sgx_tstd/src/panicking.rs - incubator-teaclave-sgx-sdk - Git at Google

 // Copyright (C) 2017-2019 Baidu, Inc. All Rights Reserved.
 //
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions
 // are met:
 //
 //  * Redistributions of source code must retain the above copyright
 //    notice, this list of conditions and the following disclaimer.
 //  * Redistributions in binary form must reproduce the above copyright
 //    notice, this list of conditions and the following disclaimer in
 //    the documentation and/or other materials provided with the
 //    distribution.
 //  * Neither the name of Baidu, Inc., nor the names of its
 //    contributors may be used to endorse or promote products derived
 //    from this software without specific prior written permission.
 //
 // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 // OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 // SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 // LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 // DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

 //! Implementation of various bits and pieces of the `panic!` macro and
 //! associated runtime pieces.

 use sgx_trts::trts::rsgx_abort;
 use core::panic::BoxMeUp;
 use core::mem;
 use core::fmt;
 use core::panic::{PanicInfo, Location};
 use core::any::Any;
 use core::ptr;
 use core::raw;
 use core::sync::atomic::{AtomicPtr, Ordering};
 use alloc_crate::boxed::Box;
 use alloc_crate::string::String;
 use crate::sys::stdio::panic_output;
 use crate::sys_common::util;
 use crate::thread;

 // Binary interface to the panic runtime that the standard library depends on.
 //
 // The standard library is tagged with `#![needs_panic_runtime]` (introduced in
 // RFC 1513) to indicate that it requires some other crate tagged with
 // `#![panic_runtime]` to exist somewhere. Each panic runtime is intended to
 // implement these symbols (with the same signatures) so we can get matched up
 // to them.
 //
 // One day this may look a little less ad-hoc with the compiler helping out to
 // hook up these functions, but it is not this day!
 #[allow(improper_ctypes)]
 extern {
     fn __rust_maybe_catch_panic(f: fn(*mut u8),
                                 data: *mut u8,
                                 data_ptr: *mut usize,
                                 vtable_ptr: *mut usize) -> u32;
     #[unwind(allowed)]
     fn __rust_start_panic(payload: usize) -> u32;
 }

 static PANIC_HANDLER: AtomicPtr<()> = AtomicPtr::new(default_panic_handler as * mut ());

 #[cfg(not(feature = "stdio"))]
 #[allow(unused_variables)]
 fn default_panic_handler(info: &PanicInfo<'_>) {

 }

 #[cfg(feature = "stdio")]
 fn default_panic_handler(info: &PanicInfo<'_>) {

     use crate::sys::stdio::Stderr;

     #[cfg(feature = "backtrace")]
     use crate::sys_common::backtrace;

     #[cfg(feature = "backtrace")]
     let log_backtrace = {
         let panics = update_panic_count(0);

         if panics >= 2 {
             Some(backtrace::PrintFormat::Full)
         } else {
             backtrace::log_enabled()
         }
     };

     let location = info.location().unwrap();  // The current implementation always returns Some

     let msg = match info.payload().downcast_ref::<&'static str>() {
         Some(s) => *s,
         None => match info.payload().downcast_ref::<String>() {
             Some(s) => &s[..],
             None => "Box<Any>",
         }
     };

     let write = |err: &mut dyn (crate::io::Write)| {
         let _ = writeln!(err, "thread panicked at '{}', {}",
                         msg, location);

         #[cfg(feature = "backtrace")]
         {
             use core::sync::atomic::{AtomicBool, Ordering};

             static FIRST_PANIC: AtomicBool = AtomicBool::new(true);

             if let Some(format) = log_backtrace {
                 let _ = backtrace::print(err, format);
             } else if FIRST_PANIC.compare_and_swap(true, false, Ordering::SeqCst) {
                 //let _ = writeln!(err, "note: Compile with `RUST_BACKTRACE=1` for a backtrace.");
                 let _ = writeln!(err, "note: Call backtrace::enable_backtrace with 'PrintFormat::Short' for a backtrace.");
             }
         }
     };

