/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.119 Revision 1.244
1/* 1/*
2 * Copyright 2003-2006 Gentoo Foundation 2 * Copyright 2003-2007 Gentoo Foundation
3 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.119 2006/02/05 02:25:58 solar Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.244 2012/04/29 06:21:36 vapier Exp $
5 * 5 *
6 * Copyright 2003-2006 Ned Ludd - <solar@gentoo.org> 6 * Copyright 2003-2007 Ned Ludd - <solar@gentoo.org>
7 * Copyright 2004-2006 Mike Frysinger - <vapier@gentoo.org> 7 * Copyright 2004-2007 Mike Frysinger - <vapier@gentoo.org>
8 */ 8 */
9 9
10static const char rcsid[] = "$Id: scanelf.c,v 1.244 2012/04/29 06:21:36 vapier Exp $";
11const char argv0[] = "scanelf";
12
10#include "paxinc.h" 13#include "paxinc.h"
11 14
12static const char *rcsid = "$Id: scanelf.c,v 1.119 2006/02/05 02:25:58 solar Exp $";
13#define argv0 "scanelf"
14
15#define IS_MODIFIER(c) (c == '%' || c == '#') 15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+')
16
17
18 16
19/* prototypes */ 17/* prototypes */
20static int scanelf_elfobj(elfobj *elf); 18static int file_matches_list(const char *filename, char **matchlist);
21static int scanelf_elf(const char *filename, int fd, size_t len);
22static int scanelf_archive(const char *filename, int fd, size_t len);
23static void scanelf_file(const char *filename);
24static void scanelf_dir(const char *path);
25static void scanelf_ldpath(void);
26static void scanelf_envpath(void);
27static void usage(int status);
28static void parseargs(int argc, char *argv[]);
29static char *xstrdup(const char *s);
30static void *xmalloc(size_t size);
31static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n);
32#define xstrcat(dst,src,curr_len) xstrncat(dst,src,curr_len,0)
33static inline void xchrcat(char **dst, const char append, size_t *curr_len);
34 19
35/* variables to control behavior */ 20/* variables to control behavior */
36static char match_etypes[126] = ""; 21static char *match_etypes = NULL;
37static char *ldpaths[256]; 22static array_t _ldpaths = array_init_decl, *ldpaths = &_ldpaths;
38static char scan_ldpath = 0; 23static char scan_ldpath = 0;
39static char scan_envpath = 0; 24static char scan_envpath = 0;
40static char scan_symlink = 1; 25static char scan_symlink = 1;
41static char scan_archives = 0; 26static char scan_archives = 0;
42static char dir_recurse = 0; 27static char dir_recurse = 0;
43static char dir_crossmount = 1; 28static char dir_crossmount = 1;
44static char show_pax = 0; 29static char show_pax = 0;
30static char show_perms = 0;
31static char show_size = 0;
45static char show_phdr = 0; 32static char show_phdr = 0;
46static char show_textrel = 0; 33static char show_textrel = 0;
47static char show_rpath = 0; 34static char show_rpath = 0;
48static char show_needed = 0; 35static char show_needed = 0;
49static char show_interp = 0; 36static char show_interp = 0;
50static char show_bind = 0; 37static char show_bind = 0;
51static char show_soname = 0; 38static char show_soname = 0;
52static char show_textrels = 0; 39static char show_textrels = 0;
53static char show_banner = 1; 40static char show_banner = 1;
41static char show_endian = 0;
42static char show_osabi = 0;
43static char show_eabi = 0;
54static char be_quiet = 0; 44static char be_quiet = 0;
55static char be_verbose = 0; 45static char be_verbose = 0;
56static char be_wewy_wewy_quiet = 0; 46static char be_wewy_wewy_quiet = 0;
57static char *find_sym = NULL, *versioned_symname = NULL; 47static char be_semi_verbose = 0;
48static char *find_sym = NULL;
58static char *find_lib = NULL; 49static char *find_lib = NULL;
50static array_t _find_lib_arr = array_init_decl, *find_lib_arr = &_find_lib_arr;
51static char *find_section = NULL;
52static array_t _find_section_arr = array_init_decl, *find_section_arr = &_find_section_arr;
59static char *out_format = NULL; 53static char *out_format = NULL;
60static char *search_path = NULL; 54static char *search_path = NULL;
61static char fix_elf = 0; 55static char fix_elf = 0;
62static char gmatch = 0; 56static char g_match = 0;
63static char use_ldcache = 0; 57static char use_ldcache = 0;
58static char use_ldpath = 0;
64 59
60static char **qa_textrels = NULL;
61static char **qa_execstack = NULL;
62static char **qa_wx_load = NULL;
63static int root_fd = AT_FDCWD;
65 64
66caddr_t ldcache = 0; 65static int match_bits = 0;
66static unsigned int match_perms = 0;
67static void *ldcache = NULL;
67size_t ldcache_size = 0; 68static size_t ldcache_size = 0;
69static unsigned long setpax = 0UL;
68 70
71static int has_objdump = 0;
72
73/* find the path to a file by name */
74static int bin_in_path(const char *fname)
75{
76 char fullpath[__PAX_UTILS_PATH_MAX];
77 char *path, *p;
78
79 path = getenv("PATH");
80 if (!path)
81 return 0;
82
83 while ((p = strrchr(path, ':')) != NULL) {
84 snprintf(fullpath, sizeof(fullpath), "%s/%s", p + 1, fname);
85 *p = 0;
86 if (access(fullpath, R_OK) != -1)
87 return 1;
88 }
89
90 return 0;
91}
92
93static FILE *fopenat_r(int dir_fd, const char *path)
94{
95 int fd = openat(dir_fd, path, O_RDONLY|O_CLOEXEC);
96 if (fd == -1)
97 return NULL;
98 return fdopen(fd, "re");
99}
100
101static const char *root_rel_path(const char *path)
102{
103 /*
104 * openat() will ignore the dirfd if path starts with
105 * a /, so consume all of that noise
106 *
107 * XXX: we don't handle relative paths like ../ that
108 * break out of the --root option, but for now, just
109 * don't do that :P.
110 */
111 if (root_fd != AT_FDCWD) {
112 while (*path == '/')
113 ++path;
114 if (*path == '\0')
115 path = ".";
116 }
117
118 return path;
119}
120
121/* 1 on failure. 0 otherwise */
122static int rematch(const char *regex, const char *match, int cflags)
123{
124 regex_t preg;
125 int ret;
126
127 if ((match == NULL) || (regex == NULL))
128 return EXIT_FAILURE;
129
130 if ((ret = regcomp(&preg, regex, cflags))) {
131 char err[256];
132
133 if (regerror(ret, &preg, err, sizeof(err)))
134 fprintf(stderr, "regcomp failed: %s", err);
135 else
136 fprintf(stderr, "regcomp failed");
137
138 return EXIT_FAILURE;
139 }
140 ret = regexec(&preg, match, 0, NULL, 0);
141 regfree(&preg);
142
143 return ret;
144}
145
69/* sub-funcs for scanelf_file() */ 146/* sub-funcs for scanelf_fileat() */
70static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab) 147static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **str)
71{ 148{
72 /* find the best SHT_DYNSYM and SHT_STRTAB sections */ 149 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
150
151 /* debug sections */
152 void *symtab = elf_findsecbyname(elf, ".symtab");
153 void *strtab = elf_findsecbyname(elf, ".strtab");
154 /* runtime sections */
155 void *dynsym = elf_findsecbyname(elf, ".dynsym");
156 void *dynstr = elf_findsecbyname(elf, ".dynstr");
157
158 /*
159 * If the sections are marked NOBITS, then they don't exist, so we just
160 * skip them. This let's us work sanely with splitdebug ELFs (rather
161 * than spewing a lot of "corrupt ELF" messages later on). In malformed
162 * ELFs, the section might be wrongly set to NOBITS, but screw em.
163 */
73#define GET_SYMTABS(B) \ 164#define GET_SYMTABS(B) \
74 if (elf->elf_class == ELFCLASS ## B) { \ 165 if (elf->elf_class == ELFCLASS ## B) { \
75 Elf ## B ## _Shdr *symtab, *strtab, *dynsym, *dynstr; \ 166 Elf ## B ## _Shdr *esymtab = symtab; \
76 /* debug sections */ \ 167 Elf ## B ## _Shdr *estrtab = strtab; \
77 symtab = SHDR ## B (elf_findsecbyname(elf, ".symtab")); \ 168 Elf ## B ## _Shdr *edynsym = dynsym; \
78 strtab = SHDR ## B (elf_findsecbyname(elf, ".strtab")); \ 169 Elf ## B ## _Shdr *edynstr = dynstr; \
79 /* runtime sections */ \ 170 \
80 dynsym = SHDR ## B (elf_findsecbyname(elf, ".dynsym")); \ 171 if (symtab && EGET(esymtab->sh_type) == SHT_NOBITS) \
81 dynstr = SHDR ## B (elf_findsecbyname(elf, ".dynstr")); \ 172 symtab = NULL; \
173 if (dynsym && EGET(edynsym->sh_type) == SHT_NOBITS) \
174 dynsym = NULL; \
82 if (symtab && dynsym) { \ 175 if (symtab && dynsym) \
83 *sym = (void*)((EGET(symtab->sh_size) > EGET(dynsym->sh_size)) ? symtab : dynsym); \ 176 *sym = (EGET(esymtab->sh_size) > EGET(edynsym->sh_size)) ? symtab : dynsym; \
84 } else { \ 177 else \
85 *sym = (void*)(symtab ? symtab : dynsym); \ 178 *sym = symtab ? symtab : dynsym; \
86 } \ 179 \
180 if (strtab && EGET(estrtab->sh_type) == SHT_NOBITS) \
181 strtab = NULL; \
182 if (dynstr && EGET(edynstr->sh_type) == SHT_NOBITS) \
183 dynstr = NULL; \
87 if (strtab && dynstr) { \ 184 if (strtab && dynstr) \
88 *tab = (void*)((EGET(strtab->sh_size) > EGET(dynstr->sh_size)) ? strtab : dynstr); \ 185 *str = (EGET(estrtab->sh_size) > EGET(edynstr->sh_size)) ? strtab : dynstr; \
89 } else { \ 186 else \
90 *tab = (void*)(strtab ? strtab : dynstr); \ 187 *str = strtab ? strtab : dynstr; \
91 } \
92 } 188 }
93 GET_SYMTABS(32) 189 GET_SYMTABS(32)
94 GET_SYMTABS(64) 190 GET_SYMTABS(64)
191
192 if (*sym && *str)
193 return;
194
195 /*
196 * damn, they're really going to make us work for it huh?
197 * reconstruct the section header info out of the dynamic
198 * tags so we can see what symbols this guy uses at runtime.
199 */
200#define GET_SYMTABS_DT(B) \
201 if (elf->elf_class == ELFCLASS ## B) { \
202 size_t i; \
203 static Elf ## B ## _Shdr sym_shdr, str_shdr; \
204 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
205 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
206 Elf ## B ## _Addr vsym, vstr, vhash, vgnu_hash; \
207 Elf ## B ## _Dyn *dyn; \
208 Elf ## B ## _Off offset; \
209 \
210 /* lookup symbols used at runtime with DT_SYMTAB / DT_STRTAB */ \
211 vsym = vstr = vhash = vgnu_hash = 0; \
212 memset(&sym_shdr, 0, sizeof(sym_shdr)); \
213 memset(&str_shdr, 0, sizeof(str_shdr)); \
214 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
215 if (EGET(phdr[i].p_type) != PT_DYNAMIC) \
216 continue; \
217 \
218 offset = EGET(phdr[i].p_offset); \
219 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) \
220 continue; \
221 \
222 dyn = DYN ## B (elf->vdata + offset); \
223 while (EGET(dyn->d_tag) != DT_NULL) { \
224 switch (EGET(dyn->d_tag)) { \
225 case DT_SYMTAB: vsym = EGET(dyn->d_un.d_val); break; \
226 case DT_SYMENT: sym_shdr.sh_entsize = dyn->d_un.d_val; break; \
227 case DT_STRTAB: vstr = EGET(dyn->d_un.d_val); break; \
228 case DT_STRSZ: str_shdr.sh_size = dyn->d_un.d_val; break; \
229 case DT_HASH: vhash = EGET(dyn->d_un.d_val); break; \
230 /*case DT_GNU_HASH: vgnu_hash = EGET(dyn->d_un.d_val); break;*/ \
231 } \
232 ++dyn; \
233 } \
234 if (vsym && vstr) \
235 break; \
236 } \
237 if (!vsym || !vstr || !(vhash || vgnu_hash)) \
238 return; \
239 \
240 /* calc offset into the ELF by finding the load addr of the syms */ \
241 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
242 Elf ## B ## _Addr vaddr = EGET(phdr[i].p_vaddr); \
243 Elf ## B ## _Addr filesz = EGET(phdr[i].p_filesz); \
244 offset = EGET(phdr[i].p_offset); \
245 \
246 if (EGET(phdr[i].p_type) != PT_LOAD) \
247 continue; \
248 \
249 if (vhash >= vaddr && vhash < vaddr + filesz) { \
250 /* Scan the hash table to see how many entries we have */ \
251 Elf32_Word max_sym_idx = 0; \
252 Elf32_Word *hashtbl = elf->vdata + offset + (vhash - vaddr); \
253 Elf32_Word b, nbuckets = EGET(hashtbl[0]); \
254 Elf32_Word nchains = EGET(hashtbl[1]); \
255 Elf32_Word *buckets = &hashtbl[2]; \
256 Elf32_Word *chains = &buckets[nbuckets]; \
257 Elf32_Word sym_idx; \
258 \
259 for (b = 0; b < nbuckets; ++b) { \
260 if (!buckets[b]) \
261 continue; \
262 for (sym_idx = buckets[b]; sym_idx < nchains && sym_idx; sym_idx = chains[sym_idx]) \
263 if (max_sym_idx < sym_idx) \
264 max_sym_idx = sym_idx; \
265 } \
266 ESET(sym_shdr.sh_size, sym_shdr.sh_entsize * max_sym_idx); \
267 } \
268 \
269 if (vsym >= vaddr && vsym < vaddr + filesz) { \
270 ESET(sym_shdr.sh_offset, offset + (vsym - vaddr)); \
271 *sym = &sym_shdr; \
272 } \
273 \
274 if (vstr >= vaddr && vstr < vaddr + filesz) { \
275 ESET(str_shdr.sh_offset, offset + (vstr - vaddr)); \
276 *str = &str_shdr; \
277 } \
278 } \
279 }
280 GET_SYMTABS_DT(32)
281 GET_SYMTABS_DT(64)
95} 282}
283
96static char *scanelf_file_pax(elfobj *elf, char *found_pax) 284static char *scanelf_file_pax(elfobj *elf, char *found_pax)
97{ 285{
98 static char ret[7]; 286 static char ret[7];
99 unsigned long i, shown; 287 unsigned long i, shown;
100 288
109 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 297 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
110 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 298 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
111 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 299 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
112 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ 300 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
113 continue; \ 301 continue; \
114 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \ 302 if (fix_elf && setpax) { \
303 /* set the paxctl flags */ \
304 ESET(phdr[i].p_flags, setpax); \
305 } \
306 if (be_quiet && (EGET(phdr[i].p_flags) == (PF_NOEMUTRAMP | PF_NORANDEXEC))) \
115 continue; \ 307 continue; \
116 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ 308 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
117 *found_pax = 1; \ 309 *found_pax = 1; \
118 ++shown; \ 310 ++shown; \
119 break; \ 311 break; \
120 } \ 312 } \
121 } 313 }
122 SHOW_PAX(32) 314 SHOW_PAX(32)
123 SHOW_PAX(64) 315 SHOW_PAX(64)
124 } 316 }
317
318 /* Note: We do not support setting EI_PAX if not PT_PAX_FLAGS
319 * was found. This is known to break ELFs on glibc systems,
320 * and mainline PaX has deprecated use of this for a long time.
