/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.63 Revision 1.127
1/* 1/*
2 * Copyright 2003-2005 Gentoo Foundation 2 * Copyright 2003-2006 Gentoo Foundation
3 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.63 2005/05/29 18:44:48 solar Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.127 2006/02/17 07:13:54 solar Exp $
5 * 5 *
6 ******************************************************************** 6 * Copyright 2003-2006 Ned Ludd - <solar@gentoo.org>
7 * This program is free software; you can redistribute it and/or 7 * Copyright 2004-2006 Mike Frysinger - <vapier@gentoo.org>
8 * modify it under the terms of the GNU General Public License as
9 * published by the Free Software Foundation; either version 2 of the
10 * License, or (at your option) any later version.
11 *
12 * This program is distributed in the hope that it will be useful, but
13 * WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
16 *
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston,
20 * MA 02111-1307, USA.
21 */ 8 */
22 9
23#include <stdio.h>
24#include <stdlib.h>
25#include <sys/types.h>
26#include <libgen.h>
27#include <limits.h>
28#define __USE_GNU
29#include <string.h>
30#include <errno.h>
31#include <unistd.h>
32#include <sys/stat.h>
33#include <dirent.h>
34#include <getopt.h>
35#include <assert.h>
36#include "paxelf.h" 10#include "paxinc.h"
37 11
38static const char *rcsid = "$Id: scanelf.c,v 1.63 2005/05/29 18:44:48 solar Exp $"; 12static const char *rcsid = "$Id: scanelf.c,v 1.127 2006/02/17 07:13:54 solar Exp $";
39#define argv0 "scanelf" 13#define argv0 "scanelf"
40 14
15#define IS_MODIFIER(c) (c == '%' || c == '#')
16
41 17
42 18
43/* prototypes */ 19/* prototypes */
20static int scanelf_elfobj(elfobj *elf);
21static int scanelf_elf(const char *filename, int fd, size_t len);
22static int scanelf_archive(const char *filename, int fd, size_t len);
44static void scanelf_file(const char *filename); 23static void scanelf_file(const char *filename);
45static void scanelf_dir(const char *path); 24static void scanelf_dir(const char *path);
46static void scanelf_ldpath(); 25static void scanelf_ldpath(void);
47static void scanelf_envpath(); 26static void scanelf_envpath(void);
48static void usage(int status); 27static void usage(int status);
49static void parseargs(int argc, char *argv[]); 28static void parseargs(int argc, char *argv[]);
50static char *xstrdup(const char *s); 29static char *xstrdup(const char *s);
51static void *xmalloc(size_t size); 30static void *xmalloc(size_t size);
52static void xstrcat(char **dst, const char *src, size_t *curr_len); 31static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n);
32#define xstrcat(dst,src,curr_len) xstrncat(dst,src,curr_len,0)
53static inline void xchrcat(char **dst, const char append, size_t *curr_len); 33static inline void xchrcat(char **dst, const char append, size_t *curr_len);
54 34
55/* variables to control behavior */ 35/* variables to control behavior */
36static char match_etypes[126] = "";
56static char *ldpaths[256]; 37static char *ldpaths[256];
57static char scan_ldpath = 0; 38static char scan_ldpath = 0;
58static char scan_envpath = 0; 39static char scan_envpath = 0;
59static char scan_symlink = 1; 40static char scan_symlink = 1;
41static char scan_archives = 0;
60static char dir_recurse = 0; 42static char dir_recurse = 0;
61static char dir_crossmount = 1; 43static char dir_crossmount = 1;
62static char show_pax = 0; 44static char show_pax = 0;
63static char show_stack = 0; 45static char show_phdr = 0;
64static char show_textrel = 0; 46static char show_textrel = 0;
65static char show_rpath = 0; 47static char show_rpath = 0;
66static char show_needed = 0; 48static char show_needed = 0;
67static char show_interp = 0; 49static char show_interp = 0;
68static char show_bind = 0; 50static char show_bind = 0;
51static char show_soname = 0;
52static char show_textrels = 0;
69static char show_banner = 1; 53static char show_banner = 1;
70static char be_quiet = 0; 54static char be_quiet = 0;
71static char be_verbose = 0; 55static char be_verbose = 0;
56static char be_wewy_wewy_quiet = 0;
72static char *find_sym = NULL, *versioned_symname = NULL; 57static char *find_sym = NULL, *versioned_symname = NULL;
58static char *find_lib = NULL;
59static char *find_section = NULL;
73static char *out_format = NULL; 60static char *out_format = NULL;
61static char *search_path = NULL;
62static char fix_elf = 0;
63static char gmatch = 0;
64static char use_ldcache = 0;
74 65
66int match_bits = 0;
67caddr_t ldcache = 0;
68size_t ldcache_size = 0;
69unsigned long setpax = 0UL;
75 70
76/* sub-funcs for scanelf_file() */ 71/* sub-funcs for scanelf_file() */
72static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
73{
74 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
75#define GET_SYMTABS(B) \
76 if (elf->elf_class == ELFCLASS ## B) { \
77 Elf ## B ## _Shdr *symtab, *strtab, *dynsym, *dynstr; \
78 /* debug sections */ \
79 symtab = SHDR ## B (elf_findsecbyname(elf, ".symtab")); \
80 strtab = SHDR ## B (elf_findsecbyname(elf, ".strtab")); \
81 /* runtime sections */ \
82 dynsym = SHDR ## B (elf_findsecbyname(elf, ".dynsym")); \
83 dynstr = SHDR ## B (elf_findsecbyname(elf, ".dynstr")); \
84 if (symtab && dynsym) { \
85 *sym = (void*)((EGET(symtab->sh_size) > EGET(dynsym->sh_size)) ? symtab : dynsym); \
86 } else { \
87 *sym = (void*)(symtab ? symtab : dynsym); \
88 } \
89 if (strtab && dynstr) { \
90 *tab = (void*)((EGET(strtab->sh_size) > EGET(dynstr->sh_size)) ? strtab : dynstr); \
91 } else { \
92 *tab = (void*)(strtab ? strtab : dynstr); \
93 } \
94 }
95 GET_SYMTABS(32)
96 GET_SYMTABS(64)
97}
98
77static char *scanelf_file_pax(elfobj *elf, char *found_pax) 99static char *scanelf_file_pax(elfobj *elf, char *found_pax)
78{ 100{
79 static char *paxflags;
80 static char ret[7]; 101 static char ret[7];
81 unsigned long i, shown; 102 unsigned long i, shown;
82
83 103
84 if (!show_pax) return NULL; 104 if (!show_pax) return NULL;
85 105
86 shown = 0; 106 shown = 0;
87 memset(&ret, 0, sizeof(ret)); 107 memset(&ret, 0, sizeof(ret));
92 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 112 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
93 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 113 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
94 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 114 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
95 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ 115 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
96 continue; \ 116 continue; \
117 if (fix_elf && setpax) { \
118 /* set the paxctl flags */ \
119 ESET(phdr[i].p_flags, setpax); \
120 } \
97 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \ 121 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \
98 continue; \ 122 continue; \
99 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ 123 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
100 *found_pax = 1; \ 124 *found_pax = 1; \
101 ++shown; \ 125 ++shown; \
106 SHOW_PAX(64) 130 SHOW_PAX(64)
107 } 131 }
108 132
109 /* fall back to EI_PAX if no PT_PAX was found */ 133 /* fall back to EI_PAX if no PT_PAX was found */
110 if (!*ret) { 134 if (!*ret) {
135 static char *paxflags;
136
137 if (fix_elf && setpax) {
138 /* set the chpax settings */
139 // ESET(EHDR ## B (elf->ehdr)->e_ident[EI_PAX]), setpax);
140 }
141
111 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); 142 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
112 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) { 143 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) {
113 *found_pax = 1; 144 *found_pax = 1;
114 return paxflags; 145 return (be_wewy_wewy_quiet ? NULL : paxflags);
115 } 146 }
116 strncpy(ret, paxflags, sizeof(ret)); 147 strncpy(ret, paxflags, sizeof(ret));
117 // ++shown;
118 } 148 }
119 149
120 if (be_quiet && !shown) 150 if (be_wewy_wewy_quiet || (be_quiet && !shown))
121 return NULL;
122 return ret;
123
124}
125static char *scanelf_file_stack(elfobj *elf, char *found_stack, char *found_relro)
126{
127 static char ret[8] = "--- ---";
128 char *found;
129 unsigned long i, off, shown;
130
131 if (!show_stack) return NULL;
132
133 shown = 0;
134
135 if (elf->phdr) {
136#define SHOW_STACK(B) \
137 if (elf->elf_class == ELFCLASS ## B) { \
138 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
139 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
140 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
141 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
142 found = found_stack; \
143 off = 0; \
144 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
145 found = found_relro; \
146 off = 4; \
147 } else \
148 continue; \
149 if (be_quiet && !(EGET(phdr[i].p_flags) & PF_X)) \
150 continue; \
151 memcpy(ret+off, gnu_short_stack_flags(EGET(phdr[i].p_flags)), 3); \
152 *found = 1; \
153 ++shown; \
154 } \
155 }