     if let Some(mut out) = panic_output() {
         write(&mut out);
     }
 }

 /// Registers a custom panic handler, replacing any that was previously registered.
 pub fn set_panic_handler(handler: fn(&PanicInfo<'_>)) {
     if thread::panicking() {
         panic!("cannot modify the panic hook from a panicking thread");
     }
     PANIC_HANDLER.store(handler as * mut (), Ordering::SeqCst);
 }

 fn panic_handler(info: &PanicInfo<'_>) {
     let value = PANIC_HANDLER.load(Ordering::SeqCst);
     let handler: fn(&PanicInfo<'_>) = unsafe{ mem::transmute(value) };
     handler(info);
 }

 pub fn update_panic_count(amt: isize) -> usize {

     use core::cell::Cell;
     thread_local! { static PANIC_COUNT: Cell<usize> = Cell::new(0) }

     PANIC_COUNT.with(|c| {
         let next = (c.get() as isize + amt) as usize;
         c.set(next);
         return next
     })
 }

 /// Invoke a closure, capturing the cause of an unwinding panic if one occurs.
 pub unsafe fn r#try<R, F: FnOnce() -> R>(f: F) -> Result<R, Box<dyn Any + Send>> {
     #[allow(unions_with_drop_fields)]
     union Data<F, R> {
         f: F,
         r: R,
     }

     // We do some sketchy operations with ownership here for the sake of
     // performance. We can only  pass pointers down to
     // `__rust_maybe_catch_panic` (can't pass objects by value), so we do all
     // the ownership tracking here manually using a union.
     //
     // We go through a transition where:
     //
     // * First, we set the data to be the closure that we're going to call.
     // * When we make the function call, the `do_call` function below, we take
     //   ownership of the function pointer. At this point the `Data` union is
     //   entirely uninitialized.
     // * If the closure successfully returns, we write the return value into the
     //   data's return slot. Note that `ptr::write` is used as it's overwriting
     //   uninitialized data.
     // * Finally, when we come back out of the `__rust_maybe_catch_panic` we're
     //   in one of two states:
     //
     //      1. The closure didn't panic, in which case the return value was
     //         filled in. We move it out of `data` and return it.
     //      2. The closure panicked, in which case the return value wasn't
     //         filled in. In this case the entire `data` union is invalid, so
     //         there is no need to drop anything.
     //
     // Once we stack all that together we should have the "most efficient'
     // method of calling a catch panic whilst juggling ownership.
     let mut any_data = 0;
     let mut any_vtable = 0;
     let mut data = Data {
         f,
     };

     let r = __rust_maybe_catch_panic(do_call::<F, R>,
                                      &mut data as *mut _ as *mut u8,
                                      &mut any_data,
                                      &mut any_vtable);

     return if r == 0 {
         debug_assert!(update_panic_count(0) == 0);
         Ok(data.r)
     } else {
         update_panic_count(-1);
         debug_assert!(update_panic_count(0) == 0);
         Err(mem::transmute(raw::TraitObject {
             data: any_data as *mut _,
             vtable: any_vtable as *mut _,
         }))
     };

     fn do_call<F: FnOnce() -> R, R>(data: *mut u8) {
         unsafe {
             let data = data as *mut Data<F, R>;
             let f = ptr::read(&mut (*data).f);
             ptr::write(&mut (*data).r, f());
         }
     }
 }

 /// Determines whether the current thread is unwinding because of panic.
 pub fn panicking() -> bool {
     update_panic_count(0) != 0
 }

 /// Entry point of panic from the libcore crate.
 #[panic_handler]
 #[unwind(allowed)]
 pub fn rust_begin_panic(info: &PanicInfo<'_>) -> ! {
     continue_panic_fmt(&info)
 }

