/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.69 Revision 1.188
1/* 1/*
2 * Copyright 2003-2005 Gentoo Foundation 2 * Copyright 2003-2007 Gentoo Foundation
3 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.69 2005/06/03 23:18:01 vapier Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.188 2007/08/31 17:45:24 solar Exp $
5 * 5 *
6 ******************************************************************** 6 * Copyright 2003-2007 Ned Ludd - <solar@gentoo.org>
7 * This program is free software; you can redistribute it and/or 7 * Copyright 2004-2007 Mike Frysinger - <vapier@gentoo.org>
8 * modify it under the terms of the GNU General Public License as
9 * published by the Free Software Foundation; either version 2 of the
10 * License, or (at your option) any later version.
11 *
12 * This program is distributed in the hope that it will be useful, but
13 * WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
16 *
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston,
20 * MA 02111-1307, USA.
21 */ 8 */
22 9
23#include <stdio.h> 10static const char *rcsid = "$Id: scanelf.c,v 1.188 2007/08/31 17:45:24 solar Exp $";
24#include <stdlib.h> 11const char * const argv0 = "scanelf";
25#include <sys/types.h> 12
26#include <libgen.h>
27#include <limits.h>
28#define __USE_GNU
29#include <string.h>
30#include <errno.h>
31#include <unistd.h>
32#include <sys/stat.h>
33#include <dirent.h>
34#include <getopt.h>
35#include <assert.h>
36#include "paxelf.h" 13#include "paxinc.h"
37 14
38static const char *rcsid = "$Id: scanelf.c,v 1.69 2005/06/03 23:18:01 vapier Exp $"; 15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+')
39#define argv0 "scanelf"
40
41
42 16
43/* prototypes */ 17/* prototypes */
44static void scanelf_file(const char *filename); 18static int file_matches_list(const char *filename, char **matchlist);
19static int scanelf_elfobj(elfobj *elf);
20static int scanelf_elf(const char *filename, int fd, size_t len);
21static int scanelf_archive(const char *filename, int fd, size_t len);
22static int scanelf_file(const char *filename, const struct stat *st_cache);
45static void scanelf_dir(const char *path); 23static int scanelf_dir(const char *path);
46static void scanelf_ldpath(); 24static void scanelf_ldpath(void);
47static void scanelf_envpath(); 25static void scanelf_envpath(void);
48static void usage(int status); 26static void usage(int status);
27static char **get_split_env(const char *envvar);
28static void parseenv(void);
49static void parseargs(int argc, char *argv[]); 29static int parseargs(int argc, char *argv[]);
50static char *xstrdup(const char *s); 30static int rematch(const char *regex, const char *match, int cflags);
51static void *xmalloc(size_t size);
52static void xstrcat(char **dst, const char *src, size_t *curr_len);
53static inline void xchrcat(char **dst, const char append, size_t *curr_len);
54 31
55/* variables to control behavior */ 32/* variables to control behavior */
33static char match_etypes[126] = "";
56static char *ldpaths[256]; 34static char *ldpaths[256];
57static char scan_ldpath = 0; 35static char scan_ldpath = 0;
58static char scan_envpath = 0; 36static char scan_envpath = 0;
59static char scan_symlink = 1; 37static char scan_symlink = 1;
38static char scan_archives = 0;
60static char dir_recurse = 0; 39static char dir_recurse = 0;
61static char dir_crossmount = 1; 40static char dir_crossmount = 1;
62static char show_pax = 0; 41static char show_pax = 0;
63static char show_stack = 0; 42static char show_perms = 0;
43static char show_phdr = 0;
64static char show_textrel = 0; 44static char show_textrel = 0;
65static char show_rpath = 0; 45static char show_rpath = 0;
66static char show_needed = 0; 46static char show_needed = 0;
67static char show_interp = 0; 47static char show_interp = 0;
68static char show_bind = 0; 48static char show_bind = 0;
49static char show_soname = 0;
50static char show_textrels = 0;
69static char show_banner = 1; 51static char show_banner = 1;
52static char show_endian = 0;
70static char be_quiet = 0; 53static char be_quiet = 0;
71static char be_verbose = 0; 54static char be_verbose = 0;
55static char be_wewy_wewy_quiet = 0;
56static char be_semi_verbose = 0;
72static char *find_sym = NULL, *versioned_symname = NULL; 57static char *find_sym = NULL, *versioned_symname = NULL;
58static char *find_lib = NULL;
59static char *find_section = NULL;
73static char *out_format = NULL; 60static char *out_format = NULL;
74static char *search_path = NULL; 61static char *search_path = NULL;
62static char fix_elf = 0;
63static char g_match = 0;
64static char use_ldcache = 0;
75 65
66static char **qa_textrels = NULL;
67static char **qa_execstack = NULL;
68static char **qa_wx_load = NULL;
69
70int match_bits = 0;
71unsigned int match_perms = 0;
72caddr_t ldcache = 0;
73size_t ldcache_size = 0;
74unsigned long setpax = 0UL;
75
76int has_objdump = 0;
77
78static char *getstr_perms(const char *fname);
79static char *getstr_perms(const char *fname)
80{
81 struct stat st;
82 static char buf[8];
83
84 if ((stat(fname, &st)) == (-1))
85 return (char *) "";
86
87 snprintf(buf, sizeof(buf), "%o", st.st_mode);
88
89 return (char *) buf + 2;
90}
91
92/* find the path to a file by name */
93static char *which(const char *fname)
94{
95 static char fullpath[BUFSIZ];
96 char *path, *p;
97
98 path = getenv("PATH");
99 if (!path)
100 return NULL;
101
102 path = xstrdup(path);
103 while ((p = strrchr(path, ':')) != NULL) {
104 snprintf(fullpath, sizeof(fullpath), "%s/%s", p + 1, fname);
105 *p = 0;
106 if (access(fullpath, R_OK) != (-1)) {
107 free(path);
108 return (char *) fullpath;
109 }
110 }
111 free(path);
112 return NULL;
113}
114
115/* 1 on failure. 0 otherwise */
116static int rematch(const char *regex, const char *match, int cflags)
117{
118 regex_t preg;
119 int ret;
120
121 if ((match == NULL) || (regex == NULL))
122 return EXIT_FAILURE;
123
124
125 if ((ret = regcomp(&preg, regex, cflags))) {
126 char err[256];
127
128 if (regerror(ret, &preg, err, sizeof(err)))
129 fprintf(stderr, "regcomp failed: %s", err);
130 else
131 fprintf(stderr, "regcomp failed");
132
133 return EXIT_FAILURE;
134 }
135 ret = regexec(&preg, match, 0, NULL, 0);
136 regfree(&preg);
137
138 return ret;
139}
76 140
77/* sub-funcs for scanelf_file() */ 141/* sub-funcs for scanelf_file() */
142static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
143{
144 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
145#define GET_SYMTABS(B) \
146 if (elf->elf_class == ELFCLASS ## B) { \
147 Elf ## B ## _Shdr *symtab, *strtab, *dynsym, *dynstr; \
148 /* debug sections */ \
149 symtab = SHDR ## B (elf_findsecbyname(elf, ".symtab")); \
150 strtab = SHDR ## B (elf_findsecbyname(elf, ".strtab")); \
151 /* runtime sections */ \
152 dynsym = SHDR ## B (elf_findsecbyname(elf, ".dynsym")); \
153 dynstr = SHDR ## B (elf_findsecbyname(elf, ".dynstr")); \
154 if (symtab && dynsym) { \
155 *sym = (void*)((EGET(symtab->sh_size) > EGET(dynsym->sh_size)) ? symtab : dynsym); \
156 } else { \
157 *sym = (void*)(symtab ? symtab : dynsym); \
158 } \
159 if (strtab && dynstr) { \
160 *tab = (void*)((EGET(strtab->sh_size) > EGET(dynstr->sh_size)) ? strtab : dynstr); \
161 } else { \
162 *tab = (void*)(strtab ? strtab : dynstr); \
163 } \
164 }
165 GET_SYMTABS(32)
166 GET_SYMTABS(64)
167}
168
78static char *scanelf_file_pax(elfobj *elf, char *found_pax) 169static char *scanelf_file_pax(elfobj *elf, char *found_pax)
79{ 170{
80 static char *paxflags;
81 static char ret[7]; 171 static char ret[7];
82 unsigned long i, shown; 172 unsigned long i, shown;
83
84 173
85 if (!show_pax) return NULL; 174 if (!show_pax) return NULL;
86 175
87 shown = 0; 176 shown = 0;
88 memset(&ret, 0, sizeof(ret)); 177 memset(&ret, 0, sizeof(ret));
93 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 182 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
94 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 183 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
95 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 184 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
96 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ 185 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
97 continue; \ 186 continue; \
98 if (be_quiet && (EGET(phdr[i].p_flags) == 10240)) \ 187 if (fix_elf && setpax) { \
188 /* set the paxctl flags */ \
189 ESET(phdr[i].p_flags, setpax); \
190 } \
191 if (be_quiet && (EGET(phdr[i].p_flags) == (PF_NOEMUTRAMP | PF_NORANDEXEC))) \
99 continue; \ 192 continue; \
100 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ 193 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
101 *found_pax = 1; \ 194 *found_pax = 1; \
102 ++shown; \ 195 ++shown; \
103 break; \ 196 break; \
105 } 198 }
106 SHOW_PAX(32) 199 SHOW_PAX(32)
107 SHOW_PAX(64) 200 SHOW_PAX(64)
108 } 201 }
109 202
203
204 if (fix_elf && setpax) {
205 /* set the chpax settings */
206 if (elf->elf_class == ELFCLASS32) {
207 if (EHDR32(elf->ehdr)->e_type == ET_DYN || EHDR32(elf->ehdr)->e_type == ET_EXEC)
208 ESET(EHDR32(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
209 } else {
210 if (EHDR64(elf->ehdr)->e_type == ET_DYN || EHDR64(elf->ehdr)->e_type == ET_EXEC)
211 ESET(EHDR64(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
212 }
213 }
214
110 /* fall back to EI_PAX if no PT_PAX was found */ 215 /* fall back to EI_PAX if no PT_PAX was found */
111 if (!*ret) { 216 if (!*ret) {
217 static char *paxflags;
112 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); 218 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
113 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) { 219 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) {
114 *found_pax = 1; 220 *found_pax = 1;
115 return paxflags; 221 return (be_wewy_wewy_quiet ? NULL : paxflags);
116 } 222 }
117 strncpy(ret, paxflags, sizeof(ret)); 223 strncpy(ret, paxflags, sizeof(ret));
118 // ++shown;
119 } 224 }
120 225
121 if (be_quiet && !shown) 226 if (be_wewy_wewy_quiet || (be_quiet && !shown))
122 return NULL;
123 return ret;
124
125}
126static char *scanelf_file_stack(elfobj *elf, char *found_stack, char *found_relro)
127{
128 static char ret[8] = "--- ---";
129 char *found;
130 unsigned long i, off, shown;
131
132 if (!show_stack) return NULL;
133
134 shown = 0;
135
136 if (elf->phdr) {
137#define SHOW_STACK(B) \
138 if (elf->elf_class == ELFCLASS ## B) { \
139 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
140 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
141 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
142 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
143 found = found_stack; \
144 off = 0; \
145 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
146 found = found_relro; \
147 off = 4; \
148 } else \
149 continue; \
150 if (be_quiet && !(EGET(phdr[i].p_flags) & PF_X)) \
151 continue; \
152 memcpy(ret+off, gnu_short_stack_flags(EGET(phdr[i].p_flags)), 3); \
153 *found = 1; \
154 ++shown; \
155 } \
156 }
157 SHOW_STACK(32)
158 SHOW_STACK(64)
159 }
160
161 if (be_quiet && !shown)
162 return NULL; 227 return NULL;
163 else 228 else
164 return ret; 229 return ret;
165} 230}
231
232static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
233{
234 static char ret[12];
235 char *found;
236 unsigned long i, shown, multi_stack, multi_relro, multi_load;
237 int max_pt_load;
238
239 if (!show_phdr) return NULL;
240
241 memcpy(ret, "--- --- ---\0", 12);
242
243 shown = 0;
244 multi_stack = multi_relro = multi_load = 0;
245 max_pt_load = elf_max_pt_load(elf);
246
247#define NOTE_GNU_STACK ".note.GNU-stack"
248#define SHOW_PHDR(B) \
249 if (elf->elf_class == ELFCLASS ## B) { \
250 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
251 Elf ## B ## _Off offset; \
252 uint32_t flags, check_flags; \
253 if (elf->phdr != NULL) { \
254 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
255 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
256 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
257 if (multi_stack++) \
258 warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
259 if (file_matches_list(elf->filename, qa_execstack)) \
260 continue; \
261 found = found_phdr; \
262 offset = 0; \
263 check_flags = PF_X; \
264 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
265 if (multi_relro++) \
266 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
267 found = found_relro; \
268 offset = 4; \
269 check_flags = PF_X; \
270 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
271 if (EGET(ehdr->e_type) == ET_DYN || EGET(ehdr->e_type) == ET_EXEC) \
272 if (multi_load++ > max_pt_load) \
273 warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
274 if (file_matches_list(elf->filename, qa_wx_load)) \
275 continue; \
276 found = found_load; \
277 offset = 8; \
278 check_flags = PF_W|PF_X; \
279 } else \
280 continue; \
281 flags = EGET(phdr[i].p_flags); \
282 if (be_quiet && ((flags & check_flags) != check_flags)) \
283 continue; \
284 if ((EGET(phdr[i].p_type) != PT_LOAD) && (fix_elf && ((flags & PF_X) != flags))) { \
285 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
286 ret[3] = ret[7] = '!'; \
287 flags = EGET(phdr[i].p_flags); \
288 } \
289 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
290 *found = 1; \
291 ++shown; \
292 } \
293 } else if (elf->shdr != NULL) { \
294 /* no program headers which means this is prob an object file */ \
295 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
296 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
297 char *str; \
298 if ((void*)strtbl > (void*)elf->data_end) \
299 goto skip_this_shdr##B; \
300 check_flags = SHF_WRITE|SHF_EXECINSTR; \
301 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
302 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
303 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
304 str = elf->data + offset; \
305 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
306 if (!strcmp(str, NOTE_GNU_STACK)) { \
307 if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \
308 flags = EGET(shdr[i].sh_flags); \
309 if (be_quiet && ((flags & check_flags) != check_flags)) \
310 continue; \
311 ++*found_phdr; \
312 shown = 1; \
313 if (flags & SHF_WRITE) ret[0] = 'W'; \
314 if (flags & SHF_ALLOC) ret[1] = 'A'; \
315 if (flags & SHF_EXECINSTR) ret[2] = 'X'; \
316 if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \
317 break; \
318 } \
319 } \
320 skip_this_shdr##B: \
321 if (!multi_stack) { \
322 if (file_matches_list(elf->filename, qa_execstack)) \
323 return NULL; \
324 *found_phdr = 1; \
325 shown = 1; \
326 memcpy(ret, "!WX", 3); \
327 } \
328 } \
329 }
330 SHOW_PHDR(32)
331 SHOW_PHDR(64)
332
333 if (be_wewy_wewy_quiet || (be_quiet && !shown))
334 return NULL;
335 else
336 return ret;
337}
338
339/*
340 * See if this ELF contains a DT_TEXTREL tag in any of its
341 * PT_DYNAMIC sections.
