/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.229 Revision 1.267
1/* 1/*
2 * Copyright 2003-2007 Gentoo Foundation 2 * Copyright 2003-2012 Gentoo Foundation
3 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.229 2011/09/27 19:29:19 vapier Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.267 2014/10/19 07:31:20 vapier Exp $
5 * 5 *
6 * Copyright 2003-2007 Ned Ludd - <solar@gentoo.org> 6 * Copyright 2003-2012 Ned Ludd - <solar@gentoo.org>
7 * Copyright 2004-2007 Mike Frysinger - <vapier@gentoo.org> 7 * Copyright 2004-2012 Mike Frysinger - <vapier@gentoo.org>
8 */ 8 */
9 9
10static const char *rcsid = "$Id: scanelf.c,v 1.229 2011/09/27 19:29:19 vapier Exp $"; 10static const char rcsid[] = "$Id: scanelf.c,v 1.267 2014/10/19 07:31:20 vapier Exp $";
11const char argv0[] = "scanelf"; 11const char argv0[] = "scanelf";
12 12
13#include "paxinc.h" 13#include "paxinc.h"
14 14
15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+') 15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+')
16 16
17/* prototypes */ 17/* prototypes */
18static int file_matches_list(const char *filename, char **matchlist); 18static int file_matches_list(const char *filename, char **matchlist);
19 19
20/* variables to control behavior */ 20/* variables to control behavior */
21static char *match_etypes = NULL; 21static array_t _match_etypes = array_init_decl, *match_etypes = &_match_etypes;
22static array_t _ldpaths = array_init_decl, *ldpaths = &_ldpaths; 22static array_t _ldpaths = array_init_decl, *ldpaths = &_ldpaths;
23static char scan_ldpath = 0; 23static char scan_ldpath = 0;
24static char scan_envpath = 0; 24static char scan_envpath = 0;
25static char scan_symlink = 1; 25static char scan_symlink = 1;
26static char scan_archives = 0; 26static char scan_archives = 0;
44static char be_quiet = 0; 44static char be_quiet = 0;
45static char be_verbose = 0; 45static char be_verbose = 0;
46static char be_wewy_wewy_quiet = 0; 46static char be_wewy_wewy_quiet = 0;
47static char be_semi_verbose = 0; 47static char be_semi_verbose = 0;
48static char *find_sym = NULL; 48static char *find_sym = NULL;
49static array_t _find_sym_arr = array_init_decl, *find_sym_arr = &_find_sym_arr;
50static array_t _find_sym_regex_arr = array_init_decl, *find_sym_regex_arr = &_find_sym_regex_arr;
49static char *find_lib = NULL; 51static char *find_lib = NULL;
50static array_t _find_lib_arr = array_init_decl, *find_lib_arr = &_find_lib_arr; 52static array_t _find_lib_arr = array_init_decl, *find_lib_arr = &_find_lib_arr;
51static char *find_section = NULL; 53static char *find_section = NULL;
52static array_t _find_section_arr = array_init_decl, *find_section_arr = &_find_section_arr; 54static array_t _find_section_arr = array_init_decl, *find_section_arr = &_find_section_arr;
53static char *out_format = NULL; 55static char *out_format = NULL;
54static char *search_path = NULL; 56static char *search_path = NULL;
55static char fix_elf = 0; 57static char fix_elf = 0;
56static char g_match = 0; 58static char g_match = 0;
57static char use_ldcache = 0; 59static char use_ldcache = 0;
60static char use_ldpath = 0;
58 61
59static char **qa_textrels = NULL; 62static char **qa_textrels = NULL;
60static char **qa_execstack = NULL; 63static char **qa_execstack = NULL;
61static char **qa_wx_load = NULL; 64static char **qa_wx_load = NULL;
62static char *root; 65static int root_fd = AT_FDCWD;
63 66
64static int match_bits = 0; 67static int match_bits = 0;
65static unsigned int match_perms = 0; 68static unsigned int match_perms = 0;
66static void *ldcache = NULL; 69static void *ldcache = NULL;
67static size_t ldcache_size = 0; 70static size_t ldcache_size = 0;
68static unsigned long setpax = 0UL; 71static unsigned long setpax = 0UL;
69 72
70static int has_objdump = 0; 73static const char *objdump;
71 74
72/* find the path to a file by name */ 75/* Find the path to a file by name. Note: we do not currently handle the
73static char *which(const char *fname) 76 * empty path element correctly (should behave by searching $PWD). */
77static const char *which(const char *fname, const char *envvar)
74{ 78{
75 static char fullpath[__PAX_UTILS_PATH_MAX]; 79 size_t path_len, fname_len;
80 const char *env_path;
76 char *path, *p; 81 char *path, *p, *ep;
77 82
83 p = getenv(envvar);
84 if (p)
85 return p;
86
78 path = getenv("PATH"); 87 env_path = getenv("PATH");
79 if (!path) 88 if (!env_path)
80 return NULL; 89 return NULL;
81 90
82 path = xstrdup(path); 91 /* Create a copy of the $PATH that we can safely modify.
