/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.54 Revision 1.127
1/* 1/*
2 * Copyright 2003 Ned Ludd <solar@gentoo.org>
3 * Copyright 1999-2005 Gentoo Foundation 2 * Copyright 2003-2006 Gentoo Foundation
4 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
5 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.54 2005/05/18 21:16:32 vapier Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.127 2006/02/17 07:13:54 solar Exp $
6 * 5 *
7 ******************************************************************** 6 * Copyright 2003-2006 Ned Ludd - <solar@gentoo.org>
8 * This program is free software; you can redistribute it and/or 7 * Copyright 2004-2006 Mike Frysinger - <vapier@gentoo.org>
9 * modify it under the terms of the GNU General Public License as
10 * published by the Free Software Foundation; either version 2 of the
11 * License, or (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place - Suite 330, Boston,
21 * MA 02111-1307, USA.
22 */ 8 */
23 9
24#include <stdio.h>
25#include <stdlib.h>
26#include <sys/types.h>
27#define __USE_GNU
28#include <string.h>
29#include <errno.h>
30#include <unistd.h>
31#include <sys/stat.h>
32#include <dirent.h>
33#include <getopt.h>
34#include <assert.h>
35
36#include "paxelf.h" 10#include "paxinc.h"
37 11
38static const char *rcsid = "$Id: scanelf.c,v 1.54 2005/05/18 21:16:32 vapier Exp $"; 12static const char *rcsid = "$Id: scanelf.c,v 1.127 2006/02/17 07:13:54 solar Exp $";
39#define argv0 "scanelf" 13#define argv0 "scanelf"
40 14
15#define IS_MODIFIER(c) (c == '%' || c == '#')
16
41 17
42 18
43/* prototypes */ 19/* prototypes */
20static int scanelf_elfobj(elfobj *elf);
21static int scanelf_elf(const char *filename, int fd, size_t len);
22static int scanelf_archive(const char *filename, int fd, size_t len);
44static void scanelf_file(const char *filename); 23static void scanelf_file(const char *filename);
45static void scanelf_dir(const char *path); 24static void scanelf_dir(const char *path);
46static void scanelf_ldpath(); 25static void scanelf_ldpath(void);
47static void scanelf_envpath(); 26static void scanelf_envpath(void);
48static void usage(int status); 27static void usage(int status);
49static void parseargs(int argc, char *argv[]); 28static void parseargs(int argc, char *argv[]);
50static char *xstrdup(char *s); 29static char *xstrdup(const char *s);
51static void *xmalloc(size_t size); 30static void *xmalloc(size_t size);
52static void xstrcat(char **dst, const char *src, size_t *curr_len); 31static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n);
32#define xstrcat(dst,src,curr_len) xstrncat(dst,src,curr_len,0)
53static inline void xchrcat(char **dst, const char append, size_t *curr_len); 33static inline void xchrcat(char **dst, const char append, size_t *curr_len);
54 34
55/* variables to control behavior */ 35/* variables to control behavior */
36static char match_etypes[126] = "";
56static char *ldpaths[256]; 37static char *ldpaths[256];
57static char scan_ldpath = 0; 38static char scan_ldpath = 0;
58static char scan_envpath = 0; 39static char scan_envpath = 0;
59static char scan_symlink = 1; 40static char scan_symlink = 1;
41static char scan_archives = 0;
60static char dir_recurse = 0; 42static char dir_recurse = 0;
61static char dir_crossmount = 1; 43static char dir_crossmount = 1;
62static char show_pax = 0; 44static char show_pax = 0;
63static char show_stack = 0; 45static char show_phdr = 0;
64static char show_textrel = 0; 46static char show_textrel = 0;
65static char show_rpath = 0; 47static char show_rpath = 0;
66static char show_needed = 0; 48static char show_needed = 0;
67static char show_interp = 0; 49static char show_interp = 0;
68static char show_bind = 0; 50static char show_bind = 0;
51static char show_soname = 0;
52static char show_textrels = 0;
69static char show_banner = 1; 53static char show_banner = 1;
70static char be_quiet = 0; 54static char be_quiet = 0;
71static char be_verbose = 0; 55static char be_verbose = 0;
56static char be_wewy_wewy_quiet = 0;
72static char *find_sym = NULL, *versioned_symname = NULL; 57static char *find_sym = NULL, *versioned_symname = NULL;
58static char *find_lib = NULL;
59static char *find_section = NULL;
73static char *out_format = NULL; 60static char *out_format = NULL;
61static char *search_path = NULL;
62static char fix_elf = 0;
63static char gmatch = 0;
64static char use_ldcache = 0;
74 65
75 66int match_bits = 0;
67caddr_t ldcache = 0;
68size_t ldcache_size = 0;
69unsigned long setpax = 0UL;
76 70
77/* sub-funcs for scanelf_file() */ 71/* sub-funcs for scanelf_file() */
72static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
73{
74 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
75#define GET_SYMTABS(B) \
76 if (elf->elf_class == ELFCLASS ## B) { \
77 Elf ## B ## _Shdr *symtab, *strtab, *dynsym, *dynstr; \
78 /* debug sections */ \
79 symtab = SHDR ## B (elf_findsecbyname(elf, ".symtab")); \
80 strtab = SHDR ## B (elf_findsecbyname(elf, ".strtab")); \
81 /* runtime sections */ \
82 dynsym = SHDR ## B (elf_findsecbyname(elf, ".dynsym")); \
83 dynstr = SHDR ## B (elf_findsecbyname(elf, ".dynstr")); \
84 if (symtab && dynsym) { \
85 *sym = (void*)((EGET(symtab->sh_size) > EGET(dynsym->sh_size)) ? symtab : dynsym); \
86 } else { \
87 *sym = (void*)(symtab ? symtab : dynsym); \
88 } \
89 if (strtab && dynstr) { \
90 *tab = (void*)((EGET(strtab->sh_size) > EGET(dynstr->sh_size)) ? strtab : dynstr); \
91 } else { \
92 *tab = (void*)(strtab ? strtab : dynstr); \
93 } \
94 }
95 GET_SYMTABS(32)
96 GET_SYMTABS(64)
97}
98
78static char *scanelf_file_pax(elfobj *elf, char *found_pax) 99static char *scanelf_file_pax(elfobj *elf, char *found_pax)
79{ 100{
80 static char *paxflags; 101 static char ret[7];
102 unsigned long i, shown;
81 103
82 if (!show_pax) return NULL; 104 if (!show_pax) return NULL;
83 105
84 paxflags = pax_short_hf_flags(PAX_FLAGS(elf));
85 if (!be_quiet || (be_quiet && strncmp(paxflags, "PeMRxS", 6))) {
86 *found_pax = 1;
87 return paxflags;
88 }
89
90 return NULL;
91}
92static char *scanelf_file_stack(elfobj *elf, char *found_stack, char *found_relro)
93{
94 static char ret[8];
95 char *found;
96 unsigned long i, off, shown;
97
98 if (!show_stack) return NULL;
99
100 shown = 0; 106 shown = 0;
101 strcpy(ret, "--- ---"); 107 memset(&ret, 0, sizeof(ret));
102 108
103 if (elf->phdr) { 109 if (elf->phdr) {
104#define SHOW_STACK(B) \ 110#define SHOW_PAX(B) \
105 if (elf->elf_class == ELFCLASS ## B) { \ 111 if (elf->elf_class == ELFCLASS ## B) { \
106 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 112 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
107 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 113 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
108 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 114 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
109 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \ 115 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
110 found = found_stack; \
111 off = 0; \
112 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
113 found = found_relro; \
114 off = 4; \
115 } else \
116 continue; \ 116 continue; \
117 if (fix_elf && setpax) { \
118 /* set the paxctl flags */ \
119 ESET(phdr[i].p_flags, setpax); \
120 } \
117 if (be_quiet && !(EGET(phdr[i].p_flags) & PF_X)) \ 121 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \
118 continue; \ 122 continue; \
119 memcpy(ret+off, gnu_short_stack_flags(EGET(phdr[i].p_flags)), 3); \ 123 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
120 *found = 1; \ 124 *found_pax = 1; \
121 ++shown; \ 125 ++shown; \
126 break; \
122 } \ 127 } \
123 } 128 }
124 SHOW_STACK(32) 129 SHOW_PAX(32)
125 SHOW_STACK(64) 130 SHOW_PAX(64)
131 }
132
133 /* fall back to EI_PAX if no PT_PAX was found */
134 if (!*ret) {
135 static char *paxflags;
136
137 if (fix_elf && setpax) {
138 /* set the chpax settings */
139 // ESET(EHDR ## B (elf->ehdr)->e_ident[EI_PAX]), setpax);
126 } 140 }
127 141
128 if (be_quiet && !shown) 142 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
143 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) {
144 *found_pax = 1;
145 return (be_wewy_wewy_quiet ? NULL : paxflags);
146 }
147 strncpy(ret, paxflags, sizeof(ret));
148 }
149
150 if (be_wewy_wewy_quiet || (be_quiet && !shown))
129 return NULL; 151 return NULL;
130 else 152 else
131 return ret; 153 return ret;
132} 154}
155
156static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
157{
158 static char ret[12];
159 char *found;
160 unsigned long i, shown, multi_stack, multi_relro, multi_load;
161 int max_pt_load;
162
163 if (!show_phdr) return NULL;
164
165 memcpy(ret, "--- --- ---\0", 12);
166
167 shown = 0;
168 multi_stack = multi_relro = multi_load = 0;
169 max_pt_load = elf_max_pt_load(elf);
170
171#define NOTE_GNU_STACK ".note.GNU-stack"
172#define SHOW_PHDR(B) \
173 if (elf->elf_class == ELFCLASS ## B) { \
174 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