342 */
166static char *scanelf_file_textrel(elfobj *elf, char *found_textrel) 343static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
167{ 344{
168 static char ret[] = "TEXTREL"; 345 static const char *ret = "TEXTREL";
169 unsigned long i; 346 unsigned long i;
170 347
171 if (!show_textrel) return NULL; 348 if (!show_textrel && !show_textrels) return NULL;
349
350 if (file_matches_list(elf->filename, qa_textrels)) return NULL;
172 351
173 if (elf->phdr) { 352 if (elf->phdr) {
174#define SHOW_TEXTREL(B) \ 353#define SHOW_TEXTREL(B) \
175 if (elf->elf_class == ELFCLASS ## B) { \ 354 if (elf->elf_class == ELFCLASS ## B) { \
176 Elf ## B ## _Dyn *dyn; \ 355 Elf ## B ## _Dyn *dyn; \
177 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 356 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
178 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 357 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
179 Elf ## B ## _Off offset; \ 358 Elf ## B ## _Off offset; \
180 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 359 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
181 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 360 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
182 offset = EGET(phdr[i].p_offset); \ 361 offset = EGET(phdr[i].p_offset); \
183 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 362 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
184 dyn = DYN ## B (elf->data + offset); \ 363 dyn = DYN ## B (elf->data + offset); \
185 while (EGET(dyn->d_tag) != DT_NULL) { \ 364 while (EGET(dyn->d_tag) != DT_NULL) { \
186 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 365 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
187 *found_textrel = 1; \ 366 *found_textrel = 1; \
188 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ 367 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \
189 return ret; \ 368 return (be_wewy_wewy_quiet ? NULL : ret); \
190 } \ 369 } \
191 ++dyn; \ 370 ++dyn; \
192 } \ 371 } \
193 } } 372 } }
194 SHOW_TEXTREL(32) 373 SHOW_TEXTREL(32)
195 SHOW_TEXTREL(64) 374 SHOW_TEXTREL(64)
196 } 375 }
197 376
198 if (be_quiet) 377 if (be_quiet || be_wewy_wewy_quiet)
199 return NULL; 378 return NULL;
200 else 379 else
201 return (char *)" - "; 380 return " - ";
381}
382
383/*
384 * Scan the .text section to see if there are any relocations in it.
385 * Should rewrite this to check PT_LOAD sections that are marked
386 * Executable rather than the section named '.text'.
387 */
388static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
389{
390 unsigned long s, r, rmax;
391 void *symtab_void, *strtab_void, *text_void;
392
393 if (!show_textrels) return NULL;
394
395 /* don't search for TEXTREL's if the ELF doesn't have any */
396 if (!*found_textrel) scanelf_file_textrel(elf, found_textrel);
397 if (!*found_textrel) return NULL;
398
399 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
400 text_void = elf_findsecbyname(elf, ".text");
401
402 if (symtab_void && strtab_void && text_void && elf->shdr) {
403#define SHOW_TEXTRELS(B) \
404 if (elf->elf_class == ELFCLASS ## B) { \
405 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
406 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
407 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
408 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
409 Elf ## B ## _Shdr *text = SHDR ## B (text_void); \
410 Elf ## B ## _Addr vaddr = EGET(text->sh_addr); \
411 uint ## B ## _t memsz = EGET(text->sh_size); \
412 Elf ## B ## _Rel *rel; \
413 Elf ## B ## _Rela *rela; \
414 /* search the section headers for relocations */ \
415 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \
416 uint32_t sh_type = EGET(shdr[s].sh_type); \
417 if (sh_type == SHT_REL) { \
418 rel = REL ## B (elf->data + EGET(shdr[s].sh_offset)); \
419 rela = NULL; \
420 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \
421 } else if (sh_type == SHT_RELA) { \
422 rel = NULL; \
423 rela = RELA ## B (elf->data + EGET(shdr[s].sh_offset)); \
424 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \
425 } else \
426 continue; \
427 /* now see if any of the relocs are in the .text */ \
428 for (r = 0; r < rmax; ++r) { \
429 unsigned long sym_max; \
430 Elf ## B ## _Addr offset_tmp; \
431 Elf ## B ## _Sym *func; \
432 Elf ## B ## _Sym *sym; \
433 Elf ## B ## _Addr r_offset; \
434 uint ## B ## _t r_info; \
435 if (sh_type == SHT_REL) { \
436 r_offset = EGET(rel[r].r_offset); \
437 r_info = EGET(rel[r].r_info); \
438 } else { \
439 r_offset = EGET(rela[r].r_offset); \
440 r_info = EGET(rela[r].r_info); \
441 } \
442 /* make sure this relocation is inside of the .text */ \
443 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \
444 if (be_verbose <= 2) continue; \
445 } else \
446 *found_textrels = 1; \
447 /* locate this relocation symbol name */ \
448 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
449 if ((void*)sym > (void*)elf->data_end) { \
450 warn("%s: corrupt ELF symbol", elf->filename); \
451 continue; \
452 } \
453 sym_max = ELF ## B ## _R_SYM(r_info); \
454 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
455 sym += sym_max; \
456 else \
457 sym = NULL; \
458 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
459 /* show the raw details about this reloc */ \
460 printf(" %s: ", elf->base_filename); \
461 if (sym && sym->st_name) \
462 printf("%s", (char*)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name))); \
463 else \
464 printf("(memory/data?)"); \
465 printf(" [0x%lX]", (unsigned long)r_offset); \
466 /* now try to find the closest symbol that this rel is probably in */ \
467 sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
468 func = NULL; \
469 offset_tmp = 0; \
470 while (sym_max--) { \
471 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \
472 func = sym; \
473 offset_tmp = EGET(sym->st_value); \
474 } \
475 ++sym; \
476 } \
477 printf(" in "); \
478 if (func && func->st_name) { \
479 const char *func_name = elf->data + EGET(strtab->sh_offset) + EGET(func->st_name); \
480 if (r_offset > EGET(func->st_size)) \
481 printf("(optimized out: previous %s)", func_name); \
482 else \
483 printf("%s", func_name); \
484 } else \
485 printf("(optimized out)"); \
486 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
487 if (be_verbose && has_objdump) { \
488 Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \
489 char *sysbuf; \
490 size_t syslen; \
491 const char sysfmt[] = "objdump -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \
492 syslen = sizeof(sysfmt) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \
493 sysbuf = xmalloc(syslen); \
494 if (end_addr < r_offset) \
495 /* not uncommon when things are optimized out */ \
496 end_addr = r_offset + 0x100; \
497 snprintf(sysbuf, syslen, sysfmt, \
498 (unsigned long)offset_tmp, \
499 (unsigned long)end_addr, \
500 elf->filename, \
501 (unsigned long)r_offset); \
502 fflush(stdout); \
503 system(sysbuf); \
504 fflush(stdout); \
505 free(sysbuf); \
506 } \
507 } \
508 } }
509 SHOW_TEXTRELS(32)
510 SHOW_TEXTRELS(64)
511 }
512 if (!*found_textrels)
513 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
514
515 return NULL;
516}
517
518static void rpath_security_checks(elfobj *, char *, const char *);
519static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
520{
521 struct stat st;
522 switch (*item) {
523 case '/': break;
524 case '.':
525 warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename);
526 break;
527 case ':':
528 case '\0':
529 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
530 break;
531 case '$':
532 if (fstat(elf->fd, &st) != -1)
533 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
534 warnf("Security problem with %s='%s' in %s with mode set of %o",
535 dt_type, item, elf->filename, (unsigned int) st.st_mode & 07777);
536 break;
537 default:
538 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
539 break;
540 }
202} 541}
203static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) 542static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
204{ 543{
205 unsigned long i, s; 544 unsigned long i, s;
206 char *rpath, *runpath, **r; 545 char *rpath, *runpath, **r;
221 Elf ## B ## _Off offset; \ 560 Elf ## B ## _Off offset; \
222 Elf ## B ## _Xword word; \ 561 Elf ## B ## _Xword word; \
223 /* Scan all the program headers */ \ 562 /* Scan all the program headers */ \
224 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 563 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
225 /* Just scan dynamic headers */ \ 564 /* Just scan dynamic headers */ \
226 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 565 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
227 offset = EGET(phdr[i].p_offset); \ 566 offset = EGET(phdr[i].p_offset); \
228 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 567 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
229 /* Just scan dynamic RPATH/RUNPATH headers */ \ 568 /* Just scan dynamic RPATH/RUNPATH headers */ \
230 dyn = DYN ## B (elf->data + offset); \ 569 dyn = DYN ## B (elf->data + offset); \
231 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \ 570 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \
240 /* Verify the memory is somewhat sane */ \ 579 /* Verify the memory is somewhat sane */ \
241 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 580 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
242 if (offset < (Elf ## B ## _Off)elf->len) { \ 581 if (offset < (Elf ## B ## _Off)elf->len) { \
243 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ 582 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
244 *r = (char*)(elf->data + offset); \ 583 *r = (char*)(elf->data + offset); \
584 /* cache the length in case we need to nuke this section later on */ \
585 if (fix_elf) \
586 offset = strlen(*r); \
245 /* If quiet, don't output paths in ld.so.conf */ \ 587 /* If quiet, don't output paths in ld.so.conf */ \
246 if (be_quiet) { \ 588 if (be_quiet) { \
247 size_t len; \ 589 size_t len; \
248 char *start, *end; \ 590 char *start, *end; \
249 for (s = 0; *r && ldpaths[s]; ++s) { \ 591 /* note that we only 'chop' off leading known paths. */ \
592 /* since *r is read-only memory, we can only move the ptr forward. */ \
593 start = *r; \
250 /* scan each path in : delimited list */ \ 594 /* scan each path in : delimited list */ \
251 start = *r; \ 595 while (start) { \