321 * We could support changing PT_GNU_STACK, but that doesn't
322 * seem like it's worth the effort. #411919
323 */
125 324
126 /* fall back to EI_PAX if no PT_PAX was found */ 325 /* fall back to EI_PAX if no PT_PAX was found */
127 if (!*ret) { 326 if (!*ret) {
128 static char *paxflags; 327 static char *paxflags;
129 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); 328 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
163 uint32_t flags, check_flags; \ 362 uint32_t flags, check_flags; \
164 if (elf->phdr != NULL) { \ 363 if (elf->phdr != NULL) { \
165 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 364 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
166 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \ 365 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
167 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \ 366 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
367 if (multi_stack++) \
168 if (multi_stack++) warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \ 368 warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
369 if (file_matches_list(elf->filename, qa_execstack)) \
370 continue; \
169 found = found_phdr; \ 371 found = found_phdr; \
170 offset = 0; \ 372 offset = 0; \
171 check_flags = PF_X; \ 373 check_flags = PF_X; \
172 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \ 374 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
375 if (multi_relro++) \
173 if (multi_relro++) warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \ 376 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
174 found = found_relro; \ 377 found = found_relro; \
175 offset = 4; \ 378 offset = 4; \
176 check_flags = PF_X; \ 379 check_flags = PF_X; \
177 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \ 380 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
178 if (ehdr->e_type == ET_DYN || ehdr->e_type == ET_EXEC) \ 381 if (EGET(ehdr->e_type) == ET_DYN || EGET(ehdr->e_type) == ET_EXEC) \
382 if (multi_load++ > max_pt_load) \
179 if (multi_load++ > max_pt_load) warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \ 383 warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
384 if (file_matches_list(elf->filename, qa_wx_load)) \
385 continue; \
180 found = found_load; \ 386 found = found_load; \
181 offset = 8; \ 387 offset = 8; \
182 check_flags = PF_W|PF_X; \ 388 check_flags = PF_W|PF_X; \
183 } else \ 389 } else \
184 continue; \ 390 continue; \
185 flags = EGET(phdr[i].p_flags); \ 391 flags = EGET(phdr[i].p_flags); \
186 if (be_quiet && ((flags & check_flags) != check_flags)) \ 392 if (be_quiet && ((flags & check_flags) != check_flags)) \
187 continue; \ 393 continue; \
188 if (fix_elf && ((flags & PF_X) != flags)) { \ 394 if ((EGET(phdr[i].p_type) != PT_LOAD) && (fix_elf && ((flags & PF_X) != flags))) { \
189 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \ 395 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
190 ret[3] = ret[7] = '!'; \ 396 ret[3] = ret[7] = '!'; \
191 flags = EGET(phdr[i].p_flags); \ 397 flags = EGET(phdr[i].p_flags); \
192 } \ 398 } \
193 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \ 399 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
197 } else if (elf->shdr != NULL) { \ 403 } else if (elf->shdr != NULL) { \
198 /* no program headers which means this is prob an object file */ \ 404 /* no program headers which means this is prob an object file */ \
199 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \ 405 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
200 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \ 406 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
201 char *str; \ 407 char *str; \
202 if ((void*)strtbl > (void*)elf->data_end) \ 408 if ((void*)strtbl > elf->data_end) \
203 goto skip_this_shdr##B; \ 409 goto skip_this_shdr##B; \
204 check_flags = SHF_WRITE|SHF_EXECINSTR; \ 410 check_flags = SHF_WRITE|SHF_EXECINSTR; \
205 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \ 411 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
206 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \ 412 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
207 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \ 413 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
221 break; \ 427 break; \
222 } \ 428 } \
223 } \ 429 } \
224 skip_this_shdr##B: \ 430 skip_this_shdr##B: \
225 if (!multi_stack) { \ 431 if (!multi_stack) { \
432 if (file_matches_list(elf->filename, qa_execstack)) \
433 return NULL; \
226 *found_phdr = 1; \ 434 *found_phdr = 1; \
227 shown = 1; \ 435 shown = 1; \
228 memcpy(ret, "!WX", 3); \ 436 memcpy(ret, "!WX", 3); \
229 } \ 437 } \
230 } \ 438 } \
235 if (be_wewy_wewy_quiet || (be_quiet && !shown)) 443 if (be_wewy_wewy_quiet || (be_quiet && !shown))
236 return NULL; 444 return NULL;
237 else 445 else
238 return ret; 446 return ret;
239} 447}
448
449/*
450 * See if this ELF contains a DT_TEXTREL tag in any of its
451 * PT_DYNAMIC sections.
452 */
240static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 453static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
241{ 454{
242 static const char *ret = "TEXTREL"; 455 static const char *ret = "TEXTREL";
243 unsigned long i; 456 unsigned long i;
244 457
245 if (!show_textrel && !show_textrels) return NULL; 458 if (!show_textrel && !show_textrels) return NULL;
459
460 if (file_matches_list(elf->filename, qa_textrels)) return NULL;
246 461
247 if (elf->phdr) { 462 if (elf->phdr) {
248#define SHOW_TEXTREL(B) \ 463#define SHOW_TEXTREL(B) \
249 if (elf->elf_class == ELFCLASS ## B) { \ 464 if (elf->elf_class == ELFCLASS ## B) { \
250 Elf ## B ## _Dyn *dyn; \ 465 Elf ## B ## _Dyn *dyn; \
251 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 466 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
252 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 467 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
253 Elf ## B ## _Off offset; \ 468 Elf ## B ## _Off offset; \
254 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 469 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
255 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 470 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
256 offset = EGET(phdr[i].p_offset); \ 471 offset = EGET(phdr[i].p_offset); \
257 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 472 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
258 dyn = DYN ## B (elf->data + offset); \ 473 dyn = DYN ## B (elf->vdata + offset); \
259 while (EGET(dyn->d_tag) != DT_NULL) { \ 474 while (EGET(dyn->d_tag) != DT_NULL) { \
260 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 475 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
261 *found_textrel = 1; \ 476 *found_textrel = 1; \
262 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ 477 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \
263 return (be_wewy_wewy_quiet ? NULL : ret); \ 478 return (be_wewy_wewy_quiet ? NULL : ret); \
272 if (be_quiet || be_wewy_wewy_quiet) 487 if (be_quiet || be_wewy_wewy_quiet)
273 return NULL; 488 return NULL;
274 else 489 else
275 return " - "; 490 return " - ";
276} 491}
492
493/*
494 * Scan the .text section to see if there are any relocations in it.
495 * Should rewrite this to check PT_LOAD sections that are marked
496 * Executable rather than the section named '.text'.
497 */
277static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel) 498static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
278{ 499{
279 unsigned long s, r, rmax; 500 unsigned long s, r, rmax;
280 void *symtab_void, *strtab_void, *text_void; 501 void *symtab_void, *strtab_void, *text_void;
281 502
302 Elf ## B ## _Rela *rela; \ 523 Elf ## B ## _Rela *rela; \
303 /* search the section headers for relocations */ \ 524 /* search the section headers for relocations */ \
304 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \ 525 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \
305 uint32_t sh_type = EGET(shdr[s].sh_type); \ 526 uint32_t sh_type = EGET(shdr[s].sh_type); \
306 if (sh_type == SHT_REL) { \ 527 if (sh_type == SHT_REL) { \
307 rel = REL ## B (elf->data + EGET(shdr[s].sh_offset)); \ 528 rel = REL ## B (elf->vdata + EGET(shdr[s].sh_offset)); \
308 rela = NULL; \ 529 rela = NULL; \
309 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \ 530 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \
310 } else if (sh_type == SHT_RELA) { \ 531 } else if (sh_type == SHT_RELA) { \
311 rel = NULL; \ 532 rel = NULL; \
312 rela = RELA ## B (elf->data + EGET(shdr[s].sh_offset)); \ 533 rela = RELA ## B (elf->vdata + EGET(shdr[s].sh_offset)); \
313 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \ 534 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \
314 } else \ 535 } else \
315 continue; \ 536 continue; \
316 /* now see if any of the relocs are in the .text */ \ 537 /* now see if any of the relocs are in the .text */ \
317 for (r = 0; r < rmax; ++r) { \ 538 for (r = 0; r < rmax; ++r) { \
332 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \ 553 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \
333 if (be_verbose <= 2) continue; \ 554 if (be_verbose <= 2) continue; \
334 } else \ 555 } else \
335 *found_textrels = 1; \ 556 *found_textrels = 1; \
336 /* locate this relocation symbol name */ \ 557 /* locate this relocation symbol name */ \
337 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 558 sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
338 if ((void*)sym > (void*)elf->data_end) { \ 559 if ((void*)sym > elf->data_end) { \
339 warn("%s: corrupt ELF symbol", elf->filename); \ 560 warn("%s: corrupt ELF symbol", elf->filename); \
340 continue; \ 561 continue; \
341 } \ 562 } \
342 sym_max = ELF ## B ## _R_SYM(r_info); \ 563 sym_max = ELF ## B ## _R_SYM(r_info); \
343 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \ 564 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
346 sym = NULL; \ 567 sym = NULL; \
347 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 568 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
348 /* show the raw details about this reloc */ \ 569 /* show the raw details about this reloc */ \
349 printf(" %s: ", elf->base_filename); \ 570 printf(" %s: ", elf->base_filename); \
350 if (sym && sym->st_name) \ 571 if (sym && sym->st_name) \
351 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \ 572 printf("%s", elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
352 else \ 573 else \
353 printf("(memory/fake?)"); \ 574 printf("(memory/data?)"); \
354 printf(" [0x%lX]", (unsigned long)r_offset); \ 575 printf(" [0x%lX]", (unsigned long)r_offset); \
355 /* now try to find the closest symbol that this rel is probably in */ \ 576 /* now try to find the closest symbol that this rel is probably in */ \
356 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 577 sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
357 func = NULL; \ 578 func = NULL; \
358 offset_tmp = 0; \ 579 offset_tmp = 0; \
359 while (sym_max--) { \ 580 while (sym_max--) { \
360 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \ 581 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \
361 func = sym; \ 582 func = sym; \
362 offset_tmp = EGET(sym->st_value); \ 583 offset_tmp = EGET(sym->st_value); \
363 } \ 584 } \
364 ++sym; \ 585 ++sym; \
365 } \ 586 } \
366 printf(" in "); \ 587 printf(" in "); \
367 if (func && func->st_name) \ 588 if (func && func->st_name) { \
368 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(func->st_name))); \ 589 const char *func_name = elf->data + EGET(strtab->sh_offset) + EGET(func->st_name); \
590 if (r_offset > EGET(func->st_size)) \
591 printf("(optimized out: previous %s)", func_name); \
369 else \ 592 else \
370 printf("(NULL: fake?)"); \ 593 printf("%s", func_name); \
594 } else \
595 printf("(optimized out)"); \
371 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \ 596 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
597 if (be_verbose && has_objdump) { \
598 Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \
599 char *sysbuf; \
600 size_t syslen; \
601 const char sysfmt[] = "objdump -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \
602 syslen = sizeof(sysfmt) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \
603 sysbuf = xmalloc(syslen); \
604 if (end_addr < r_offset) \
605 /* not uncommon when things are optimized out */ \
606 end_addr = r_offset + 0x100; \
607 snprintf(sysbuf, syslen, sysfmt, \
608 (unsigned long)offset_tmp, \
609 (unsigned long)end_addr, \
610 elf->filename, \
611 (unsigned long)r_offset); \
612 fflush(stdout); \
613 if (system(sysbuf)) /* don't care */; \
614 fflush(stdout); \
615 free(sysbuf); \
616 } \
372 } \ 617 } \
373 } } 618 } }
374 SHOW_TEXTRELS(32) 619 SHOW_TEXTRELS(32)
375 SHOW_TEXTRELS(64) 620 SHOW_TEXTRELS(64)
376 } 621 }
378 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename); 623 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
379 624
380 return NULL; 625 return NULL;
381} 626}
382 627
383static void rpath_security_checks(elfobj *, char *, const char *);
384static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type) 628static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
385{ 629{
386 struct stat st; 630 struct stat st;
387 switch (*item) { 631 switch (*item) {
388 case '/': break; 632 case '/': break;
394 warnf("Security problem NULL %s in %s", dt_type, elf->filename); 638 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
395 break; 639 break;
396 case '$': 640 case '$':
397 if (fstat(elf->fd, &st) != -1) 641 if (fstat(elf->fd, &st) != -1)
398 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID)) 642 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
399 warnf("Security problem with %s='%s' in %s with mode set of %o", 643 warnf("Security problem with %s='%s' in %s with mode set of %o",
400 dt_type, item, elf->filename, st.st_mode & 07777); 644 dt_type, item, elf->filename, (unsigned int) st.st_mode & 07777);
401 break; 645 break;
402 default: 646 default:
403 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename); 647 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
404 break; 648 break;
405 } 649 }
406} 650}
407static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) 651static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
408{ 652{
409 unsigned long i, s; 653 unsigned long i;
410 char *rpath, *runpath, **r; 654 char *rpath, *runpath, **r;
411 void *strtbl_void; 655 void *strtbl_void;
412 656
413 if (!show_rpath) return; 657 if (!show_rpath) return;
414 658
425 Elf ## B ## _Off offset; \ 669 Elf ## B ## _Off offset; \
426 Elf ## B ## _Xword word; \ 670 Elf ## B ## _Xword word; \
427 /* Scan all the program headers */ \ 671 /* Scan all the program headers */ \
428 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 672 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
429 /* Just scan dynamic headers */ \ 673 /* Just scan dynamic headers */ \
430 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 674 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
431 offset = EGET(phdr[i].p_offset); \ 675 offset = EGET(phdr[i].p_offset); \
432 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 676 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
433 /* Just scan dynamic RPATH/RUNPATH headers */ \ 677 /* Just scan dynamic RPATH/RUNPATH headers */ \
434 dyn = DYN ## B (elf->data + offset); \ 678 dyn = DYN ## B (elf->vdata + offset); \
435 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \ 679 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \
436 if (word == DT_RPATH) { \ 680 if (word == DT_RPATH) { \
437 r = &rpath; \ 681 r = &rpath; \
438 } else if (word == DT_RUNPATH) { \ 682 } else if (word == DT_RUNPATH) { \
439 r = &runpath; \ 683 r = &runpath; \
443 } \ 687 } \
444 /* Verify the memory is somewhat sane */ \ 688 /* Verify the memory is somewhat sane */ \
445 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 689 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
