/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.84 Revision 1.164
1/* 1/*
2 * Copyright 2003-2005 Gentoo Foundation 2 * Copyright 2003-2006 Gentoo Foundation
3 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.84 2005/07/22 00:10:51 vapier Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.164 2006/12/03 00:17:18 solar Exp $
5 * 5 *
6 ******************************************************************** 6 * Copyright 2003-2006 Ned Ludd - <solar@gentoo.org>
7 * This program is free software; you can redistribute it and/or 7 * Copyright 2004-2006 Mike Frysinger - <vapier@gentoo.org>
8 * modify it under the terms of the GNU General Public License as
9 * published by the Free Software Foundation; either version 2 of the
10 * License, or (at your option) any later version.
11 *
12 * This program is distributed in the hope that it will be useful, but
13 * WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
16 *
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston,
20 * MA 02111-1307, USA.
21 */ 8 */
22 9
23#include <stdio.h>
24#include <stdlib.h>
25#include <sys/types.h>
26#include <libgen.h>
27#include <limits.h>
28#define __USE_GNU
29#include <string.h>
30#include <errno.h>
31#include <unistd.h>
32#include <sys/stat.h>
33#include <dirent.h>
34#include <getopt.h>
35#include <assert.h>
36#include "paxelf.h" 10#include "paxinc.h"
37 11
38static const char *rcsid = "$Id: scanelf.c,v 1.84 2005/07/22 00:10:51 vapier Exp $"; 12static const char *rcsid = "$Id: scanelf.c,v 1.164 2006/12/03 00:17:18 solar Exp $";
39#define argv0 "scanelf" 13#define argv0 "scanelf"
40 14
41#define IS_MODIFIER(c) (c == '%' || c == '#') 15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+')
42 16
17#define do_state(option, flag) \
18 if (islower(option)) { \
19 flags &= ~PF_##flag; \
20 flags |= PF_NO##flag; \
21 } else { \
22 flags &= ~PF_NO##flag; \
23 flags |= PF_##flag; \
24 }
43 25
44 26
45/* prototypes */ 27/* prototypes */
46static void scanelf_file(const char *filename); 28static int file_matches_list(const char *filename, char **matchlist);
29static int scanelf_elfobj(elfobj *elf);
30static int scanelf_elf(const char *filename, int fd, size_t len);
31static int scanelf_archive(const char *filename, int fd, size_t len);
32static int scanelf_file(const char *filename, const struct stat *st_cache);
47static void scanelf_dir(const char *path); 33static int scanelf_dir(const char *path);
48static void scanelf_ldpath(); 34static void scanelf_ldpath(void);
49static void scanelf_envpath(); 35static void scanelf_envpath(void);
50static void usage(int status); 36static void usage(int status);
37static char **get_split_env(const char *envvar);
38static void parseenv(void);
51static void parseargs(int argc, char *argv[]); 39static int parseargs(int argc, char *argv[]);
52static char *xstrdup(const char *s); 40static char *xstrdup(const char *s);
53static void *xmalloc(size_t size); 41static void *xmalloc(size_t size);
42static void *xrealloc(void *ptr, size_t size);
54static void xstrcat(char **dst, const char *src, size_t *curr_len); 43static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n);
44#define xstrcat(dst,src,curr_len) xstrncat(dst,src,curr_len,0)
55static inline void xchrcat(char **dst, const char append, size_t *curr_len); 45static inline void xchrcat(char **dst, const char append, size_t *curr_len);
56 46
57/* variables to control behavior */ 47/* variables to control behavior */
48static char match_etypes[126] = "";
58static char *ldpaths[256]; 49static char *ldpaths[256];
59static char scan_ldpath = 0; 50static char scan_ldpath = 0;
60static char scan_envpath = 0; 51static char scan_envpath = 0;
61static char scan_symlink = 1; 52static char scan_symlink = 1;
53static char scan_archives = 0;
62static char dir_recurse = 0; 54static char dir_recurse = 0;
63static char dir_crossmount = 1; 55static char dir_crossmount = 1;
64static char show_pax = 0; 56static char show_pax = 0;
65static char show_phdr = 0; 57static char show_phdr = 0;
66static char show_textrel = 0; 58static char show_textrel = 0;
72static char show_textrels = 0; 64static char show_textrels = 0;
73static char show_banner = 1; 65static char show_banner = 1;
74static char be_quiet = 0; 66static char be_quiet = 0;
75static char be_verbose = 0; 67static char be_verbose = 0;
76static char be_wewy_wewy_quiet = 0; 68static char be_wewy_wewy_quiet = 0;
69static char be_semi_verbose = 0;
77static char *find_sym = NULL, *versioned_symname = NULL; 70static char *find_sym = NULL, *versioned_symname = NULL;
78static char *find_lib = NULL; 71static char *find_lib = NULL;
72static char *find_section = NULL;
79static char *out_format = NULL; 73static char *out_format = NULL;
80static char *search_path = NULL; 74static char *search_path = NULL;
75static char fix_elf = 0;
76static char gmatch = 0;
77static char use_ldcache = 0;
78
79static char **qa_textrels = NULL;
80static char **qa_execstack = NULL;
81static char **qa_wx_load = NULL;
82
83int match_bits = 0;
84caddr_t ldcache = 0;
85size_t ldcache_size = 0;
86unsigned long setpax = 0UL;
81 87
82 88
83 89
84/* sub-funcs for scanelf_file() */ 90/* sub-funcs for scanelf_file() */
85static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab) 91static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
106 } \ 112 } \
107 } 113 }
108 GET_SYMTABS(32) 114 GET_SYMTABS(32)
109 GET_SYMTABS(64) 115 GET_SYMTABS(64)
110} 116}
117
111static char *scanelf_file_pax(elfobj *elf, char *found_pax) 118static char *scanelf_file_pax(elfobj *elf, char *found_pax)
112{ 119{
113 static char *paxflags;
114 static char ret[7]; 120 static char ret[7];
115 unsigned long i, shown; 121 unsigned long i, shown;
116 122
117 if (!show_pax) return NULL; 123 if (!show_pax) return NULL;
118 124
125 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 131 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
126 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 132 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
127 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 133 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
128 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ 134 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
129 continue; \ 135 continue; \
130 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \ 136 if (fix_elf && setpax) { \
137 /* set the paxctl flags */ \
138 ESET(phdr[i].p_flags, setpax); \
139 } \
140 if (be_quiet && (EGET(phdr[i].p_flags) == (PF_NOEMUTRAMP | PF_NORANDEXEC))) \
131 continue; \ 141 continue; \
132 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ 142 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
133 *found_pax = 1; \ 143 *found_pax = 1; \
134 ++shown; \ 144 ++shown; \
135 break; \ 145 break; \
137 } 147 }
138 SHOW_PAX(32) 148 SHOW_PAX(32)
139 SHOW_PAX(64) 149 SHOW_PAX(64)
140 } 150 }
141 151
152
153 if (fix_elf && setpax) {
154 /* set the chpax settings */
155 if (elf->elf_class == ELFCLASS32) {
156 if (EHDR32(elf->ehdr)->e_type == ET_DYN || EHDR32(elf->ehdr)->e_type == ET_EXEC)
157 ESET(EHDR32(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
158 } else {
159 if (EHDR64(elf->ehdr)->e_type == ET_DYN || EHDR64(elf->ehdr)->e_type == ET_EXEC)
160 ESET(EHDR64(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
161 }
162 }
163
142 /* fall back to EI_PAX if no PT_PAX was found */ 164 /* fall back to EI_PAX if no PT_PAX was found */
143 if (!*ret) { 165 if (!*ret) {
166 static char *paxflags;
144 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); 167 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
145 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) { 168 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) {
146 *found_pax = 1; 169 *found_pax = 1;
147 return paxflags; 170 return (be_wewy_wewy_quiet ? NULL : paxflags);
148 } 171 }
149 strncpy(ret, paxflags, sizeof(ret)); 172 strncpy(ret, paxflags, sizeof(ret));
150 } 173 }
151 174
152 if (be_quiet && !shown) 175 if (be_wewy_wewy_quiet || (be_quiet && !shown))
153 return NULL; 176 return NULL;
177 else
154 return ret; 178 return ret;
155
156} 179}
180
157static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load) 181static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
158{ 182{
159 static char ret[12]; 183 static char ret[12];
160 char *found; 184 char *found;
161 unsigned long i, off, shown, check_flags;
162 unsigned char multi_stack, multi_relro, multi_load; 185 unsigned long i, shown, multi_stack, multi_relro, multi_load;
186 int max_pt_load;
163 187
164 if (!show_phdr) return NULL; 188 if (!show_phdr) return NULL;
165 189
166 memcpy(ret, "--- --- ---\0", 12); 190 memcpy(ret, "--- --- ---\0", 12);
167 191
168 shown = 0; 192 shown = 0;
169 multi_stack = multi_relro = multi_load = 0; 193 multi_stack = multi_relro = multi_load = 0;
194 max_pt_load = elf_max_pt_load(elf);
170 195
171 if (elf->phdr) { 196#define NOTE_GNU_STACK ".note.GNU-stack"
172#define SHOW_PHDR(B) \ 197#define SHOW_PHDR(B) \
173 if (elf->elf_class == ELFCLASS ## B) { \ 198 if (elf->elf_class == ELFCLASS ## B) { \
174 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 199 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
200 Elf ## B ## _Off offset; \
201 uint32_t flags, check_flags; \
202 if (elf->phdr != NULL) { \
175 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 203 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
