hThread, &ret); ok(!status && ret == 2, "Failed to resume main thread, status %#x.\n", status); ResetEvent(event2); ret = WaitForSingleObject(event2, 200); ok(ret == WAIT_TIMEOUT, "Wait failed.\n"); status = pNtSuspendProcess(info.hProcess); ok(!status, "Failed to suspend a process, status %#x.\n", status); status = pNtResumeProcess(info.hProcess); ok(!status, "Failed to resume a process, status %#x.\n", status); ResetEvent(event2); ret = WaitForSingleObject(event2, 200); ok(ret == WAIT_TIMEOUT, "Wait failed.\n"); status = pNtResumeProcess(info.hProcess); ok(!status, "Failed to resume a process, status %#x.\n", status); ResetEvent(event2); ret = WaitForSingleObject(event2, 200); ok(ret == WAIT_OBJECT_0, "Wait failed.\n"); SetEvent(event); winetest_wait_child_process(info.hProcess); CloseHandle(info.hProcess); CloseHandle(info.hThread); CloseHandle(event); CloseHandle(event2); } static void test_unload_trace(void) { static const WCHAR imageW[] = {'m','s','x','m','l','3','.','d','l','l',0}; RTL_UNLOAD_EVENT_TRACE *unload_trace, *ptr; ULONG *element_size, *element_count, size; BOOL found = FALSE; HMODULE hmod; unload_trace = pRtlGetUnloadEventTrace(); ok(unload_trace != NULL, "Failed to get unload events pointer.\n"); if (pRtlGetUnloadEventTraceEx) { ptr = NULL; pRtlGetUnloadEventTraceEx(&element_size, &element_count, (void **)&ptr); ok(*element_size >= sizeof(*ptr), "Unexpected element size.\n"); ok(*element_count == RTL_UNLOAD_EVENT_TRACE_NUMBER, "Unexpected trace element count %u.\n", *element_count); ok(ptr != NULL, "Unexpected pointer %p.\n", ptr); size = *element_size; } else size = sizeof(*unload_trace); hmod = LoadLibraryA("msxml3.dll"); ok(hmod != NULL, "Failed to load library.\n"); FreeLibrary(hmod); ptr = unload_trace; while (ptr->BaseAddress != NULL) { if (!lstrcmpW(imageW, ptr->ImageName)) { found = TRUE; break; } ptr = (RTL_UNLOAD_EVENT_TRACE *)((char *)ptr + size); } ok(found, "Unloaded module wasn't found.\n"); } START_TEST(exception) { HMODULE hntdll = GetModuleHandleA("ntdll.dll"); #if defined(__x86_64__) HMODULE hmsvcrt = LoadLibraryA("msvcrt.dll"); #endif my_argc = winetest_get_mainargs( &my_argv ); if (my_argc >= 3 && !strcmp(my_argv[2], "suspend_process")) { suspend_process_proc(); return; } code_mem = VirtualAlloc(NULL, 65536, MEM_RESERVE | MEM_COMMIT, PAGE_EXECUTE_READWRITE); if(!code_mem) { trace("VirtualAlloc failed\n"); return; } #define X(f) p##f = (void*)GetProcAddress(hntdll, #f) X(NtGetContextThread); X(NtSetContextThread); X(NtReadVirtualMemory); X(NtClose); X(RtlUnwind); X(RtlRaiseException); X(RtlCaptureContext); X(NtTerminateProcess); X(RtlAddVectoredExceptionHandler); X(RtlRemoveVectoredExceptionHandler); X(RtlAddVectoredContinueHandler); X(RtlRemoveVectoredContinueHandler); X(NtQueryInformationProcess); X(NtQueryInformationThread); X(NtSetInformationProcess); X(NtSuspendProcess); X(NtResumeProcess); X(RtlGetUnloadEventTrace); X(RtlGetUnloadEventTraceEx); #undef X pIsWow64Process = (void *)GetProcAddress(GetModuleHandleA("kernel32.dll"), "IsWow64Process"); #ifdef __i386__ if (!pIsWow64Process || !pIsWow64Process( GetCurrentProcess(), &is_wow64 )) is_wow64 = FALSE; if (pRtlAddVectoredExceptionHandler && pRtlRemoveVectoredExceptionHandler) have_vectored_api = TRUE; else skip("RtlAddVectoredExceptionHandler or RtlRemoveVectoredExceptionHandler not found\n"); my_argc = winetest_get_mainargs( &my_argv ); if (my_argc >= 4) { void *addr; sscanf( my_argv[3], "%p", &addr ); if (addr != &test_stage) { skip( "child process not mapped at same address (%p/%p)\n", &test_stage, addr); return; } /* child must be run under a debugger */ if (!NtCurrentTeb()->Peb->BeingDebugged) { ok(FALSE, "child process not being debugged?\n"); return; } if (pRtlRaiseException) { test_stage = 1; run_rtlraiseexception_test(0x12345); run_rtlraiseexception_test(EXCEPTION_BREAKPOINT); run_rtlraiseexception_test(EXCEPTION_INVALID_HANDLE); test_stage = 2; run_rtlraiseexception_test(0x12345); run_rtlraiseexception_test(EXCEPTION_BREAKPOINT); run_rtlraiseexception_test(EXCEPTION_INVALID_HANDLE); test_stage = 3; test_outputdebugstring(0, FALSE); test_stage = 4; test_outputdebugstring(2, TRUE); /* is this a Windows bug? */ test_stage = 5; test_ripevent(0); test_stage = 6; test_ripevent(1); test_stage = 7; test_debug_service(0); test_stage = 8; test_debug_service(1); test_stage = 9; test_breakpoint(0); test_stage = 10; test_breakpoint(1); test_stage = 11; test_closehandle(0, (HANDLE)0xdeadbeef); test_stage = 12; test_closehandle(1, (HANDLE)0xdeadbeef); test_stage = 13; test_closehandle(0, 0); /* Special case. */ } else skip( "RtlRaiseException not found\n" ); /* rest of tests only run in parent */ return; } test_unwind(); test_exceptions(); test_rtlraiseexception(); test_debug_registers(); test_outputdebugstring(1, FALSE); test_ripevent(1); test_debug_service(1); test_breakpoint(1); test_closehandle(0, (HANDLE)0xdeadbeef); test_vectored_continue_handler(); test_debugger(); test_simd_exceptions(); test_fpu_exceptions(); test_dpe_exceptions(); test_prot_fault(); test_thread_context(); test_suspend_thread(); test_suspend_process(); test_unload_trace(); #elif defined(__x86_64__) #define X(f) p##f = (void*)GetProcAddress(hntdll, #f) X(RtlAddFunctionTable); X(RtlDeleteFunctionTable); X(RtlInstallFunctionTableCallback); X(RtlLookupFunctionEntry); X(RtlAddGrowableFunctionTable); X(RtlGrowFunctionTable); X(RtlDeleteGrowableFunctionTable); X(__C_specific_handler); X(RtlCaptureContext); X(RtlRestoreContext); X(RtlUnwindEx); X(RtlWow64GetThreadContext); X(RtlWow64SetThreadContext); #undef X p_setjmp = (void *)GetProcAddress( hmsvcrt, "_setjmp" ); test_debug_registers(); test_outputdebugstring(1, FALSE); test_ripevent(1); test_debug_service(1); test_breakpoint(1); test_closehandle(0, (HANDLE)0xdeadbeef); test_vectored_continue_handler(); test_virtual_unwind(); test___C_specific_handler(); test_restore_context(); test_prot_fault(); test_dpe_exceptions(); test_wow64_context(); test_suspend_thread(); test_suspend_process(); test_unload_trace(); if (pRtlAddFunctionTable && pRtlDeleteFunctionTable && pRtlInstallFunctionTableCallback && pRtlLookupFunctionEntry) test_dynamic_unwind(); else skip( "Dynamic unwind functions not found\n" ); #endif VirtualFree(code_mem, 0, MEM_RELEASE); }