/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.62 Revision 1.127
1/* 1/*
2 * Copyright 2003 Ned Ludd <solar@gentoo.org>
3 * Copyright 1999-2005 Gentoo Foundation 2 * Copyright 2003-2006 Gentoo Foundation
4 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
5 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.62 2005/05/29 06:25:48 vapier Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.127 2006/02/17 07:13:54 solar Exp $
6 * 5 *
7 ******************************************************************** 6 * Copyright 2003-2006 Ned Ludd - <solar@gentoo.org>
8 * This program is free software; you can redistribute it and/or 7 * Copyright 2004-2006 Mike Frysinger - <vapier@gentoo.org>
9 * modify it under the terms of the GNU General Public License as
10 * published by the Free Software Foundation; either version 2 of the
11 * License, or (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place - Suite 330, Boston,
21 * MA 02111-1307, USA.
22 */ 8 */
23 9
24#include <stdio.h>
25#include <stdlib.h>
26#include <sys/types.h>
27#include <libgen.h>
28#include <limits.h>
29#define __USE_GNU
30#include <string.h>
31#include <errno.h>
32#include <unistd.h>
33#include <sys/stat.h>
34#include <dirent.h>
35#include <getopt.h>
36#include <assert.h>
37#include "paxelf.h" 10#include "paxinc.h"
38 11
39static const char *rcsid = "$Id: scanelf.c,v 1.62 2005/05/29 06:25:48 vapier Exp $"; 12static const char *rcsid = "$Id: scanelf.c,v 1.127 2006/02/17 07:13:54 solar Exp $";
40#define argv0 "scanelf" 13#define argv0 "scanelf"
41 14
15#define IS_MODIFIER(c) (c == '%' || c == '#')
16
42 17
43 18
44/* prototypes */ 19/* prototypes */
20static int scanelf_elfobj(elfobj *elf);
21static int scanelf_elf(const char *filename, int fd, size_t len);
22static int scanelf_archive(const char *filename, int fd, size_t len);
45static void scanelf_file(const char *filename); 23static void scanelf_file(const char *filename);
46static void scanelf_dir(const char *path); 24static void scanelf_dir(const char *path);
47static void scanelf_ldpath(); 25static void scanelf_ldpath(void);
48static void scanelf_envpath(); 26static void scanelf_envpath(void);
49static void usage(int status); 27static void usage(int status);
50static void parseargs(int argc, char *argv[]); 28static void parseargs(int argc, char *argv[]);
51static char *xstrdup(const char *s); 29static char *xstrdup(const char *s);
52static void *xmalloc(size_t size); 30static void *xmalloc(size_t size);
53static void xstrcat(char **dst, const char *src, size_t *curr_len); 31static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n);
32#define xstrcat(dst,src,curr_len) xstrncat(dst,src,curr_len,0)
54static inline void xchrcat(char **dst, const char append, size_t *curr_len); 33static inline void xchrcat(char **dst, const char append, size_t *curr_len);
55 34
56/* variables to control behavior */ 35/* variables to control behavior */
36static char match_etypes[126] = "";
57static char *ldpaths[256]; 37static char *ldpaths[256];
58static char scan_ldpath = 0; 38static char scan_ldpath = 0;
59static char scan_envpath = 0; 39static char scan_envpath = 0;
60static char scan_symlink = 1; 40static char scan_symlink = 1;
41static char scan_archives = 0;
61static char dir_recurse = 0; 42static char dir_recurse = 0;
62static char dir_crossmount = 1; 43static char dir_crossmount = 1;
63static char show_pax = 0; 44static char show_pax = 0;
64static char show_stack = 0; 45static char show_phdr = 0;
65static char show_textrel = 0; 46static char show_textrel = 0;
66static char show_rpath = 0; 47static char show_rpath = 0;
67static char show_needed = 0; 48static char show_needed = 0;
68static char show_interp = 0; 49static char show_interp = 0;
69static char show_bind = 0; 50static char show_bind = 0;
51static char show_soname = 0;
52static char show_textrels = 0;
70static char show_banner = 1; 53static char show_banner = 1;
71static char be_quiet = 0; 54static char be_quiet = 0;
72static char be_verbose = 0; 55static char be_verbose = 0;
56static char be_wewy_wewy_quiet = 0;
73static char *find_sym = NULL, *versioned_symname = NULL; 57static char *find_sym = NULL, *versioned_symname = NULL;
58static char *find_lib = NULL;
59static char *find_section = NULL;
74static char *out_format = NULL; 60static char *out_format = NULL;
61static char *search_path = NULL;
62static char fix_elf = 0;
63static char gmatch = 0;
64static char use_ldcache = 0;
75 65
66int match_bits = 0;
67caddr_t ldcache = 0;
68size_t ldcache_size = 0;
69unsigned long setpax = 0UL;
76 70
77/* sub-funcs for scanelf_file() */ 71/* sub-funcs for scanelf_file() */
72static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
73{
74 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
75#define GET_SYMTABS(B) \
76 if (elf->elf_class == ELFCLASS ## B) { \
77 Elf ## B ## _Shdr *symtab, *strtab, *dynsym, *dynstr; \
78 /* debug sections */ \
79 symtab = SHDR ## B (elf_findsecbyname(elf, ".symtab")); \
80 strtab = SHDR ## B (elf_findsecbyname(elf, ".strtab")); \
81 /* runtime sections */ \
82 dynsym = SHDR ## B (elf_findsecbyname(elf, ".dynsym")); \
83 dynstr = SHDR ## B (elf_findsecbyname(elf, ".dynstr")); \
84 if (symtab && dynsym) { \
85 *sym = (void*)((EGET(symtab->sh_size) > EGET(dynsym->sh_size)) ? symtab : dynsym); \
86 } else { \
87 *sym = (void*)(symtab ? symtab : dynsym); \
88 } \
89 if (strtab && dynstr) { \
90 *tab = (void*)((EGET(strtab->sh_size) > EGET(dynstr->sh_size)) ? strtab : dynstr); \
91 } else { \
92 *tab = (void*)(strtab ? strtab : dynstr); \
93 } \
94 }
95 GET_SYMTABS(32)
96 GET_SYMTABS(64)
97}
98
78static char *scanelf_file_pax(elfobj *elf, char *found_pax) 99static char *scanelf_file_pax(elfobj *elf, char *found_pax)
79{ 100{
80 static char *paxflags;
81 static char ret[7]; 101 static char ret[7];
82 unsigned long i, shown; 102 unsigned long i, shown;
83
84 103
85 if (!show_pax) return NULL; 104 if (!show_pax) return NULL;
86 105
87 shown = 0; 106 shown = 0;
88 memset(&ret, 0, sizeof(ret)); 107 memset(&ret, 0, sizeof(ret));
93 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 112 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
94 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 113 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
95 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 114 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
96 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ 115 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
97 continue; \ 116 continue; \
117 if (fix_elf && setpax) { \
118 /* set the paxctl flags */ \
119 ESET(phdr[i].p_flags, setpax); \
120 } \
98 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \ 121 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \
99 continue; \ 122 continue; \
100 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ 123 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
101 *found_pax = 1; \ 124 *found_pax = 1; \
102 ++shown; \ 125 ++shown; \
107 SHOW_PAX(64) 130 SHOW_PAX(64)
108 } 131 }
109 132
110 /* fall back to EI_PAX if no PT_PAX was found */ 133 /* fall back to EI_PAX if no PT_PAX was found */
111 if (!*ret) { 134 if (!*ret) {
135 static char *paxflags;
136
137 if (fix_elf && setpax) {
138 /* set the chpax settings */
139 // ESET(EHDR ## B (elf->ehdr)->e_ident[EI_PAX]), setpax);
140 }
141
112 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); 142 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
113 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) { 143 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) {
114 *found_pax = 1; 144 *found_pax = 1;
115 return paxflags; 145 return (be_wewy_wewy_quiet ? NULL : paxflags);
116 } 146 }
117 strncpy(ret, paxflags, sizeof(ret)); 147 strncpy(ret, paxflags, sizeof(ret));
118 // ++shown;
119 } 148 }
120 149
121 if (be_quiet && !shown) 150 if (be_wewy_wewy_quiet || (be_quiet && !shown))
122 return NULL;
123 return ret;
124
125}
126static char *scanelf_file_stack(elfobj *elf, char *found_stack, char *found_relro)
127{
128 static char ret[8] = "--- ---";
129 char *found;
130 unsigned long i, off, shown;
131
132 if (!show_stack) return NULL;
133
134 shown = 0;
135
136 if (elf->phdr) {
137#define SHOW_STACK(B) \
138 if (elf->elf_class == ELFCLASS ## B) { \
139 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
140 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
141 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
142 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
143 found = found_stack; \
144 off = 0; \
145 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
146 found = found_relro; \
147 off = 4; \
148 } else \
149 continue; \
150 if (be_quiet && !(EGET(phdr[i].p_flags) & PF_X)) \
151 continue; \
152 memcpy(ret+off, gnu_short_stack_flags(EGET(phdr[i].p_flags)), 3); \
153 *found = 1; \
154 ++shown; \
155 } \
156 }
157 SHOW_STACK(32)
158 SHOW_STACK(64)
159 }
160