 /// The entry point for panicking with a formatted message.
 ///
 /// This is designed to reduce the amount of code required at the call
 /// site as much as possible (so that `panic!()` has as low an impact
 /// on (e.g.) the inlining of other functions as possible), by moving
 /// the actual formatting into this shared place.
 #[inline(never)] #[cold]
 pub fn begin_panic_fmt(msg: &fmt::Arguments<'_>,
                        file_line_col: &(&'static str, u32, u32)) -> ! {
     let (file, line, col) = *file_line_col;
     let info = PanicInfo::internal_constructor(
         Some(msg),
         Location::internal_constructor(file, line, col),
     );
     continue_panic_fmt(&info)
 }

 fn continue_panic_fmt(info: &PanicInfo<'_>) -> ! {
     struct PanicPayload<'a> {
         inner: &'a fmt::Arguments<'a>,
         string: Option<String>,
     }

     impl<'a> PanicPayload<'a> {
         fn new(inner: &'a fmt::Arguments<'a>) -> PanicPayload<'a> {
             PanicPayload { inner, string: None }
         }

         fn fill(&mut self) -> &mut String {
             use fmt::Write;

             let inner = self.inner;
             self.string.get_or_insert_with(|| {
                 let mut s = String::new();
                 drop(s.write_fmt(*inner));
                 s
             })
         }
     }

     unsafe impl<'a> BoxMeUp for PanicPayload<'a> {
         fn box_me_up(&mut self) -> *mut (dyn Any + Send) {
             let contents = mem::take(self.fill());
             Box::into_raw(Box::new(contents))
         }

         fn get(&mut self) -> &(dyn Any + Send) {
             self.fill()
         }
     }

     // We do two allocations here, unfortunately. But (a) they're
     // required with the current scheme, and (b) we don't handle
     // panic + OOM properly anyway (see comment in begin_panic
     // below).

     let loc = info.location().unwrap(); // The current implementation always returns Some
     let msg = info.message().unwrap(); // The current implementation always returns Some
     let file_line_col = (loc.file(), loc.line(), loc.column());
     rust_panic_with_hook(
         &mut PanicPayload::new(msg),
         info.message(),
         &file_line_col);
 }

 /// This is the entry point of panicking for panic!() and assert!().
 #[cfg_attr(not(test), lang = "begin_panic")]
 #[inline(never)] #[cold] // avoid code bloat at the call sites as much as possible
 pub fn begin_panic<M: Any + Send>(msg: M, file_line_col: &(&'static str, u32, u32)) -> ! {
     // Note that this should be the only allocation performed in this code path.
     // Currently this means that panic!() on OOM will invoke this code path,
     // but then again we're not really ready for panic on OOM anyway. If
     // we do start doing this, then we should propagate this allocation to
     // be performed in the parent of this thread instead of the thread that's
     // panicking.

     rust_panic_with_hook(&mut PanicPayload::new(msg), None, file_line_col);

     struct PanicPayload<A> {
         inner: Option<A>,
     }

     impl<A: Send + 'static> PanicPayload<A> {
         fn new(inner: A) -> PanicPayload<A> {
             PanicPayload { inner: Some(inner) }
         }
     }

     unsafe impl<A: Send + 'static> BoxMeUp for PanicPayload<A> {
         fn box_me_up(&mut self) -> *mut (dyn Any + Send) {
             let data = match self.inner.take() {
                 Some(a) => Box::new(a) as Box<dyn Any + Send>,
                 None => Box::new(()),
             };
             Box::into_raw(data)
         }

         fn get(&mut self) -> &(dyn Any + Send) {
             match self.inner {
                 Some(ref a) => a,
                 None => &(),
             }
         }
     }
 }

 /// Central point for dispatching panics.
 ///
 /// Executes the primary logic for a panic, including checking for recursive
 /// panics, panic hooks, and finally dispatching to the panic runtime to either
 /// abort or unwind.
 fn rust_panic_with_hook(payload: &mut dyn BoxMeUp,
                         message: Option<&fmt::Arguments<'_>>,
                         file_line_col: &(&str, u32, u32)) -> ! {
     let (file, line, col) = *file_line_col;

     let panics = update_panic_count(1);

