/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.120 Revision 1.188
1/* 1/*
2 * Copyright 2003-2006 Gentoo Foundation 2 * Copyright 2003-2007 Gentoo Foundation
3 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.120 2006/02/05 03:01:30 solar Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.188 2007/08/31 17:45:24 solar Exp $
5 * 5 *
6 * Copyright 2003-2006 Ned Ludd - <solar@gentoo.org> 6 * Copyright 2003-2007 Ned Ludd - <solar@gentoo.org>
7 * Copyright 2004-2006 Mike Frysinger - <vapier@gentoo.org> 7 * Copyright 2004-2007 Mike Frysinger - <vapier@gentoo.org>
8 */ 8 */
9 9
10static const char *rcsid = "$Id: scanelf.c,v 1.188 2007/08/31 17:45:24 solar Exp $";
11const char * const argv0 = "scanelf";
12
10#include "paxinc.h" 13#include "paxinc.h"
11 14
12static const char *rcsid = "$Id: scanelf.c,v 1.120 2006/02/05 03:01:30 solar Exp $";
13#define argv0 "scanelf"
14
15#define IS_MODIFIER(c) (c == '%' || c == '#') 15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+')
16
17
18 16
19/* prototypes */ 17/* prototypes */
18static int file_matches_list(const char *filename, char **matchlist);
20static int scanelf_elfobj(elfobj *elf); 19static int scanelf_elfobj(elfobj *elf);
21static int scanelf_elf(const char *filename, int fd, size_t len); 20static int scanelf_elf(const char *filename, int fd, size_t len);
22static int scanelf_archive(const char *filename, int fd, size_t len); 21static int scanelf_archive(const char *filename, int fd, size_t len);
23static void scanelf_file(const char *filename); 22static int scanelf_file(const char *filename, const struct stat *st_cache);
24static void scanelf_dir(const char *path); 23static int scanelf_dir(const char *path);
25static void scanelf_ldpath(void); 24static void scanelf_ldpath(void);
26static void scanelf_envpath(void); 25static void scanelf_envpath(void);
27static void usage(int status); 26static void usage(int status);
27static char **get_split_env(const char *envvar);
28static void parseenv(void);
28static void parseargs(int argc, char *argv[]); 29static int parseargs(int argc, char *argv[]);
29static char *xstrdup(const char *s); 30static int rematch(const char *regex, const char *match, int cflags);
30static void *xmalloc(size_t size);
31static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n);
32#define xstrcat(dst,src,curr_len) xstrncat(dst,src,curr_len,0)
33static inline void xchrcat(char **dst, const char append, size_t *curr_len);
34 31
35/* variables to control behavior */ 32/* variables to control behavior */
36static char match_etypes[126] = ""; 33static char match_etypes[126] = "";
37static char *ldpaths[256]; 34static char *ldpaths[256];
38static char scan_ldpath = 0; 35static char scan_ldpath = 0;
40static char scan_symlink = 1; 37static char scan_symlink = 1;
41static char scan_archives = 0; 38static char scan_archives = 0;
42static char dir_recurse = 0; 39static char dir_recurse = 0;
43static char dir_crossmount = 1; 40static char dir_crossmount = 1;
44static char show_pax = 0; 41static char show_pax = 0;
42static char show_perms = 0;
45static char show_phdr = 0; 43static char show_phdr = 0;
46static char show_textrel = 0; 44static char show_textrel = 0;
47static char show_rpath = 0; 45static char show_rpath = 0;
48static char show_needed = 0; 46static char show_needed = 0;
49static char show_interp = 0; 47static char show_interp = 0;
50static char show_bind = 0; 48static char show_bind = 0;
51static char show_soname = 0; 49static char show_soname = 0;
52static char show_textrels = 0; 50static char show_textrels = 0;
53static char show_banner = 1; 51static char show_banner = 1;
52static char show_endian = 0;
54static char be_quiet = 0; 53static char be_quiet = 0;
55static char be_verbose = 0; 54static char be_verbose = 0;
56static char be_wewy_wewy_quiet = 0; 55static char be_wewy_wewy_quiet = 0;
56static char be_semi_verbose = 0;
57static char *find_sym = NULL, *versioned_symname = NULL; 57static char *find_sym = NULL, *versioned_symname = NULL;
58static char *find_lib = NULL; 58static char *find_lib = NULL;
59static char *find_section = NULL;
59static char *out_format = NULL; 60static char *out_format = NULL;
60static char *search_path = NULL; 61static char *search_path = NULL;
61static char fix_elf = 0; 62static char fix_elf = 0;
62static char gmatch = 0; 63static char g_match = 0;
63static char use_ldcache = 0; 64static char use_ldcache = 0;
64 65
66static char **qa_textrels = NULL;
67static char **qa_execstack = NULL;
68static char **qa_wx_load = NULL;
69
65int match_bits = 0; 70int match_bits = 0;
71unsigned int match_perms = 0;
66caddr_t ldcache = 0; 72caddr_t ldcache = 0;
67size_t ldcache_size = 0; 73size_t ldcache_size = 0;
74unsigned long setpax = 0UL;
75
76int has_objdump = 0;
77
78static char *getstr_perms(const char *fname);
79static char *getstr_perms(const char *fname)
80{
81 struct stat st;
82 static char buf[8];
83
84 if ((stat(fname, &st)) == (-1))
85 return (char *) "";
86
87 snprintf(buf, sizeof(buf), "%o", st.st_mode);
88
89 return (char *) buf + 2;
90}
91
92/* find the path to a file by name */
93static char *which(const char *fname)
94{
95 static char fullpath[BUFSIZ];
96 char *path, *p;
97
98 path = getenv("PATH");
99 if (!path)
100 return NULL;
101
102 path = xstrdup(path);
103 while ((p = strrchr(path, ':')) != NULL) {
104 snprintf(fullpath, sizeof(fullpath), "%s/%s", p + 1, fname);
105 *p = 0;
106 if (access(fullpath, R_OK) != (-1)) {
107 free(path);
108 return (char *) fullpath;
109 }
110 }
111 free(path);
112 return NULL;
113}
114
115/* 1 on failure. 0 otherwise */
116static int rematch(const char *regex, const char *match, int cflags)
117{
118 regex_t preg;
119 int ret;
120
121 if ((match == NULL) || (regex == NULL))
122 return EXIT_FAILURE;
123
124
125 if ((ret = regcomp(&preg, regex, cflags))) {
126 char err[256];
127
128 if (regerror(ret, &preg, err, sizeof(err)))
129 fprintf(stderr, "regcomp failed: %s", err);
130 else
131 fprintf(stderr, "regcomp failed");
132
133 return EXIT_FAILURE;
134 }
135 ret = regexec(&preg, match, 0, NULL, 0);
136 regfree(&preg);
137
138 return ret;
139}
68 140
69/* sub-funcs for scanelf_file() */ 141/* sub-funcs for scanelf_file() */
70static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab) 142static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
71{ 143{
72 /* find the best SHT_DYNSYM and SHT_STRTAB sections */ 144 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
91 } \ 163 } \
92 } 164 }
93 GET_SYMTABS(32) 165 GET_SYMTABS(32)
94 GET_SYMTABS(64) 166 GET_SYMTABS(64)
95} 167}
168
96static char *scanelf_file_pax(elfobj *elf, char *found_pax) 169static char *scanelf_file_pax(elfobj *elf, char *found_pax)
97{ 170{
98 static char ret[7]; 171 static char ret[7];
99 unsigned long i, shown; 172 unsigned long i, shown;
100 173
109 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 182 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
110 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 183 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
111 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 184 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
112 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ 185 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
113 continue; \ 186 continue; \
114 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \ 187 if (fix_elf && setpax) { \
188 /* set the paxctl flags */ \
189 ESET(phdr[i].p_flags, setpax); \
190 } \
191 if (be_quiet && (EGET(phdr[i].p_flags) == (PF_NOEMUTRAMP | PF_NORANDEXEC))) \
115 continue; \ 192 continue; \
116 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ 193 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
117 *found_pax = 1; \ 194 *found_pax = 1; \
118 ++shown; \ 195 ++shown; \
119 break; \ 196 break; \
120 } \ 197 } \
121 } 198 }
122 SHOW_PAX(32) 199 SHOW_PAX(32)
123 SHOW_PAX(64) 200 SHOW_PAX(64)
201 }
202
203
204 if (fix_elf && setpax) {
205 /* set the chpax settings */
206 if (elf->elf_class == ELFCLASS32) {
207 if (EHDR32(elf->ehdr)->e_type == ET_DYN || EHDR32(elf->ehdr)->e_type == ET_EXEC)
208 ESET(EHDR32(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
209 } else {
210 if (EHDR64(elf->ehdr)->e_type == ET_DYN || EHDR64(elf->ehdr)->e_type == ET_EXEC)
211 ESET(EHDR64(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
212 }
124 } 213 }
125 214
126 /* fall back to EI_PAX if no PT_PAX was found */ 215 /* fall back to EI_PAX if no PT_PAX was found */
127 if (!*ret) { 216 if (!*ret) {
128 static char *paxflags; 217 static char *paxflags;
163 uint32_t flags, check_flags; \ 252 uint32_t flags, check_flags; \
164 if (elf->phdr != NULL) { \ 253 if (elf->phdr != NULL) { \
165 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 254 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
166 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \ 255 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
167 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \ 256 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
257 if (multi_stack++) \
168 if (multi_stack++) warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \ 258 warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
259 if (file_matches_list(elf->filename, qa_execstack)) \
260 continue; \
169 found = found_phdr; \ 261 found = found_phdr; \
170 offset = 0; \ 262 offset = 0; \
171 check_flags = PF_X; \ 263 check_flags = PF_X; \
172 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \ 264 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
265 if (multi_relro++) \
173 if (multi_relro++) warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \ 266 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
174 found = found_relro; \ 267 found = found_relro; \
175 offset = 4; \ 268 offset = 4; \
176 check_flags = PF_X; \ 269 check_flags = PF_X; \
177 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \ 270 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
178 if (ehdr->e_type == ET_DYN || ehdr->e_type == ET_EXEC) \ 271 if (EGET(ehdr->e_type) == ET_DYN || EGET(ehdr->e_type) == ET_EXEC) \
272 if (multi_load++ > max_pt_load) \
179 if (multi_load++ > max_pt_load) warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \ 273 warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
274 if (file_matches_list(elf->filename, qa_wx_load)) \
275 continue; \
180 found = found_load; \ 276 found = found_load; \
181 offset = 8; \ 277 offset = 8; \
182 check_flags = PF_W|PF_X; \ 278 check_flags = PF_W|PF_X; \
183 } else \ 279 } else \
184 continue; \ 280 continue; \
185 flags = EGET(phdr[i].p_flags); \ 281 flags = EGET(phdr[i].p_flags); \
186 if (be_quiet && ((flags & check_flags) != check_flags)) \ 282 if (be_quiet && ((flags & check_flags) != check_flags)) \
187 continue; \ 283 continue; \
188 if (fix_elf && ((flags & PF_X) != flags)) { \ 284 if ((EGET(phdr[i].p_type) != PT_LOAD) && (fix_elf && ((flags & PF_X) != flags))) { \
189 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \ 285 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
190 ret[3] = ret[7] = '!'; \ 286 ret[3] = ret[7] = '!'; \
191 flags = EGET(phdr[i].p_flags); \ 287 flags = EGET(phdr[i].p_flags); \
192 } \ 288 } \
193 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \ 289 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
221 break; \ 317 break; \
222 } \ 318 } \
223 } \ 319 } \
224 skip_this_shdr##B: \ 320 skip_this_shdr##B: \
225 if (!multi_stack) { \ 321 if (!multi_stack) { \
322 if (file_matches_list(elf->filename, qa_execstack)) \
323 return NULL; \
226 *found_phdr = 1; \ 324 *found_phdr = 1; \
227 shown = 1; \ 325 shown = 1; \
228 memcpy(ret, "!WX", 3); \ 326 memcpy(ret, "!WX", 3); \
229 } \ 327 } \
230 } \ 328 } \
235 if (be_wewy_wewy_quiet || (be_quiet && !shown)) 333 if (be_wewy_wewy_quiet || (be_quiet && !shown))
236 return NULL; 334 return NULL;
237 else 335 else
238 return ret; 336 return ret;
239} 337}
338
339/*
340 * See if this ELF contains a DT_TEXTREL tag in any of its
341 * PT_DYNAMIC sections.