176 uint32_t flags; \
177 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 204 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
178 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \ 205 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
206 if (multi_stack++) \
179 if (multi_stack++) warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \ 207 warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
208 if (file_matches_list(elf->filename, qa_execstack)) \
209 continue; \
180 found = found_phdr; \ 210 found = found_phdr; \
181 off = 0; \ 211 offset = 0; \
182 check_flags = PF_X; \ 212 check_flags = PF_X; \
183 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \ 213 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
214 if (multi_relro++) \
184 if (multi_relro++) warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \ 215 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
185 found = found_relro; \ 216 found = found_relro; \
186 off = 4; \ 217 offset = 4; \
187 check_flags = PF_X; \ 218 check_flags = PF_X; \
188 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \ 219 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
189 if (multi_load++ > 2) warnf("%s: more than 2 PT_LOAD's !?", elf->filename); \ 220 if (ehdr->e_type == ET_DYN || ehdr->e_type == ET_EXEC) \
221 if (multi_load++ > max_pt_load) \
222 warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
223 if (file_matches_list(elf->filename, qa_wx_load)) \
224 continue; \
190 found = found_load; \ 225 found = found_load; \
191 off = 8; \ 226 offset = 8; \
192 check_flags = PF_W|PF_X; \ 227 check_flags = PF_W|PF_X; \
193 } else \ 228 } else \
194 continue; \ 229 continue; \
195 flags = EGET(phdr[i].p_flags); \ 230 flags = EGET(phdr[i].p_flags); \
196 if (be_quiet && ((flags & check_flags) != check_flags)) \ 231 if (be_quiet && ((flags & check_flags) != check_flags)) \
197 continue; \ 232 continue; \
233 if ((EGET(phdr[i].p_type) != PT_LOAD) && (fix_elf && ((flags & PF_X) != flags))) { \
234 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
235 ret[3] = ret[7] = '!'; \
236 flags = EGET(phdr[i].p_flags); \
237 } \
198 memcpy(ret+off, gnu_short_stack_flags(flags), 3); \ 238 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
199 *found = 1; \ 239 *found = 1; \
200 ++shown; \ 240 ++shown; \
241 } \
242 } else if (elf->shdr != NULL) { \
243 /* no program headers which means this is prob an object file */ \
244 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
245 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
246 char *str; \
247 if ((void*)strtbl > (void*)elf->data_end) \
248 goto skip_this_shdr##B; \
249 check_flags = SHF_WRITE|SHF_EXECINSTR; \
250 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
251 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
252 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
253 str = elf->data + offset; \
254 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
255 if (!strcmp(str, NOTE_GNU_STACK)) { \
256 if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \
257 flags = EGET(shdr[i].sh_flags); \
258 if (be_quiet && ((flags & check_flags) != check_flags)) \
259 continue; \
260 ++*found_phdr; \
261 shown = 1; \
262 if (flags & SHF_WRITE) ret[0] = 'W'; \
263 if (flags & SHF_ALLOC) ret[1] = 'A'; \
264 if (flags & SHF_EXECINSTR) ret[2] = 'X'; \
265 if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \
266 break; \
267 } \
268 } \
269 skip_this_shdr##B: \
270 if (!multi_stack) { \
271 if (file_matches_list(elf->filename, qa_execstack)) \
272 return NULL; \
273 *found_phdr = 1; \
274 shown = 1; \
275 memcpy(ret, "!WX", 3); \
276 } \
201 } \ 277 } \
202 } 278 }
203 SHOW_PHDR(32) 279 SHOW_PHDR(32)
204 SHOW_PHDR(64) 280 SHOW_PHDR(64)
205 }
206 281
207 if (be_quiet && !shown) 282 if (be_wewy_wewy_quiet || (be_quiet && !shown))
208 return NULL; 283 return NULL;
209 else 284 else
210 return ret; 285 return ret;
211} 286}
287
212static char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 288static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
213{ 289{
214 static char ret[] = "TEXTREL"; 290 static const char *ret = "TEXTREL";
215 unsigned long i; 291 unsigned long i;
216 292
217 if (!show_textrel && !show_textrels) return NULL; 293 if (!show_textrel && !show_textrels) return NULL;
294
295 if (file_matches_list(elf->filename, qa_textrels)) return NULL;
218 296
219 if (elf->phdr) { 297 if (elf->phdr) {
220#define SHOW_TEXTREL(B) \ 298#define SHOW_TEXTREL(B) \
221 if (elf->elf_class == ELFCLASS ## B) { \ 299 if (elf->elf_class == ELFCLASS ## B) { \
222 Elf ## B ## _Dyn *dyn; \ 300 Elf ## B ## _Dyn *dyn; \
242 } 320 }
243 321
244 if (be_quiet || be_wewy_wewy_quiet) 322 if (be_quiet || be_wewy_wewy_quiet)
245 return NULL; 323 return NULL;
246 else 324 else
247 return (char *)" - "; 325 return " - ";
248} 326}
249static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel) 327static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
250{ 328{
251 unsigned long s, r, rmax; 329 unsigned long s, r, rmax;
252 void *symtab_void, *strtab_void, *text_void; 330 void *symtab_void, *strtab_void, *text_void;
305 if (be_verbose <= 2) continue; \ 383 if (be_verbose <= 2) continue; \
306 } else \ 384 } else \
307 *found_textrels = 1; \ 385 *found_textrels = 1; \
308 /* locate this relocation symbol name */ \ 386 /* locate this relocation symbol name */ \
309 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 387 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
388 if ((void*)sym > (void*)elf->data_end) { \
389 warn("%s: corrupt ELF symbol", elf->filename); \
390 continue; \
391 } \
310 sym_max = ELF ## B ## _R_SYM(r_info); \ 392 sym_max = ELF ## B ## _R_SYM(r_info); \
311 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \ 393 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
312 sym += sym_max; \ 394 sym += sym_max; \
313 else \ 395 else \
314 sym = NULL; \ 396 sym = NULL; \
315 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 397 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
316 /* show the raw details about this reloc */ \ 398 /* show the raw details about this reloc */ \
317 printf("\tTEXTREL %s: ", elf->base_filename); \ 399 printf(" %s: ", elf->base_filename); \
318 if (sym && sym->st_name) \ 400 if (sym && sym->st_name) \
319 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \ 401 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \
320 else \ 402 else \
321 printf("(NULL: fake?)"); \ 403 printf("(memory/fake?)"); \
322 printf(" [0x%lX]", (unsigned long)r_offset); \ 404 printf(" [0x%lX]", (unsigned long)r_offset); \
323 /* now try to find the closest symbol that this rel is probably in */ \ 405 /* now try to find the closest symbol that this rel is probably in */ \
324 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 406 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
325 func = NULL; \ 407 func = NULL; \
326 offset_tmp = 0; \ 408 offset_tmp = 0; \
346 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename); 428 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
347 429
348 return NULL; 430 return NULL;
349} 431}
350 432
351static void rpath_security_checks(elfobj *, char *); 433static void rpath_security_checks(elfobj *, char *, const char *);
352static void rpath_security_checks(elfobj *elf, char *item) { 434static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
435{
353 struct stat st; 436 struct stat st;
354 switch (*item) { 437 switch (*item) {
355 case 0:
356 warnf("Security problem NULL RPATH in %s", elf->filename);
357 break;
358 case '/': break; 438 case '/': break;
439 case '.':
440 warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename);
441 break;
442 case ':':
443 case '\0':
444 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
445 break;
359 case '$': 446 case '$':
360 if (fstat(elf->fd, &st) != -1) 447 if (fstat(elf->fd, &st) != -1)
361 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID)) 448 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
362 warnf("Security problem with RPATH='%s' in %s with mode set of %o", 449 warnf("Security problem with %s='%s' in %s with mode set of %o",
363 item, elf->filename, st.st_mode & 07777); 450 dt_type, item, elf->filename, st.st_mode & 07777);
364 break; 451 break;
365 default: 452 default:
366 warnf("Maybe? sec problem with RPATH='%s' in %s", item, elf->filename); 453 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
367 break; 454 break;
368 } 455 }
369} 456}
370static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) 457static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
371{ 458{
407 /* Verify the memory is somewhat sane */ \ 494 /* Verify the memory is somewhat sane */ \
408 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 495 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
409 if (offset < (Elf ## B ## _Off)elf->len) { \ 496 if (offset < (Elf ## B ## _Off)elf->len) { \
410 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ 497 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
411 *r = (char*)(elf->data + offset); \ 498 *r = (char*)(elf->data + offset); \
499 /* cache the length in case we need to nuke this section later on */ \
500 if (fix_elf) \
501 offset = strlen(*r); \
412 /* If quiet, don't output paths in ld.so.conf */ \ 502 /* If quiet, don't output paths in ld.so.conf */ \