175 Elf ## B ## _Off offset; \
176 uint32_t flags, check_flags; \
177 if (elf->phdr != NULL) { \
178 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
179 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
180 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
181 if (multi_stack++) warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
182 found = found_phdr; \
183 offset = 0; \
184 check_flags = PF_X; \
185 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
186 if (multi_relro++) warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
187 found = found_relro; \
188 offset = 4; \
189 check_flags = PF_X; \
190 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
191 if (ehdr->e_type == ET_DYN || ehdr->e_type == ET_EXEC) \
192 if (multi_load++ > max_pt_load) warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
193 found = found_load; \
194 offset = 8; \
195 check_flags = PF_W|PF_X; \
196 } else \
197 continue; \
198 flags = EGET(phdr[i].p_flags); \
199 if (be_quiet && ((flags & check_flags) != check_flags)) \
200 continue; \
201 if (fix_elf && ((flags & PF_X) != flags)) { \
202 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
203 ret[3] = ret[7] = '!'; \
204 flags = EGET(phdr[i].p_flags); \
205 } \
206 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
207 *found = 1; \
208 ++shown; \
209 } \
210 } else if (elf->shdr != NULL) { \
211 /* no program headers which means this is prob an object file */ \
212 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
213 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
214 char *str; \
215 if ((void*)strtbl > (void*)elf->data_end) \
216 goto skip_this_shdr##B; \
217 check_flags = SHF_WRITE|SHF_EXECINSTR; \
218 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
219 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
220 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
221 str = elf->data + offset; \
222 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
223 if (!strcmp(str, NOTE_GNU_STACK)) { \
224 if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \
225 flags = EGET(shdr[i].sh_flags); \
226 if (be_quiet && ((flags & check_flags) != check_flags)) \
227 continue; \
228 ++*found_phdr; \
229 shown = 1; \
230 if (flags & SHF_WRITE) ret[0] = 'W'; \
231 if (flags & SHF_ALLOC) ret[1] = 'A'; \
232 if (flags & SHF_EXECINSTR) ret[2] = 'X'; \
233 if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \
234 break; \
235 } \
236 } \
237 skip_this_shdr##B: \
238 if (!multi_stack) { \
239 *found_phdr = 1; \
240 shown = 1; \
241 memcpy(ret, "!WX", 3); \
242 } \
243 } \
244 }
245 SHOW_PHDR(32)
246 SHOW_PHDR(64)
247
248 if (be_wewy_wewy_quiet || (be_quiet && !shown))
249 return NULL;
250 else
251 return ret;
252}
133static char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 253static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
134{ 254{
135 static char *ret = "TEXTREL"; 255 static const char *ret = "TEXTREL";
136 unsigned long i; 256 unsigned long i;
137 257
138 if (!show_textrel) return NULL; 258 if (!show_textrel && !show_textrels) return NULL;
139 259
140 if (elf->phdr) { 260 if (elf->phdr) {
141#define SHOW_TEXTREL(B) \ 261#define SHOW_TEXTREL(B) \
142 if (elf->elf_class == ELFCLASS ## B) { \ 262 if (elf->elf_class == ELFCLASS ## B) { \
143 Elf ## B ## _Dyn *dyn; \ 263 Elf ## B ## _Dyn *dyn; \
144 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 264 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
145 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 265 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
146 Elf ## B ## _Off offset; \ 266 Elf ## B ## _Off offset; \
147 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 267 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
148 if (phdr[i].p_type != PT_DYNAMIC) continue; \ 268 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \
149 offset = EGET(phdr[i].p_offset); \ 269 offset = EGET(phdr[i].p_offset); \
150 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 270 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
151 dyn = DYN ## B (elf->data + offset); \ 271 dyn = DYN ## B (elf->data + offset); \
152 while (EGET(dyn->d_tag) != DT_NULL) { \ 272 while (EGET(dyn->d_tag) != DT_NULL) { \
153 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 273 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
154 *found_textrel = 1; \ 274 *found_textrel = 1; \
155 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ 275 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \
156 return ret; \ 276 return (be_wewy_wewy_quiet ? NULL : ret); \
157 } \ 277 } \
158 ++dyn; \ 278 ++dyn; \
159 } \ 279 } \
160 } } 280 } }
161 SHOW_TEXTREL(32) 281 SHOW_TEXTREL(32)
162 SHOW_TEXTREL(64) 282 SHOW_TEXTREL(64)
163 } 283 }
164 284
165 if (be_quiet) 285 if (be_quiet || be_wewy_wewy_quiet)
166 return NULL; 286 return NULL;
167 else 287 else
168 return " - "; 288 return " - ";
169} 289}
290static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
291{
292 unsigned long s, r, rmax;
293 void *symtab_void, *strtab_void, *text_void;
294
295 if (!show_textrels) return NULL;
296
297 /* don't search for TEXTREL's if the ELF doesn't have any */
298 if (!*found_textrel) scanelf_file_textrel(elf, found_textrel);
299 if (!*found_textrel) return NULL;
300
301 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
302 text_void = elf_findsecbyname(elf, ".text");
303
304 if (symtab_void && strtab_void && text_void && elf->shdr) {
305#define SHOW_TEXTRELS(B) \
306 if (elf->elf_class == ELFCLASS ## B) { \
307 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
308 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
309 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
310 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
311 Elf ## B ## _Shdr *text = SHDR ## B (text_void); \
312 Elf ## B ## _Addr vaddr = EGET(text->sh_addr); \
313 uint ## B ## _t memsz = EGET(text->sh_size); \
314 Elf ## B ## _Rel *rel; \
315 Elf ## B ## _Rela *rela; \
316 /* search the section headers for relocations */ \
317 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \
318 uint32_t sh_type = EGET(shdr[s].sh_type); \
319 if (sh_type == SHT_REL) { \
320 rel = REL ## B (elf->data + EGET(shdr[s].sh_offset)); \
321 rela = NULL; \
322 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \
323 } else if (sh_type == SHT_RELA) { \
324 rel = NULL; \
325 rela = RELA ## B (elf->data + EGET(shdr[s].sh_offset)); \
326 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \
327 } else \
328 continue; \
329 /* now see if any of the relocs are in the .text */ \
330 for (r = 0; r < rmax; ++r) { \
331 unsigned long sym_max; \
332 Elf ## B ## _Addr offset_tmp; \
333 Elf ## B ## _Sym *func; \
334 Elf ## B ## _Sym *sym; \
335 Elf ## B ## _Addr r_offset; \
336 uint ## B ## _t r_info; \
337 if (sh_type == SHT_REL) { \
338 r_offset = EGET(rel[r].r_offset); \
339 r_info = EGET(rel[r].r_info); \
340 } else { \
341 r_offset = EGET(rela[r].r_offset); \
342 r_info = EGET(rela[r].r_info); \
343 } \
344 /* make sure this relocation is inside of the .text */ \
345 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \
346 if (be_verbose <= 2) continue; \
347 } else \
348 *found_textrels = 1; \
349 /* locate this relocation symbol name */ \
350 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
351 if ((void*)sym > (void*)elf->data_end) { \
352 warn("%s: corrupt ELF symbol", elf->filename); \
353 continue; \
354 } \
355 sym_max = ELF ## B ## _R_SYM(r_info); \
356 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
357 sym += sym_max; \
358 else \
359 sym = NULL; \
360 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
361 /* show the raw details about this reloc */ \
362 printf(" %s: ", elf->base_filename); \
363 if (sym && sym->st_name) \
364 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \
365 else \
366 printf("(memory/fake?)"); \
367 printf(" [0x%lX]", (unsigned long)r_offset); \
368 /* now try to find the closest symbol that this rel is probably in */ \
369 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
370 func = NULL; \
371 offset_tmp = 0; \
372 while (sym_max--) { \
373 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \
374 func = sym; \
375 offset_tmp = EGET(sym->st_value); \
376 } \
377 ++sym; \
378 } \
379 printf(" in "); \
380 if (func && func->st_name) \
381 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(func->st_name))); \
382 else \
383 printf("(NULL: fake?)"); \
384 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
385 } \
386 } }
387 SHOW_TEXTRELS(32)
388 SHOW_TEXTRELS(64)
389 }
390 if (!*found_textrels)
391 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
392
393 return NULL;
394}
395
396static void rpath_security_checks(elfobj *, char *, const char *);
397static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
398{
399 struct stat st;
400 switch (*item) {
401 case '/': break;
402 case '.':
403 warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename);