83 while ((p = strrchr(path, ':')) != NULL) { 92 * Make it a little bigger so we can append "/fname".
84 snprintf(fullpath, sizeof(fullpath), "%s/%s", p + 1, fname); 93 * We do this twice -- once for a perm copy, and once for
85 *p = 0; 94 * room at the end of the last element. */
95 path_len = strlen(env_path);
96 fname_len = strlen(fname);
97 path = xmalloc(path_len + (fname_len * 2) + 2 + 2);
98 memcpy(path, env_path, path_len + 1);
99
100 p = path + path_len + 1 + fname_len + 1;
101 *p = '/';
102 memcpy(p + 1, fname, fname_len + 1);
103
104 /* Repoint fname to the copy in the env string as it has
105 * the leading slash which we can include in a single memcpy.
106 * Increase the fname len to include the '/' and '\0'. */
107 fname = p;
108 fname_len += 2;
109
110 p = path;
111 while (p) {
112 ep = strchr(p, ':');
113 /* Append the /foo path to the current element. */
114 if (ep)
115 memcpy(ep, fname, fname_len);
116 else
117 memcpy(path + path_len, fname, fname_len);
118
86 if (access(fullpath, R_OK) != -1) { 119 if (access(p, R_OK) != -1)
87 free(path);
88 return fullpath; 120 return p;
121
122 p = ep;
123 if (ep) {
124 /* If not the last element, restore the chunk we clobbered. */
125 size_t offset = ep - path;
126 size_t restore = min(path_len - offset, fname_len);
127 memcpy(ep, env_path + offset, restore);
128 ++p;
89 } 129 }
90 } 130 }
131
91 free(path); 132 free(path);
92 return NULL; 133 return NULL;
93} 134}
94 135
95/* 1 on failure. 0 otherwise */ 136static FILE *fopenat_r(int dir_fd, const char *path)
96static int rematch(const char *regex, const char *match, int cflags)
97{ 137{
98 regex_t preg; 138 int fd = openat(dir_fd, path, O_RDONLY|O_CLOEXEC);
99 int ret; 139 if (fd == -1)
140 return NULL;
141 return fdopen(fd, "re");
142}
100 143
101 if ((match == NULL) || (regex == NULL)) 144static const char *root_rel_path(const char *path)
102 return EXIT_FAILURE; 145{
103 146 /*
104 if ((ret = regcomp(&preg, regex, cflags))) { 147 * openat() will ignore the dirfd if path starts with
105 char err[256]; 148 * a /, so consume all of that noise
106 149 *
107 if (regerror(ret, &preg, err, sizeof(err))) 150 * XXX: we don't handle relative paths like ../ that
108 fprintf(stderr, "regcomp failed: %s", err); 151 * break out of the --root option, but for now, just
109 else 152 * don't do that :P.
110 fprintf(stderr, "regcomp failed"); 153 */
111 154 if (root_fd != AT_FDCWD) {
112 return EXIT_FAILURE; 155 while (*path == '/')
156 ++path;
157 if (*path == '\0')
158 path = ".";
113 } 159 }
114 ret = regexec(&preg, match, 0, NULL, 0);
115 regfree(&preg);
116 160
117 return ret; 161 return path;
118} 162}
119 163
120/* sub-funcs for scanelf_file() */ 164/* sub-funcs for scanelf_fileat() */
121static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab) 165static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **str)
122{ 166{
123 /* find the best SHT_DYNSYM and SHT_STRTAB sections */ 167 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
124 168
125 /* debug sections */ 169 /* debug sections */
126 void *symtab = elf_findsecbyname(elf, ".symtab"); 170 void *symtab = elf_findsecbyname(elf, ".symtab");
127 void *strtab = elf_findsecbyname(elf, ".strtab"); 171 void *strtab = elf_findsecbyname(elf, ".strtab");
128 /* runtime sections */ 172 /* runtime sections */
129 void *dynsym = elf_findsecbyname(elf, ".dynsym"); 173 void *dynsym = elf_findsecbyname(elf, ".dynsym");
130 void *dynstr = elf_findsecbyname(elf, ".dynstr"); 174 void *dynstr = elf_findsecbyname(elf, ".dynstr");
131 175
176 /*
177 * If the sections are marked NOBITS, then they don't exist, so we just
178 * skip them. This let's us work sanely with splitdebug ELFs (rather
179 * than spewing a lot of "corrupt ELF" messages later on). In malformed
180 * ELFs, the section might be wrongly set to NOBITS, but screw em.