156 SHOW_STACK(32)
157 SHOW_STACK(64)
158 }
159
160 if (be_quiet && !shown)
161 return NULL; 151 return NULL;
162 else 152 else
163 return ret; 153 return ret;
164} 154}
155
156static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
157{
158 static char ret[12];
159 char *found;
160 unsigned long i, shown, multi_stack, multi_relro, multi_load;
161 int max_pt_load;
162
163 if (!show_phdr) return NULL;
164
165 memcpy(ret, "--- --- ---\0", 12);
166
167 shown = 0;
168 multi_stack = multi_relro = multi_load = 0;
169 max_pt_load = elf_max_pt_load(elf);
170
171#define NOTE_GNU_STACK ".note.GNU-stack"
172#define SHOW_PHDR(B) \
173 if (elf->elf_class == ELFCLASS ## B) { \
174 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
175 Elf ## B ## _Off offset; \
176 uint32_t flags, check_flags; \
177 if (elf->phdr != NULL) { \
178 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
179 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
180 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
181 if (multi_stack++) warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
182 found = found_phdr; \
183 offset = 0; \
184 check_flags = PF_X; \
185 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
186 if (multi_relro++) warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
187 found = found_relro; \
188 offset = 4; \
189 check_flags = PF_X; \
190 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
191 if (ehdr->e_type == ET_DYN || ehdr->e_type == ET_EXEC) \
192 if (multi_load++ > max_pt_load) warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
193 found = found_load; \
194 offset = 8; \
195 check_flags = PF_W|PF_X; \
196 } else \
197 continue; \
198 flags = EGET(phdr[i].p_flags); \
199 if (be_quiet && ((flags & check_flags) != check_flags)) \
200 continue; \
201 if (fix_elf && ((flags & PF_X) != flags)) { \
202 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
203 ret[3] = ret[7] = '!'; \
204 flags = EGET(phdr[i].p_flags); \
205 } \
206 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
207 *found = 1; \
208 ++shown; \
209 } \
210 } else if (elf->shdr != NULL) { \
211 /* no program headers which means this is prob an object file */ \
212 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
213 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
214 char *str; \
215 if ((void*)strtbl > (void*)elf->data_end) \
216 goto skip_this_shdr##B; \
217 check_flags = SHF_WRITE|SHF_EXECINSTR; \
218 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
219 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
220 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
221 str = elf->data + offset; \
222 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
223 if (!strcmp(str, NOTE_GNU_STACK)) { \
224 if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \
225 flags = EGET(shdr[i].sh_flags); \
226 if (be_quiet && ((flags & check_flags) != check_flags)) \
227 continue; \
228 ++*found_phdr; \
229 shown = 1; \
230 if (flags & SHF_WRITE) ret[0] = 'W'; \
231 if (flags & SHF_ALLOC) ret[1] = 'A'; \
232 if (flags & SHF_EXECINSTR) ret[2] = 'X'; \
233 if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \
234 break; \
235 } \
236 } \
237 skip_this_shdr##B: \
238 if (!multi_stack) { \
239 *found_phdr = 1; \
240 shown = 1; \
241 memcpy(ret, "!WX", 3); \
242 } \
243 } \
244 }
245 SHOW_PHDR(32)
246 SHOW_PHDR(64)
247
248 if (be_wewy_wewy_quiet || (be_quiet && !shown))
249 return NULL;
250 else
251 return ret;
252}
165static char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 253static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
166{ 254{
167 static char *ret = "TEXTREL"; 255 static const char *ret = "TEXTREL";
168 unsigned long i; 256 unsigned long i;
169 257
170 if (!show_textrel) return NULL; 258 if (!show_textrel && !show_textrels) return NULL;
171 259
172 if (elf->phdr) { 260 if (elf->phdr) {
173#define SHOW_TEXTREL(B) \ 261#define SHOW_TEXTREL(B) \
174 if (elf->elf_class == ELFCLASS ## B) { \ 262 if (elf->elf_class == ELFCLASS ## B) { \
175 Elf ## B ## _Dyn *dyn; \ 263 Elf ## B ## _Dyn *dyn; \
183 dyn = DYN ## B (elf->data + offset); \ 271 dyn = DYN ## B (elf->data + offset); \
184 while (EGET(dyn->d_tag) != DT_NULL) { \ 272 while (EGET(dyn->d_tag) != DT_NULL) { \
185 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 273 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
186 *found_textrel = 1; \ 274 *found_textrel = 1; \
187 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ 275 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \
188 return ret; \ 276 return (be_wewy_wewy_quiet ? NULL : ret); \
189 } \ 277 } \
190 ++dyn; \ 278 ++dyn; \
191 } \ 279 } \
192 } } 280 } }
193 SHOW_TEXTREL(32) 281 SHOW_TEXTREL(32)
194 SHOW_TEXTREL(64) 282 SHOW_TEXTREL(64)
195 } 283 }
196 284
197 if (be_quiet) 285 if (be_quiet || be_wewy_wewy_quiet)
198 return NULL; 286 return NULL;
199 else 287 else
200 return " - "; 288 return " - ";
201} 289}
290static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
291{
292 unsigned long s, r, rmax;
293 void *symtab_void, *strtab_void, *text_void;
294
295 if (!show_textrels) return NULL;
296
297 /* don't search for TEXTREL's if the ELF doesn't have any */
298 if (!*found_textrel) scanelf_file_textrel(elf, found_textrel);
299 if (!*found_textrel) return NULL;
300
301 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
302 text_void = elf_findsecbyname(elf, ".text");
303
304 if (symtab_void && strtab_void && text_void && elf->shdr) {
305#define SHOW_TEXTRELS(B) \
306 if (elf->elf_class == ELFCLASS ## B) { \
307 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
308 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
309 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
310 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
311 Elf ## B ## _Shdr *text = SHDR ## B (text_void); \
312 Elf ## B ## _Addr vaddr = EGET(text->sh_addr); \
313 uint ## B ## _t memsz = EGET(text->sh_size); \
314 Elf ## B ## _Rel *rel; \
315 Elf ## B ## _Rela *rela; \
316 /* search the section headers for relocations */ \
317 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \
318 uint32_t sh_type = EGET(shdr[s].sh_type); \
319 if (sh_type == SHT_REL) { \
320 rel = REL ## B (elf->data + EGET(shdr[s].sh_offset)); \
321 rela = NULL; \
322 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \
323 } else if (sh_type == SHT_RELA) { \
324 rel = NULL; \
325 rela = RELA ## B (elf->data + EGET(shdr[s].sh_offset)); \
326 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \
327 } else \
328 continue; \
329 /* now see if any of the relocs are in the .text */ \
330 for (r = 0; r < rmax; ++r) { \
331 unsigned long sym_max; \
332 Elf ## B ## _Addr offset_tmp; \
333 Elf ## B ## _Sym *func; \
334 Elf ## B ## _Sym *sym; \
335 Elf ## B ## _Addr r_offset; \
336 uint ## B ## _t r_info; \
337 if (sh_type == SHT_REL) { \
338 r_offset = EGET(rel[r].r_offset); \
339 r_info = EGET(rel[r].r_info); \
340 } else { \
341 r_offset = EGET(rela[r].r_offset); \
342 r_info = EGET(rela[r].r_info); \
343 } \
344 /* make sure this relocation is inside of the .text */ \
345 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \
346 if (be_verbose <= 2) continue; \
347 } else \
348 *found_textrels = 1; \
349 /* locate this relocation symbol name */ \
350 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
351 if ((void*)sym > (void*)elf->data_end) { \
352 warn("%s: corrupt ELF symbol", elf->filename); \
353 continue; \
354 } \
355 sym_max = ELF ## B ## _R_SYM(r_info); \
356 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
357 sym += sym_max; \
358 else \
359 sym = NULL; \
360 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
361 /* show the raw details about this reloc */ \
362 printf(" %s: ", elf->base_filename); \
363 if (sym && sym->st_name) \
364 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \
365 else \
366 printf("(memory/fake?)"); \
367 printf(" [0x%lX]", (unsigned long)r_offset); \
368 /* now try to find the closest symbol that this rel is probably in */ \
369 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
370 func = NULL; \
371 offset_tmp = 0; \
372 while (sym_max--) { \
373 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \
374 func = sym; \
375 offset_tmp = EGET(sym->st_value); \
376 } \
377 ++sym; \
378 } \
379 printf(" in "); \
380 if (func && func->st_name) \
381 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(func->st_name))); \
382 else \
383 printf("(NULL: fake?)"); \
384 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
385 } \
386 } }
387 SHOW_TEXTRELS(32)
388 SHOW_TEXTRELS(64)
389 }
390 if (!*found_textrels)
391 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
392
393 return NULL;
394}
395
396static void rpath_security_checks(elfobj *, char *, const char *);
397static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
398{
399 struct stat st;
400 switch (*item) {
401 case '/': break;
402 case '.':