413 if (be_quiet) { \ 503 if (be_quiet) { \
414 size_t len; \ 504 size_t len; \
415 char *start, *end; \ 505 char *start, *end; \
416 /* note that we only 'chop' off leading known paths. */ \ 506 /* note that we only 'chop' off leading known paths. */ \
417 /* since *r is read-only memory, we can only move the ptr forward. */ \ 507 /* since *r is read-only memory, we can only move the ptr forward. */ \
418 start = *r; \ 508 start = *r; \
419 /* scan each path in : delimited list */ \ 509 /* scan each path in : delimited list */ \
420 while (start) { \ 510 while (start) { \
421 rpath_security_checks(elf, start); \ 511 rpath_security_checks(elf, start, get_elfdtype(word)); \
422 end = strchr(start, ':'); \ 512 end = strchr(start, ':'); \
423 len = (end ? abs(end - start) : strlen(start)); \ 513 len = (end ? abs(end - start) : strlen(start)); \
514 if (use_ldcache) \
424 for (s = 0; ldpaths[s]; ++s) { \ 515 for (s = 0; ldpaths[s]; ++s) \
425 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \ 516 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \
426 *r = (end ? end + 1 : NULL); \ 517 *r = end; \
518 /* corner case ... if RPATH reads "/usr/lib:", we want \
519 * to show ':' rather than '' */ \
520 if (end && end[1] != '\0') \
521 (*r)++; \
427 break; \ 522 break; \
428 } \ 523 } \
429 } \
430 if (!*r || !ldpaths[s] || !end) \ 524 if (!*r || !end) \
431 start = NULL; \ 525 break; \
432 else \ 526 else \
433 start = start + len + 1; \ 527 start = start + len + 1; \
434 } \ 528 } \
435 } \ 529 } \
530 if (*r) { \
531 if (fix_elf > 2 || (fix_elf && **r == '\0')) { \
532 /* just nuke it */ \
533 nuke_it##B: \
534 memset(*r, 0x00, offset); \
535 *r = NULL; \
536 ESET(dyn->d_tag, DT_DEBUG); \
537 ESET(dyn->d_un.d_ptr, 0); \
538 } else if (fix_elf) { \
539 /* try to clean "bad" paths */ \
540 size_t len, tmpdir_len; \
541 char *start, *end; \
542 const char *tmpdir; \
543 start = *r; \
544 tmpdir = (getenv("TMPDIR") ? : "."); \
545 tmpdir_len = strlen(tmpdir); \
546 while (1) { \
547 end = strchr(start, ':'); \
548 if (start == end) { \
549 eat_this_path##B: \
550 len = strlen(end); \
551 memmove(start, end+1, len); \
552 start[len-1] = '\0'; \
553 end = start - 1; \
554 } else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \
555 if (!end) { \
556 if (start == *r) \
557 goto nuke_it##B; \
558 *--start = '\0'; \
559 } else \
560 goto eat_this_path##B; \
561 } \
562 if (!end) \
563 break; \
564 start = end + 1; \
565 } \
566 if (**r == '\0') \
567 goto nuke_it##B; \
568 } \
569 if (*r) \
436 if (*r) *found_rpath = 1; \ 570 *found_rpath = 1; \
571 } \
437 } \ 572 } \
438 ++dyn; \ 573 ++dyn; \
439 } \ 574 } \
440 } } 575 } }
441 SHOW_RPATH(32) 576 SHOW_RPATH(32)
458 } else if (rpath || runpath) 593 } else if (rpath || runpath)
459 xstrcat(ret, (runpath ? runpath : rpath), ret_len); 594 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
460 else if (!be_quiet) 595 else if (!be_quiet)
461 xstrcat(ret, " - ", ret_len); 596 xstrcat(ret, " - ", ret_len);
462} 597}
598
599#define LDSO_CACHE_MAGIC "ld.so-"
600#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
601#define LDSO_CACHE_VER "1.7.0"
602#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
603#define FLAG_ANY -1
604#define FLAG_TYPE_MASK 0x00ff
605#define FLAG_LIBC4 0x0000
606#define FLAG_ELF 0x0001
607#define FLAG_ELF_LIBC5 0x0002
608#define FLAG_ELF_LIBC6 0x0003
609#define FLAG_REQUIRED_MASK 0xff00
610#define FLAG_SPARC_LIB64 0x0100
611#define FLAG_IA64_LIB64 0x0200
612#define FLAG_X8664_LIB64 0x0300
613#define FLAG_S390_LIB64 0x0400
614#define FLAG_POWERPC_LIB64 0x0500
615#define FLAG_MIPS64_LIBN32 0x0600
616#define FLAG_MIPS64_LIBN64 0x0700
617
618static char *lookup_cache_lib(elfobj *, char *);
619
620#if defined(__GLIBC__) || defined(__UCLIBC__)
621
622static char *lookup_cache_lib(elfobj *elf, char *fname)
623{
624 int fd = 0;
625 char *strs;
626 static char buf[__PAX_UTILS_PATH_MAX] = "";
627 const char *cachefile = "/etc/ld.so.cache";
628 struct stat st;
629
630 typedef struct {
631 char magic[LDSO_CACHE_MAGIC_LEN];
632 char version[LDSO_CACHE_VER_LEN];
633 int nlibs;
634 } header_t;
635 header_t *header;
636
637 typedef struct {
638 int flags;
639 int sooffset;
640 int liboffset;
641 } libentry_t;
642 libentry_t *libent;
643
644 if (fname == NULL)
645 return NULL;
646
647 if (ldcache == 0) {
648 if (stat(cachefile, &st) || (fd = open(cachefile, O_RDONLY)) == -1)
649 return NULL;
650
651 /* cache these values so we only map/unmap the cache file once */
652 ldcache_size = st.st_size;
653 ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
654
655 close(fd);
656
657 if (ldcache == (caddr_t)-1) {
658 ldcache = 0;
659 return NULL;
660 }
661
662 if (memcmp(((header_t *) ldcache)->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN))
663 return NULL;
664 if (memcmp (((header_t *) ldcache)->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
665 return NULL;
666 }
667
668 header = (header_t *) ldcache;
669 libent = (libentry_t *) (ldcache + sizeof(header_t));
670 strs = (char *) &libent[header->nlibs];
671
672 for (fd = 0; fd < header->nlibs; fd++) {
673 /* this should be more fine grained, but for now we assume that
674 * diff arches will not be cached together. and we ignore the
675 * the different multilib mips cases. */
676 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
677 continue;
678 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
679 continue;
680
681 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
682 continue;
683 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
684 }
685 return buf;
686}
687#elif defined(__NetBSD__)
688static char *lookup_cache_lib(elfobj *elf, char *fname)
689{
690 static char buf[__PAX_UTILS_PATH_MAX] = "";
691 static struct stat st;
692
693 char **ldpath;
694 for (ldpath = ldpaths; *ldpath != NULL; ldpath++) {
695 if ((unsigned) snprintf(buf, sizeof(buf), "%s/%s", *ldpath, fname) >= sizeof(buf))
696 continue; /* if the pathname is too long, or something went wrong, ignore */
697
698 if (stat(buf, &st) != 0)
699 continue; /* if the lib doesn't exist in *ldpath, look further */
700
701 /* NetBSD doesn't actually do sanity checks, it just loads the file
702 * and if that doesn't work, continues looking in other directories.
703 * This cannot easily be safely emulated, unfortunately. For now,
704 * just assume that if it exists, it's a valid library. */
705
706 return buf;
707 }
708
709 /* not found in any path */
710 return NULL;
711}
712#else
713#warning Cache support not implemented for your target
714static char *lookup_cache_lib(elfobj *elf, char *fname)
715{
716 return NULL;
717}
718#endif
719
463static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len) 720static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
464{ 721{
465 unsigned long i; 722 unsigned long i;
466 char *needed; 723 char *needed;
467 void *strtbl_void; 724 void *strtbl_void;
725 char *p;
468 726
469 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL; 727 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL;
470 728
471 strtbl_void = elf_findsecbyname(elf, ".dynstr"); 729 strtbl_void = elf_findsecbyname(elf, ".dynstr");
472 730
492 } \ 750 } \
493 needed = (char*)(elf->data + offset); \ 751 needed = (char*)(elf->data + offset); \
494 if (op == 0) { \ 752 if (op == 0) { \
495 if (!be_wewy_wewy_quiet) { \ 753 if (!be_wewy_wewy_quiet) { \
496 if (*found_needed) xchrcat(ret, ',', ret_len); \ 754 if (*found_needed) xchrcat(ret, ',', ret_len); \
755 if (use_ldcache) \
756 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
757 needed = p; \
497 xstrcat(ret, needed, ret_len); \ 758 xstrcat(ret, needed, ret_len); \
498 } \ 759 } \
499 *found_needed = 1; \ 760 *found_needed = 1; \
500 } else { \ 761 } else { \
501 if (!strcmp(find_lib, needed)) { \ 762 if (!strncmp(find_lib, needed, strlen( !gmatch ? needed : find_lib))) { \
502 *found_lib = 1; \ 763 *found_lib = 1; \
503 return (be_wewy_wewy_quiet ? NULL : find_lib); \ 764 return (be_wewy_wewy_quiet ? NULL : needed); \
504 } \ 765 } \
505 } \ 766 } \
506 } \ 767 } \
507 ++dyn; \ 768 ++dyn; \
508 } \ 769 } \
509 } } 770 } }
510 SHOW_NEEDED(32) 771 SHOW_NEEDED(32)
511 SHOW_NEEDED(64) 772 SHOW_NEEDED(64)
512#if 0
513 if (op == 0 && !*found_needed) 773 if (op == 0 && !*found_needed && be_verbose)
514 warn("ELF lacks DT_NEEDED sections: %s", elf->filename); 774 warn("ELF lacks DT_NEEDED sections: %s", elf->filename);
515#endif
516 } 775 }
517 776
518 return NULL; 777 return NULL;
519} 778}
520static char *scanelf_file_interp(elfobj *elf, char *found_interp) 779static char *scanelf_file_interp(elfobj *elf, char *found_interp)
539} 798}
540static char *scanelf_file_bind(elfobj *elf, char *found_bind) 799static char *scanelf_file_bind(elfobj *elf, char *found_bind)
541{ 800{
542 unsigned long i; 801 unsigned long i;
543 struct stat s; 802 struct stat s;
803 char dynamic = 0;
544 804
545 if (!show_bind) return NULL; 805 if (!show_bind) return NULL;
546 if (!elf->phdr) return NULL; 806 if (!elf->phdr) return NULL;
547 807
548#define SHOW_BIND(B) \ 808#define SHOW_BIND(B) \
551 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 811 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
552 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 812 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
553 Elf ## B ## _Off offset; \ 813 Elf ## B ## _Off offset; \
