Skip to content

Fixed a problem with dangling references around ExtractPointer. (#334, #372, #373) #375

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Dec 30, 2020
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/core/modules/memory/memory_function.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -280,7 +280,7 @@ object CFunction::Call(tuple args, dict kw)
{
unsigned long ulAddr = 0;
if (arg.ptr() != Py_None)
ulAddr = ExtractPointer(arg)->m_ulAddr;
ulAddr = ExtractAddress(arg);

dcArgPointer(g_pCallVM, ulAddr);
break;
Expand Down
6 changes: 2 additions & 4 deletions src/core/modules/memory/memory_hooks.cpp
100644 → 100755
Original file line number Diff line number Diff line change
Expand Up @@ -147,8 +147,7 @@ bool SP_HookHandler(HookType_t eHookType, CHook* pHook)
case DATA_TYPE_DOUBLE: SetReturnValue<double>(pHook, pyretval); break;
case DATA_TYPE_POINTER:
{
CPointer* pPtr = ExtractPointer(pyretval);
pHook->SetReturnValue<unsigned long>(pPtr->m_ulAddr);
pHook->SetReturnValue<unsigned long>(ExtractAddress(pyretval));
} break;
case DATA_TYPE_STRING: SetReturnValue<const char*>(pHook, pyretval); break;
default: BOOST_RAISE_EXCEPTION(PyExc_TypeError, "Unknown type.")
Expand Down Expand Up @@ -225,8 +224,7 @@ void CStackData::SetItem(unsigned int iIndex, object value)
case DATA_TYPE_DOUBLE: SetArgument<double>(m_pHook, iIndex, value); break;
case DATA_TYPE_POINTER:
{
CPointer* pPtr = ExtractPointer(value);
SetArgument<unsigned long>(m_pHook, iIndex, object(pPtr->m_ulAddr));
SetArgument<unsigned long>(m_pHook, iIndex, object(ExtractAddress(value)));
} break;
case DATA_TYPE_STRING: SetArgument<const char *>(m_pHook, iIndex, value); break;
default: BOOST_RAISE_EXCEPTION(PyExc_TypeError, "Unknown type.")
Expand Down
26 changes: 9 additions & 17 deletions src/core/modules/memory/memory_pointer.cpp
100644 → 100755
Original file line number Diff line number Diff line change
Expand Up @@ -125,8 +125,7 @@ void SetPtrHelper(unsigned long addr, unsigned long ptr)
void CPointer::SetPtr(object oPtr, int iOffset /* = 0 */)
{
Validate();
CPointer* pPtr = ExtractPointer(oPtr);
SetPtrHelper(m_ulAddr + iOffset, pPtr->m_ulAddr);
SetPtrHelper(m_ulAddr + iOffset, ExtractAddress(oPtr));
}

int CompareHelper(void* first, void* second, unsigned long length)
Expand All @@ -140,18 +139,16 @@ int CompareHelper(void* first, void* second, unsigned long length)
int CPointer::Compare(object oOther, unsigned long ulNum)
{
Validate();
CPointer* pOther = ExtractPointer(oOther);
pOther->Validate();
return CompareHelper((void *) m_ulAddr, (void *) pOther->m_ulAddr, ulNum);
return CompareHelper((void *) m_ulAddr, (void *) ExtractAddress(oOther, true), ulNum);
}

bool CPointer::IsOverlapping(object oOther, unsigned long ulNumBytes)
{
CPointer* pOther = ExtractPointer(oOther);
if (m_ulAddr <= pOther->m_ulAddr)
return m_ulAddr + ulNumBytes > pOther->m_ulAddr;
return pOther->m_ulAddr + ulNumBytes > m_ulAddr;
unsigned long ulOther = ExtractAddress(oOther);
if (m_ulAddr <= ulOther)
return m_ulAddr + ulNumBytes > ulOther;

return ulOther + ulNumBytes > m_ulAddr;
}

void* SearchBytesHelper(unsigned char* base, unsigned char* end, unsigned char* bytes, unsigned long length)
Expand Down Expand Up @@ -208,13 +205,10 @@ void CPointer::Copy(object oDest, unsigned long ulNumBytes)
BOOST_RAISE_EXCEPTION(PyExc_ValueError, "'num_bytes' must be greater than 0.")
}

CPointer* pDest = ExtractPointer(oDest);
pDest->Validate();

if (IsOverlapping(oDest, ulNumBytes))
BOOST_RAISE_EXCEPTION(PyExc_ValueError, "Pointers are overlapping!")

CopyHelper((void *) pDest->m_ulAddr, (void *) m_ulAddr, ulNumBytes);
CopyHelper((void *) ExtractAddress(oDest, true), (void *) m_ulAddr, ulNumBytes);
}

void MoveHelper(void* dest, void* source, unsigned long length)
Expand All @@ -231,9 +225,7 @@ void CPointer::Move(object oDest, unsigned long ulNumBytes)
BOOST_RAISE_EXCEPTION(PyExc_ValueError, "'num_bytes' must be greater than 0.")
}

CPointer* pDest = ExtractPointer(oDest);
pDest->Validate();
MoveHelper((void *) pDest->m_ulAddr, (void *) m_ulAddr, ulNumBytes);
MoveHelper((void *) ExtractAddress(oDest, true), (void *) m_ulAddr, ulNumBytes);
}

unsigned long GetVirtualFuncHelper(unsigned long addr, int index)
Expand Down
7 changes: 4 additions & 3 deletions src/core/modules/memory/memory_tools.h
100644 → 100755
Original file line number Diff line number Diff line change
Expand Up @@ -33,8 +33,6 @@
#include "memory_pointer.h"
#include "memory_utilities.h"

CPointer* ExtractPointer(object oPtr);


// ============================================================================
// >> GetObjectPointer
Expand Down Expand Up @@ -78,7 +76,10 @@ inline object MakeObject(object cls, CPointer *pPtr)

inline object MakeObject(object cls, object oPtr)
{
return MakeObject(cls, ExtractPointer(oPtr));
oPtr = oPtr.attr(GET_PTR_NAME)();
CPointer *pPtr = extract<CPointer *>(oPtr);

return MakeObject(cls, pPtr);
}


Expand Down
20 changes: 16 additions & 4 deletions src/core/modules/memory/memory_utilities.h
100644 → 100755
Original file line number Diff line number Diff line change
Expand Up @@ -61,15 +61,27 @@


// ============================================================================
// >> ExtractPointer
// >> ExtractAddress
// ============================================================================
inline CPointer* ExtractPointer(object oPtr)
inline unsigned long ExtractAddress(object oPtr, bool bValidate = false)
{
CPointer* pPtr;

extract<CPointer *> extractor(oPtr);
if (!extractor.check())
return extract<CPointer *>(oPtr.attr(GET_PTR_NAME)());
{
oPtr = oPtr.attr(GET_PTR_NAME)();
pPtr = extract<CPointer *>(oPtr);
}
else
{
pPtr = extractor();
}

if (bValidate)
pPtr->Validate();

return extractor();
return pPtr->m_ulAddr;
}


Expand Down