403 warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename);
404 break;
405 case ':':
406 case '\0':
407 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
408 break;
409 case '$':
410 if (fstat(elf->fd, &st) != -1)
411 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
412 warnf("Security problem with %s='%s' in %s with mode set of %o",
413 dt_type, item, elf->filename, st.st_mode & 07777);
414 break;
415 default:
416 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
417 break;
418 }
419}
202static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) 420static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
203{ 421{
204 /* TODO: when checking RPATH entries, check each subpath (between :) in ld.so.conf */
205 unsigned long i, s; 422 unsigned long i, s;
206 char *rpath, *runpath, **r; 423 char *rpath, *runpath, **r;
207 void *strtbl_void; 424 void *strtbl_void;
208 425
209 if (!show_rpath) return; 426 if (!show_rpath) return;
237 ++dyn; \ 454 ++dyn; \
238 continue; \ 455 continue; \
239 } \ 456 } \
240 /* Verify the memory is somewhat sane */ \ 457 /* Verify the memory is somewhat sane */ \
241 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 458 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
242 if (offset < elf->len) { \ 459 if (offset < (Elf ## B ## _Off)elf->len) { \
243 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ 460 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
244 *r = (char*)(elf->data + offset); \ 461 *r = (char*)(elf->data + offset); \
462 /* cache the length in case we need to nuke this section later on */ \
463 if (fix_elf) \
464 offset = strlen(*r); \
245 /* If quiet, don't output paths in ld.so.conf */ \ 465 /* If quiet, don't output paths in ld.so.conf */ \
246 if (be_quiet) \ 466 if (be_quiet) { \
467 size_t len; \
468 char *start, *end; \
469 /* note that we only 'chop' off leading known paths. */ \
470 /* since *r is read-only memory, we can only move the ptr forward. */ \
471 start = *r; \
472 /* scan each path in : delimited list */ \
473 while (start) { \
474 rpath_security_checks(elf, start, get_elfdtype(word)); \
475 end = strchr(start, ':'); \
476 len = (end ? abs(end - start) : strlen(start)); \
477 if (use_ldcache) \
247 for (s = 0; ldpaths[s]; ++s) \ 478 for (s = 0; ldpaths[s]; ++s) \
248 if (!strcmp(ldpaths[s], *r)) { \ 479 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \
249 *r = NULL; \ 480 *r = end; \
481 /* corner case ... if RPATH reads "/usr/lib:", we want \
482 * to show ':' rather than '' */ \
483 if (end && end[1] != '\0') \
484 (*r)++; \
485 break; \
486 } \
487 if (!*r || !end) \
250 break; \ 488 break; \
489 else \
490 start = start + len + 1; \
491 } \
492 } \
493 if (*r) { \
494 if (fix_elf > 2 || (fix_elf && **r == '\0')) { \
495 /* just nuke it */ \
496 nuke_it##B: \
497 memset(*r, 0x00, offset); \
498 *r = NULL; \
499 ESET(dyn->d_tag, DT_DEBUG); \
500 ESET(dyn->d_un.d_ptr, 0); \
501 } else if (fix_elf) { \
502 /* try to clean "bad" paths */ \
503 size_t len, tmpdir_len; \
504 char *start, *end; \
505 const char *tmpdir; \
506 start = *r; \
507 tmpdir = (getenv("TMPDIR") ? : "."); \
508 tmpdir_len = strlen(tmpdir); \
509 while (1) { \
510 end = strchr(start, ':'); \
511 if (start == end) { \
512 eat_this_path##B: \
513 len = strlen(end); \
514 memmove(start, end+1, len); \
515 start[len-1] = '\0'; \
516 end = start - 1; \
517 } else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \
518 if (!end) { \
519 if (start == *r) \
520 goto nuke_it##B; \
521 *--start = '\0'; \
522 } else \
523 goto eat_this_path##B; \
524 } \
525 if (!end) \
526 break; \
527 start = end + 1; \
251 } \ 528 } \
529 if (**r == '\0') \
530 goto nuke_it##B; \
531 } \
532 if (*r) \
252 if (*r) *found_rpath = 1; \ 533 *found_rpath = 1; \
534 } \
253 } \ 535 } \
254 ++dyn; \ 536 ++dyn; \
255 } \ 537 } \
256 } } 538 } }
257 SHOW_RPATH(32) 539 SHOW_RPATH(32)
258 SHOW_RPATH(64) 540 SHOW_RPATH(64)
259 } 541 }
542
543 if (be_wewy_wewy_quiet) return;
260 544
261 if (rpath && runpath) { 545 if (rpath && runpath) {
262 if (!strcmp(rpath, runpath)) { 546 if (!strcmp(rpath, runpath)) {
263 xstrcat(ret, runpath, ret_len); 547 xstrcat(ret, runpath, ret_len);
264 } else { 548 } else {
272 } else if (rpath || runpath) 556 } else if (rpath || runpath)
273 xstrcat(ret, (runpath ? runpath : rpath), ret_len); 557 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
274 else if (!be_quiet) 558 else if (!be_quiet)
275 xstrcat(ret, " - ", ret_len); 559 xstrcat(ret, " - ", ret_len);
276} 560}
561
562#define LDSO_CACHE_MAGIC "ld.so-"
563#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
564#define LDSO_CACHE_VER "1.7.0"
565#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
566#define FLAG_ANY -1
567#define FLAG_TYPE_MASK 0x00ff
568#define FLAG_LIBC4 0x0000
569#define FLAG_ELF 0x0001
570#define FLAG_ELF_LIBC5 0x0002
571#define FLAG_ELF_LIBC6 0x0003
572#define FLAG_REQUIRED_MASK 0xff00
573#define FLAG_SPARC_LIB64 0x0100
574#define FLAG_IA64_LIB64 0x0200
575#define FLAG_X8664_LIB64 0x0300
576#define FLAG_S390_LIB64 0x0400
577#define FLAG_POWERPC_LIB64 0x0500
578#define FLAG_MIPS64_LIBN32 0x0600
579#define FLAG_MIPS64_LIBN64 0x0700
580
581static char *lookup_cache_lib(elfobj *, char *);
582static char *lookup_cache_lib(elfobj *elf, char *fname)
583{
584 int fd = 0;
585 char *strs;
586 static char buf[__PAX_UTILS_PATH_MAX] = "";
587 const char *cachefile = "/etc/ld.so.cache";
588 struct stat st;
589
590 typedef struct {
591 char magic[LDSO_CACHE_MAGIC_LEN];
592 char version[LDSO_CACHE_VER_LEN];
593 int nlibs;
594 } header_t;
595 header_t *header;
596
597 typedef struct {
598 int flags;
599 int sooffset;
600 int liboffset;
601 } libentry_t;
602 libentry_t *libent;
603
604 if (fname == NULL)
605 return NULL;
606
607 if (ldcache == 0) {
608 if (stat(cachefile, &st) || (fd = open(cachefile, O_RDONLY)) == -1)
609 return NULL;
610
611 /* cache these values so we only map/unmap the cache file once */
612 ldcache_size = st.st_size;
613 ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
614
615 close(fd);
616
617 if (ldcache == (caddr_t)-1) {
618 ldcache = 0;
619 return NULL;
620 }
621
622 if (memcmp(((header_t *) ldcache)->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN))
623 return NULL;
624 if (memcmp (((header_t *) ldcache)->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
625 return NULL;
626 }
627
628 header = (header_t *) ldcache;
629 libent = (libentry_t *) (ldcache + sizeof(header_t));
630 strs = (char *) &libent[header->nlibs];
631
632 for (fd = 0; fd < header->nlibs; fd++) {
633 /* this should be more fine grained, but for now we assume that
634 * diff arches will not be cached together. and we ignore the
635 * the different multilib mips cases. */
636 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
637 continue;
638 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
639 continue;
640
641 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
642 continue;
643 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
644 }
645 return buf;
646}
647
648
277static void scanelf_file_needed(elfobj *elf, char *found_needed, char **ret, size_t *ret_len) 649static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
278{ 650{
279 unsigned long i; 651 unsigned long i;
280 char *needed; 652 char *needed;
281 void *strtbl_void; 653 void *strtbl_void;
654 char *p;
282 655
283 if (!show_needed) return; 656 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL;
284 657
285 strtbl_void = elf_findsecbyname(elf, ".dynstr"); 658 strtbl_void = elf_findsecbyname(elf, ".dynstr");
286 659
287 if (elf->phdr && strtbl_void) { 660 if (elf->phdr && strtbl_void) {
288#define SHOW_NEEDED(B) \ 661#define SHOW_NEEDED(B) \
298 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 671 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
299 dyn = DYN ## B (elf->data + offset); \ 672 dyn = DYN ## B (elf->data + offset); \
300 while (EGET(dyn->d_tag) != DT_NULL) { \ 673 while (EGET(dyn->d_tag) != DT_NULL) { \
301 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 674 if (EGET(dyn->d_tag) == DT_NEEDED) { \
302 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 675 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
303 if (offset >= elf->len) { \ 676 if (offset >= (Elf ## B ## _Off)elf->len) { \
304 ++dyn; \ 677 ++dyn; \
305 continue; \ 678 continue; \
306 } \ 679 } \
307 needed = (char*)(elf->data + offset); \ 680 needed = (char*)(elf->data + offset); \
681 if (op == 0) { \
682 if (!be_wewy_wewy_quiet) { \
308 if (*found_needed) xchrcat(ret, ',', ret_len); \ 683 if (*found_needed) xchrcat(ret, ',', ret_len); \
684 if (use_ldcache) \
685 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
686 needed = p; \
309 xstrcat(ret, needed, ret_len); \ 687 xstrcat(ret, needed, ret_len); \
688 } \
310 *found_needed = 1; \ 689 *found_needed = 1; \
690 } else { \
691 if (!strncmp(find_lib, needed, strlen( !gmatch ? needed : find_lib))) { \