554 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 814 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
555 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 815 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \
816 dynamic = 1; \
556 offset = EGET(phdr[i].p_offset); \ 817 offset = EGET(phdr[i].p_offset); \
557 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 818 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
558 dyn = DYN ## B (elf->data + offset); \ 819 dyn = DYN ## B (elf->data + offset); \
559 while (EGET(dyn->d_tag) != DT_NULL) { \ 820 while (EGET(dyn->d_tag) != DT_NULL) { \
560 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 821 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
571 SHOW_BIND(32) 832 SHOW_BIND(32)
572 SHOW_BIND(64) 833 SHOW_BIND(64)
573 834
574 if (be_wewy_wewy_quiet) return NULL; 835 if (be_wewy_wewy_quiet) return NULL;
575 836
837 /* don't output anything if quiet mode and the ELF is static or not setuid */
576 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 838 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) {
577 return NULL; 839 return NULL;
578 } else { 840 } else {
579 *found_bind = 1; 841 *found_bind = 1;
580 return (char *) "LAZY"; 842 return (char *) (dynamic ? "LAZY" : "STATIC");
581 } 843 }
582} 844}
583static char *scanelf_file_soname(elfobj *elf, char *found_soname) 845static char *scanelf_file_soname(elfobj *elf, char *found_soname)
584{ 846{
585 unsigned long i; 847 unsigned long i;
627 return NULL; 889 return NULL;
628} 890}
629static char *scanelf_file_sym(elfobj *elf, char *found_sym) 891static char *scanelf_file_sym(elfobj *elf, char *found_sym)
630{ 892{
631 unsigned long i; 893 unsigned long i;
894 char *ret;
632 void *symtab_void, *strtab_void; 895 void *symtab_void, *strtab_void;
633 896
634 if (!find_sym) return NULL; 897 if (!find_sym) return NULL;
898 ret = find_sym;
635 899
636 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void); 900 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
637 901
638 if (symtab_void && strtab_void) { 902 if (symtab_void && strtab_void) {
639#define FIND_SYM(B) \ 903#define FIND_SYM(B) \
640 if (elf->elf_class == ELFCLASS ## B) { \ 904 if (elf->elf_class == ELFCLASS ## B) { \
641 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 905 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
642 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 906 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
643 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 907 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
644 unsigned long cnt = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 908 unsigned long cnt = EGET(symtab->sh_entsize); \
645 char *symname; \ 909 char *symname; \
910 if (cnt) \
911 cnt = EGET(symtab->sh_size) / cnt; \
646 for (i = 0; i < cnt; ++i) { \ 912 for (i = 0; i < cnt; ++i) { \
647 if (sym->st_name) { \ 913 if (sym->st_name) { \
914 /* make sure the symbol name is in acceptable memory range */ \
648 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 915 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
916 if ((void*)symname > (void*)elf->data_end) { \
917 warnf("%s: corrupt ELF symbols", elf->filename); \
918 ++sym; \
919 continue; \
920 } \
921 /* debug display ... show all symbols and some extra info */ \
649 if (*find_sym == '*') { \ 922 if (*ret == '*') { \
650 printf("%s(%s) %5lX %15s %s\n", \ 923 printf("%s(%s) %5lX %15s %s\n", \
651 ((*found_sym == 0) ? "\n\t" : "\t"), \ 924 ((*found_sym == 0) ? "\n\t" : "\t"), \
652 elf->base_filename, \ 925 elf->base_filename, \
653 (long)sym->st_size, \ 926 (unsigned long)sym->st_size, \
654 (char *)get_elfstttype(sym->st_info), \ 927 get_elfstttype(sym->st_info), \
655 symname); \ 928 symname); \
656 *found_sym = 1; \ 929 *found_sym = 1; \
657 } else if ((strcmp(find_sym, symname) == 0) || \ 930 } else { \
658 (strcmp(symname, versioned_symname) == 0)) \ 931 /* allow the user to specify a comma delimited list of symbols to search for */ \
932 char *this_sym, *this_sym_ver, *next_sym; \
933 this_sym = ret; \
934 this_sym_ver = versioned_symname; \
935 do { \
936 next_sym = strchr(this_sym, ','); \
937 if (next_sym == NULL) \
938 next_sym = this_sym + strlen(this_sym); \
939 /* do we want a defined symbol ? */ \
940 if (*this_sym == '+') { \
941 if (sym->st_shndx == SHN_UNDEF) \
942 goto skip_this_sym##B; \
943 ++this_sym; \
944 ++this_sym_ver; \
945 /* do we want an undefined symbol ? */ \
946 } else if (*this_sym == '-') { \
947 if (sym->st_shndx != SHN_UNDEF) \
948 goto skip_this_sym##B; \
949 ++this_sym; \
950 ++this_sym_ver; \
951 } \
952 /* ok, lets compare the name now */ \
953 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
954 (strncmp(this_sym_ver, symname, strlen(this_sym_ver)) == 0)) { \
955 if (be_semi_verbose) { \
956 char buf[126]; \
957 snprintf(buf, sizeof(buf), "%lX %s %s", \
958 (unsigned long)sym->st_size, get_elfstttype(sym->st_info), this_sym); \
959 ret = buf; \
960 } else \
961 ret = this_sym; \
659 (*found_sym)++; \ 962 (*found_sym)++; \
963 goto break_out; \
964 } \
965 skip_this_sym##B: this_sym = next_sym + 1; \
966 } while (*next_sym != '\0'); \
967 } \
660 } \ 968 } \
661 ++sym; \ 969 ++sym; \
662 } } 970 } }
663 FIND_SYM(32) 971 FIND_SYM(32)
664 FIND_SYM(64) 972 FIND_SYM(64)
665 } 973 }
666 974
975break_out:
667 if (be_wewy_wewy_quiet) return NULL; 976 if (be_wewy_wewy_quiet) return NULL;
668 977
669 if (*find_sym != '*' && *found_sym) 978 if (*find_sym != '*' && *found_sym)
670 return find_sym; 979 return ret;
671 if (be_quiet) 980 if (be_quiet)
672 return NULL; 981 return NULL;
673 else 982 else
674 return (char *)" - "; 983 return (char *)" - ";
675} 984}
985
986
987static char *scanelf_file_sections(elfobj *elf, char *found_section)
988{
989 if (!find_section)
990 return NULL;
991
992#define FIND_SECTION(B) \
993 if (elf->elf_class == ELFCLASS ## B) { \
994 int invert; \
995 Elf ## B ## _Shdr *section; \
996 invert = (*find_section == '!' ? 1 : 0); \
997 section = SHDR ## B (elf_findsecbyname(elf, find_section+invert)); \
998 if ((section == NULL && invert) || (section != NULL && !invert)) \
999 *found_section = 1; \
1000 }
1001 FIND_SECTION(32)
1002 FIND_SECTION(64)
1003
1004 if (be_wewy_wewy_quiet)
1005 return NULL;
1006
1007 if (*found_section)
1008 return find_section;
1009
1010 if (be_quiet)
1011 return NULL;
1012 else
1013 return (char *)" - ";
1014}
1015
676/* scan an elf file and show all the fun stuff */ 1016/* scan an elf file and show all the fun stuff */
677#define prints(str) write(fileno(stdout), str, strlen(str)) 1017#define prints(str) write(fileno(stdout), str, strlen(str))
678static void scanelf_file(const char *filename) 1018static int scanelf_elfobj(elfobj *elf)
679{ 1019{
680 unsigned long i; 1020 unsigned long i;
681 char found_pax, found_phdr, found_relro, found_load, found_textrel, 1021 char found_pax, found_phdr, found_relro, found_load, found_textrel,
682 found_rpath, found_needed, found_interp, found_bind, found_soname, 1022 found_rpath, found_needed, found_interp, found_bind, found_soname,
683 found_sym, found_lib, found_file, found_textrels; 1023 found_sym, found_lib, found_file, found_textrels, found_section;
684 elfobj *elf;
685 struct stat st;
686 static char *out_buffer = NULL; 1024 static char *out_buffer = NULL;
687 static size_t out_len; 1025 static size_t out_len;
688 1026
689 /* make sure 'filename' exists */
690 if (lstat(filename, &st) == -1) {
691 if (be_verbose > 2) printf("%s: does not exist\n", filename);
692 return;
693 }
694 /* always handle regular files and handle symlinked files if no -y */
695 if (S_ISLNK(st.st_mode)) {
696 if (!scan_symlink) return;
697 stat(filename, &st);
698 }
699 if (!S_ISREG(st.st_mode)) {
700 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
701 return;
702 }
703
704 found_pax = found_phdr = found_relro = found_load = found_textrel = \ 1027 found_pax = found_phdr = found_relro = found_load = found_textrel = \
705 found_rpath = found_needed = found_interp = found_bind = found_soname = \ 1028 found_rpath = found_needed = found_interp = found_bind = found_soname = \
706 found_sym = found_lib = found_file = found_textrels = 0; 1029 found_sym = found_lib = found_file = found_textrels = found_section = 0;
707 1030
708 /* verify this is real ELF */
709 if ((elf = readelf(filename)) == NULL) {
710 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
711 return;
712 }
713
714 if (be_verbose > 1) 1031 if (be_verbose > 2)
715 printf("%s: scanning file {%s,%s}\n", filename, 1032 printf("%s: scanning file {%s,%s}\n", elf->filename,
716 get_elfeitype(EI_CLASS, elf->elf_class), 1033 get_elfeitype(EI_CLASS, elf->elf_class),
717 get_elfeitype(EI_DATA, elf->data[EI_DATA])); 1034 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
718 else if (be_verbose) 1035 else if (be_verbose > 1)
719 printf("%s: scanning file\n", filename); 1036 printf("%s: scanning file\n", elf->filename);
720 1037
721 /* init output buffer */ 1038 /* init output buffer */
722 if (!out_buffer) { 1039 if (!out_buffer) {
723 out_len = sizeof(char) * 80; 1040 out_len = sizeof(char) * 80;
724 out_buffer = (char*)xmalloc(out_len); 1041 out_buffer = (char*)xmalloc(out_len);
729 if (!be_quiet && show_banner) { 1046 if (!be_quiet && show_banner) {
730 for (i = 0; out_format[i]; ++i) { 1047 for (i = 0; out_format[i]; ++i) {
