3 //! On Windows (currently only on MSVC), the default exception handling
4 //! mechanism is Structured Exception Handling (SEH). This is quite different
5 //! than Dwarf-based exception handling (e.g., what other unix platforms use) in
6 //! terms of compiler internals, so LLVM is required to have a good deal of
7 //! extra support for SEH.
9 //! In a nutshell, what happens here is:
11 //! 1. The `panic` function calls the standard Windows function
12 //! `_CxxThrowException` to throw a C++-like exception, triggering the
13 //! unwinding process.
14 //! 2. All landing pads generated by the compiler use the personality function
15 //! `__CxxFrameHandler3`, a function in the CRT, and the unwinding code in
16 //! Windows will use this personality function to execute all cleanup code on
18 //! 3. All compiler-generated calls to `invoke` have a landing pad set as a
19 //! `cleanuppad` LLVM instruction, which indicates the start of the cleanup
20 //! routine. The personality (in step 2, defined in the CRT) is responsible
21 //! for running the cleanup routines.
22 //! 4. Eventually the "catch" code in the `try` intrinsic (generated by the
23 //! compiler) is executed and indicates that control should come back to
24 //! Rust. This is done via a `catchswitch` plus a `catchpad` instruction in
25 //! LLVM IR terms, finally returning normal control to the program with a
26 //! `catchret` instruction.
28 //! Some specific differences from the gcc-based exception handling are:
30 //! * Rust has no custom personality function, it is instead *always*
31 //! `__CxxFrameHandler3`. Additionally, no extra filtering is performed, so we
32 //! end up catching any C++ exceptions that happen to look like the kind we're
33 //! throwing. Note that throwing an exception into Rust is undefined behavior
34 //! anyway, so this should be fine.
35 //! * We've got some data to transmit across the unwinding boundary,
36 //! specifically a `Box<dyn Any + Send>`. Like with Dwarf exceptions
37 //! these two pointers are stored as a payload in the exception itself. On
38 //! MSVC, however, there's no need for an extra heap allocation because the
39 //! call stack is preserved while filter functions are being executed. This
40 //! means that the pointers are passed directly to `_CxxThrowException` which
41 //! are then recovered in the filter function to be written to the stack frame
42 //! of the `try` intrinsic.
44 //! [win64]: http://msdn.microsoft.com/en-us/library/1eyas8tf.aspx
45 //! [llvm]: http://llvm.org/docs/ExceptionHandling.html#background-on-windows-exceptions
47 #![allow(nonstandard_style)]
48 #![allow(private_no_mangle_fns)]
50 use alloc::boxed::Box;
54 use libc::{c_int, c_uint, c_void};
56 // First up, a whole bunch of type definitions. There's a few platform-specific
57 // oddities here, and a lot that's just blatantly copied from LLVM. The purpose
58 // of all this is to implement the `panic` function below through a call to
59 // `_CxxThrowException`.
61 // This function takes two arguments. The first is a pointer to the data we're
62 // passing in, which in this case is our trait object. Pretty easy to find! The
63 // next, however, is more complicated. This is a pointer to a `_ThrowInfo`
64 // structure, and it generally is just intended to just describe the exception
67 // Currently the definition of this type [1] is a little hairy, and the main
68 // oddity (and difference from the online article) is that on 32-bit the
69 // pointers are pointers but on 64-bit the pointers are expressed as 32-bit
70 // offsets from the `__ImageBase` symbol. The `ptr_t` and `ptr!` macro in the
71 // modules below are used to express this.
73 // The maze of type definitions also closely follows what LLVM emits for this
74 // sort of operation. For example, if you compile this C++ code on MSVC and emit
77 // #include <stdint.h>
79 // struct rust_panic {
84 // rust_panic a = {0, 1};
88 // That's essentially what we're trying to emulate. Most of the constant values
89 // below were just copied from LLVM,
91 // In any case, these structures are all constructed in a similar manner, and
92 // it's just somewhat verbose for us.
94 // [1]: http://www.geoffchappell.com/studies/msvc/language/predefined/
96 #[cfg(target_arch = "x86")]
99 pub type ptr_t = *mut u8;
102 pub const NAME1: [u8; 7] = [b'.', b'P', b'A', b'_', b'K', 0, 0];
105 (0) => (core::ptr::null_mut());
106 ($e:expr) => ($e as *mut u8);
110 #[cfg(any(target_arch = "x86_64", target_arch = "arm"))]
113 pub type ptr_t = u32;
116 pub const NAME1: [u8; 7] = [b'.', b'P', b'E', b'A', b'_', b'K', 0];
119 pub static __ImageBase: u8;
125 (($e as usize) - (&imp::__ImageBase as *const _ as usize)) as u32
131 pub struct _ThrowInfo {
132 pub attributes: c_uint,
133 pub pnfnUnwind: imp::ptr_t,
134 pub pForwardCompat: imp::ptr_t,
135 pub pCatchableTypeArray: imp::ptr_t,
139 pub struct _CatchableTypeArray {
140 pub nCatchableTypes: c_int,
141 pub arrayOfCatchableTypes: [imp::ptr_t; 1],
145 pub struct _CatchableType {
146 pub properties: c_uint,
147 pub pType: imp::ptr_t,
148 pub thisDisplacement: _PMD,
149 pub sizeOrOffset: c_int,
150 pub copy_function: imp::ptr_t,
161 pub struct _TypeDescriptor {
162 pub pVFTable: *const u8,
166 #[cfg(not(bootstrap))]
170 // Note that we intentionally ignore name mangling rules here: we don't want C++
171 // to be able to catch Rust panics by simply declaring a `struct rust_panic`.
