1 // Copyright (C) 2017 The Android Open Source Project
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 //      http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 //
15 
16 #include <android-base/logging.h>
17 #include <atomic>
18 #include <dlfcn.h>
19 #include <iostream>
20 #include <fstream>
21 #include <iomanip>
22 #include <jni.h>
23 #include <jvmti.h>
24 #include <unordered_map>
25 #include <unordered_set>
26 #include <memory>
27 #include <mutex>
28 #include <sstream>
29 #include <string>
30 #include <vector>
31 
32 namespace wrapagentproperties {
33 
34 using PropMap = std::unordered_map<std::string, std::string>;
35 static constexpr const char* kOnLoad = "Agent_OnLoad";
36 static constexpr const char* kOnAttach = "Agent_OnAttach";
37 static constexpr const char* kOnUnload = "Agent_OnUnload";
38 struct ProxyJavaVM;
39 using AgentLoadFunction = jint (*)(ProxyJavaVM*, const char*, void*);
40 using AgentUnloadFunction = jint (*)(JavaVM*);
41 
42 // Global namespace. Shared by every usage of this wrapper unfortunately.
43 // We need to keep track of them to call Agent_OnUnload.
44 static std::mutex unload_mutex;
45 
46 struct Unloader {
47   AgentUnloadFunction unload;
48 };
49 static std::vector<Unloader> unload_functions;
50 
51 static jint CreateJvmtiEnv(ProxyJavaVM* vm, void** out_env, jint version);
52 
53 struct ProxyJavaVM {
54   const struct JNIInvokeInterface* functions;
55   JavaVM* real_vm;
56   PropMap* map;
57   void* dlopen_handle;
58   AgentLoadFunction load;
59   AgentLoadFunction attach;
60 
ProxyJavaVMwrapagentproperties::ProxyJavaVM61   ProxyJavaVM(JavaVM* vm, const std::string& agent_lib, PropMap* map)
62       : functions(CreateInvokeInterface()),
63         real_vm(vm),
64         map(map),
65         dlopen_handle(dlopen(agent_lib.c_str(), RTLD_LAZY)),
66         load(nullptr),
67         attach(nullptr) {
68     CHECK(dlopen_handle != nullptr) << "unable to open " << agent_lib;
69     {
70       std::lock_guard<std::mutex> lk(unload_mutex);
71       unload_functions.push_back({
72         reinterpret_cast<AgentUnloadFunction>(dlsym(dlopen_handle, kOnUnload)),
73       });
74     }
75     attach = reinterpret_cast<AgentLoadFunction>(dlsym(dlopen_handle, kOnAttach));
76     load = reinterpret_cast<AgentLoadFunction>(dlsym(dlopen_handle, kOnLoad));
77   }
78 
79   // TODO Use this to cleanup
WrapDestroyJavaVMwrapagentproperties::ProxyJavaVM80   static jint WrapDestroyJavaVM(ProxyJavaVM* vm) {
81     return vm->real_vm->DestroyJavaVM();
82   }
WrapAttachCurrentThreadwrapagentproperties::ProxyJavaVM83   static jint WrapAttachCurrentThread(ProxyJavaVM* vm, JNIEnv** env, void* res) {
84     return vm->real_vm->AttachCurrentThread(env, res);
85   }
WrapDetachCurrentThreadwrapagentproperties::ProxyJavaVM86   static jint WrapDetachCurrentThread(ProxyJavaVM* vm) {
87     return vm->real_vm->DetachCurrentThread();
88   }
WrapAttachCurrentThreadAsDaemonwrapagentproperties::ProxyJavaVM89   static jint WrapAttachCurrentThreadAsDaemon(ProxyJavaVM* vm, JNIEnv** env, void* res) {
90     return vm->real_vm->AttachCurrentThreadAsDaemon(env, res);
91   }
92 
WrapGetEnvwrapagentproperties::ProxyJavaVM93   static jint WrapGetEnv(ProxyJavaVM* vm, void** out_env, jint version) {
94     switch (version) {
95       case JVMTI_VERSION:
96       case JVMTI_VERSION_1:
97       case JVMTI_VERSION_1_1:
98       case JVMTI_VERSION_1_2:
99         return CreateJvmtiEnv(vm, out_env, version);
100       default:
101         if ((version & 0x30000000) == 0x30000000) {
102           LOG(ERROR) << "Version number 0x" << std::hex << version << " looks like a JVMTI "