731 if (!IS_MODIFIER(out_format[i])) continue; 1048 if (!IS_MODIFIER(out_format[i])) continue;
732 1049
733 switch (out_format[++i]) { 1050 switch (out_format[++i]) {
1051 case '+': break;
734 case '%': break; 1052 case '%': break;
735 case '#': break; 1053 case '#': break;
736 case 'F': 1054 case 'F':
737 case 'p': 1055 case 'p':
738 case 'f': prints("FILE "); found_file = 1; break; 1056 case 'f': prints("FILE "); found_file = 1; break;
746 case 'b': prints("BIND "); break; 1064 case 'b': prints("BIND "); break;
747 case 'S': prints("SONAME "); break; 1065 case 'S': prints("SONAME "); break;
748 case 's': prints("SYM "); break; 1066 case 's': prints("SYM "); break;
749 case 'N': prints("LIB "); break; 1067 case 'N': prints("LIB "); break;
750 case 'T': prints("TEXTRELS "); break; 1068 case 'T': prints("TEXTRELS "); break;
1069 case 'k': prints("SECTION "); break;
751 default: warnf("'%c' has no title ?", out_format[i]); 1070 default: warnf("'%c' has no title ?", out_format[i]);
752 } 1071 }
753 } 1072 }
754 if (!found_file) prints("FILE "); 1073 if (!found_file) prints("FILE ");
755 prints("\n"); 1074 prints("\n");
760 /* dump all the good stuff */ 1079 /* dump all the good stuff */
761 for (i = 0; out_format[i]; ++i) { 1080 for (i = 0; out_format[i]; ++i) {
762 const char *out; 1081 const char *out;
763 const char *tmp; 1082 const char *tmp;
764 1083
765 /* make sure we trim leading spaces in quiet mode */
766 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
767 *out_buffer = '\0';
768
769 if (!IS_MODIFIER(out_format[i])) { 1084 if (!IS_MODIFIER(out_format[i])) {
770 xchrcat(&out_buffer, out_format[i], &out_len); 1085 xchrcat(&out_buffer, out_format[i], &out_len);
771 continue; 1086 continue;
772 } 1087 }
773 1088
774 out = NULL; 1089 out = NULL;
775 be_wewy_wewy_quiet = (out_format[i] == '#'); 1090 be_wewy_wewy_quiet = (out_format[i] == '#');
1091 be_semi_verbose = (out_format[i] == '+');
776 switch (out_format[++i]) { 1092 switch (out_format[++i]) {
1093 case '+':
777 case '%': 1094 case '%':
778 case '#': 1095 case '#':
779 xchrcat(&out_buffer, out_format[i], &out_len); break; 1096 xchrcat(&out_buffer, out_format[i], &out_len); break;
780 case 'F': 1097 case 'F':
781 found_file = 1; 1098 found_file = 1;
782 if (be_wewy_wewy_quiet) break; 1099 if (be_wewy_wewy_quiet) break;
783 xstrcat(&out_buffer, filename, &out_len); 1100 xstrcat(&out_buffer, elf->filename, &out_len);
784 break; 1101 break;
785 case 'p': 1102 case 'p':
786 found_file = 1; 1103 found_file = 1;
787 if (be_wewy_wewy_quiet) break; 1104 if (be_wewy_wewy_quiet) break;
788 tmp = filename; 1105 tmp = elf->filename;
789 if (search_path) { 1106 if (search_path) {
790 ssize_t len_search = strlen(search_path); 1107 ssize_t len_search = strlen(search_path);
791 ssize_t len_file = strlen(filename); 1108 ssize_t len_file = strlen(elf->filename);
792 if (!strncmp(filename, search_path, len_search) && \ 1109 if (!strncmp(elf->filename, search_path, len_search) && \
793 len_file > len_search) 1110 len_file > len_search)
794 tmp += len_search; 1111 tmp += len_search;
795 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++; 1112 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++;
796 } 1113 }
797 xstrcat(&out_buffer, tmp, &out_len); 1114 xstrcat(&out_buffer, tmp, &out_len);
798 break; 1115 break;
799 case 'f': 1116 case 'f':
800 found_file = 1; 1117 found_file = 1;
801 if (be_wewy_wewy_quiet) break; 1118 if (be_wewy_wewy_quiet) break;
802 tmp = strrchr(filename, '/'); 1119 tmp = strrchr(elf->filename, '/');
803 tmp = (tmp == NULL ? filename : tmp+1); 1120 tmp = (tmp == NULL ? elf->filename : tmp+1);
804 xstrcat(&out_buffer, tmp, &out_len); 1121 xstrcat(&out_buffer, tmp, &out_len);
805 break; 1122 break;
806 case 'o': out = get_elfetype(elf); break; 1123 case 'o': out = get_elfetype(elf); break;
807 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1124 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
808 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break; 1125 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
813 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break; 1130 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
814 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1131 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
815 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1132 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
816 case 'S': out = scanelf_file_soname(elf, &found_soname); break; 1133 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
817 case 's': out = scanelf_file_sym(elf, &found_sym); break; 1134 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1135 case 'k': out = scanelf_file_sections(elf, &found_section); break;
818 default: warnf("'%c' has no scan code?", out_format[i]); 1136 default: warnf("'%c' has no scan code?", out_format[i]);
819 } 1137 }
1138 if (out) {
1139 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
1140 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
1141 xstrncat(&out_buffer, out, &out_len, (tmp-out));
1142 else
820 if (out) xstrcat(&out_buffer, out, &out_len); 1143 xstrcat(&out_buffer, out, &out_len);
1144 }
821 } 1145 }
822 1146
823#define FOUND_SOMETHING() \ 1147#define FOUND_SOMETHING() \
824 (found_pax || found_phdr || found_relro || found_load || found_textrel || \ 1148 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
825 found_rpath || found_needed || found_interp || found_bind || \ 1149 found_rpath || found_needed || found_interp || found_bind || \
826 found_soname || found_sym || found_lib || found_textrels) 1150 found_soname || found_sym || found_lib || found_textrels || found_section )
827 1151
828 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1152 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
829 xchrcat(&out_buffer, ' ', &out_len); 1153 xchrcat(&out_buffer, ' ', &out_len);
830 xstrcat(&out_buffer, filename, &out_len); 1154 xstrcat(&out_buffer, elf->filename, &out_len);
831 } 1155 }
832 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) { 1156 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) {
833 puts(out_buffer); 1157 puts(out_buffer);
834 fflush(stdout); 1158 fflush(stdout);
835 } 1159 }
836 1160
1161 return 0;
1162}
1163
1164/* scan a single elf */
1165static int scanelf_elf(const char *filename, int fd, size_t len)
1166{
1167 int ret = 1;
1168 elfobj *elf;
1169
1170 /* verify this is real ELF */
1171 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1172 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1173 return ret;
1174 }
1175 switch (match_bits) {
1176 case 32:
1177 if (elf->elf_class != ELFCLASS32)
1178 goto label_done;
1179 break;
1180 case 64:
1181 if (elf->elf_class != ELFCLASS64)
1182 goto label_done;
1183 break;
1184 default: break;
1185 }
1186 if (strlen(match_etypes)) {
1187 char sbuf[126];
1188 strncpy(sbuf, match_etypes, sizeof(sbuf));
1189 if (strchr(match_etypes, ',') != NULL) {
1190 char *p;
1191 while((p = strrchr(sbuf, ',')) != NULL) {
1192 *p = 0;
1193 if (etype_lookup(p+1) == get_etype(elf))
1194 goto label_ret;
1195 }
1196 }
1197 if (etype_lookup(sbuf) != get_etype(elf))
1198 goto label_done;
1199 }
1200
1201label_ret:
1202 ret = scanelf_elfobj(elf);
1203
1204label_done:
837 unreadelf(elf); 1205 unreadelf(elf);
1206 return ret;
1207}
1208
1209/* scan an archive of elfs */
1210static int scanelf_archive(const char *filename, int fd, size_t len)
1211{
1212 archive_handle *ar;
1213 archive_member *m;
1214 char *ar_buffer;
1215 elfobj *elf;
1216
1217 ar = ar_open_fd(filename, fd);
1218 if (ar == NULL)
1219 return 1;
1220
1221 ar_buffer = (char*)mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1222 while ((m=ar_next(ar)) != NULL) {
1223 elf = readelf_buffer(m->name, ar_buffer+lseek(fd,0,SEEK_CUR), m->size);
1224 if (elf) {
1225 scanelf_elfobj(elf);
1226 unreadelf(elf);
1227 }
1228 }
1229 munmap(ar_buffer, len);
1230
1231 return 0;
1232}
1233/* scan a file which may be an elf or an archive or some other magical beast */
1234static int scanelf_file(const char *filename, const struct stat *st_cache)
1235{
1236 const struct stat *st = st_cache;
1237 struct stat symlink_st;
1238 int fd;
1239
1240 /* always handle regular files and handle symlinked files if no -y */
1241 if (S_ISLNK(st->st_mode)) {
1242 if (!scan_symlink) return 1;
1243 stat(filename, &symlink_st);
1244 st = &symlink_st;
1245 }
1246
1247 if (!S_ISREG(st->st_mode)) {
1248 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1249 return 1;
1250 }
1251
1252 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1253 return 1;
1254
1255 if (scanelf_elf(filename, fd, st->st_size) == 1 && scan_archives)
1256 /* if it isn't an ELF, maybe it's an .a archive */
1257 scanelf_archive(filename, fd, st->st_size);
1258
1259 close(fd);
1260 return 0;
838} 1261}
839 1262
840/* scan a directory for ET_EXEC files and print when we find one */ 1263/* scan a directory for ET_EXEC files and print when we find one */
841static void scanelf_dir(const char *path) 1264static int scanelf_dir(const char *path)
842{ 1265{
843 register DIR *dir; 1266 register DIR *dir;
844 register struct dirent *dentry; 1267 register struct dirent *dentry;
845 struct stat st_top, st; 1268 struct stat st_top, st;
846 char buf[_POSIX_PATH_MAX]; 1269 char buf[__PAX_UTILS_PATH_MAX];
847 size_t pathlen = 0, len = 0; 1270 size_t pathlen = 0, len = 0;