342 */
240static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 343static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
241{ 344{
242 static const char *ret = "TEXTREL"; 345 static const char *ret = "TEXTREL";
243 unsigned long i; 346 unsigned long i;
244 347
245 if (!show_textrel && !show_textrels) return NULL; 348 if (!show_textrel && !show_textrels) return NULL;
349
350 if (file_matches_list(elf->filename, qa_textrels)) return NULL;
246 351
247 if (elf->phdr) { 352 if (elf->phdr) {
248#define SHOW_TEXTREL(B) \ 353#define SHOW_TEXTREL(B) \
249 if (elf->elf_class == ELFCLASS ## B) { \ 354 if (elf->elf_class == ELFCLASS ## B) { \
250 Elf ## B ## _Dyn *dyn; \ 355 Elf ## B ## _Dyn *dyn; \
251 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 356 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
252 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 357 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
253 Elf ## B ## _Off offset; \ 358 Elf ## B ## _Off offset; \
254 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 359 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
255 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 360 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
256 offset = EGET(phdr[i].p_offset); \ 361 offset = EGET(phdr[i].p_offset); \
257 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 362 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
258 dyn = DYN ## B (elf->data + offset); \ 363 dyn = DYN ## B (elf->data + offset); \
259 while (EGET(dyn->d_tag) != DT_NULL) { \ 364 while (EGET(dyn->d_tag) != DT_NULL) { \
260 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 365 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
272 if (be_quiet || be_wewy_wewy_quiet) 377 if (be_quiet || be_wewy_wewy_quiet)
273 return NULL; 378 return NULL;
274 else 379 else
275 return " - "; 380 return " - ";
276} 381}
382
383/*
384 * Scan the .text section to see if there are any relocations in it.
385 * Should rewrite this to check PT_LOAD sections that are marked
386 * Executable rather than the section named '.text'.
387 */
277static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel) 388static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
278{ 389{
279 unsigned long s, r, rmax; 390 unsigned long s, r, rmax;
280 void *symtab_void, *strtab_void, *text_void; 391 void *symtab_void, *strtab_void, *text_void;
281 392
348 /* show the raw details about this reloc */ \ 459 /* show the raw details about this reloc */ \
349 printf(" %s: ", elf->base_filename); \ 460 printf(" %s: ", elf->base_filename); \
350 if (sym && sym->st_name) \ 461 if (sym && sym->st_name) \
351 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \ 462 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \
352 else \ 463 else \
353 printf("(memory/fake?)"); \ 464 printf("(memory/data?)"); \
354 printf(" [0x%lX]", (unsigned long)r_offset); \ 465 printf(" [0x%lX]", (unsigned long)r_offset); \
355 /* now try to find the closest symbol that this rel is probably in */ \ 466 /* now try to find the closest symbol that this rel is probably in */ \
356 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 467 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
357 func = NULL; \ 468 func = NULL; \
358 offset_tmp = 0; \ 469 offset_tmp = 0; \
362 offset_tmp = EGET(sym->st_value); \ 473 offset_tmp = EGET(sym->st_value); \
363 } \ 474 } \
364 ++sym; \ 475 ++sym; \
365 } \ 476 } \
366 printf(" in "); \ 477 printf(" in "); \
367 if (func && func->st_name) \ 478 if (func && func->st_name) { \
368 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(func->st_name))); \ 479 const char *func_name = elf->data + EGET(strtab->sh_offset) + EGET(func->st_name); \
480 if (r_offset > EGET(func->st_size)) \
481 printf("(optimized out: previous %s)", func_name); \
369 else \ 482 else \
370 printf("(NULL: fake?)"); \ 483 printf("%s", func_name); \
484 } else \
485 printf("(optimized out)"); \
371 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \ 486 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
487 if (be_verbose && has_objdump) { \
488 Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \
489 char *sysbuf; \
490 size_t syslen; \
491 const char sysfmt[] = "objdump -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \
492 syslen = sizeof(sysfmt) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \
493 sysbuf = xmalloc(syslen); \
494 if (end_addr < r_offset) \
495 /* not uncommon when things are optimized out */ \
496 end_addr = r_offset + 0x100; \
497 snprintf(sysbuf, syslen, sysfmt, \
498 (unsigned long)offset_tmp, \
499 (unsigned long)end_addr, \
500 elf->filename, \
501 (unsigned long)r_offset); \
502 fflush(stdout); \
503 system(sysbuf); \
504 fflush(stdout); \
505 free(sysbuf); \
506 } \
372 } \ 507 } \
373 } } 508 } }
374 SHOW_TEXTRELS(32) 509 SHOW_TEXTRELS(32)
375 SHOW_TEXTRELS(64) 510 SHOW_TEXTRELS(64)
376 } 511 }
394 warnf("Security problem NULL %s in %s", dt_type, elf->filename); 529 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
395 break; 530 break;
396 case '$': 531 case '$':
397 if (fstat(elf->fd, &st) != -1) 532 if (fstat(elf->fd, &st) != -1)
398 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID)) 533 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
399 warnf("Security problem with %s='%s' in %s with mode set of %o", 534 warnf("Security problem with %s='%s' in %s with mode set of %o",
400 dt_type, item, elf->filename, st.st_mode & 07777); 535 dt_type, item, elf->filename, (unsigned int) st.st_mode & 07777);
401 break; 536 break;
402 default: 537 default:
403 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename); 538 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
404 break; 539 break;
405 } 540 }
425 Elf ## B ## _Off offset; \ 560 Elf ## B ## _Off offset; \
426 Elf ## B ## _Xword word; \ 561 Elf ## B ## _Xword word; \
427 /* Scan all the program headers */ \ 562 /* Scan all the program headers */ \
428 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 563 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
429 /* Just scan dynamic headers */ \ 564 /* Just scan dynamic headers */ \
430 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 565 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
431 offset = EGET(phdr[i].p_offset); \ 566 offset = EGET(phdr[i].p_offset); \
432 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 567 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
433 /* Just scan dynamic RPATH/RUNPATH headers */ \ 568 /* Just scan dynamic RPATH/RUNPATH headers */ \
434 dyn = DYN ## B (elf->data + offset); \ 569 dyn = DYN ## B (elf->data + offset); \
435 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \ 570 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \
564#define FLAG_POWERPC_LIB64 0x0500 699#define FLAG_POWERPC_LIB64 0x0500
565#define FLAG_MIPS64_LIBN32 0x0600 700#define FLAG_MIPS64_LIBN32 0x0600
566#define FLAG_MIPS64_LIBN64 0x0700 701#define FLAG_MIPS64_LIBN64 0x0700
567 702
568static char *lookup_cache_lib(elfobj *, char *); 703static char *lookup_cache_lib(elfobj *, char *);
704
705#if defined(__GLIBC__) || defined(__UCLIBC__)
706
569static char *lookup_cache_lib(elfobj *elf, char *fname) 707static char *lookup_cache_lib(elfobj *elf, char *fname)
570{ 708{
571 int fd = 0; 709 int fd = 0;
572 char *strs; 710 char *strs;
573 static char buf[__PAX_UTILS_PATH_MAX] = ""; 711 static char buf[__PAX_UTILS_PATH_MAX] = "";
629 continue; 767 continue;
630 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf)); 768 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
631 } 769 }
632 return buf; 770 return buf;
633} 771}
772#elif defined(__NetBSD__)
773static char *lookup_cache_lib(elfobj *elf, char *fname)
774{
775 static char buf[__PAX_UTILS_PATH_MAX] = "";
776 static struct stat st;
634 777
778 char **ldpath;
779 for (ldpath = ldpaths; *ldpath != NULL; ldpath++) {
780 if ((unsigned) snprintf(buf, sizeof(buf), "%s/%s", *ldpath, fname) >= sizeof(buf))
781 continue; /* if the pathname is too long, or something went wrong, ignore */
782
783 if (stat(buf, &st) != 0)
784 continue; /* if the lib doesn't exist in *ldpath, look further */
785
786 /* NetBSD doesn't actually do sanity checks, it just loads the file
787 * and if that doesn't work, continues looking in other directories.