103                      << "version but it is not one that is recognized. The wrapper might not "
104                      << "function correctly! Continuing anyway.";
105         }
106         return vm->real_vm->GetEnv(out_env, version);
107     }
108   }
109 
CreateInvokeInterfacewrapagentproperties::ProxyJavaVM110   static JNIInvokeInterface* CreateInvokeInterface() {
111     JNIInvokeInterface* out = new JNIInvokeInterface;
112     memset(out, 0, sizeof(JNIInvokeInterface));
113     out->DestroyJavaVM = reinterpret_cast<jint (*)(JavaVM*)>(WrapDestroyJavaVM);
114     out->AttachCurrentThread =
115         reinterpret_cast<jint(*)(JavaVM*, JNIEnv**, void*)>(WrapAttachCurrentThread);
116     out->DetachCurrentThread = reinterpret_cast<jint(*)(JavaVM*)>(WrapDetachCurrentThread);
117     out->GetEnv = reinterpret_cast<jint(*)(JavaVM*, void**, jint)>(WrapGetEnv);
118     out->AttachCurrentThreadAsDaemon =
119         reinterpret_cast<jint(*)(JavaVM*, JNIEnv**, void*)>(WrapAttachCurrentThreadAsDaemon);
120     return out;
121   }
122 };
123 
124 
125 struct ExtraJvmtiInterface : public jvmtiInterface_1_ {
126   ProxyJavaVM* proxy_vm;
127   jvmtiInterface_1_ const* original_interface;
128 
WrapDisposeEnvironmentwrapagentproperties::ExtraJvmtiInterface129   static jvmtiError WrapDisposeEnvironment(jvmtiEnv* env) {
130     ExtraJvmtiInterface* funcs = reinterpret_cast<ExtraJvmtiInterface*>(
131         const_cast<jvmtiInterface_1_*>(env->functions));
132     jvmtiInterface_1_** out_iface = const_cast<jvmtiInterface_1_**>(&env->functions);
133     *out_iface = const_cast<jvmtiInterface_1_*>(funcs->original_interface);
134     funcs->original_interface->Deallocate(env, reinterpret_cast<unsigned char*>(funcs));
135     jvmtiError res = (*out_iface)->DisposeEnvironment(env);
136     return res;
137   }
138 
WrapGetSystemPropertywrapagentproperties::ExtraJvmtiInterface139   static jvmtiError WrapGetSystemProperty(jvmtiEnv* env, const char* prop, char** out) {
140     ExtraJvmtiInterface* funcs = reinterpret_cast<ExtraJvmtiInterface*>(
141         const_cast<jvmtiInterface_1_*>(env->functions));
142     auto it = funcs->proxy_vm->map->find(prop);
143     if (it != funcs->proxy_vm->map->end()) {
144       const std::string& val = it->second;
145       std::string str_prop(prop);
146       jvmtiError res = env->Allocate(val.size() + 1, reinterpret_cast<unsigned char**>(out));
147       if (res != JVMTI_ERROR_NONE) {
148         return res;
149       }
150       strcpy(*out, val.c_str());
151       return JVMTI_ERROR_NONE;
152     } else {
153       return funcs->original_interface->GetSystemProperty(env, prop, out);
154     }
155   }
156 
WrapGetSystemPropertieswrapagentproperties::ExtraJvmtiInterface157   static jvmtiError WrapGetSystemProperties(jvmtiEnv* env, jint* cnt, char*** prop_ptr) {
158     ExtraJvmtiInterface* funcs = reinterpret_cast<ExtraJvmtiInterface*>(
159         const_cast<jvmtiInterface_1_*>(env->functions));
160     jint init_cnt;
161     char** init_prop_ptr;
162     jvmtiError res = funcs->original_interface->GetSystemProperties(env, &init_cnt, &init_prop_ptr);
163     if (res != JVMTI_ERROR_NONE) {
164       return res;
165     }
166     std::unordered_set<std::string> all_props;
167     for (const auto& p : *funcs->proxy_vm->map) {
168       all_props.insert(p.first);
169     }
170     for (jint i = 0; i < init_cnt; i++) {
171       all_props.insert(init_prop_ptr[i]);
172       env->Deallocate(reinterpret_cast<unsigned char*>(init_prop_ptr[i]));
173     }
174     env->Deallocate(reinterpret_cast<unsigned char*>(init_prop_ptr));
175     *cnt = all_props.size();