161 if (be_quiet && !shown)
162 return NULL; 151 return NULL;
163 else 152 else
164 return ret; 153 return ret;
165} 154}
155
156static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
157{
158 static char ret[12];
159 char *found;
160 unsigned long i, shown, multi_stack, multi_relro, multi_load;
161 int max_pt_load;
162
163 if (!show_phdr) return NULL;
164
165 memcpy(ret, "--- --- ---\0", 12);
166
167 shown = 0;
168 multi_stack = multi_relro = multi_load = 0;
169 max_pt_load = elf_max_pt_load(elf);
170
171#define NOTE_GNU_STACK ".note.GNU-stack"
172#define SHOW_PHDR(B) \
173 if (elf->elf_class == ELFCLASS ## B) { \
174 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
175 Elf ## B ## _Off offset; \
176 uint32_t flags, check_flags; \
177 if (elf->phdr != NULL) { \
178 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
179 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
180 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
181 if (multi_stack++) warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
182 found = found_phdr; \
183 offset = 0; \
184 check_flags = PF_X; \
185 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
186 if (multi_relro++) warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
187 found = found_relro; \
188 offset = 4; \
189 check_flags = PF_X; \
190 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
191 if (ehdr->e_type == ET_DYN || ehdr->e_type == ET_EXEC) \
192 if (multi_load++ > max_pt_load) warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
193 found = found_load; \
194 offset = 8; \
195 check_flags = PF_W|PF_X; \
196 } else \
197 continue; \
198 flags = EGET(phdr[i].p_flags); \
199 if (be_quiet && ((flags & check_flags) != check_flags)) \
200 continue; \
201 if (fix_elf && ((flags & PF_X) != flags)) { \
202 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
203 ret[3] = ret[7] = '!'; \
204 flags = EGET(phdr[i].p_flags); \
205 } \
206 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
207 *found = 1; \
208 ++shown; \
209 } \
210 } else if (elf->shdr != NULL) { \
211 /* no program headers which means this is prob an object file */ \
212 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
213 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
214 char *str; \
215 if ((void*)strtbl > (void*)elf->data_end) \
216 goto skip_this_shdr##B; \
217 check_flags = SHF_WRITE|SHF_EXECINSTR; \
218 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
219 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
220 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
221 str = elf->data + offset; \
222 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
223 if (!strcmp(str, NOTE_GNU_STACK)) { \
224 if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \
225 flags = EGET(shdr[i].sh_flags); \
226 if (be_quiet && ((flags & check_flags) != check_flags)) \
227 continue; \
228 ++*found_phdr; \
229 shown = 1; \
230 if (flags & SHF_WRITE) ret[0] = 'W'; \
231 if (flags & SHF_ALLOC) ret[1] = 'A'; \
232 if (flags & SHF_EXECINSTR) ret[2] = 'X'; \
233 if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \
234 break; \
235 } \
236 } \
237 skip_this_shdr##B: \
238 if (!multi_stack) { \
239 *found_phdr = 1; \
240 shown = 1; \
241 memcpy(ret, "!WX", 3); \
242 } \
243 } \
244 }
245 SHOW_PHDR(32)
246 SHOW_PHDR(64)
247
248 if (be_wewy_wewy_quiet || (be_quiet && !shown))
249 return NULL;
250 else
251 return ret;
252}
166static char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 253static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
167{ 254{
168 static char *ret = "TEXTREL"; 255 static const char *ret = "TEXTREL";
169 unsigned long i; 256 unsigned long i;
170 257
171 if (!show_textrel) return NULL; 258 if (!show_textrel && !show_textrels) return NULL;
172 259
173 if (elf->phdr) { 260 if (elf->phdr) {
174#define SHOW_TEXTREL(B) \ 261#define SHOW_TEXTREL(B) \
175 if (elf->elf_class == ELFCLASS ## B) { \ 262 if (elf->elf_class == ELFCLASS ## B) { \
176 Elf ## B ## _Dyn *dyn; \ 263 Elf ## B ## _Dyn *dyn; \
184 dyn = DYN ## B (elf->data + offset); \ 271 dyn = DYN ## B (elf->data + offset); \
185 while (EGET(dyn->d_tag) != DT_NULL) { \ 272 while (EGET(dyn->d_tag) != DT_NULL) { \
186 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 273 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
187 *found_textrel = 1; \ 274 *found_textrel = 1; \
188 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ 275 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \
189 return ret; \ 276 return (be_wewy_wewy_quiet ? NULL : ret); \
190 } \ 277 } \
191 ++dyn; \ 278 ++dyn; \
192 } \ 279 } \
193 } } 280 } }
194 SHOW_TEXTREL(32) 281 SHOW_TEXTREL(32)
195 SHOW_TEXTREL(64) 282 SHOW_TEXTREL(64)
196 } 283 }
197 284
198 if (be_quiet) 285 if (be_quiet || be_wewy_wewy_quiet)
199 return NULL; 286 return NULL;
200 else 287 else
201 return " - "; 288 return " - ";
202} 289}
290static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
291{
292 unsigned long s, r, rmax;
293 void *symtab_void, *strtab_void, *text_void;
294
295 if (!show_textrels) return NULL;
296
297 /* don't search for TEXTREL's if the ELF doesn't have any */
298 if (!*found_textrel) scanelf_file_textrel(elf, found_textrel);
299 if (!*found_textrel) return NULL;
300
301 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
302 text_void = elf_findsecbyname(elf, ".text");
303
304 if (symtab_void && strtab_void && text_void && elf->shdr) {
305#define SHOW_TEXTRELS(B) \
306 if (elf->elf_class == ELFCLASS ## B) { \
307 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
308 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
309 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
310 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
311 Elf ## B ## _Shdr *text = SHDR ## B (text_void); \
312 Elf ## B ## _Addr vaddr = EGET(text->sh_addr); \
313 uint ## B ## _t memsz = EGET(text->sh_size); \
314 Elf ## B ## _Rel *rel; \
315 Elf ## B ## _Rela *rela; \
316 /* search the section headers for relocations */ \
317 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \
318 uint32_t sh_type = EGET(shdr[s].sh_type); \
319 if (sh_type == SHT_REL) { \
320 rel = REL ## B (elf->data + EGET(shdr[s].sh_offset)); \
321 rela = NULL; \
322 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \
323 } else if (sh_type == SHT_RELA) { \
324 rel = NULL; \
325 rela = RELA ## B (elf->data + EGET(shdr[s].sh_offset)); \
326 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \
327 } else \
328 continue; \
329 /* now see if any of the relocs are in the .text */ \
330 for (r = 0; r < rmax; ++r) { \
331 unsigned long sym_max; \
332 Elf ## B ## _Addr offset_tmp; \
333 Elf ## B ## _Sym *func; \
334 Elf ## B ## _Sym *sym; \
335 Elf ## B ## _Addr r_offset; \
336 uint ## B ## _t r_info; \
337 if (sh_type == SHT_REL) { \
338 r_offset = EGET(rel[r].r_offset); \
339 r_info = EGET(rel[r].r_info); \
340 } else { \
341 r_offset = EGET(rela[r].r_offset); \
342 r_info = EGET(rela[r].r_info); \
343 } \
344 /* make sure this relocation is inside of the .text */ \
345 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \
346 if (be_verbose <= 2) continue; \
347 } else \
348 *found_textrels = 1; \
349 /* locate this relocation symbol name */ \
350 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
351 if ((void*)sym > (void*)elf->data_end) { \
352 warn("%s: corrupt ELF symbol", elf->filename); \
353 continue; \
354 } \
355 sym_max = ELF ## B ## _R_SYM(r_info); \
356 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
357 sym += sym_max; \
358 else \
359 sym = NULL; \
360 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
361 /* show the raw details about this reloc */ \
362 printf(" %s: ", elf->base_filename); \
363 if (sym && sym->st_name) \
364 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \
365 else \
366 printf("(memory/fake?)"); \
367 printf(" [0x%lX]", (unsigned long)r_offset); \
368 /* now try to find the closest symbol that this rel is probably in */ \
369 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
370 func = NULL; \
371 offset_tmp = 0; \
372 while (sym_max--) { \
373 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \
374 func = sym; \
375 offset_tmp = EGET(sym->st_value); \
376 } \
377 ++sym; \
378 } \
379 printf(" in "); \
380 if (func && func->st_name) \
381 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(func->st_name))); \
382 else \
383 printf("(NULL: fake?)"); \
384 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
385 } \
386 } }
387 SHOW_TEXTRELS(32)
388 SHOW_TEXTRELS(64)
389 }
390 if (!*found_textrels)
391 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
392
393 return NULL;
394}
395
396static void rpath_security_checks(elfobj *, char *, const char *);
397static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
398{
399 struct stat st;
400 switch (*item) {
401 case '/': break;
402 case '.':
403 warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename);