788 * This cannot easily be safely emulated, unfortunately. For now,
789 * just assume that if it exists, it's a valid library. */
790
791 return buf;
792 }
793
794 /* not found in any path */
795 return NULL;
796}
797#else
798#warning Cache support not implemented for your target
799static char *lookup_cache_lib(elfobj *elf, char *fname)
800{
801 return NULL;
802}
803#endif
635 804
636static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len) 805static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
637{ 806{
638 unsigned long i; 807 unsigned long i;
639 char *needed; 808 char *needed;
651 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 820 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
652 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 821 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
653 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 822 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
654 Elf ## B ## _Off offset; \ 823 Elf ## B ## _Off offset; \
655 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 824 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
656 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 825 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
657 offset = EGET(phdr[i].p_offset); \ 826 offset = EGET(phdr[i].p_offset); \
658 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 827 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
659 dyn = DYN ## B (elf->data + offset); \ 828 dyn = DYN ## B (elf->data + offset); \
660 while (EGET(dyn->d_tag) != DT_NULL) { \ 829 while (EGET(dyn->d_tag) != DT_NULL) { \
661 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 830 if (EGET(dyn->d_tag) == DT_NEEDED) { \
673 needed = p; \ 842 needed = p; \
674 xstrcat(ret, needed, ret_len); \ 843 xstrcat(ret, needed, ret_len); \
675 } \ 844 } \
676 *found_needed = 1; \ 845 *found_needed = 1; \
677 } else { \ 846 } else { \
678 if (!strncmp(find_lib, needed, strlen( !gmatch ? needed : find_lib))) { \ 847 if (!strncmp(find_lib, needed, strlen( !g_match ? needed : find_lib))) { \
679 *found_lib = 1; \ 848 *found_lib = 1; \
680 return (be_wewy_wewy_quiet ? NULL : needed); \ 849 return (be_wewy_wewy_quiet ? NULL : needed); \
681 } \ 850 } \
682 } \ 851 } \
683 } \ 852 } \
714} 883}
715static char *scanelf_file_bind(elfobj *elf, char *found_bind) 884static char *scanelf_file_bind(elfobj *elf, char *found_bind)
716{ 885{
717 unsigned long i; 886 unsigned long i;
718 struct stat s; 887 struct stat s;
888 char dynamic = 0;
719 889
720 if (!show_bind) return NULL; 890 if (!show_bind) return NULL;
721 if (!elf->phdr) return NULL; 891 if (!elf->phdr) return NULL;
722 892
723#define SHOW_BIND(B) \ 893#define SHOW_BIND(B) \
725 Elf ## B ## _Dyn *dyn; \ 895 Elf ## B ## _Dyn *dyn; \
726 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 896 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
727 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 897 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
728 Elf ## B ## _Off offset; \ 898 Elf ## B ## _Off offset; \
729 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 899 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
730 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 900 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
901 dynamic = 1; \
731 offset = EGET(phdr[i].p_offset); \ 902 offset = EGET(phdr[i].p_offset); \
732 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 903 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
733 dyn = DYN ## B (elf->data + offset); \ 904 dyn = DYN ## B (elf->data + offset); \
734 while (EGET(dyn->d_tag) != DT_NULL) { \ 905 while (EGET(dyn->d_tag) != DT_NULL) { \
735 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 906 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
746 SHOW_BIND(32) 917 SHOW_BIND(32)
747 SHOW_BIND(64) 918 SHOW_BIND(64)
748 919
749 if (be_wewy_wewy_quiet) return NULL; 920 if (be_wewy_wewy_quiet) return NULL;
750 921
922 /* don't output anything if quiet mode and the ELF is static or not setuid */
751 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 923 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) {
752 return NULL; 924 return NULL;
753 } else { 925 } else {
754 *found_bind = 1; 926 *found_bind = 1;
755 return (char *) "LAZY"; 927 return (char *) (dynamic ? "LAZY" : "STATIC");
756 } 928 }
757} 929}
758static char *scanelf_file_soname(elfobj *elf, char *found_soname) 930static char *scanelf_file_soname(elfobj *elf, char *found_soname)
759{ 931{
760 unsigned long i; 932 unsigned long i;
772 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 944 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
773 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 945 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
774 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 946 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
775 Elf ## B ## _Off offset; \ 947 Elf ## B ## _Off offset; \
776 /* only look for soname in shared objects */ \ 948 /* only look for soname in shared objects */ \
777 if (ehdr->e_type != ET_DYN) \ 949 if (EGET(ehdr->e_type) != ET_DYN) \
778 return NULL; \ 950 return NULL; \
779 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 951 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
780 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 952 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
781 offset = EGET(phdr[i].p_offset); \ 953 offset = EGET(phdr[i].p_offset); \
782 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 954 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
783 dyn = DYN ## B (elf->data + offset); \ 955 dyn = DYN ## B (elf->data + offset); \
784 while (EGET(dyn->d_tag) != DT_NULL) { \ 956 while (EGET(dyn->d_tag) != DT_NULL) { \
785 if (EGET(dyn->d_tag) == DT_SONAME) { \ 957 if (EGET(dyn->d_tag) == DT_SONAME) { \
799 SHOW_SONAME(64) 971 SHOW_SONAME(64)
800 } 972 }
801 973
802 return NULL; 974 return NULL;
803} 975}
976
804static char *scanelf_file_sym(elfobj *elf, char *found_sym) 977static char *scanelf_file_sym(elfobj *elf, char *found_sym)
805{ 978{
806 unsigned long i; 979 unsigned long i;
807 char *ret; 980 char *ret;
808 void *symtab_void, *strtab_void; 981 void *symtab_void, *strtab_void;
822 char *symname; \ 995 char *symname; \
823 if (cnt) \ 996 if (cnt) \
824 cnt = EGET(symtab->sh_size) / cnt; \ 997 cnt = EGET(symtab->sh_size) / cnt; \
825 for (i = 0; i < cnt; ++i) { \ 998 for (i = 0; i < cnt; ++i) { \
826 if (sym->st_name) { \ 999 if (sym->st_name) { \
1000 /* make sure the symbol name is in acceptable memory range */ \
827 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 1001 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
828 if ((void*)symname > (void*)elf->data_end) { \ 1002 if ((void*)symname > (void*)elf->data_end) { \
829 warnf("%s: corrupt ELF symbols", elf->filename); \ 1003 warnf("%s: corrupt ELF symbols", elf->filename); \
1004 ++sym; \
830 continue; \ 1005 continue; \
831 } \ 1006 } \
832 if (*find_sym == '*') { \ 1007 /* debug display ... show all symbols and some extra info */ \
1008 if (g_match ? rematch(ret, symname, REG_EXTENDED) == 0 : *ret == '*') { \
833 printf("%s(%s) %5lX %15s %s\n", \ 1009 printf("%s(%s) %5lX %15s %s %s\n", \
834 ((*found_sym == 0) ? "\n\t" : "\t"), \ 1010 ((*found_sym == 0) ? "\n\t" : "\t"), \
835 elf->base_filename, \ 1011 elf->base_filename, \
836 (unsigned long)sym->st_size, \ 1012 (unsigned long)sym->st_size, \
837 get_elfstttype(sym->st_info), \ 1013 get_elfstttype(sym->st_info), \
838 symname); \ 1014 sym->st_shndx == SHN_UNDEF ? "U" : "D", symname); \
839 *found_sym = 1; \ 1015 *found_sym = 1; \
840 } else { \ 1016 } else { \
1017 /* allow the user to specify a comma delimited list of symbols to search for */ \
841 char *this_sym, *next_sym; \ 1018 char *this_sym, *this_sym_ver, *next_sym; \
1019 this_sym = ret; \
842 this_sym = find_sym; \ 1020 this_sym_ver = versioned_symname; \
843 do { \ 1021 do { \
844 next_sym = strchr(this_sym, ','); \ 1022 next_sym = strchr(this_sym, ','); \
845 if (next_sym == NULL) \ 1023 if (next_sym == NULL) \
846 next_sym = this_sym + strlen(this_sym); \ 1024 next_sym = this_sym + strlen(this_sym); \
1025 /* do we want a defined symbol ? */ \
1026 if (*this_sym == '+') { \
1027 if (sym->st_shndx == SHN_UNDEF) \
1028 goto skip_this_sym##B; \
1029 ++this_sym; \
1030 ++this_sym_ver; \
1031 /* do we want an undefined symbol ? */ \
1032 } else if (*this_sym == '-') { \