404 break;
405 case ':':
406 case '\0':
407 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
408 break;
409 case '$':
410 if (fstat(elf->fd, &st) != -1)
411 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
412 warnf("Security problem with %s='%s' in %s with mode set of %o",
413 dt_type, item, elf->filename, st.st_mode & 07777);
414 break;
415 default:
416 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
417 break;
418 }
419}
170static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) 420static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
171{ 421{
172 /* TODO: when checking RPATH entries, check each subpath (between :) in ld.so.conf */
173 unsigned long i, s; 422 unsigned long i, s;
174 char *rpath, *runpath, **r; 423 char *rpath, *runpath, **r;
175 void *strtbl_void; 424 void *strtbl_void;
176 425
177 if (!show_rpath) return; 426 if (!show_rpath) return;
185 Elf ## B ## _Dyn *dyn; \ 434 Elf ## B ## _Dyn *dyn; \
186 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 435 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
187 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 436 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
188 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 437 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
189 Elf ## B ## _Off offset; \ 438 Elf ## B ## _Off offset; \
190 Elf ## B ## _Sxword word; \ 439 Elf ## B ## _Xword word; \
191 /* Scan all the program headers */ \ 440 /* Scan all the program headers */ \
192 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 441 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
193 /* Just scan dynamic headers */ \ 442 /* Just scan dynamic headers */ \
194 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 443 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \
195 offset = EGET(phdr[i].p_offset); \ 444 offset = EGET(phdr[i].p_offset); \
205 ++dyn; \ 454 ++dyn; \
206 continue; \ 455 continue; \
207 } \ 456 } \
208 /* Verify the memory is somewhat sane */ \ 457 /* Verify the memory is somewhat sane */ \
209 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 458 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
210 if (offset < elf->len) { \ 459 if (offset < (Elf ## B ## _Off)elf->len) { \
211 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ 460 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
212 *r = (char*)(elf->data + offset); \ 461 *r = (char*)(elf->data + offset); \
462 /* cache the length in case we need to nuke this section later on */ \
463 if (fix_elf) \
464 offset = strlen(*r); \
213 /* If quiet, don't output paths in ld.so.conf */ \ 465 /* If quiet, don't output paths in ld.so.conf */ \
214 if (be_quiet) \ 466 if (be_quiet) { \
467 size_t len; \
468 char *start, *end; \
469 /* note that we only 'chop' off leading known paths. */ \
470 /* since *r is read-only memory, we can only move the ptr forward. */ \
471 start = *r; \
472 /* scan each path in : delimited list */ \
473 while (start) { \
474 rpath_security_checks(elf, start, get_elfdtype(word)); \
475 end = strchr(start, ':'); \
476 len = (end ? abs(end - start) : strlen(start)); \
477 if (use_ldcache) \
215 for (s = 0; ldpaths[s]; ++s) \ 478 for (s = 0; ldpaths[s]; ++s) \
216 if (!strcmp(ldpaths[s], *r)) { \ 479 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \
217 *r = NULL; \ 480 *r = end; \
481 /* corner case ... if RPATH reads "/usr/lib:", we want \
482 * to show ':' rather than '' */ \
483 if (end && end[1] != '\0') \
484 (*r)++; \
485 break; \
486 } \
487 if (!*r || !end) \
218 break; \ 488 break; \
489 else \
490 start = start + len + 1; \
491 } \
492 } \
493 if (*r) { \
494 if (fix_elf > 2 || (fix_elf && **r == '\0')) { \
495 /* just nuke it */ \
496 nuke_it##B: \
497 memset(*r, 0x00, offset); \
498 *r = NULL; \
499 ESET(dyn->d_tag, DT_DEBUG); \
500 ESET(dyn->d_un.d_ptr, 0); \
501 } else if (fix_elf) { \
502 /* try to clean "bad" paths */ \
503 size_t len, tmpdir_len; \
504 char *start, *end; \
505 const char *tmpdir; \
506 start = *r; \
507 tmpdir = (getenv("TMPDIR") ? : "."); \
508 tmpdir_len = strlen(tmpdir); \
509 while (1) { \
510 end = strchr(start, ':'); \
511 if (start == end) { \
512 eat_this_path##B: \
513 len = strlen(end); \
514 memmove(start, end+1, len); \
515 start[len-1] = '\0'; \
516 end = start - 1; \
517 } else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \
518 if (!end) { \
519 if (start == *r) \
520 goto nuke_it##B; \
521 *--start = '\0'; \
522 } else \
523 goto eat_this_path##B; \
524 } \
525 if (!end) \
526 break; \
527 start = end + 1; \
219 } \ 528 } \
529 if (**r == '\0') \
530 goto nuke_it##B; \
531 } \
532 if (*r) \
220 if (*r) *found_rpath = 1; \ 533 *found_rpath = 1; \
534 } \
221 } \ 535 } \
222 ++dyn; \ 536 ++dyn; \
223 } \ 537 } \
224 } } 538 } }
225 SHOW_RPATH(32) 539 SHOW_RPATH(32)
226 SHOW_RPATH(64) 540 SHOW_RPATH(64)
227 } 541 }
542
543 if (be_wewy_wewy_quiet) return;
228 544
229 if (rpath && runpath) { 545 if (rpath && runpath) {
230 if (!strcmp(rpath, runpath)) { 546 if (!strcmp(rpath, runpath)) {
231 xstrcat(ret, runpath, ret_len); 547 xstrcat(ret, runpath, ret_len);
232 } else { 548 } else {
240 } else if (rpath || runpath) 556 } else if (rpath || runpath)
241 xstrcat(ret, (runpath ? runpath : rpath), ret_len); 557 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
242 else if (!be_quiet) 558 else if (!be_quiet)
243 xstrcat(ret, " - ", ret_len); 559 xstrcat(ret, " - ", ret_len);
244} 560}
561
562#define LDSO_CACHE_MAGIC "ld.so-"
563#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
564#define LDSO_CACHE_VER "1.7.0"
565#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
566#define FLAG_ANY -1
567#define FLAG_TYPE_MASK 0x00ff
568#define FLAG_LIBC4 0x0000
569#define FLAG_ELF 0x0001
570#define FLAG_ELF_LIBC5 0x0002
571#define FLAG_ELF_LIBC6 0x0003
572#define FLAG_REQUIRED_MASK 0xff00
573#define FLAG_SPARC_LIB64 0x0100
574#define FLAG_IA64_LIB64 0x0200
575#define FLAG_X8664_LIB64 0x0300
576#define FLAG_S390_LIB64 0x0400
577#define FLAG_POWERPC_LIB64 0x0500
578#define FLAG_MIPS64_LIBN32 0x0600
579#define FLAG_MIPS64_LIBN64 0x0700
580
581static char *lookup_cache_lib(elfobj *, char *);
582static char *lookup_cache_lib(elfobj *elf, char *fname)
583{
584 int fd = 0;
585 char *strs;
586 static char buf[__PAX_UTILS_PATH_MAX] = "";
587 const char *cachefile = "/etc/ld.so.cache";
588 struct stat st;
589
590 typedef struct {
591 char magic[LDSO_CACHE_MAGIC_LEN];
592 char version[LDSO_CACHE_VER_LEN];
593 int nlibs;
594 } header_t;
595 header_t *header;
596
597 typedef struct {
598 int flags;
599 int sooffset;
600 int liboffset;
601 } libentry_t;
602 libentry_t *libent;
603
604 if (fname == NULL)
605 return NULL;
606
607 if (ldcache == 0) {
608 if (stat(cachefile, &st) || (fd = open(cachefile, O_RDONLY)) == -1)
609 return NULL;
610
611 /* cache these values so we only map/unmap the cache file once */
612 ldcache_size = st.st_size;
613 ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
614
615 close(fd);
616
617 if (ldcache == (caddr_t)-1) {
618 ldcache = 0;
619 return NULL;
620 }
621
622 if (memcmp(((header_t *) ldcache)->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN))
623 return NULL;
624 if (memcmp (((header_t *) ldcache)->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
625 return NULL;
626 }
627
628 header = (header_t *) ldcache;
629 libent = (libentry_t *) (ldcache + sizeof(header_t));
630 strs = (char *) &libent[header->nlibs];
631
632 for (fd = 0; fd < header->nlibs; fd++) {
633 /* this should be more fine grained, but for now we assume that
634 * diff arches will not be cached together. and we ignore the
635 * the different multilib mips cases. */
636 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
637 continue;
638 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
639 continue;
640
641 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
642 continue;
643 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
644 }
645 return buf;
646}
647
648
245static void scanelf_file_needed(elfobj *elf, char *found_needed, char **ret, size_t *ret_len) 649static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
246{ 650{
247 unsigned long i; 651 unsigned long i;
248 char *needed; 652 char *needed;
249 void *strtbl_void; 653 void *strtbl_void;
654 char *p;
250 655
251 if (!show_needed) return; 656 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL;
252 657
253 strtbl_void = elf_findsecbyname(elf, ".dynstr"); 658 strtbl_void = elf_findsecbyname(elf, ".dynstr");
254 659
255 if (elf->phdr && strtbl_void) { 660 if (elf->phdr && strtbl_void) {
256#define SHOW_NEEDED(B) \ 661#define SHOW_NEEDED(B) \
266 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 671 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
267 dyn = DYN ## B (elf->data + offset); \ 672 dyn = DYN ## B (elf->data + offset); \
268 while (EGET(dyn->d_tag) != DT_NULL) { \ 673 while (EGET(dyn->d_tag) != DT_NULL) { \