404 break;
405 case ':':
406 case '\0':
407 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
408 break;
409 case '$':
410 if (fstat(elf->fd, &st) != -1)
411 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
412 warnf("Security problem with %s='%s' in %s with mode set of %o",
413 dt_type, item, elf->filename, st.st_mode & 07777);
414 break;
415 default:
416 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
417 break;
418 }
419}
203static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) 420static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
204{ 421{
205 /* TODO: when checking RPATH entries, check each subpath (between :) in ld.so.conf */
206 unsigned long i, s; 422 unsigned long i, s;
207 char *rpath, *runpath, **r; 423 char *rpath, *runpath, **r;
208 void *strtbl_void; 424 void *strtbl_void;
209 425
210 if (!show_rpath) return; 426 if (!show_rpath) return;
238 ++dyn; \ 454 ++dyn; \
239 continue; \ 455 continue; \
240 } \ 456 } \
241 /* Verify the memory is somewhat sane */ \ 457 /* Verify the memory is somewhat sane */ \
242 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 458 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
243 if (offset < elf->len) { \ 459 if (offset < (Elf ## B ## _Off)elf->len) { \
244 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ 460 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
245 *r = (char*)(elf->data + offset); \ 461 *r = (char*)(elf->data + offset); \
462 /* cache the length in case we need to nuke this section later on */ \
463 if (fix_elf) \
464 offset = strlen(*r); \
246 /* If quiet, don't output paths in ld.so.conf */ \ 465 /* If quiet, don't output paths in ld.so.conf */ \
247 if (be_quiet) \ 466 if (be_quiet) { \
467 size_t len; \
468 char *start, *end; \
469 /* note that we only 'chop' off leading known paths. */ \
470 /* since *r is read-only memory, we can only move the ptr forward. */ \
471 start = *r; \
472 /* scan each path in : delimited list */ \
473 while (start) { \
474 rpath_security_checks(elf, start, get_elfdtype(word)); \
475 end = strchr(start, ':'); \
476 len = (end ? abs(end - start) : strlen(start)); \
477 if (use_ldcache) \
248 for (s = 0; ldpaths[s]; ++s) \ 478 for (s = 0; ldpaths[s]; ++s) \
249 if (!strcmp(ldpaths[s], *r)) { \ 479 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \
250 *r = NULL; \ 480 *r = end; \
481 /* corner case ... if RPATH reads "/usr/lib:", we want \
482 * to show ':' rather than '' */ \
483 if (end && end[1] != '\0') \
484 (*r)++; \
485 break; \
486 } \
487 if (!*r || !end) \
251 break; \ 488 break; \
489 else \
490 start = start + len + 1; \
491 } \
492 } \
493 if (*r) { \
494 if (fix_elf > 2 || (fix_elf && **r == '\0')) { \
495 /* just nuke it */ \
496 nuke_it##B: \
497 memset(*r, 0x00, offset); \
498 *r = NULL; \
499 ESET(dyn->d_tag, DT_DEBUG); \
500 ESET(dyn->d_un.d_ptr, 0); \
501 } else if (fix_elf) { \
502 /* try to clean "bad" paths */ \
503 size_t len, tmpdir_len; \
504 char *start, *end; \
505 const char *tmpdir; \
506 start = *r; \
507 tmpdir = (getenv("TMPDIR") ? : "."); \
508 tmpdir_len = strlen(tmpdir); \
509 while (1) { \
510 end = strchr(start, ':'); \
511 if (start == end) { \
512 eat_this_path##B: \
513 len = strlen(end); \
514 memmove(start, end+1, len); \
515 start[len-1] = '\0'; \
516 end = start - 1; \
517 } else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \
518 if (!end) { \
519 if (start == *r) \
520 goto nuke_it##B; \
521 *--start = '\0'; \
522 } else \
523 goto eat_this_path##B; \
524 } \
525 if (!end) \
526 break; \
527 start = end + 1; \
252 } \ 528 } \
529 if (**r == '\0') \
530 goto nuke_it##B; \
531 } \
532 if (*r) \
253 if (*r) *found_rpath = 1; \ 533 *found_rpath = 1; \
534 } \
254 } \ 535 } \
255 ++dyn; \ 536 ++dyn; \
256 } \ 537 } \
257 } } 538 } }
258 SHOW_RPATH(32) 539 SHOW_RPATH(32)
259 SHOW_RPATH(64) 540 SHOW_RPATH(64)
260 } 541 }
542
543 if (be_wewy_wewy_quiet) return;
261 544
262 if (rpath && runpath) { 545 if (rpath && runpath) {
263 if (!strcmp(rpath, runpath)) { 546 if (!strcmp(rpath, runpath)) {
264 xstrcat(ret, runpath, ret_len); 547 xstrcat(ret, runpath, ret_len);
265 } else { 548 } else {
273 } else if (rpath || runpath) 556 } else if (rpath || runpath)
274 xstrcat(ret, (runpath ? runpath : rpath), ret_len); 557 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
275 else if (!be_quiet) 558 else if (!be_quiet)
276 xstrcat(ret, " - ", ret_len); 559 xstrcat(ret, " - ", ret_len);
277} 560}
561
562#define LDSO_CACHE_MAGIC "ld.so-"
563#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
564#define LDSO_CACHE_VER "1.7.0"
565#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
566#define FLAG_ANY -1
567#define FLAG_TYPE_MASK 0x00ff
568#define FLAG_LIBC4 0x0000
569#define FLAG_ELF 0x0001
570#define FLAG_ELF_LIBC5 0x0002
571#define FLAG_ELF_LIBC6 0x0003
572#define FLAG_REQUIRED_MASK 0xff00
573#define FLAG_SPARC_LIB64 0x0100
574#define FLAG_IA64_LIB64 0x0200
575#define FLAG_X8664_LIB64 0x0300
576#define FLAG_S390_LIB64 0x0400
577#define FLAG_POWERPC_LIB64 0x0500
578#define FLAG_MIPS64_LIBN32 0x0600
579#define FLAG_MIPS64_LIBN64 0x0700
580
581static char *lookup_cache_lib(elfobj *, char *);
582static char *lookup_cache_lib(elfobj *elf, char *fname)
583{
584 int fd = 0;
585 char *strs;
586 static char buf[__PAX_UTILS_PATH_MAX] = "";
587 const char *cachefile = "/etc/ld.so.cache";
588 struct stat st;
589
590 typedef struct {
591 char magic[LDSO_CACHE_MAGIC_LEN];
592 char version[LDSO_CACHE_VER_LEN];
593 int nlibs;
594 } header_t;
595 header_t *header;
596
597 typedef struct {
598 int flags;
599 int sooffset;
600 int liboffset;
601 } libentry_t;
602 libentry_t *libent;
603
604 if (fname == NULL)
605 return NULL;
606
607 if (ldcache == 0) {
608 if (stat(cachefile, &st) || (fd = open(cachefile, O_RDONLY)) == -1)
609 return NULL;
610
611 /* cache these values so we only map/unmap the cache file once */
612 ldcache_size = st.st_size;
613 ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
614
615 close(fd);
616
617 if (ldcache == (caddr_t)-1) {
618 ldcache = 0;
619 return NULL;
620 }
621
622 if (memcmp(((header_t *) ldcache)->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN))
623 return NULL;
624 if (memcmp (((header_t *) ldcache)->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
625 return NULL;
626 }
627
628 header = (header_t *) ldcache;
629 libent = (libentry_t *) (ldcache + sizeof(header_t));
630 strs = (char *) &libent[header->nlibs];
631
632 for (fd = 0; fd < header->nlibs; fd++) {
633 /* this should be more fine grained, but for now we assume that
634 * diff arches will not be cached together. and we ignore the
635 * the different multilib mips cases. */
636 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
637 continue;
638 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
639 continue;
640
641 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
642 continue;
643 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
644 }
645 return buf;
646}
647
648
278static void scanelf_file_needed(elfobj *elf, char *found_needed, char **ret, size_t *ret_len) 649static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
279{ 650{
280 unsigned long i; 651 unsigned long i;
281 char *needed; 652 char *needed;
282 void *strtbl_void; 653 void *strtbl_void;
654 char *p;
283 655
284 if (!show_needed) return; 656 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL;
285 657
286 strtbl_void = elf_findsecbyname(elf, ".dynstr"); 658 strtbl_void = elf_findsecbyname(elf, ".dynstr");
287 659
288 if (elf->phdr && strtbl_void) { 660 if (elf->phdr && strtbl_void) {
289#define SHOW_NEEDED(B) \ 661#define SHOW_NEEDED(B) \
299 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 671 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
300 dyn = DYN ## B (elf->data + offset); \ 672 dyn = DYN ## B (elf->data + offset); \
301 while (EGET(dyn->d_tag) != DT_NULL) { \ 673 while (EGET(dyn->d_tag) != DT_NULL) { \
302 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 674 if (EGET(dyn->d_tag) == DT_NEEDED) { \
303 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 675 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
304 if (offset >= elf->len) { \ 676 if (offset >= (Elf ## B ## _Off)elf->len) { \
305 ++dyn; \ 677 ++dyn; \
306 continue; \ 678 continue; \
307 } \ 679 } \
308 needed = (char*)(elf->data + offset); \ 680 needed = (char*)(elf->data + offset); \
681 if (op == 0) { \
682 if (!be_wewy_wewy_quiet) { \
309 if (*found_needed) xchrcat(ret, ',', ret_len); \ 683 if (*found_needed) xchrcat(ret, ',', ret_len); \
684 if (use_ldcache) \
685 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
686 needed = p; \
310 xstrcat(ret, needed, ret_len); \ 687 xstrcat(ret, needed, ret_len); \
688 } \
311 *found_needed = 1; \ 689 *found_needed = 1; \
690 } else { \
691 if (!strncmp(find_lib, needed, strlen( !gmatch ? needed : find_lib))) { \