1033 if (sym->st_shndx != SHN_UNDEF) \
1034 goto skip_this_sym##B; \
1035 ++this_sym; \
1036 ++this_sym_ver; \
1037 } \
1038 /* ok, lets compare the name now */ \
847 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \ 1039 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
848 (strcmp(symname, versioned_symname) == 0)) { \ 1040 (strncmp(this_sym_ver, symname, strlen(this_sym_ver)) == 0)) { \
1041 if (be_semi_verbose) { \
1042 char buf[126]; \
1043 snprintf(buf, sizeof(buf), "%lX %s %s", \
1044 (unsigned long)sym->st_size, get_elfstttype(sym->st_info), this_sym); \
1045 ret = buf; \
1046 } else \
849 ret = this_sym; \ 1047 ret = this_sym; \
850 (*found_sym)++; \ 1048 (*found_sym)++; \
851 goto break_out; \ 1049 goto break_out; \
852 } \ 1050 } \
853 this_sym = next_sym + 1; \ 1051 skip_this_sym##B: this_sym = next_sym + 1; \
854 } while (*next_sym != '\0'); \ 1052 } while (*next_sym != '\0'); \
855 } \ 1053 } \
856 } \ 1054 } \
857 ++sym; \ 1055 ++sym; \
858 } } 1056 } }
870 else 1068 else
871 return (char *)" - "; 1069 return (char *)" - ";
872} 1070}
873 1071
874 1072
1073static char *scanelf_file_sections(elfobj *elf, char *found_section)
1074{
1075 if (!find_section)
1076 return NULL;
1077
1078#define FIND_SECTION(B) \
1079 if (elf->elf_class == ELFCLASS ## B) { \
1080 int invert; \
1081 Elf ## B ## _Shdr *section; \
1082 invert = (*find_section == '!' ? 1 : 0); \
1083 section = SHDR ## B (elf_findsecbyname(elf, find_section+invert)); \
1084 if ((section == NULL && invert) || (section != NULL && !invert)) \
1085 *found_section = 1; \
1086 }
1087 FIND_SECTION(32)
1088 FIND_SECTION(64)
1089
1090 if (be_wewy_wewy_quiet)
1091 return NULL;
1092
1093 if (*found_section)
1094 return find_section;
1095
1096 if (be_quiet)
1097 return NULL;
1098 else
1099 return (char *)" - ";
1100}
1101
875/* scan an elf file and show all the fun stuff */ 1102/* scan an elf file and show all the fun stuff */
876#define prints(str) write(fileno(stdout), str, strlen(str)) 1103#define prints(str) write(fileno(stdout), str, strlen(str))
877static int scanelf_elfobj(elfobj *elf) 1104static int scanelf_elfobj(elfobj *elf)
878{ 1105{
879 unsigned long i; 1106 unsigned long i;
880 char found_pax, found_phdr, found_relro, found_load, found_textrel, 1107 char found_pax, found_phdr, found_relro, found_load, found_textrel,
881 found_rpath, found_needed, found_interp, found_bind, found_soname, 1108 found_rpath, found_needed, found_interp, found_bind, found_soname,
882 found_sym, found_lib, found_file, found_textrels; 1109 found_sym, found_lib, found_file, found_textrels, found_section;
883 static char *out_buffer = NULL; 1110 static char *out_buffer = NULL;
884 static size_t out_len; 1111 static size_t out_len;
885 1112
886 found_pax = found_phdr = found_relro = found_load = found_textrel = \ 1113 found_pax = found_phdr = found_relro = found_load = found_textrel = \
887 found_rpath = found_needed = found_interp = found_bind = found_soname = \ 1114 found_rpath = found_needed = found_interp = found_bind = found_soname = \
888 found_sym = found_lib = found_file = found_textrels = 0; 1115 found_sym = found_lib = found_file = found_textrels = found_section = 0;
889 1116
890 if (be_verbose > 2) 1117 if (be_verbose > 2)
891 printf("%s: scanning file {%s,%s}\n", elf->filename, 1118 printf("%s: scanning file {%s,%s}\n", elf->filename,
892 get_elfeitype(EI_CLASS, elf->elf_class), 1119 get_elfeitype(EI_CLASS, elf->elf_class),
893 get_elfeitype(EI_DATA, elf->data[EI_DATA])); 1120 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
895 printf("%s: scanning file\n", elf->filename); 1122 printf("%s: scanning file\n", elf->filename);
896 1123
897 /* init output buffer */ 1124 /* init output buffer */
898 if (!out_buffer) { 1125 if (!out_buffer) {
899 out_len = sizeof(char) * 80; 1126 out_len = sizeof(char) * 80;
900 out_buffer = (char*)xmalloc(out_len); 1127 out_buffer = xmalloc(out_len);
901 } 1128 }
902 *out_buffer = '\0'; 1129 *out_buffer = '\0';
903 1130
904 /* show the header */ 1131 /* show the header */
905 if (!be_quiet && show_banner) { 1132 if (!be_quiet && show_banner) {
906 for (i = 0; out_format[i]; ++i) { 1133 for (i = 0; out_format[i]; ++i) {
907 if (!IS_MODIFIER(out_format[i])) continue; 1134 if (!IS_MODIFIER(out_format[i])) continue;
908 1135
909 switch (out_format[++i]) { 1136 switch (out_format[++i]) {
1137 case '+': break;
910 case '%': break; 1138 case '%': break;
911 case '#': break; 1139 case '#': break;
912 case 'F': 1140 case 'F':
913 case 'p': 1141 case 'p':
914 case 'f': prints("FILE "); found_file = 1; break; 1142 case 'f': prints("FILE "); found_file = 1; break;
915 case 'o': prints(" TYPE "); break; 1143 case 'o': prints(" TYPE "); break;
916 case 'x': prints(" PAX "); break; 1144 case 'x': prints(" PAX "); break;
917 case 'e': prints("STK/REL/PTL "); break; 1145 case 'e': prints("STK/REL/PTL "); break;
918 case 't': prints("TEXTREL "); break; 1146 case 't': prints("TEXTREL "); break;
919 case 'r': prints("RPATH "); break; 1147 case 'r': prints("RPATH "); break;
1148 case 'M': prints("CLASS "); break;
920 case 'n': prints("NEEDED "); break; 1149 case 'n': prints("NEEDED "); break;
921 case 'i': prints("INTERP "); break; 1150 case 'i': prints("INTERP "); break;
922 case 'b': prints("BIND "); break; 1151 case 'b': prints("BIND "); break;
923 case 'S': prints("SONAME "); break; 1152 case 'S': prints("SONAME "); break;
924 case 's': prints("SYM "); break; 1153 case 's': prints("SYM "); break;
925 case 'N': prints("LIB "); break; 1154 case 'N': prints("LIB "); break;
926 case 'T': prints("TEXTRELS "); break; 1155 case 'T': prints("TEXTRELS "); break;
1156 case 'k': prints("SECTION "); break;
1157 case 'a': prints("ARCH "); break;
1158 case 'O': prints("PERM "); break;
1159 case 'D': prints("ENDIAN "); break;
927 default: warnf("'%c' has no title ?", out_format[i]); 1160 default: warnf("'%c' has no title ?", out_format[i]);
928 } 1161 }
929 } 1162 }
930 if (!found_file) prints("FILE "); 1163 if (!found_file) prints("FILE ");
931 prints("\n"); 1164 prints("\n");
936 /* dump all the good stuff */ 1169 /* dump all the good stuff */
937 for (i = 0; out_format[i]; ++i) { 1170 for (i = 0; out_format[i]; ++i) {
938 const char *out; 1171 const char *out;
939 const char *tmp; 1172 const char *tmp;
940 1173
941 /* make sure we trim leading spaces in quiet mode */
942 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
943 *out_buffer = '\0';
944
945 if (!IS_MODIFIER(out_format[i])) { 1174 if (!IS_MODIFIER(out_format[i])) {
946 xchrcat(&out_buffer, out_format[i], &out_len); 1175 xchrcat(&out_buffer, out_format[i], &out_len);
947 continue; 1176 continue;
948 } 1177 }
949 1178
950 out = NULL; 1179 out = NULL;
951 be_wewy_wewy_quiet = (out_format[i] == '#'); 1180 be_wewy_wewy_quiet = (out_format[i] == '#');
1181 be_semi_verbose = (out_format[i] == '+');
952 switch (out_format[++i]) { 1182 switch (out_format[++i]) {
1183 case '+':
953 case '%': 1184 case '%':
954 case '#': 1185 case '#':
955 xchrcat(&out_buffer, out_format[i], &out_len); break; 1186 xchrcat(&out_buffer, out_format[i], &out_len); break;
956 case 'F': 1187 case 'F':
957 found_file = 1; 1188 found_file = 1;
983 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1214 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
984 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break; 1215 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
985 case 't': out = scanelf_file_textrel(elf, &found_textrel); break; 1216 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
986 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break; 1217 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
987 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; 1218 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1219 case 'M': out = get_elfeitype(EI_CLASS, elf->data[EI_CLASS]); break;
1220 case 'D': out = get_endian(elf); break;
1221 case 'O': out = getstr_perms(elf->filename); break;
988 case 'n': 1222 case 'n':
989 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break; 1223 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
990 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1224 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
991 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1225 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
992 case 'S': out = scanelf_file_soname(elf, &found_soname); break; 1226 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