176     res = env->Allocate(all_props.size() * sizeof(char*),
177                         reinterpret_cast<unsigned char**>(prop_ptr));
178     if (res != JVMTI_ERROR_NONE) {
179       return res;
180     }
181     char** out_prop_ptr = *prop_ptr;
182     jint i = 0;
183     for (const std::string& p : all_props) {
184       res = env->Allocate(p.size() + 1, reinterpret_cast<unsigned char**>(&out_prop_ptr[i]));
185       if (res != JVMTI_ERROR_NONE) {
186         return res;
187       }
188       strcpy(out_prop_ptr[i], p.c_str());
189       i++;
190     }
191     CHECK_EQ(i, *cnt);
192     return JVMTI_ERROR_NONE;
193   }
194 
WrapSetSystemPropertywrapagentproperties::ExtraJvmtiInterface195   static jvmtiError WrapSetSystemProperty(jvmtiEnv* env, const char* prop, const char* val) {
196     ExtraJvmtiInterface* funcs = reinterpret_cast<ExtraJvmtiInterface*>(
197         const_cast<jvmtiInterface_1_*>(env->functions));
198     jvmtiError res = funcs->original_interface->SetSystemProperty(env, prop, val);
199     if (res != JVMTI_ERROR_NONE) {
200       return res;
201     }
202     auto it = funcs->proxy_vm->map->find(prop);
203     if (it != funcs->proxy_vm->map->end()) {
204       it->second = val;
205     }
206     return JVMTI_ERROR_NONE;
207   }
208 
209   // TODO It would be way better to actually set up a full proxy like we did for JavaVM but the
210   // number of functions makes it not worth it.
SetupProxyJvmtiEnvwrapagentproperties::ExtraJvmtiInterface211   static jint SetupProxyJvmtiEnv(ProxyJavaVM* vm, jvmtiEnv* real_env) {
212     ExtraJvmtiInterface* new_iface = nullptr;
213     if (JVMTI_ERROR_NONE != real_env->Allocate(sizeof(ExtraJvmtiInterface),
214                                               reinterpret_cast<unsigned char**>(&new_iface))) {
215       LOG(ERROR) << "Could not allocate extra space for new jvmti interface struct";
216       return JNI_ERR;
217     }
218     memcpy(new_iface, real_env->functions, sizeof(jvmtiInterface_1_));
219     new_iface->proxy_vm = vm;
220     new_iface->original_interface = real_env->functions;
221 
222     // Replace these functions with the new ones.
223     new_iface->DisposeEnvironment = WrapDisposeEnvironment;
224     new_iface->GetSystemProperty = WrapGetSystemProperty;
225     new_iface->GetSystemProperties = WrapGetSystemProperties;
226     new_iface->SetSystemProperty = WrapSetSystemProperty;
227 
228     // Replace the functions table with our new one with replaced functions.
229     jvmtiInterface_1_** out_iface = const_cast<jvmtiInterface_1_**>(&real_env->functions);
230     *out_iface = new_iface;
231     return JNI_OK;
232   }
233 };
234 
CreateJvmtiEnv(ProxyJavaVM * vm,void ** out_env,jint version)235 static jint CreateJvmtiEnv(ProxyJavaVM* vm, void** out_env, jint version) {
236   jint res = vm->real_vm->GetEnv(out_env, version);
237   if (res != JNI_OK) {
238     LOG(WARNING) << "Could not create jvmtiEnv to proxy!";
239     return res;
240   }
241   return ExtraJvmtiInterface::SetupProxyJvmtiEnv(vm, reinterpret_cast<jvmtiEnv*>(*out_env));
242 }
243 
244 enum class StartType {
245   OnAttach, OnLoad,
246 };
247 
CallNextAgent(StartType start,ProxyJavaVM * vm,const std::string & options,void * reserved)248 static jint CallNextAgent(StartType start,
249                           ProxyJavaVM* vm,
250                           const std::string& options,
251                           void* reserved) {
252   // TODO It might be good to set it up so that the library is unloaded even if no jvmtiEnv's are
253   // created but this isn't expected to be common so we will just not bother.