596 rpath_security_checks(elf, start, get_elfdtype(word)); \
252 end = strchr(start, ':'); \ 597 end = strchr(start, ':'); \
253 while ((start && ((end = strchr(start, ':')) != NULL)) || start) { \
254 len = (end ? abs(end - start) : strlen(start)); \ 598 len = (end ? abs(end - start) : strlen(start)); \
599 if (use_ldcache) \
600 for (s = 0; ldpaths[s]; ++s) \
255 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \ 601 if (!strncmp(ldpaths[s], start, len) && !ldpaths[s][len]) { \
256 *r = (end ? end + 1 : NULL); \ 602 *r = end; \
603 /* corner case ... if RPATH reads "/usr/lib:", we want \
604 * to show ':' rather than '' */ \
605 if (end && end[1] != '\0') \
606 (*r)++; \
257 break; \ 607 break; \
258 } \ 608 } \
609 if (!*r || !end) \
610 break; \
611 else \
259 start = (end ? start + len + 1 : NULL); \ 612 start = start + len + 1; \
260 } \
261 } \ 613 } \
262 } \ 614 } \
615 if (*r) { \
616 if (fix_elf > 2 || (fix_elf && **r == '\0')) { \
617 /* just nuke it */ \
618 nuke_it##B: \
619 memset(*r, 0x00, offset); \
620 *r = NULL; \
621 ESET(dyn->d_tag, DT_DEBUG); \
622 ESET(dyn->d_un.d_ptr, 0); \
623 } else if (fix_elf) { \
624 /* try to clean "bad" paths */ \
625 size_t len, tmpdir_len; \
626 char *start, *end; \
627 const char *tmpdir; \
628 start = *r; \
629 tmpdir = (getenv("TMPDIR") ? : "."); \
630 tmpdir_len = strlen(tmpdir); \
631 while (1) { \
632 end = strchr(start, ':'); \
633 if (start == end) { \
634 eat_this_path##B: \
635 len = strlen(end); \
636 memmove(start, end+1, len); \
637 start[len-1] = '\0'; \
638 end = start - 1; \
639 } else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \
640 if (!end) { \
641 if (start == *r) \
642 goto nuke_it##B; \
643 *--start = '\0'; \
644 } else \
645 goto eat_this_path##B; \
646 } \
647 if (!end) \
648 break; \
649 start = end + 1; \
650 } \
651 if (**r == '\0') \
652 goto nuke_it##B; \
653 } \
654 if (*r) \
263 if (*r) *found_rpath = 1; \ 655 *found_rpath = 1; \
656 } \
264 } \ 657 } \
265 ++dyn; \ 658 ++dyn; \
266 } \ 659 } \
267 } } 660 } }
268 SHOW_RPATH(32) 661 SHOW_RPATH(32)
269 SHOW_RPATH(64) 662 SHOW_RPATH(64)
270 } 663 }
664
665 if (be_wewy_wewy_quiet) return;
271 666
272 if (rpath && runpath) { 667 if (rpath && runpath) {
273 if (!strcmp(rpath, runpath)) { 668 if (!strcmp(rpath, runpath)) {
274 xstrcat(ret, runpath, ret_len); 669 xstrcat(ret, runpath, ret_len);
275 } else { 670 } else {
283 } else if (rpath || runpath) 678 } else if (rpath || runpath)
284 xstrcat(ret, (runpath ? runpath : rpath), ret_len); 679 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
285 else if (!be_quiet) 680 else if (!be_quiet)
286 xstrcat(ret, " - ", ret_len); 681 xstrcat(ret, " - ", ret_len);
287} 682}
683
684#define LDSO_CACHE_MAGIC "ld.so-"
685#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
686#define LDSO_CACHE_VER "1.7.0"
687#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
688#define FLAG_ANY -1
689#define FLAG_TYPE_MASK 0x00ff
690#define FLAG_LIBC4 0x0000
691#define FLAG_ELF 0x0001
692#define FLAG_ELF_LIBC5 0x0002
693#define FLAG_ELF_LIBC6 0x0003
694#define FLAG_REQUIRED_MASK 0xff00
695#define FLAG_SPARC_LIB64 0x0100
696#define FLAG_IA64_LIB64 0x0200
697#define FLAG_X8664_LIB64 0x0300
698#define FLAG_S390_LIB64 0x0400
699#define FLAG_POWERPC_LIB64 0x0500
700#define FLAG_MIPS64_LIBN32 0x0600
701#define FLAG_MIPS64_LIBN64 0x0700
702
703static char *lookup_cache_lib(elfobj *, char *);
704
705#if defined(__GLIBC__) || defined(__UCLIBC__)
706
707static char *lookup_cache_lib(elfobj *elf, char *fname)
708{
709 int fd = 0;
710 char *strs;
711 static char buf[__PAX_UTILS_PATH_MAX] = "";
712 const char *cachefile = "/etc/ld.so.cache";
713 struct stat st;
714
715 typedef struct {
716 char magic[LDSO_CACHE_MAGIC_LEN];
717 char version[LDSO_CACHE_VER_LEN];
718 int nlibs;
719 } header_t;
720 header_t *header;
721
722 typedef struct {
723 int flags;
724 int sooffset;
725 int liboffset;
726 } libentry_t;
727 libentry_t *libent;
728
729 if (fname == NULL)
730 return NULL;
731
732 if (ldcache == 0) {
733 if (stat(cachefile, &st) || (fd = open(cachefile, O_RDONLY)) == -1)
734 return NULL;
735
736 /* cache these values so we only map/unmap the cache file once */
737 ldcache_size = st.st_size;
738 ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
739
740 close(fd);
741
742 if (ldcache == (caddr_t)-1) {
743 ldcache = 0;
744 return NULL;
745 }
746
747 if (memcmp(((header_t *) ldcache)->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN))
748 return NULL;
749 if (memcmp (((header_t *) ldcache)->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
750 return NULL;
751 }
752
753 header = (header_t *) ldcache;
754 libent = (libentry_t *) (ldcache + sizeof(header_t));
755 strs = (char *) &libent[header->nlibs];
756
757 for (fd = 0; fd < header->nlibs; fd++) {
758 /* this should be more fine grained, but for now we assume that
759 * diff arches will not be cached together. and we ignore the
760 * the different multilib mips cases. */
761 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
762 continue;
763 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
764 continue;
765
766 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
767 continue;
768 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
769 }
770 return buf;
771}
772#elif defined(__NetBSD__)
773static char *lookup_cache_lib(elfobj *elf, char *fname)
774{
775 static char buf[__PAX_UTILS_PATH_MAX] = "";
776 static struct stat st;
777
778 char **ldpath;
779 for (ldpath = ldpaths; *ldpath != NULL; ldpath++) {
780 if ((unsigned) snprintf(buf, sizeof(buf), "%s/%s", *ldpath, fname) >= sizeof(buf))
781 continue; /* if the pathname is too long, or something went wrong, ignore */
782
783 if (stat(buf, &st) != 0)
784 continue; /* if the lib doesn't exist in *ldpath, look further */
785
786 /* NetBSD doesn't actually do sanity checks, it just loads the file
787 * and if that doesn't work, continues looking in other directories.
788 * This cannot easily be safely emulated, unfortunately. For now,
789 * just assume that if it exists, it's a valid library. */
790
791 return buf;
792 }
793
794 /* not found in any path */
795 return NULL;
796}
797#else
798#warning Cache support not implemented for your target
799static char *lookup_cache_lib(elfobj *elf, char *fname)
800{
801 return NULL;
802}
803#endif
804
288static void scanelf_file_needed(elfobj *elf, char *found_needed, char **ret, size_t *ret_len) 805static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
289{ 806{
290 unsigned long i; 807 unsigned long i;
291 char *needed; 808 char *needed;
292 void *strtbl_void; 809 void *strtbl_void;
810 char *p;
293 811
294 if (!show_needed) return; 812 if ((op==0 && !show_needed) || (op==1 && !find_lib)) return NULL;
295 813
296 strtbl_void = elf_findsecbyname(elf, ".dynstr"); 814 strtbl_void = elf_findsecbyname(elf, ".dynstr");
297 815
298 if (elf->phdr && strtbl_void) { 816 if (elf->phdr && strtbl_void) {
299#define SHOW_NEEDED(B) \ 817#define SHOW_NEEDED(B) \
302 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 820 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
303 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 821 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
304 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 822 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
305 Elf ## B ## _Off offset; \ 823 Elf ## B ## _Off offset; \
306 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 824 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
307 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 825 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
308 offset = EGET(phdr[i].p_offset); \ 826 offset = EGET(phdr[i].p_offset); \
309 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 827 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
310 dyn = DYN ## B (elf->data + offset); \ 828 dyn = DYN ## B (elf->data + offset); \
311 while (EGET(dyn->d_tag) != DT_NULL) { \ 829 while (EGET(dyn->d_tag) != DT_NULL) { \
312 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 830 if (EGET(dyn->d_tag) == DT_NEEDED) { \
314 if (offset >= (Elf ## B ## _Off)elf->len) { \ 832 if (offset >= (Elf ## B ## _Off)elf->len) { \
315 ++dyn; \ 833 ++dyn; \
316 continue; \ 834 continue; \
317 } \ 835 } \
318 needed = (char*)(elf->data + offset); \ 836 needed = (char*)(elf->data + offset); \
837 if (op == 0) { \
838 if (!be_wewy_wewy_quiet) { \
319 if (*found_needed) xchrcat(ret, ',', ret_len); \ 839 if (*found_needed) xchrcat(ret, ',', ret_len); \
840 if (use_ldcache) \
841 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
842 needed = p; \
320 xstrcat(ret, needed, ret_len); \ 843 xstrcat(ret, needed, ret_len); \
844 } \
321 *found_needed = 1; \ 845 *found_needed = 1; \
846 } else { \
847 if (!strncmp(find_lib, needed, strlen( !g_match ? needed : find_lib))) { \
848 *found_lib = 1; \
849 return (be_wewy_wewy_quiet ? NULL : needed); \
850 } \
851 } \
322 } \ 852 } \
323 ++dyn; \ 853 ++dyn; \
324 } \ 854 } \
325 } } 855 } }
326 SHOW_NEEDED(32) 856 SHOW_NEEDED(32)
327 SHOW_NEEDED(64) 857 SHOW_NEEDED(64)
858 if (op == 0 && !*found_needed && be_verbose)
859 warn("ELF lacks DT_NEEDED sections: %s", elf->filename);
328 } 860 }
861
862 return NULL;
329} 863}
330static char *scanelf_file_interp(elfobj *elf, char *found_interp) 864static char *scanelf_file_interp(elfobj *elf, char *found_interp)
331{ 865{
332 void *strtbl_void; 866 void *strtbl_void;
333 867
338 if (strtbl_void) { 872 if (strtbl_void) {
339#define SHOW_INTERP(B) \ 873#define SHOW_INTERP(B) \
340 if (elf->elf_class == ELFCLASS ## B) { \ 874 if (elf->elf_class == ELFCLASS ## B) { \
341 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 875 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
342 *found_interp = 1; \ 876 *found_interp = 1; \
343 return elf->data + EGET(strtbl->sh_offset); \ 877 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \
344 } 878 }
345 SHOW_INTERP(32) 879 SHOW_INTERP(32)
346 SHOW_INTERP(64) 880 SHOW_INTERP(64)
347 } 881 }
348 return NULL; 882 return NULL;
349} 883}
350static char *scanelf_file_bind(elfobj *elf, char *found_bind) 884static char *scanelf_file_bind(elfobj *elf, char *found_bind)
351{ 885{
352 unsigned long i; 886 unsigned long i;
353 struct stat s; 887 struct stat s;
888 char dynamic = 0;
354 889
355 if (!show_bind) return NULL; 890 if (!show_bind) return NULL;