269 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 674 if (EGET(dyn->d_tag) == DT_NEEDED) { \
270 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 675 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
271 if (offset >= elf->len) { \ 676 if (offset >= (Elf ## B ## _Off)elf->len) { \
272 ++dyn; \ 677 ++dyn; \
273 continue; \ 678 continue; \
274 } \ 679 } \
275 needed = (char*)(elf->data + offset); \ 680 needed = (char*)(elf->data + offset); \
681 if (op == 0) { \
682 if (!be_wewy_wewy_quiet) { \
276 if (*found_needed) xchrcat(ret, ',', ret_len); \ 683 if (*found_needed) xchrcat(ret, ',', ret_len); \
684 if (use_ldcache) \
685 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
686 needed = p; \
277 xstrcat(ret, needed, ret_len); \ 687 xstrcat(ret, needed, ret_len); \
688 } \
278 *found_needed = 1; \ 689 *found_needed = 1; \
690 } else { \
691 if (!strncmp(find_lib, needed, strlen( !gmatch ? needed : find_lib))) { \
692 *found_lib = 1; \
693 return (be_wewy_wewy_quiet ? NULL : needed); \
694 } \
695 } \
279 } \ 696 } \
280 ++dyn; \ 697 ++dyn; \
281 } \ 698 } \
282 } } 699 } }
283 SHOW_NEEDED(32) 700 SHOW_NEEDED(32)
284 SHOW_NEEDED(64) 701 SHOW_NEEDED(64)
702 if (op == 0 && !*found_needed && be_verbose)
703 warn("ELF lacks DT_NEEDED sections: %s", elf->filename);
285 } 704 }
705
706 return NULL;
286} 707}
287static char *scanelf_file_interp(elfobj *elf, char *found_interp) 708static char *scanelf_file_interp(elfobj *elf, char *found_interp)
288{ 709{
289 void *strtbl_void; 710 void *strtbl_void;
290 711
295 if (strtbl_void) { 716 if (strtbl_void) {
296#define SHOW_INTERP(B) \ 717#define SHOW_INTERP(B) \
297 if (elf->elf_class == ELFCLASS ## B) { \ 718 if (elf->elf_class == ELFCLASS ## B) { \
298 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 719 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
299 *found_interp = 1; \ 720 *found_interp = 1; \
300 return elf->data + EGET(strtbl->sh_offset); \ 721 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \
301 } 722 }
302 SHOW_INTERP(32) 723 SHOW_INTERP(32)
303 SHOW_INTERP(64) 724 SHOW_INTERP(64)
304 } 725 }
305 return NULL; 726 return NULL;
327 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 748 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
328 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \ 749 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \
329 { \ 750 { \
330 if (be_quiet) return NULL; \ 751 if (be_quiet) return NULL; \
331 *found_bind = 1; \ 752 *found_bind = 1; \
332 return "NOW"; \ 753 return (char *)(be_wewy_wewy_quiet ? NULL : "NOW"); \
333 } \ 754 } \
334 ++dyn; \ 755 ++dyn; \
335 } \ 756 } \
336 } \ 757 } \
337 } 758 }
338 SHOW_BIND(32) 759 SHOW_BIND(32)
339 SHOW_BIND(64) 760 SHOW_BIND(64)
340 761
341 fstat(elf->fd, &s); 762 if (be_wewy_wewy_quiet) return NULL;
763
342 if (be_quiet && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 764 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) {
343 return NULL; 765 return NULL;
344 } else { 766 } else {
345 *found_bind = 1; 767 *found_bind = 1;
346 return "LAZY"; 768 return (char *) "LAZY";
347 } 769 }
348} 770}
349static char *scanelf_file_sym(elfobj *elf, char *found_sym, const char *filename) 771static char *scanelf_file_soname(elfobj *elf, char *found_soname)
350{ 772{
351 unsigned long i; 773 unsigned long i;
774 char *soname;
775 void *strtbl_void;
776
777 if (!show_soname) return NULL;
778
779 strtbl_void = elf_findsecbyname(elf, ".dynstr");
780
781 if (elf->phdr && strtbl_void) {
782#define SHOW_SONAME(B) \
783 if (elf->elf_class == ELFCLASS ## B) { \
784 Elf ## B ## _Dyn *dyn; \
785 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
786 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
787 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
788 Elf ## B ## _Off offset; \
789 /* only look for soname in shared objects */ \
790 if (ehdr->e_type != ET_DYN) \
791 return NULL; \
792 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
793 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \
794 offset = EGET(phdr[i].p_offset); \
795 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
796 dyn = DYN ## B (elf->data + offset); \
797 while (EGET(dyn->d_tag) != DT_NULL) { \
798 if (EGET(dyn->d_tag) == DT_SONAME) { \
799 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
800 if (offset >= (Elf ## B ## _Off)elf->len) { \
801 ++dyn; \
802 continue; \
803 } \
804 soname = (char*)(elf->data + offset); \
805 *found_soname = 1; \
806 return (be_wewy_wewy_quiet ? NULL : soname); \
807 } \
808 ++dyn; \
809 } \
810 } }
811 SHOW_SONAME(32)
812 SHOW_SONAME(64)
813 }
814
815 return NULL;
816}
817static char *scanelf_file_sym(elfobj *elf, char *found_sym)
818{
819 unsigned long i;
820 char *ret;
352 void *symtab_void, *strtab_void; 821 void *symtab_void, *strtab_void;
353 822
354 if (!find_sym) return NULL; 823 if (!find_sym) return NULL;
824 ret = find_sym;
355 825
356 symtab_void = elf_findsecbyname(elf, ".symtab"); 826 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
357 strtab_void = elf_findsecbyname(elf, ".strtab");
358 827
359 if (symtab_void && strtab_void) { 828 if (symtab_void && strtab_void) {
360#define FIND_SYM(B) \ 829#define FIND_SYM(B) \
361 if (elf->elf_class == ELFCLASS ## B) { \ 830 if (elf->elf_class == ELFCLASS ## B) { \
362 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 831 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
363 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 832 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
364 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 833 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
365 unsigned long cnt = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 834 unsigned long cnt = EGET(symtab->sh_entsize); \
366 char *symname; \ 835 char *symname; \
836 if (cnt) \
837 cnt = EGET(symtab->sh_size) / cnt; \
367 for (i = 0; i < cnt; ++i) { \ 838 for (i = 0; i < cnt; ++i) { \
368 if (sym->st_name) { \ 839 if (sym->st_name) { \
369 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 840 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
841 if ((void*)symname > (void*)elf->data_end) { \
842 warnf("%s: corrupt ELF symbols", elf->filename); \
843 continue; \
844 } \
370 if (*find_sym == '*') { \ 845 if (*find_sym == '*') { \
371 printf("%s(%s) %5lX %15s %s\n", \ 846 printf("%s(%s) %5lX %15s %s\n", \
372 ((*found_sym == 0) ? "\n\t" : "\t"), \ 847 ((*found_sym == 0) ? "\n\t" : "\t"), \
373 (char *)basename(filename), \ 848 elf->base_filename, \
374 (long)sym->st_size, \ 849 (unsigned long)sym->st_size, \
375 (char *)get_elfstttype(sym->st_info), \ 850 get_elfstttype(sym->st_info), \
376 symname); \ 851 symname); \
377 *found_sym = 1; \ 852 *found_sym = 1; \
378 } else if ((strcmp(find_sym, symname) == 0) || \ 853 } else { \
854 char *this_sym, *next_sym; \
855 this_sym = find_sym; \
856 do { \
857 next_sym = strchr(this_sym, ','); \
858 if (next_sym == NULL) \
859 next_sym = this_sym + strlen(this_sym); \
860 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
379 (strcmp(symname, versioned_symname) == 0)) \ 861 (strcmp(symname, versioned_symname) == 0)) { \
862 ret = this_sym; \
380 (*found_sym)++; \ 863 (*found_sym)++; \
864 goto break_out; \
865 } \
866 this_sym = next_sym + 1; \
867 } while (*next_sym != '\0'); \
868 } \
381 } \ 869 } \
382 ++sym; \ 870 ++sym; \
383 } } 871 } }
384 FIND_SYM(32) 872 FIND_SYM(32)
385 FIND_SYM(64) 873 FIND_SYM(64)
386 } 874 }
875
876break_out:
877 if (be_wewy_wewy_quiet) return NULL;
878
387 if (*find_sym != '*' && *found_sym) 879 if (*find_sym != '*' && *found_sym)
388 return find_sym; 880 return ret;
389 if (be_quiet) 881 if (be_quiet)
390 return NULL; 882 return NULL;
391 else 883 else
392 return " - "; 884 return (char *)" - ";
393} 885}
886
887
888static char *scanelf_file_sections(elfobj *elf, char *found_section)
889{
890 if (!find_section)
891 return NULL;
892
893#define FIND_SECTION(B) \
894 if (elf->elf_class == ELFCLASS ## B) { \
895 Elf ## B ## _Shdr *section; \
896 section = SHDR ## B (elf_findsecbyname(elf, find_section)); \
897 if (section != NULL) \
898 *found_section = 1; \
899 }
900 FIND_SECTION(32)
901 FIND_SECTION(64)
902
903
904 if (be_wewy_wewy_quiet) return NULL;
905
906 if (*found_section)
907 return find_section;
908
909 if (be_quiet)
910 return NULL;
911 else
912 return (char *)" - ";
913}
914
394/* scan an elf file and show all the fun stuff */ 915/* scan an elf file and show all the fun stuff */
395#define prints(str) fputs(str, stdout) 916#define prints(str) write(fileno(stdout), str, strlen(str))
396static void scanelf_file(const char *filename) 917static int scanelf_elfobj(elfobj *elf)
397{ 918{
398 unsigned long i; 919 unsigned long i;
399 char found_pax, found_stack, found_relro, found_textrel, 920 char found_pax, found_phdr, found_relro, found_load, found_textrel,
400 found_rpath, found_needed, found_interp, found_bind, 921 found_rpath, found_needed, found_interp, found_bind, found_soname,