173 use imp::NAME1 as TYPE_NAME;
174 #[cfg(not(bootstrap))]
175 const TYPE_NAME: [u8; 11] = *b"rust_panic\0";
177 static mut THROW_INFO: _ThrowInfo = _ThrowInfo {
180 pForwardCompat: ptr!(0),
181 pCatchableTypeArray: ptr!(0),
184 static mut CATCHABLE_TYPE_ARRAY: _CatchableTypeArray = _CatchableTypeArray {
186 arrayOfCatchableTypes: [ptr!(0)],
189 static mut CATCHABLE_TYPE: _CatchableType = _CatchableType {
192 thisDisplacement: _PMD {
198 sizeOrOffset: mem::size_of::<*mut u64>() as c_int,
199 #[cfg(not(bootstrap))]
200 sizeOrOffset: mem::size_of::<[u64; 2]>() as c_int,
201 copy_function: ptr!(0),
205 // The leading `\x01` byte here is actually a magical signal to LLVM to
206 // *not* apply any other mangling like prefixing with a `_` character.
208 // This symbol is the vtable used by C++'s `std::type_info`. Objects of type
209 // `std::type_info`, type descriptors, have a pointer to this table. Type
210 // descriptors are referenced by the C++ EH structures defined above and
211 // that we construct below.
212 #[link_name = "\x01??_7type_info@@6B@"]
213 static TYPE_INFO_VTABLE: *const u8;
216 // We use #[lang = "eh_catch_typeinfo"] here as this is the type descriptor which
217 // we'll use in LLVM's `catchpad` instruction which ends up also being passed as
218 // an argument to the C++ personality function.
220 // Again, I'm not entirely sure what this is describing, it just seems to work.
221 #[cfg_attr(bootstrap, lang = "msvc_try_filter")]
222 #[cfg_attr(not(any(test, bootstrap)), lang = "eh_catch_typeinfo")]
223 static mut TYPE_DESCRIPTOR: _TypeDescriptor = _TypeDescriptor {
224 pVFTable: unsafe { &TYPE_INFO_VTABLE } as *const _ as *const _,
225 spare: core::ptr::null_mut(),
229 pub unsafe fn panic(data: Box<dyn Any + Send>) -> u32 {
230 use core::intrinsics::atomic_store;
232 // _CxxThrowException executes entirely on this stack frame, so there's no
233 // need to otherwise transfer `data` to the heap. We just pass a stack
234 // pointer to this function.
236 // The first argument is the payload being thrown (our two pointers), and
237 // the second argument is the type information object describing the
238 // exception (constructed above).
239 let ptrs = mem::transmute::<_, raw::TraitObject>(data);
240 let mut ptrs = [ptrs.data as u64, ptrs.vtable as u64];
241 let mut ptrs_ptr = ptrs.as_mut_ptr();
242 let throw_ptr = if cfg!(bootstrap) {
243 &mut ptrs_ptr as *mut _ as *mut _
248 // This... may seems surprising, and justifiably so. On 32-bit MSVC the
249 // pointers between these structure are just that, pointers. On 64-bit MSVC,
250 // however, the pointers between structures are rather expressed as 32-bit
251 // offsets from `__ImageBase`.
253 // Consequently, on 32-bit MSVC we can declare all these pointers in the
254 // `static`s above. On 64-bit MSVC, we would have to express subtraction of
255 // pointers in statics, which Rust does not currently allow, so we can't
258 // The next best thing, then is to fill in these structures at runtime
259 // (panicking is already the "slow path" anyway). So here we reinterpret all
260 // of these pointer fields as 32-bit integers and then store the
261 // relevant value into it (atomically, as concurrent panics may be
262 // happening). Technically the runtime will probably do a nonatomic read of
263 // these fields, but in theory they never read the *wrong* value so it
264 // shouldn't be too bad...
266 // In any case, we basically need to do something like this until we can
267 // express more operations in statics (and we may never be able to).
268 atomic_store(&mut THROW_INFO.pCatchableTypeArray as *mut _ as *mut u32,
269 ptr!(&CATCHABLE_TYPE_ARRAY as *const _) as u32);
270 atomic_store(&mut CATCHABLE_TYPE_ARRAY.arrayOfCatchableTypes[0] as *mut _ as *mut u32,
271 ptr!(&CATCHABLE_TYPE as *const _) as u32);
272 atomic_store(&mut CATCHABLE_TYPE.pType as *mut _ as *mut u32,
273 ptr!(&TYPE_DESCRIPTOR as *const _) as u32);
277 pub fn _CxxThrowException(pExceptionObject: *mut c_void, pThrowInfo: *mut u8) -> !;
280 _CxxThrowException(throw_ptr,
281 &mut THROW_INFO as *mut _ as *mut _);
284 pub fn payload() -> [u64; 2] {
288 pub unsafe fn cleanup(payload: [u64; 2]) -> Box<dyn Any + Send> {
289 mem::transmute(raw::TraitObject {
290 data: payload[0] as *mut _,
291 vtable: payload[1] as *mut _,
295 // This is required by the compiler to exist (e.g., it's a lang item), but
296 // it's never actually called by the compiler because __C_specific_handler
297 // or _except_handler3 is the personality function that is always used.
298 // Hence this is just an aborting stub.
299 #[lang = "eh_personality"]
301 fn rust_eh_personality() {
302 unsafe { core::intrinsics::abort() }