692 *found_lib = 1; \
693 return (be_wewy_wewy_quiet ? NULL : needed); \
694 } \
695 } \
312 } \ 696 } \
313 ++dyn; \ 697 ++dyn; \
314 } \ 698 } \
315 } } 699 } }
316 SHOW_NEEDED(32) 700 SHOW_NEEDED(32)
317 SHOW_NEEDED(64) 701 SHOW_NEEDED(64)
702 if (op == 0 && !*found_needed && be_verbose)
703 warn("ELF lacks DT_NEEDED sections: %s", elf->filename);
318 } 704 }
705
706 return NULL;
319} 707}
320static char *scanelf_file_interp(elfobj *elf, char *found_interp) 708static char *scanelf_file_interp(elfobj *elf, char *found_interp)
321{ 709{
322 void *strtbl_void; 710 void *strtbl_void;
323 711
328 if (strtbl_void) { 716 if (strtbl_void) {
329#define SHOW_INTERP(B) \ 717#define SHOW_INTERP(B) \
330 if (elf->elf_class == ELFCLASS ## B) { \ 718 if (elf->elf_class == ELFCLASS ## B) { \
331 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 719 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
332 *found_interp = 1; \ 720 *found_interp = 1; \
333 return elf->data + EGET(strtbl->sh_offset); \ 721 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \
334 } 722 }
335 SHOW_INTERP(32) 723 SHOW_INTERP(32)
336 SHOW_INTERP(64) 724 SHOW_INTERP(64)
337 } 725 }
338 return NULL; 726 return NULL;
360 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 748 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
361 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \ 749 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \
362 { \ 750 { \
363 if (be_quiet) return NULL; \ 751 if (be_quiet) return NULL; \
364 *found_bind = 1; \ 752 *found_bind = 1; \
365 return "NOW"; \ 753 return (char *)(be_wewy_wewy_quiet ? NULL : "NOW"); \
366 } \ 754 } \
367 ++dyn; \ 755 ++dyn; \
368 } \ 756 } \
369 } \ 757 } \
370 } 758 }
371 SHOW_BIND(32) 759 SHOW_BIND(32)
372 SHOW_BIND(64) 760 SHOW_BIND(64)
373 761
762 if (be_wewy_wewy_quiet) return NULL;
763
374 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 764 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) {
375 return NULL; 765 return NULL;
376 } else { 766 } else {
377 *found_bind = 1; 767 *found_bind = 1;
378 return "LAZY"; 768 return (char *) "LAZY";
379 } 769 }
380} 770}
381static char *scanelf_file_sym(elfobj *elf, char *found_sym, const char *filename) 771static char *scanelf_file_soname(elfobj *elf, char *found_soname)
382{ 772{
383 unsigned long i; 773 unsigned long i;
774 char *soname;
775 void *strtbl_void;
776
777 if (!show_soname) return NULL;
778
779 strtbl_void = elf_findsecbyname(elf, ".dynstr");
780
781 if (elf->phdr && strtbl_void) {
782#define SHOW_SONAME(B) \
783 if (elf->elf_class == ELFCLASS ## B) { \
784 Elf ## B ## _Dyn *dyn; \
785 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
786 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
787 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
788 Elf ## B ## _Off offset; \
789 /* only look for soname in shared objects */ \
790 if (ehdr->e_type != ET_DYN) \
791 return NULL; \
792 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
793 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \
794 offset = EGET(phdr[i].p_offset); \
795 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
796 dyn = DYN ## B (elf->data + offset); \
797 while (EGET(dyn->d_tag) != DT_NULL) { \
798 if (EGET(dyn->d_tag) == DT_SONAME) { \
799 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
800 if (offset >= (Elf ## B ## _Off)elf->len) { \
801 ++dyn; \
802 continue; \
803 } \
804 soname = (char*)(elf->data + offset); \
805 *found_soname = 1; \
806 return (be_wewy_wewy_quiet ? NULL : soname); \
807 } \
808 ++dyn; \
809 } \
810 } }
811 SHOW_SONAME(32)
812 SHOW_SONAME(64)
813 }
814
815 return NULL;
816}
817static char *scanelf_file_sym(elfobj *elf, char *found_sym)
818{
819 unsigned long i;
820 char *ret;
384 void *symtab_void, *strtab_void; 821 void *symtab_void, *strtab_void;
385 822
386 if (!find_sym) return NULL; 823 if (!find_sym) return NULL;
824 ret = find_sym;
387 825
388 symtab_void = elf_findsecbyname(elf, ".symtab"); 826 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
389 strtab_void = elf_findsecbyname(elf, ".strtab");
390 827
391 if (symtab_void && strtab_void) { 828 if (symtab_void && strtab_void) {
392 char *base, *basemem;
393 basemem = xstrdup(filename);
394 base = basename(basemem);
395#define FIND_SYM(B) \ 829#define FIND_SYM(B) \
396 if (elf->elf_class == ELFCLASS ## B) { \ 830 if (elf->elf_class == ELFCLASS ## B) { \
397 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 831 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
398 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 832 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
399 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 833 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
400 unsigned long cnt = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 834 unsigned long cnt = EGET(symtab->sh_entsize); \
401 char *symname; \ 835 char *symname; \
836 if (cnt) \
837 cnt = EGET(symtab->sh_size) / cnt; \
402 for (i = 0; i < cnt; ++i) { \ 838 for (i = 0; i < cnt; ++i) { \
403 if (sym->st_name) { \ 839 if (sym->st_name) { \
404 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 840 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
841 if ((void*)symname > (void*)elf->data_end) { \
842 warnf("%s: corrupt ELF symbols", elf->filename); \
843 continue; \
844 } \
405 if (*find_sym == '*') { \ 845 if (*find_sym == '*') { \
406 printf("%s(%s) %5lX %15s %s\n", \ 846 printf("%s(%s) %5lX %15s %s\n", \
407 ((*found_sym == 0) ? "\n\t" : "\t"), \ 847 ((*found_sym == 0) ? "\n\t" : "\t"), \
408 base, \ 848 elf->base_filename, \
409 (long)sym->st_size, \ 849 (unsigned long)sym->st_size, \
410 (char *)get_elfstttype(sym->st_info), \ 850 get_elfstttype(sym->st_info), \
411 symname); \ 851 symname); \
412 *found_sym = 1; \ 852 *found_sym = 1; \
413 } else if ((strcmp(find_sym, symname) == 0) || \ 853 } else { \
854 char *this_sym, *next_sym; \
855 this_sym = find_sym; \
856 do { \
857 next_sym = strchr(this_sym, ','); \
858 if (next_sym == NULL) \
859 next_sym = this_sym + strlen(this_sym); \
860 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
414 (strcmp(symname, versioned_symname) == 0)) \ 861 (strcmp(symname, versioned_symname) == 0)) { \
862 ret = this_sym; \
415 (*found_sym)++; \ 863 (*found_sym)++; \
864 goto break_out; \
865 } \
866 this_sym = next_sym + 1; \
867 } while (*next_sym != '\0'); \
868 } \
416 } \ 869 } \
417 ++sym; \ 870 ++sym; \
418 } } 871 } }
419 FIND_SYM(32) 872 FIND_SYM(32)
420 FIND_SYM(64) 873 FIND_SYM(64)
421 free(basemem);
422 } 874 }
875
876break_out:
877 if (be_wewy_wewy_quiet) return NULL;
878
423 if (*find_sym != '*' && *found_sym) 879 if (*find_sym != '*' && *found_sym)
424 return find_sym; 880 return ret;
425 if (be_quiet) 881 if (be_quiet)
426 return NULL; 882 return NULL;
427 else 883 else
428 return " - "; 884 return (char *)" - ";
429} 885}
886
887
888static char *scanelf_file_sections(elfobj *elf, char *found_section)
889{
890 if (!find_section)
891 return NULL;
892
893#define FIND_SECTION(B) \
894 if (elf->elf_class == ELFCLASS ## B) { \
895 Elf ## B ## _Shdr *section; \
896 section = SHDR ## B (elf_findsecbyname(elf, find_section)); \
897 if (section != NULL) \
898 *found_section = 1; \
899 }
900 FIND_SECTION(32)
901 FIND_SECTION(64)
902
903
904 if (be_wewy_wewy_quiet) return NULL;
905
906 if (*found_section)
907 return find_section;
908
909 if (be_quiet)
910 return NULL;
911 else
912 return (char *)" - ";
913}
914
430/* scan an elf file and show all the fun stuff */ 915/* scan an elf file and show all the fun stuff */
431// #define prints(str) fputs(str, stdout)
432#define prints(str) write(fileno(stdout), str, strlen(str)) 916#define prints(str) write(fileno(stdout), str, strlen(str))
433static void scanelf_file(const char *filename) 917static int scanelf_elfobj(elfobj *elf)
434{ 918{
435 unsigned long i; 919 unsigned long i;
436 char found_pax, found_stack, found_relro, found_textrel, 920 char found_pax, found_phdr, found_relro, found_load, found_textrel,
437 found_rpath, found_needed, found_interp, found_bind, 921 found_rpath, found_needed, found_interp, found_bind, found_soname,
438 found_sym, found_file; 922 found_sym, found_lib, found_file, found_textrels, found_section;
439 elfobj *elf;
440 struct stat st;
441 static char *out_buffer = NULL; 923 static char *out_buffer = NULL;
442 static size_t out_len; 924 static size_t out_len;
443 925
444 /* make sure 'filename' exists */
445 if (lstat(filename, &st) == -1) {
446 if (be_verbose > 2) printf("%s: does not exist\n", filename);
447 return;
448 }
449 /* always handle regular files and handle symlinked files if no -y */
450 if (S_ISLNK(st.st_mode)) {
451 if (!scan_symlink) return;
452 stat(filename, &st);
453 }
454 if (!S_ISREG(st.st_mode)) {
455 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
456 return;
457 }
458