356 if (!elf->phdr) return NULL; 891 if (!elf->phdr) return NULL;
357 892
358#define SHOW_BIND(B) \ 893#define SHOW_BIND(B) \
360 Elf ## B ## _Dyn *dyn; \ 895 Elf ## B ## _Dyn *dyn; \
361 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 896 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
362 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 897 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
363 Elf ## B ## _Off offset; \ 898 Elf ## B ## _Off offset; \
364 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 899 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
365 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 900 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
901 dynamic = 1; \
366 offset = EGET(phdr[i].p_offset); \ 902 offset = EGET(phdr[i].p_offset); \
367 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 903 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
368 dyn = DYN ## B (elf->data + offset); \ 904 dyn = DYN ## B (elf->data + offset); \
369 while (EGET(dyn->d_tag) != DT_NULL) { \ 905 while (EGET(dyn->d_tag) != DT_NULL) { \
370 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 906 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
371 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \ 907 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \
372 { \ 908 { \
373 if (be_quiet) return NULL; \ 909 if (be_quiet) return NULL; \
374 *found_bind = 1; \ 910 *found_bind = 1; \
375 return (char *) "NOW"; \ 911 return (char *)(be_wewy_wewy_quiet ? NULL : "NOW"); \
376 } \ 912 } \
377 ++dyn; \ 913 ++dyn; \
378 } \ 914 } \
379 } \ 915 } \
380 } 916 }
381 SHOW_BIND(32) 917 SHOW_BIND(32)
382 SHOW_BIND(64) 918 SHOW_BIND(64)
383 919
920 if (be_wewy_wewy_quiet) return NULL;
921
922 /* don't output anything if quiet mode and the ELF is static or not setuid */
384 if (be_quiet && !fstat(elf->fd, &s) && !(s.st_mode & S_ISUID || s.st_mode & S_ISGID)) { 923 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) {
385 return NULL; 924 return NULL;
386 } else { 925 } else {
387 *found_bind = 1; 926 *found_bind = 1;
388 return (char *) "LAZY"; 927 return (char *) (dynamic ? "LAZY" : "STATIC");
389 } 928 }
390} 929}
391static char *scanelf_file_sym(elfobj *elf, char *found_sym, const char *filename) 930static char *scanelf_file_soname(elfobj *elf, char *found_soname)
392{ 931{
393 unsigned long i; 932 unsigned long i;
933 char *soname;
934 void *strtbl_void;
935
936 if (!show_soname) return NULL;
937
938 strtbl_void = elf_findsecbyname(elf, ".dynstr");
939
940 if (elf->phdr && strtbl_void) {
941#define SHOW_SONAME(B) \
942 if (elf->elf_class == ELFCLASS ## B) { \
943 Elf ## B ## _Dyn *dyn; \
944 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
945 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
946 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
947 Elf ## B ## _Off offset; \
948 /* only look for soname in shared objects */ \
949 if (EGET(ehdr->e_type) != ET_DYN) \
950 return NULL; \
951 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
952 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
953 offset = EGET(phdr[i].p_offset); \
954 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
955 dyn = DYN ## B (elf->data + offset); \
956 while (EGET(dyn->d_tag) != DT_NULL) { \
957 if (EGET(dyn->d_tag) == DT_SONAME) { \
958 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
959 if (offset >= (Elf ## B ## _Off)elf->len) { \
960 ++dyn; \
961 continue; \
962 } \
963 soname = (char*)(elf->data + offset); \
964 *found_soname = 1; \
965 return (be_wewy_wewy_quiet ? NULL : soname); \
966 } \
967 ++dyn; \
968 } \
969 } }
970 SHOW_SONAME(32)
971 SHOW_SONAME(64)
972 }
973
974 return NULL;
975}
976
977static char *scanelf_file_sym(elfobj *elf, char *found_sym)
978{
979 unsigned long i;
980 char *ret;
394 void *symtab_void, *strtab_void; 981 void *symtab_void, *strtab_void;
395 982
396 if (!find_sym) return NULL; 983 if (!find_sym) return NULL;
984 ret = find_sym;
397 985
398 /* debug sections */ 986 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
399 symtab_void = elf_findsecbyname(elf, ".symtab");
400 strtab_void = elf_findsecbyname(elf, ".strtab");
401 /* fall back to runtime sections */
402 if (!symtab_void || !strtab_void) {
403 symtab_void = elf_findsecbyname(elf, ".dynsym");
404 strtab_void = elf_findsecbyname(elf, ".dynstr");
405 }
406 987
407 if (symtab_void && strtab_void) { 988 if (symtab_void && strtab_void) {
408 char *base, *basemem;
409 basemem = xstrdup(filename);
410 base = basename(basemem);
411#define FIND_SYM(B) \ 989#define FIND_SYM(B) \
412 if (elf->elf_class == ELFCLASS ## B) { \ 990 if (elf->elf_class == ELFCLASS ## B) { \
413 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 991 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
414 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 992 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
415 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 993 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \
416 unsigned long cnt = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 994 unsigned long cnt = EGET(symtab->sh_entsize); \
417 char *symname; \ 995 char *symname; \
996 if (cnt) \
997 cnt = EGET(symtab->sh_size) / cnt; \
418 for (i = 0; i < cnt; ++i) { \ 998 for (i = 0; i < cnt; ++i) { \
419 if (sym->st_name) { \ 999 if (sym->st_name) { \
1000 /* make sure the symbol name is in acceptable memory range */ \
420 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 1001 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
421 if (*find_sym == '*') { \ 1002 if ((void*)symname > (void*)elf->data_end) { \
1003 warnf("%s: corrupt ELF symbols", elf->filename); \
1004 ++sym; \
1005 continue; \
1006 } \
1007 /* debug display ... show all symbols and some extra info */ \
1008 if (g_match ? rematch(ret, symname, REG_EXTENDED) == 0 : *ret == '*') { \
422 printf("%s(%s) %5lX %15s %s\n", \ 1009 printf("%s(%s) %5lX %15s %s %s\n", \
423 ((*found_sym == 0) ? "\n\t" : "\t"), \ 1010 ((*found_sym == 0) ? "\n\t" : "\t"), \
424 base, \ 1011 elf->base_filename, \
425 (long)sym->st_size, \ 1012 (unsigned long)sym->st_size, \
426 (char *)get_elfstttype(sym->st_info), \ 1013 get_elfstttype(sym->st_info), \
427 symname); \ 1014 sym->st_shndx == SHN_UNDEF ? "U" : "D", symname); \
428 *found_sym = 1; \ 1015 *found_sym = 1; \
429 } else if ((strcmp(find_sym, symname) == 0) || \ 1016 } else { \
430 (strcmp(symname, versioned_symname) == 0)) \ 1017 /* allow the user to specify a comma delimited list of symbols to search for */ \
1018 char *this_sym, *this_sym_ver, *next_sym; \
1019 this_sym = ret; \
1020 this_sym_ver = versioned_symname; \
1021 do { \
1022 next_sym = strchr(this_sym, ','); \
1023 if (next_sym == NULL) \
1024 next_sym = this_sym + strlen(this_sym); \
1025 /* do we want a defined symbol ? */ \
1026 if (*this_sym == '+') { \
1027 if (sym->st_shndx == SHN_UNDEF) \
1028 goto skip_this_sym##B; \
1029 ++this_sym; \
1030 ++this_sym_ver; \
1031 /* do we want an undefined symbol ? */ \
1032 } else if (*this_sym == '-') { \
1033 if (sym->st_shndx != SHN_UNDEF) \
1034 goto skip_this_sym##B; \
1035 ++this_sym; \
1036 ++this_sym_ver; \
1037 } \
1038 /* ok, lets compare the name now */ \
1039 if ((strncmp(this_sym, symname, (next_sym-this_sym)) == 0 && symname[next_sym-this_sym] == '\0') || \
1040 (strncmp(this_sym_ver, symname, strlen(this_sym_ver)) == 0)) { \
1041 if (be_semi_verbose) { \
1042 char buf[126]; \
1043 snprintf(buf, sizeof(buf), "%lX %s %s", \
1044 (unsigned long)sym->st_size, get_elfstttype(sym->st_info), this_sym); \
1045 ret = buf; \
1046 } else \
1047 ret = this_sym; \
431 (*found_sym)++; \ 1048 (*found_sym)++; \
1049 goto break_out; \
1050 } \
1051 skip_this_sym##B: this_sym = next_sym + 1; \
1052 } while (*next_sym != '\0'); \
1053 } \
432 } \ 1054 } \
433 ++sym; \ 1055 ++sym; \
434 } } 1056 } }
435 FIND_SYM(32) 1057 FIND_SYM(32)
436 FIND_SYM(64) 1058 FIND_SYM(64)
437 free(basemem);
438 } 1059 }
1060
1061break_out:
1062 if (be_wewy_wewy_quiet) return NULL;
1063
439 if (*find_sym != '*' && *found_sym) 1064 if (*find_sym != '*' && *found_sym)
440 return find_sym; 1065 return ret;
441 if (be_quiet) 1066 if (be_quiet)
442 return NULL; 1067 return NULL;
443 else 1068 else
444 return (char *)" - "; 1069 return (char *)" - ";
445} 1070}
1071
1072
1073static char *scanelf_file_sections(elfobj *elf, char *found_section)
1074{
1075 if (!find_section)
1076 return NULL;
1077
1078#define FIND_SECTION(B) \
1079 if (elf->elf_class == ELFCLASS ## B) { \
1080 int invert; \
1081 Elf ## B ## _Shdr *section; \
1082 invert = (*find_section == '!' ? 1 : 0); \
1083 section = SHDR ## B (elf_findsecbyname(elf, find_section+invert)); \
1084 if ((section == NULL && invert) || (section != NULL && !invert)) \
1085 *found_section = 1; \
1086 }
1087 FIND_SECTION(32)
1088 FIND_SECTION(64)
1089
1090 if (be_wewy_wewy_quiet)
1091 return NULL;
1092
1093 if (*found_section)
1094 return find_section;
1095
1096 if (be_quiet)
1097 return NULL;
1098 else
1099 return (char *)" - ";
1100}
1101
446/* scan an elf file and show all the fun stuff */ 1102/* scan an elf file and show all the fun stuff */
447// #define prints(str) fputs(str, stdout)
448#define prints(str) write(fileno(stdout), str, strlen(str)) 1103#define prints(str) write(fileno(stdout), str, strlen(str))
449static void scanelf_file(const char *filename) 1104static int scanelf_elfobj(elfobj *elf)
450{ 1105{
451 unsigned long i; 1106 unsigned long i;
452 char found_pax, found_stack, found_relro, found_textrel, 1107 char found_pax, found_phdr, found_relro, found_load, found_textrel,
453 found_rpath, found_needed, found_interp, found_bind, 1108 found_rpath, found_needed, found_interp, found_bind, found_soname,
454 found_sym, found_file; 1109 found_sym, found_lib, found_file, found_textrels, found_section;
455 elfobj *elf;
456 struct stat st;
457 static char *out_buffer = NULL; 1110 static char *out_buffer = NULL;
458 static size_t out_len; 1111 static size_t out_len;
459 1112
460 /* make sure 'filename' exists */
461 if (lstat(filename, &st) == -1) {
462 if (be_verbose > 2) printf("%s: does not exist\n", filename);
463 return;
464 }
465 /* always handle regular files and handle symlinked files if no -y */
466 if (S_ISLNK(st.st_mode)) {
467 if (!scan_symlink) return;
468 stat(filename, &st);
469 }
470 if (!S_ISREG(st.st_mode)) {
471 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