1271 int ret = 0;
848 1272
849 /* make sure path exists */ 1273 /* make sure path exists */
850 if (lstat(path, &st_top) == -1) { 1274 if (lstat(path, &st_top) == -1) {
851 if (be_verbose > 2) printf("%s: does not exist\n", path); 1275 if (be_verbose > 2) printf("%s: does not exist\n", path);
852 return; 1276 return 1;
853 } 1277 }
854 1278
855 /* ok, if it isn't a directory, assume we can open it */ 1279 /* ok, if it isn't a directory, assume we can open it */
856 if (!S_ISDIR(st_top.st_mode)) { 1280 if (!S_ISDIR(st_top.st_mode)) {
857 scanelf_file(path); 1281 return scanelf_file(path, &st_top);
858 return;
859 } 1282 }
860 1283
861 /* now scan the dir looking for fun stuff */ 1284 /* now scan the dir looking for fun stuff */
862 if ((dir = opendir(path)) == NULL) { 1285 if ((dir = opendir(path)) == NULL) {
863 warnf("could not opendir %s: %s", path, strerror(errno)); 1286 warnf("could not opendir %s: %s", path, strerror(errno));
864 return; 1287 return 1;
865 } 1288 }
866 if (be_verbose) printf("%s: scanning dir\n", path); 1289 if (be_verbose > 1) printf("%s: scanning dir\n", path);
867 1290
868 pathlen = strlen(path); 1291 pathlen = strlen(path);
869 while ((dentry = readdir(dir))) { 1292 while ((dentry = readdir(dir))) {
870 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1293 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
871 continue; 1294 continue;
873 if (len >= sizeof(buf)) { 1296 if (len >= sizeof(buf)) {
874 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path, 1297 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
875 (unsigned long)len, (unsigned long)sizeof(buf)); 1298 (unsigned long)len, (unsigned long)sizeof(buf));
876 continue; 1299 continue;
877 } 1300 }
878 sprintf(buf, "%s/%s", path, dentry->d_name); 1301 snprintf(buf, sizeof(buf), "%s%s%s", path, (path[pathlen-1] == '/') ? "" : "/", dentry->d_name);
879 if (lstat(buf, &st) != -1) { 1302 if (lstat(buf, &st) != -1) {
880 if (S_ISREG(st.st_mode)) 1303 if (S_ISREG(st.st_mode))
881 scanelf_file(buf); 1304 ret = scanelf_file(buf, &st);
882 else if (dir_recurse && S_ISDIR(st.st_mode)) { 1305 else if (dir_recurse && S_ISDIR(st.st_mode)) {
883 if (dir_crossmount || (st_top.st_dev == st.st_dev)) 1306 if (dir_crossmount || (st_top.st_dev == st.st_dev))
884 scanelf_dir(buf); 1307 ret = scanelf_dir(buf);
885 } 1308 }
886 } 1309 }
887 } 1310 }
888 closedir(dir); 1311 closedir(dir);
1312 return ret;
889} 1313}
890 1314
891static int scanelf_from_file(char *filename) 1315static int scanelf_from_file(const char *filename)
892{ 1316{
893 FILE *fp = NULL; 1317 FILE *fp = NULL;
894 char *p; 1318 char *p;
895 char path[_POSIX_PATH_MAX]; 1319 char path[__PAX_UTILS_PATH_MAX];
1320 int ret = 0;
896 1321
897 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1322 if (strcmp(filename, "-") == 0)
898 fp = stdin; 1323 fp = stdin;
899 else if ((fp = fopen(filename, "r")) == NULL) 1324 else if ((fp = fopen(filename, "r")) == NULL)
900 return 1; 1325 return 1;
901 1326
902 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1327 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
903 if ((p = strchr(path, '\n')) != NULL) 1328 if ((p = strchr(path, '\n')) != NULL)
904 *p = 0; 1329 *p = 0;
905 search_path = path; 1330 search_path = path;
906 scanelf_dir(path); 1331 ret = scanelf_dir(path);
907 } 1332 }
908 if (fp != stdin) 1333 if (fp != stdin)
909 fclose(fp); 1334 fclose(fp);
910 return 0; 1335 return ret;
911} 1336}
912 1337
913static void load_ld_so_conf() 1338#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__)
1339
1340static int load_ld_cache_config(int i, const char *fname)
914{ 1341{
915 FILE *fp = NULL; 1342 FILE *fp = NULL;
916 char *p; 1343 char *p;
917 char path[_POSIX_PATH_MAX]; 1344 char path[__PAX_UTILS_PATH_MAX];
918 int i = 0;
919 1345
920 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1346 if (i + 1 == ARRAY_SIZE(ldpaths))
921 return; 1347 return i;
922 1348
1349 if ((fp = fopen(fname, "r")) == NULL)
1350 return i;
1351
923 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1352 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
924 if (*path != '/')
925 continue;
926
927 if ((p = strrchr(path, '\r')) != NULL) 1353 if ((p = strrchr(path, '\r')) != NULL)
928 *p = 0; 1354 *p = 0;
929 if ((p = strchr(path, '\n')) != NULL) 1355 if ((p = strchr(path, '\n')) != NULL)
930 *p = 0; 1356 *p = 0;
1357#ifdef __linux__
1358 // recursive includes of the same file will make this segfault.
1359 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) {
1360 glob64_t gl;
1361 size_t x;
1362 char gpath[__PAX_UTILS_PATH_MAX];
1363
1364 memset(gpath, 0, sizeof(gpath));
1365
1366 if (path[8] != '/')
1367 snprintf(gpath, sizeof(gpath), "/etc/%s", &path[8]);
1368 else
1369 strncpy(gpath, &path[8], sizeof(gpath));
1370
1371 if ((glob64(gpath, 0, NULL, &gl)) == 0) {
1372 for (x = 0; x < gl.gl_pathc; ++x) {
1373 /* try to avoid direct loops */
1374 if (strcmp(gl.gl_pathv[x], fname) == 0)
1375 continue;
1376 i = load_ld_cache_config(i, gl.gl_pathv[x]);
1377 if (i + 1 >= ARRAY_SIZE(ldpaths)) {
1378 globfree64(&gl);
1379 return i;
1380 }
1381 }
1382 globfree64 (&gl);
1383 continue;
1384 }
1385 }
1386#endif
1387 if (*path != '/')
1388 continue;
931 1389
932 ldpaths[i++] = xstrdup(path); 1390 ldpaths[i++] = xstrdup(path);
933 1391
934 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1392 if (i + 1 == ARRAY_SIZE(ldpaths))
935 break; 1393 break;
936 } 1394 }
937 ldpaths[i] = NULL; 1395 ldpaths[i] = NULL;
938 1396
939 fclose(fp); 1397 fclose(fp);
1398 return i;
940} 1399}
1400
1401#elif defined(__FreeBSD__) || (__DragonFly__)
1402
1403static int load_ld_cache_config(int i, const char *fname)
1404{
1405 FILE *fp = NULL;
1406 char *b = NULL, *p;
1407 struct elfhints_hdr hdr;
1408
1409 if (i + 1 == ARRAY_SIZE(ldpaths))
1410 return i;
1411
1412 if ((fp = fopen(fname, "r")) == NULL)
1413 return i;
1414
1415 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) ||
1416 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 ||
1417 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1)
1418 {
1419 fclose(fp);
1420 return i;
1421 }
1422
1423 b = (char*)malloc(hdr.dirlistlen+1);
1424 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) {
1425 fclose(fp);
1426 free(b);
1427 return i;
1428 }
1429
1430 while ((p = strsep(&b, ":"))) {
1431 if (*p == '\0') continue;
1432 ldpaths[i++] = xstrdup(p);
1433
1434 if (i + 1 == ARRAY_SIZE(ldpaths))
1435 break;
1436 }
1437 ldpaths[i] = NULL;
1438
1439 free(b);
1440 fclose(fp);
1441 return i;
1442}
1443
1444#else
1445
1446#warning Cache config support not implemented for your target
1447static int load_ld_cache_config(int i, const char *fname)
1448{
1449 memset(ldpaths, 0x00, sizeof(ldpaths));
1450}
1451
1452#endif
941 1453
942/* scan /etc/ld.so.conf for paths */ 1454/* scan /etc/ld.so.conf for paths */
943static void scanelf_ldpath() 1455static void scanelf_ldpath()
944{ 1456{
945 char scan_l, scan_ul, scan_ull; 1457 char scan_l, scan_ul, scan_ull;
979 } 1491 }
980 1492
981 free(path); 1493 free(path);
982} 1494}
983 1495
984
985
986/* usage / invocation handling functions */ 1496/* usage / invocation handling functions */
987#define PARSE_FLAGS "plRmyxetrnibSs:N:TaqvF:f:o:BhV" 1497#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:BhV"
988#define a_argument required_argument 1498#define a_argument required_argument
989static struct option const long_opts[] = { 1499static struct option const long_opts[] = {
990 {"path", no_argument, NULL, 'p'}, 1500 {"path", no_argument, NULL, 'p'},
991 {"ldpath", no_argument, NULL, 'l'}, 1501 {"ldpath", no_argument, NULL, 'l'},
992 {"recursive", no_argument, NULL, 'R'}, 1502 {"recursive", no_argument, NULL, 'R'},
993 {"mount", no_argument, NULL, 'm'}, 1503 {"mount", no_argument, NULL, 'm'},
994 {"symlink", no_argument, NULL, 'y'}, 1504 {"symlink", no_argument, NULL, 'y'},
1505 {"archives", no_argument, NULL, 'A'},
1506 {"ldcache", no_argument, NULL, 'L'},
1507 {"fix", no_argument, NULL, 'X'},
1508 {"setpax", a_argument, NULL, 'z'},
995 {"pax", no_argument, NULL, 'x'}, 1509 {"pax", no_argument, NULL, 'x'},
996 {"header", no_argument, NULL, 'e'}, 1510 {"header", no_argument, NULL, 'e'},
997 {"textrel", no_argument, NULL, 't'}, 1511 {"textrel", no_argument, NULL, 't'},
998 {"rpath", no_argument, NULL, 'r'}, 1512 {"rpath", no_argument, NULL, 'r'},
999 {"needed", no_argument, NULL, 'n'}, 1513 {"needed", no_argument, NULL, 'n'},
1000 {"interp", no_argument, NULL, 'i'}, 1514 {"interp", no_argument, NULL, 'i'},
1001 {"bind", no_argument, NULL, 'b'}, 1515 {"bind", no_argument, NULL, 'b'},
1002 {"soname", no_argument, NULL, 'S'}, 1516 {"soname", no_argument, NULL, 'S'},
1003 {"symbol", a_argument, NULL, 's'}, 1517 {"symbol", a_argument, NULL, 's'},
1518 {"section", a_argument, NULL, 'k'},
1004 {"lib", a_argument, NULL, 'N'}, 1519 {"lib", a_argument, NULL, 'N'},
1520 {"gmatch", no_argument, NULL, 'g'},
1005 {"textrels", no_argument, NULL, 'T'}, 1521 {"textrels", no_argument, NULL, 'T'},
1522 {"etype", a_argument, NULL, 'E'},
1523 {"bits", a_argument, NULL, 'M'},
1006 {"all", no_argument, NULL, 'a'}, 1524 {"all", no_argument, NULL, 'a'},
1007 {"quiet", no_argument, NULL, 'q'}, 1525 {"quiet", no_argument, NULL, 'q'},
1008 {"verbose", no_argument, NULL, 'v'}, 1526 {"verbose", no_argument, NULL, 'v'},
1009 {"format", a_argument, NULL, 'F'}, 1527 {"format", a_argument, NULL, 'F'},