459 found_pax = found_stack = found_relro = found_textrel = \ 926 found_pax = found_phdr = found_relro = found_load = found_textrel = \
460 found_rpath = found_needed = found_interp = found_bind = \ 927 found_rpath = found_needed = found_interp = found_bind = found_soname = \
461 found_sym = found_file = 0; 928 found_sym = found_lib = found_file = found_textrels = found_section = 0;
462 929
463 /* verify this is real ELF */
464 if ((elf = readelf(filename)) == NULL) {
465 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
466 return;
467 }
468
469 if (be_verbose > 1) 930 if (be_verbose > 2)
470 printf("%s: scanning file {%s,%s}\n", filename, 931 printf("%s: scanning file {%s,%s}\n", elf->filename,
471 get_elfeitype(elf, EI_CLASS, elf->elf_class), 932 get_elfeitype(EI_CLASS, elf->elf_class),
472 get_elfeitype(elf, EI_DATA, elf->data[EI_DATA])); 933 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
473 else if (be_verbose) 934 else if (be_verbose > 1)
474 printf("%s: scanning file\n", filename); 935 printf("%s: scanning file\n", elf->filename);
475 936
476 /* init output buffer */ 937 /* init output buffer */
477 if (!out_buffer) { 938 if (!out_buffer) {
478 out_len = sizeof(char) * 80; 939 out_len = sizeof(char) * 80;
479 out_buffer = (char*)xmalloc(out_len); 940 out_buffer = (char*)xmalloc(out_len);
481 *out_buffer = '\0'; 942 *out_buffer = '\0';
482 943
483 /* show the header */ 944 /* show the header */
484 if (!be_quiet && show_banner) { 945 if (!be_quiet && show_banner) {
485 for (i = 0; out_format[i]; ++i) { 946 for (i = 0; out_format[i]; ++i) {
486 if (out_format[i] != '%') continue; 947 if (!IS_MODIFIER(out_format[i])) continue;
487 948
488 switch (out_format[++i]) { 949 switch (out_format[++i]) {
489 case '%': break; 950 case '%': break;
951 case '#': break;
952 case 'F':
953 case 'p':
490 case 'F': prints("FILE "); found_file = 1; break; 954 case 'f': prints("FILE "); found_file = 1; break;
491 case 'o': prints(" TYPE "); break; 955 case 'o': prints(" TYPE "); break;
492 case 'x': prints(" PAX "); break; 956 case 'x': prints(" PAX "); break;
493 case 'e': prints("STK/REL "); break; 957 case 'e': prints("STK/REL/PTL "); break;
494 case 't': prints("TEXTREL "); break; 958 case 't': prints("TEXTREL "); break;
495 case 'r': prints("RPATH "); break; 959 case 'r': prints("RPATH "); break;
496 case 'n': prints("NEEDED "); break; 960 case 'n': prints("NEEDED "); break;
497 case 'i': prints("INTERP "); break; 961 case 'i': prints("INTERP "); break;
498 case 'b': prints("BIND "); break; 962 case 'b': prints("BIND "); break;
963 case 'S': prints("SONAME "); break;
499 case 's': prints("SYM "); break; 964 case 's': prints("SYM "); break;
965 case 'N': prints("LIB "); break;
966 case 'T': prints("TEXTRELS "); break;
967 case 'k': prints("SECTION "); break;
968 default: warnf("'%c' has no title ?", out_format[i]);
500 } 969 }
501 } 970 }
502 if (!found_file) prints("FILE "); 971 if (!found_file) prints("FILE ");
503 prints("\n"); 972 prints("\n");
504 found_file = 0; 973 found_file = 0;
506 } 975 }
507 976
508 /* dump all the good stuff */ 977 /* dump all the good stuff */
509 for (i = 0; out_format[i]; ++i) { 978 for (i = 0; out_format[i]; ++i) {
510 const char *out; 979 const char *out;
980 const char *tmp;
511 981
512 /* make sure we trim leading spaces in quiet mode */ 982 if (!IS_MODIFIER(out_format[i])) {
513 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
514 *out_buffer = '\0';
515
516 if (out_format[i] != '%') {
517 xchrcat(&out_buffer, out_format[i], &out_len); 983 xchrcat(&out_buffer, out_format[i], &out_len);
518 continue; 984 continue;
519 } 985 }
520 986
521 out = NULL; 987 out = NULL;
988 be_wewy_wewy_quiet = (out_format[i] == '#');
522 switch (out_format[++i]) { 989 switch (out_format[++i]) {
990 case '%':
991 case '#':
523 case '%': xchrcat(&out_buffer, '%', &out_len); break; 992 xchrcat(&out_buffer, out_format[i], &out_len); break;
524 case 'F': found_file = 1; xstrcat(&out_buffer, filename, &out_len); break; 993 case 'F':
994 found_file = 1;
995 if (be_wewy_wewy_quiet) break;
996 xstrcat(&out_buffer, elf->filename, &out_len);
997 break;
998 case 'p':
999 found_file = 1;
1000 if (be_wewy_wewy_quiet) break;
1001 tmp = elf->filename;
1002 if (search_path) {
1003 ssize_t len_search = strlen(search_path);
1004 ssize_t len_file = strlen(elf->filename);
1005 if (!strncmp(elf->filename, search_path, len_search) && \
1006 len_file > len_search)
1007 tmp += len_search;
1008 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++;
1009 }
1010 xstrcat(&out_buffer, tmp, &out_len);
1011 break;
1012 case 'f':
1013 found_file = 1;
1014 if (be_wewy_wewy_quiet) break;
1015 tmp = strrchr(elf->filename, '/');
1016 tmp = (tmp == NULL ? elf->filename : tmp+1);
1017 xstrcat(&out_buffer, tmp, &out_len);
1018 break;
525 case 'o': out = get_elfetype(elf); break; 1019 case 'o': out = get_elfetype(elf); break;
526 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1020 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
527 case 'e': out = scanelf_file_stack(elf, &found_stack, &found_relro); break; 1021 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
528 case 't': out = scanelf_file_textrel(elf, &found_textrel); break; 1022 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
1023 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
529 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; 1024 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1025 case 'n':
530 case 'n': scanelf_file_needed(elf, &found_needed, &out_buffer, &out_len); break; 1026 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
531 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1027 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
532 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1028 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
1029 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
533 case 's': out = scanelf_file_sym(elf, &found_sym, filename); break; 1030 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1031 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1032 default: warnf("'%c' has no scan code?", out_format[i]);
534 } 1033 }
1034 if (out) {
1035 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
1036 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
1037 xstrncat(&out_buffer, out, &out_len, (tmp-out));
1038 else
535 if (out) xstrcat(&out_buffer, out, &out_len); 1039 xstrcat(&out_buffer, out, &out_len);
1040 }
536 } 1041 }
537 1042
538#define FOUND_SOMETHING() \ 1043#define FOUND_SOMETHING() \
539 (found_pax || found_stack || found_textrel || found_rpath || \ 1044 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
540 found_needed || found_interp || found_bind || found_sym) 1045 found_rpath || found_needed || found_interp || found_bind || \
1046 found_soname || found_sym || found_lib || found_textrels || found_section )
541 1047
542 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1048 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
543 xchrcat(&out_buffer, ' ', &out_len); 1049 xchrcat(&out_buffer, ' ', &out_len);
544 xstrcat(&out_buffer, filename, &out_len); 1050 xstrcat(&out_buffer, elf->filename, &out_len);
545 } 1051 }
546 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) 1052 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) {
547 puts(out_buffer); 1053 puts(out_buffer);
1054 fflush(stdout);
1055 }
548 1056
1057 return 0;
1058}
1059
1060/* scan a single elf */
1061static int scanelf_elf(const char *filename, int fd, size_t len)
1062{
1063 int ret = 1;
1064 elfobj *elf;
1065
1066 /* verify this is real ELF */
1067 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1068 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1069 return ret;
1070 }
1071 switch (match_bits) {
1072 case 32:
1073 if (elf->elf_class != ELFCLASS32)
1074 goto label_done;
1075 break;
1076 case 64:
1077 if (elf->elf_class != ELFCLASS64)
1078 goto label_done;
1079 break;
1080 default: break;
1081 }
1082 if (strlen(match_etypes)) {
1083 char sbuf[126];
1084 strncpy(sbuf, match_etypes, sizeof(sbuf));
1085 if (strchr(match_etypes, ',') != NULL) {
1086 char *p;
1087 while((p = strrchr(sbuf, ',')) != NULL) {
1088 *p = 0;
1089 if (atoi(p+1) == get_etype(elf))
1090 goto label_ret;
1091 }
1092 }
1093 if (atoi(sbuf) != get_etype(elf))
1094 goto label_done;
1095 }
1096
1097label_ret:
1098 ret = scanelf_elfobj(elf);
1099
1100label_done:
549 unreadelf(elf); 1101 unreadelf(elf);
1102 return ret;
1103}
1104
1105/* scan an archive of elfs */
1106static int scanelf_archive(const char *filename, int fd, size_t len)
1107{
1108 archive_handle *ar;
1109 archive_member *m;
1110 char *ar_buffer;
1111 elfobj *elf;
1112
1113 ar = ar_open_fd(filename, fd);
1114 if (ar == NULL)
1115 return 1;
1116
1117 ar_buffer = (char*)mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1118 while ((m=ar_next(ar)) != NULL) {
1119 elf = readelf_buffer(m->name, ar_buffer+lseek(fd,0,SEEK_CUR), m->size);