     // If this is the third nested call (e.g. panics == 2, this is 0-indexed),
     // the panic hook probably triggered the last panic, otherwise the
     // double-panic check would have aborted the process. In this case abort the
     // process real quickly as we don't want to try calling it again as it'll
     // probably just panic again.
     if panics > 2 {
         util::dumb_print(format_args!("thread panicked while processing \
                                        panic. aborting.\n"));
         rsgx_abort()
     }

     {
         let mut info = PanicInfo::internal_constructor(
             message,
             Location::internal_constructor(file, line, col),
         );
         info.set_payload(payload.get());
         panic_handler(&info);
     }

     if panics > 1 {
         // If a thread panics while it's already unwinding then we
         // have limited options. Currently our preference is to
         // just abort. In the future we may consider resuming
         // unwinding or otherwise exiting the thread cleanly.
         util::dumb_print(format_args!("thread panicked while panicking. \
                                        aborting.\n"));
         rsgx_abort()
     }

     rust_panic(payload)
 }

 /// Shim around rust_panic. Called by resume_unwind.
 pub fn update_count_then_panic(msg: Box<dyn Any + Send>) -> ! {
     update_panic_count(1);

     struct RewrapBox(Box<dyn Any + Send>);

     unsafe impl BoxMeUp for RewrapBox {
         fn box_me_up(&mut self) -> *mut (dyn Any + Send) {
             Box::into_raw(mem::replace(&mut self.0, Box::new(())))
         }

         fn get(&mut self) -> &(dyn Any + Send) {
             &*self.0
         }
     }

     rust_panic(&mut RewrapBox(msg))
 }

 /// An unmangled function (through `rustc_std_internal_symbol`) on which to slap
 /// yer breakpoints.
 #[inline(never)]
 #[cfg_attr(not(test), rustc_std_internal_symbol)]
 fn rust_panic(mut msg: &mut dyn BoxMeUp) -> ! {
     let code = unsafe {
         let obj = &mut msg as *mut &mut dyn BoxMeUp;
         __rust_start_panic(obj as usize)
     };
     rtabort!("failed to initiate panic, error {}", code)
 }
	// Copyright (C) 2017-2019 Baidu, Inc. All Rights Reserved.
	//
	// Redistribution and use in source and binary forms, with or without
	// modification, are permitted provided that the following conditions
	// are met:
	//
	// * Redistributions of source code must retain the above copyright
	// notice, this list of conditions and the following disclaimer.
	// * Redistributions in binary form must reproduce the above copyright
	// notice, this list of conditions and the following disclaimer in
	// the documentation and/or other materials provided with the
	// distribution.
	// * Neither the name of Baidu, Inc., nor the names of its
	// contributors may be used to endorse or promote products derived
	// from this software without specific prior written permission.
	//
	// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
	// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
	// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
	// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
	// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
	// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
	// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

	//! Implementation of various bits and pieces of the `panic!` macro and
	//! associated runtime pieces.

	use sgx_trts::trts::rsgx_abort;
	use core::panic::BoxMeUp;
	use core::mem;
	use core::fmt;
	use core::panic::{PanicInfo, Location};
	use core::any::Any;
	use core::ptr;
	use core::raw;
	use core::sync::atomic::{AtomicPtr, Ordering};
	use alloc_crate::boxed::Box;
	use alloc_crate::string::String;
	use crate::sys::stdio::panic_output;
	use crate::sys_common::util;
	use crate::thread;

	// Binary interface to the panic runtime that the standard library depends on.
	//
	// The standard library is tagged with `#![needs_panic_runtime]` (introduced in
	// RFC 1513) to indicate that it requires some other crate tagged with
	// `#![panic_runtime]` to exist somewhere. Each panic runtime is intended to
	// implement these symbols (with the same signatures) so we can get matched up
	// to them.
	//
	// One day this may look a little less ad-hoc with the compiler helping out to
	// hook up these functions, but it is not this day!
	#[allow(improper_ctypes)]
	extern {
	fn __rust_maybe_catch_panic(f: fn(*mut u8),
	data: *mut u8,
	data_ptr: *mut usize,
	vtable_ptr: *mut usize) -> u32;
	#[unwind(allowed)]
	fn __rust_start_panic(payload: usize) -> u32;
	}

	static PANIC_HANDLER: AtomicPtr<()> = AtomicPtr::new(default_panic_handler as * mut ());