401 found_sym, found_file; 922 found_sym, found_lib, found_file, found_textrels, found_section;
402 elfobj *elf;
403 struct stat st;
404 static char *out_buffer = NULL; 923 static char *out_buffer = NULL;
405 static size_t out_len; 924 static size_t out_len;
406 925
407 /* make sure 'filename' exists */
408 if (lstat(filename, &st) == -1) {
409 if (be_verbose > 2) printf("%s: does not exist\n", filename);
410 return;
411 }
412 /* always handle regular files and handle symlinked files if no -y */
413 if (!(S_ISREG(st.st_mode) || (S_ISLNK(st.st_mode) && scan_symlink))) {
414 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
415 return;
416 }
417
418 found_pax = found_stack = found_relro = found_textrel = \ 926 found_pax = found_phdr = found_relro = found_load = found_textrel = \
419 found_rpath = found_needed = found_interp = found_bind = \ 927 found_rpath = found_needed = found_interp = found_bind = found_soname = \
420 found_sym = found_file = 0; 928 found_sym = found_lib = found_file = found_textrels = found_section = 0;
421 929
422 /* verify this is real ELF */
423 if ((elf = readelf(filename)) == NULL) {
424 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
425 return;
426 }
427
428 if (be_verbose > 1) 930 if (be_verbose > 2)
429 printf("%s: scanning file {%s,%s}\n", filename, 931 printf("%s: scanning file {%s,%s}\n", elf->filename,
430 get_elfeitype(elf, EI_CLASS, elf->elf_class), 932 get_elfeitype(EI_CLASS, elf->elf_class),
431 get_elfeitype(elf, EI_DATA, elf->data[EI_DATA])); 933 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
432 else if (be_verbose) 934 else if (be_verbose > 1)
433 printf("%s: scanning file\n", filename); 935 printf("%s: scanning file\n", elf->filename);
434 936
435 /* init output buffer */ 937 /* init output buffer */
436 if (!out_buffer) { 938 if (!out_buffer) {
437 out_len = sizeof(char) * 80; 939 out_len = sizeof(char) * 80;
438 out_buffer = (char*)xmalloc(out_len); 940 out_buffer = (char*)xmalloc(out_len);
440 *out_buffer = '\0'; 942 *out_buffer = '\0';
441 943
442 /* show the header */ 944 /* show the header */
443 if (!be_quiet && show_banner) { 945 if (!be_quiet && show_banner) {
444 for (i = 0; out_format[i]; ++i) { 946 for (i = 0; out_format[i]; ++i) {
445 if (out_format[i] != '%') continue; 947 if (!IS_MODIFIER(out_format[i])) continue;
446 948
447 switch (out_format[++i]) { 949 switch (out_format[++i]) {
448 case '%': break; 950 case '%': break;
951 case '#': break;
952 case 'F':
953 case 'p':
449 case 'F': prints("FILE "); found_file = 1; break; 954 case 'f': prints("FILE "); found_file = 1; break;
450 case 'o': prints(" TYPE "); break; 955 case 'o': prints(" TYPE "); break;
451 case 'x': prints(" PAX "); break; 956 case 'x': prints(" PAX "); break;
452 case 'e': prints("STK/REL "); break; 957 case 'e': prints("STK/REL/PTL "); break;
453 case 't': prints("TEXTREL "); break; 958 case 't': prints("TEXTREL "); break;
454 case 'r': prints("RPATH "); break; 959 case 'r': prints("RPATH "); break;
455 case 'n': prints("NEEDED "); break; 960 case 'n': prints("NEEDED "); break;
456 case 'i': prints("INTERP "); break; 961 case 'i': prints("INTERP "); break;
457 case 'b': prints("BIND "); break; 962 case 'b': prints("BIND "); break;
963 case 'S': prints("SONAME "); break;
458 case 's': prints("SYM "); break; 964 case 's': prints("SYM "); break;
965 case 'N': prints("LIB "); break;
966 case 'T': prints("TEXTRELS "); break;
967 case 'k': prints("SECTION "); break;
968 default: warnf("'%c' has no title ?", out_format[i]);
459 } 969 }
460 } 970 }
461 if (!found_file) prints("FILE "); 971 if (!found_file) prints("FILE ");
462 prints("\n"); 972 prints("\n");
463 found_file = 0; 973 found_file = 0;
465 } 975 }
466 976
467 /* dump all the good stuff */ 977 /* dump all the good stuff */
468 for (i = 0; out_format[i]; ++i) { 978 for (i = 0; out_format[i]; ++i) {
469 const char *out; 979 const char *out;
980 const char *tmp;
470 981
471 /* make sure we trim leading spaces in quiet mode */ 982 if (!IS_MODIFIER(out_format[i])) {
472 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
473 *out_buffer = '\0';
474
475 if (out_format[i] != '%') {
476 xchrcat(&out_buffer, out_format[i], &out_len); 983 xchrcat(&out_buffer, out_format[i], &out_len);
477 continue; 984 continue;
478 } 985 }
479 986
480 out = NULL; 987 out = NULL;
988 be_wewy_wewy_quiet = (out_format[i] == '#');
481 switch (out_format[++i]) { 989 switch (out_format[++i]) {
990 case '%':
991 case '#':
482 case '%': xchrcat(&out_buffer, '%', &out_len); break; 992 xchrcat(&out_buffer, out_format[i], &out_len); break;
483 case 'F': found_file = 1; xstrcat(&out_buffer, filename, &out_len); break; 993 case 'F':
994 found_file = 1;
995 if (be_wewy_wewy_quiet) break;
996 xstrcat(&out_buffer, elf->filename, &out_len);
997 break;
998 case 'p':
999 found_file = 1;
1000 if (be_wewy_wewy_quiet) break;
1001 tmp = elf->filename;
1002 if (search_path) {
1003 ssize_t len_search = strlen(search_path);
1004 ssize_t len_file = strlen(elf->filename);
1005 if (!strncmp(elf->filename, search_path, len_search) && \
1006 len_file > len_search)
1007 tmp += len_search;
1008 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++;
1009 }
1010 xstrcat(&out_buffer, tmp, &out_len);
1011 break;
1012 case 'f':
1013 found_file = 1;
1014 if (be_wewy_wewy_quiet) break;
1015 tmp = strrchr(elf->filename, '/');
1016 tmp = (tmp == NULL ? elf->filename : tmp+1);
1017 xstrcat(&out_buffer, tmp, &out_len);
1018 break;
484 case 'o': out = get_elfetype(elf); break; 1019 case 'o': out = get_elfetype(elf); break;
485 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1020 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
486 case 'e': out = scanelf_file_stack(elf, &found_stack, &found_relro); break; 1021 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
487 case 't': out = scanelf_file_textrel(elf, &found_textrel); break; 1022 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
1023 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
488 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; 1024 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1025 case 'n':
489 case 'n': scanelf_file_needed(elf, &found_needed, &out_buffer, &out_len); break; 1026 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
490 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1027 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
491 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1028 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
1029 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
492 case 's': out = scanelf_file_sym(elf, &found_sym, filename); break; 1030 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1031 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1032 default: warnf("'%c' has no scan code?", out_format[i]);
493 } 1033 }
1034 if (out) {
1035 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
1036 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
1037 xstrncat(&out_buffer, out, &out_len, (tmp-out));
1038 else
494 if (out) xstrcat(&out_buffer, out, &out_len); 1039 xstrcat(&out_buffer, out, &out_len);
1040 }
495 } 1041 }
496 1042
497#define FOUND_SOMETHING() \ 1043#define FOUND_SOMETHING() \
498 (found_pax || found_stack || found_textrel || found_rpath || \ 1044 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
499 found_needed || found_interp || found_bind || found_sym) 1045 found_rpath || found_needed || found_interp || found_bind || \
1046 found_soname || found_sym || found_lib || found_textrels || found_section )
500 1047
501 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1048 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
502 xchrcat(&out_buffer, ' ', &out_len); 1049 xchrcat(&out_buffer, ' ', &out_len);
503 xstrcat(&out_buffer, filename, &out_len); 1050 xstrcat(&out_buffer, elf->filename, &out_len);
504 } 1051 }
505 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) 1052 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) {
506 puts(out_buffer); 1053 puts(out_buffer);
1054 fflush(stdout);
1055 }
507 1056
1057 return 0;
1058}
1059
1060/* scan a single elf */
1061static int scanelf_elf(const char *filename, int fd, size_t len)
1062{
1063 int ret = 1;
1064 elfobj *elf;
1065
1066 /* verify this is real ELF */
1067 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1068 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1069 return ret;
1070 }
1071 switch (match_bits) {
1072 case 32:
1073 if (elf->elf_class != ELFCLASS32)
1074 goto label_done;
1075 break;
1076 case 64:
1077 if (elf->elf_class != ELFCLASS64)
1078 goto label_done;
1079 break;
1080 default: break;
1081 }
1082 if (strlen(match_etypes)) {
1083 char sbuf[126];
1084 strncpy(sbuf, match_etypes, sizeof(sbuf));
1085 if (strchr(match_etypes, ',') != NULL) {
1086 char *p;
1087 while((p = strrchr(sbuf, ',')) != NULL) {
1088 *p = 0;
1089 if (atoi(p+1) == get_etype(elf))
1090 goto label_ret;