446 if (offset < (Elf ## B ## _Off)elf->len) { \ 690 if (offset < (Elf ## B ## _Off)elf->len) { \
447 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ 691 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
448 *r = (char*)(elf->data + offset); \ 692 *r = elf->data + offset; \
449 /* cache the length in case we need to nuke this section later on */ \ 693 /* cache the length in case we need to nuke this section later on */ \
450 if (fix_elf) \ 694 if (fix_elf) \
451 offset = strlen(*r); \ 695 offset = strlen(*r); \
452 /* If quiet, don't output paths in ld.so.conf */ \ 696 /* If quiet, don't output paths in ld.so.conf */ \
453 if (be_quiet) { \ 697 if (be_quiet) { \
459 /* scan each path in : delimited list */ \ 703 /* scan each path in : delimited list */ \
460 while (start) { \ 704 while (start) { \
461 rpath_security_checks(elf, start, get_elfdtype(word)); \ 705 rpath_security_checks(elf, start, get_elfdtype(word)); \
462 end = strchr(start, ':'); \ 706 end = strchr(start, ':'); \
463 len = (end ? abs(end - start) : strlen(start)); \ 707 len = (end ? abs(end - start) : strlen(start)); \
464 if (use_ldcache) \ 708 if (use_ldcache) { \
465 for (s = 0; ldpaths[s]; ++s) \ 709 size_t n; \
710 const char *ldpath; \
711 array_for_each(ldpaths, n, ldpath) \
466 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \ 712 if (!strncmp(ldpath, start, len) && !ldpath[len]) { \
467 *r = end; \ 713 *r = end; \
468 /* corner case ... if RPATH reads "/usr/lib:", we want \ 714 /* corner case ... if RPATH reads "/usr/lib:", we want \
469 * to show ':' rather than '' */ \ 715 * to show ':' rather than '' */ \
470 if (end && end[1] != '\0') \ 716 if (end && end[1] != '\0') \
471 (*r)++; \ 717 (*r)++; \
472 break; \ 718 break; \
473 } \ 719 } \
720 } \
474 if (!*r || !end) \ 721 if (!*r || !end) \
475 break; \ 722 break; \
476 else \ 723 else \
477 start = start + len + 1; \ 724 start = start + len + 1; \
478 } \ 725 } \
563#define FLAG_S390_LIB64 0x0400 810#define FLAG_S390_LIB64 0x0400
564#define FLAG_POWERPC_LIB64 0x0500 811#define FLAG_POWERPC_LIB64 0x0500
565#define FLAG_MIPS64_LIBN32 0x0600 812#define FLAG_MIPS64_LIBN32 0x0600
566#define FLAG_MIPS64_LIBN64 0x0700 813#define FLAG_MIPS64_LIBN64 0x0700
567 814
568static char *lookup_cache_lib(elfobj *, char *); 815#if defined(__GLIBC__) || defined(__UCLIBC__)
816
569static char *lookup_cache_lib(elfobj *elf, char *fname) 817static char *lookup_cache_lib(elfobj *elf, const char *fname)
570{ 818{
571 int fd = 0; 819 int fd;
572 char *strs; 820 char *strs;
573 static char buf[__PAX_UTILS_PATH_MAX] = ""; 821 static char buf[__PAX_UTILS_PATH_MAX] = "";
574 const char *cachefile = "/etc/ld.so.cache"; 822 const char *cachefile = root_rel_path("/etc/ld.so.cache");
575 struct stat st; 823 struct stat st;
576 824
577 typedef struct { 825 typedef struct {
578 char magic[LDSO_CACHE_MAGIC_LEN]; 826 char magic[LDSO_CACHE_MAGIC_LEN];
579 char version[LDSO_CACHE_VER_LEN]; 827 char version[LDSO_CACHE_VER_LEN];
589 libentry_t *libent; 837 libentry_t *libent;
590 838
591 if (fname == NULL) 839 if (fname == NULL)
592 return NULL; 840 return NULL;
593 841
594 if (ldcache == 0) { 842 if (ldcache == NULL) {
595 if (stat(cachefile, &st) || (fd = open(cachefile, O_RDONLY)) == -1) 843 if (fstatat(root_fd, cachefile, &st, 0))
844 return NULL;
845
846 fd = openat(root_fd, cachefile, O_RDONLY);
847 if (fd == -1)
596 return NULL; 848 return NULL;
597 849
598 /* cache these values so we only map/unmap the cache file once */ 850 /* cache these values so we only map/unmap the cache file once */
599 ldcache_size = st.st_size; 851 ldcache_size = st.st_size;
600 ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0); 852 header = ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
601
602 close(fd); 853 close(fd);
603 854
604 if (ldcache == (caddr_t)-1) { 855 if (ldcache == MAP_FAILED) {
605 ldcache = 0; 856 ldcache = NULL;
606 return NULL; 857 return NULL;
607 } 858 }
608 859
609 if (memcmp(((header_t *) ldcache)->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN)) 860 if (memcmp(header->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN) ||
861 memcmp(header->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
862 {
863 munmap(ldcache, ldcache_size);
864 ldcache = NULL;
610 return NULL; 865 return NULL;
611 if (memcmp (((header_t *) ldcache)->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
612 return NULL;
613 } 866 }
867 } else
868 header = ldcache;
614 869
615 header = (header_t *) ldcache;
616 libent = (libentry_t *) (ldcache + sizeof(header_t)); 870 libent = ldcache + sizeof(header_t);
617 strs = (char *) &libent[header->nlibs]; 871 strs = (char *) &libent[header->nlibs];
618 872
619 for (fd = 0; fd < header->nlibs; fd++) { 873 for (fd = 0; fd < header->nlibs; ++fd) {
620 /* this should be more fine grained, but for now we assume that 874 /* This should be more fine grained, but for now we assume that
621 * diff arches will not be cached together. and we ignore the 875 * diff arches will not be cached together, and we ignore the
622 * the different multilib mips cases. */ 876 * the different multilib mips cases.
877 */
623 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK)) 878 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
624 continue; 879 continue;
625 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK)) 880 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
626 continue; 881 continue;
627 882
628 if (strcmp(fname, strs + libent[fd].sooffset) != 0) 883 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
629 continue; 884 continue;
885
886 /* Return first hit because that is how the ldso rolls */
630 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf)); 887 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
888 break;
631 } 889 }
890
632 return buf; 891 return buf;
633} 892}
634 893
894#elif defined(__NetBSD__)
895static char *lookup_cache_lib(elfobj *elf, const char *fname)
896{
897 static char buf[__PAX_UTILS_PATH_MAX] = "";
898 static struct stat st;
899 size_t n;
900 char *ldpath;
901
902 array_for_each(ldpath, n, ldpath) {
903 if ((unsigned) snprintf(buf, sizeof(buf), "%s/%s", ldpath, fname) >= sizeof(buf))
904 continue; /* if the pathname is too long, or something went wrong, ignore */
905
906 if (stat(buf, &st) != 0)
907 continue; /* if the lib doesn't exist in *ldpath, look further */
908
909 /* NetBSD doesn't actually do sanity checks, it just loads the file
910 * and if that doesn't work, continues looking in other directories.
911 * This cannot easily be safely emulated, unfortunately. For now,
912 * just assume that if it exists, it's a valid library. */
913
914 return buf;
915 }
916
917 /* not found in any path */
918 return NULL;
919}
920#else
921#ifdef __ELF__
922#warning Cache support not implemented for your target
923#endif
924static char *lookup_cache_lib(elfobj *elf, const char *fname)
925{
926 return NULL;
927}
928#endif
929
930static char *lookup_config_lib(elfobj *elf, char *fname)
931{
932 static char buf[__PAX_UTILS_PATH_MAX] = "";
933 const char *ldpath;
934 size_t n;
935
936 array_for_each(ldpaths, n, ldpath) {
937 snprintf(buf, sizeof(buf), "%s/%s", root_rel_path(ldpath), fname);
938 if (faccessat(root_fd, buf, F_OK, AT_SYMLINK_NOFOLLOW) == 0)
939 return buf;
940 }
941
942 return NULL;
943}
635 944
636static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len) 945static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
637{ 946{
638 unsigned long i; 947 unsigned long i;
639 char *needed; 948 char *needed;
640 void *strtbl_void; 949 void *strtbl_void;
641 char *p; 950 char *p;
642 951
952 /*
953 * -n -> op==0 -> print all
954 * -N -> op==1 -> print requested
955 */
643 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL; 956 if ((op == 0 && !show_needed) || (op == 1 && !find_lib))
957 return NULL;
644 958
645 strtbl_void = elf_findsecbyname(elf, ".dynstr"); 959 strtbl_void = elf_findsecbyname(elf, ".dynstr");
646 960
647 if (elf->phdr && strtbl_void) { 961 if (elf->phdr && strtbl_void) {
648#define SHOW_NEEDED(B) \ 962#define SHOW_NEEDED(B) \
650 Elf ## B ## _Dyn *dyn; \ 964 Elf ## B ## _Dyn *dyn; \
651 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 965 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
652 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 966 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
653 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 967 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
654 Elf ## B ## _Off offset; \ 968 Elf ## B ## _Off offset; \
969 size_t matched = 0; \
970 /* Walk all the program headers to find the PT_DYNAMIC */ \
655 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 971 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
656 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 972 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) \
973 continue; \
657 offset = EGET(phdr[i].p_offset); \ 974 offset = EGET(phdr[i].p_offset); \
658 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 975 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) \
976 continue; \
977 /* Walk all the dynamic tags to find NEEDED entries */ \
659 dyn = DYN ## B (elf->data + offset); \ 978 dyn = DYN ## B (elf->vdata + offset); \
660 while (EGET(dyn->d_tag) != DT_NULL) { \ 979 while (EGET(dyn->d_tag) != DT_NULL) { \
661 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 980 if (EGET(dyn->d_tag) == DT_NEEDED) { \
662 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 981 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
663 if (offset >= (Elf ## B ## _Off)elf->len) { \ 982 if (offset >= (Elf ## B ## _Off)elf->len) { \
664 ++dyn; \ 983 ++dyn; \
665 continue; \ 984 continue; \
666 } \ 985 } \
667 needed = (char*)(elf->data + offset); \ 986 needed = elf->data + offset; \
668 if (op == 0) { \ 987 if (op == 0) { \
988 /* -n -> print all entries */ \
669 if (!be_wewy_wewy_quiet) { \ 989 if (!be_wewy_wewy_quiet) { \
670 if (*found_needed) xchrcat(ret, ',', ret_len); \ 990 if (*found_needed) xchrcat(ret, ',', ret_len); \
671 if (use_ldcache) \ 991 if (use_ldpath) { \
992 if ((p = lookup_config_lib(elf, needed)) != NULL) \
993 needed = p; \
994 } else if (use_ldcache) { \
672 if ((p = lookup_cache_lib(elf, needed)) != NULL) \ 995 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
673 needed = p; \ 996 needed = p; \
997 } \
674 xstrcat(ret, needed, ret_len); \ 998 xstrcat(ret, needed, ret_len); \
675 } \ 999 } \
676 *found_needed = 1; \ 1000 *found_needed = 1; \
677 } else { \ 1001 } else { \
678 if (!strncmp(find_lib, needed, strlen( !gmatch ? needed : find_lib))) { \ 1002 /* -N -> print matching entries */ \
1003 size_t n; \
1004 const char *find_lib_name; \
1005 \
1006 array_for_each(find_lib_arr, n, find_lib_name) { \
1007 int invert = 1; \
1008 if (find_lib_name[0] == '!') \
1009 invert = 0, ++find_lib_name; \
1010 if (!strcmp(find_lib_name, needed) == invert) \
1011 ++matched; \
1012 } \
1013 \
1014 if (matched == array_cnt(find_lib_arr)) { \
679 *found_lib = 1; \ 1015 *found_lib = 1; \
680 return (be_wewy_wewy_quiet ? NULL : needed); \ 1016 return (be_wewy_wewy_quiet ? NULL : find_lib); \
681 } \ 1017 } \
682 } \ 1018 } \
683 } \ 1019 } \
684 ++dyn; \ 1020 ++dyn; \
685 } \ 1021 } \
714} 1050}
715static char *scanelf_file_bind(elfobj *elf, char *found_bind) 1051static char *scanelf_file_bind(elfobj *elf, char *found_bind)
716{ 1052{
717 unsigned long i; 1053 unsigned long i;
718 struct stat s; 1054 struct stat s;
1055 char dynamic = 0;
719 1056
720 if (!show_bind) return NULL; 1057 if (!show_bind) return NULL;
721 if (!elf->phdr) return NULL; 1058 if (!elf->phdr) return NULL;
722 1059
723#define SHOW_BIND(B) \ 1060#define SHOW_BIND(B) \
725 Elf ## B ## _Dyn *dyn; \ 1062 Elf ## B ## _Dyn *dyn; \
726 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 1063 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
727 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 1064 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
728 Elf ## B ## _Off offset; \ 1065 Elf ## B ## _Off offset; \
729 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 1066 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
730 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 1067 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
1068 dynamic = 1; \
731 offset = EGET(phdr[i].p_offset); \ 1069 offset = EGET(phdr[i].p_offset); \
732 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 1070 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
733 dyn = DYN ## B (elf->data + offset); \ 1071 dyn = DYN ## B (elf->vdata + offset); \
734 while (EGET(dyn->d_tag) != DT_NULL) { \ 1072 while (EGET(dyn->d_tag) != DT_NULL) { \
735 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 1073 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
736 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \ 1074 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \
737 { \ 1075 { \
738 if (be_quiet) return NULL; \ 1076 if (be_quiet) return NULL; \
746 SHOW_BIND(32) 1084 SHOW_BIND(32)
747 SHOW_BIND(64) 1085 SHOW_BIND(64)
748 1086
749 if (be_wewy_wewy_quiet) return NULL; 1087 if (be_wewy_wewy_quiet) return NULL;
750 1088
1089 /* don't output anything if quiet mode and the ELF is static or not setuid */
751 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 1090 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) {
752 return NULL; 1091 return NULL;
753 } else { 1092 } else {
754 *found_bind = 1; 1093 *found_bind = 1;
755 return (char *) "LAZY"; 1094 return (char *)(dynamic ? "LAZY" : "STATIC");
756 } 1095 }
757} 1096}
758static char *scanelf_file_soname(elfobj *elf, char *found_soname) 1097static char *scanelf_file_soname(elfobj *elf, char *found_soname)
759{ 1098{
760 unsigned long i; 1099 unsigned long i;
772 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 1111 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
773 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 1112 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
774 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 1113 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
775 Elf ## B ## _Off offset; \ 1114 Elf ## B ## _Off offset; \
776 /* only look for soname in shared objects */ \ 1115 /* only look for soname in shared objects */ \
777 if (ehdr->e_type != ET_DYN) \ 1116 if (EGET(ehdr->e_type) != ET_DYN) \
778 return NULL; \ 1117 return NULL; \
779 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 1118 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
780 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 1119 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
781 offset = EGET(phdr[i].p_offset); \ 1120 offset = EGET(phdr[i].p_offset); \
782 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 1121 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
783 dyn = DYN ## B (elf->data + offset); \ 1122 dyn = DYN ## B (elf->vdata + offset); \
784 while (EGET(dyn->d_tag) != DT_NULL) { \ 1123 while (EGET(dyn->d_tag) != DT_NULL) { \
785 if (EGET(dyn->d_tag) == DT_SONAME) { \ 1124 if (EGET(dyn->d_tag) == DT_SONAME) { \
786 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 1125 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
787 if (offset >= (Elf ## B ## _Off)elf->len) { \ 1126 if (offset >= (Elf ## B ## _Off)elf->len) { \
788 ++dyn; \ 1127 ++dyn; \
789 continue; \ 1128 continue; \
790 } \ 1129 } \
791 soname = (char*)(elf->data + offset); \ 1130 soname = elf->data + offset; \
792 *found_soname = 1; \ 1131 *found_soname = 1; \
793 return (be_wewy_wewy_quiet ? NULL : soname); \ 1132 return (be_wewy_wewy_quiet ? NULL : soname); \
794 } \ 1133 } \
795 ++dyn; \ 1134 ++dyn; \
796 } \ 1135 } \
799 SHOW_SONAME(64) 1138 SHOW_SONAME(64)
800 } 1139 }
801 1140
802 return NULL; 1141 return NULL;
803} 1142}
1143
1144/*
1145 * We support the symbol form:
1146 * [%[modifiers]%][[+-]<symbol name>][,[.....]]