472 return;
473 }
474
475 found_pax = found_stack = found_relro = found_textrel = \ 1113 found_pax = found_phdr = found_relro = found_load = found_textrel = \
476 found_rpath = found_needed = found_interp = found_bind = \ 1114 found_rpath = found_needed = found_interp = found_bind = found_soname = \
477 found_sym = found_file = 0; 1115 found_sym = found_lib = found_file = found_textrels = found_section = 0;
478 1116
479 /* verify this is real ELF */
480 if ((elf = readelf(filename)) == NULL) {
481 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
482 return;
483 }
484
485 if (be_verbose > 1) 1117 if (be_verbose > 2)
486 printf("%s: scanning file {%s,%s}\n", filename, 1118 printf("%s: scanning file {%s,%s}\n", elf->filename,
487 get_elfeitype(EI_CLASS, elf->elf_class), 1119 get_elfeitype(EI_CLASS, elf->elf_class),
488 get_elfeitype(EI_DATA, elf->data[EI_DATA])); 1120 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
489 else if (be_verbose) 1121 else if (be_verbose > 1)
490 printf("%s: scanning file\n", filename); 1122 printf("%s: scanning file\n", elf->filename);
491 1123
492 /* init output buffer */ 1124 /* init output buffer */
493 if (!out_buffer) { 1125 if (!out_buffer) {
494 out_len = sizeof(char) * 80; 1126 out_len = sizeof(char) * 80;
495 out_buffer = (char*)xmalloc(out_len); 1127 out_buffer = xmalloc(out_len);
496 } 1128 }
497 *out_buffer = '\0'; 1129 *out_buffer = '\0';
498 1130
499 /* show the header */ 1131 /* show the header */
500 if (!be_quiet && show_banner) { 1132 if (!be_quiet && show_banner) {
501 for (i = 0; out_format[i]; ++i) { 1133 for (i = 0; out_format[i]; ++i) {
502 if (out_format[i] != '%') continue; 1134 if (!IS_MODIFIER(out_format[i])) continue;
503 1135
504 switch (out_format[++i]) { 1136 switch (out_format[++i]) {
1137 case '+': break;
505 case '%': break; 1138 case '%': break;
1139 case '#': break;
506 case 'F': 1140 case 'F':
507 case 'p': 1141 case 'p':
508 case 'f': prints("FILE "); found_file = 1; break; 1142 case 'f': prints("FILE "); found_file = 1; break;
509 case 'o': prints(" TYPE "); break; 1143 case 'o': prints(" TYPE "); break;
510 case 'x': prints(" PAX "); break; 1144 case 'x': prints(" PAX "); break;
511 case 'e': prints("STK/REL "); break; 1145 case 'e': prints("STK/REL/PTL "); break;
512 case 't': prints("TEXTREL "); break; 1146 case 't': prints("TEXTREL "); break;
513 case 'r': prints("RPATH "); break; 1147 case 'r': prints("RPATH "); break;
1148 case 'M': prints("CLASS "); break;
514 case 'n': prints("NEEDED "); break; 1149 case 'n': prints("NEEDED "); break;
515 case 'i': prints("INTERP "); break; 1150 case 'i': prints("INTERP "); break;
516 case 'b': prints("BIND "); break; 1151 case 'b': prints("BIND "); break;
1152 case 'S': prints("SONAME "); break;
517 case 's': prints("SYM "); break; 1153 case 's': prints("SYM "); break;
1154 case 'N': prints("LIB "); break;
1155 case 'T': prints("TEXTRELS "); break;
1156 case 'k': prints("SECTION "); break;
1157 case 'a': prints("ARCH "); break;
1158 case 'O': prints("PERM "); break;
1159 case 'D': prints("ENDIAN "); break;
1160 default: warnf("'%c' has no title ?", out_format[i]);
518 } 1161 }
519 } 1162 }
520 if (!found_file) prints("FILE "); 1163 if (!found_file) prints("FILE ");
521 prints("\n"); 1164 prints("\n");
522 found_file = 0; 1165 found_file = 0;
526 /* dump all the good stuff */ 1169 /* dump all the good stuff */
527 for (i = 0; out_format[i]; ++i) { 1170 for (i = 0; out_format[i]; ++i) {
528 const char *out; 1171 const char *out;
529 const char *tmp; 1172 const char *tmp;
530 1173
531 /* make sure we trim leading spaces in quiet mode */ 1174 if (!IS_MODIFIER(out_format[i])) {
532 if (be_quiet && *out_buffer == ' ' && !out_buffer[1])
533 *out_buffer = '\0';
534
535 if (out_format[i] != '%') {
536 xchrcat(&out_buffer, out_format[i], &out_len); 1175 xchrcat(&out_buffer, out_format[i], &out_len);
537 continue; 1176 continue;
538 } 1177 }
539 1178
540 out = NULL; 1179 out = NULL;
1180 be_wewy_wewy_quiet = (out_format[i] == '#');
1181 be_semi_verbose = (out_format[i] == '+');
541 switch (out_format[++i]) { 1182 switch (out_format[++i]) {
1183 case '+':
1184 case '%':
1185 case '#':
542 case '%': xchrcat(&out_buffer, '%', &out_len); break; 1186 xchrcat(&out_buffer, out_format[i], &out_len); break;
543 case 'F': found_file = 1; xstrcat(&out_buffer, filename, &out_len); break; 1187 case 'F':
1188 found_file = 1;
1189 if (be_wewy_wewy_quiet) break;
1190 xstrcat(&out_buffer, elf->filename, &out_len);
1191 break;
544 case 'p': 1192 case 'p':
545 found_file = 1; 1193 found_file = 1;
1194 if (be_wewy_wewy_quiet) break;
546 tmp = filename; 1195 tmp = elf->filename;
547 if (search_path) { 1196 if (search_path) {
548 ssize_t len_search = strlen(search_path); 1197 ssize_t len_search = strlen(search_path);
549 ssize_t len_file = strlen(filename); 1198 ssize_t len_file = strlen(elf->filename);
550 if (!strncmp(filename, search_path, len_search) && \ 1199 if (!strncmp(elf->filename, search_path, len_search) && \
551 len_file > len_search) 1200 len_file > len_search)
552 tmp += len_search; 1201 tmp += len_search;
553 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++; 1202 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++;
554 } 1203 }
555 xstrcat(&out_buffer, tmp, &out_len); 1204 xstrcat(&out_buffer, tmp, &out_len);
556 break; 1205 break;
557 case 'f': 1206 case 'f':
558 found_file = 1; 1207 found_file = 1;
1208 if (be_wewy_wewy_quiet) break;
559 tmp = strrchr(filename, '/'); 1209 tmp = strrchr(elf->filename, '/');
560 tmp = (tmp == NULL ? filename : tmp+1); 1210 tmp = (tmp == NULL ? elf->filename : tmp+1);
561 xstrcat(&out_buffer, tmp, &out_len); 1211 xstrcat(&out_buffer, tmp, &out_len);
562 break; 1212 break;
563 case 'o': out = get_elfetype(elf); break; 1213 case 'o': out = get_elfetype(elf); break;
564 case 'x': out = scanelf_file_pax(elf, &found_pax); break; 1214 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
565 case 'e': out = scanelf_file_stack(elf, &found_stack, &found_relro); break; 1215 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
566 case 't': out = scanelf_file_textrel(elf, &found_textrel); break; 1216 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
1217 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
567 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; 1218 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1219 case 'M': out = get_elfeitype(EI_CLASS, elf->data[EI_CLASS]); break;
1220 case 'D': out = get_endian(elf); break;
1221 case 'O': out = getstr_perms(elf->filename); break;
1222 case 'n':
568 case 'n': scanelf_file_needed(elf, &found_needed, &out_buffer, &out_len); break; 1223 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
569 case 'i': out = scanelf_file_interp(elf, &found_interp); break; 1224 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
570 case 'b': out = scanelf_file_bind(elf, &found_bind); break; 1225 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
1226 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
571 case 's': out = scanelf_file_sym(elf, &found_sym, filename); break; 1227 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1228 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1229 case 'a': out = get_elfemtype(elf); break;
1230 default: warnf("'%c' has no scan code?", out_format[i]);
572 } 1231 }
1232 if (out) {
1233 /* hack for comma delimited output like `scanelf -s sym1,sym2,sym3` */
1234 if (out_format[i] == 's' && (tmp=strchr(out,',')) != NULL)
1235 xstrncat(&out_buffer, out, &out_len, (tmp-out));
1236 else
573 if (out) xstrcat(&out_buffer, out, &out_len); 1237 xstrcat(&out_buffer, out, &out_len);
1238 }
574 } 1239 }
575 1240
576#define FOUND_SOMETHING() \ 1241#define FOUND_SOMETHING() \
577 (found_pax || found_stack || found_textrel || found_rpath || \ 1242 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
578 found_needed || found_interp || found_bind || found_sym) 1243 found_rpath || found_needed || found_interp || found_bind || \
1244 found_soname || found_sym || found_lib || found_textrels || found_section )
579 1245
580 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { 1246 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
581 xchrcat(&out_buffer, ' ', &out_len); 1247 xchrcat(&out_buffer, ' ', &out_len);
582 xstrcat(&out_buffer, filename, &out_len); 1248 xstrcat(&out_buffer, elf->filename, &out_len);
583 } 1249 }
584 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) 1250 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) {
585 puts(out_buffer); 1251 puts(out_buffer);
1252 fflush(stdout);
1253 }
586 1254
1255 return 0;
1256}
1257
1258/* scan a single elf */
1259static int scanelf_elf(const char *filename, int fd, size_t len)
1260{
1261 int ret = 1;
1262 elfobj *elf;
1263
1264 /* verify this is real ELF */
1265 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1266 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1267 return ret;
1268 }
1269 switch (match_bits) {
1270 case 32:
1271 if (elf->elf_class != ELFCLASS32)
1272 goto label_done;
1273 break;
1274 case 64:
1275 if (elf->elf_class != ELFCLASS64)
1276 goto label_done;
1277 break;
1278 default: break;
1279 }
1280 if (strlen(match_etypes)) {
1281 char sbuf[126];
1282 strncpy(sbuf, match_etypes, sizeof(sbuf));
1283 if (strchr(match_etypes, ',') != NULL) {
1284 char *p;
1285 while ((p = strrchr(sbuf, ',')) != NULL) {
1286 *p = 0;
1287 if (etype_lookup(p+1) == get_etype(elf))
1288 goto label_ret;
1289 }
1290 }
1291 if (etype_lookup(sbuf) != get_etype(elf))
1292 goto label_done;
1293 }
1294
1295label_ret:
1296 ret = scanelf_elfobj(elf);
1297
1298label_done:
587 unreadelf(elf); 1299 unreadelf(elf);
1300 return ret;
1301}
1302
1303/* scan an archive of elfs */
1304static int scanelf_archive(const char *filename, int fd, size_t len)
1305{
1306 archive_handle *ar;
1307 archive_member *m;
1308 char *ar_buffer;
1309 elfobj *elf;
1310
1311 ar = ar_open_fd(filename, fd);
1312 if (ar == NULL)
1313 return 1;
1314
1315 ar_buffer = (char*)mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1316 while ((m=ar_next(ar)) != NULL) {
1317 elf = readelf_buffer(m->name, ar_buffer+lseek(fd,0,SEEK_CUR), m->size);
1318 if (elf) {
1319 scanelf_elfobj(elf);
1320 unreadelf(elf);
1321 }
1322 }
1323 munmap(ar_buffer, len);
1324
1325 return 0;
1326}
1327/* scan a file which may be an elf or an archive or some other magical beast */