1091 }
1092 }
1093 if (atoi(sbuf) != get_etype(elf))
1094 goto label_done;
1095 }
1096
1097label_ret:
1098 ret = scanelf_elfobj(elf);
1099
1100label_done:
508 unreadelf(elf); 1101 unreadelf(elf);
1102 return ret;
1103}
1104
1105/* scan an archive of elfs */
1106static int scanelf_archive(const char *filename, int fd, size_t len)
1107{
1108 archive_handle *ar;
1109 archive_member *m;
1110 char *ar_buffer;
1111 elfobj *elf;
1112
1113 ar = ar_open_fd(filename, fd);
1114 if (ar == NULL)
1115 return 1;
1116
1117 ar_buffer = (char*)mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1118 while ((m=ar_next(ar)) != NULL) {
1119 elf = readelf_buffer(m->name, ar_buffer+lseek(fd,0,SEEK_CUR), m->size);
1120 if (elf) {
1121 scanelf_elfobj(elf);
1122 unreadelf(elf);
1123 }
1124 }
1125 munmap(ar_buffer, len);
1126
1127 return 0;
1128}
1129/* scan a file which may be an elf or an archive or some other magical beast */
1130static void scanelf_file(const char *filename)
1131{
1132 struct stat st;
1133 int fd;
1134
1135 /* make sure 'filename' exists */
1136 if (lstat(filename, &st) == -1) {
1137 if (be_verbose > 2) printf("%s: does not exist\n", filename);
1138 return;
1139 }
1140
1141 /* always handle regular files and handle symlinked files if no -y */
1142 if (S_ISLNK(st.st_mode)) {
1143 if (!scan_symlink) return;
1144 stat(filename, &st);
1145 }
1146 if (!S_ISREG(st.st_mode)) {
1147 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1148 return;
1149 }
1150
1151 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1152 return;
1153
1154 if (scanelf_elf(filename, fd, st.st_size) == 1 && scan_archives)
1155 /* if it isn't an ELF, maybe it's an .a archive */
1156 scanelf_archive(filename, fd, st.st_size);
1157
1158 close(fd);
509} 1159}
510 1160
511/* scan a directory for ET_EXEC files and print when we find one */ 1161/* scan a directory for ET_EXEC files and print when we find one */
512static void scanelf_dir(const char *path) 1162static void scanelf_dir(const char *path)
513{ 1163{
514 register DIR *dir; 1164 register DIR *dir;
515 register struct dirent *dentry; 1165 register struct dirent *dentry;
516 struct stat st_top, st; 1166 struct stat st_top, st;
517 char buf[_POSIX_PATH_MAX]; 1167 char buf[__PAX_UTILS_PATH_MAX];
518 size_t pathlen = 0, len = 0; 1168 size_t pathlen = 0, len = 0;
519 1169
520 /* make sure path exists */ 1170 /* make sure path exists */
521 if (lstat(path, &st_top) == -1) { 1171 if (lstat(path, &st_top) == -1) {
522 if (be_verbose > 2) printf("%s: does not exist\n", path); 1172 if (be_verbose > 2) printf("%s: does not exist\n", path);
532 /* now scan the dir looking for fun stuff */ 1182 /* now scan the dir looking for fun stuff */
533 if ((dir = opendir(path)) == NULL) { 1183 if ((dir = opendir(path)) == NULL) {
534 warnf("could not opendir %s: %s", path, strerror(errno)); 1184 warnf("could not opendir %s: %s", path, strerror(errno));
535 return; 1185 return;
536 } 1186 }
537 if (be_verbose) printf("%s: scanning dir\n", path); 1187 if (be_verbose > 1) printf("%s: scanning dir\n", path);
538 1188
539 pathlen = strlen(path); 1189 pathlen = strlen(path);
540 while ((dentry = readdir(dir))) { 1190 while ((dentry = readdir(dir))) {
541 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1191 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
542 continue; 1192 continue;
543 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1193 len = (pathlen + 1 + strlen(dentry->d_name) + 1);
544 if (len >= sizeof(buf)) { 1194 if (len >= sizeof(buf)) {
545 warnf("Skipping '%s': len > sizeof(buf); %d > %d\n", path, (int)len, (int)sizeof(buf)); 1195 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
1196 (unsigned long)len, (unsigned long)sizeof(buf));
546 continue; 1197 continue;
547 } 1198 }
548 sprintf(buf, "%s/%s", path, dentry->d_name); 1199 sprintf(buf, "%s/%s", path, dentry->d_name);
549 if (lstat(buf, &st) != -1) { 1200 if (lstat(buf, &st) != -1) {
550 if (S_ISREG(st.st_mode)) 1201 if (S_ISREG(st.st_mode))
560 1211
561static int scanelf_from_file(char *filename) 1212static int scanelf_from_file(char *filename)
562{ 1213{
563 FILE *fp = NULL; 1214 FILE *fp = NULL;
564 char *p; 1215 char *p;
565 char path[_POSIX_PATH_MAX]; 1216 char path[__PAX_UTILS_PATH_MAX];
566 1217
567 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1218 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL))
568 fp = stdin; 1219 fp = stdin;
569 else if ((fp = fopen(filename, "r")) == NULL) 1220 else if ((fp = fopen(filename, "r")) == NULL)
570 return 1; 1221 return 1;
571 1222
572 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1223 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
573 if ((p = strchr(path, '\n')) != NULL) 1224 if ((p = strchr(path, '\n')) != NULL)
574 *p = 0; 1225 *p = 0;
1226 search_path = path;
575 scanelf_dir(path); 1227 scanelf_dir(path);
576 } 1228 }
577 if (fp != stdin) 1229 if (fp != stdin)
578 fclose(fp); 1230 fclose(fp);
579 return 0; 1231 return 0;
580} 1232}
581 1233
582static void load_ld_so_conf() 1234static int load_ld_so_conf(int i, const char *fname)
583{ 1235{
584 FILE *fp = NULL; 1236 FILE *fp = NULL;
585 char *p; 1237 char *p;
586 char path[_POSIX_PATH_MAX]; 1238 char path[__PAX_UTILS_PATH_MAX];
587 int i = 0;
588 1239
589 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1240 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths))
590 return; 1241 return i;
591 1242
1243 if ((fp = fopen(fname, "r")) == NULL)
1244 return i;
1245
592 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1246 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
593 if (*path != '/')
594 continue;
595
596 if ((p = strrchr(path, '\r')) != NULL) 1247 if ((p = strrchr(path, '\r')) != NULL)
597 *p = 0; 1248 *p = 0;
598 if ((p = strchr(path, '\n')) != NULL) 1249 if ((p = strchr(path, '\n')) != NULL)
599 *p = 0; 1250 *p = 0;
1251#ifdef HAVE_GLOB
1252 // recursive includes of the same file will make this segfault.
1253 if ((*path == 'i') && (strncmp(path, "include", 7) == 0) && isblank(path[7])) {
1254 glob64_t gl;
1255 size_t x;
1256 char gpath[__PAX_UTILS_PATH_MAX];
1257
1258 gpath[sizeof(gpath)] = 0;
1259
1260 if (path[8] != '/')
1261 snprintf(gpath, sizeof(gpath)-1, "/etc/%s", &path[8]);
1262 else
1263 strncpy(gpath, &path[8], sizeof(gpath)-1);
1264
1265 if ((glob64(gpath, 0, NULL, &gl)) == 0) {
1266 for (x = 0; x < gl.gl_pathc; ++x) {
1267 /* try to avoid direct loops */
1268 if (strcmp(gl.gl_pathv[x], fname) == 0)
1269 continue;
1270 i = load_ld_so_conf(i, gl.gl_pathv[x]);
1271 if (i + 1 >= sizeof(ldpaths) / sizeof(*ldpaths)) {
1272 globfree64(&gl);
1273 return i;
1274 }
1275 }
1276 globfree64 (&gl);
1277 continue;
1278 } else
1279 abort();
1280 }
1281#endif
1282 if (*path != '/')
1283 continue;
600 1284
601 ldpaths[i++] = xstrdup(path); 1285 ldpaths[i++] = xstrdup(path);
602 1286
603 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1287 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths))
604 break; 1288 break;
605 } 1289 }
606 ldpaths[i] = NULL; 1290 ldpaths[i] = NULL;
607 1291
608 fclose(fp); 1292 fclose(fp);
1293 return i;
609} 1294}
610 1295
611/* scan /etc/ld.so.conf for paths */ 1296/* scan /etc/ld.so.conf for paths */
612static void scanelf_ldpath() 1297static void scanelf_ldpath()
613{ 1298{
648 } 1333 }
649 1334
650 free(path); 1335 free(path);
651} 1336}
652 1337
653
654
655/* usage / invocation handling functions */ 1338/* usage / invocation handling functions */
656#define PARSE_FLAGS "plRmyxetrnibs:aqvF:f:o:BhV" 1339#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:BhV"
657#define a_argument required_argument 1340#define a_argument required_argument
658static struct option const long_opts[] = { 1341static struct option const long_opts[] = {
659 {"path", no_argument, NULL, 'p'}, 1342 {"path", no_argument, NULL, 'p'},
660 {"ldpath", no_argument, NULL, 'l'}, 1343 {"ldpath", no_argument, NULL, 'l'},
661 {"recursive", no_argument, NULL, 'R'}, 1344 {"recursive", no_argument, NULL, 'R'},
662 {"mount", no_argument, NULL, 'm'}, 1345 {"mount", no_argument, NULL, 'm'},
663 {"symlink", no_argument, NULL, 'y'}, 1346 {"symlink", no_argument, NULL, 'y'},
1347 {"archives", no_argument, NULL, 'A'},
1348 {"ldcache", no_argument, NULL, 'L'},
1349 {"fix", no_argument, NULL, 'X'},
1350 {"setpax", a_argument, NULL, 'z'},
664 {"pax", no_argument, NULL, 'x'}, 1351 {"pax", no_argument, NULL, 'x'},
665 {"header", no_argument, NULL, 'e'}, 1352 {"header", no_argument, NULL, 'e'},
666 {"textrel", no_argument, NULL, 't'}, 1353 {"textrel", no_argument, NULL, 't'},
667 {"rpath", no_argument, NULL, 'r'}, 1354 {"rpath", no_argument, NULL, 'r'},
668 {"needed", no_argument, NULL, 'n'}, 1355 {"needed", no_argument, NULL, 'n'},
669 {"interp", no_argument, NULL, 'i'}, 1356 {"interp", no_argument, NULL, 'i'},
670 {"bind", no_argument, NULL, 'b'}, 1357 {"bind", no_argument, NULL, 'b'},
1358 {"soname", no_argument, NULL, 'S'},
671 {"symbol", a_argument, NULL, 's'}, 1359 {"symbol", a_argument, NULL, 's'},