1010 {"from", a_argument, NULL, 'f'}, 1528 {"from", a_argument, NULL, 'f'},
1018static const char *opts_help[] = { 1536static const char *opts_help[] = {
1019 "Scan all directories in PATH environment", 1537 "Scan all directories in PATH environment",
1020 "Scan all directories in /etc/ld.so.conf", 1538 "Scan all directories in /etc/ld.so.conf",
1021 "Scan directories recursively", 1539 "Scan directories recursively",
1022 "Don't recursively cross mount points", 1540 "Don't recursively cross mount points",
1023 "Don't scan symlinks\n", 1541 "Don't scan symlinks",
1542 "Scan archives (.a files)",
1543 "Utilize ld.so.cache information (use with -r/-n)",
1544 "Try and 'fix' bad things (use with -r/-e)",
1545 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
1024 "Print PaX markings", 1546 "Print PaX markings",
1025 "Print GNU_STACK/PT_LOAD markings", 1547 "Print GNU_STACK/PT_LOAD markings",
1026 "Print TEXTREL information", 1548 "Print TEXTREL information",
1027 "Print RPATH information", 1549 "Print RPATH information",
1028 "Print NEEDED information", 1550 "Print NEEDED information",
1029 "Print INTERP information", 1551 "Print INTERP information",
1030 "Print BIND information", 1552 "Print BIND information",
1031 "Print SONAME information", 1553 "Print SONAME information",
1032 "Find a specified symbol", 1554 "Find a specified symbol",
1555 "Find a specified section",
1033 "Find a specified library", 1556 "Find a specified library",
1557 "Use strncmp to match libraries. (use with -N)",
1034 "Locate cause of TEXTREL", 1558 "Locate cause of TEXTREL",
1559 "Print only ELF files matching etype ET_DYN,ET_EXEC ...",
1560 "Print only ELF files matching numeric bits",
1035 "Print all scanned info (-x -e -t -r -b)\n", 1561 "Print all scanned info (-x -e -t -r -b)\n",
1036 "Only output 'bad' things", 1562 "Only output 'bad' things",
1037 "Be verbose (can be specified more than once)", 1563 "Be verbose (can be specified more than once)",
1038 "Use specified format for output", 1564 "Use specified format for output",
1039 "Read input stream from a filename", 1565 "Read input stream from a filename",
1047/* display usage and exit */ 1573/* display usage and exit */
1048static void usage(int status) 1574static void usage(int status)
1049{ 1575{
1050 unsigned long i; 1576 unsigned long i;
1051 printf("* Scan ELF binaries for stuff\n\n" 1577 printf("* Scan ELF binaries for stuff\n\n"
1052 "Usage: %s [options] <dir1/file1> [dir2 dirN fileN ...]\n\n", argv0); 1578 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
1053 printf("Options: -[%s]\n", PARSE_FLAGS); 1579 printf("Options: -[%s]\n", PARSE_FLAGS);
1054 for (i = 0; long_opts[i].name; ++i) 1580 for (i = 0; long_opts[i].name; ++i)
1055 if (long_opts[i].has_arg == no_argument) 1581 if (long_opts[i].has_arg == no_argument)
1056 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 1582 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
1057 long_opts[i].name, opts_help[i]); 1583 long_opts[i].name, opts_help[i]);
1058 else 1584 else
1059 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 1585 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
1060 long_opts[i].name, opts_help[i]); 1586 long_opts[i].name, opts_help[i]);
1061 1587
1062 if (status != EXIT_SUCCESS) 1588 if (status != EXIT_SUCCESS)
1063 exit(status); 1589 exit(status);
1064 1590
1065 puts("\nThe format modifiers for the -F option are:"); 1591 puts("\nThe format modifiers for the -F option are:");
1066 puts(" F Filename \tx PaX Flags \te STACK/RELRO"); 1592 puts(" F Filename \tx PaX Flags \te STACK/RELRO");
1067 puts(" t TEXTREL \tr RPATH \tn NEEDED"); 1593 puts(" t TEXTREL \tr RPATH \tn NEEDED");
1068 puts(" i INTERP \tb BIND \ts symbol"); 1594 puts(" i INTERP \tb BIND \ts symbol");
1069 puts(" N library \to Type \tT TEXTRELs"); 1595 puts(" N library \to Type \tT TEXTRELs");
1596 puts(" S SONAME \tk section");
1070 puts(" p filename (with search path removed)"); 1597 puts(" p filename (with search path removed)");
1071 puts(" f base filename"); 1598 puts(" f filename (short name/basename)");
1072 puts("Prefix each modifier with '%' (verbose) or '#' (silent)"); 1599 puts("Prefix each modifier with '%' (verbose) or '#' (silent)");
1073 1600
1601 puts("\nELF Etypes:");
1602 print_etypes(stdout);
1603
1074 exit(status); 1604 exit(status);
1075} 1605}
1076 1606
1077/* parse command line arguments and preform needed actions */ 1607/* parse command line arguments and preform needed actions */
1078static void parseargs(int argc, char *argv[]) 1608static int parseargs(int argc, char *argv[])
1079{ 1609{
1080 int i; 1610 int i;
1081 char *from_file = NULL; 1611 const char *from_file = NULL;
1612 int ret = 0;
1082 1613
1083 opterr = 0; 1614 opterr = 0;
1084 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1615 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
1085 switch (i) { 1616 switch (i) {
1086 1617
1090 VERSION, __FILE__, __DATE__, rcsid, argv0); 1621 VERSION, __FILE__, __DATE__, rcsid, argv0);
1091 exit(EXIT_SUCCESS); 1622 exit(EXIT_SUCCESS);
1092 break; 1623 break;
1093 case 'h': usage(EXIT_SUCCESS); break; 1624 case 'h': usage(EXIT_SUCCESS); break;
1094 case 'f': 1625 case 'f':
1095 if (from_file) err("Don't specify -f twice"); 1626 if (from_file) warn("You prob don't want to specify -f twice");
1096 from_file = xstrdup(optarg); 1627 from_file = optarg;
1628 break;
1629 case 'E':
1630 strncpy(match_etypes, optarg, sizeof(match_etypes));
1631 break;
1632 case 'M':
1633 match_bits = atoi(optarg);
1097 break; 1634 break;
1098 case 'o': { 1635 case 'o': {
1099 FILE *fp = NULL;
1100 if ((fp = freopen(optarg, "w", stdout)) == NULL) 1636 if (freopen(optarg, "w", stdout) == NULL)
1101 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1637 err("Could not open output stream '%s': %s", optarg, strerror(errno));
1102 SET_STDOUT(fp);
1103 break; 1638 break;
1104 } 1639 }
1105 1640 case 'k':
1641 if (find_section) warn("You prob don't want to specify -k twice");
1642 find_section = optarg;
1643 break;
1106 case 's': { 1644 case 's': {
1107 size_t len;
1108 if (find_sym) err("Don't specify -s twice"); 1645 if (find_sym) warn("You prob don't want to specify -s twice");
1109 find_sym = xstrdup(optarg); 1646 find_sym = optarg;
1110 len = strlen(find_sym) + 1;
1111 versioned_symname = (char*)xmalloc(sizeof(char) * (len+1)); 1647 versioned_symname = (char*)xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
1112 sprintf(versioned_symname, "%s@", find_sym); 1648 sprintf(versioned_symname, "%s@", find_sym);
1113 break; 1649 break;
1114 } 1650 }
1115 case 'N': { 1651 case 'N': {
1116 if (find_lib) err("Don't specify -N twice"); 1652 if (find_lib) warn("You prob don't want to specify -N twice");
1117 find_lib = xstrdup(optarg); 1653 find_lib = optarg;
1118 break; 1654 break;
1119 } 1655 }
1120 1656
1121 case 'F': { 1657 case 'F': {
1122 if (out_format) err("Don't specify -F twice"); 1658 if (out_format) warn("You prob don't want to specify -F twice");
1123 out_format = xstrdup(optarg); 1659 out_format = optarg;
1660 break;
1661 }
1662 case 'z': {
1663 unsigned long flags = (PF_NOEMUTRAMP | PF_NORANDEXEC);
1664 size_t x;
1665
1666 for (x = 0 ; x < strlen(optarg); x++) {
1667 switch(optarg[x]) {
1668 case 'p':
1669 case 'P':
1670 do_state(optarg[x], PAGEEXEC);
1124 break; 1671 break;
1672 case 's':
1673 case 'S':
1674 do_state(optarg[x], SEGMEXEC);
1675 break;
1676 case 'm':
1677 case 'M':
1678 do_state(optarg[x], MPROTECT);
1679 break;
1680 case 'e':
1681 case 'E':
1682 do_state(optarg[x], EMUTRAMP);
1683 break;
1684 case 'r':
1685 case 'R':
1686 do_state(optarg[x], RANDMMAP);
1687 break;
1688 case 'x':
1689 case 'X':
1690 do_state(optarg[x], RANDEXEC);
1691 break;
1692 default:
1693 break;
1694 }
1125 } 1695 }
1126 1696 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1697 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1698 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1699 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1700 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1701 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1702 setpax = flags;
1703 break;
1704 }
1705 case 'g': gmatch = 1; break;
1706 case 'L': use_ldcache = 1; break;
1127 case 'y': scan_symlink = 0; break; 1707 case 'y': scan_symlink = 0; break;
1708 case 'A': scan_archives = 1; break;
1128 case 'B': show_banner = 0; break; 1709 case 'B': show_banner = 0; break;
1129 case 'l': scan_ldpath = 1; break; 1710 case 'l': scan_ldpath = 1; break;
1130 case 'p': scan_envpath = 1; break; 1711 case 'p': scan_envpath = 1; break;
1131 case 'R': dir_recurse = 1; break; 1712 case 'R': dir_recurse = 1; break;
1132 case 'm': dir_crossmount = 0; break; 1713 case 'm': dir_crossmount = 0; break;
1714 case 'X': ++fix_elf; break;
1133 case 'x': show_pax = 1; break; 1715 case 'x': show_pax = 1; break;
1134 case 'e': show_phdr = 1; break; 1716 case 'e': show_phdr = 1; break;
1135 case 't': show_textrel = 1; break; 1717 case 't': show_textrel = 1; break;
1136 case 'r': show_rpath = 1; break; 1718 case 'r': show_rpath = 1; break;
1137 case 'n': show_needed = 1; break; 1719 case 'n': show_needed = 1; break;
1142 case 'q': be_quiet = 1; break; 1724 case 'q': be_quiet = 1; break;
1143 case 'v': be_verbose = (be_verbose % 20) + 1; break; 1725 case 'v': be_verbose = (be_verbose % 20) + 1; break;