692 *found_lib = 1; \
693 return (be_wewy_wewy_quiet ? NULL : needed); \
694 } \
695 } \
311 } \ 696 } \
312 ++dyn; \ 697 ++dyn; \
313 } \ 698 } \
314 } } 699 } }
315 SHOW_NEEDED(32) 700 SHOW_NEEDED(32)
316 SHOW_NEEDED(64) 701 SHOW_NEEDED(64)
702 if (op == 0 && !*found_needed && be_verbose)
703 warn("ELF lacks DT_NEEDED sections: %s", elf->filename);
317 } 704 }
705
706 return NULL;
318} 707}
319static char *scanelf_file_interp(elfobj *elf, char *found_interp) 708static char *scanelf_file_interp(elfobj *elf, char *found_interp)
320{ 709{
321 void *strtbl_void; 710 void *strtbl_void;
322 711
327 if (strtbl_void) { 716 if (strtbl_void) {
328#define SHOW_INTERP(B) \ 717#define SHOW_INTERP(B) \
329 if (elf->elf_class == ELFCLASS ## B) { \ 718 if (elf->elf_class == ELFCLASS ## B) { \
330 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 719 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
331 *found_interp = 1; \ 720 *found_interp = 1; \
332 return elf->data + EGET(strtbl->sh_offset); \ 721 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \
333 } 722 }
334 SHOW_INTERP(32) 723 SHOW_INTERP(32)
335 SHOW_INTERP(64) 724 SHOW_INTERP(64)
336 } 725 }
337 return NULL; 726 return NULL;
359 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 748 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
360 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \ 749 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \
361 { \ 750 { \
362 if (be_quiet) return NULL; \ 751 if (be_quiet) return NULL; \
363 *found_bind = 1; \ 752 *found_bind = 1; \
364 return "NOW"; \ 753 return (char *)(be_wewy_wewy_quiet ? NULL : "NOW"); \
365 } \ 754 } \
366 ++dyn; \ 755 ++dyn; \
367 } \ 756 } \
368 } \ 757 } \
369 } 758 }
370 SHOW_BIND(32) 759 SHOW_BIND(32)
371 SHOW_BIND(64) 760 SHOW_BIND(64)
372 761
762 if (be_wewy_wewy_quiet) return NULL;
763
373 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 764 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) {
374 return NULL; 765 return NULL;
375 } else { 766 } else {
376 *found_bind = 1; 767 *found_bind = 1;
377 return "LAZY"; 768 return (char *) "LAZY";
378 } 769 }
379} 770}
380static char *scanelf_file_sym(elfobj *elf, char *found_sym, const char *filename) 771static char *scanelf_file_soname(elfobj *elf, char *found_soname)
381{ 772{
382 unsigned long i; 773 unsigned long i;
774 char *soname;
775 void *strtbl_void;
776
777 if (!show_soname) return NULL;
778
779 strtbl_void = elf_findsecbyname(elf, ".dynstr");
780
781 if (elf->phdr && strtbl_void) {
782#define SHOW_SONAME(B) \
783 if (elf->elf_class == ELFCLASS ## B) { \
784 Elf ## B ## _Dyn *dyn; \
785 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
786 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
787 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
788 Elf ## B ## _Off offset; \
789 /* only look for soname in shared objects */ \
790 if (ehdr->e_type != ET_DYN) \
791 return NULL; \
792 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
793 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \
794 offset = EGET(phdr[i].p_offset); \
795 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
796 dyn = DYN ## B (elf->data + offset); \
797 while (EGET(dyn->d_tag) != DT_NULL) { \
798 if (EGET(dyn->d_tag) == DT_SONAME) { \
799 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
800 if (offset >= (Elf ## B ## _Off)elf->len) { \
801 ++dyn; \
802 continue; \
803 } \
804 soname = (char*)(elf->data + offset); \
805 *found_soname = 1; \
806 return (be_wewy_wewy_quiet ? NULL : soname); \
807 } \
808 ++dyn; \
809 } \
810 } }
811 SHOW_SONAME(32)
812 SHOW_SONAME(64)
813 }
814
815 return NULL;
816}
817static char *scanelf_file_sym(elfobj *elf, char *found_sym)
818{
819 unsigned long i;
820 char *ret;
383 void *symtab_void, *strtab_void; 821 void *symtab_void, *strtab_void;
384 822
385 if (!find_sym) return NULL; 823 if (!find_sym) return NULL;
824 ret = find_sym;
386 825
387 symtab_void = elf_findsecbyname(elf, ".symtab"); 826 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
388 strtab_void = elf_findsecbyname(elf, ".strtab");
389 827
390 if (symtab_void && strtab_void) { 828 if (symtab_void && strtab_void) {
391 char *base, *basemem;
392 basemem = xstrdup(filename);
393 base = basename(basemem);
394#define FIND_SYM(B) \ 829#define FIND_SYM(B) \
395 if (elf->elf_class == ELFCLASS ## B) { \ 830 if (elf->elf_class == ELFCLASS ## B) { \
396 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 831 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
397 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 832 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
398 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 833 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
399 unsigned long cnt = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 834 unsigned long cnt = EGET(symtab->sh_entsize); \
400 char *symname; \ 835 char *symname; \
836 if (cnt) \
837 cnt = EGET(symtab->sh_size) / cnt; \
401 for (i = 0; i < cnt; ++i) { \ 838 for (i = 0; i < cnt; ++i) { \
402 if (sym->st_name) { \ 839 if (sym->st_name) { \
403 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 840 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
841 if ((void*)symname > (void*)elf->data_end) { \
842 warnf("%s: corrupt ELF symbols", elf->filename); \
843 continue; \
844 } \
404 if (*find_sym == '*') { \ 845 if (*find_sym == '*') { \
405 printf("%s(%s) %5lX %15s %s\n", \ 846 printf("%s(%s) %5lX %15s %s\n", \
406 ((*found_sym == 0) ? "\n\t" : "\t"), \ 847 ((*found_sym == 0) ? "\n\t" : "\t"), \
407 base, \ 848 elf->base_filename, \
408 (long)sym->st_size, \ 849 (unsigned long)sym->st_size, \
409 (char *)get_elfstttype(sym->st_info), \ 850 get_elfstttype(sym->st_info), \
410 symname); \ 851 symname); \
411 *found_sym = 1; \ 852 *found_sym = 1; \
412 } else if ((strcmp(find_sym, symname) == 0) || \ 853 } else { \
854 char *this_sym, *next_sym; \
855 this_sym = find_sym; \
856 do { \
857 next_sym = strchr(this_sym, ','); \
858 if (next_sym == NULL) \
859 next_sym = this_sym + strlen(this_sym); \
860 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
413 (strcmp(symname, versioned_symname) == 0)) \ 861 (strcmp(symname, versioned_symname) == 0)) { \
862 ret = this_sym; \
414 (*found_sym)++; \ 863 (*found_sym)++; \
864 goto break_out; \
865 } \
866 this_sym = next_sym + 1; \
867 } while (*next_sym != '\0'); \
868 } \
415 } \ 869 } \
416 ++sym; \ 870 ++sym; \
417 } } 871 } }
418 FIND_SYM(32) 872 FIND_SYM(32)
419 FIND_SYM(64) 873 FIND_SYM(64)
420 free(basemem);
421 } 874 }
875
876break_out:
877 if (be_wewy_wewy_quiet) return NULL;
878
422 if (*find_sym != '*' && *found_sym) 879 if (*find_sym != '*' && *found_sym)
423 return find_sym; 880 return ret;
424 if (be_quiet) 881 if (be_quiet)
425 return NULL; 882 return NULL;
426 else 883 else
427 return " - "; 884 return (char *)" - ";
428} 885}
886
887
888static char *scanelf_file_sections(elfobj *elf, char *found_section)
889{
890 if (!find_section)
891 return NULL;
892
893#define FIND_SECTION(B) \
894 if (elf->elf_class == ELFCLASS ## B) { \
895 Elf ## B ## _Shdr *section; \
896 section = SHDR ## B (elf_findsecbyname(elf, find_section)); \
897 if (section != NULL) \
898 *found_section = 1; \
899 }
900 FIND_SECTION(32)
901 FIND_SECTION(64)
902
903
904 if (be_wewy_wewy_quiet) return NULL;
905
906 if (*found_section)
907 return find_section;
908
909 if (be_quiet)
910 return NULL;
911 else
912 return (char *)" - ";
913}
914
429/* scan an elf file and show all the fun stuff */ 915/* scan an elf file and show all the fun stuff */
430// #define prints(str) fputs(str, stdout)
431#define prints(str) write(fileno(stdout), str, strlen(str)) 916#define prints(str) write(fileno(stdout), str, strlen(str))
432static void scanelf_file(const char *filename) 917static int scanelf_elfobj(elfobj *elf)
433{ 918{
434 unsigned long i; 919 unsigned long i;
435 char found_pax, found_stack, found_relro, found_textrel, 920 char found_pax, found_phdr, found_relro, found_load, found_textrel,
436 found_rpath, found_needed, found_interp, found_bind, 921 found_rpath, found_needed, found_interp, found_bind, found_soname,
437 found_sym, found_file; 922 found_sym, found_lib, found_file, found_textrels, found_section;
438 elfobj *elf;
439 struct stat st;
440 static char *out_buffer = NULL; 923 static char *out_buffer = NULL;
441 static size_t out_len; 924 static size_t out_len;
442 925
443 /* make sure 'filename' exists */
444 if (lstat(filename, &st) == -1) {
445 if (be_verbose > 2) printf("%s: does not exist\n", filename);
446 return;
447 }
448 /* always handle regular files and handle symlinked files if no -y */
449 if (S_ISLNK(st.st_mode)) {
450 if (!scan_symlink) return;
451 stat(filename, &st);
452 }
453 if (!S_ISREG(st.st_mode)) {
454 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
455 return;
456 }
457