	#[cfg(not(feature = "stdio"))]
	#[allow(unused_variables)]
	fn default_panic_handler(info: &PanicInfo<'_>) {

	}

	#[cfg(feature = "stdio")]
	fn default_panic_handler(info: &PanicInfo<'_>) {

	use crate::sys::stdio::Stderr;

	#[cfg(feature = "backtrace")]
	use crate::sys_common::backtrace;

	#[cfg(feature = "backtrace")]
	let log_backtrace = {
	let panics = update_panic_count(0);

	if panics >= 2 {
	Some(backtrace::PrintFormat::Full)
	} else {
	backtrace::log_enabled()
	}
	};

	let location = info.location().unwrap(); // The current implementation always returns Some

	let msg = match info.payload().downcast_ref::<&'static str>() {
	Some(s) => *s,
	None => match info.payload().downcast_ref::<String>() {
	Some(s) => &s[..],
	None => "Box<Any>",
	}
	};

	let write = \|err: &mut dyn (crate::io::Write)\| {
	let _ = writeln!(err, "thread panicked at '{}', {}",
	msg, location);

	#[cfg(feature = "backtrace")]
	{
	use core::sync::atomic::{AtomicBool, Ordering};

	static FIRST_PANIC: AtomicBool = AtomicBool::new(true);

	if let Some(format) = log_backtrace {
	let _ = backtrace::print(err, format);
	} else if FIRST_PANIC.compare_and_swap(true, false, Ordering::SeqCst) {
	//let _ = writeln!(err, "note: Compile with `RUST_BACKTRACE=1` for a backtrace.");
	let _ = writeln!(err, "note: Call backtrace::enable_backtrace with 'PrintFormat::Short' for a backtrace.");
	}
	}
	};

	if let Some(mut out) = panic_output() {
	write(&mut out);
	}
	}

	/// Registers a custom panic handler, replacing any that was previously registered.
	pub fn set_panic_handler(handler: fn(&PanicInfo<'_>)) {
	if thread::panicking() {
	panic!("cannot modify the panic hook from a panicking thread");
	}
	PANIC_HANDLER.store(handler as * mut (), Ordering::SeqCst);
	}

	fn panic_handler(info: &PanicInfo<'_>) {
	let value = PANIC_HANDLER.load(Ordering::SeqCst);
	let handler: fn(&PanicInfo<'_>) = unsafe{ mem::transmute(value) };
	handler(info);
	}

	pub fn update_panic_count(amt: isize) -> usize {

	use core::cell::Cell;
	thread_local! { static PANIC_COUNT: Cell<usize> = Cell::new(0) }

	PANIC_COUNT.with(\|c\| {
	let next = (c.get() as isize + amt) as usize;
	c.set(next);
	return next
	})
	}

	/// Invoke a closure, capturing the cause of an unwinding panic if one occurs.
	pub unsafe fn r#try<R, F: FnOnce() -> R>(f: F) -> Result<R, Box<dyn Any + Send>> {
	#[allow(unions_with_drop_fields)]
	union Data<F, R> {
	f: F,
	r: R,
	}

	// We do some sketchy operations with ownership here for the sake of
	// performance. We can only pass pointers down to
	// `__rust_maybe_catch_panic` (can't pass objects by value), so we do all
	// the ownership tracking here manually using a union.
	//
	// We go through a transition where:
	//
	// * First, we set the data to be the closure that we're going to call.
	// * When we make the function call, the `do_call` function below, we take
	// ownership of the function pointer. At this point the `Data` union is
	// entirely uninitialized.
	// * If the closure successfully returns, we write the return value into the
	// data's return slot. Note that `ptr::write` is used as it's overwriting
	// uninitialized data.
	// * Finally, when we come back out of the `__rust_maybe_catch_panic` we're
	// in one of two states:
	//
	// 1. The closure didn't panic, in which case the return value was
	// filled in. We move it out of `data` and return it.
	// 2. The closure panicked, in which case the return value wasn't
	// filled in. In this case the entire `data` union is invalid, so
	// there is no need to drop anything.
	//
	// Once we stack all that together we should have the "most efficient'
	// method of calling a catch panic whilst juggling ownership.
	let mut any_data = 0;
	let mut any_vtable = 0;
	let mut data = Data {
	f,
	};