1328static int scanelf_file(const char *filename, const struct stat *st_cache)
1329{
1330 const struct stat *st = st_cache;
1331 struct stat symlink_st;
1332 int fd;
1333
1334 /* always handle regular files and handle symlinked files if no -y */
1335 if (S_ISLNK(st->st_mode)) {
1336 if (!scan_symlink) return 1;
1337 stat(filename, &symlink_st);
1338 st = &symlink_st;
1339 }
1340
1341 if (!S_ISREG(st->st_mode)) {
1342 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1343 return 1;
1344 }
1345
1346 if (match_perms) {
1347 if ((st->st_mode | match_perms) != st->st_mode)
1348 return 1;
1349 }
1350 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1351 return 1;
1352
1353 if (scanelf_elf(filename, fd, st->st_size) == 1 && scan_archives)
1354 /* if it isn't an ELF, maybe it's an .a archive */
1355 scanelf_archive(filename, fd, st->st_size);
1356
1357 close(fd);
1358 return 0;
588} 1359}
589 1360
590/* scan a directory for ET_EXEC files and print when we find one */ 1361/* scan a directory for ET_EXEC files and print when we find one */
591static void scanelf_dir(const char *path) 1362static int scanelf_dir(const char *path)
592{ 1363{
593 register DIR *dir; 1364 register DIR *dir;
594 register struct dirent *dentry; 1365 register struct dirent *dentry;
595 struct stat st_top, st; 1366 struct stat st_top, st;
596 char buf[_POSIX_PATH_MAX]; 1367 char buf[__PAX_UTILS_PATH_MAX];
597 size_t pathlen = 0, len = 0; 1368 size_t pathlen = 0, len = 0;
1369 int ret = 0;
598 1370
599 /* make sure path exists */ 1371 /* make sure path exists */
600 if (lstat(path, &st_top) == -1) { 1372 if (lstat(path, &st_top) == -1) {
601 if (be_verbose > 2) printf("%s: does not exist\n", path); 1373 if (be_verbose > 2) printf("%s: does not exist\n", path);
602 return; 1374 return 1;
603 } 1375 }
604 1376
605 /* ok, if it isn't a directory, assume we can open it */ 1377 /* ok, if it isn't a directory, assume we can open it */
606 if (!S_ISDIR(st_top.st_mode)) { 1378 if (!S_ISDIR(st_top.st_mode)) {
607 scanelf_file(path); 1379 return scanelf_file(path, &st_top);
608 return;
609 } 1380 }
610 1381
611 /* now scan the dir looking for fun stuff */ 1382 /* now scan the dir looking for fun stuff */
612 if ((dir = opendir(path)) == NULL) { 1383 if ((dir = opendir(path)) == NULL) {
613 warnf("could not opendir %s: %s", path, strerror(errno)); 1384 warnf("could not opendir %s: %s", path, strerror(errno));
614 return; 1385 return 1;
615 } 1386 }
616 if (be_verbose) printf("%s: scanning dir\n", path); 1387 if (be_verbose > 1) printf("%s: scanning dir\n", path);
617 1388
618 pathlen = strlen(path); 1389 pathlen = strlen(path);
619 while ((dentry = readdir(dir))) { 1390 while ((dentry = readdir(dir))) {
620 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1391 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
621 continue; 1392 continue;
622 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1393 len = (pathlen + 1 + strlen(dentry->d_name) + 1);
623 if (len >= sizeof(buf)) { 1394 if (len >= sizeof(buf)) {
624 warnf("Skipping '%s': len > sizeof(buf); %d > %d\n", path, (int)len, (int)sizeof(buf)); 1395 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
1396 (unsigned long)len, (unsigned long)sizeof(buf));
625 continue; 1397 continue;
626 } 1398 }
627 sprintf(buf, "%s/%s", path, dentry->d_name); 1399 snprintf(buf, sizeof(buf), "%s%s%s", path, (path[pathlen-1] == '/') ? "" : "/", dentry->d_name);
628 if (lstat(buf, &st) != -1) { 1400 if (lstat(buf, &st) != -1) {
629 if (S_ISREG(st.st_mode)) 1401 if (S_ISREG(st.st_mode))
630 scanelf_file(buf); 1402 ret = scanelf_file(buf, &st);
631 else if (dir_recurse && S_ISDIR(st.st_mode)) { 1403 else if (dir_recurse && S_ISDIR(st.st_mode)) {
632 if (dir_crossmount || (st_top.st_dev == st.st_dev)) 1404 if (dir_crossmount || (st_top.st_dev == st.st_dev))
633 scanelf_dir(buf); 1405 ret = scanelf_dir(buf);
634 } 1406 }
635 } 1407 }
636 } 1408 }
637 closedir(dir); 1409 closedir(dir);
1410 return ret;
638} 1411}
639 1412
640static int scanelf_from_file(char *filename) 1413static int scanelf_from_file(const char *filename)
641{ 1414{
642 FILE *fp = NULL; 1415 FILE *fp = NULL;
643 char *p; 1416 char *p;
644 char path[_POSIX_PATH_MAX]; 1417 char path[__PAX_UTILS_PATH_MAX];
1418 int ret = 0;
645 1419
646 if (((strcmp(filename, "-")) == 0) && (ttyname(0) == NULL)) 1420 if (strcmp(filename, "-") == 0)
647 fp = stdin; 1421 fp = stdin;
648 else if ((fp = fopen(filename, "r")) == NULL) 1422 else if ((fp = fopen(filename, "r")) == NULL)
649 return 1; 1423 return 1;
650 1424
651 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1425 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
652 if ((p = strchr(path, '\n')) != NULL) 1426 if ((p = strchr(path, '\n')) != NULL)
653 *p = 0; 1427 *p = 0;
654 search_path = path; 1428 search_path = path;
655 scanelf_dir(path); 1429 ret = scanelf_dir(path);
656 } 1430 }
657 if (fp != stdin) 1431 if (fp != stdin)
658 fclose(fp); 1432 fclose(fp);
659 return 0; 1433 return ret;
660} 1434}
661 1435
662static void load_ld_so_conf() 1436#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__)
1437
1438static int load_ld_cache_config(int i, const char *fname)
663{ 1439{
664 FILE *fp = NULL; 1440 FILE *fp = NULL;
665 char *p; 1441 char *p;
666 char path[_POSIX_PATH_MAX]; 1442 char path[__PAX_UTILS_PATH_MAX];
667 int i = 0;
668 1443
669 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1444 if (i + 1 == ARRAY_SIZE(ldpaths))
670 return; 1445 return i;
671 1446
1447 if ((fp = fopen(fname, "r")) == NULL)
1448 return i;
1449
672 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL) { 1450 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) {
673 if (*path != '/')
674 continue;
675
676 if ((p = strrchr(path, '\r')) != NULL) 1451 if ((p = strrchr(path, '\r')) != NULL)
677 *p = 0; 1452 *p = 0;
678 if ((p = strchr(path, '\n')) != NULL) 1453 if ((p = strchr(path, '\n')) != NULL)
679 *p = 0; 1454 *p = 0;
1455#ifdef __linux__
1456 /* recursive includes of the same file will make this segfault. */
1457 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) {
1458 glob64_t gl;
1459 size_t x;
1460 char gpath[__PAX_UTILS_PATH_MAX];
1461
1462 memset(gpath, 0, sizeof(gpath));
1463
1464 if (path[8] != '/')
1465 snprintf(gpath, sizeof(gpath), "/etc/%s", &path[8]);
1466 else
1467 strncpy(gpath, &path[8], sizeof(gpath));
1468
1469 if ((glob64(gpath, 0, NULL, &gl)) == 0) {
1470 for (x = 0; x < gl.gl_pathc; ++x) {
1471 /* try to avoid direct loops */
1472 if (strcmp(gl.gl_pathv[x], fname) == 0)
1473 continue;
1474 i = load_ld_cache_config(i, gl.gl_pathv[x]);
1475 if (i + 1 >= ARRAY_SIZE(ldpaths)) {
1476 globfree64(&gl);
1477 return i;
1478 }
1479 }
1480 globfree64 (&gl);
1481 continue;
1482 }
1483 }
1484#endif
1485 if (*path != '/')
1486 continue;
680 1487
681 ldpaths[i++] = xstrdup(path); 1488 ldpaths[i++] = xstrdup(path);
682 1489
683 if (i + 1 == sizeof(ldpaths) / sizeof(*ldpaths)) 1490 if (i + 1 == ARRAY_SIZE(ldpaths))
684 break; 1491 break;
685 } 1492 }
686 ldpaths[i] = NULL; 1493 ldpaths[i] = NULL;
687 1494
688 fclose(fp); 1495 fclose(fp);
1496 return i;
689} 1497}
1498
1499#elif defined(__FreeBSD__) || (__DragonFly__)
1500
1501static int load_ld_cache_config(int i, const char *fname)
1502{
1503 FILE *fp = NULL;
1504 char *b = NULL, *p;
1505 struct elfhints_hdr hdr;
1506
1507 if (i + 1 == ARRAY_SIZE(ldpaths))
1508 return i;
1509
1510 if ((fp = fopen(fname, "r")) == NULL)
1511 return i;
1512
1513 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) ||
1514 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 ||
1515 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1)
1516 {
1517 fclose(fp);
1518 return i;
1519 }
1520
1521 b = xmalloc(hdr.dirlistlen + 1);
1522 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) {
1523 fclose(fp);
1524 free(b);
1525 return i;
1526 }
1527
1528 while ((p = strsep(&b, ":"))) {
1529 if (*p == '\0') continue;
1530 ldpaths[i++] = xstrdup(p);
1531
1532 if (i + 1 == ARRAY_SIZE(ldpaths))
1533 break;
1534 }
1535 ldpaths[i] = NULL;
1536
1537 free(b);
1538 fclose(fp);
1539 return i;
1540}
1541
1542#else
1543
1544#warning Cache config support not implemented for your target
1545static int load_ld_cache_config(int i, const char *fname)
1546{
1547 memset(ldpaths, 0x00, sizeof(ldpaths));
1548}
1549
1550#endif
690 1551
691/* scan /etc/ld.so.conf for paths */ 1552/* scan /etc/ld.so.conf for paths */
692static void scanelf_ldpath() 1553static void scanelf_ldpath(void)
693{ 1554{
694 char scan_l, scan_ul, scan_ull; 1555 char scan_l, scan_ul, scan_ull;
695 int i = 0; 1556 int i = 0;
696 1557
697 if (!ldpaths[0]) 1558 if (!ldpaths[0])
711 if (!scan_ul) scanelf_dir("/usr/lib"); 1572 if (!scan_ul) scanelf_dir("/usr/lib");
712 if (!scan_ull) scanelf_dir("/usr/local/lib"); 1573 if (!scan_ull) scanelf_dir("/usr/local/lib");
713} 1574}
714 1575
715/* scan env PATH for paths */ 1576/* scan env PATH for paths */
716static void scanelf_envpath() 1577static void scanelf_envpath(void)
717{ 1578{
718 char *path, *p; 1579 char *path, *p;
719 1580
720 path = getenv("PATH"); 1581 path = getenv("PATH");
721 if (!path) 1582 if (!path)
729 1590
730 free(path); 1591 free(path);
731} 1592}
732 1593
733 1594
734 1595/* usage / invocation handling functions */ /* Free Flags: c d j u w C G H I J K P Q U W Y Z */
735/* usage / invocation handling functions */
736#define PARSE_FLAGS "plRmyxetrnibs:aqvF:f:o:BhV" 1596#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DO:BhV"
737#define a_argument required_argument 1597#define a_argument required_argument
738static struct option const long_opts[] = { 1598static struct option const long_opts[] = {
739 {"path", no_argument, NULL, 'p'}, 1599 {"path", no_argument, NULL, 'p'},
740 {"ldpath", no_argument, NULL, 'l'}, 1600 {"ldpath", no_argument, NULL, 'l'},
741 {"recursive", no_argument, NULL, 'R'}, 1601 {"recursive", no_argument, NULL, 'R'},
742 {"mount", no_argument, NULL, 'm'}, 1602 {"mount", no_argument, NULL, 'm'},
743 {"symlink", no_argument, NULL, 'y'}, 1603 {"symlink", no_argument, NULL, 'y'},
1604 {"archives", no_argument, NULL, 'A'},
1605 {"ldcache", no_argument, NULL, 'L'},
1606 {"fix", no_argument, NULL, 'X'},
1607 {"setpax", a_argument, NULL, 'z'},
744 {"pax", no_argument, NULL, 'x'}, 1608 {"pax", no_argument, NULL, 'x'},
745 {"header", no_argument, NULL, 'e'}, 1609 {"header", no_argument, NULL, 'e'},