993 case 's': out = scanelf_file_sym(elf, &found_sym); break; 1227 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1228 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1229 case 'a': out = get_elfemtype(elf); break;
994 default: warnf("'%c' has no scan code?", out_format[i]); 1230 default: warnf("'%c' has no scan code?", out_format[i]);
995 } 1231 }
996 if (out) { 1232 if (out) {
997 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */ 1233 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
998 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL) 1234 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
1003 } 1239 }
1004 1240
1005#define FOUND_SOMETHING() \ 1241#define FOUND_SOMETHING() \
1006 (found_pax || found_phdr || found_relro || found_load || found_textrel || \ 1242 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
1007 found_rpath || found_needed || found_interp || found_bind || \ 1243 found_rpath || found_needed || found_interp || found_bind || \
1008 found_soname || found_sym || found_lib || found_textrels) 1244 found_soname || found_sym || found_lib || found_textrels || found_section )
1009 1245
1010 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1246 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
1011 xchrcat(&out_buffer, ' ', &out_len); 1247 xchrcat(&out_buffer, ' ', &out_len);
1012 xstrcat(&out_buffer, elf->filename, &out_len); 1248 xstrcat(&out_buffer, elf->filename, &out_len);
1013 } 1249 }
1044 if (strlen(match_etypes)) { 1280 if (strlen(match_etypes)) {
1045 char sbuf[126]; 1281 char sbuf[126];
1046 strncpy(sbuf, match_etypes, sizeof(sbuf)); 1282 strncpy(sbuf, match_etypes, sizeof(sbuf));
1047 if (strchr(match_etypes, ',') != NULL) { 1283 if (strchr(match_etypes, ',') != NULL) {
1048 char *p; 1284 char *p;
1049 while((p = strrchr(sbuf, ',')) != NULL) { 1285 while ((p = strrchr(sbuf, ',')) != NULL) {
1050 *p = 0; 1286 *p = 0;
1051 if (atoi(p+1) == get_etype(elf)) 1287 if (etype_lookup(p+1) == get_etype(elf))
1052 goto label_ret; 1288 goto label_ret;
1053 } 1289 }
1054 } 1290 }
1055 if (atoi(sbuf) != get_etype(elf)) 1291 if (etype_lookup(sbuf) != get_etype(elf))
1056 goto label_done; 1292 goto label_done;
1057 } 1293 }
1058 1294
1059label_ret: 1295label_ret:
1060 ret = scanelf_elfobj(elf); 1296 ret = scanelf_elfobj(elf);
1087 munmap(ar_buffer, len); 1323 munmap(ar_buffer, len);
1088 1324
1089 return 0; 1325 return 0;
1090} 1326}
1091/* scan a file which may be an elf or an archive or some other magical beast */ 1327/* scan a file which may be an elf or an archive or some other magical beast */
1092static void scanelf_file(const char *filename) 1328static int scanelf_file(const char *filename, const struct stat *st_cache)
1093{ 1329{
1330 const struct stat *st = st_cache;
1094 struct stat st; 1331 struct stat symlink_st;
1095 int fd; 1332 int fd;
1096 1333
1097 /* make sure 'filename' exists */
1098 if (lstat(filename, &st) == -1) {
1099 if (be_verbose > 2) printf("%s: does not exist\n", filename);
1100 return;
1101 }
1102
1103 /* always handle regular files and handle symlinked files if no -y */ 1334 /* always handle regular files and handle symlinked files if no -y */
1104 if (S_ISLNK(st.st_mode)) { 1335 if (S_ISLNK(st->st_mode)) {
1105 if (!scan_symlink) return; 1336 if (!scan_symlink) return 1;
1106 stat(filename, &st); 1337 stat(filename, &symlink_st);
1338 st = &symlink_st;
1107 } 1339 }
1340
1108 if (!S_ISREG(st.st_mode)) { 1341 if (!S_ISREG(st->st_mode)) {
1109 if (be_verbose > 2) printf("%s: skipping non-file\n", filename); 1342 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1110 return; 1343 return 1;
1111 } 1344 }
1112 1345
1346 if (match_perms) {
1347 if ((st->st_mode | match_perms) != st->st_mode)
1348 return 1;
1349 }
1113 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1) 1350 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1114 return; 1351 return 1;
1115 1352
1116 if (scanelf_elf(filename, fd, st.st_size) == 1 && scan_archives) 1353 if (scanelf_elf(filename, fd, st->st_size) == 1 && scan_archives)
1117 /* if it isn't an ELF, maybe it's an .a archive */ 1354 /* if it isn't an ELF, maybe it's an .a archive */
1118 scanelf_archive(filename, fd, st.st_size); 1355 scanelf_archive(filename, fd, st->st_size);
1119 1356
1120 close(fd); 1357 close(fd);
1358 return 0;
1121} 1359}
1122 1360
1123/* scan a directory for ET_EXEC files and print when we find one */ 1361/* scan a directory for ET_EXEC files and print when we find one */
1124static void scanelf_dir(const char *path) 1362static int scanelf_dir(const char *path)
1125{ 1363{
1126 register DIR *dir; 1364 register DIR *dir;
1127 register struct dirent *dentry; 1365 register struct dirent *dentry;
1128 struct stat st_top, st; 1366 struct stat st_top, st;
1129 char buf[__PAX_UTILS_PATH_MAX]; 1367 char buf[__PAX_UTILS_PATH_MAX];
1130 size_t pathlen = 0, len = 0; 1368 size_t pathlen = 0, len = 0;
1369 int ret = 0;
1131 1370
1132 /* make sure path exists */ 1371 /* make sure path exists */
1133 if (lstat(path, &st_top) == -1) { 1372 if (lstat(path, &st_top) == -1) {
1134 if (be_verbose > 2) printf("%s: does not exist\n", path); 1373 if (be_verbose > 2) printf("%s: does not exist\n", path);
1135 return; 1374 return 1;
1136 } 1375 }
1137 1376
1138 /* ok, if it isn't a directory, assume we can open it */ 1377 /* ok, if it isn't a directory, assume we can open it */
1139 if (!S_ISDIR(st_top.st_mode)) { 1378 if (!S_ISDIR(st_top.st_mode)) {
1140 scanelf_file(path); 1379 return scanelf_file(path, &st_top);
1141 return;
1142 } 1380 }
1143 1381
1144 /* now scan the dir looking for fun stuff */ 1382 /* now scan the dir looking for fun stuff */
1145 if ((dir = opendir(path)) == NULL) { 1383 if ((dir = opendir(path)) == NULL) {
1146 warnf("could not opendir %s: %s", path, strerror(errno)); 1384 warnf("could not opendir %s: %s", path, strerror(errno));
1147 return; 1385 return 1;
1148 } 1386 }
1149 if (be_verbose > 1) printf("%s: scanning dir\n", path); 1387 if (be_verbose > 1) printf("%s: scanning dir\n", path);
1150 1388
1151 pathlen = strlen(path); 1389 pathlen = strlen(path);
1152 while ((dentry = readdir(dir))) { 1390 while ((dentry = readdir(dir))) {
1156 if (len >= sizeof(buf)) { 1394 if (len >= sizeof(buf)) {
1157 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path, 1395 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
1158 (unsigned long)len, (unsigned long)sizeof(buf)); 1396 (unsigned long)len, (unsigned long)sizeof(buf));
1159 continue; 1397 continue;
1160 } 1398 }
1161 sprintf(buf, "%s/%s", path, dentry->d_name); 1399 snprintf(buf, sizeof(buf), "%s%s%s", path, (path[pathlen-1] == '/') ? "" : "/", dentry->d_name);
1162 if (lstat(buf, &st) != -1) { 1400 if (lstat(buf, &st) != -1) {
1163 if (S_ISREG(st.st_mode)) 1401 if (S_ISREG(st.st_mode))
1164 scanelf_file(buf); 1402 ret = scanelf_file(buf, &st);
1165 else if (dir_recurse && S_ISDIR(st.st_mode)) { 1403 else if (dir_recurse && S_ISDIR(st.st_mode)) {
1166 if (dir_crossmount || (st_top.st_dev == st.st_dev)) 1404 if (dir_crossmount || (st_top.st_dev == st.st_dev))
1167 scanelf_dir(buf); 1405 ret = scanelf_dir(buf);
1168 } 1406 }
1169 } 1407 }
1170 } 1408 }
1171 closedir(dir); 1409 closedir(dir);
1410 return ret;
1172} 1411}
1173 1412
1174static int scanelf_from_file(char *filename) 1413static int scanelf_from_file(const char *filename)
1175{ 1414{
1176 FILE *fp = NULL; 1415 FILE *fp = NULL;
1177 char *p; 1416 char *p;
1178 char path[__PAX_UTILS_PATH_MAX]; 1417 char path[__PAX_UTILS_PATH_MAX];
1418 int ret = 0;
1179 1419
1180 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1420 if (strcmp(filename, "-") == 0)
1181 fp = stdin; 1421 fp = stdin;
1182 else if ((fp = fopen(filename, "r")) == NULL) 1422 else if ((fp = fopen(filename, "r")) == NULL)
1183 return 1; 1423 return 1;
1184 1424
1185 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) { 1425 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
1186 if ((p = strchr(path, '\n')) != NULL) 1426 if ((p = strchr(path, '\n')) != NULL)
1187 *p = 0; 1427 *p = 0;
1188 search_path = path; 1428 search_path = path;
1189 scanelf_dir(path); 1429 ret = scanelf_dir(path);
1190 } 1430 }
1191 if (fp != stdin) 1431 if (fp != stdin)
1192 fclose(fp); 1432 fclose(fp);
1193 return 0; 1433 return ret;
1194} 1434}
1195 1435
1196static void load_ld_so_conf() 1436#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__)
1437
1438static int load_ld_cache_config(int i, const char *fname)
1197{ 1439{
1198 FILE *fp = NULL; 1440 FILE *fp = NULL;