254   return ((start == StartType::OnLoad) ? vm->load : vm->attach)(vm, options.c_str(), reserved);
255 }
256 
substrOf(const std::string & s,size_t start,size_t end)257 static std::string substrOf(const std::string& s, size_t start, size_t end) {
258   if (end == start) {
259     return "";
260   } else if (end == std::string::npos) {
261     end = s.size();
262   }
263   return s.substr(start, end - start);
264 }
265 
ReadPropMap(const std::string & file)266 static PropMap* ReadPropMap(const std::string& file) {
267   std::unique_ptr<PropMap> map(new PropMap);
268   std::ifstream prop_file(file, std::ios::in);
269   std::string line;
270   while (std::getline(prop_file, line)) {
271     if (line.size() == 0 || line[0] == '#') {
272       continue;
273     }
274     if (line.find('=') == std::string::npos) {
275       LOG(INFO) << "line: " << line << " didn't have a '='";
276       return nullptr;
277     }
278     std::string prop = substrOf(line, 0, line.find('='));
279     std::string val = substrOf(line, line.find('=') + 1, std::string::npos);
280     LOG(INFO) << "Overriding property " << std::quoted(prop) << " new value is "
281               << std::quoted(val);
282     map->insert({prop, val});
283   }
284   return map.release();
285 }
286 
ParseArgs(const std::string & options,std::string * prop_file,std::string * agent_lib,std::string * agent_options)287 static bool ParseArgs(const std::string& options,
288                       /*out*/std::string* prop_file,
289                       /*out*/std::string* agent_lib,
290                       /*out*/std::string* agent_options) {
291   if (options.find(',') == std::string::npos) {
292     LOG(ERROR) << "No agent lib in " << options;
293     return false;
294   }
295   *prop_file = substrOf(options, 0, options.find(','));
296   *agent_lib = substrOf(options, options.find(',') + 1, options.find('='));
297   if (options.find('=') != std::string::npos) {
298     *agent_options = substrOf(options, options.find('=') + 1, std::string::npos);
299   } else {
300     *agent_options = "";
301   }
302   return true;
303 }
304 
AgentStart(StartType start,JavaVM * vm,char * options,void * reserved)305 static jint AgentStart(StartType start, JavaVM* vm, char* options, void* reserved) {
306   std::string agent_lib;
307   std::string agent_options;
308   std::string prop_file;
309   if (!ParseArgs(options, /*out*/ &prop_file, /*out*/ &agent_lib, /*out*/ &agent_options)) {
310     return JNI_ERR;
311   }
312   // It would be good to not leak these but since they will live for almost the whole program run
313   // anyway it isn't a huge deal.
314   PropMap* map = ReadPropMap(prop_file);
315   if (map == nullptr) {
316     LOG(ERROR) << "unable to read property file at " << std::quoted(prop_file) << "!";
317     return JNI_ERR;
318   }
319   ProxyJavaVM* proxy = new ProxyJavaVM(vm, agent_lib, map);
320   LOG(INFO) << "Chaining to next agent[" << std::quoted(agent_lib) << "] options=["
321             << std::quoted(agent_options) << "]";
322   return CallNextAgent(start, proxy, agent_options, reserved);
323 }
324 
325 // Late attachment (e.g. 'am attach-agent').
Agent_OnAttach(JavaVM * vm,char * options,void * reserved)326 extern "C" JNIEXPORT jint JNICALL Agent_OnAttach(JavaVM *vm, char* options, void* reserved) {
327   return AgentStart(StartType::OnAttach, vm, options, reserved);
328 }
329 
330 // Early attachment
331 // (e.g. 'java -agentpath:/path/to/libwrapagentproperties.so=/path/to/propfile,/path/to/wrapped.so=[ops]').
Agent_OnLoad(JavaVM * jvm,char * options,void * reserved)332 extern "C" JNIEXPORT jint JNICALL Agent_OnLoad(JavaVM* jvm, char* options, void* reserved) {
333   return AgentStart(StartType::OnLoad, jvm, options, reserved);
334 }
335 
Agent_OnUnload(JavaVM * jvm)336 extern "C" JNIEXPORT void JNICALL Agent_OnUnload(JavaVM* jvm) {
337   std::lock_guard<std::mutex> lk(unload_mutex);
338   for (const Unloader& u : unload_functions) {
339     u.unload(jvm);
340     // Don't dlclose since some agents expect to still have code loaded after this.
341   }
342   unload_functions.clear();
343 }
344 
345 }  // namespace wrapagentproperties
346 
347