1147 * If the symbol name is empty, then all symbols are matched.
1148 * If the symbol name is a glob ("*"), then all symbols are dumped (debug).
1149 * Do not rely on this output format at all.
1150 * Otherwise the symbol name is used to search (either regex or string compare).
1151 * If the first char of the symbol name is a plus ("+"), then only match
1152 * defined symbols. If it's a minus ("-"), only match undefined symbols.
1153 * Putting modifiers in between the percent signs allows for more in depth
1154 * filters. There are groups of modifiers. If you don't specify a member
1155 * of a group, then all types in that group are matched. The current
1156 * groups and their types are:
1157 * STT group: STT_NOTYPE:n STT_OBJECT:o STT_FUNC:f STT_FILE:F
1158 * STB group: STB_LOCAL:l STB_GLOBAL:g STB_WEAK:w
1159 * SHN group: SHN_UNDEF:u SHN_ABS:a SHN_COMMON:c {defined}:d
1160 * The "defined" value in the SHN group does not correspond to a SHN_xxx define.
1161 * You can search for multiple symbols at once by seperating with a comma (",").
1162 *
1163 * Some examples:
1164 * ELFs with a weak function "foo":
1165 * scanelf -s %wf%foo <ELFs>
1166 * ELFs that define the symbol "main":
1167 * scanelf -s +main <ELFs>
1168 * scanelf -s %d%main <ELFs>
1169 * ELFs that refer to the undefined symbol "brk":
1170 * scanelf -s -brk <ELFs>
1171 * scanelf -s %u%brk <ELFs>
1172 * All global defined objects in an ELF:
1173 * scanelf -s %ogd% <ELF>
1174 */
1175static void
1176scanelf_match_symname(elfobj *elf, char *found_sym, char **ret, size_t *ret_len, const char *symname,
1177 unsigned int stt, unsigned int stb, unsigned int shn, unsigned long size)
1178{
1179 char *this_sym, *next_sym, saved = saved;
1180
1181 /* allow the user to specify a comma delimited list of symbols to search for */
1182 next_sym = NULL;
1183 do {
1184 bool inc_notype, inc_object, inc_func, inc_file,
1185 inc_local, inc_global, inc_weak,
1186 inc_def, inc_undef, inc_abs, inc_common;
1187
1188 if (next_sym) {
1189 next_sym[-1] = saved;
1190 this_sym = next_sym;
1191 } else
1192 this_sym = find_sym;
1193 if ((next_sym = strchr(this_sym, ','))) {
1194 /* make parsing easier by killing the comma temporarily */
1195 saved = *next_sym;
1196 *next_sym = '\0';
1197 next_sym += 1;
1198 }
1199
1200 /* symbol selection! */
1201 inc_notype = inc_object = inc_func = inc_file = \
1202 inc_local = inc_global = inc_weak = \
1203 inc_def = inc_undef = inc_abs = inc_common = \
1204 (*this_sym != '%');
1205
1206 /* parse the contents of %...% */
1207 if (!inc_notype) {
1208 while (*(this_sym++)) {
1209 if (*this_sym == '%') {
1210 ++this_sym;
1211 break;
1212 }
1213 switch (*this_sym) {
1214 case 'n': inc_notype = true; break;
1215 case 'o': inc_object = true; break;
1216 case 'f': inc_func = true; break;
1217 case 'F': inc_file = true; break;
1218 case 'l': inc_local = true; break;
1219 case 'g': inc_global = true; break;
1220 case 'w': inc_weak = true; break;
1221 case 'd': inc_def = true; break;
1222 case 'u': inc_undef = true; break;
1223 case 'a': inc_abs = true; break;
1224 case 'c': inc_common = true; break;
1225 default: err("invalid symbol selector '%c'", *this_sym);
1226 }
1227 }
1228
1229 /* If no types are matched, not match all */
1230 if (!inc_notype && !inc_object && !inc_func && !inc_file)
1231 inc_notype = inc_object = inc_func = inc_file = true;
1232 if (!inc_local && !inc_global && !inc_weak)
1233 inc_local = inc_global = inc_weak = true;
1234 if (!inc_def && !inc_undef && !inc_abs && !inc_common)
1235 inc_def = inc_undef = inc_abs = inc_common = true;
1236
1237 /* backwards compat for defined/undefined short hand */
1238 } else if (*this_sym == '+') {
1239 inc_undef = false;
1240 ++this_sym;
1241 } else if (*this_sym == '-') {
1242 inc_def = inc_abs = inc_common = false;
1243 ++this_sym;
1244 }
1245
1246 /* filter symbols */
1247 if ((!inc_notype && stt == STT_NOTYPE) || \
1248 (!inc_object && stt == STT_OBJECT) || \
1249 (!inc_func && stt == STT_FUNC ) || \
1250 (!inc_file && stt == STT_FILE ) || \
1251 (!inc_local && stb == STB_LOCAL ) || \
1252 (!inc_global && stb == STB_GLOBAL) || \
1253 (!inc_weak && stb == STB_WEAK ) || \
1254 (!inc_def && shn && shn < SHN_LORESERVE) || \
1255 (!inc_undef && shn == SHN_UNDEF ) || \
1256 (!inc_abs && shn == SHN_ABS ) || \
1257 (!inc_common && shn == SHN_COMMON))
1258 continue;
1259
1260 if (*this_sym == '*') {
1261 /* a "*" symbol gets you debug output */
1262 printf("%s(%s) %5lX %15s %15s %15s %s\n",
1263 ((*found_sym == 0) ? "\n\t" : "\t"),
1264 elf->base_filename,
1265 size,
1266 get_elfstttype(stt),
1267 get_elfstbtype(stb),
1268 get_elfshntype(shn),
1269 symname);
1270 goto matched;
1271
1272 } else {
1273 if (g_match) {
1274 /* regex match the symbol */
1275 if (rematch(this_sym, symname, REG_EXTENDED) != 0)
1276 continue;
1277
1278 } else if (*this_sym) {
1279 /* give empty symbols a "pass", else do a normal compare */
1280 const size_t len = strlen(this_sym);
1281 if (!(strncmp(this_sym, symname, len) == 0 &&
1282 /* Accept unversioned symbol names */
1283 (symname[len] == '\0' || symname[len] == '@')))
1284 continue;
1285 }
1286
1287 if (be_semi_verbose) {
1288 char buf[1024];
1289 snprintf(buf, sizeof(buf), "%lX %s %s",
1290 size,
1291 get_elfstttype(stt),
1292 this_sym);
1293 *ret = xstrdup(buf);
1294 } else {
1295 if (*ret) xchrcat(ret, ',', ret_len);
1296 xstrcat(ret, symname, ret_len);
1297 }
1298
1299 goto matched;
1300 }
1301 } while (next_sym);
1302
1303 return;
1304
1305 matched:
1306 *found_sym = 1;
1307 if (next_sym)
1308 next_sym[-1] = saved;
1309}
1310
804static char *scanelf_file_sym(elfobj *elf, char *found_sym) 1311static const char *scanelf_file_sym(elfobj *elf, char *found_sym)
805{ 1312{
806 unsigned long i;
807 char *ret; 1313 char *ret;
808 void *symtab_void, *strtab_void; 1314 void *symtab_void, *strtab_void;
809 1315
810 if (!find_sym) return NULL; 1316 if (!find_sym) return NULL;
811 ret = find_sym; 1317 ret = NULL;
812 1318
813 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void); 1319 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
814 1320
815 if (symtab_void && strtab_void) { 1321 if (symtab_void && strtab_void) {
816#define FIND_SYM(B) \ 1322#define FIND_SYM(B) \
817 if (elf->elf_class == ELFCLASS ## B) { \ 1323 if (elf->elf_class == ELFCLASS ## B) { \
818 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 1324 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
819 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 1325 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
820 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 1326 Elf ## B ## _Sym *sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
821 unsigned long cnt = EGET(symtab->sh_entsize); \ 1327 Elf ## B ## _Word i, cnt = EGET(symtab->sh_entsize); \
822 char *symname; \ 1328 char *symname; \
1329 size_t ret_len = 0; \
823 if (cnt) \ 1330 if (cnt) \
824 cnt = EGET(symtab->sh_size) / cnt; \ 1331 cnt = EGET(symtab->sh_size) / cnt; \
825 for (i = 0; i < cnt; ++i) { \ 1332 for (i = 0; i < cnt; ++i) { \
1333 if ((void*)sym > elf->data_end) { \
1334 warnf("%s: corrupt ELF symbols - aborting", elf->filename); \
1335 goto break_out; \
1336 } \
826 if (sym->st_name) { \ 1337 if (sym->st_name) { \
1338 /* make sure the symbol name is in acceptable memory range */ \
827 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 1339 symname = elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name); \
828 if ((void*)symname > (void*)elf->data_end) { \ 1340 if ((void*)symname > elf->data_end) { \
829 warnf("%s: corrupt ELF symbols", elf->filename); \ 1341 warnf("%s: corrupt ELF symbols", elf->filename); \
1342 ++sym; \
830 continue; \ 1343 continue; \
831 } \ 1344 } \
832 if (*find_sym == '*') { \ 1345 scanelf_match_symname(elf, found_sym, \
833 printf("%s(%s) %5lX %15s %s\n", \ 1346 &ret, &ret_len, symname, \
834 ((*found_sym == 0) ? "\n\t" : "\t"), \ 1347 ELF##B##_ST_TYPE(EGET(sym->st_info)), \
835 elf->base_filename, \ 1348 ELF##B##_ST_BIND(EGET(sym->st_info)), \
836 (unsigned long)sym->st_size, \ 1349 EGET(sym->st_shndx), \
837 get_elfstttype(sym->st_info), \ 1350 /* st_size can be 64bit, but no one is really that big, so screw em */ \
838 symname); \ 1351 EGET(sym->st_size)); \
839 *found_sym = 1; \
840 } else { \
841 char *this_sym, *next_sym; \
842 this_sym = find_sym; \
843 do { \
844 next_sym = strchr(this_sym, ','); \
845 if (next_sym == NULL) \
846 next_sym = this_sym + strlen(this_sym); \
847 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
848 (strcmp(symname, versioned_symname) == 0)) { \
849 ret = this_sym; \
850 (*found_sym)++; \
851 goto break_out; \
852 } \
853 this_sym = next_sym + 1; \
854 } while (*next_sym != '\0'); \
855 } \
856 } \ 1352 } \
857 ++sym; \ 1353 ++sym; \
858 } } 1354 } \
1355 }
859 FIND_SYM(32) 1356 FIND_SYM(32)
860 FIND_SYM(64) 1357 FIND_SYM(64)
861 } 1358 }
862 1359
863break_out: 1360break_out:
866 if (*find_sym != '*' && *found_sym) 1363 if (*find_sym != '*' && *found_sym)
867 return ret; 1364 return ret;
868 if (be_quiet) 1365 if (be_quiet)
869 return NULL; 1366 return NULL;
870 else 1367 else
871 return (char *)" - "; 1368 return " - ";
872} 1369}
873 1370
1371static const char *scanelf_file_sections(elfobj *elf, char *found_section)
1372{
1373 if (!find_section)
1374 return NULL;
1375
1376#define FIND_SECTION(B) \
1377 if (elf->elf_class == ELFCLASS ## B) { \
1378 size_t matched, n; \
1379 int invert; \
1380 const char *section_name; \
1381 Elf ## B ## _Shdr *section; \
1382 \
1383 matched = 0; \
1384 array_for_each(find_section_arr, n, section_name) { \
1385 invert = (*section_name == '!' ? 1 : 0); \
1386 section = SHDR ## B (elf_findsecbyname(elf, section_name + invert)); \
1387 if ((section == NULL && invert) || (section != NULL && !invert)) \
1388 ++matched; \
1389 } \
1390 \
1391 if (matched == array_cnt(find_section_arr)) \
1392 *found_section = 1; \
1393 }
1394 FIND_SECTION(32)
1395 FIND_SECTION(64)
1396
1397 if (be_wewy_wewy_quiet)
1398 return NULL;
1399
1400 if (*found_section)
1401 return find_section;
1402
1403 if (be_quiet)
1404 return NULL;
1405 else
1406 return " - ";
1407}
874 1408
875/* scan an elf file and show all the fun stuff */ 1409/* scan an elf file and show all the fun stuff */
876#define prints(str) write(fileno(stdout), str, strlen(str)) 1410#define prints(str) ({ ssize_t ret = write(fileno(stdout), str, strlen(str)); ret; })
877static int scanelf_elfobj(elfobj *elf) 1411static int scanelf_elfobj(elfobj *elf)
878{ 1412{
879 unsigned long i; 1413 unsigned long i;
880 char found_pax, found_phdr, found_relro, found_load, found_textrel, 1414 char found_pax, found_phdr, found_relro, found_load, found_textrel,
881 found_rpath, found_needed, found_interp, found_bind, found_soname, 1415 found_rpath, found_needed, found_interp, found_bind, found_soname,
882 found_sym, found_lib, found_file, found_textrels; 1416 found_sym, found_lib, found_file, found_textrels, found_section;
883 static char *out_buffer = NULL; 1417 static char *out_buffer = NULL;
884 static size_t out_len; 1418 static size_t out_len;
885 1419
886 found_pax = found_phdr = found_relro = found_load = found_textrel = \ 1420 found_pax = found_phdr = found_relro = found_load = found_textrel = \
887 found_rpath = found_needed = found_interp = found_bind = found_soname = \ 1421 found_rpath = found_needed = found_interp = found_bind = found_soname = \
888 found_sym = found_lib = found_file = found_textrels = 0; 1422 found_sym = found_lib = found_file = found_textrels = found_section = 0;
889 1423
890 if (be_verbose > 2) 1424 if (be_verbose > 2)