1120 if (elf) {
1121 scanelf_elfobj(elf);
1122 unreadelf(elf);
1123 }
1124 }
1125 munmap(ar_buffer, len);
1126
1127 return 0;
1128}
1129/* scan a file which may be an elf or an archive or some other magical beast */
1130static void scanelf_file(const char *filename)
1131{
1132 struct stat st;
1133 int fd;
1134
1135 /* make sure 'filename' exists */
1136 if (lstat(filename, &st) == -1) {
1137 if (be_verbose > 2) printf("%s: does not exist\n", filename);
1138 return;
1139 }
1140
1141 /* always handle regular files and handle symlinked files if no -y */
1142 if (S_ISLNK(st.st_mode)) {
1143 if (!scan_symlink) return;
1144 stat(filename, &st);
1145 }
1146 if (!S_ISREG(st.st_mode)) {
1147 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1148 return;
1149 }
1150
1151 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1152 return;
1153
1154 if (scanelf_elf(filename, fd, st.st_size) == 1 && scan_archives)
1155 /* if it isn't an ELF, maybe it's an .a archive */
1156 scanelf_archive(filename, fd, st.st_size);
1157
1158 close(fd);
550} 1159}
551 1160
552/* scan a directory for ET_EXEC files and print when we find one */ 1161/* scan a directory for ET_EXEC files and print when we find one */
553static void scanelf_dir(const char *path) 1162static void scanelf_dir(const char *path)
554{ 1163{
555 register DIR *dir; 1164 register DIR *dir;
556 register struct dirent *dentry; 1165 register struct dirent *dentry;
557 struct stat st_top, st; 1166 struct stat st_top, st;
558 char buf[_POSIX_PATH_MAX]; 1167 char buf[__PAX_UTILS_PATH_MAX];
559 size_t pathlen = 0, len = 0; 1168 size_t pathlen = 0, len = 0;
560 1169
561 /* make sure path exists */ 1170 /* make sure path exists */
562 if (lstat(path, &st_top) == -1) { 1171 if (lstat(path, &st_top) == -1) {
563 if (be_verbose > 2) printf("%s: does not exist\n", path); 1172 if (be_verbose > 2) printf("%s: does not exist\n", path);
573 /* now scan the dir looking for fun stuff */ 1182 /* now scan the dir looking for fun stuff */
574 if ((dir = opendir(path)) == NULL) { 1183 if ((dir = opendir(path)) == NULL) {
575 warnf("could not opendir %s: %s", path, strerror(errno)); 1184 warnf("could not opendir %s: %s", path, strerror(errno));
576 return; 1185 return;
577 } 1186 }
578 if (be_verbose) printf("%s: scanning dir\n", path); 1187 if (be_verbose > 1) printf("%s: scanning dir\n", path);
579 1188
580 pathlen = strlen(path); 1189 pathlen = strlen(path);
581 while ((dentry = readdir(dir))) { 1190 while ((dentry = readdir(dir))) {
582 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1191 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
583 continue; 1192 continue;
584 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1193 len = (pathlen + 1 + strlen(dentry->d_name) + 1);
585 if (len >= sizeof(buf)) { 1194 if (len >= sizeof(buf)) {
586 warnf("Skipping '%s': len > sizeof(buf); %d > %d\n", path, (int)len, (int)sizeof(buf)); 1195 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
1196 (unsigned long)len, (unsigned long)sizeof(buf));
587 continue; 1197 continue;
588 } 1198 }
589 sprintf(buf, "%s/%s", path, dentry->d_name); 1199 sprintf(buf, "%s/%s", path, dentry->d_name);
590 if (lstat(buf, &st) != -1) { 1200 if (lstat(buf, &st) != -1) {
591 if (S_ISREG(st.st_mode)) 1201 if (S_ISREG(st.st_mode))
601 1211
602static int scanelf_from_file(char *filename) 1212static int scanelf_from_file(char *filename)
603{ 1213{
604 FILE *fp = NULL; 1214 FILE *fp = NULL;
605 char *p; 1215 char *p;
606 char path[_POSIX_PATH_MAX]; 1216 char path[__PAX_UTILS_PATH_MAX];
607 1217
608 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1218 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL))
609 fp = stdin; 1219 fp = stdin;
610 else if ((fp = fopen(filename, "r")) == NULL) 1220 else if ((fp = fopen(filename, "r")) == NULL)
611 return 1; 1221 return 1;
612 1222
613 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1223 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
614 if ((p = strchr(path, '\n')) != NULL) 1224 if ((p = strchr(path, '\n')) != NULL)
615 *p = 0; 1225 *p = 0;
1226 search_path = path;
616 scanelf_dir(path); 1227 scanelf_dir(path);
617 } 1228 }
618 if (fp != stdin) 1229 if (fp != stdin)
619 fclose(fp); 1230 fclose(fp);
620 return 0; 1231 return 0;
621} 1232}
622 1233
623static void load_ld_so_conf() 1234static int load_ld_so_conf(int i, const char *fname)
624{ 1235{
625 FILE *fp = NULL; 1236 FILE *fp = NULL;
626 char *p; 1237 char *p;
627 char path[_POSIX_PATH_MAX]; 1238 char path[__PAX_UTILS_PATH_MAX];
628 int i = 0;
629 1239
630 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1240 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths))
631 return; 1241 return i;
632 1242
1243 if ((fp = fopen(fname, "r")) == NULL)
1244 return i;
1245
633 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1246 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
634 if (*path != '/')
635 continue;
636
637 if ((p = strrchr(path, '\r')) != NULL) 1247 if ((p = strrchr(path, '\r')) != NULL)
638 *p = 0; 1248 *p = 0;
639 if ((p = strchr(path, '\n')) != NULL) 1249 if ((p = strchr(path, '\n')) != NULL)
640 *p = 0; 1250 *p = 0;
1251#ifdef HAVE_GLOB
1252 // recursive includes of the same file will make this segfault.
1253 if ((*path == 'i') && (strncmp(path, "include", 7) == 0) && isblank(path[7])) {
1254 glob64_t gl;
1255 size_t x;
1256 char gpath[__PAX_UTILS_PATH_MAX];
1257
1258 gpath[sizeof(gpath)] = 0;
1259
1260 if (path[8] != '/')
1261 snprintf(gpath, sizeof(gpath)-1, "/etc/%s", &path[8]);
1262 else
1263 strncpy(gpath, &path[8], sizeof(gpath)-1);
1264
1265 if ((glob64(gpath, 0, NULL, &gl)) == 0) {
1266 for (x = 0; x < gl.gl_pathc; ++x) {
1267 /* try to avoid direct loops */
1268 if (strcmp(gl.gl_pathv[x], fname) == 0)
1269 continue;
1270 i = load_ld_so_conf(i, gl.gl_pathv[x]);
1271 if (i + 1 >= sizeof(ldpaths) / sizeof(*ldpaths)) {
1272 globfree64(&gl);
1273 return i;
1274 }
1275 }
1276 globfree64 (&gl);
1277 continue;
1278 } else
1279 abort();
1280 }
1281#endif
1282 if (*path != '/')
1283 continue;
641 1284
642 ldpaths[i++] = xstrdup(path); 1285 ldpaths[i++] = xstrdup(path);
643 1286
644 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1287 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths))
645 break; 1288 break;
646 } 1289 }
647 ldpaths[i] = NULL; 1290 ldpaths[i] = NULL;
648 1291
649 fclose(fp); 1292 fclose(fp);
1293 return i;
650} 1294}
651 1295
652/* scan /etc/ld.so.conf for paths */ 1296/* scan /etc/ld.so.conf for paths */
653static void scanelf_ldpath() 1297static void scanelf_ldpath()
654{ 1298{
689 } 1333 }
690 1334
691 free(path); 1335 free(path);
692} 1336}
693 1337
694
695
696/* usage / invocation handling functions */ 1338/* usage / invocation handling functions */
697#define PARSE_FLAGS "plRmyxetrnibs:aqvF:f:o:BhV" 1339#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:BhV"
698#define a_argument required_argument 1340#define a_argument required_argument
699static struct option const long_opts[] = { 1341static struct option const long_opts[] = {
700 {"path", no_argument, NULL, 'p'}, 1342 {"path", no_argument, NULL, 'p'},
701 {"ldpath", no_argument, NULL, 'l'}, 1343 {"ldpath", no_argument, NULL, 'l'},
702 {"recursive", no_argument, NULL, 'R'}, 1344 {"recursive", no_argument, NULL, 'R'},
703 {"mount", no_argument, NULL, 'm'}, 1345 {"mount", no_argument, NULL, 'm'},
704 {"symlink", no_argument, NULL, 'y'}, 1346 {"symlink", no_argument, NULL, 'y'},
1347 {"archives", no_argument, NULL, 'A'},
1348 {"ldcache", no_argument, NULL, 'L'},
1349 {"fix", no_argument, NULL, 'X'},
1350 {"setpax", a_argument, NULL, 'z'},
705 {"pax", no_argument, NULL, 'x'}, 1351 {"pax", no_argument, NULL, 'x'},
706 {"header", no_argument, NULL, 'e'}, 1352 {"header", no_argument, NULL, 'e'},
707 {"textrel", no_argument, NULL, 't'}, 1353 {"textrel", no_argument, NULL, 't'},
708 {"rpath", no_argument, NULL, 'r'}, 1354 {"rpath", no_argument, NULL, 'r'},
709 {"needed", no_argument, NULL, 'n'}, 1355 {"needed", no_argument, NULL, 'n'},
710 {"interp", no_argument, NULL, 'i'}, 1356 {"interp", no_argument, NULL, 'i'},
711 {"bind", no_argument, NULL, 'b'}, 1357 {"bind", no_argument, NULL, 'b'},
1358 {"soname", no_argument, NULL, 'S'},
712 {"symbol", a_argument, NULL, 's'}, 1359 {"symbol", a_argument, NULL, 's'},
1360 {"section", a_argument, NULL, 'k'},
1361 {"lib", a_argument, NULL, 'N'},
1362 {"gmatch", no_argument, NULL, 'g'},
1363 {"textrels", no_argument, NULL, 'T'},
1364 {"etype", a_argument, NULL, 'E'},
1365 {"bits", a_argument, NULL, 'M'},
713 {"all", no_argument, NULL, 'a'}, 1366 {"all", no_argument, NULL, 'a'},
714 {"quiet", no_argument, NULL, 'q'}, 1367 {"quiet", no_argument, NULL, 'q'},
715 {"verbose", no_argument, NULL, 'v'}, 1368 {"verbose", no_argument, NULL, 'v'},
716 {"format", a_argument, NULL, 'F'}, 1369 {"format", a_argument, NULL, 'F'},
717 {"from", a_argument, NULL, 'f'}, 1370 {"from", a_argument, NULL, 'f'},