1199 char *p; 1441 char *p;
1200 char path[__PAX_UTILS_PATH_MAX]; 1442 char path[__PAX_UTILS_PATH_MAX];
1201 int i = 0;
1202 1443
1203 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1444 if (i + 1 == ARRAY_SIZE(ldpaths))
1204 return; 1445 return i;
1446
1447 if ((fp = fopen(fname, "r")) == NULL)
1448 return i;
1205 1449
1206 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) { 1450 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
1207 if (*path != '/')
1208 continue;
1209
1210 if ((p = strrchr(path, '\r')) != NULL) 1451 if ((p = strrchr(path, '\r')) != NULL)
1211 *p = 0; 1452 *p = 0;
1212 if ((p = strchr(path, '\n')) != NULL) 1453 if ((p = strchr(path, '\n')) != NULL)
1213 *p = 0; 1454 *p = 0;
1455#ifdef __linux__
1456 /* recursive includes of the same file will make this segfault. */
1457 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) {
1458 glob64_t gl;
1459 size_t x;
1460 char gpath[__PAX_UTILS_PATH_MAX];
1461
1462 memset(gpath, 0, sizeof(gpath));
1463
1464 if (path[8] != '/')
1465 snprintf(gpath, sizeof(gpath), "/etc/%s", &path[8]);
1466 else
1467 strncpy(gpath, &path[8], sizeof(gpath));
1468
1469 if ((glob64(gpath, 0, NULL, &gl)) == 0) {
1470 for (x = 0; x < gl.gl_pathc; ++x) {
1471 /* try to avoid direct loops */
1472 if (strcmp(gl.gl_pathv[x], fname) == 0)
1473 continue;
1474 i = load_ld_cache_config(i, gl.gl_pathv[x]);
1475 if (i + 1 >= ARRAY_SIZE(ldpaths)) {
1476 globfree64(&gl);
1477 return i;
1478 }
1479 }
1480 globfree64 (&gl);
1481 continue;
1482 }
1483 }
1484#endif
1485 if (*path != '/')
1486 continue;
1214 1487
1215 ldpaths[i++] = xstrdup(path); 1488 ldpaths[i++] = xstrdup(path);
1216 1489
1217 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1490 if (i + 1 == ARRAY_SIZE(ldpaths))
1218 break; 1491 break;
1219 } 1492 }
1220 ldpaths[i] = NULL; 1493 ldpaths[i] = NULL;
1221 1494
1222 fclose(fp); 1495 fclose(fp);
1496 return i;
1223} 1497}
1498
1499#elif defined(__FreeBSD__) || (__DragonFly__)
1500
1501static int load_ld_cache_config(int i, const char *fname)
1502{
1503 FILE *fp = NULL;
1504 char *b = NULL, *p;
1505 struct elfhints_hdr hdr;
1506
1507 if (i + 1 == ARRAY_SIZE(ldpaths))
1508 return i;
1509
1510 if ((fp = fopen(fname, "r")) == NULL)
1511 return i;
1512
1513 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) ||
1514 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 ||
1515 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1)
1516 {
1517 fclose(fp);
1518 return i;
1519 }
1520
1521 b = xmalloc(hdr.dirlistlen + 1);
1522 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) {
1523 fclose(fp);
1524 free(b);
1525 return i;
1526 }
1527
1528 while ((p = strsep(&b, ":"))) {
1529 if (*p == '\0') continue;
1530 ldpaths[i++] = xstrdup(p);
1531
1532 if (i + 1 == ARRAY_SIZE(ldpaths))
1533 break;
1534 }
1535 ldpaths[i] = NULL;
1536
1537 free(b);
1538 fclose(fp);
1539 return i;
1540}
1541
1542#else
1543
1544#warning Cache config support not implemented for your target
1545static int load_ld_cache_config(int i, const char *fname)
1546{
1547 memset(ldpaths, 0x00, sizeof(ldpaths));
1548}
1549
1550#endif
1224 1551
1225/* scan /etc/ld.so.conf for paths */ 1552/* scan /etc/ld.so.conf for paths */
1226static void scanelf_ldpath() 1553static void scanelf_ldpath(void)
1227{ 1554{
1228 char scan_l, scan_ul, scan_ull; 1555 char scan_l, scan_ul, scan_ull;
1229 int i = 0; 1556 int i = 0;
1230 1557
1231 if (!ldpaths[0]) 1558 if (!ldpaths[0])
1245 if (!scan_ul) scanelf_dir("/usr/lib"); 1572 if (!scan_ul) scanelf_dir("/usr/lib");
1246 if (!scan_ull) scanelf_dir("/usr/local/lib"); 1573 if (!scan_ull) scanelf_dir("/usr/local/lib");
1247} 1574}
1248 1575
1249/* scan env PATH for paths */ 1576/* scan env PATH for paths */
1250static void scanelf_envpath() 1577static void scanelf_envpath(void)
1251{ 1578{
1252 char *path, *p; 1579 char *path, *p;
1253 1580
1254 path = getenv("PATH"); 1581 path = getenv("PATH");
1255 if (!path) 1582 if (!path)
1263 1590
1264 free(path); 1591 free(path);
1265} 1592}
1266 1593
1267 1594
1268/* usage / invocation handling functions */ 1595/* usage / invocation handling functions */ /* Free Flags: c d j u w C G H I J K P Q U W Y Z */
1269#define PARSE_FLAGS "plRmyAXxetrnLibSs:gN:TaqvF:f:o:M:E:BhV" 1596#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DO:BhV"
1270#define a_argument required_argument 1597#define a_argument required_argument
1271static struct option const long_opts[] = { 1598static struct option const long_opts[] = {
1272 {"path", no_argument, NULL, 'p'}, 1599 {"path", no_argument, NULL, 'p'},
1273 {"ldpath", no_argument, NULL, 'l'}, 1600 {"ldpath", no_argument, NULL, 'l'},
1274 {"recursive", no_argument, NULL, 'R'}, 1601 {"recursive", no_argument, NULL, 'R'},
1275 {"mount", no_argument, NULL, 'm'}, 1602 {"mount", no_argument, NULL, 'm'},
1276 {"symlink", no_argument, NULL, 'y'}, 1603 {"symlink", no_argument, NULL, 'y'},
1277 {"archives", no_argument, NULL, 'A'}, 1604 {"archives", no_argument, NULL, 'A'},
1278 {"ldcache", no_argument, NULL, 'L'}, 1605 {"ldcache", no_argument, NULL, 'L'},
1279 {"fix", no_argument, NULL, 'X'}, 1606 {"fix", no_argument, NULL, 'X'},
1607 {"setpax", a_argument, NULL, 'z'},
1280 {"pax", no_argument, NULL, 'x'}, 1608 {"pax", no_argument, NULL, 'x'},
1281 {"header", no_argument, NULL, 'e'}, 1609 {"header", no_argument, NULL, 'e'},
1282 {"textrel", no_argument, NULL, 't'}, 1610 {"textrel", no_argument, NULL, 't'},
1283 {"rpath", no_argument, NULL, 'r'}, 1611 {"rpath", no_argument, NULL, 'r'},
1284 {"needed", no_argument, NULL, 'n'}, 1612 {"needed", no_argument, NULL, 'n'},
1285 {"interp", no_argument, NULL, 'i'}, 1613 {"interp", no_argument, NULL, 'i'},
1286 {"bind", no_argument, NULL, 'b'}, 1614 {"bind", no_argument, NULL, 'b'},
1287 {"soname", no_argument, NULL, 'S'}, 1615 {"soname", no_argument, NULL, 'S'},
1288 {"symbol", a_argument, NULL, 's'}, 1616 {"symbol", a_argument, NULL, 's'},
1617 {"section", a_argument, NULL, 'k'},
1289 {"lib", a_argument, NULL, 'N'}, 1618 {"lib", a_argument, NULL, 'N'},
1290 {"gmatch", no_argument, NULL, 'g'}, 1619 {"gmatch", no_argument, NULL, 'g'},
1291 {"textrels", no_argument, NULL, 'T'}, 1620 {"textrels", no_argument, NULL, 'T'},
1292 {"etype", a_argument, NULL, 'E'}, 1621 {"etype", a_argument, NULL, 'E'},
1293 {"bits", a_argument, NULL, 'M'}, 1622 {"bits", a_argument, NULL, 'M'},
1623 {"endian", no_argument, NULL, 'D'},
1624 {"perms", a_argument, NULL, 'O'},
1294 {"all", no_argument, NULL, 'a'}, 1625 {"all", no_argument, NULL, 'a'},
1295 {"quiet", no_argument, NULL, 'q'}, 1626 {"quiet", no_argument, NULL, 'q'},
1296 {"verbose", no_argument, NULL, 'v'}, 1627 {"verbose", no_argument, NULL, 'v'},
1297 {"format", a_argument, NULL, 'F'}, 1628 {"format", a_argument, NULL, 'F'},
1298 {"from", a_argument, NULL, 'f'}, 1629 {"from", a_argument, NULL, 'f'},
1309 "Scan directories recursively", 1640 "Scan directories recursively",
1310 "Don't recursively cross mount points", 1641 "Don't recursively cross mount points",
1311 "Don't scan symlinks", 1642 "Don't scan symlinks",
1312 "Scan archives (.a files)", 1643 "Scan archives (.a files)",
1313 "Utilize ld.so.cache information (use with -r/-n)", 1644 "Utilize ld.so.cache information (use with -r/-n)",
1314 "Try and 'fix' bad things (use with -r/-e)\n", 1645 "Try and 'fix' bad things (use with -r/-e)",
1646 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
1315 "Print PaX markings", 1647 "Print PaX markings",
1316 "Print GNU_STACK/PT_LOAD markings", 1648 "Print GNU_STACK/PT_LOAD markings",
1317 "Print TEXTREL information", 1649 "Print TEXTREL information",
1318 "Print RPATH information", 1650 "Print RPATH information",
1319 "Print NEEDED information", 1651 "Print NEEDED information",
1320 "Print INTERP information", 1652 "Print INTERP information",
1321 "Print BIND information", 1653 "Print BIND information",
1322 "Print SONAME information", 1654 "Print SONAME information",
1323 "Find a specified symbol", 1655 "Find a specified symbol",
1656 "Find a specified section",
1324 "Find a specified library", 1657 "Find a specified library",
1325 "Use strncmp to match libraries. (use with -N)", 1658 "Use strncmp to match libraries. (use with -N)",
1326 "Locate cause of TEXTREL", 1659 "Locate cause of TEXTREL",
1327 "Print only ELF files matching numeric constant type", 1660 "Print only ELF files matching etype ET_DYN,ET_EXEC ...",
1328 "Print only ELF files matching numeric bits", 1661 "Print only ELF files matching numeric bits",
1662 "Print Endianness",