746 {"textrel", no_argument, NULL, 't'}, 1610 {"textrel", no_argument, NULL, 't'},
747 {"rpath", no_argument, NULL, 'r'}, 1611 {"rpath", no_argument, NULL, 'r'},
748 {"needed", no_argument, NULL, 'n'}, 1612 {"needed", no_argument, NULL, 'n'},
749 {"interp", no_argument, NULL, 'i'}, 1613 {"interp", no_argument, NULL, 'i'},
750 {"bind", no_argument, NULL, 'b'}, 1614 {"bind", no_argument, NULL, 'b'},
1615 {"soname", no_argument, NULL, 'S'},
751 {"symbol", a_argument, NULL, 's'}, 1616 {"symbol", a_argument, NULL, 's'},
1617 {"section", a_argument, NULL, 'k'},
1618 {"lib", a_argument, NULL, 'N'},
1619 {"gmatch", no_argument, NULL, 'g'},
1620 {"textrels", no_argument, NULL, 'T'},
1621 {"etype", a_argument, NULL, 'E'},
1622 {"bits", a_argument, NULL, 'M'},
1623 {"endian", no_argument, NULL, 'D'},
1624 {"perms", a_argument, NULL, 'O'},
752 {"all", no_argument, NULL, 'a'}, 1625 {"all", no_argument, NULL, 'a'},
753 {"quiet", no_argument, NULL, 'q'}, 1626 {"quiet", no_argument, NULL, 'q'},
754 {"verbose", no_argument, NULL, 'v'}, 1627 {"verbose", no_argument, NULL, 'v'},
755 {"format", a_argument, NULL, 'F'}, 1628 {"format", a_argument, NULL, 'F'},
756 {"from", a_argument, NULL, 'f'}, 1629 {"from", a_argument, NULL, 'f'},
757 {"file", a_argument, NULL, 'o'}, 1630 {"file", a_argument, NULL, 'o'},
758 {"nobanner", no_argument, NULL, 'B'}, 1631 {"nobanner", no_argument, NULL, 'B'},
759 {"help", no_argument, NULL, 'h'}, 1632 {"help", no_argument, NULL, 'h'},
760 {"version", no_argument, NULL, 'V'}, 1633 {"version", no_argument, NULL, 'V'},
761 {NULL, no_argument, NULL, 0x0} 1634 {NULL, no_argument, NULL, 0x0}
762}; 1635};
764static const char *opts_help[] = { 1637static const char *opts_help[] = {
765 "Scan all directories in PATH environment", 1638 "Scan all directories in PATH environment",
766 "Scan all directories in /etc/ld.so.conf", 1639 "Scan all directories in /etc/ld.so.conf",
767 "Scan directories recursively", 1640 "Scan directories recursively",
768 "Don't recursively cross mount points", 1641 "Don't recursively cross mount points",
769 "Don't scan symlinks\n", 1642 "Don't scan symlinks",
1643 "Scan archives (.a files)",
1644 "Utilize ld.so.cache information (use with -r/-n)",
1645 "Try and 'fix' bad things (use with -r/-e)",
1646 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
770 "Print PaX markings", 1647 "Print PaX markings",
771 "Print GNU_STACK markings", 1648 "Print GNU_STACK/PT_LOAD markings",
772 "Print TEXTREL information", 1649 "Print TEXTREL information",
773 "Print RPATH information", 1650 "Print RPATH information",
774 "Print NEEDED information", 1651 "Print NEEDED information",
775 "Print INTERP information", 1652 "Print INTERP information",
776 "Print BIND information", 1653 "Print BIND information",
1654 "Print SONAME information",
777 "Find a specified symbol", 1655 "Find a specified symbol",
1656 "Find a specified section",
1657 "Find a specified library",
1658 "Use strncmp to match libraries. (use with -N)",
1659 "Locate cause of TEXTREL",
1660 "Print only ELF files matching etype ET_DYN,ET_EXEC ...",
1661 "Print only ELF files matching numeric bits",
1662 "Print Endianness",
1663 "Print only ELF files matching octal permissions",
778 "Print all scanned info (-x -e -t -r -n -i -b)\n", 1664 "Print all scanned info (-x -e -t -r -b)\n",
779 "Only output 'bad' things", 1665 "Only output 'bad' things",
780 "Be verbose (can be specified more than once)", 1666 "Be verbose (can be specified more than once)",
781 "Use specified format for output", 1667 "Use specified format for output",
782 "Read input stream from a filename", 1668 "Read input stream from a filename",
783 "Write output stream to a filename", 1669 "Write output stream to a filename",
790/* display usage and exit */ 1676/* display usage and exit */
791static void usage(int status) 1677static void usage(int status)
792{ 1678{
793 unsigned long i; 1679 unsigned long i;
794 printf("* Scan ELF binaries for stuff\n\n" 1680 printf("* Scan ELF binaries for stuff\n\n"
795 "Usage: %s [options] <dir1/file1> [dir2 dirN fileN ...]\n\n", argv0); 1681 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
796 printf("Options: -[%s]\n", PARSE_FLAGS); 1682 printf("Options: -[%s]\n", PARSE_FLAGS);
797 for (i = 0; long_opts[i].name; ++i) 1683 for (i = 0; long_opts[i].name; ++i)
798 if (long_opts[i].has_arg == no_argument) 1684 if (long_opts[i].has_arg == no_argument)
799 printf(" -%c, --%-13s* %s\n", long_opts[i].val, 1685 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
800 long_opts[i].name, opts_help[i]); 1686 long_opts[i].name, opts_help[i]);
801 else 1687 else
802 printf(" -%c, --%-6s <arg> * %s\n", long_opts[i].val, 1688 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
803 long_opts[i].name, opts_help[i]); 1689 long_opts[i].name, opts_help[i]);
804 1690
805 if (status != EXIT_SUCCESS) 1691 puts("\nFor more information, see the scanelf(1) manpage");
806 exit(status);
807
808 puts("\nThe format modifiers for the -F option are:");
809 puts(" %F Filename \t%x PaX Flags \t%e STACK/RELRO");
810 puts(" %t TEXTREL \t%r RPATH \t%n NEEDED");
811 puts(" %i INTERP \t%b BIND \t%s symbol");
812 puts(" %p filename (with search path removed)");
813 puts(" %f base filename");
814
815 exit(status); 1692 exit(status);
816} 1693}
817 1694
818/* parse command line arguments and preform needed actions */ 1695/* parse command line arguments and preform needed actions */
1696#define do_pax_state(option, flag) \
1697 if (islower(option)) { \
1698 flags &= ~PF_##flag; \
1699 flags |= PF_NO##flag; \
1700 } else { \
1701 flags &= ~PF_NO##flag; \
1702 flags |= PF_##flag; \
1703 }
819static void parseargs(int argc, char *argv[]) 1704static int parseargs(int argc, char *argv[])
820{ 1705{
821 int i; 1706 int i;
822 char *from_file = NULL; 1707 const char *from_file = NULL;
1708 int ret = 0;
823 1709
824 opterr = 0; 1710 opterr = 0;
825 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1711 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
826 switch (i) { 1712 switch (i) {
827 1713
828 case 'V': 1714 case 'V':
829 printf("%s compiled %s\n%s\n" 1715 printf("pax-utils-%s: %s compiled %s\n%s\n"
830 "%s written for Gentoo Linux by <solar and vapier @ gentoo.org>\n", 1716 "%s written for Gentoo by <solar and vapier @ gentoo.org>\n",
831 __FILE__, __DATE__, rcsid, argv0); 1717 VERSION, __FILE__, __DATE__, rcsid, argv0);
832 exit(EXIT_SUCCESS); 1718 exit(EXIT_SUCCESS);
833 break; 1719 break;
834 case 'h': usage(EXIT_SUCCESS); break; 1720 case 'h': usage(EXIT_SUCCESS); break;
835 case 'f': 1721 case 'f':
836 if (from_file) err("Don't specify -f twice"); 1722 if (from_file) warn("You prob don't want to specify -f twice");
837 from_file = xstrdup(optarg); 1723 from_file = optarg;
1724 break;
1725 case 'E':
1726 strncpy(match_etypes, optarg, sizeof(match_etypes));
1727 break;
1728 case 'M':
1729 match_bits = atoi(optarg);
1730 if (match_bits == 0) {
1731 if (strcmp(optarg, "ELFCLASS32") == 0)
1732 match_bits = 32;
1733 if (strcmp(optarg, "ELFCLASS64") == 0)
1734 match_bits = 64;
1735 }
1736 break;
1737 case 'O':
1738 if (sscanf(optarg, "%o", &match_perms) == (-1))
1739 match_bits = 0;
838 break; 1740 break;
839 case 'o': { 1741 case 'o': {
840 FILE *fp = NULL;
841 if ((fp = freopen(optarg, "w", stdout)) == NULL) 1742 if (freopen(optarg, "w", stdout) == NULL)
842 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1743 err("Could not open output stream '%s': %s", optarg, strerror(errno));
843 SET_STDOUT(fp);
844 break; 1744 break;
845 } 1745 }
846 1746 case 'k':
1747 if (find_section) warn("You prob don't want to specify -k twice");
1748 find_section = optarg;
1749 break;
847 case 's': { 1750 case 's': {
848 size_t len;
849 if (find_sym) err("Don't specify -s twice"); 1751 if (find_sym) warn("You prob don't want to specify -s twice");
850 find_sym = xstrdup(optarg); 1752 find_sym = optarg;
851 len = strlen(find_sym) + 1;
852 versioned_symname = (char*)xmalloc(sizeof(char) * (len+1)); 1753 versioned_symname = xmalloc(sizeof(char) * (strlen(find_sym)+1+1));
853 sprintf(versioned_symname, "%s@", find_sym); 1754 sprintf(versioned_symname, "%s@", find_sym);
854 break; 1755 break;
855 } 1756 }
1757 case 'N': {
1758 if (find_lib) warn("You prob don't want to specify -N twice");
1759 find_lib = optarg;
1760 break;
1761 }
856 1762
857 case 'F': { 1763 case 'F': {
858 if (out_format) err("Don't specify -F twice"); 1764 if (out_format) warn("You prob don't want to specify -F twice");
859 out_format = xstrdup(optarg); 1765 out_format = optarg;
1766 break;
1767 }
1768 case 'z': {
1769 unsigned long flags = (PF_NOEMUTRAMP | PF_NORANDEXEC);
1770 size_t x;
1771
1772 for (x = 0; x < strlen(optarg); x++) {
1773 switch (optarg[x]) {
1774 case 'p':
1775 case 'P':
1776 do_pax_state(optarg[x], PAGEEXEC);
860 break; 1777 break;
1778 case 's':
1779 case 'S':
1780 do_pax_state(optarg[x], SEGMEXEC);
1781 break;
1782 case 'm':
1783 case 'M':
1784 do_pax_state(optarg[x], MPROTECT);
1785 break;
1786 case 'e':
1787 case 'E':
1788 do_pax_state(optarg[x], EMUTRAMP);
1789 break;
1790 case 'r':
1791 case 'R':
1792 do_pax_state(optarg[x], RANDMMAP);
1793 break;
1794 case 'x':
1795 case 'X':
1796 do_pax_state(optarg[x], RANDEXEC);
1797 break;
1798 default:
1799 break;
1800 }
861 } 1801 }
862 1802 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1803 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1804 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1805 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1806 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1807 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1808 setpax = flags;
1809 break;
1810 }
1811 case 'g': g_match = 1; break;
1812 case 'L': use_ldcache = 1; break;
863 case 'y': scan_symlink = 0; break; 1813 case 'y': scan_symlink = 0; break;
1814 case 'A': scan_archives = 1; break;
864 case 'B': show_banner = 0; break; 1815 case 'B': show_banner = 0; break;
865 case 'l': scan_ldpath = 1; break; 1816 case 'l': scan_ldpath = 1; break;
866 case 'p': scan_envpath = 1; break; 1817 case 'p': scan_envpath = 1; break;
867 case 'R': dir_recurse = 1; break; 1818 case 'R': dir_recurse = 1; break;
868 case 'm': dir_crossmount = 0; break; 1819 case 'm': dir_crossmount = 0; break;
1820 case 'X': ++fix_elf; break;
869 case 'x': show_pax = 1; break; 1821 case 'x': show_pax = 1; break;