718 {"file", a_argument, NULL, 'o'}, 1371 {"file", a_argument, NULL, 'o'},
719 {"nobanner", no_argument, NULL, 'B'}, 1372 {"nobanner", no_argument, NULL, 'B'},
720 {"help", no_argument, NULL, 'h'}, 1373 {"help", no_argument, NULL, 'h'},
721 {"version", no_argument, NULL, 'V'}, 1374 {"version", no_argument, NULL, 'V'},
722 {NULL, no_argument, NULL, 0x0} 1375 {NULL, no_argument, NULL, 0x0}
723}; 1376};
724 1377
725static char *opts_help[] = { 1378static const char *opts_help[] = {
726 "Scan all directories in PATH environment", 1379 "Scan all directories in PATH environment",
727 "Scan all directories in /etc/ld.so.conf", 1380 "Scan all directories in /etc/ld.so.conf",
728 "Scan directories recursively", 1381 "Scan directories recursively",
729 "Don't recursively cross mount points", 1382 "Don't recursively cross mount points",
730 "Don't scan symlinks\n", 1383 "Don't scan symlinks",
1384 "Scan archives (.a files)",
1385 "Utilize ld.so.cache information (use with -r/-n)",
1386 "Try and 'fix' bad things (use with -r/-e)",
1387 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
731 "Print PaX markings", 1388 "Print PaX markings",
732 "Print GNU_STACK markings", 1389 "Print GNU_STACK/PT_LOAD markings",
733 "Print TEXTREL information", 1390 "Print TEXTREL information",
734 "Print RPATH information", 1391 "Print RPATH information",
735 "Print NEEDED information", 1392 "Print NEEDED information",
736 "Print INTERP information", 1393 "Print INTERP information",
737 "Print BIND information", 1394 "Print BIND information",
1395 "Print SONAME information",
738 "Find a specified symbol", 1396 "Find a specified symbol",
1397 "Find a specified section",
1398 "Find a specified library",
1399 "Use strncmp to match libraries. (use with -N)",
1400 "Locate cause of TEXTREL",
1401 "Print only ELF files matching numeric constant type",
1402 "Print only ELF files matching numeric bits",
739 "Print all scanned info (-x -e -t -r -n -i -b)\n", 1403 "Print all scanned info (-x -e -t -r -b)\n",
740 "Only output 'bad' things", 1404 "Only output 'bad' things",
741 "Be verbose (can be specified more than once)", 1405 "Be verbose (can be specified more than once)",
742 "Use specified format for output", 1406 "Use specified format for output",
743 "Read input stream from a filename", 1407 "Read input stream from a filename",
744 "Write output stream to a filename", 1408 "Write output stream to a filename",
751/* display usage and exit */ 1415/* display usage and exit */
752static void usage(int status) 1416static void usage(int status)
753{ 1417{
754 unsigned long i; 1418 unsigned long i;
755 printf("* Scan ELF binaries for stuff\n\n" 1419 printf("* Scan ELF binaries for stuff\n\n"
756 "Usage: %s [options] <dir1/file1> [dir2 dirN fileN ...]\n\n", argv0); 1420 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
757 printf("Options: -[%s]\n", PARSE_FLAGS); 1421 printf("Options: -[%s]\n", PARSE_FLAGS);
758 for (i = 0; long_opts[i].name; ++i) 1422 for (i = 0; long_opts[i].name; ++i)
759 if (long_opts[i].has_arg == no_argument) 1423 if (long_opts[i].has_arg == no_argument)
760 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 1424 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
761 long_opts[i].name, opts_help[i]); 1425 long_opts[i].name, opts_help[i]);
762 else 1426 else
763 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 1427 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
764 long_opts[i].name, opts_help[i]); 1428 long_opts[i].name, opts_help[i]);
765 1429
766 if (status != EXIT_SUCCESS) 1430 if (status != EXIT_SUCCESS)
767 exit(status); 1431 exit(status);
768 1432
769 puts("\nThe format modifiers for the -F option are:"); 1433 puts("\nThe format modifiers for the -F option are:");
770 puts(" %F Filename \t%x PaX Flags \t%e STACK/RELRO"); 1434 puts(" F Filename \tx PaX Flags \te STACK/RELRO");
771 puts(" %t TEXTREL \t%r RPATH \t%n NEEDED"); 1435 puts(" t TEXTREL \tr RPATH \tn NEEDED");
772 puts(" %i INTERP \t%b BIND \t%s symbol"); 1436 puts(" i INTERP \tb BIND \ts symbol");
1437 puts(" N library \to Type \tT TEXTRELs");
1438 puts(" S SONAME \tk section");
1439 puts(" p filename (with search path removed)");
1440 puts(" f filename (short name/basename)");
1441 puts("Prefix each modifier with '%' (verbose) or '#' (silent)");
1442
1443 puts("\nELF Etypes:");
1444 print_etypes(stdout);
773 1445
774 exit(status); 1446 exit(status);
775} 1447}
776 1448
777/* parse command line arguments and preform needed actions */ 1449/* parse command line arguments and preform needed actions */
783 opterr = 0; 1455 opterr = 0;
784 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1456 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
785 switch (i) { 1457 switch (i) {
786 1458
787 case 'V': 1459 case 'V':
788 printf("%s compiled %s\n%s\n" 1460 printf("pax-utils-%s: %s compiled %s\n%s\n"
789 "%s written for Gentoo Linux by <solar and vapier @ gentoo.org>\n", 1461 "%s written for Gentoo by <solar and vapier @ gentoo.org>\n",
790 __FILE__, __DATE__, rcsid, argv0); 1462 VERSION, __FILE__, __DATE__, rcsid, argv0);
791 exit(EXIT_SUCCESS); 1463 exit(EXIT_SUCCESS);
792 break; 1464 break;
793 case 'h': usage(EXIT_SUCCESS); break; 1465 case 'h': usage(EXIT_SUCCESS); break;
794 case 'f': 1466 case 'f':
795 if (from_file == NULL) 1467 if (from_file) warn("You prob don't want to specify -f twice");
796 from_file = xstrdup(optarg); 1468 from_file = optarg;
797 else 1469 break;
798 err("Don't specify -f twice"); 1470 case 'E':
1471 strncpy(match_etypes, optarg, sizeof(match_etypes));
1472 break;
1473 case 'M':
1474 match_bits = atoi(optarg);
799 break; 1475 break;
800 case 'o': { 1476 case 'o': {
801 FILE *fp = NULL; 1477 FILE *fp = NULL;
802 fp = freopen(optarg, "w", stdout); 1478 if ((fp = freopen(optarg, "w", stdout)) == NULL)
803 if (fp == NULL)
804 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1479 err("Could not open output stream '%s': %s", optarg, strerror(errno));
805 stdout = fp; 1480 SET_STDOUT(fp);
806 break; 1481 break;
807 } 1482 }
808 1483 case 'k':
1484 if (find_section) warn("You prob don't want to specify -k twice");
1485 find_section = optarg;
1486 break;
809 case 's': { 1487 case 's': {
810 size_t len; 1488 if (find_sym) warn("You prob don't want to specify -s twice");
811 if (!find_sym)
812 err("Don't specify -s twice");
813 find_sym = xstrdup(optarg); 1489 find_sym = optarg;
814 len = strlen(find_sym) + 1;
815 versioned_symname = (char*)xmalloc(sizeof(char) * (len+1)); 1490 versioned_symname = (char*)xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
816 sprintf(versioned_symname, "%s@", find_sym); 1491 sprintf(versioned_symname, "%s@", find_sym);
817 break; 1492 break;
818 } 1493 }
1494 case 'N': {
1495 if (find_lib) warn("You prob don't want to specify -N twice");
1496 find_lib = optarg;
1497 break;
1498 }
819 1499
820 case 'F': { 1500 case 'F': {
821 if (!out_format) 1501 if (out_format) warn("You prob don't want to specify -F twice");
822 out_format = xstrdup(optarg); 1502 out_format = optarg;
823 else
824 err("Don't specify -F twice");
825 break; 1503 break;
1504 }
1505 case 'z': {
1506 unsigned long flags = 10240;
1507 size_t x;
1508
1509#define do_state(option, flag) \
1510 if (islower(option)) { \
1511 flags &= ~PF_##flag; \
1512 flags |= PF_NO##flag; \
1513 } else { \
1514 flags &= ~PF_NO##flag; \
1515 flags |= PF_##flag; \
826 } 1516 }
827 1517
1518 for (x = 0 ; x < strlen(optarg); x++) {
1519 switch(optarg[x]) {
1520 case 'p':
1521 case 'P':
1522 do_state(optarg[x], PAGEEXEC);
1523 break;
1524 case 's':
1525 case 'S':
1526 do_state(optarg[x], SEGMEXEC);
1527 break;
1528 case 'm':
1529 case 'M':
1530 do_state(optarg[x], MPROTECT);
1531 break;
1532 case 'e':
1533 case 'E':
1534 do_state(optarg[x], EMUTRAMP);
1535 break;
1536 case 'r':
1537 case 'R':
1538 do_state(optarg[x], RANDMMAP);
1539 break;
1540 case 'x':
1541 case 'X':
1542 do_state(optarg[x], RANDEXEC);
1543 break;
1544 default:
1545 break;
1546 }
1547 }
1548 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1549 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1550 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1551 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1552 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1553 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1554 setpax = flags;
1555 break;
1556 }
1557 case 'g': gmatch = 1; break;
1558 case 'L': use_ldcache = 1; break;
828 case 'y': scan_symlink = 0; break; 1559 case 'y': scan_symlink = 0; break;
1560 case 'A': scan_archives = 1; break;
829 case 'B': show_banner = 0; break; 1561 case 'B': show_banner = 0; break;
830 case 'l': scan_ldpath = 1; break; 1562 case 'l': scan_ldpath = 1; break;
831 case 'p': scan_envpath = 1; break; 1563 case 'p': scan_envpath = 1; break;
832 case 'R': dir_recurse = 1; break; 1564 case 'R': dir_recurse = 1; break;