1360 {"section", a_argument, NULL, 'k'},
1361 {"lib", a_argument, NULL, 'N'},
1362 {"gmatch", no_argument, NULL, 'g'},
1363 {"textrels", no_argument, NULL, 'T'},
1364 {"etype", a_argument, NULL, 'E'},
1365 {"bits", a_argument, NULL, 'M'},
672 {"all", no_argument, NULL, 'a'}, 1366 {"all", no_argument, NULL, 'a'},
673 {"quiet", no_argument, NULL, 'q'}, 1367 {"quiet", no_argument, NULL, 'q'},
674 {"verbose", no_argument, NULL, 'v'}, 1368 {"verbose", no_argument, NULL, 'v'},
675 {"format", a_argument, NULL, 'F'}, 1369 {"format", a_argument, NULL, 'F'},
676 {"from", a_argument, NULL, 'f'}, 1370 {"from", a_argument, NULL, 'f'},
677 {"file", a_argument, NULL, 'o'}, 1371 {"file", a_argument, NULL, 'o'},
678 {"nobanner", no_argument, NULL, 'B'}, 1372 {"nobanner", no_argument, NULL, 'B'},
679 {"help", no_argument, NULL, 'h'}, 1373 {"help", no_argument, NULL, 'h'},
680 {"version", no_argument, NULL, 'V'}, 1374 {"version", no_argument, NULL, 'V'},
681 {NULL, no_argument, NULL, 0x0} 1375 {NULL, no_argument, NULL, 0x0}
682}; 1376};
1377
683static char *opts_help[] = { 1378static const char *opts_help[] = {
684 "Scan all directories in PATH environment", 1379 "Scan all directories in PATH environment",
685 "Scan all directories in /etc/ld.so.conf", 1380 "Scan all directories in /etc/ld.so.conf",
686 "Scan directories recursively", 1381 "Scan directories recursively",
687 "Don't recursively cross mount points", 1382 "Don't recursively cross mount points",
688 "Don't scan symlinks\n", 1383 "Don't scan symlinks",
1384 "Scan archives (.a files)",
1385 "Utilize ld.so.cache information (use with -r/-n)",
1386 "Try and 'fix' bad things (use with -r/-e)",
1387 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
689 "Print PaX markings", 1388 "Print PaX markings",
690 "Print GNU_STACK markings", 1389 "Print GNU_STACK/PT_LOAD markings",
691 "Print TEXTREL information", 1390 "Print TEXTREL information",
692 "Print RPATH information", 1391 "Print RPATH information",
693 "Print NEEDED information", 1392 "Print NEEDED information",
694 "Print INTERP information", 1393 "Print INTERP information",
695 "Print BIND information", 1394 "Print BIND information",
1395 "Print SONAME information",
696 "Find a specified symbol", 1396 "Find a specified symbol",
1397 "Find a specified section",
1398 "Find a specified library",
1399 "Use strncmp to match libraries. (use with -N)",
1400 "Locate cause of TEXTREL",
1401 "Print only ELF files matching numeric constant type",
1402 "Print only ELF files matching numeric bits",
697 "Print all scanned info (-x -e -t -r -n -i)\n", 1403 "Print all scanned info (-x -e -t -r -b)\n",
698 "Only output 'bad' things", 1404 "Only output 'bad' things",
699 "Be verbose (can be specified more than once)", 1405 "Be verbose (can be specified more than once)",
700 "Use specified format for output", 1406 "Use specified format for output",
701 "Read input stream from a filename", 1407 "Read input stream from a filename",
702 "Write output stream to a filename", 1408 "Write output stream to a filename",
709/* display usage and exit */ 1415/* display usage and exit */
710static void usage(int status) 1416static void usage(int status)
711{ 1417{
712 unsigned long i; 1418 unsigned long i;
713 printf("* Scan ELF binaries for stuff\n\n" 1419 printf("* Scan ELF binaries for stuff\n\n"
714 "Usage: %s [options] <dir1/file1> [dir2 dirN fileN ...]\n\n", argv0); 1420 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
715 printf("Options: -[%s]\n", PARSE_FLAGS); 1421 printf("Options: -[%s]\n", PARSE_FLAGS);
716 for (i = 0; long_opts[i].name; ++i) 1422 for (i = 0; long_opts[i].name; ++i)
717 if (long_opts[i].has_arg == no_argument) 1423 if (long_opts[i].has_arg == no_argument)
718 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 1424 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
719 long_opts[i].name, opts_help[i]); 1425 long_opts[i].name, opts_help[i]);
720 else 1426 else
721 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 1427 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
722 long_opts[i].name, opts_help[i]); 1428 long_opts[i].name, opts_help[i]);
723 1429
724 if (status != EXIT_SUCCESS) 1430 if (status != EXIT_SUCCESS)
725 exit(status); 1431 exit(status);
726 1432
727 puts("\nThe format modifiers for the -F option are:"); 1433 puts("\nThe format modifiers for the -F option are:");
728 puts(" %F Filename \t%x PaX Flags \t%e STACK/RELRO"); 1434 puts(" F Filename \tx PaX Flags \te STACK/RELRO");
729 puts(" %t TEXTREL \t%r RPATH \t%n NEEDED"); 1435 puts(" t TEXTREL \tr RPATH \tn NEEDED");
730 puts(" %i INTERP \t%b BIND \t%s symbol"); 1436 puts(" i INTERP \tb BIND \ts symbol");
1437 puts(" N library \to Type \tT TEXTRELs");
1438 puts(" S SONAME \tk section");
1439 puts(" p filename (with search path removed)");
1440 puts(" f filename (short name/basename)");
1441 puts("Prefix each modifier with '%' (verbose) or '#' (silent)");
1442
1443 puts("\nELF Etypes:");
1444 print_etypes(stdout);
731 1445
732 exit(status); 1446 exit(status);
733} 1447}
734 1448
735/* parse command line arguments and preform needed actions */ 1449/* parse command line arguments and preform needed actions */
741 opterr = 0; 1455 opterr = 0;
742 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1456 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
743 switch (i) { 1457 switch (i) {
744 1458
745 case 'V': 1459 case 'V':
746 printf("%s compiled %s\n%s\n" 1460 printf("pax-utils-%s: %s compiled %s\n%s\n"
747 "%s written for Gentoo Linux by <solar and vapier @ gentoo.org>\n", 1461 "%s written for Gentoo by <solar and vapier @ gentoo.org>\n",
748 __FILE__, __DATE__, rcsid, argv0); 1462 VERSION, __FILE__, __DATE__, rcsid, argv0);
749 exit(EXIT_SUCCESS); 1463 exit(EXIT_SUCCESS);
750 break; 1464 break;
751 case 'h': usage(EXIT_SUCCESS); break; 1465 case 'h': usage(EXIT_SUCCESS); break;
752 case 'f': 1466 case 'f':
753 if (from_file == NULL) 1467 if (from_file) warn("You prob don't want to specify -f twice");
754 from_file = xstrdup(optarg); 1468 from_file = optarg;
1469 break;
1470 case 'E':
1471 strncpy(match_etypes, optarg, sizeof(match_etypes));
1472 break;
1473 case 'M':
1474 match_bits = atoi(optarg);
755 break; 1475 break;
756 case 'o': { 1476 case 'o': {
757 FILE *fp = NULL; 1477 FILE *fp = NULL;
758 fp = freopen(optarg, "w", stdout); 1478 if ((fp = freopen(optarg, "w", stdout)) == NULL)
759 if (fp == NULL)
760 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1479 err("Could not open output stream '%s': %s", optarg, strerror(errno));
761 stdout = fp; 1480 SET_STDOUT(fp);
762 break; 1481 break;
763 } 1482 }
764 1483 case 'k':
1484 if (find_section) warn("You prob don't want to specify -k twice");
1485 find_section = optarg;
1486 break;
765 case 's': { 1487 case 's': {
766 size_t len; 1488 if (find_sym) warn("You prob don't want to specify -s twice");
767 find_sym = xstrdup(optarg); 1489 find_sym = optarg;
768 len = strlen(find_sym) + 1;
769 versioned_symname = (char*)xmalloc(sizeof(char) * (len+1)); 1490 versioned_symname = (char*)xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
770 sprintf(versioned_symname, "%s@", find_sym); 1491 sprintf(versioned_symname, "%s@", find_sym);
771 break; 1492 break;
772 } 1493 }
1494 case 'N': {
1495 if (find_lib) warn("You prob don't want to specify -N twice");
1496 find_lib = optarg;
1497 break;
1498 }
773 1499
774 case 'F': { 1500 case 'F': {
1501 if (out_format) warn("You prob don't want to specify -F twice");
775 out_format = xstrdup(optarg); 1502 out_format = optarg;
776 break; 1503 break;
1504 }
1505 case 'z': {
1506 unsigned long flags = 10240;
1507 size_t x;
1508
1509#define do_state(option, flag) \
1510 if (islower(option)) { \
1511 flags &= ~PF_##flag; \
1512 flags |= PF_NO##flag; \
1513 } else { \
1514 flags &= ~PF_NO##flag; \
1515 flags |= PF_##flag; \
777 } 1516 }
778 1517
1518 for (x = 0 ; x < strlen(optarg); x++) {
1519 switch(optarg[x]) {
1520 case 'p':
1521 case 'P':
1522 do_state(optarg[x], PAGEEXEC);
1523 break;
1524 case 's':
1525 case 'S':
1526 do_state(optarg[x], SEGMEXEC);
1527 break;
1528 case 'm':
1529 case 'M':
1530 do_state(optarg[x], MPROTECT);
1531 break;
1532 case 'e':
1533 case 'E':
1534 do_state(optarg[x], EMUTRAMP);
1535 break;
1536 case 'r':
1537 case 'R':
1538 do_state(optarg[x], RANDMMAP);
1539 break;
1540 case 'x':
1541 case 'X':
1542 do_state(optarg[x], RANDEXEC);
1543 break;
1544 default:
1545 break;
1546 }
1547 }
1548 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1549 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1550 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1551 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1552 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1553 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1554 setpax = flags;
1555 break;
1556 }
1557 case 'g': gmatch = 1; break;
1558 case 'L': use_ldcache = 1; break;
779 case 'y': scan_symlink = 0; break; 1559 case 'y': scan_symlink = 0; break;