891 printf("%s: scanning file {%s,%s}\n", elf->filename, 1425 printf("%s: scanning file {%s,%s}\n", elf->filename,
892 get_elfeitype(EI_CLASS, elf->elf_class), 1426 get_elfeitype(EI_CLASS, elf->elf_class),
893 get_elfeitype(EI_DATA, elf->data[EI_DATA])); 1427 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
895 printf("%s: scanning file\n", elf->filename); 1429 printf("%s: scanning file\n", elf->filename);
896 1430
897 /* init output buffer */ 1431 /* init output buffer */
898 if (!out_buffer) { 1432 if (!out_buffer) {
899 out_len = sizeof(char) * 80; 1433 out_len = sizeof(char) * 80;
900 out_buffer = (char*)xmalloc(out_len); 1434 out_buffer = xmalloc(out_len);
901 } 1435 }
902 *out_buffer = '\0'; 1436 *out_buffer = '\0';
903 1437
904 /* show the header */ 1438 /* show the header */
905 if (!be_quiet && show_banner) { 1439 if (!be_quiet && show_banner) {
906 for (i = 0; out_format[i]; ++i) { 1440 for (i = 0; out_format[i]; ++i) {
907 if (!IS_MODIFIER(out_format[i])) continue; 1441 if (!IS_MODIFIER(out_format[i])) continue;
908 1442
909 switch (out_format[++i]) { 1443 switch (out_format[++i]) {
1444 case '+': break;
910 case '%': break; 1445 case '%': break;
911 case '#': break; 1446 case '#': break;
912 case 'F': 1447 case 'F':
913 case 'p': 1448 case 'p':
914 case 'f': prints("FILE "); found_file = 1; break; 1449 case 'f': prints("FILE "); found_file = 1; break;
915 case 'o': prints(" TYPE "); break; 1450 case 'o': prints(" TYPE "); break;
916 case 'x': prints(" PAX "); break; 1451 case 'x': prints(" PAX "); break;
917 case 'e': prints("STK/REL/PTL "); break; 1452 case 'e': prints("STK/REL/PTL "); break;
918 case 't': prints("TEXTREL "); break; 1453 case 't': prints("TEXTREL "); break;
919 case 'r': prints("RPATH "); break; 1454 case 'r': prints("RPATH "); break;
1455 case 'M': prints("CLASS "); break;
1456 case 'l':
920 case 'n': prints("NEEDED "); break; 1457 case 'n': prints("NEEDED "); break;
921 case 'i': prints("INTERP "); break; 1458 case 'i': prints("INTERP "); break;
922 case 'b': prints("BIND "); break; 1459 case 'b': prints("BIND "); break;
1460 case 'Z': prints("SIZE "); break;
923 case 'S': prints("SONAME "); break; 1461 case 'S': prints("SONAME "); break;
924 case 's': prints("SYM "); break; 1462 case 's': prints("SYM "); break;
925 case 'N': prints("LIB "); break; 1463 case 'N': prints("LIB "); break;
926 case 'T': prints("TEXTRELS "); break; 1464 case 'T': prints("TEXTRELS "); break;
1465 case 'k': prints("SECTION "); break;
1466 case 'a': prints("ARCH "); break;
1467 case 'I': prints("OSABI "); break;
1468 case 'Y': prints("EABI "); break;
1469 case 'O': prints("PERM "); break;
1470 case 'D': prints("ENDIAN "); break;
927 default: warnf("'%c' has no title ?", out_format[i]); 1471 default: warnf("'%c' has no title ?", out_format[i]);
928 } 1472 }
929 } 1473 }
930 if (!found_file) prints("FILE "); 1474 if (!found_file) prints("FILE ");
931 prints("\n"); 1475 prints("\n");
935 1479
936 /* dump all the good stuff */ 1480 /* dump all the good stuff */
937 for (i = 0; out_format[i]; ++i) { 1481 for (i = 0; out_format[i]; ++i) {
938 const char *out; 1482 const char *out;
939 const char *tmp; 1483 const char *tmp;
940 1484 static char ubuf[sizeof(unsigned long)*2];
941 /* make sure we trim leading spaces in quiet mode */
942 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
943 *out_buffer = '\0';
944
945 if (!IS_MODIFIER(out_format[i])) { 1485 if (!IS_MODIFIER(out_format[i])) {
946 xchrcat(&out_buffer, out_format[i], &out_len); 1486 xchrcat(&out_buffer, out_format[i], &out_len);
947 continue; 1487 continue;
948 } 1488 }
949 1489
950 out = NULL; 1490 out = NULL;
951 be_wewy_wewy_quiet = (out_format[i] == '#'); 1491 be_wewy_wewy_quiet = (out_format[i] == '#');
1492 be_semi_verbose = (out_format[i] == '+');
952 switch (out_format[++i]) { 1493 switch (out_format[++i]) {
1494 case '+':
953 case '%': 1495 case '%':
954 case '#': 1496 case '#':
955 xchrcat(&out_buffer, out_format[i], &out_len); break; 1497 xchrcat(&out_buffer, out_format[i], &out_len); break;
956 case 'F': 1498 case 'F':
957 found_file = 1; 1499 found_file = 1;
983 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1525 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
984 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break; 1526 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
985 case 't': out = scanelf_file_textrel(elf, &found_textrel); break; 1527 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
986 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break; 1528 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
987 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; 1529 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1530 case 'M': out = get_elfeitype(EI_CLASS, elf->data[EI_CLASS]); break;
1531 case 'D': out = get_endian(elf); break;
1532 case 'O': out = strfileperms(elf->filename); break;
988 case 'n': 1533 case 'n':
989 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break; 1534 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
990 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1535 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
991 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1536 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
992 case 'S': out = scanelf_file_soname(elf, &found_soname); break; 1537 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
993 case 's': out = scanelf_file_sym(elf, &found_sym); break; 1538 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1539 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1540 case 'a': out = get_elfemtype(elf); break;
1541 case 'I': out = get_elfosabi(elf); break;
1542 case 'Y': out = get_elf_eabi(elf); break;
1543 case 'Z': snprintf(ubuf, sizeof(ubuf), "%lu", (unsigned long)elf->len); out = ubuf; break;;
994 default: warnf("'%c' has no scan code?", out_format[i]); 1544 default: warnf("'%c' has no scan code?", out_format[i]);
995 } 1545 }
996 if (out) { 1546 if (out)
997 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
998 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
999 xstrncat(&out_buffer, out, &out_len, (tmp-out));
1000 else
1001 xstrcat(&out_buffer, out, &out_len); 1547 xstrcat(&out_buffer, out, &out_len);
1002 }
1003 } 1548 }
1004 1549
1005#define FOUND_SOMETHING() \ 1550#define FOUND_SOMETHING() \
1006 (found_pax || found_phdr || found_relro || found_load || found_textrel || \ 1551 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
1007 found_rpath || found_needed || found_interp || found_bind || \ 1552 found_rpath || found_needed || found_interp || found_bind || \
1008 found_soname || found_sym || found_lib || found_textrels) 1553 found_soname || found_sym || found_lib || found_textrels || found_section )
1009 1554
1010 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1555 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
1011 xchrcat(&out_buffer, ' ', &out_len); 1556 xchrcat(&out_buffer, ' ', &out_len);
1012 xstrcat(&out_buffer, elf->filename, &out_len); 1557 xstrcat(&out_buffer, elf->filename, &out_len);
1013 } 1558 }
1020} 1565}
1021 1566
1022/* scan a single elf */ 1567/* scan a single elf */
1023static int scanelf_elf(const char *filename, int fd, size_t len) 1568static int scanelf_elf(const char *filename, int fd, size_t len)
1024{ 1569{
1025 int ret; 1570 int ret = 1;
1026 elfobj *elf; 1571 elfobj *elf;
1027 1572
1028 /* verify this is real ELF */ 1573 /* verify this is real ELF */
1029 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) { 1574 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1030 if (be_verbose > 2) printf("%s: not an ELF\n", filename); 1575 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1031 return 1; 1576 return 2;
1032 } 1577 }
1033 1578 switch (match_bits) {
1579 case 32:
1580 if (elf->elf_class != ELFCLASS32)
1581 goto label_done;
1582 break;
1583 case 64:
1584 if (elf->elf_class != ELFCLASS64)
1585 goto label_done;
1586 break;
1587 default: break;
1588 }
1034 if (strlen(match_etypes)) { 1589 if (match_etypes) {
1035 char sbuf[126]; 1590 char sbuf[126];
1036 strncpy(sbuf, match_etypes, sizeof(sbuf)); 1591 strncpy(sbuf, match_etypes, sizeof(sbuf));
1037 if (strchr(match_etypes, ',') != NULL) { 1592 if (strchr(match_etypes, ',') != NULL) {
1038 char *p; 1593 char *p;
1039 while((p = strrchr(sbuf, ',')) != NULL) { 1594 while ((p = strrchr(sbuf, ',')) != NULL) {
1040 *p = 0; 1595 *p = 0;
1041 if (atoi(p+1) == get_etype(elf)) 1596 if (etype_lookup(p+1) == get_etype(elf))
1042 goto label_ret; 1597 goto label_ret;
1043 } 1598 }
1044 } 1599 }
1045 if (atoi(sbuf) != get_etype(elf)) { 1600 if (etype_lookup(sbuf) != get_etype(elf))
1046 ret = 1;
1047 goto label_done; 1601 goto label_done;
1048 }
1049 } 1602 }
1050 1603
1051label_ret: 1604label_ret:
1052 ret = scanelf_elfobj(elf); 1605 ret = scanelf_elfobj(elf);
1053 1606
1066 1619
1067 ar = ar_open_fd(filename, fd); 1620 ar = ar_open_fd(filename, fd);
1068 if (ar == NULL) 1621 if (ar == NULL)
1069 return 1; 1622 return 1;
1070 1623
1071 ar_buffer = (char*)mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0); 1624 ar_buffer = mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1072 while ((m=ar_next(ar)) != NULL) { 1625 while ((m = ar_next(ar)) != NULL) {
1626 off_t cur_pos = lseek(fd, 0, SEEK_CUR);
1627 if (cur_pos == -1)
1628 errp("lseek() failed");
1073 elf = readelf_buffer(m->name, ar_buffer+lseek(fd,0,SEEK_CUR), m->size); 1629 elf = readelf_buffer(m->name, ar_buffer + cur_pos, m->size);
1074 if (elf) { 1630 if (elf) {
1075 scanelf_elfobj(elf); 1631 scanelf_elfobj(elf);
1076 unreadelf(elf); 1632 unreadelf(elf);
1077 } 1633 }
1078 } 1634 }
1079 munmap(ar_buffer, len); 1635 munmap(ar_buffer, len);
1080 1636
1081 return 0; 1637 return 0;
1082} 1638}
1083/* scan a file which may be an elf or an archive or some other magical beast */ 1639/* scan a file which may be an elf or an archive or some other magical beast */
1084static void scanelf_file(const char *filename) 1640static int scanelf_fileat(int dir_fd, const char *filename, const struct stat *st_cache)
1085{ 1641{
1642 const struct stat *st = st_cache;
1086 struct stat st; 1643 struct stat symlink_st;
1087 int fd; 1644 int fd;
1088 1645
1089 /* make sure 'filename' exists */
1090 if (lstat(filename, &st) == -1) {
1091 if (be_verbose > 2) printf("%s: does not exist\n", filename);
1092 return;
1093 }
1094
1095 /* always handle regular files and handle symlinked files if no -y */ 1646 /* always handle regular files and handle symlinked files if no -y */
1096 if (S_ISLNK(st.st_mode)) { 1647 if (S_ISLNK(st->st_mode)) {
1097 if (!scan_symlink) return; 1648 if (!scan_symlink)
1098 stat(filename, &st); 1649 return 1;
1650 fstatat(dir_fd, filename, &symlink_st, 0);
1651 st = &symlink_st;
1099 } 1652 }
1653
1100 if (!S_ISREG(st.st_mode)) { 1654 if (!S_ISREG(st->st_mode)) {
1101 if (be_verbose > 2) printf("%s: skipping non-file\n", filename); 1655 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1102 return; 1656 return 1;
1103 } 1657 }
1104 1658
1105 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1) 1659 if (match_perms) {
1660 if ((st->st_mode | match_perms) != st->st_mode)
1661 return 1;
1662 }
1663 fd = openat(dir_fd, filename, (fix_elf ? O_RDWR : O_RDONLY) | O_CLOEXEC);
1664 if (fd == -1)
1106 return; 1665 return 1;
1107 1666
1108 if (scanelf_elf(filename, fd, st.st_size) == 1 && scan_archives) 1667 if (scanelf_elf(filename, fd, st->st_size) == 2) {
1109 /* if it isn't an ELF, maybe it's an .a archive */ 1668 /* if it isn't an ELF, maybe it's an .a archive */
1669 if (scan_archives)