181 *
182 * We need to make sure the debug/runtime sym/str sets are used together
183 * as they are generated in sync. Trying to mix them won't work.
184 */
132#define GET_SYMTABS(B) \ 185#define GET_SYMTABS(B) \
133 if (elf->elf_class == ELFCLASS ## B) { \ 186 if (elf->elf_class == ELFCLASS ## B) { \
134 if (symtab && dynsym) { \
135 Elf ## B ## _Shdr *esymtab = symtab; \ 187 Elf ## B ## _Shdr *esymtab = symtab; \
136 Elf ## B ## _Shdr *edynsym = dynsym; \
137 *sym = (EGET(esymtab->sh_size) > EGET(edynsym->sh_size)) ? symtab : dynsym; \
138 } else \
139 *sym = symtab ? symtab : dynsym; \
140 if (strtab && dynstr) { \
141 Elf ## B ## _Shdr *estrtab = strtab; \ 188 Elf ## B ## _Shdr *estrtab = strtab; \
189 Elf ## B ## _Shdr *edynsym = dynsym; \
142 Elf ## B ## _Shdr *edynstr = dynstr; \ 190 Elf ## B ## _Shdr *edynstr = dynstr; \
143 *tab = (EGET(estrtab->sh_size) > EGET(edynstr->sh_size)) ? strtab : dynstr; \ 191 \
192 if (symtab && EGET(esymtab->sh_type) == SHT_NOBITS) \
193 symtab = NULL; \
194 if (dynsym && EGET(edynsym->sh_type) == SHT_NOBITS) \
195 dynsym = NULL; \
196 if (strtab && EGET(estrtab->sh_type) == SHT_NOBITS) \
197 strtab = NULL; \
198 if (dynstr && EGET(edynstr->sh_type) == SHT_NOBITS) \
199 dynstr = NULL; \
200 \
201 /* Use the set with more symbols if both exist. */ \
202 if (symtab && dynsym && strtab && dynstr) { \
203 if (EGET(esymtab->sh_size) > EGET(edynsym->sh_size)) \
204 goto debug##B; \
144 } else \ 205 else \
145 *tab = strtab ? strtab : dynstr; \ 206 goto runtime##B; \
207 } else if (symtab && strtab) { \
208 debug##B: \
209 *sym = symtab; \
210 *str = strtab; \
211 return; \
212 } else if (dynsym && dynstr) { \
213 runtime##B: \
214 *sym = dynsym; \
215 *str = dynstr; \
216 return; \
217 } \
146 } 218 }
147 GET_SYMTABS(32) 219 GET_SYMTABS(32)
148 GET_SYMTABS(64) 220 GET_SYMTABS(64)
221
222 if (*sym && *str)
223 return;
224
225 /*
226 * damn, they're really going to make us work for it huh?
227 * reconstruct the section header info out of the dynamic
228 * tags so we can see what symbols this guy uses at runtime.