1560 case 'A': scan_archives = 1; break;
780 case 'B': show_banner = 0; break; 1561 case 'B': show_banner = 0; break;
781 case 'l': scan_ldpath = 1; break; 1562 case 'l': scan_ldpath = 1; break;
782 case 'p': scan_envpath = 1; break; 1563 case 'p': scan_envpath = 1; break;
783 case 'R': dir_recurse = 1; break; 1564 case 'R': dir_recurse = 1; break;
784 case 'm': dir_crossmount = 0; break; 1565 case 'm': dir_crossmount = 0; break;
1566 case 'X': ++fix_elf; break;
785 case 'x': show_pax = 1; break; 1567 case 'x': show_pax = 1; break;
786 case 'e': show_stack = 1; break; 1568 case 'e': show_phdr = 1; break;
787 case 't': show_textrel = 1; break; 1569 case 't': show_textrel = 1; break;
788 case 'r': show_rpath = 1; break; 1570 case 'r': show_rpath = 1; break;
789 case 'n': show_needed = 1; break; 1571 case 'n': show_needed = 1; break;
790 case 'i': show_interp = 1; break; 1572 case 'i': show_interp = 1; break;
791 case 'b': show_bind = 1; break; 1573 case 'b': show_bind = 1; break;
1574 case 'S': show_soname = 1; break;
1575 case 'T': show_textrels = 1; break;
792 case 'q': be_quiet = 1; break; 1576 case 'q': be_quiet = 1; break;
793 case 'v': be_verbose = (be_verbose % 20) + 1; break; 1577 case 'v': be_verbose = (be_verbose % 20) + 1; break;
794 case 'a': show_pax = show_stack = show_textrel = show_rpath = \ 1578 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break;
795 show_needed = show_interp = show_bind = 1; break;
796 1579
797 case ':': 1580 case ':':
798 err("Option missing parameter\n"); 1581 err("Option '%c' is missing parameter", optopt);
799 case '?': 1582 case '?':
800 err("Unknown option\n"); 1583 err("Unknown option '%c' or argument missing", optopt);
801 default: 1584 default:
802 err("Unhandled option '%c'", i); 1585 err("Unhandled option '%c'; please report this", i);
803 } 1586 }
804 } 1587 }
805 1588
806 /* let the format option override all other options */ 1589 /* let the format option override all other options */
807 if (out_format) { 1590 if (out_format) {
808 show_pax = show_stack = show_textrel = show_rpath = show_needed = show_interp = 0; 1591 show_pax = show_phdr = show_textrel = show_rpath = \
1592 show_needed = show_interp = show_bind = show_soname = \
1593 show_textrels = 0;
809 for (i = 0; out_format[i]; ++i) { 1594 for (i = 0; out_format[i]; ++i) {
810 if (out_format[i] != '%') continue; 1595 if (!IS_MODIFIER(out_format[i])) continue;
811 1596
812 switch (out_format[++i]) { 1597 switch (out_format[++i]) {
813 case '%': break; 1598 case '%': break;
1599 case '#': break;
814 case 'F': break; 1600 case 'F': break;
1601 case 'p': break;
1602 case 'f': break;
1603 case 'k': break;
815 case 's': break; 1604 case 's': break;
1605 case 'N': break;
816 case 'o': break; 1606 case 'o': break;
817 case 'x': show_pax = 1; break; 1607 case 'x': show_pax = 1; break;
818 case 'e': show_stack = 1; break; 1608 case 'e': show_phdr = 1; break;
819 case 't': show_textrel = 1; break; 1609 case 't': show_textrel = 1; break;
820 case 'r': show_rpath = 1; break; 1610 case 'r': show_rpath = 1; break;
821 case 'n': show_needed = 1; break; 1611 case 'n': show_needed = 1; break;
822 case 'i': show_interp = 1; break; 1612 case 'i': show_interp = 1; break;
823 case 'b': show_bind = 1; break; 1613 case 'b': show_bind = 1; break;
1614 case 'S': show_soname = 1; break;
1615 case 'T': show_textrels = 1; break;
824 default: 1616 default:
825 err("Invalid format specifier '%c' (byte %i)", 1617 err("Invalid format specifier '%c' (byte %i)",
826 out_format[i], i+1); 1618 out_format[i], i+1);
827 } 1619 }
828 } 1620 }
829 1621
830 /* construct our default format */ 1622 /* construct our default format */
831 } else { 1623 } else {
832 size_t fmt_len = 30; 1624 size_t fmt_len = 30;
833 out_format = (char*)xmalloc(sizeof(char) * fmt_len); 1625 out_format = (char*)xmalloc(sizeof(char) * fmt_len);
834 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); 1626 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
835 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); 1627 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
836 if (show_stack) xstrcat(&out_format, "%e ", &fmt_len); 1628 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
837 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); 1629 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
838 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); 1630 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
839 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); 1631 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
840 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 1632 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
841 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 1633 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1634 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1635 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
842 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 1636 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
1637 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1638 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
843 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 1639 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
844 } 1640 }
845 if (be_verbose > 2) printf("Format: %s\n", out_format); 1641 if (be_verbose > 2) printf("Format: %s\n", out_format);
846 1642
847 /* now lets actually do the scanning */ 1643 /* now lets actually do the scanning */
848 if (scan_ldpath || (show_rpath && be_quiet)) 1644 if (scan_ldpath || use_ldcache)
849 load_ld_so_conf(); 1645 load_ld_so_conf(0, "/etc/ld.so.conf");
850 if (scan_ldpath) scanelf_ldpath(); 1646 if (scan_ldpath) scanelf_ldpath();
851 if (scan_envpath) scanelf_envpath(); 1647 if (scan_envpath) scanelf_envpath();
852 if (from_file) { 1648 if (from_file) {
853 scanelf_from_file(from_file); 1649 scanelf_from_file(from_file);
854 free(from_file);
855 from_file = *argv; 1650 from_file = *argv;
856 } 1651 }
857 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 1652 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
858 err("Nothing to scan !?"); 1653 err("Nothing to scan !?");
859 while (optind < argc) 1654 while (optind < argc) {
860 scanelf_dir(argv[optind++]); 1655 search_path = argv[optind++];
1656 scanelf_dir(search_path);
1657 }
861 1658
862 /* clean up */ 1659 /* clean up */
863 if (find_sym) { 1660 if (versioned_symname) free(versioned_symname);
864 free(find_sym);
865 free(versioned_symname);
866 }
867 if (out_format) free(out_format);
868 for (i = 0; ldpaths[i]; ++i) 1661 for (i = 0; ldpaths[i]; ++i)
869 free(ldpaths[i]); 1662 free(ldpaths[i]);
1663
1664 if (ldcache != 0)
1665 munmap(ldcache, ldcache_size);
870} 1666}
871 1667
872 1668
873 1669
874/* utility funcs */ 1670/* utility funcs */
875static char *xstrdup(char *s) 1671static char *xstrdup(const char *s)
876{ 1672{
877 char *ret = strdup(s); 1673 char *ret = strdup(s);
878 if (!ret) err("Could not strdup(): %s", strerror(errno)); 1674 if (!ret) err("Could not strdup(): %s", strerror(errno));
879 return ret; 1675 return ret;
880} 1676}
882{ 1678{
883 void *ret = malloc(size); 1679 void *ret = malloc(size);
884 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size); 1680 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size);
885 return ret; 1681 return ret;
886} 1682}
887static void xstrcat(char **dst, const char *src, size_t *curr_len) 1683static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n)
888{ 1684{
889 long new_len; 1685 size_t new_len;
890 1686
891 new_len = strlen(*dst) + strlen(src); 1687 new_len = strlen(*dst) + strlen(src);
892 if (*curr_len <= new_len) { 1688 if (*curr_len <= new_len) {
893 *curr_len = new_len + (*curr_len / 2); 1689 *curr_len = new_len + (*curr_len / 2);
894 *dst = realloc(*dst, *curr_len); 1690 *dst = realloc(*dst, *curr_len);
895 if (!*dst) 1691 if (!*dst)
896 err("could not realloc %li bytes", (unsigned long)*curr_len); 1692 err("could not realloc() %li bytes", (unsigned long)*curr_len);
897 } 1693 }
898 1694
1695 if (n)
1696 strncat(*dst, src, n);
1697 else
899 strcat(*dst, src); 1698 strcat(*dst, src);
900} 1699}
901static inline void xchrcat(char **dst, const char append, size_t *curr_len) 1700static inline void xchrcat(char **dst, const char append, size_t *curr_len)
902{ 1701{
903 static char my_app[2]; 1702 static char my_app[2];
904 my_app[0] = append; 1703 my_app[0] = append;
912{ 1711{
913 if (argc < 2) 1712 if (argc < 2)
914 usage(EXIT_FAILURE); 1713 usage(EXIT_FAILURE);
915 parseargs(argc, argv); 1714 parseargs(argc, argv);
916 fclose(stdout); 1715 fclose(stdout);
1716#ifdef __BOUNDS_CHECKING_ON
1717 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()");
1718#endif
917 return EXIT_SUCCESS; 1719 return EXIT_SUCCESS;
918} 1720}

Legend:
Removed from v.1.54  
changed lines
  Added in v.1.127

  ViewVC Help
Powered by ViewVC 1.1.20