1110 scanelf_archive(filename, fd, st.st_size); 1670 scanelf_archive(filename, fd, st->st_size);
1111 1671
1672 /*
1673 * unreadelf() implicitly closes its fd, so only close it
1674 * when we are returning it in the non-ELF case
1675 */
1112 close(fd); 1676 close(fd);
1677 }
1678
1679 return 0;
1113} 1680}
1114 1681
1115/* scan a directory for ET_EXEC files and print when we find one */ 1682/* scan a directory for ET_EXEC files and print when we find one */
1116static void scanelf_dir(const char *path) 1683static int scanelf_dirat(int dir_fd, const char *path)
1117{ 1684{
1118 register DIR *dir; 1685 register DIR *dir;
1119 register struct dirent *dentry; 1686 register struct dirent *dentry;
1120 struct stat st_top, st; 1687 struct stat st_top, st;
1121 char buf[__PAX_UTILS_PATH_MAX]; 1688 char buf[__PAX_UTILS_PATH_MAX], *subpath;
1122 size_t pathlen = 0, len = 0; 1689 size_t pathlen = 0, len = 0;
1690 int ret = 0;
1691 int subdir_fd;
1123 1692
1124 /* make sure path exists */ 1693 /* make sure path exists */
1125 if (lstat(path, &st_top) == -1) { 1694 if (fstatat(dir_fd, path, &st_top, AT_SYMLINK_NOFOLLOW) == -1) {
1126 if (be_verbose > 2) printf("%s: does not exist\n", path); 1695 if (be_verbose > 2) printf("%s: does not exist\n", path);
1127 return; 1696 return 1;
1128 } 1697 }
1129 1698
1130 /* ok, if it isn't a directory, assume we can open it */ 1699 /* ok, if it isn't a directory, assume we can open it */
1131 if (!S_ISDIR(st_top.st_mode)) { 1700 if (!S_ISDIR(st_top.st_mode))
1132 scanelf_file(path); 1701 return scanelf_fileat(dir_fd, path, &st_top);
1133 return;
1134 }
1135 1702
1136 /* now scan the dir looking for fun stuff */ 1703 /* now scan the dir looking for fun stuff */
1137 if ((dir = opendir(path)) == NULL) { 1704 subdir_fd = openat(dir_fd, path, O_RDONLY|O_CLOEXEC);
1138 warnf("could not opendir %s: %s", path, strerror(errno)); 1705 if (subdir_fd == -1)
1706 dir = NULL;
1707 else
1708 dir = fdopendir(subdir_fd);
1709 if (dir == NULL) {
1710 if (subdir_fd != -1)
1711 close(subdir_fd);
1712 warnfp("could not opendir(%s)", path);
1139 return; 1713 return 1;
1140 } 1714 }
1141 if (be_verbose > 1) printf("%s: scanning dir\n", path); 1715 if (be_verbose > 1) printf("%s: scanning dir\n", path);
1142 1716
1143 pathlen = strlen(path); 1717 subpath = stpcpy(buf, path);
1718 if (subpath[-1] != '/')
1719 *subpath++ = '/';
1720 pathlen = subpath - buf;
1144 while ((dentry = readdir(dir))) { 1721 while ((dentry = readdir(dir))) {
1145 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1722 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
1146 continue; 1723 continue;
1724
1725 if (fstatat(subdir_fd, dentry->d_name, &st, AT_SYMLINK_NOFOLLOW) == -1)
1726 continue;
1727
1147 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1728 len = strlen(dentry->d_name);
1148 if (len >= sizeof(buf)) { 1729 if (len + pathlen + 1 >= sizeof(buf)) {
1149 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path, 1730 warnf("Skipping '%s%s': len > sizeof(buf); %zu > %zu\n",
1150 (unsigned long)len, (unsigned long)sizeof(buf)); 1731 path, dentry->d_name, len + pathlen + 1, sizeof(buf));
1151 continue; 1732 continue;
1152 } 1733 }
1153 sprintf(buf, "%s/%s", path, dentry->d_name); 1734 memcpy(subpath, dentry->d_name, len);
1154 if (lstat(buf, &st) != -1) { 1735 subpath[len] = '\0';
1736
1155 if (S_ISREG(st.st_mode)) 1737 if (S_ISREG(st.st_mode))
1156 scanelf_file(buf); 1738 ret = scanelf_fileat(dir_fd, buf, &st);
1157 else if (dir_recurse && S_ISDIR(st.st_mode)) { 1739 else if (dir_recurse && S_ISDIR(st.st_mode)) {
1158 if (dir_crossmount || (st_top.st_dev == st.st_dev)) 1740 if (dir_crossmount || (st_top.st_dev == st.st_dev))
1159 scanelf_dir(buf); 1741 ret = scanelf_dirat(dir_fd, buf);
1160 }
1161 } 1742 }
1162 } 1743 }
1163 closedir(dir); 1744 closedir(dir);
1164}
1165 1745
1746 return ret;
1747}
1748static int scanelf_dir(const char *path)
1749{
1750 return scanelf_dirat(root_fd, root_rel_path(path));
1751}
1752
1166static int scanelf_from_file(char *filename) 1753static int scanelf_from_file(const char *filename)
1167{ 1754{
1168 FILE *fp = NULL; 1755 FILE *fp;
1169 char *p; 1756 char *p, *path;
1170 char path[__PAX_UTILS_PATH_MAX]; 1757 size_t len;
1758 int ret;
1171 1759
1172 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1760 if (strcmp(filename, "-") == 0)
1173 fp = stdin; 1761 fp = stdin;
1174 else if ((fp = fopen(filename, "r")) == NULL) 1762 else if ((fp = fopen(filename, "r")) == NULL)
1175 return 1; 1763 return 1;
1176 1764
1177 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) { 1765 path = NULL;
1766 len = 0;
1767 ret = 0;
1768 while (getline(&path, &len, fp) != -1) {
1178 if ((p = strchr(path, '\n')) != NULL) 1769 if ((p = strchr(path, '\n')) != NULL)
1179 *p = 0; 1770 *p = 0;
1180 search_path = path; 1771 search_path = path;
1181 scanelf_dir(path); 1772 ret = scanelf_dir(path);
1182 } 1773 }
1774 free(path);
1775
1183 if (fp != stdin) 1776 if (fp != stdin)
1184 fclose(fp); 1777 fclose(fp);
1778
1185 return 0; 1779 return ret;
1186} 1780}
1187 1781
1188static void load_ld_so_conf() 1782#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__)
1783
1784static int _load_ld_cache_config(const char *fname)
1189{ 1785{
1190 FILE *fp = NULL; 1786 FILE *fp = NULL;
1191 char *p; 1787 char *p, *path;
1192 char path[__PAX_UTILS_PATH_MAX]; 1788 size_t len;
1193 int i = 0; 1789 int curr_fd = -1;
1194 1790
1195 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1791 fp = fopenat_r(root_fd, root_rel_path(fname));
1792 if (fp == NULL)
1196 return; 1793 return -1;
1197 1794
1198 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) { 1795 path = NULL;
1199 if (*path != '/') 1796 len = 0;
1200 continue; 1797 while (getline(&path, &len, fp) != -1) {
1201
1202 if ((p = strrchr(path, '\r')) != NULL) 1798 if ((p = strrchr(path, '\r')) != NULL)
1203 *p = 0; 1799 *p = 0;
1204 if ((p = strchr(path, '\n')) != NULL) 1800 if ((p = strchr(path, '\n')) != NULL)
1205 *p = 0; 1801 *p = 0;
1206 1802
1207 ldpaths[i++] = xstrdup(path); 1803 /* recursive includes of the same file will make this segfault. */
1804 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) {
1805 glob_t gl;
1806 size_t x;
1807 const char *gpath;
1208 1808
1209 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1809 /* re-use existing path buffer ... need to be creative */
1210 break; 1810 if (path[8] != '/')
1811 gpath = memcpy(path + 3, "/etc/", 5);
1812 else
1813 gpath = path + 8;
1814 if (root_fd != AT_FDCWD) {
1815 if (curr_fd == -1) {
1816 curr_fd = open(".", O_RDONLY|O_CLOEXEC);
1817 if (fchdir(root_fd))
1818 errp("unable to change to root dir");
1819 }
1820 gpath = root_rel_path(gpath);
1821 }
1822
1823 if (glob(gpath, 0, NULL, &gl) == 0) {
1824 for (x = 0; x < gl.gl_pathc; ++x) {
1825 /* try to avoid direct loops */
1826 if (strcmp(gl.gl_pathv[x], fname) == 0)
1827 continue;
1828 _load_ld_cache_config(gl.gl_pathv[x]);
1829 }
1830 globfree(&gl);
1831 }
1832
1833 /* failed globs are ignored by glibc */
1834 continue;
1211 } 1835 }
1212 ldpaths[i] = NULL; 1836
1837 if (*path != '/')
1838 continue;
1839
1840 xarraypush_str(ldpaths, path);
1841 }
1842 free(path);
1213 1843
1214 fclose(fp); 1844 fclose(fp);
1845
1846 if (curr_fd != -1) {
1847 if (fchdir(curr_fd))
1848 /* don't care */;
1849 close(curr_fd);
1850 }
1851
1852 return 0;
1853}
1854
1855#elif defined(__FreeBSD__) || defined(__DragonFly__)
1856
1857static int _load_ld_cache_config(const char *fname)
1858{
1859 FILE *fp = NULL;
1860 char *b = NULL, *p;
1861 struct elfhints_hdr hdr;
1862
1863 fp = fopenat_r(root_fd, root_rel_path(fname));
1864 if (fp == NULL)
1865 return -1;
1866
1867 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) ||
1868 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 ||
1869 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1)
1870 {
1871 fclose(fp);
1872 return -1;
1873 }
1874
1875 b = xmalloc(hdr.dirlistlen + 1);
1876 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) {
1877 fclose(fp);
1878 free(b);
1879 return -1;
1880 }
1881
1882 while ((p = strsep(&b, ":"))) {
1883 if (*p == '\0')
1884 continue;
1885 xarraypush_str(ldpaths, p);
1886 }
1887
1888 free(b);
1889 fclose(fp);
1890 return 0;
1891}
1892
1893#else
1894#ifdef __ELF__
1895#warning Cache config support not implemented for your target
1896#endif
1897static int _load_ld_cache_config(const char *fname)
1898{
1899 return 0;
1900}
1901#endif
1902
1903static void load_ld_cache_config(const char *fname)
1904{
1905 bool scan_l, scan_ul, scan_ull;
1906 size_t n;
1907 const char *ldpath;
1908
1909 _load_ld_cache_config(fname);
1910
1911 scan_l = scan_ul = scan_ull = false;
1912 if (array_cnt(ldpaths)) {
1913 array_for_each(ldpaths, n, ldpath) {
1914 if (!scan_l && !strcmp(ldpath, "/lib")) scan_l = true;
1915 if (!scan_ul && !strcmp(ldpath, "/usr/lib")) scan_ul = true;
1916 if (!scan_ull && !strcmp(ldpath, "/usr/local/lib")) scan_ull = true;
1917 }
1918 }
1919
1920 if (!scan_l) xarraypush_str(ldpaths, "/lib");
1921 if (!scan_ul) xarraypush_str(ldpaths, "/usr/lib");
1922 if (!scan_ull) xarraypush_str(ldpaths, "/usr/local/lib");
1215} 1923}
1216 1924
1217/* scan /etc/ld.so.conf for paths */ 1925/* scan /etc/ld.so.conf for paths */
1218static void scanelf_ldpath() 1926static void scanelf_ldpath(void)
1219{ 1927{
1220 char scan_l, scan_ul, scan_ull; 1928 size_t n;
1221 int i = 0; 1929 const char *ldpath;
1222 1930
1223 if (!ldpaths[0]) 1931 array_for_each(ldpaths, n, ldpath)
1224 err("Unable to load any paths from ld.so.conf");
1225
1226 scan_l = scan_ul = scan_ull = 0;
1227
1228 while (ldpaths[i]) {
1229 if (!scan_l && !strcmp(ldpaths[i], "/lib")) scan_l = 1;
1230 if (!scan_ul && !strcmp(ldpaths[i], "/usr/lib")) scan_ul = 1;
1231 if (!scan_ull && !strcmp(ldpaths[i], "/usr/local/lib")) scan_ull = 1;
1232 scanelf_dir(ldpaths[i]); 1932 scanelf_dir(ldpath);
1233 ++i;
1234 }
1235
1236 if (!scan_l) scanelf_dir("/lib");
1237 if (!scan_ul) scanelf_dir("/usr/lib");
1238 if (!scan_ull) scanelf_dir("/usr/local/lib");
1239} 1933}
1240 1934
1241/* scan env PATH for paths */ 1935/* scan env PATH for paths */
1242static void scanelf_envpath() 1936static void scanelf_envpath(void)
1243{ 1937{
1244 char *path, *p; 1938 char *path, *p;
1245 1939
1246 path = getenv("PATH"); 1940 path = getenv("PATH");
1247 if (!path) 1941 if (!path)
1254 } 1948 }
1255 1949
1256 free(path); 1950 free(path);
1257} 1951}
1258 1952
1259 1953/* usage / invocation handling functions */ /* Free Flags: c d j u w G H J K P Q U W */
1260/* usage / invocation handling functions */
1261#define PARSE_FLAGS "plRmyAXxetrnLibSs:gN:TaqvF:f:o:E:BhV" 1954#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DIYO:ZCBhV"
1262#define a_argument required_argument 1955#define a_argument required_argument
1263static struct option const long_opts[] = { 1956static struct option const long_opts[] = {
1264 {"path", no_argument, NULL, 'p'}, 1957 {"path", no_argument, NULL, 'p'},
1265 {"ldpath", no_argument, NULL, 'l'}, 1958 {"ldpath", no_argument, NULL, 'l'},
1959 {"use-ldpath",no_argument, NULL, 129},
1960 {"root", a_argument, NULL, 128},
1266 {"recursive", no_argument, NULL, 'R'}, 1961 {"recursive", no_argument, NULL, 'R'},
1267 {"mount", no_argument, NULL, 'm'}, 1962 {"mount", no_argument, NULL, 'm'},
1268 {"symlink", no_argument, NULL, 'y'}, 1963 {"symlink", no_argument, NULL, 'y'},
1269 {"archives", no_argument, NULL, 'A'}, 1964 {"archives", no_argument, NULL, 'A'},
1270 {"ldcache", no_argument, NULL, 'L'}, 1965 {"ldcache", no_argument, NULL, 'L'},
1271 {"fix", no_argument, NULL, 'X'}, 1966 {"fix", no_argument, NULL, 'X'},