458 found_pax = found_stack = found_relro = found_textrel = \ 926 found_pax = found_phdr = found_relro = found_load = found_textrel = \
459 found_rpath = found_needed = found_interp = found_bind = \ 927 found_rpath = found_needed = found_interp = found_bind = found_soname = \
460 found_sym = found_file = 0; 928 found_sym = found_lib = found_file = found_textrels = found_section = 0;
461 929
462 /* verify this is real ELF */
463 if ((elf = readelf(filename)) == NULL) {
464 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
465 return;
466 }
467
468 if (be_verbose > 1) 930 if (be_verbose > 2)
469 printf("%s: scanning file {%s,%s}\n", filename, 931 printf("%s: scanning file {%s,%s}\n", elf->filename,
470 get_elfeitype(elf, EI_CLASS, elf->elf_class), 932 get_elfeitype(EI_CLASS, elf->elf_class),
471 get_elfeitype(elf, EI_DATA, elf->data[EI_DATA])); 933 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
472 else if (be_verbose) 934 else if (be_verbose > 1)
473 printf("%s: scanning file\n", filename); 935 printf("%s: scanning file\n", elf->filename);
474 936
475 /* init output buffer */ 937 /* init output buffer */
476 if (!out_buffer) { 938 if (!out_buffer) {
477 out_len = sizeof(char) * 80; 939 out_len = sizeof(char) * 80;
478 out_buffer = (char*)xmalloc(out_len); 940 out_buffer = (char*)xmalloc(out_len);
480 *out_buffer = '\0'; 942 *out_buffer = '\0';
481 943
482 /* show the header */ 944 /* show the header */
483 if (!be_quiet && show_banner) { 945 if (!be_quiet && show_banner) {
484 for (i = 0; out_format[i]; ++i) { 946 for (i = 0; out_format[i]; ++i) {
485 if (out_format[i] != '%') continue; 947 if (!IS_MODIFIER(out_format[i])) continue;
486 948
487 switch (out_format[++i]) { 949 switch (out_format[++i]) {
488 case '%': break; 950 case '%': break;
951 case '#': break;
952 case 'F':
953 case 'p':
489 case 'F': prints("FILE "); found_file = 1; break; 954 case 'f': prints("FILE "); found_file = 1; break;
490 case 'o': prints(" TYPE "); break; 955 case 'o': prints(" TYPE "); break;
491 case 'x': prints(" PAX "); break; 956 case 'x': prints(" PAX "); break;
492 case 'e': prints("STK/REL "); break; 957 case 'e': prints("STK/REL/PTL "); break;
493 case 't': prints("TEXTREL "); break; 958 case 't': prints("TEXTREL "); break;
494 case 'r': prints("RPATH "); break; 959 case 'r': prints("RPATH "); break;
495 case 'n': prints("NEEDED "); break; 960 case 'n': prints("NEEDED "); break;
496 case 'i': prints("INTERP "); break; 961 case 'i': prints("INTERP "); break;
497 case 'b': prints("BIND "); break; 962 case 'b': prints("BIND "); break;
963 case 'S': prints("SONAME "); break;
498 case 's': prints("SYM "); break; 964 case 's': prints("SYM "); break;
965 case 'N': prints("LIB "); break;
966 case 'T': prints("TEXTRELS "); break;
967 case 'k': prints("SECTION "); break;
968 default: warnf("'%c' has no title ?", out_format[i]);
499 } 969 }
500 } 970 }
501 if (!found_file) prints("FILE "); 971 if (!found_file) prints("FILE ");
502 prints("\n"); 972 prints("\n");
503 found_file = 0; 973 found_file = 0;
505 } 975 }
506 976
507 /* dump all the good stuff */ 977 /* dump all the good stuff */
508 for (i = 0; out_format[i]; ++i) { 978 for (i = 0; out_format[i]; ++i) {
509 const char *out; 979 const char *out;
980 const char *tmp;
510 981
511 /* make sure we trim leading spaces in quiet mode */ 982 if (!IS_MODIFIER(out_format[i])) {
512 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
513 *out_buffer = '\0';
514
515 if (out_format[i] != '%') {
516 xchrcat(&out_buffer, out_format[i], &out_len); 983 xchrcat(&out_buffer, out_format[i], &out_len);
517 continue; 984 continue;
518 } 985 }
519 986
520 out = NULL; 987 out = NULL;
988 be_wewy_wewy_quiet = (out_format[i] == '#');
521 switch (out_format[++i]) { 989 switch (out_format[++i]) {
990 case '%':
991 case '#':
522 case '%': xchrcat(&out_buffer, '%', &out_len); break; 992 xchrcat(&out_buffer, out_format[i], &out_len); break;
523 case 'F': found_file = 1; xstrcat(&out_buffer, filename, &out_len); break; 993 case 'F':
994 found_file = 1;
995 if (be_wewy_wewy_quiet) break;
996 xstrcat(&out_buffer, elf->filename, &out_len);
997 break;
998 case 'p':
999 found_file = 1;
1000 if (be_wewy_wewy_quiet) break;
1001 tmp = elf->filename;
1002 if (search_path) {
1003 ssize_t len_search = strlen(search_path);
1004 ssize_t len_file = strlen(elf->filename);
1005 if (!strncmp(elf->filename, search_path, len_search) && \
1006 len_file > len_search)
1007 tmp += len_search;
1008 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++;
1009 }
1010 xstrcat(&out_buffer, tmp, &out_len);
1011 break;
1012 case 'f':
1013 found_file = 1;
1014 if (be_wewy_wewy_quiet) break;
1015 tmp = strrchr(elf->filename, '/');
1016 tmp = (tmp == NULL ? elf->filename : tmp+1);
1017 xstrcat(&out_buffer, tmp, &out_len);
1018 break;
524 case 'o': out = get_elfetype(elf); break; 1019 case 'o': out = get_elfetype(elf); break;
525 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1020 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
526 case 'e': out = scanelf_file_stack(elf, &found_stack, &found_relro); break; 1021 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
527 case 't': out = scanelf_file_textrel(elf, &found_textrel); break; 1022 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
1023 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
528 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; 1024 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1025 case 'n':
529 case 'n': scanelf_file_needed(elf, &found_needed, &out_buffer, &out_len); break; 1026 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
530 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1027 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
531 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1028 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
1029 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
532 case 's': out = scanelf_file_sym(elf, &found_sym, filename); break; 1030 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1031 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1032 default: warnf("'%c' has no scan code?", out_format[i]);
533 } 1033 }
1034 if (out) {
1035 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
1036 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
1037 xstrncat(&out_buffer, out, &out_len, (tmp-out));
1038 else
534 if (out) xstrcat(&out_buffer, out, &out_len); 1039 xstrcat(&out_buffer, out, &out_len);
1040 }
535 } 1041 }
536 1042
537#define FOUND_SOMETHING() \ 1043#define FOUND_SOMETHING() \
538 (found_pax || found_stack || found_textrel || found_rpath || \ 1044 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
539 found_needed || found_interp || found_bind || found_sym) 1045 found_rpath || found_needed || found_interp || found_bind || \
1046 found_soname || found_sym || found_lib || found_textrels || found_section )
540 1047
541 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1048 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
542 xchrcat(&out_buffer, ' ', &out_len); 1049 xchrcat(&out_buffer, ' ', &out_len);
543 xstrcat(&out_buffer, filename, &out_len); 1050 xstrcat(&out_buffer, elf->filename, &out_len);
544 } 1051 }
545 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) 1052 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) {
546 puts(out_buffer); 1053 puts(out_buffer);
1054 fflush(stdout);
1055 }
547 1056
1057 return 0;
1058}
1059
1060/* scan a single elf */
1061static int scanelf_elf(const char *filename, int fd, size_t len)
1062{
1063 int ret = 1;
1064 elfobj *elf;
1065
1066 /* verify this is real ELF */
1067 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1068 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1069 return ret;
1070 }
1071 switch (match_bits) {
1072 case 32:
1073 if (elf->elf_class != ELFCLASS32)
1074 goto label_done;
1075 break;
1076 case 64:
1077 if (elf->elf_class != ELFCLASS64)
1078 goto label_done;
1079 break;
1080 default: break;
1081 }
1082 if (strlen(match_etypes)) {
1083 char sbuf[126];
1084 strncpy(sbuf, match_etypes, sizeof(sbuf));
1085 if (strchr(match_etypes, ',') != NULL) {
1086 char *p;
1087 while((p = strrchr(sbuf, ',')) != NULL) {
1088 *p = 0;
1089 if (atoi(p+1) == get_etype(elf))
1090 goto label_ret;
1091 }
1092 }
1093 if (atoi(sbuf) != get_etype(elf))
1094 goto label_done;
1095 }
1096
1097label_ret:
1098 ret = scanelf_elfobj(elf);
1099
1100label_done:
548 unreadelf(elf); 1101 unreadelf(elf);
1102 return ret;
1103}
1104
1105/* scan an archive of elfs */
1106static int scanelf_archive(const char *filename, int fd, size_t len)
1107{
1108 archive_handle *ar;
1109 archive_member *m;
1110 char *ar_buffer;
1111 elfobj *elf;
1112
1113 ar = ar_open_fd(filename, fd);
1114 if (ar == NULL)
1115 return 1;
1116
1117 ar_buffer = (char*)mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1118 while ((m=ar_next(ar)) != NULL) {