833 case 'm': dir_crossmount = 0; break; 1565 case 'm': dir_crossmount = 0; break;
1566 case 'X': ++fix_elf; break;
834 case 'x': show_pax = 1; break; 1567 case 'x': show_pax = 1; break;
835 case 'e': show_stack = 1; break; 1568 case 'e': show_phdr = 1; break;
836 case 't': show_textrel = 1; break; 1569 case 't': show_textrel = 1; break;
837 case 'r': show_rpath = 1; break; 1570 case 'r': show_rpath = 1; break;
838 case 'n': show_needed = 1; break; 1571 case 'n': show_needed = 1; break;
839 case 'i': show_interp = 1; break; 1572 case 'i': show_interp = 1; break;
840 case 'b': show_bind = 1; break; 1573 case 'b': show_bind = 1; break;
1574 case 'S': show_soname = 1; break;
1575 case 'T': show_textrels = 1; break;
841 case 'q': be_quiet = 1; break; 1576 case 'q': be_quiet = 1; break;
842 case 'v': be_verbose = (be_verbose % 20) + 1; break; 1577 case 'v': be_verbose = (be_verbose % 20) + 1; break;
843 case 'a': show_pax = show_stack = show_textrel = show_rpath = \ 1578 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break;
844 show_needed = show_interp = show_bind = 1; break;
845 1579
846 case ':': 1580 case ':':
847 err("Option missing parameter\n"); 1581 err("Option '%c' is missing parameter", optopt);
848 case '?': 1582 case '?':
849 err("Unknown option\n"); 1583 err("Unknown option '%c' or argument missing", optopt);
850 default: 1584 default:
851 err("Unhandled option '%c'", i); 1585 err("Unhandled option '%c'; please report this", i);
852 } 1586 }
853 } 1587 }
854 1588
855 /* let the format option override all other options */ 1589 /* let the format option override all other options */
856 if (out_format) { 1590 if (out_format) {
857 show_pax = show_stack = show_textrel = show_rpath = \ 1591 show_pax = show_phdr = show_textrel = show_rpath = \
858 show_needed = show_interp = show_bind = 0; 1592 show_needed = show_interp = show_bind = show_soname = \
1593 show_textrels = 0;
859 for (i = 0; out_format[i]; ++i) { 1594 for (i = 0; out_format[i]; ++i) {
860 if (out_format[i] != '%') continue; 1595 if (!IS_MODIFIER(out_format[i])) continue;
861 1596
862 switch (out_format[++i]) { 1597 switch (out_format[++i]) {
863 case '%': break; 1598 case '%': break;
1599 case '#': break;
864 case 'F': break; 1600 case 'F': break;
1601 case 'p': break;
1602 case 'f': break;
1603 case 'k': break;
865 case 's': break; 1604 case 's': break;
1605 case 'N': break;
866 case 'o': break; 1606 case 'o': break;
867 case 'x': show_pax = 1; break; 1607 case 'x': show_pax = 1; break;
868 case 'e': show_stack = 1; break; 1608 case 'e': show_phdr = 1; break;
869 case 't': show_textrel = 1; break; 1609 case 't': show_textrel = 1; break;
870 case 'r': show_rpath = 1; break; 1610 case 'r': show_rpath = 1; break;
871 case 'n': show_needed = 1; break; 1611 case 'n': show_needed = 1; break;
872 case 'i': show_interp = 1; break; 1612 case 'i': show_interp = 1; break;
873 case 'b': show_bind = 1; break; 1613 case 'b': show_bind = 1; break;
1614 case 'S': show_soname = 1; break;
1615 case 'T': show_textrels = 1; break;
874 default: 1616 default:
875 err("Invalid format specifier '%c' (byte %i)", 1617 err("Invalid format specifier '%c' (byte %i)",
876 out_format[i], i+1); 1618 out_format[i], i+1);
877 } 1619 }
878 } 1620 }
879 1621
880 /* construct our default format */ 1622 /* construct our default format */
881 } else { 1623 } else {
882 size_t fmt_len = 30; 1624 size_t fmt_len = 30;
883 out_format = (char*)xmalloc(sizeof(char) * fmt_len); 1625 out_format = (char*)xmalloc(sizeof(char) * fmt_len);
884 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); 1626 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
885 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); 1627 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
886 if (show_stack) xstrcat(&out_format, "%e ", &fmt_len); 1628 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
887 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); 1629 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
888 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); 1630 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
889 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); 1631 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
890 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 1632 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
891 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 1633 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1634 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1635 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
892 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 1636 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
1637 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1638 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
893 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 1639 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
894 } 1640 }
895 if (be_verbose > 2) printf("Format: %s\n", out_format); 1641 if (be_verbose > 2) printf("Format: %s\n", out_format);
896 1642
897 /* now lets actually do the scanning */ 1643 /* now lets actually do the scanning */
898 if (scan_ldpath || (show_rpath && be_quiet)) 1644 if (scan_ldpath || use_ldcache)
899 load_ld_so_conf(); 1645 load_ld_so_conf(0, "/etc/ld.so.conf");
900 if (scan_ldpath) scanelf_ldpath(); 1646 if (scan_ldpath) scanelf_ldpath();
901 if (scan_envpath) scanelf_envpath(); 1647 if (scan_envpath) scanelf_envpath();
902 if (from_file) { 1648 if (from_file) {
903 scanelf_from_file(from_file); 1649 scanelf_from_file(from_file);
904 free(from_file);
905 from_file = *argv; 1650 from_file = *argv;
906 } 1651 }
907 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 1652 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
908 err("Nothing to scan !?"); 1653 err("Nothing to scan !?");
909 while (optind < argc) 1654 while (optind < argc) {
910 scanelf_dir(argv[optind++]); 1655 search_path = argv[optind++];
1656 scanelf_dir(search_path);
1657 }
911 1658
912 /* clean up */ 1659 /* clean up */
913 if (find_sym) { 1660 if (versioned_symname) free(versioned_symname);
914 free(find_sym);
915 free(versioned_symname);
916 }
917 if (out_format) free(out_format);
918 for (i = 0; ldpaths[i]; ++i) 1661 for (i = 0; ldpaths[i]; ++i)
919 free(ldpaths[i]); 1662 free(ldpaths[i]);
1663
1664 if (ldcache != 0)
1665 munmap(ldcache, ldcache_size);
920} 1666}
921 1667
922 1668
923 1669
924/* utility funcs */ 1670/* utility funcs */
926{ 1672{
927 char *ret = strdup(s); 1673 char *ret = strdup(s);
928 if (!ret) err("Could not strdup(): %s", strerror(errno)); 1674 if (!ret) err("Could not strdup(): %s", strerror(errno));
929 return ret; 1675 return ret;
930} 1676}
931
932static void *xmalloc(size_t size) 1677static void *xmalloc(size_t size)
933{ 1678{
934 void *ret = malloc(size); 1679 void *ret = malloc(size);
935 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size); 1680 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size);
936 return ret; 1681 return ret;
937} 1682}
938
939static void xstrcat(char **dst, const char *src, size_t *curr_len) 1683static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n)
940{ 1684{
941 long new_len; 1685 size_t new_len;
942 1686
943 new_len = strlen(*dst) + strlen(src); 1687 new_len = strlen(*dst) + strlen(src);
944 if (*curr_len <= new_len) { 1688 if (*curr_len <= new_len) {
945 *curr_len = new_len + (*curr_len / 2); 1689 *curr_len = new_len + (*curr_len / 2);
946 *dst = realloc(*dst, *curr_len); 1690 *dst = realloc(*dst, *curr_len);
947 if (!*dst) 1691 if (!*dst)
948 err("could not realloc %li bytes", (unsigned long)*curr_len); 1692 err("could not realloc() %li bytes", (unsigned long)*curr_len);
949 } 1693 }
950 1694
1695 if (n)
1696 strncat(*dst, src, n);
1697 else
951 strcat(*dst, src); 1698 strcat(*dst, src);
952} 1699}
953
954static inline void xchrcat(char **dst, const char append, size_t *curr_len) 1700static inline void xchrcat(char **dst, const char append, size_t *curr_len)
955{ 1701{
956 static char my_app[2]; 1702 static char my_app[2];
957 my_app[0] = append; 1703 my_app[0] = append;
958 my_app[1] = '\0'; 1704 my_app[1] = '\0';
959 xstrcat(dst, my_app, curr_len); 1705 xstrcat(dst, my_app, curr_len);
960} 1706}
1707
961 1708
962 1709
963int main(int argc, char *argv[]) 1710int main(int argc, char *argv[])
964{ 1711{
965 if (argc < 2) 1712 if (argc < 2)
966 usage(EXIT_FAILURE); 1713 usage(EXIT_FAILURE);
967 parseargs(argc, argv); 1714 parseargs(argc, argv);
968 fclose(stdout); 1715 fclose(stdout);
969#ifdef __BOUNDS_CHECKING_ON 1716#ifdef __BOUNDS_CHECKING_ON
970 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()"); 1717 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()");
971#endif 1718#endif
972 return EXIT_SUCCESS; 1719 return EXIT_SUCCESS;
973} 1720}

Legend:
Removed from v.1.62  
changed lines
  Added in v.1.127

  ViewVC Help
Powered by ViewVC 1.1.20