1967 {"setpax", a_argument, NULL, 'z'},
1272 {"pax", no_argument, NULL, 'x'}, 1968 {"pax", no_argument, NULL, 'x'},
1273 {"header", no_argument, NULL, 'e'}, 1969 {"header", no_argument, NULL, 'e'},
1274 {"textrel", no_argument, NULL, 't'}, 1970 {"textrel", no_argument, NULL, 't'},
1275 {"rpath", no_argument, NULL, 'r'}, 1971 {"rpath", no_argument, NULL, 'r'},
1276 {"needed", no_argument, NULL, 'n'}, 1972 {"needed", no_argument, NULL, 'n'},
1277 {"interp", no_argument, NULL, 'i'}, 1973 {"interp", no_argument, NULL, 'i'},
1278 {"bind", no_argument, NULL, 'b'}, 1974 {"bind", no_argument, NULL, 'b'},
1279 {"soname", no_argument, NULL, 'S'}, 1975 {"soname", no_argument, NULL, 'S'},
1280 {"symbol", a_argument, NULL, 's'}, 1976 {"symbol", a_argument, NULL, 's'},
1977 {"section", a_argument, NULL, 'k'},
1281 {"lib", a_argument, NULL, 'N'}, 1978 {"lib", a_argument, NULL, 'N'},
1282 {"gmatch", no_argument, NULL, 'g'}, 1979 {"gmatch", no_argument, NULL, 'g'},
1283 {"textrels", no_argument, NULL, 'T'}, 1980 {"textrels", no_argument, NULL, 'T'},
1284 {"etype", a_argument, NULL, 'E'}, 1981 {"etype", a_argument, NULL, 'E'},
1982 {"bits", a_argument, NULL, 'M'},
1983 {"endian", no_argument, NULL, 'D'},
1984 {"osabi", no_argument, NULL, 'I'},
1985 {"eabi", no_argument, NULL, 'Y'},
1986 {"perms", a_argument, NULL, 'O'},
1987 {"size", no_argument, NULL, 'Z'},
1285 {"all", no_argument, NULL, 'a'}, 1988 {"all", no_argument, NULL, 'a'},
1286 {"quiet", no_argument, NULL, 'q'}, 1989 {"quiet", no_argument, NULL, 'q'},
1287 {"verbose", no_argument, NULL, 'v'}, 1990 {"verbose", no_argument, NULL, 'v'},
1288 {"format", a_argument, NULL, 'F'}, 1991 {"format", a_argument, NULL, 'F'},
1289 {"from", a_argument, NULL, 'f'}, 1992 {"from", a_argument, NULL, 'f'},
1290 {"file", a_argument, NULL, 'o'}, 1993 {"file", a_argument, NULL, 'o'},
1994 {"nocolor", no_argument, NULL, 'C'},
1291 {"nobanner", no_argument, NULL, 'B'}, 1995 {"nobanner", no_argument, NULL, 'B'},
1292 {"help", no_argument, NULL, 'h'}, 1996 {"help", no_argument, NULL, 'h'},
1293 {"version", no_argument, NULL, 'V'}, 1997 {"version", no_argument, NULL, 'V'},
1294 {NULL, no_argument, NULL, 0x0} 1998 {NULL, no_argument, NULL, 0x0}
1295}; 1999};
1296 2000
1297static const char *opts_help[] = { 2001static const char * const opts_help[] = {
1298 "Scan all directories in PATH environment", 2002 "Scan all directories in PATH environment",
1299 "Scan all directories in /etc/ld.so.conf", 2003 "Scan all directories in /etc/ld.so.conf",
2004 "Use ld.so.conf to show full path (use with -r/-n)",
2005 "Root directory (use with -l or -p)",
1300 "Scan directories recursively", 2006 "Scan directories recursively",
1301 "Don't recursively cross mount points", 2007 "Don't recursively cross mount points",
1302 "Don't scan symlinks", 2008 "Don't scan symlinks",
1303 "Scan archives (.a files)", 2009 "Scan archives (.a files)",
1304 "Utilize ld.so.cache information (use with -r/-n)", 2010 "Utilize ld.so.cache to show full path (use with -r/-n)",
1305 "Try and 'fix' bad things (use with -r/-e)\n", 2011 "Try and 'fix' bad things (use with -r/-e)",
2012 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
1306 "Print PaX markings", 2013 "Print PaX markings",
1307 "Print GNU_STACK/PT_LOAD markings", 2014 "Print GNU_STACK/PT_LOAD markings",
1308 "Print TEXTREL information", 2015 "Print TEXTREL information",
1309 "Print RPATH information", 2016 "Print RPATH information",
1310 "Print NEEDED information", 2017 "Print NEEDED information",
1311 "Print INTERP information", 2018 "Print INTERP information",
1312 "Print BIND information", 2019 "Print BIND information",
1313 "Print SONAME information", 2020 "Print SONAME information",
1314 "Find a specified symbol", 2021 "Find a specified symbol",
2022 "Find a specified section",
1315 "Find a specified library", 2023 "Find a specified library",
1316 "Use strncmp to match libraries. (use with -N)", 2024 "Use regex matching rather than string compare (use with -s)",
1317 "Locate cause of TEXTREL", 2025 "Locate cause of TEXTREL",
2026 "Print only ELF files matching etype ET_DYN,ET_EXEC ...",
1318 "Print only ELF files matching numeric constant", 2027 "Print only ELF files matching numeric bits",
1319 "Print all scanned info (-x -e -t -r -b)\n", 2028 "Print Endianness",
2029 "Print OSABI",
2030 "Print EABI (EM_ARM Only)",
2031 "Print only ELF files matching octal permissions",
2032 "Print ELF file size",
2033 "Print all useful/simple info\n",
1320 "Only output 'bad' things", 2034 "Only output 'bad' things",
1321 "Be verbose (can be specified more than once)", 2035 "Be verbose (can be specified more than once)",
1322 "Use specified format for output", 2036 "Use specified format for output",
1323 "Read input stream from a filename", 2037 "Read input stream from a filename",
1324 "Write output stream to a filename", 2038 "Write output stream to a filename",
2039 "Don't emit color in output",
1325 "Don't display the header", 2040 "Don't display the header",
1326 "Print this help and exit", 2041 "Print this help and exit",
1327 "Print version and exit", 2042 "Print version and exit",
1328 NULL 2043 NULL
1329}; 2044};
1333{ 2048{
1334 unsigned long i; 2049 unsigned long i;
1335 printf("* Scan ELF binaries for stuff\n\n" 2050 printf("* Scan ELF binaries for stuff\n\n"
1336 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0); 2051 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
1337 printf("Options: -[%s]\n", PARSE_FLAGS); 2052 printf("Options: -[%s]\n", PARSE_FLAGS);
1338 for (i = 0; long_opts[i].name; ++i) 2053 for (i = 0; long_opts[i].name; ++i) {
2054 /* first output the short flag if it has one */
2055 if (long_opts[i].val > '~')
2056 printf(" ");
2057 else
2058 printf(" -%c, ", long_opts[i].val);
2059
2060 /* then the long flag */
1339 if (long_opts[i].has_arg == no_argument) 2061 if (long_opts[i].has_arg == no_argument)
1340 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 2062 printf("--%-14s", long_opts[i].name);
1341 long_opts[i].name, opts_help[i]);
1342 else 2063 else
1343 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 2064 printf("--%-7s <arg> ", long_opts[i].name);
1344 long_opts[i].name, opts_help[i]);
1345 2065
1346 if (status != EXIT_SUCCESS) 2066 /* finally the help text */
1347 exit(status); 2067 printf("* %s\n", opts_help[i]);
2068 }
1348 2069
1349 puts("\nThe format modifiers for the -F option are:"); 2070 puts("\nFor more information, see the scanelf(1) manpage");
1350 puts(" F Filename \tx PaX Flags \te STACK/RELRO");
1351 puts(" t TEXTREL \tr RPATH \tn NEEDED");
1352 puts(" i INTERP \tb BIND \ts symbol");
1353 puts(" N library \to Type \tT TEXTRELs");
1354 puts(" S SONAME");
1355 puts(" p filename (with search path removed)");
1356 puts(" f filename (short name/basename)");
1357 puts("Prefix each modifier with '%' (verbose) or '#' (silent)");
1358
1359 exit(status); 2071 exit(status);
1360} 2072}
1361 2073
1362/* parse command line arguments and preform needed actions */ 2074/* parse command line arguments and preform needed actions */
2075#define do_pax_state(option, flag) \
2076 if (islower(option)) { \
2077 flags &= ~PF_##flag; \
2078 flags |= PF_NO##flag; \
2079 } else { \
2080 flags &= ~PF_NO##flag; \
2081 flags |= PF_##flag; \
2082 }
1363static void parseargs(int argc, char *argv[]) 2083static int parseargs(int argc, char *argv[])
1364{ 2084{
1365 int i; 2085 int i;
1366 char *from_file = NULL; 2086 const char *from_file = NULL;
2087 int ret = 0;
2088 char load_cache_config = 0;
1367 2089
1368 opterr = 0; 2090 opterr = 0;
1369 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 2091 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
1370 switch (i) { 2092 switch (i) {
1371 2093
1379 case 'f': 2101 case 'f':
1380 if (from_file) warn("You prob don't want to specify -f twice"); 2102 if (from_file) warn("You prob don't want to specify -f twice");
1381 from_file = optarg; 2103 from_file = optarg;
1382 break; 2104 break;
1383 case 'E': 2105 case 'E':
1384 strncpy(match_etypes, optarg, sizeof(match_etypes)); 2106 match_etypes = optarg;
2107 break;
2108 case 'M':
2109 match_bits = atoi(optarg);
2110 if (match_bits == 0) {
2111 if (strcmp(optarg, "ELFCLASS32") == 0)
2112 match_bits = 32;
2113 if (strcmp(optarg, "ELFCLASS64") == 0)
2114 match_bits = 64;
2115 }
2116 break;
2117 case 'O':
2118 if (sscanf(optarg, "%o", &match_perms) == -1)
2119 match_bits = 0;
1385 break; 2120 break;
1386 case 'o': { 2121 case 'o': {
1387 FILE *fp = NULL;
1388 if ((fp = freopen(optarg, "w", stdout)) == NULL) 2122 if (freopen(optarg, "w", stdout) == NULL)
1389 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 2123 errp("Could not freopen(%s)", optarg);
1390 SET_STDOUT(fp);
1391 break; 2124 break;
1392 } 2125 }
1393 2126 case 'k':
2127 xarraypush_str(find_section_arr, optarg);
2128 break;
1394 case 's': { 2129 case 's': {
1395 if (find_sym) warn("You prob don't want to specify -s twice"); 2130 if (find_sym) warn("You prob don't want to specify -s twice");
1396 find_sym = optarg; 2131 find_sym = optarg;
1397 versioned_symname = (char*)xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
1398 sprintf(versioned_symname, "%s@", find_sym);
1399 break; 2132 break;
1400 } 2133 }
1401 case 'N': { 2134 case 'N':
1402 if (find_lib) warn("You prob don't want to specify -N twice"); 2135 xarraypush_str(find_lib_arr, optarg);
1403 find_lib = optarg;
1404 break; 2136 break;
1405 }
1406
1407 case 'F': { 2137 case 'F': {
1408 if (out_format) warn("You prob don't want to specify -F twice"); 2138 if (out_format) warn("You prob don't want to specify -F twice");
1409 out_format = optarg; 2139 out_format = optarg;
1410 break; 2140 break;
1411 } 2141 }
2142 case 'z': {
2143 unsigned long flags = (PF_NOEMUTRAMP | PF_NORANDEXEC);
2144 size_t x;
1412 2145
1413 case 'g': gmatch = 1; /* break; any reason we dont breal; here ? */ 2146 for (x = 0; x < strlen(optarg); x++) {
2147 switch (optarg[x]) {
2148 case 'p':
2149 case 'P':
2150 do_pax_state(optarg[x], PAGEEXEC);
2151 break;
2152 case 's':
2153 case 'S':
2154 do_pax_state(optarg[x], SEGMEXEC);
2155 break;
2156 case 'm':
2157 case 'M':
2158 do_pax_state(optarg[x], MPROTECT);
2159 break;
2160 case 'e':
2161 case 'E':
2162 do_pax_state(optarg[x], EMUTRAMP);
2163 break;
2164 case 'r':
2165 case 'R':
2166 do_pax_state(optarg[x], RANDMMAP);
2167 break;
2168 case 'x':
2169 case 'X':
2170 do_pax_state(optarg[x], RANDEXEC);
2171 break;
2172 default:
2173 break;
2174 }
2175 }
2176 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
2177 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
2178 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
2179 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
2180 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
2181 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
2182 setpax = flags;
2183 break;
2184 }
2185 case 'Z': show_size = 1; break;
1414 case 'L': use_ldcache = 1; break; 2186 case 'g': g_match = 1; break;
2187 case 'L': load_cache_config = use_ldcache = 1; break;
1415 case 'y': scan_symlink = 0; break; 2188 case 'y': scan_symlink = 0; break;
1416 case 'A': scan_archives = 1; break; 2189 case 'A': scan_archives = 1; break;
2190 case 'C': color_init(true); break;
1417 case 'B': show_banner = 0; break; 2191 case 'B': show_banner = 0; break;
1418 case 'l': scan_ldpath = 1; break; 2192 case 'l': load_cache_config = scan_ldpath = 1; break;
1419 case 'p': scan_envpath = 1; break; 2193 case 'p': scan_envpath = 1; break;
1420 case 'R': dir_recurse = 1; break; 2194 case 'R': dir_recurse = 1; break;
1421 case 'm': dir_crossmount = 0; break; 2195 case 'm': dir_crossmount = 0; break;
