<\/p>\n
Overview<\/h3>\n
Update 1 for Visual Studio 2015 was announced on November 30, 2015. This update includes experimental compiler and debugger support for Intel MPX. Intel MPX can check all pointer reads and writes to ensure they remain within their declared memory bounds. This technology can detect buffer overflows and stop program execution at runtime, averting possible system compromises. It enables C\/C++ code to make use of the new MPX instruction set and registers introduced in the 6th<\/sup> Generation Intel® Core™ Processors (“MPX-enabled platform”).<\/span><\/p>\n The Microsoft Visual C++ Compiler* and linker can now generate checks automatically, a capability enabled by specifying a command line option.<\/span><\/p>\n This blog explains how you can use automatic MPX code generation and debug MPX-enabled binaries. For more details on Intel MPX, please see the Intel MPX Technology web page<\/span><\/a><\/span>.<\/span><\/p>\n <\/p>\n Visual Studio 2015 Update 1 introduces a new compiler option: \/d2MPX<\/span>.<\/span><\/p>\n \/d2MPX<\/span> currently supports:<\/span><\/p>\n To enable automatic MPX code generation for your project:<\/span><\/p>\n In Visual Studio, add the \/d2MPX<\/span> option in the Additional Options box (Project|Properties|Configuration Properties|C\/C++|Command Line|Additional Options<\/span>), Figure 1.<\/span><\/p>\n The following example is a program that contains an illustrative buffer overflow<\/span><\/p>\n <\/p>\n In Figure 2, the statement inside of the for loop would have overflowed the out<\/em> array when it attempts to write past the end of the array since out<\/em> is smaller than string str<\/em>. Just before the program would have performed the out-of-bounds store, the MPX hardware will generate a #BR (bound range exceeded) exception, which is manifested as a structured exception handling (SEH) exception “Array bounds exceeded”. The default behavior in absence of an exception handler for the array bounds exceeded exception is immediate termination of the program. Alternatively, one can add an exception handler as shown in the example code to log the exception or to perform some context dependent recovery such as tearing down the process all the while having avoided the out-of-bounds store.<\/span><\/p>\n Steps to build and run the example:<\/span><\/p>\n Check that the Intel® MPX Runtime Driver is installed on your Microsoft® Windows® 10 November 2015 Update or greater system by verifying its presence in Device Manager under System devices (Figure 3). If it is absent, please download and install the driver from the Intel® Memory Protection Extensions Enabling Guide<\/span><\/a><\/span>.<\/span><\/p>\n<\/li>\n Install Visual Studio 2015 Update 1. Note, if Visual Studio is installed with the phone emulators, Hyper-V will have to be disabled (bcdedit \/set hypervisorlaunchtype off<\/span> and reboot) because this version of Windows does not expose MPX instructions to the guest.<\/span><\/p>\n<\/li>\n Create a Win32 Console Application named “MPXExample” and use the code in Figure 2 for the driver code.<\/span><\/p>\n<\/li>\n As noted above, please, double check that the \/d2MPX<\/span> option is enabled for the current Configuration.<\/span><\/p>\n<\/li>\n Build the project for the X64 platform from within Visual Studio. This should produce an MPXExample.exe binary.<\/span><\/p>\n<\/li>\n Execute the binary MPXExample.exe on an MPX-enabled platform with Windows 10 – which has the OS support for MPX.<\/span><\/p>\n<\/li>\n Figure 3. Verify that the Intel MPX Runtime Driver is installed via Device Manager.<\/span><\/p>\n <\/p>\n <\/p>\n Figure 4. Enable break on the array bounds exceeded exception in the Exception Settings window to have the Visual Studio Debugger break on the exception.<\/span><\/p>\n <\/p>\n <\/p>\n Figure 5. The Visual Studio Debugger breaks on the array bounds exceeded exception.<\/span><\/p>\n <\/p>\n <\/p>\n Figure 6. The exception is thrown when checking the upper bound as shown in this snapshot of the Disassembly window.<\/span><\/p>\n <\/p>\n Visual Studio 2015 Update 1 supports the display and manipulation of the MPX registers via both the Register (Figure 7) and Watch windows (Figure 8) when running on an MPX-enabled platform.