1663 "Print only ELF files matching octal permissions",
1329 "Print all scanned info (-x -e -t -r -b)\n", 1664 "Print all scanned info (-x -e -t -r -b)\n",
1330 "Only output 'bad' things", 1665 "Only output 'bad' things",
1331 "Be verbose (can be specified more than once)", 1666 "Be verbose (can be specified more than once)",
1332 "Use specified format for output", 1667 "Use specified format for output",
1333 "Read input stream from a filename", 1668 "Read input stream from a filename",
1345 printf("* Scan ELF binaries for stuff\n\n" 1680 printf("* Scan ELF binaries for stuff\n\n"
1346 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0); 1681 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
1347 printf("Options: -[%s]\n", PARSE_FLAGS); 1682 printf("Options: -[%s]\n", PARSE_FLAGS);
1348 for (i = 0; long_opts[i].name; ++i) 1683 for (i = 0; long_opts[i].name; ++i)
1349 if (long_opts[i].has_arg == no_argument) 1684 if (long_opts[i].has_arg == no_argument)
1350 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 1685 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
1351 long_opts[i].name, opts_help[i]); 1686 long_opts[i].name, opts_help[i]);
1352 else 1687 else
1353 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 1688 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
1354 long_opts[i].name, opts_help[i]); 1689 long_opts[i].name, opts_help[i]);
1355 1690
1356 if (status != EXIT_SUCCESS) 1691 puts("\nFor more information, see the scanelf(1) manpage");
1357 exit(status);
1358
1359 puts("\nThe format modifiers for the -F option are:");
1360 puts(" F Filename \tx PaX Flags \te STACK/RELRO");
1361 puts(" t TEXTREL \tr RPATH \tn NEEDED");
1362 puts(" i INTERP \tb BIND \ts symbol");
1363 puts(" N library \to Type \tT TEXTRELs");
1364 puts(" S SONAME");
1365 puts(" p filename (with search path removed)");
1366 puts(" f filename (short name/basename)");
1367 puts("Prefix each modifier with '%' (verbose) or '#' (silent)");
1368
1369 exit(status); 1692 exit(status);
1370} 1693}
1371 1694
1372/* parse command line arguments and preform needed actions */ 1695/* parse command line arguments and preform needed actions */
1696#define do_pax_state(option, flag) \
1697 if (islower(option)) { \
1698 flags &= ~PF_##flag; \
1699 flags |= PF_NO##flag; \
1700 } else { \
1701 flags &= ~PF_NO##flag; \
1702 flags |= PF_##flag; \
1703 }
1373static void parseargs(int argc, char *argv[]) 1704static int parseargs(int argc, char *argv[])
1374{ 1705{
1375 int i; 1706 int i;
1376 char *from_file = NULL; 1707 const char *from_file = NULL;
1708 int ret = 0;
1377 1709
1378 opterr = 0; 1710 opterr = 0;
1379 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1711 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
1380 switch (i) { 1712 switch (i) {
1381 1713
1393 case 'E': 1725 case 'E':
1394 strncpy(match_etypes, optarg, sizeof(match_etypes)); 1726 strncpy(match_etypes, optarg, sizeof(match_etypes));
1395 break; 1727 break;
1396 case 'M': 1728 case 'M':
1397 match_bits = atoi(optarg); 1729 match_bits = atoi(optarg);
1730 if (match_bits == 0) {
1731 if (strcmp(optarg, "ELFCLASS32") == 0)
1732 match_bits = 32;
1733 if (strcmp(optarg, "ELFCLASS64") == 0)
1734 match_bits = 64;
1735 }
1736 break;
1737 case 'O':
1738 if (sscanf(optarg, "%o", &match_perms) == (-1))
1739 match_bits = 0;
1398 break; 1740 break;
1399 case 'o': { 1741 case 'o': {
1400 FILE *fp = NULL;
1401 if ((fp = freopen(optarg, "w", stdout)) == NULL) 1742 if (freopen(optarg, "w", stdout) == NULL)
1402 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1743 err("Could not open output stream '%s': %s", optarg, strerror(errno));
1403 SET_STDOUT(fp);
1404 break; 1744 break;
1405 } 1745 }
1406 1746 case 'k':
1747 if (find_section) warn("You prob don't want to specify -k twice");
1748 find_section = optarg;
1749 break;
1407 case 's': { 1750 case 's': {
1408 if (find_sym) warn("You prob don't want to specify -s twice"); 1751 if (find_sym) warn("You prob don't want to specify -s twice");
1409 find_sym = optarg; 1752 find_sym = optarg;
1410 versioned_symname = (char*)xmalloc(sizeof(char) * (strlen(find_sym)+1+1)); 1753 versioned_symname = xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
1411 sprintf(versioned_symname, "%s@", find_sym); 1754 sprintf(versioned_symname, "%s@", find_sym);
1412 break; 1755 break;
1413 } 1756 }
1414 case 'N': { 1757 case 'N': {
1415 if (find_lib) warn("You prob don't want to specify -N twice"); 1758 if (find_lib) warn("You prob don't want to specify -N twice");
1420 case 'F': { 1763 case 'F': {
1421 if (out_format) warn("You prob don't want to specify -F twice"); 1764 if (out_format) warn("You prob don't want to specify -F twice");
1422 out_format = optarg; 1765 out_format = optarg;
1423 break; 1766 break;
1424 } 1767 }
1768 case 'z': {
1769 unsigned long flags = (PF_NOEMUTRAMP | PF_NORANDEXEC);
1770 size_t x;
1425 1771
1426 case 'g': gmatch = 1; /* break; any reason we dont breal; here ? */ 1772 for (x = 0; x < strlen(optarg); x++) {
1773 switch (optarg[x]) {
1774 case 'p':
1775 case 'P':
1776 do_pax_state(optarg[x], PAGEEXEC);
1777 break;
1778 case 's':
1779 case 'S':
1780 do_pax_state(optarg[x], SEGMEXEC);
1781 break;
1782 case 'm':
1783 case 'M':
1784 do_pax_state(optarg[x], MPROTECT);
1785 break;
1786 case 'e':
1787 case 'E':
1788 do_pax_state(optarg[x], EMUTRAMP);
1789 break;
1790 case 'r':
1791 case 'R':
1792 do_pax_state(optarg[x], RANDMMAP);
1793 break;
1794 case 'x':
1795 case 'X':
1796 do_pax_state(optarg[x], RANDEXEC);
1797 break;
1798 default:
1799 break;
1800 }
1801 }
1802 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1803 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1804 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1805 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1806 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1807 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1808 setpax = flags;
1809 break;
1810 }
1811 case 'g': g_match = 1; break;
1427 case 'L': use_ldcache = 1; break; 1812 case 'L': use_ldcache = 1; break;
1428 case 'y': scan_symlink = 0; break; 1813 case 'y': scan_symlink = 0; break;
1429 case 'A': scan_archives = 1; break; 1814 case 'A': scan_archives = 1; break;
1430 case 'B': show_banner = 0; break; 1815 case 'B': show_banner = 0; break;
1431 case 'l': scan_ldpath = 1; break; 1816 case 'l': scan_ldpath = 1; break;
1442 case 'b': show_bind = 1; break; 1827 case 'b': show_bind = 1; break;
1443 case 'S': show_soname = 1; break; 1828 case 'S': show_soname = 1; break;
1444 case 'T': show_textrels = 1; break; 1829 case 'T': show_textrels = 1; break;
1445 case 'q': be_quiet = 1; break; 1830 case 'q': be_quiet = 1; break;
1446 case 'v': be_verbose = (be_verbose % 20) + 1; break; 1831 case 'v': be_verbose = (be_verbose % 20) + 1; break;
1447 case 'a': show_pax = show_phdr = show_textrel = show_rpath = show_bind = 1; break; 1832 case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break;
1448 1833 case 'D': show_endian = 1; break;
1449 case ':': 1834 case ':':
1450 err("Option '%c' is missing parameter", optopt); 1835 err("Option '%c' is missing parameter", optopt);
1451 case '?': 1836 case '?':
1452 err("Unknown option '%c' or argument missing", optopt); 1837 err("Unknown option '%c' or argument missing", optopt);
1453 default: 1838 default:
1454 err("Unhandled option '%c'; please report this", i); 1839 err("Unhandled option '%c'; please report this", i);
1455 } 1840 }
1456 } 1841 }
1457 1842 if (show_textrels && be_verbose) {
1843 if (which("objdump") != NULL)
1844 has_objdump = 1;
1845 }
1458 /* let the format option override all other options */ 1846 /* let the format option override all other options */
1459 if (out_format) { 1847 if (out_format) {
1460 show_pax = show_phdr = show_textrel = show_rpath = \ 1848 show_pax = show_phdr = show_textrel = show_rpath = \
1461 show_needed = show_interp = show_bind = show_soname = \ 1849 show_needed = show_interp = show_bind = show_soname = \
1462 show_textrels = 0; 1850 show_textrels = show_perms = show_endian = 0;
1463 for (i = 0; out_format[i]; ++i) { 1851 for (i = 0; out_format[i]; ++i) {
1464 if (!IS_MODIFIER(out_format[i])) continue; 1852 if (!IS_MODIFIER(out_format[i])) continue;
1465 1853
1466 switch (out_format[++i]) { 1854 switch (out_format[++i]) {
1855 case '+': break;
1467 case '%': break; 1856 case '%': break;
1468 case '#': break; 1857 case '#': break;
1469 case 'F': break; 1858 case 'F': break;