1119 elf = readelf_buffer(m->name, ar_buffer+lseek(fd,0,SEEK_CUR), m->size);
1120 if (elf) {
1121 scanelf_elfobj(elf);
1122 unreadelf(elf);
1123 }
1124 }
1125 munmap(ar_buffer, len);
1126
1127 return 0;
1128}
1129/* scan a file which may be an elf or an archive or some other magical beast */
1130static void scanelf_file(const char *filename)
1131{
1132 struct stat st;
1133 int fd;
1134
1135 /* make sure 'filename' exists */
1136 if (lstat(filename, &st) == -1) {
1137 if (be_verbose > 2) printf("%s: does not exist\n", filename);
1138 return;
1139 }
1140
1141 /* always handle regular files and handle symlinked files if no -y */
1142 if (S_ISLNK(st.st_mode)) {
1143 if (!scan_symlink) return;
1144 stat(filename, &st);
1145 }
1146 if (!S_ISREG(st.st_mode)) {
1147 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1148 return;
1149 }
1150
1151 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1152 return;
1153
1154 if (scanelf_elf(filename, fd, st.st_size) == 1 && scan_archives)
1155 /* if it isn't an ELF, maybe it's an .a archive */
1156 scanelf_archive(filename, fd, st.st_size);
1157
1158 close(fd);
549} 1159}
550 1160
551/* scan a directory for ET_EXEC files and print when we find one */ 1161/* scan a directory for ET_EXEC files and print when we find one */
552static void scanelf_dir(const char *path) 1162static void scanelf_dir(const char *path)
553{ 1163{
554 register DIR *dir; 1164 register DIR *dir;
555 register struct dirent *dentry; 1165 register struct dirent *dentry;
556 struct stat st_top, st; 1166 struct stat st_top, st;
557 char buf[_POSIX_PATH_MAX]; 1167 char buf[__PAX_UTILS_PATH_MAX];
558 size_t pathlen = 0, len = 0; 1168 size_t pathlen = 0, len = 0;
559 1169
560 /* make sure path exists */ 1170 /* make sure path exists */
561 if (lstat(path, &st_top) == -1) { 1171 if (lstat(path, &st_top) == -1) {
562 if (be_verbose > 2) printf("%s: does not exist\n", path); 1172 if (be_verbose > 2) printf("%s: does not exist\n", path);
572 /* now scan the dir looking for fun stuff */ 1182 /* now scan the dir looking for fun stuff */
573 if ((dir = opendir(path)) == NULL) { 1183 if ((dir = opendir(path)) == NULL) {
574 warnf("could not opendir %s: %s", path, strerror(errno)); 1184 warnf("could not opendir %s: %s", path, strerror(errno));
575 return; 1185 return;
576 } 1186 }
577 if (be_verbose) printf("%s: scanning dir\n", path); 1187 if (be_verbose > 1) printf("%s: scanning dir\n", path);
578 1188
579 pathlen = strlen(path); 1189 pathlen = strlen(path);
580 while ((dentry = readdir(dir))) { 1190 while ((dentry = readdir(dir))) {
581 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1191 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
582 continue; 1192 continue;
583 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1193 len = (pathlen + 1 + strlen(dentry->d_name) + 1);
584 if (len >= sizeof(buf)) { 1194 if (len >= sizeof(buf)) {
585 warnf("Skipping '%s': len > sizeof(buf); %d > %d\n", path, (int)len, (int)sizeof(buf)); 1195 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
1196 (unsigned long)len, (unsigned long)sizeof(buf));
586 continue; 1197 continue;
587 } 1198 }
588 sprintf(buf, "%s/%s", path, dentry->d_name); 1199 sprintf(buf, "%s/%s", path, dentry->d_name);
589 if (lstat(buf, &st) != -1) { 1200 if (lstat(buf, &st) != -1) {
590 if (S_ISREG(st.st_mode)) 1201 if (S_ISREG(st.st_mode))
600 1211
601static int scanelf_from_file(char *filename) 1212static int scanelf_from_file(char *filename)
602{ 1213{
603 FILE *fp = NULL; 1214 FILE *fp = NULL;
604 char *p; 1215 char *p;
605 char path[_POSIX_PATH_MAX]; 1216 char path[__PAX_UTILS_PATH_MAX];
606 1217
607 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1218 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL))
608 fp = stdin; 1219 fp = stdin;
609 else if ((fp = fopen(filename, "r")) == NULL) 1220 else if ((fp = fopen(filename, "r")) == NULL)
610 return 1; 1221 return 1;
611 1222
612 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1223 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
613 if ((p = strchr(path, '\n')) != NULL) 1224 if ((p = strchr(path, '\n')) != NULL)
614 *p = 0; 1225 *p = 0;
1226 search_path = path;
615 scanelf_dir(path); 1227 scanelf_dir(path);
616 } 1228 }
617 if (fp != stdin) 1229 if (fp != stdin)
618 fclose(fp); 1230 fclose(fp);
619 return 0; 1231 return 0;
620} 1232}
621 1233
622static void load_ld_so_conf() 1234static int load_ld_so_conf(int i, const char *fname)
623{ 1235{
624 FILE *fp = NULL; 1236 FILE *fp = NULL;
625 char *p; 1237 char *p;
626 char path[_POSIX_PATH_MAX]; 1238 char path[__PAX_UTILS_PATH_MAX];
627 int i = 0;
628 1239
629 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1240 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths))
630 return; 1241 return i;
631 1242
1243 if ((fp = fopen(fname, "r")) == NULL)
1244 return i;
1245
632 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1246 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
633 if (*path != '/')
634 continue;
635
636 if ((p = strrchr(path, '\r')) != NULL) 1247 if ((p = strrchr(path, '\r')) != NULL)
637 *p = 0; 1248 *p = 0;
638 if ((p = strchr(path, '\n')) != NULL) 1249 if ((p = strchr(path, '\n')) != NULL)
639 *p = 0; 1250 *p = 0;
1251#ifdef HAVE_GLOB
1252 // recursive includes of the same file will make this segfault.
1253 if ((*path == 'i') && (strncmp(path, "include", 7) == 0) && isblank(path[7])) {
1254 glob64_t gl;
1255 size_t x;
1256 char gpath[__PAX_UTILS_PATH_MAX];
1257
1258 gpath[sizeof(gpath)] = 0;
1259
1260 if (path[8] != '/')
1261 snprintf(gpath, sizeof(gpath)-1, "/etc/%s", &path[8]);
1262 else
1263 strncpy(gpath, &path[8], sizeof(gpath)-1);
1264
1265 if ((glob64(gpath, 0, NULL, &gl)) == 0) {
1266 for (x = 0; x < gl.gl_pathc; ++x) {
1267 /* try to avoid direct loops */
1268 if (strcmp(gl.gl_pathv[x], fname) == 0)
1269 continue;
1270 i = load_ld_so_conf(i, gl.gl_pathv[x]);
1271 if (i + 1 >= sizeof(ldpaths) / sizeof(*ldpaths)) {
1272 globfree64(&gl);
1273 return i;
1274 }
1275 }
1276 globfree64 (&gl);
1277 continue;
1278 } else
1279 abort();
1280 }
1281#endif
1282 if (*path != '/')
1283 continue;
640 1284
641 ldpaths[i++] = xstrdup(path); 1285 ldpaths[i++] = xstrdup(path);
642 1286
643 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1287 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths))
644 break; 1288 break;
645 } 1289 }
646 ldpaths[i] = NULL; 1290 ldpaths[i] = NULL;
647 1291
648 fclose(fp); 1292 fclose(fp);
1293 return i;
649} 1294}
650 1295
651/* scan /etc/ld.so.conf for paths */ 1296/* scan /etc/ld.so.conf for paths */
652static void scanelf_ldpath() 1297static void scanelf_ldpath()
653{ 1298{
688 } 1333 }
689 1334
690 free(path); 1335 free(path);
691} 1336}
692 1337
693
694
695/* usage / invocation handling functions */ 1338/* usage / invocation handling functions */
696#define PARSE_FLAGS "plRmyxetrnibs:aqvF:f:o:BhV" 1339#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:BhV"
697#define a_argument required_argument 1340#define a_argument required_argument
698static struct option const long_opts[] = { 1341static struct option const long_opts[] = {
699 {"path", no_argument, NULL, 'p'}, 1342 {"path", no_argument, NULL, 'p'},
700 {"ldpath", no_argument, NULL, 'l'}, 1343 {"ldpath", no_argument, NULL, 'l'},
701 {"recursive", no_argument, NULL, 'R'}, 1344 {"recursive", no_argument, NULL, 'R'},
702 {"mount", no_argument, NULL, 'm'}, 1345 {"mount", no_argument, NULL, 'm'},
703 {"symlink", no_argument, NULL, 'y'}, 1346 {"symlink", no_argument, NULL, 'y'},
1347 {"archives", no_argument, NULL, 'A'},
1348 {"ldcache", no_argument, NULL, 'L'},
1349 {"fix", no_argument, NULL, 'X'},
1350 {"setpax", a_argument, NULL, 'z'},
704 {"pax", no_argument, NULL, 'x'}, 1351 {"pax", no_argument, NULL, 'x'},
705 {"header", no_argument, NULL, 'e'}, 1352 {"header", no_argument, NULL, 'e'},
706 {"textrel", no_argument, NULL, 't'}, 1353 {"textrel", no_argument, NULL, 't'},
707 {"rpath", no_argument, NULL, 'r'}, 1354 {"rpath", no_argument, NULL, 'r'},
708 {"needed", no_argument, NULL, 'n'}, 1355 {"needed", no_argument, NULL, 'n'},
709 {"interp", no_argument, NULL, 'i'}, 1356 {"interp", no_argument, NULL, 'i'},
710 {"bind", no_argument, NULL, 'b'}, 1357 {"bind", no_argument, NULL, 'b'},
1358 {"soname", no_argument, NULL, 'S'},
711 {"symbol", a_argument, NULL, 's'}, 1359 {"symbol", a_argument, NULL, 's'},
1360 {"section", a_argument, NULL, 'k'},
1361 {"lib", a_argument, NULL, 'N'},
1362 {"gmatch", no_argument, NULL, 'g'},
1363 {"textrels", no_argument, NULL, 'T'},
1364 {"etype", a_argument, NULL, 'E'},
1365 {"bits", a_argument, NULL, 'M'},
712 {"all", no_argument, NULL, 'a'}, 1366 {"all", no_argument, NULL, 'a'},
713 {"quiet", no_argument, NULL, 'q'}, 1367 {"quiet", no_argument, NULL, 'q'},
714 {"verbose", no_argument, NULL, 'v'}, 1368 {"verbose", no_argument, NULL, 'v'},
715 {"format", a_argument, NULL, 'F'}, 1369 {"format", a_argument, NULL, 'F'},
716 {"from", a_argument, NULL, 'f'}, 1370 {"from", a_argument, NULL, 'f'},
