JavaCallsWithoutJNI/Offsets.hpp at main · klirii/JavaCallsWithoutJNI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
#include "AOBScanner.hpp"
#include <jni.h>

extern HMODULE jvm;

extern bool* AssumeMP;
extern bool* UseMembar;
extern bool* CheckJNICalls;

class JavaValue;
enum JNICallType;
class JNI_ArgumentPusher;
class JavaThread;

class AllocFailStrategy {
public:
	enum AllocFailEnum { EXIT_OOM, RETURN_NULL };
};

typedef AllocFailStrategy::AllocFailEnum AllocFailType;

// NOTE: replicated in SA in vm/agent/sun/jvm/hotspot/runtime/BasicType.java
enum BasicType {
	T_BOOLEAN = 4,
	T_CHAR = 5,
	T_FLOAT = 6,
	T_DOUBLE = 7,
	T_BYTE = 8,
	T_SHORT = 9,
	T_INT = 10,
	T_LONG = 11,
	T_OBJECT = 12,
	T_ARRAY = 13,
	T_VOID = 14,
	T_ADDRESS = 15,
	T_NARROWOOP = 16,
	T_METADATA = 17,
	T_NARROWKLASS = 18,
	T_CONFLICT = 19, // for stack value type with conflicting contents
	T_ILLEGAL = 99
};

typedef void* (__fastcall* jni_invoke_static_t)(
	JNIEnv* env,
	JavaValue* result,
	jmethodID method_id,
	JNI_ArgumentPusher* args,
	JavaThread* thread
);
jni_invoke_static_t jni_invoke_static = nullptr;

typedef char* (__fastcall* resource_allocate_bytes_t)(size_t size, AllocFailType alloc_failmode);
resource_allocate_bytes_t resource_allocate_bytes = nullptr;

typedef BasicType(__fastcall* runtime_type_from_t)(JavaValue* result);
runtime_type_from_t runtime_type_from = nullptr;

#define JNI_ARGUMENT_PUSHER_VA_ARG 0x60B668
#define JNI_ARGUMENT_PUSHER_VA_ARG_ITERATE_VFTABLE_OFFSET 0xA0

#define JNI_INVOKE_STATIC 0x149920
#define RESOURCE_ALLOCATE_BYTES 0xEDCA0
#define RUNTIME_TYPE_FROM 0x214E20

#define OS_PROCESSOR_COUNT 0x815828
#define SAFEPOINT_SYNCHRONIZE_STATE 0x815A98
#define JVMTI_EXPORT_CAN_POST_INTERPRETER_EVENTS 0x814371
#define STUB_ROUTINES_CALL_STUB_ENTRY 0x815BE0

#define ASSUME_MP 0x814AA3
#define USE_MEMBAR 0x814AA4
#define CHECK_JNI_CALLS 0x814B96

#define ORDER_ACCESS_FENCE 0x21E7D0
#define INTERFACE_SUPPORT_SERIALIZE_MEMORY 0x8670
#define ARENA_SET_SIZE_IN_BYTES 0xCEB20
#define CHUNK_NEXT_CHOP 0xCE820
#define SAFEPOINT_SYNCHRONIZE_BLOCK 0x22AAE0
#define METHOD_HANDLE_REMOVE 0x4330
#define JAVA_CALLS_CALL 0x215F60
#define JNI_HANDLES_MAKE_LOCAL 0x217940
#define METHOD_IS_EMPTY_METHOD 0x12AAC0
#define COMPILE_BROKER_COMPILE_METHOD 0xA64B0
#define EXCEPTIONS_THROW_STACK_OVERFLOW_EXCEPTION 0x279290
#define JAVA_CALL_WRAPPER_CONSTRUCTOR 0x2152C0
#define JNI_HANDLE_BLOCK_RELEASE_BLOCK 0x217080

#define FINGERPRINTER 0x5FBB88
#define FINGERPRINTER_FINGERPRINT 0xB7A20

#define WEAK_PRESERVE_EXCEPTION_MARK_PRESERVE 0x27DDE0
#define WEAK_PRESERVE_EXCEPTION_MARK_RESTORE  0x27DE30

#define COMPILATION_POLICY_MUST_BE_COMPILED 0x2045B0
#define COMPILATION_POLICY_POLICY 0x8147A8

#define JAVA_THREAD_CHECK_SAFEPOINT_AND_SUSPEND_FOR_NATIVE_TRANS 0x243C50
#define JAVA_THREAD_REGUARD_STACK 0x243770

#define OS_STACK_SHADOW_PAGES_AVAILABLE 0x220F30
#define OS_BANG_STACK_SHADOW_PAGES 0x214CF0

#define JAVA_CALL_ARGUMENTS_VERIFY 0x215650
#define JAVA_CALL_ARGUMENTS_PARAMETERS 0x214ED0

// jni_invoke_static

#define GROWABLE_ARRAY_GROW 0x455DB0

#define FIND_AOB(pattern, matches_data_type, reg_attrs, from, to)	\
	std::vector<matches_data_type> matches;							\
	AOBScanner::Scan(												\
		current_process,											\
		pattern,													\
		matches,													\
		reg_attrs,													\
		from,														\
		to															\
	)																\

#define FIND_AOB_IN_MODULE(pattern, matches_data_type, reg_attrs, module_info)	\
	FIND_AOB(																	\
		pattern,																\
		matches_data_type,														\
		reg_attrs,																\
		(BYTE*)module_info.lpBaseOfDll,											\
		(BYTE*)module_info.lpBaseOfDll + module_info.SizeOfImage				\
	)																			\

#define FIND_STRUCT_OFFSET(pattern, result_var, offset_data_type, offset_from_pattern) {							\
	FIND_AOB_IN_MODULE(																								\
		pattern,																									\
		BYTE*,																										\
		AOBScanner::RegionAttributes(PAGE_EXECUTE_READ, MEM_COMMIT, PAGE_EXECUTE_READ, MEM_MAPPED),					\
		jvm_info																									\
	);																												\
	if (matches.size() == 1) result_var = *reinterpret_cast<offset_data_type*>(matches[0] + offset_from_pattern);	\
}																													\

#define FIND_VA_FROM_RVA(pattern, result_var, rva_offset_from_pattern, inst_offset_from_pattern, inst_length) {	\
	FIND_AOB_IN_MODULE(																							\
		pattern,																								\
		BYTE*,																									\
		AOBScanner::RegionAttributes(PAGE_EXECUTE_READ, MEM_COMMIT, PAGE_EXECUTE_READ, MEM_MAPPED),				\
		jvm_info																								\
	);																											\
																												\
	if (matches.size() == 1) {																					\
		signed int rva = *reinterpret_cast<signed int*>(matches[0] + rva_offset_from_pattern);					\
		result_var = (matches[0] + inst_offset_from_pattern + inst_length + rva);								\
	}																											\
}																												\

void FindAllOffsets() {
	jni_invoke_static       = (jni_invoke_static_t)((BYTE*)jvm + JNI_INVOKE_STATIC);
	resource_allocate_bytes = (resource_allocate_bytes_t)((BYTE*)jvm + RESOURCE_ALLOCATE_BYTES);
	runtime_type_from       = (runtime_type_from_t)((BYTE*)jvm + RUNTIME_TYPE_FROM);

	AssumeMP      = (bool*)((BYTE*)jvm + ASSUME_MP);
	UseMembar     = (bool*)((BYTE*)jvm + USE_MEMBAR);
	CheckJNICalls = (bool*)((BYTE*)jvm + CHECK_JNI_CALLS);
}