1470 case 'p': break; 1859 case 'p': break;
1471 case 'f': break; 1860 case 'f': break;
1861 case 'k': break;
1472 case 's': break; 1862 case 's': break;
1473 case 'N': break; 1863 case 'N': break;
1474 case 'o': break; 1864 case 'o': break;
1865 case 'a': break;
1866 case 'M': break;
1867 case 'D': show_endian = 1; break;
1868 case 'O': show_perms = 1; break;
1475 case 'x': show_pax = 1; break; 1869 case 'x': show_pax = 1; break;
1476 case 'e': show_phdr = 1; break; 1870 case 'e': show_phdr = 1; break;
1477 case 't': show_textrel = 1; break; 1871 case 't': show_textrel = 1; break;
1478 case 'r': show_rpath = 1; break; 1872 case 'r': show_rpath = 1; break;
1479 case 'n': show_needed = 1; break; 1873 case 'n': show_needed = 1; break;
1480 case 'i': show_interp = 1; break; 1874 case 'i': show_interp = 1; break;
1481 case 'b': show_bind = 1; break; 1875 case 'b': show_bind = 1; break;
1482 case 'S': show_soname = 1; break; 1876 case 'S': show_soname = 1; break;
1483 case 'T': show_textrels = 1; break; 1877 case 'T': show_textrels = 1; break;
1484 default: 1878 default:
1485 err("Invalid format specifier '%c' (byte %i)", 1879 err("Invalid format specifier '%c' (byte %i)",
1486 out_format[i], i+1); 1880 out_format[i], i+1);
1487 } 1881 }
1488 } 1882 }
1489 1883
1490 /* construct our default format */ 1884 /* construct our default format */
1491 } else { 1885 } else {
1492 size_t fmt_len = 30; 1886 size_t fmt_len = 30;
1493 out_format = (char*)xmalloc(sizeof(char) * fmt_len); 1887 out_format = xmalloc(sizeof(char) * fmt_len);
1494 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); 1888 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
1495 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); 1889 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
1890 if (show_perms) xstrcat(&out_format, "%O ", &fmt_len);
1891 if (show_endian) xstrcat(&out_format, "%D ", &fmt_len);
1496 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len); 1892 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
1497 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); 1893 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
1498 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); 1894 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
1499 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); 1895 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
1500 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 1896 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
1501 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 1897 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1502 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len); 1898 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1503 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len); 1899 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
1504 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 1900 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
1901 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1505 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len); 1902 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
1506 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 1903 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
1507 } 1904 }
1508 if (be_verbose > 2) printf("Format: %s\n", out_format); 1905 if (be_verbose > 2) printf("Format: %s\n", out_format);
1509 1906
1510 /* now lets actually do the scanning */ 1907 /* now lets actually do the scanning */
1511 if (scan_ldpath || use_ldcache) 1908 if (scan_ldpath || use_ldcache)
1512 load_ld_so_conf(); 1909 load_ld_cache_config(0, __PAX_UTILS_DEFAULT_LD_CACHE_CONFIG);
1513 if (scan_ldpath) scanelf_ldpath(); 1910 if (scan_ldpath) scanelf_ldpath();
1514 if (scan_envpath) scanelf_envpath(); 1911 if (scan_envpath) scanelf_envpath();
1912 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath)
1913 from_file = "-";
1515 if (from_file) { 1914 if (from_file) {
1516 scanelf_from_file(from_file); 1915 scanelf_from_file(from_file);
1517 from_file = *argv; 1916 from_file = *argv;
1518 } 1917 }
1519 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 1918 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
1520 err("Nothing to scan !?"); 1919 err("Nothing to scan !?");
1521 while (optind < argc) { 1920 while (optind < argc) {
1522 search_path = argv[optind++]; 1921 search_path = argv[optind++];
1523 scanelf_dir(search_path); 1922 ret = scanelf_dir(search_path);
1524 } 1923 }
1525 1924
1526 /* clean up */ 1925 /* clean up */
1527 if (versioned_symname) free(versioned_symname); 1926 free(versioned_symname);
1528 for (i = 0; ldpaths[i]; ++i) 1927 for (i = 0; ldpaths[i]; ++i)
1529 free(ldpaths[i]); 1928 free(ldpaths[i]);
1530 1929
1531 if (ldcache != 0) 1930 if (ldcache != 0)
1532 munmap(ldcache, ldcache_size); 1931 munmap(ldcache, ldcache_size);
1533}
1534
1535
1536
1537/* utility funcs */
1538static char *xstrdup(const char *s)
1539{
1540 char *ret = strdup(s);
1541 if (!ret) err("Could not strdup(): %s", strerror(errno));
1542 return ret; 1932 return ret;
1543} 1933}
1544static void *xmalloc(size_t size)
1545{
1546 void *ret = malloc(size);
1547 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size);
1548 return ret;
1549}
1550static void xstrncat(char **dst, const char *src, size_t *curr_len, size_t n)
1551{
1552 size_t new_len;
1553 1934
1554 new_len = strlen(*dst) + strlen(src); 1935static char **get_split_env(const char *envvar)
1555 if (*curr_len <= new_len) {
1556 *curr_len = new_len + (*curr_len / 2);
1557 *dst = realloc(*dst, *curr_len);
1558 if (!*dst)
1559 err("could not realloc() %li bytes", (unsigned long)*curr_len);
1560 }
1561
1562 if (n)
1563 strncat(*dst, src, n);
1564 else
1565 strcat(*dst, src);
1566}
1567static inline void xchrcat(char **dst, const char append, size_t *curr_len)
1568{ 1936{
1569 static char my_app[2]; 1937 const char *delims = " \t\n";
1570 my_app[0] = append; 1938 char **envvals = NULL;
1571 my_app[1] = '\0'; 1939 char *env, *s;
1572 xstrcat(dst, my_app, curr_len); 1940 int nentry;
1573}
1574 1941
1942 if ((env = getenv(envvar)) == NULL)
1943 return NULL;
1944
1945 env = xstrdup(env);
1946 if (env == NULL)
1947 return NULL;
1948
1949 s = strtok(env, delims);
1950 if (s == NULL) {
1951 free(env);
1952 return NULL;
1953 }
1954
1955 nentry = 0;
1956 while (s != NULL) {
1957 ++nentry;
1958 envvals = xrealloc(envvals, sizeof(*envvals) * (nentry+1));
1959 envvals[nentry-1] = s;
1960 s = strtok(NULL, delims);
1961 }
1962 envvals[nentry] = NULL;
1963
1964 /* don't want to free(env) as it contains the memory that backs
1965 * the envvals array of strings */
1966 return envvals;
1967}
1968
1969static void parseenv(void)
1970{
1971 qa_textrels = get_split_env("QA_TEXTRELS");
1972 qa_execstack = get_split_env("QA_EXECSTACK");
1973 qa_wx_load = get_split_env("QA_WX_LOAD");
1974}
1975
1976#ifdef __PAX_UTILS_CLEANUP
1977static void cleanup(void)
1978{
1979 free(out_format);
1980 free(qa_textrels);
1981 free(qa_execstack);
1982 free(qa_wx_load);
1983}
1984#endif
1575 1985
1576 1986
1577int main(int argc, char *argv[]) 1987int main(int argc, char *argv[])
1578{ 1988{
1989 int ret;
1579 if (argc < 2) 1990 if (argc < 2)
1580 usage(EXIT_FAILURE); 1991 usage(EXIT_FAILURE);
1992 parseenv();
1581 parseargs(argc, argv); 1993 ret = parseargs(argc, argv);
1582 fclose(stdout); 1994 fclose(stdout);
1583#ifdef __BOUNDS_CHECKING_ON 1995#ifdef __PAX_UTILS_CLEANUP
1584 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()"); 1996 cleanup();
1997 warn("The calls to add/delete heap should be off:\n"
1998 "\t- 1 due to the out_buffer not being freed in scanelf_file()\n"
1999 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD");
1585#endif 2000#endif
1586 return EXIT_SUCCESS; 2001 return ret;
1587} 2002}
2003
2004
2005/* Match filename against entries in matchlist, return TRUE
2006 * if the file is listed */
2007static int file_matches_list(const char *filename, char **matchlist)
2008{
2009 char **file;
2010 char *match;
2011 char buf[__PAX_UTILS_PATH_MAX];
2012
2013 if (matchlist == NULL)
2014 return 0;
2015
2016 for (file = matchlist; *file != NULL; file++) {
2017 if (search_path) {
2018 snprintf(buf, sizeof(buf), "%s%s", search_path, *file);
2019 match = buf;
2020 } else {
2021 match = *file;
2022 }
2023 if (fnmatch(match, filename, 0) == 0)
2024 return 1;
2025 }
2026 return 0;
2027}

Legend:
Removed from v.1.120  
changed lines
  Added in v.1.188

  ViewVC Help
Powered by ViewVC 1.1.20