717 {"file", a_argument, NULL, 'o'}, 1371 {"file", a_argument, NULL, 'o'},
718 {"nobanner", no_argument, NULL, 'B'}, 1372 {"nobanner", no_argument, NULL, 'B'},
719 {"help", no_argument, NULL, 'h'}, 1373 {"help", no_argument, NULL, 'h'},
720 {"version", no_argument, NULL, 'V'}, 1374 {"version", no_argument, NULL, 'V'},
721 {NULL, no_argument, NULL, 0x0} 1375 {NULL, no_argument, NULL, 0x0}
722}; 1376};
723 1377
724static char *opts_help[] = { 1378static const char *opts_help[] = {
725 "Scan all directories in PATH environment", 1379 "Scan all directories in PATH environment",
726 "Scan all directories in /etc/ld.so.conf", 1380 "Scan all directories in /etc/ld.so.conf",
727 "Scan directories recursively", 1381 "Scan directories recursively",
728 "Don't recursively cross mount points", 1382 "Don't recursively cross mount points",
729 "Don't scan symlinks\n", 1383 "Don't scan symlinks",
1384 "Scan archives (.a files)",
1385 "Utilize ld.so.cache information (use with -r/-n)",
1386 "Try and 'fix' bad things (use with -r/-e)",
1387 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
730 "Print PaX markings", 1388 "Print PaX markings",
731 "Print GNU_STACK markings", 1389 "Print GNU_STACK/PT_LOAD markings",
732 "Print TEXTREL information", 1390 "Print TEXTREL information",
733 "Print RPATH information", 1391 "Print RPATH information",
734 "Print NEEDED information", 1392 "Print NEEDED information",
735 "Print INTERP information", 1393 "Print INTERP information",
736 "Print BIND information", 1394 "Print BIND information",
1395 "Print SONAME information",
737 "Find a specified symbol", 1396 "Find a specified symbol",
1397 "Find a specified section",
1398 "Find a specified library",
1399 "Use strncmp to match libraries. (use with -N)",
1400 "Locate cause of TEXTREL",
1401 "Print only ELF files matching numeric constant type",
1402 "Print only ELF files matching numeric bits",
738 "Print all scanned info (-x -e -t -r -n -i -b)\n", 1403 "Print all scanned info (-x -e -t -r -b)\n",
739 "Only output 'bad' things", 1404 "Only output 'bad' things",
740 "Be verbose (can be specified more than once)", 1405 "Be verbose (can be specified more than once)",
741 "Use specified format for output", 1406 "Use specified format for output",
742 "Read input stream from a filename", 1407 "Read input stream from a filename",
743 "Write output stream to a filename", 1408 "Write output stream to a filename",
750/* display usage and exit */ 1415/* display usage and exit */
751static void usage(int status) 1416static void usage(int status)
752{ 1417{
753 unsigned long i; 1418 unsigned long i;
754 printf("* Scan ELF binaries for stuff\n\n" 1419 printf("* Scan ELF binaries for stuff\n\n"
755 "Usage: %s [options] <dir1/file1> [dir2 dirN fileN ...]\n\n", argv0); 1420 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
756 printf("Options: -[%s]\n", PARSE_FLAGS); 1421 printf("Options: -[%s]\n", PARSE_FLAGS);
757 for (i = 0; long_opts[i].name; ++i) 1422 for (i = 0; long_opts[i].name; ++i)
758 if (long_opts[i].has_arg == no_argument) 1423 if (long_opts[i].has_arg == no_argument)
759 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 1424 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
760 long_opts[i].name, opts_help[i]); 1425 long_opts[i].name, opts_help[i]);
761 else 1426 else
762 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 1427 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
763 long_opts[i].name, opts_help[i]); 1428 long_opts[i].name, opts_help[i]);
764 1429
765 if (status != EXIT_SUCCESS) 1430 if (status != EXIT_SUCCESS)
766 exit(status); 1431 exit(status);
767 1432
768 puts("\nThe format modifiers for the -F option are:"); 1433 puts("\nThe format modifiers for the -F option are:");
769 puts(" %F Filename \t%x PaX Flags \t%e STACK/RELRO"); 1434 puts(" F Filename \tx PaX Flags \te STACK/RELRO");
770 puts(" %t TEXTREL \t%r RPATH \t%n NEEDED"); 1435 puts(" t TEXTREL \tr RPATH \tn NEEDED");
771 puts(" %i INTERP \t%b BIND \t%s symbol"); 1436 puts(" i INTERP \tb BIND \ts symbol");
1437 puts(" N library \to Type \tT TEXTRELs");
1438 puts(" S SONAME \tk section");
1439 puts(" p filename (with search path removed)");
1440 puts(" f filename (short name/basename)");
1441 puts("Prefix each modifier with '%' (verbose) or '#' (silent)");
1442
1443 puts("\nELF Etypes:");
1444 print_etypes(stdout);
772 1445
773 exit(status); 1446 exit(status);
774} 1447}
775 1448
776/* parse command line arguments and preform needed actions */ 1449/* parse command line arguments and preform needed actions */
782 opterr = 0; 1455 opterr = 0;
783 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1456 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
784 switch (i) { 1457 switch (i) {
785 1458
786 case 'V': 1459 case 'V':
787 printf("%s compiled %s\n%s\n" 1460 printf("pax-utils-%s: %s compiled %s\n%s\n"
788 "%s written for Gentoo Linux by <solar and vapier @ gentoo.org>\n", 1461 "%s written for Gentoo by <solar and vapier @ gentoo.org>\n",
789 __FILE__, __DATE__, rcsid, argv0); 1462 VERSION, __FILE__, __DATE__, rcsid, argv0);
790 exit(EXIT_SUCCESS); 1463 exit(EXIT_SUCCESS);
791 break; 1464 break;
792 case 'h': usage(EXIT_SUCCESS); break; 1465 case 'h': usage(EXIT_SUCCESS); break;
793 case 'f': 1466 case 'f':
794 if (from_file == NULL) 1467 if (from_file) warn("You prob don't want to specify -f twice");
795 from_file = xstrdup(optarg); 1468 from_file = optarg;
796 else 1469 break;
797 err("Don't specify -f twice"); 1470 case 'E':
1471 strncpy(match_etypes, optarg, sizeof(match_etypes));
1472 break;
1473 case 'M':
1474 match_bits = atoi(optarg);
798 break; 1475 break;
799 case 'o': { 1476 case 'o': {
800 FILE *fp = NULL; 1477 FILE *fp = NULL;
801 fp = freopen(optarg, "w", stdout); 1478 if ((fp = freopen(optarg, "w", stdout)) == NULL)
802 if (fp == NULL)
803 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1479 err("Could not open output stream '%s': %s", optarg, strerror(errno));
804 stdout = fp; 1480 SET_STDOUT(fp);
805 break; 1481 break;
806 } 1482 }
807 1483 case 'k':
1484 if (find_section) warn("You prob don't want to specify -k twice");
1485 find_section = optarg;
1486 break;
808 case 's': { 1487 case 's': {
809 size_t len; 1488 if (find_sym) warn("You prob don't want to specify -s twice");
810 if (!find_sym)
811 err("Don't specify -s twice");
812 find_sym = xstrdup(optarg); 1489 find_sym = optarg;
813 len = strlen(find_sym) + 1;
814 versioned_symname = (char*)xmalloc(sizeof(char) * (len+1)); 1490 versioned_symname = (char*)xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
815 sprintf(versioned_symname, "%s@", find_sym); 1491 sprintf(versioned_symname, "%s@", find_sym);
816 break; 1492 break;
817 } 1493 }
1494 case 'N': {
1495 if (find_lib) warn("You prob don't want to specify -N twice");
1496 find_lib = optarg;
1497 break;
1498 }
818 1499
819 case 'F': { 1500 case 'F': {
820 if (!out_format) 1501 if (out_format) warn("You prob don't want to specify -F twice");
821 out_format = xstrdup(optarg); 1502 out_format = optarg;
822 else
823 err("Don't specify -F twice");
824 break; 1503 break;
1504 }
1505 case 'z': {
1506 unsigned long flags = 10240;
1507 size_t x;
1508
1509#define do_state(option, flag) \
1510 if (islower(option)) { \
1511 flags &= ~PF_##flag; \
1512 flags |= PF_NO##flag; \
1513 } else { \
1514 flags &= ~PF_NO##flag; \
1515 flags |= PF_##flag; \
825 } 1516 }
826 1517
1518 for (x = 0 ; x < strlen(optarg); x++) {
1519 switch(optarg[x]) {
1520 case 'p':
1521 case 'P':
1522 do_state(optarg[x], PAGEEXEC);
1523 break;
1524 case 's':
1525 case 'S':
1526 do_state(optarg[x], SEGMEXEC);
1527 break;
1528 case 'm':
1529 case 'M':
1530 do_state(optarg[x], MPROTECT);
1531 break;
1532 case 'e':
1533 case 'E':
1534 do_state(optarg[x], EMUTRAMP);
1535 break;
1536 case 'r':
1537 case 'R':
1538 do_state(optarg[x], RANDMMAP);
1539 break;
1540 case 'x':
1541 case 'X':
1542 do_state(optarg[x], RANDEXEC);
1543 break;
1544 default:
1545 break;
1546 }
1547 }
1548 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1549 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1550 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1551 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1552 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1553 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1554 setpax = flags;
1555 break;
1556 }
1557 case 'g': gmatch = 1; break;
1558 case 'L': use_ldcache = 1; break;
827 case 'y': scan_symlink = 0; break; 1559 case 'y': scan_symlink = 0; break;
1560 case 'A': scan_archives = 1; break;
828 case 'B': show_banner = 0; break; 1561 case 'B': show_banner = 0; break;
829 case 'l': scan_ldpath = 1; break; 1562 case 'l': scan_ldpath = 1; break;
830 case 'p': scan_envpath = 1; break; 1563 case 'p': scan_envpath = 1; break;
831 case 'R': dir_recurse = 1; break; 1564 case 'R': dir_recurse = 1; break;