1422 case 'X': ++fix_elf; break; 2196 case 'X': ++fix_elf; break;
1423 case 'x': show_pax = 1; break; 2197 case 'x': show_pax = 1; break;
1429 case 'b': show_bind = 1; break; 2203 case 'b': show_bind = 1; break;
1430 case 'S': show_soname = 1; break; 2204 case 'S': show_soname = 1; break;
1431 case 'T': show_textrels = 1; break; 2205 case 'T': show_textrels = 1; break;
1432 case 'q': be_quiet = 1; break; 2206 case 'q': be_quiet = 1; break;
1433 case 'v': be_verbose = (be_verbose % 20) + 1; break; 2207 case 'v': be_verbose = (be_verbose % 20) + 1; break;
1434 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break; 2208 case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break;
1435 2209 case 'D': show_endian = 1; break;
2210 case 'I': show_osabi = 1; break;
2211 case 'Y': show_eabi = 1; break;
2212 case 128:
2213 root_fd = open(optarg, O_RDONLY|O_CLOEXEC);
2214 if (root_fd == -1)
2215 err("Could not open root: %s", optarg);
2216 break;
2217 case 129: load_cache_config = use_ldpath = 1; break;
1436 case ':': 2218 case ':':
1437 err("Option '%c' is missing parameter", optopt); 2219 err("Option '%c' is missing parameter", optopt);
1438 case '?': 2220 case '?':
1439 err("Unknown option '%c' or argument missing", optopt); 2221 err("Unknown option '%c' or argument missing", optopt);
1440 default: 2222 default:
1441 err("Unhandled option '%c'; please report this", i); 2223 err("Unhandled option '%c'; please report this", i);
1442 } 2224 }
1443 } 2225 }
1444 2226 if (show_textrels && be_verbose)
2227 has_objdump = bin_in_path("objdump");
2228 /* flatten arrays for display */
2229 if (array_cnt(find_lib_arr))
2230 find_lib = array_flatten_str(find_lib_arr);
2231 if (array_cnt(find_section_arr))
2232 find_section = array_flatten_str(find_section_arr);
1445 /* let the format option override all other options */ 2233 /* let the format option override all other options */
1446 if (out_format) { 2234 if (out_format) {
1447 show_pax = show_phdr = show_textrel = show_rpath = \ 2235 show_pax = show_phdr = show_textrel = show_rpath = \
1448 show_needed = show_interp = show_bind = show_soname = \ 2236 show_needed = show_interp = show_bind = show_soname = \
1449 show_textrels = 0; 2237 show_textrels = show_perms = show_endian = show_size = \
2238 show_osabi = show_eabi = 0;
1450 for (i = 0; out_format[i]; ++i) { 2239 for (i = 0; out_format[i]; ++i) {
1451 if (!IS_MODIFIER(out_format[i])) continue; 2240 if (!IS_MODIFIER(out_format[i])) continue;
1452 2241
1453 switch (out_format[++i]) { 2242 switch (out_format[++i]) {
2243 case '+': break;
1454 case '%': break; 2244 case '%': break;
1455 case '#': break; 2245 case '#': break;
1456 case 'F': break; 2246 case 'F': break;
1457 case 'p': break; 2247 case 'p': break;
1458 case 'f': break; 2248 case 'f': break;
2249 case 'k': break;
1459 case 's': break; 2250 case 's': break;
1460 case 'N': break; 2251 case 'N': break;
1461 case 'o': break; 2252 case 'o': break;
2253 case 'a': break;
2254 case 'M': break;
2255 case 'Z': show_size = 1; break;
2256 case 'D': show_endian = 1; break;
2257 case 'I': show_osabi = 1; break;
2258 case 'Y': show_eabi = 1; break;
2259 case 'O': show_perms = 1; break;
1462 case 'x': show_pax = 1; break; 2260 case 'x': show_pax = 1; break;
1463 case 'e': show_phdr = 1; break; 2261 case 'e': show_phdr = 1; break;
1464 case 't': show_textrel = 1; break; 2262 case 't': show_textrel = 1; break;
1465 case 'r': show_rpath = 1; break; 2263 case 'r': show_rpath = 1; break;
1466 case 'n': show_needed = 1; break; 2264 case 'n': show_needed = 1; break;
1467 case 'i': show_interp = 1; break; 2265 case 'i': show_interp = 1; break;
1468 case 'b': show_bind = 1; break; 2266 case 'b': show_bind = 1; break;
1469 case 'S': show_soname = 1; break; 2267 case 'S': show_soname = 1; break;
1470 case 'T': show_textrels = 1; break; 2268 case 'T': show_textrels = 1; break;
1471 default: 2269 default:
1472 err("Invalid format specifier '%c' (byte %i)", 2270 err("invalid format specifier '%c' (byte %i)",
1473 out_format[i], i+1); 2271 out_format[i], i+1);
1474 } 2272 }
1475 } 2273 }
1476 2274
1477 /* construct our default format */ 2275 /* construct our default format */
1478 } else { 2276 } else {
1479 size_t fmt_len = 30; 2277 size_t fmt_len = 30;
1480 out_format = (char*)xmalloc(sizeof(char) * fmt_len); 2278 out_format = xmalloc(sizeof(char) * fmt_len);
2279 *out_format = '\0';
1481 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); 2280 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
1482 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); 2281 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
2282 if (show_perms) xstrcat(&out_format, "%O ", &fmt_len);
2283 if (show_size) xstrcat(&out_format, "%Z ", &fmt_len);
2284 if (show_endian) xstrcat(&out_format, "%D ", &fmt_len);
2285 if (show_osabi) xstrcat(&out_format, "%I ", &fmt_len);
2286 if (show_eabi) xstrcat(&out_format, "%Y ", &fmt_len);
1483 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len); 2287 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
1484 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); 2288 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
1485 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); 2289 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
1486 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); 2290 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
1487 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 2291 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
1488 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 2292 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1489 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len); 2293 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1490 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len); 2294 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
1491 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 2295 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
2296 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1492 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len); 2297 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
1493 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 2298 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
1494 } 2299 }
1495 if (be_verbose > 2) printf("Format: %s\n", out_format); 2300 if (be_verbose > 2) printf("Format: %s\n", out_format);
1496 2301
1497 /* now lets actually do the scanning */ 2302 /* now lets actually do the scanning */
1498 if (scan_ldpath || use_ldcache) 2303 if (load_cache_config)
1499 load_ld_so_conf(); 2304 load_ld_cache_config(__PAX_UTILS_DEFAULT_LD_CACHE_CONFIG);
1500 if (scan_ldpath) scanelf_ldpath(); 2305 if (scan_ldpath) scanelf_ldpath();
1501 if (scan_envpath) scanelf_envpath(); 2306 if (scan_envpath) scanelf_envpath();
2307 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath)
2308 from_file = "-";
1502 if (from_file) { 2309 if (from_file) {
1503 scanelf_from_file(from_file); 2310 scanelf_from_file(from_file);
1504 from_file = *argv; 2311 from_file = *argv;
1505 } 2312 }
1506 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 2313 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
1507 err("Nothing to scan !?"); 2314 err("Nothing to scan !?");
1508 while (optind < argc) { 2315 while (optind < argc) {
1509 search_path = argv[optind++]; 2316 search_path = argv[optind++];
1510 scanelf_dir(search_path); 2317 ret = scanelf_dir(search_path);
1511 } 2318 }
1512 2319
1513 /* clean up */ 2320 /* clean up */
1514 if (versioned_symname) free(versioned_symname);
1515 for (i = 0; ldpaths[i]; ++i)
1516 free(ldpaths[i]); 2321 xarrayfree(ldpaths);
2322 xarrayfree(find_lib_arr);
2323 xarrayfree(find_section_arr);
2324 free(find_lib);
2325 free(find_section);
1517 2326
1518 if (ldcache != 0) 2327 if (ldcache != 0)
1519 munmap(ldcache, ldcache_size); 2328 munmap(ldcache, ldcache_size);
1520}
1521
1522
1523
1524/* utility funcs */
1525static char *xstrdup(const char *s)
1526{
1527 char *ret = strdup(s);
1528 if (!ret) err("Could not strdup(): %s", strerror(errno));
1529 return ret; 2329 return ret;
1530} 2330}
1531static void *xmalloc(size_t size)
1532{
1533 void *ret = malloc(size);
1534 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size);
1535 return ret;
1536}
1537static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n)
1538{
1539 size_t new_len;
1540 2331
1541 new_len = strlen(*dst) + strlen(src); 2332static char **get_split_env(const char *envvar)
1542 if (*curr_len <= new_len) {
1543 *curr_len = new_len + (*curr_len / 2);
1544 *dst = realloc(*dst, *curr_len);
1545 if (!*dst)
1546 err("could not realloc() %li bytes", (unsigned long)*curr_len);
1547 }
1548
1549 if (n)
1550 strncat(*dst, src, n);
1551 else
1552 strcat(*dst, src);
1553}
1554static inline void xchrcat(char **dst, const char append, size_t *curr_len)
1555{ 2333{
1556 static char my_app[2]; 2334 const char *delims = " \t\n";
1557 my_app[0] = append; 2335 char **envvals = NULL;
1558 my_app[1] = '\0'; 2336 char *env, *s;
1559 xstrcat(dst, my_app, curr_len); 2337 int nentry;
1560}
1561 2338
2339 if ((env = getenv(envvar)) == NULL)
2340 return NULL;
1562 2341
2342 env = xstrdup(env);
2343 if (env == NULL)
2344 return NULL;
2345
2346 s = strtok(env, delims);
2347 if (s == NULL) {
2348 free(env);
2349 return NULL;
2350 }
2351
2352 nentry = 0;
2353 while (s != NULL) {
2354 ++nentry;
2355 envvals = xrealloc(envvals, sizeof(*envvals) * (nentry+1));
2356 envvals[nentry-1] = s;
2357 s = strtok(NULL, delims);
2358 }
2359 envvals[nentry] = NULL;
2360
2361 /* don't want to free(env) as it contains the memory that backs
2362 * the envvals array of strings */
2363 return envvals;
2364}
2365
2366static void parseenv(void)
2367{
2368 color_init(false);
2369 qa_textrels = get_split_env("QA_TEXTRELS");
2370 qa_execstack = get_split_env("QA_EXECSTACK");
2371 qa_wx_load = get_split_env("QA_WX_LOAD");
2372}
2373
2374#ifdef __PAX_UTILS_CLEANUP
2375static void cleanup(void)
2376{
2377 free(out_format);
2378 free(qa_textrels);
2379 free(qa_execstack);
2380 free(qa_wx_load);
2381}
2382#endif
1563 2383
1564int main(int argc, char *argv[]) 2384int main(int argc, char *argv[])
1565{ 2385{
2386 int ret;
1566 if (argc < 2) 2387 if (argc < 2)
1567 usage(EXIT_FAILURE); 2388 usage(EXIT_FAILURE);
2389 parseenv();
1568 parseargs(argc, argv); 2390 ret = parseargs(argc, argv);
1569 fclose(stdout); 2391 fclose(stdout);
1570#ifdef __BOUNDS_CHECKING_ON 2392#ifdef __PAX_UTILS_CLEANUP
1571 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()"); 2393 cleanup();
2394 warn("The calls to add/delete heap should be off:\n"
2395 "\t- 1 due to the out_buffer not being freed in scanelf_fileat()\n"
2396 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD");
1572#endif 2397#endif
1573 return EXIT_SUCCESS; 2398 return ret;
1574} 2399}
2400
2401/* Match filename against entries in matchlist, return TRUE
2402 * if the file is listed */
2403static int file_matches_list(const char *filename, char **matchlist)
2404{
2405 char **file;
2406 char *match;
2407 char buf[__PAX_UTILS_PATH_MAX];
2408
2409 if (matchlist == NULL)
2410 return 0;
2411
2412 for (file = matchlist; *file != NULL; file++) {
2413 if (search_path) {
2414 snprintf(buf, sizeof(buf), "%s%s", search_path, *file);
2415 match = buf;
2416 } else {
2417 match = *file;
2418 }
2419 if (fnmatch(match, filename, 0) == 0)
2420 return 1;
2421 }
2422 return 0;
2423}

Legend:
Removed from v.1.119  
changed lines
  Added in v.1.244

  ViewVC Help
Powered by ViewVC 1.1.20