mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Li, Xun
129 lines
4.2 KiB
C++
129 lines
4.2 KiB
C++
/*
|
|
* Copyright (C) 2011-2020 Intel Corporation. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* * Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* * Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
* * Neither the name of Intel Corporation nor the names of its
|
|
* contributors may be used to endorse or promote products derived
|
|
* from this software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
|
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
|
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
*/
|
|
|
|
/* Implement functions:
|
|
* init_stack_guard()
|
|
* enter_enclave()
|
|
*
|
|
* The functions in this source file will be called during the stack guard initialization.
|
|
* They cannot be built with '-fstack-protector-strong'. Otherwise, stack guard check will
|
|
* be failed before the function returns and 'ud2' will be triggered.
|
|
*/
|
|
|
|
#include "sgx_trts.h"
|
|
#include "trts_inst.h"
|
|
#include "se_memcpy.h"
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include "thread_data.h"
|
|
#include "global_data.h"
|
|
#include "trts_internal.h"
|
|
#include "internal/rts.h"
|
|
|
|
static void __attribute__((section(".nipx"))) init_stack_guard(void *tcs)
|
|
{
|
|
thread_data_t *thread_data = get_thread_data();
|
|
if( (NULL == thread_data) || ((thread_data->stack_base_addr == thread_data->last_sp) && (0 != g_global_data.thread_policy)))
|
|
{
|
|
thread_data = GET_PTR(thread_data_t, tcs, g_global_data.td_template.self_addr);
|
|
}
|
|
else
|
|
{
|
|
return;
|
|
}
|
|
|
|
assert(thread_data != NULL);
|
|
|
|
size_t tmp_stack_guard = 0;
|
|
if (SGX_SUCCESS != sgx_read_rand(
|
|
(unsigned char*)&tmp_stack_guard,
|
|
sizeof(tmp_stack_guard)))
|
|
abort();
|
|
|
|
thread_data->stack_guard = tmp_stack_guard;
|
|
}
|
|
|
|
extern "C" int enter_enclave(int index, void *ms, void *tcs, int cssa) __attribute__((section(".nipx")));
|
|
|
|
extern "C" int enter_enclave(int index, void *ms, void *tcs, int cssa)
|
|
{
|
|
sgx_status_t error = SGX_ERROR_UNEXPECTED;
|
|
|
|
if(sgx_is_enclave_crashed())
|
|
{
|
|
return SGX_ERROR_ENCLAVE_CRASHED;
|
|
}
|
|
if((ECMD_INIT_ENCLAVE != index) && (ENCLAVE_INIT_DONE != get_enclave_state()))
|
|
{
|
|
set_enclave_state(ENCLAVE_CRASHED);
|
|
return error;
|
|
}
|
|
|
|
if(cssa == 0)
|
|
{
|
|
if((index >= 0) || (index == ECMD_ECALL_PTHREAD))
|
|
{
|
|
// Initialize stack guard if necessary
|
|
init_stack_guard(tcs);
|
|
error = do_ecall(index, ms, tcs);
|
|
}
|
|
else if(index == ECMD_INIT_ENCLAVE)
|
|
{
|
|
error = do_init_enclave(ms, tcs);
|
|
}
|
|
else if(index == ECMD_ORET)
|
|
{
|
|
error = do_oret(ms);
|
|
}
|
|
else if(index == ECMD_MKTCS)
|
|
{
|
|
error = do_ecall_add_thread(ms);
|
|
}
|
|
else if(index == ECMD_UNINIT_ENCLAVE)
|
|
{
|
|
error = do_uninit_enclave(tcs);
|
|
}
|
|
}
|
|
else if((cssa == 1) && (index == ECMD_EXCEPT))
|
|
{
|
|
error = trts_handle_exception(tcs);
|
|
if (check_static_stack_canary(tcs) != 0)
|
|
{
|
|
error = SGX_ERROR_STACK_OVERRUN;
|
|
}
|
|
}
|
|
if(error == SGX_ERROR_UNEXPECTED)
|
|
{
|
|
set_enclave_state(ENCLAVE_CRASHED);
|
|
}
|
|
return error;
|
|
}
|