832 case 'm': dir_crossmount = 0; break; 1565 case 'm': dir_crossmount = 0; break;
1566 case 'X': ++fix_elf; break;
833 case 'x': show_pax = 1; break; 1567 case 'x': show_pax = 1; break;
834 case 'e': show_stack = 1; break; 1568 case 'e': show_phdr = 1; break;
835 case 't': show_textrel = 1; break; 1569 case 't': show_textrel = 1; break;
836 case 'r': show_rpath = 1; break; 1570 case 'r': show_rpath = 1; break;
837 case 'n': show_needed = 1; break; 1571 case 'n': show_needed = 1; break;
838 case 'i': show_interp = 1; break; 1572 case 'i': show_interp = 1; break;
839 case 'b': show_bind = 1; break; 1573 case 'b': show_bind = 1; break;
1574 case 'S': show_soname = 1; break;
1575 case 'T': show_textrels = 1; break;
840 case 'q': be_quiet = 1; break; 1576 case 'q': be_quiet = 1; break;
841 case 'v': be_verbose = (be_verbose % 20) + 1; break; 1577 case 'v': be_verbose = (be_verbose % 20) + 1; break;
842 case 'a': show_pax = show_stack = show_textrel = show_rpath = \ 1578 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break;
843 show_needed = show_interp = show_bind = 1; break;
844 1579
845 case ':': 1580 case ':':
846 err("Option missing parameter\n"); 1581 err("Option '%c' is missing parameter", optopt);
847 case '?': 1582 case '?':
848 err("Unknown option\n"); 1583 err("Unknown option '%c' or argument missing", optopt);
849 default: 1584 default:
850 err("Unhandled option '%c'", i); 1585 err("Unhandled option '%c'; please report this", i);
851 } 1586 }
852 } 1587 }
853 1588
854 /* let the format option override all other options */ 1589 /* let the format option override all other options */
855 if (out_format) { 1590 if (out_format) {
856 show_pax = show_stack = show_textrel = show_rpath = \ 1591 show_pax = show_phdr = show_textrel = show_rpath = \
857 show_needed = show_interp = show_bind = 0; 1592 show_needed = show_interp = show_bind = show_soname = \
1593 show_textrels = 0;
858 for (i = 0; out_format[i]; ++i) { 1594 for (i = 0; out_format[i]; ++i) {
859 if (out_format[i] != '%') continue; 1595 if (!IS_MODIFIER(out_format[i])) continue;
860 1596
861 switch (out_format[++i]) { 1597 switch (out_format[++i]) {
862 case '%': break; 1598 case '%': break;
1599 case '#': break;
863 case 'F': break; 1600 case 'F': break;
1601 case 'p': break;
1602 case 'f': break;
1603 case 'k': break;
864 case 's': break; 1604 case 's': break;
1605 case 'N': break;
865 case 'o': break; 1606 case 'o': break;
866 case 'x': show_pax = 1; break; 1607 case 'x': show_pax = 1; break;
867 case 'e': show_stack = 1; break; 1608 case 'e': show_phdr = 1; break;
868 case 't': show_textrel = 1; break; 1609 case 't': show_textrel = 1; break;
869 case 'r': show_rpath = 1; break; 1610 case 'r': show_rpath = 1; break;
870 case 'n': show_needed = 1; break; 1611 case 'n': show_needed = 1; break;
871 case 'i': show_interp = 1; break; 1612 case 'i': show_interp = 1; break;
872 case 'b': show_bind = 1; break; 1613 case 'b': show_bind = 1; break;
1614 case 'S': show_soname = 1; break;
1615 case 'T': show_textrels = 1; break;
873 default: 1616 default:
874 err("Invalid format specifier '%c' (byte %i)", 1617 err("Invalid format specifier '%c' (byte %i)",
875 out_format[i], i+1); 1618 out_format[i], i+1);
876 } 1619 }
877 } 1620 }
878 1621
879 /* construct our default format */ 1622 /* construct our default format */
880 } else { 1623 } else {
881 size_t fmt_len = 30; 1624 size_t fmt_len = 30;
882 out_format = (char*)xmalloc(sizeof(char) * fmt_len); 1625 out_format = (char*)xmalloc(sizeof(char) * fmt_len);
883 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); 1626 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
884 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); 1627 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
885 if (show_stack) xstrcat(&out_format, "%e ", &fmt_len); 1628 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
886 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); 1629 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
887 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); 1630 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
888 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); 1631 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
889 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 1632 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
890 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 1633 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1634 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1635 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
891 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 1636 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
1637 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1638 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
892 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 1639 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
893 } 1640 }
894 if (be_verbose > 2) printf("Format: %s\n", out_format); 1641 if (be_verbose > 2) printf("Format: %s\n", out_format);
895 1642
896 /* now lets actually do the scanning */ 1643 /* now lets actually do the scanning */
897 if (scan_ldpath || (show_rpath && be_quiet)) 1644 if (scan_ldpath || use_ldcache)
898 load_ld_so_conf(); 1645 load_ld_so_conf(0, "/etc/ld.so.conf");
899 if (scan_ldpath) scanelf_ldpath(); 1646 if (scan_ldpath) scanelf_ldpath();
900 if (scan_envpath) scanelf_envpath(); 1647 if (scan_envpath) scanelf_envpath();
901 if (from_file) { 1648 if (from_file) {
902 scanelf_from_file(from_file); 1649 scanelf_from_file(from_file);
903 free(from_file);
904 from_file = *argv; 1650 from_file = *argv;
905 } 1651 }
906 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 1652 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
907 err("Nothing to scan !?"); 1653 err("Nothing to scan !?");
908 while (optind < argc) 1654 while (optind < argc) {
909 scanelf_dir(argv[optind++]); 1655 search_path = argv[optind++];
1656 scanelf_dir(search_path);
1657 }
910 1658
911 /* clean up */ 1659 /* clean up */
912 if (find_sym) { 1660 if (versioned_symname) free(versioned_symname);
913 free(find_sym);
914 free(versioned_symname);
915 }
916 if (out_format) free(out_format);
917 for (i = 0; ldpaths[i]; ++i) 1661 for (i = 0; ldpaths[i]; ++i)
918 free(ldpaths[i]); 1662 free(ldpaths[i]);
1663
1664 if (ldcache != 0)
1665 munmap(ldcache, ldcache_size);
919} 1666}
920 1667
921 1668
922 1669
923/* utility funcs */ 1670/* utility funcs */
925{ 1672{
926 char *ret = strdup(s); 1673 char *ret = strdup(s);
927 if (!ret) err("Could not strdup(): %s", strerror(errno)); 1674 if (!ret) err("Could not strdup(): %s", strerror(errno));
928 return ret; 1675 return ret;
929} 1676}
930
931static void *xmalloc(size_t size) 1677static void *xmalloc(size_t size)
932{ 1678{
933 void *ret = malloc(size); 1679 void *ret = malloc(size);
934 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size); 1680 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size);
935 return ret; 1681 return ret;
936} 1682}
937
938static void xstrcat(char **dst, const char *src, size_t *curr_len) 1683static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n)
939{ 1684{
940 long new_len; 1685 size_t new_len;
941 1686
942 new_len = strlen(*dst) + strlen(src); 1687 new_len = strlen(*dst) + strlen(src);
943 if (*curr_len <= new_len) { 1688 if (*curr_len <= new_len) {
944 *curr_len = new_len + (*curr_len / 2); 1689 *curr_len = new_len + (*curr_len / 2);
945 *dst = realloc(*dst, *curr_len); 1690 *dst = realloc(*dst, *curr_len);
946 if (!*dst) 1691 if (!*dst)
947 err("could not realloc %li bytes", (unsigned long)*curr_len); 1692 err("could not realloc() %li bytes", (unsigned long)*curr_len);
948 } 1693 }
949 1694
1695 if (n)
1696 strncat(*dst, src, n);
1697 else
950 strcat(*dst, src); 1698 strcat(*dst, src);
951} 1699}
952
953static inline void xchrcat(char **dst, const char append, size_t *curr_len) 1700static inline void xchrcat(char **dst, const char append, size_t *curr_len)
954{ 1701{
955 static char my_app[2]; 1702 static char my_app[2];
956 my_app[0] = append; 1703 my_app[0] = append;
957 my_app[1] = '\0'; 1704 my_app[1] = '\0';
958 xstrcat(dst, my_app, curr_len); 1705 xstrcat(dst, my_app, curr_len);
959} 1706}
1707
960 1708
961 1709
962int main(int argc, char *argv[]) 1710int main(int argc, char *argv[])
963{ 1711{
964 if (argc < 2) 1712 if (argc < 2)
965 usage(EXIT_FAILURE); 1713 usage(EXIT_FAILURE);
966 parseargs(argc, argv); 1714 parseargs(argc, argv);
967 fclose(stdout); 1715 fclose(stdout);
968#ifdef __BOUNDS_CHECKING_ON 1716#ifdef __BOUNDS_CHECKING_ON
969 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()"); 1717 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()");
970#endif 1718#endif
971 return EXIT_SUCCESS; 1719 return EXIT_SUCCESS;
972} 1720}

Legend:
Removed from v.1.63  
changed lines
  Added in v.1.127

  ViewVC Help
Powered by ViewVC 1.1.20