	let r = __rust_maybe_catch_panic(do_call::<F, R>,
	&mut data as mut _ as mut u8,
	&mut any_data,
	&mut any_vtable);

	return if r == 0 {
	debug_assert!(update_panic_count(0) == 0);
	Ok(data.r)
	} else {
	update_panic_count(-1);
	debug_assert!(update_panic_count(0) == 0);
	Err(mem::transmute(raw::TraitObject {
	data: any_data as *mut _,
	vtable: any_vtable as *mut _,
	}))
	};

	fn do_call<F: FnOnce() -> R, R>(data: *mut u8) {
	unsafe {
	let data = data as *mut Data<F, R>;
	let f = ptr::read(&mut (*data).f);
	ptr::write(&mut (*data).r, f());
	}
	}
	}

	/// Determines whether the current thread is unwinding because of panic.
	pub fn panicking() -> bool {
	update_panic_count(0) != 0
	}

	/// Entry point of panic from the libcore crate.
	#[panic_handler]
	#[unwind(allowed)]
	pub fn rust_begin_panic(info: &PanicInfo<'_>) -> ! {
	continue_panic_fmt(&info)
	}

	/// The entry point for panicking with a formatted message.
	///
	/// This is designed to reduce the amount of code required at the call
	/// site as much as possible (so that `panic!()` has as low an impact
	/// on (e.g.) the inlining of other functions as possible), by moving
	/// the actual formatting into this shared place.
	#[inline(never)] #[cold]
	pub fn begin_panic_fmt(msg: &fmt::Arguments<'_>,
	file_line_col: &(&'static str, u32, u32)) -> ! {
	let (file, line, col) = *file_line_col;
	let info = PanicInfo::internal_constructor(
	Some(msg),
	Location::internal_constructor(file, line, col),
	);
	continue_panic_fmt(&info)
	}

	fn continue_panic_fmt(info: &PanicInfo<'_>) -> ! {
	struct PanicPayload<'a> {
	inner: &'a fmt::Arguments<'a>,
	string: Option<String>,
	}

	impl<'a> PanicPayload<'a> {
	fn new(inner: &'a fmt::Arguments<'a>) -> PanicPayload<'a> {
	PanicPayload { inner, string: None }
	}

	fn fill(&mut self) -> &mut String {
	use fmt::Write;

	let inner = self.inner;
	self.string.get_or_insert_with(\|\| {
	let mut s = String::new();
	drop(s.write_fmt(*inner));
	s
	})
	}
	}

	unsafe impl<'a> BoxMeUp for PanicPayload<'a> {
	fn box_me_up(&mut self) -> *mut (dyn Any + Send) {
	let contents = mem::take(self.fill());
	Box::into_raw(Box::new(contents))
	}

	fn get(&mut self) -> &(dyn Any + Send) {
	self.fill()
	}
	}

	// We do two allocations here, unfortunately. But (a) they're
	// required with the current scheme, and (b) we don't handle
	// panic + OOM properly anyway (see comment in begin_panic
	// below).

	let loc = info.location().unwrap(); // The current implementation always returns Some
	let msg = info.message().unwrap(); // The current implementation always returns Some
	let file_line_col = (loc.file(), loc.line(), loc.column());
	rust_panic_with_hook(
	&mut PanicPayload::new(msg),
	info.message(),
	&file_line_col);
	}