1144 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break; 1726 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break;
1145 1727
1146 case ':': 1728 case ':':
1147 err("Option missing parameter\n"); 1729 err("Option '%c' is missing parameter", optopt);
1148 case '?': 1730 case '?':
1149 err("Unknown option\n"); 1731 err("Unknown option '%c' or argument missing", optopt);
1150 default: 1732 default:
1151 err("Unhandled option '%c'", i); 1733 err("Unhandled option '%c'; please report this", i);
1152 } 1734 }
1153 } 1735 }
1154 1736
1155 /* let the format option override all other options */ 1737 /* let the format option override all other options */
1156 if (out_format) { 1738 if (out_format) {
1159 show_textrels = 0; 1741 show_textrels = 0;
1160 for (i = 0; out_format[i]; ++i) { 1742 for (i = 0; out_format[i]; ++i) {
1161 if (!IS_MODIFIER(out_format[i])) continue; 1743 if (!IS_MODIFIER(out_format[i])) continue;
1162 1744
1163 switch (out_format[++i]) { 1745 switch (out_format[++i]) {
1746 case '+': break;
1164 case '%': break; 1747 case '%': break;
1165 case '#': break; 1748 case '#': break;
1166 case 'F': break; 1749 case 'F': break;
1167 case 'p': break; 1750 case 'p': break;
1168 case 'f': break; 1751 case 'f': break;
1752 case 'k': break;
1169 case 's': break; 1753 case 's': break;
1170 case 'N': break; 1754 case 'N': break;
1171 case 'o': break; 1755 case 'o': break;
1172 case 'x': show_pax = 1; break; 1756 case 'x': show_pax = 1; break;
1173 case 'e': show_phdr = 1; break; 1757 case 'e': show_phdr = 1; break;
1177 case 'i': show_interp = 1; break; 1761 case 'i': show_interp = 1; break;
1178 case 'b': show_bind = 1; break; 1762 case 'b': show_bind = 1; break;
1179 case 'S': show_soname = 1; break; 1763 case 'S': show_soname = 1; break;
1180 case 'T': show_textrels = 1; break; 1764 case 'T': show_textrels = 1; break;
1181 default: 1765 default:
1182 err("Invalid format specifier '%c' (byte %i)", 1766 err("Invalid format specifier '%c' (byte %i)",
1183 out_format[i], i+1); 1767 out_format[i], i+1);
1184 } 1768 }
1185 } 1769 }
1186 1770
1187 /* construct our default format */ 1771 /* construct our default format */
1197 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 1781 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
1198 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 1782 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1199 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len); 1783 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1200 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len); 1784 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
1201 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 1785 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
1786 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1202 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len); 1787 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
1203 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 1788 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
1204 } 1789 }
1205 if (be_verbose > 2) printf("Format: %s\n", out_format); 1790 if (be_verbose > 2) printf("Format: %s\n", out_format);
1206 1791
1207 /* now lets actually do the scanning */ 1792 /* now lets actually do the scanning */
1208 if (scan_ldpath || (show_rpath && be_quiet)) 1793 if (scan_ldpath || use_ldcache)
1209 load_ld_so_conf(); 1794 load_ld_cache_config(0, __PAX_UTILS_DEFAULT_LD_CACHE_CONFIG);
1210 if (scan_ldpath) scanelf_ldpath(); 1795 if (scan_ldpath) scanelf_ldpath();
1211 if (scan_envpath) scanelf_envpath(); 1796 if (scan_envpath) scanelf_envpath();
1797 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath)
1798 from_file = "-";
1212 if (from_file) { 1799 if (from_file) {
1213 scanelf_from_file(from_file); 1800 scanelf_from_file(from_file);
1214 free(from_file);
1215 from_file = *argv; 1801 from_file = *argv;
1216 } 1802 }
1217 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 1803 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
1218 err("Nothing to scan !?"); 1804 err("Nothing to scan !?");
1219 while (optind < argc) { 1805 while (optind < argc) {
1220 search_path = argv[optind++]; 1806 search_path = argv[optind++];
1221 scanelf_dir(search_path); 1807 ret = scanelf_dir(search_path);
1222 } 1808 }
1223 1809
1224 /* clean up */ 1810 /* clean up */
1225 if (find_sym) {
1226 free(find_sym);
1227 free(versioned_symname); 1811 free(versioned_symname);
1228 }
1229 if (find_lib) free(find_lib);
1230 if (out_format) free(out_format);
1231 for (i = 0; ldpaths[i]; ++i) 1812 for (i = 0; ldpaths[i]; ++i)
1232 free(ldpaths[i]); 1813 free(ldpaths[i]);
1814
1815 if (ldcache != 0)
1816 munmap(ldcache, ldcache_size);
1817 return ret;
1818}
1819
1820static char **get_split_env(const char *envvar)
1821{
1822 const char *delims = " \t\n";
1823 char **envvals = NULL;
1824 char *env, *s;
1825 int nentry;
1826
1827 if ((env = getenv(envvar)) == NULL)
1828 return NULL;
1829
1830 env = xstrdup(env);
1831 if (env == NULL)
1832 return NULL;
1833
1834 s = strtok(env, delims);
1835 if (s == NULL) {
1836 free(env);
1837 return NULL;
1838 }
1839
1840 nentry = 0;
1841 while (s != NULL) {
1842 ++nentry;
1843 envvals = xrealloc(envvals, sizeof(*envvals) * (nentry+1));
1844 envvals[nentry-1] = s;
1845 s = strtok(NULL, delims);
1846 }
1847 envvals[nentry] = NULL;
1848
1849 /* don't want to free(env) as it contains the memory that backs
1850 * the envvals array of strings */
1851 return envvals;
1852}
1853static void parseenv()
1854{
1855 qa_textrels = get_split_env("QA_TEXTRELS");
1856 qa_execstack = get_split_env("QA_EXECSTACK");
1857 qa_wx_load = get_split_env("QA_WX_LOAD");
1858}
1859
1860#ifdef __PAX_UTILS_CLEANUP
1861static void cleanup()
1862{
1863 free(out_format);
1864 free(qa_textrels);
1865 free(qa_execstack);
1866 free(qa_wx_load);
1867}
1868#endif
1869
1870
1871int main(int argc, char *argv[])
1872{
1873 int ret;
1874 if (argc < 2)
1875 usage(EXIT_FAILURE);
1876 parseenv();
1877 ret = parseargs(argc, argv);
1878 fclose(stdout);
1879#ifdef __PAX_UTILS_CLEANUP
1880 cleanup();
1881 warn("The calls to add/delete heap should be off:\n"
1882 "\t- 1 due to the out_buffer not being freed in scanelf_file()\n"
1883 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD");
1884#endif
1885 return ret;
1233} 1886}
1234 1887
1235 1888
1236 1889
1237/* utility funcs */ 1890/* utility funcs */
1239{ 1892{
1240 char *ret = strdup(s); 1893 char *ret = strdup(s);
1241 if (!ret) err("Could not strdup(): %s", strerror(errno)); 1894 if (!ret) err("Could not strdup(): %s", strerror(errno));
1242 return ret; 1895 return ret;
1243} 1896}
1244
1245static void *xmalloc(size_t size) 1897static void *xmalloc(size_t size)
1246{ 1898{
1247 void *ret = malloc(size); 1899 void *ret = malloc(size);
1248 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size); 1900 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size);
1249 return ret; 1901 return ret;
1250} 1902}
1251 1903static void *xrealloc(void *ptr, size_t size)
1904{
1905 void *ret = realloc(ptr, size);
1906 if (!ret) err("Could not realloc() %li bytes", (unsigned long)size);
1907 return ret;
1908}
1252static void xstrcat(char **dst, const char *src, size_t *curr_len) 1909static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n)
1253{ 1910{
1254 size_t new_len; 1911 size_t new_len;
1255 1912
1256 new_len = strlen(*dst) + strlen(src); 1913 new_len = strlen(*dst) + strlen(src);
1257 if (*curr_len <= new_len) { 1914 if (*curr_len <= new_len) {
1258 *curr_len = new_len + (*curr_len / 2); 1915 *curr_len = new_len + (*curr_len / 2);
1259 *dst = realloc(*dst, *curr_len); 1916 *dst = realloc(*dst, *curr_len);
1260 if (!*dst) 1917 if (!*dst)
1261 err("could not realloc %li bytes", (unsigned long)*curr_len); 1918 err("could not realloc() %li bytes", (unsigned long)*curr_len);
1262 } 1919 }
1263 1920
1921 if (n)
1922 strncat(*dst, src, n);
1923 else
1264 strcat(*dst, src); 1924 strcat(*dst, src);
1265} 1925}
1266
1267static inline void xchrcat(char **dst, const char append, size_t *curr_len) 1926static inline void xchrcat(char **dst, const char append, size_t *curr_len)
1268{ 1927{
1269 static char my_app[2]; 1928 static char my_app[2];
1270 my_app[0] = append; 1929 my_app[0] = append;
1271 my_app[1] = '\0'; 1930 my_app[1] = '\0';
1272 xstrcat(dst, my_app, curr_len); 1931 xstrcat(dst, my_app, curr_len);
1273} 1932}
1274 1933
1275 1934/* Match filename against entries in matchlist, return TRUE
1276 1935 * if the file is listed */
1277int main(int argc, char *argv[]) 1936static int file_matches_list(const char *filename, char **matchlist)
1278{ 1937{
1279 if (argc < 2) 1938 char **file;
1280 usage(EXIT_FAILURE); 1939 char *match;
1281 parseargs(argc, argv); 1940 char buf[__PAX_UTILS_PATH_MAX];
1282 fclose(stdout); 1941
1283#ifdef __BOUNDS_CHECKING_ON 1942 if (matchlist == NULL)
1284 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()"); 1943 return 0;
1285#endif 1944
1286 return EXIT_SUCCESS; 1945 for (file = matchlist; *file != NULL; file++) {
1946 if (search_path) {
1947 snprintf(buf, sizeof(buf), "%s%s", search_path, *file);
1948 match = buf;
1949 } else {
1950 match = *file;
1951 }
1952 if (fnmatch(match, filename, 0) == 0)
1953 return 1;
1954 }
1955 return 0;
1287} 1956}

Legend:
Removed from v.1.84  
changed lines
  Added in v.1.164

  ViewVC Help
Powered by ViewVC 1.1.20