870 case 'e': show_stack = 1; break; 1822 case 'e': show_phdr = 1; break;
871 case 't': show_textrel = 1; break; 1823 case 't': show_textrel = 1; break;
872 case 'r': show_rpath = 1; break; 1824 case 'r': show_rpath = 1; break;
873 case 'n': show_needed = 1; break; 1825 case 'n': show_needed = 1; break;
874 case 'i': show_interp = 1; break; 1826 case 'i': show_interp = 1; break;
875 case 'b': show_bind = 1; break; 1827 case 'b': show_bind = 1; break;
1828 case 'S': show_soname = 1; break;
1829 case 'T': show_textrels = 1; break;
876 case 'q': be_quiet = 1; break; 1830 case 'q': be_quiet = 1; break;
877 case 'v': be_verbose = (be_verbose % 20) + 1; break; 1831 case 'v': be_verbose = (be_verbose % 20) + 1; break;
878 case 'a': show_pax = show_stack = show_textrel = show_rpath = \ 1832 case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break;
879 show_needed = show_interp = show_bind = 1; break; 1833 case 'D': show_endian = 1; break;
880
881 case ':': 1834 case ':':
882 err("Option missing parameter\n"); 1835 err("Option '%c' is missing parameter", optopt);
883 case '?': 1836 case '?':
884 err("Unknown option\n"); 1837 err("Unknown option '%c' or argument missing", optopt);
885 default: 1838 default:
886 err("Unhandled option '%c'", i); 1839 err("Unhandled option '%c'; please report this", i);
887 }
888 } 1840 }
889 1841 }
1842 if (show_textrels && be_verbose) {
1843 if (which("objdump") != NULL)
1844 has_objdump = 1;
1845 }
890 /* let the format option override all other options */ 1846 /* let the format option override all other options */
891 if (out_format) { 1847 if (out_format) {
892 show_pax = show_stack = show_textrel = show_rpath = \ 1848 show_pax = show_phdr = show_textrel = show_rpath = \
893 show_needed = show_interp = show_bind = 0; 1849 show_needed = show_interp = show_bind = show_soname = \
1850 show_textrels = show_perms = show_endian = 0;
894 for (i = 0; out_format[i]; ++i) { 1851 for (i = 0; out_format[i]; ++i) {
895 if (out_format[i] != '%') continue; 1852 if (!IS_MODIFIER(out_format[i])) continue;
896 1853
897 switch (out_format[++i]) { 1854 switch (out_format[++i]) {
1855 case '+': break;
898 case '%': break; 1856 case '%': break;
1857 case '#': break;
899 case 'F': break; 1858 case 'F': break;
900 case 'p': break; 1859 case 'p': break;
901 case 'f': break; 1860 case 'f': break;
1861 case 'k': break;
902 case 's': break; 1862 case 's': break;
1863 case 'N': break;
903 case 'o': break; 1864 case 'o': break;
1865 case 'a': break;
1866 case 'M': break;
1867 case 'D': show_endian = 1; break;
1868 case 'O': show_perms = 1; break;
904 case 'x': show_pax = 1; break; 1869 case 'x': show_pax = 1; break;
905 case 'e': show_stack = 1; break; 1870 case 'e': show_phdr = 1; break;
906 case 't': show_textrel = 1; break; 1871 case 't': show_textrel = 1; break;
907 case 'r': show_rpath = 1; break; 1872 case 'r': show_rpath = 1; break;
908 case 'n': show_needed = 1; break; 1873 case 'n': show_needed = 1; break;
909 case 'i': show_interp = 1; break; 1874 case 'i': show_interp = 1; break;
910 case 'b': show_bind = 1; break; 1875 case 'b': show_bind = 1; break;
1876 case 'S': show_soname = 1; break;
1877 case 'T': show_textrels = 1; break;
911 default: 1878 default:
912 err("Invalid format specifier '%c' (byte %i)", 1879 err("Invalid format specifier '%c' (byte %i)",
913 out_format[i], i+1); 1880 out_format[i], i+1);
914 } 1881 }
915 } 1882 }
916 1883
917 /* construct our default format */ 1884 /* construct our default format */
918 } else { 1885 } else {
919 size_t fmt_len = 30; 1886 size_t fmt_len = 30;
920 out_format = (char*)xmalloc(sizeof(char) * fmt_len); 1887 out_format = xmalloc(sizeof(char) * fmt_len);
921 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); 1888 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
922 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); 1889 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
923 if (show_stack) xstrcat(&out_format, "%e ", &fmt_len); 1890 if (show_perms) xstrcat(&out_format, "%O ", &fmt_len);
1891 if (show_endian) xstrcat(&out_format, "%D ", &fmt_len);
1892 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
924 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); 1893 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
925 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); 1894 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
926 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); 1895 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
927 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); 1896 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
928 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); 1897 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
1898 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
1899 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
929 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); 1900 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
1901 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
1902 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
930 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 1903 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
931 } 1904 }
932 if (be_verbose > 2) printf("Format: %s\n", out_format); 1905 if (be_verbose > 2) printf("Format: %s\n", out_format);
933 1906
934 /* now lets actually do the scanning */ 1907 /* now lets actually do the scanning */
935 if (scan_ldpath || (show_rpath && be_quiet)) 1908 if (scan_ldpath || use_ldcache)
936 load_ld_so_conf(); 1909 load_ld_cache_config(0, __PAX_UTILS_DEFAULT_LD_CACHE_CONFIG);
937 if (scan_ldpath) scanelf_ldpath(); 1910 if (scan_ldpath) scanelf_ldpath();
938 if (scan_envpath) scanelf_envpath(); 1911 if (scan_envpath) scanelf_envpath();
1912 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath)
1913 from_file = "-";
939 if (from_file) { 1914 if (from_file) {
940 scanelf_from_file(from_file); 1915 scanelf_from_file(from_file);
941 free(from_file);
942 from_file = *argv; 1916 from_file = *argv;
943 } 1917 }
944 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) 1918 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
945 err("Nothing to scan !?"); 1919 err("Nothing to scan !?");
946 while (optind < argc) { 1920 while (optind < argc) {
947 search_path = argv[optind++]; 1921 search_path = argv[optind++];
948 scanelf_dir(search_path); 1922 ret = scanelf_dir(search_path);
949 } 1923 }
950 1924
951 /* clean up */ 1925 /* clean up */
952 if (find_sym) {
953 free(find_sym);
954 free(versioned_symname); 1926 free(versioned_symname);
955 }
956 if (out_format) free(out_format);
957 for (i = 0; ldpaths[i]; ++i) 1927 for (i = 0; ldpaths[i]; ++i)
958 free(ldpaths[i]); 1928 free(ldpaths[i]);
959}
960 1929
961 1930 if (ldcache != 0)
962 1931 munmap(ldcache, ldcache_size);
963/* utility funcs */
964static char *xstrdup(const char *s)
965{
966 char *ret = strdup(s);
967 if (!ret) err("Could not strdup(): %s", strerror(errno));
968 return ret; 1932 return ret;
969} 1933}
970 1934
971static void *xmalloc(size_t size) 1935static char **get_split_env(const char *envvar)
972{ 1936{
973 void *ret = malloc(size); 1937 const char *delims = " \t\n";
974 if (!ret) err("Could not malloc() %li bytes", (unsigned long)size); 1938 char **envvals = NULL;
975 return ret; 1939 char *env, *s;
976} 1940 int nentry;
977 1941
978static void xstrcat(char **dst, const char *src, size_t *curr_len) 1942 if ((env = getenv(envvar)) == NULL)
979{ 1943 return NULL;
980 size_t new_len;
981 1944
982 new_len = strlen(*dst) + strlen(src); 1945 env = xstrdup(env);
983 if (*curr_len <= new_len) { 1946 if (env == NULL)
984 *curr_len = new_len + (*curr_len / 2); 1947 return NULL;
985 *dst = realloc(*dst, *curr_len);
986 if (!*dst)
987 err("could not realloc %li bytes", (unsigned long)*curr_len);
988 }
989 1948
990 strcat(*dst, src); 1949 s = strtok(env, delims);
991} 1950 if (s == NULL) {
1951 free(env);
1952 return NULL;
1953 }
992 1954
993static inline void xchrcat(char **dst, const char append, size_t *curr_len) 1955 nentry = 0;
994{ 1956 while (s != NULL) {
995 static char my_app[2]; 1957 ++nentry;
996 my_app[0] = append; 1958 envvals = xrealloc(envvals, sizeof(*envvals) * (nentry+1));
997 my_app[1] = '\0'; 1959 envvals[nentry-1] = s;
998 xstrcat(dst, my_app, curr_len); 1960 s = strtok(NULL, delims);
1961 }
1962 envvals[nentry] = NULL;
1963
1964 /* don't want to free(env) as it contains the memory that backs
1965 * the envvals array of strings */
1966 return envvals;
999} 1967}
1968
1969static void parseenv(void)
1970{
1971 qa_textrels = get_split_env("QA_TEXTRELS");
1972 qa_execstack = get_split_env("QA_EXECSTACK");
1973 qa_wx_load = get_split_env("QA_WX_LOAD");
1974}
1975
1976#ifdef __PAX_UTILS_CLEANUP
1977static void cleanup(void)
1978{
1979 free(out_format);
1980 free(qa_textrels);
1981 free(qa_execstack);
1982 free(qa_wx_load);
1983}
1984#endif
1000 1985
1001 1986
1002int main(int argc, char *argv[]) 1987int main(int argc, char *argv[])
1003{ 1988{
1989 int ret;
1004 if (argc < 2) 1990 if (argc < 2)
1005 usage(EXIT_FAILURE); 1991 usage(EXIT_FAILURE);
1992 parseenv();
1006 parseargs(argc, argv); 1993 ret = parseargs(argc, argv);
1007 fclose(stdout); 1994 fclose(stdout);
1008#ifdef __BOUNDS_CHECKING_ON 1995#ifdef __PAX_UTILS_CLEANUP
1009 warn("The calls to add/delete heap should be off by 1 due to the out_buffer not being freed in scanelf_file()"); 1996 cleanup();
1997 warn("The calls to add/delete heap should be off:\n"
1998 "\t- 1 due to the out_buffer not being freed in scanelf_file()\n"
1999 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD");
1010#endif 2000#endif
1011 return EXIT_SUCCESS; 2001 return ret;
1012} 2002}
2003
2004
2005/* Match filename against entries in matchlist, return TRUE
2006 * if the file is listed */
2007static int file_matches_list(const char *filename, char **matchlist)
2008{
2009 char **file;
2010 char *match;
2011 char buf[__PAX_UTILS_PATH_MAX];
2012
2013 if (matchlist == NULL)
2014 return 0;
2015
2016 for (file = matchlist; *file != NULL; file++) {
2017 if (search_path) {
2018 snprintf(buf, sizeof(buf), "%s%s", search_path, *file);
2019 match = buf;
2020 } else {
2021 match = *file;
2022 }
2023 if (fnmatch(match, filename, 0) == 0)
2024 return 1;
2025 }
2026 return 0;
2027}

Legend:
Removed from v.1.69  
changed lines
  Added in v.1.188

  ViewVC Help
Powered by ViewVC 1.1.20