	/// This is the entry point of panicking for panic!() and assert!().
	#[cfg_attr(not(test), lang = "begin_panic")]
	#[inline(never)] #[cold] // avoid code bloat at the call sites as much as possible
	pub fn begin_panic<M: Any + Send>(msg: M, file_line_col: &(&'static str, u32, u32)) -> ! {
	// Note that this should be the only allocation performed in this code path.
	// Currently this means that panic!() on OOM will invoke this code path,
	// but then again we're not really ready for panic on OOM anyway. If
	// we do start doing this, then we should propagate this allocation to
	// be performed in the parent of this thread instead of the thread that's
	// panicking.

	rust_panic_with_hook(&mut PanicPayload::new(msg), None, file_line_col);

	struct PanicPayload<A> {
	inner: Option<A>,
	}

	impl<A: Send + 'static> PanicPayload<A> {
	fn new(inner: A) -> PanicPayload<A> {
	PanicPayload { inner: Some(inner) }
	}
	}

	unsafe impl<A: Send + 'static> BoxMeUp for PanicPayload<A> {
	fn box_me_up(&mut self) -> *mut (dyn Any + Send) {
	let data = match self.inner.take() {
	Some(a) => Box::new(a) as Box<dyn Any + Send>,
	None => Box::new(()),
	};
	Box::into_raw(data)
	}

	fn get(&mut self) -> &(dyn Any + Send) {
	match self.inner {
	Some(ref a) => a,
	None => &(),
	}
	}
	}
	}

	/// Central point for dispatching panics.
	///
	/// Executes the primary logic for a panic, including checking for recursive
	/// panics, panic hooks, and finally dispatching to the panic runtime to either
	/// abort or unwind.
	fn rust_panic_with_hook(payload: &mut dyn BoxMeUp,
	message: Option<&fmt::Arguments<'_>>,
	file_line_col: &(&str, u32, u32)) -> ! {
	let (file, line, col) = *file_line_col;

	let panics = update_panic_count(1);

	// If this is the third nested call (e.g. panics == 2, this is 0-indexed),
	// the panic hook probably triggered the last panic, otherwise the
	// double-panic check would have aborted the process. In this case abort the
	// process real quickly as we don't want to try calling it again as it'll
	// probably just panic again.
	if panics > 2 {
	util::dumb_print(format_args!("thread panicked while processing \
	panic. aborting.\n"));
	rsgx_abort()
	}

	{
	let mut info = PanicInfo::internal_constructor(
	message,
	Location::internal_constructor(file, line, col),
	);
	info.set_payload(payload.get());
	panic_handler(&info);
	}

	if panics > 1 {
	// If a thread panics while it's already unwinding then we
	// have limited options. Currently our preference is to
	// just abort. In the future we may consider resuming
	// unwinding or otherwise exiting the thread cleanly.
	util::dumb_print(format_args!("thread panicked while panicking. \
	aborting.\n"));
	rsgx_abort()
	}

	rust_panic(payload)
	}

	/// Shim around rust_panic. Called by resume_unwind.
	pub fn update_count_then_panic(msg: Box<dyn Any + Send>) -> ! {
	update_panic_count(1);

	struct RewrapBox(Box<dyn Any + Send>);

	unsafe impl BoxMeUp for RewrapBox {
	fn box_me_up(&mut self) -> *mut (dyn Any + Send) {
	Box::into_raw(mem::replace(&mut self.0, Box::new(())))
	}

	fn get(&mut self) -> &(dyn Any + Send) {
	&*self.0
	}
	}

	rust_panic(&mut RewrapBox(msg))
	}

	/// An unmangled function (through `rustc_std_internal_symbol`) on which to slap
	/// yer breakpoints.
	#[inline(never)]
	#[cfg_attr(not(test), rustc_std_internal_symbol)]
	fn rust_panic(mut msg: &mut dyn BoxMeUp) -> ! {
	let code = unsafe {
	let obj = &mut msg as *mut &mut dyn BoxMeUp;
	__rust_start_panic(obj as usize)
	};
	rtabort!("failed to initiate panic, error {}", code)
	}