<\/span><\/p>\n Figure 7. To observe the contexts of the MPX bounds registers, enable MPX in the Debugger Register window.<\/span><\/p>\n <\/p>\n <\/p>\n Figure 8. Adding a bounds register to the Debugger Watch window is also simple. BND0.UB and BND0.LB in the Watch window refer to the upper and lower bounds in the BND0<\/span> <\/p>\n Run dumpbin \/headers MPXExample.exe.<\/em><\/span> The MPX debug directory entry should be similar to what is shown in Figure 9.<\/span><\/p>\n <\/p>\n Figure 9. To tell if a binary is MPX-enabled, check whether a binary includes the mpx<\/em> debug directory using dumpbin<\/em><\/span>. The mpx<\/em> debug directory should be listed in the Debug Directories section in the dumpbin<\/span><\/em> output.<\/span><\/p>\n <\/p>\n You don’t have to compile all of your code with MPX enabled. A mixture of MPX and non-MPX enabled code will execute correctly. However, code compiled without MPX support will not have any MPX checks.<\/span><\/p>\n <\/p>\n To gain the benefits of MPX, MPX-enabled code should be executed on an MPX-enabled platform running a version of the Windows Operating System that is MPX aware. As of today, MPX is supported on the following:<\/span><\/p>\n <\/p>\n The MPX-enabled code will execute correctly, but it will not benefit from MPX. You need to execute the code on an MPX-enabled platform with an MPX-aware operating system. The MPX instructions will be treated as NOPs, so you might experience a performance decrease in these scenarios.<\/span><\/p>\n <\/p>\n MPX technology provides a powerful safeguard against buffer overflow. Inserting checks for every write to memory may incur some execution time and memory footprint overhead. The amount of overhead is tolerable during testing. However, when enabled for production code, the developer must balance whether the improved memory safety outweighs their customers’ performance needs. We plan to improve performance based on feedback.<\/span><\/p>\n <\/p>\n There is a known issue with x86 debug build where debug instrumentation interferes MPX operation.<\/span><\/p>\n <\/p>\n For more information on how Intel MPX works, details on MPX intrinsic functions, calling convention extensions, and runtime behavior of MPX, please refer to the Intel® Memory Protection Extensions Enabling Guide<\/span><\/a><\/span>.<\/span><\/p>\n Please try out automatic MPX code generation in Visual Studio 2015 Update 1. We are eager to hear about your experiences, especially in terms of usability, code size and runtime performance impact, and your suggestions for how to improve this feature. Please leave feedback in the comment box below or at the Intel ISA Extensions Forum on Intel® Developer Zone<\/span><\/a><\/span>.<\/span><\/p>\n <\/p>\nHow to enable automatic MPX code generation<\/h3>\n
\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/1325.Figure1.png\")
<\/a>
Figure 1. Add the \/d2MPX<\/span> compiler option for each desired configuration.<\/span>
<\/span><\/p>\nUsage Example<\/span><\/h3>\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/3835.MPX_.jpg\")
<\/a>
Figure 2. Code with buffer overflow that will be detected with \/d2MPX.<\/span><\/span><\/p>\n\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/4213.Figure3.png\")
<\/a> <\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/5040.Figure4.png\")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/4405.Figure5.png\")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/8015.Figure6.png\")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/4265.Figure7.png\")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/6811.Figure8.png\")
<\/a><\/p>\n
register respectively. Note that the upper bound of a bounds register is displayed in 2’s complement form.<\/span><\/p>\nHow to tell if a binary is MPX-enabled<\/h3>\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/4774.Figure9.png\")
<\/a><\/p>\nMust I compile everything with MPX?<\/h3>\n
What hardware and version of Windows do I need? <\/h3>\n
![\"Image](\"https:\/\/devblogs.microsoft.com\/cppblog\/wp-content\/uploads\/sites\/9\/2021\/10\/6116.Table_.jpg\")
<\/a><\/p>\nWhat if I execute MPX-enabled code on a platform or on a version of Windows
that does not support MPX?<\/h3>\nPerformance Impact<\/h3>\n
Known Issues<\/h3>\n
More Information and Feedback<\/h3>\n