229 */
230#define GET_SYMTABS_DT(B) \
231 if (elf->elf_class == ELFCLASS ## B) { \
232 size_t i; \
233 static Elf ## B ## _Shdr sym_shdr, str_shdr; \
234 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
235 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
236 Elf ## B ## _Addr vsym, vstr, vhash, vgnu_hash; \
237 Elf ## B ## _Dyn *dyn; \
238 Elf ## B ## _Off offset; \
239 \
240 /* lookup symbols used at runtime with DT_SYMTAB / DT_STRTAB */ \
241 vsym = vstr = vhash = vgnu_hash = 0; \
242 memset(&sym_shdr, 0, sizeof(sym_shdr)); \
243 memset(&str_shdr, 0, sizeof(str_shdr)); \
244 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
245 if (EGET(phdr[i].p_type) != PT_DYNAMIC) \
246 continue; \
247 \
248 offset = EGET(phdr[i].p_offset); \
249 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) \
250 continue; \
251 \
252 dyn = DYN ## B (elf->vdata + offset); \
253 while (EGET(dyn->d_tag) != DT_NULL) { \
254 switch (EGET(dyn->d_tag)) { \
255 case DT_SYMTAB: vsym = EGET(dyn->d_un.d_val); break; \
256 case DT_SYMENT: sym_shdr.sh_entsize = dyn->d_un.d_val; break; \
257 case DT_STRTAB: vstr = EGET(dyn->d_un.d_val); break; \
258 case DT_STRSZ: str_shdr.sh_size = dyn->d_un.d_val; break; \
259 case DT_HASH: vhash = EGET(dyn->d_un.d_val); break; \
260 /*case DT_GNU_HASH: vgnu_hash = EGET(dyn->d_un.d_val); break;*/ \
261 } \
262 ++dyn; \
263 } \
264 if (vsym && vstr) \
265 break; \
266 } \
267 if (!vsym || !vstr || !(vhash || vgnu_hash)) \
268 return; \
269 \
270 /* calc offset into the ELF by finding the load addr of the syms */ \
271 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
272 Elf ## B ## _Addr vaddr = EGET(phdr[i].p_vaddr); \
273 Elf ## B ## _Addr filesz = EGET(phdr[i].p_filesz); \
274 offset = EGET(phdr[i].p_offset); \
275 \
276 if (EGET(phdr[i].p_type) != PT_LOAD) \
277 continue; \
278 \
279 if (vhash >= vaddr && vhash < vaddr + filesz) { \
280 /* Scan the hash table to see how many entries we have */ \
281 Elf32_Word max_sym_idx = 0; \
282 Elf32_Word *hashtbl = elf->vdata + offset + (vhash - vaddr); \
283 Elf32_Word b, nbuckets = EGET(hashtbl[0]); \
284 Elf32_Word nchains = EGET(hashtbl[1]); \
285 Elf32_Word *buckets = &hashtbl[2]; \
286 Elf32_Word *chains = &buckets[nbuckets]; \
287 Elf32_Word sym_idx; \
288 \
289 for (b = 0; b < nbuckets; ++b) { \
290 if (!buckets[b]) \
291 continue; \
292 for (sym_idx = buckets[b]; sym_idx < nchains && sym_idx; sym_idx = chains[sym_idx]) \
293 if (max_sym_idx < sym_idx) \
294 max_sym_idx = sym_idx; \
295 } \
296 ESET(sym_shdr.sh_size, sym_shdr.sh_entsize * max_sym_idx); \
297 } \
298 \
299 if (vsym >= vaddr && vsym < vaddr + filesz) { \
300 ESET(sym_shdr.sh_offset, offset + (vsym - vaddr)); \
301 *sym = &sym_shdr; \
302 } \
303 \
304 if (vstr >= vaddr && vstr < vaddr + filesz) { \
305 ESET(str_shdr.sh_offset, offset + (vstr - vaddr)); \
306 *str = &str_shdr; \
307 } \
308 } \
309 }
310 GET_SYMTABS_DT(32)
311 GET_SYMTABS_DT(64)
149} 312}
150 313
151static char *scanelf_file_pax(elfobj *elf, char *found_pax) 314static char *scanelf_file_pax(elfobj *elf, char *found_pax)
152{ 315{
153 static char ret[7]; 316 static char ret[7];
180 } 343 }
181 SHOW_PAX(32) 344 SHOW_PAX(32)
182 SHOW_PAX(64) 345 SHOW_PAX(64)
183 } 346 }
184 347
185 if (fix_elf && setpax) { 348 /* Note: We do not support setting EI_PAX if not PT_PAX_FLAGS
186 /* set the chpax settings */ 349 * was found. This is known to break ELFs on glibc systems,
187 if (elf->elf_class == ELFCLASS32) { 350 * and mainline PaX has deprecated use of this for a long time.
188 if (EHDR32(elf->ehdr)->e_type == ET_DYN || EHDR32(elf->ehdr)->e_type == ET_EXEC) 351 * We could support changing PT_GNU_STACK, but that doesn't
189 ESET(EHDR32(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax)); 352 * seem like it's worth the effort. #411919
190 } else { 353 */
191 if (EHDR64(elf->ehdr)->e_type == ET_DYN || EHDR64(elf->ehdr)->e_type == ET_EXEC)
192 ESET(EHDR64(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
193 }
194 }
195 354
196 /* fall back to EI_PAX if no PT_PAX was found */ 355 /* fall back to EI_PAX if no PT_PAX was found */
197 if (!*ret) { 356 if (!*ret) {
198 static char *paxflags; 357 static char *paxflags;
199 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); 358 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
213static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load) 372static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
214{ 373{
215 static char ret[12]; 374 static char ret[12];
216 char *found; 375 char *found;
217 unsigned long i, shown, multi_stack, multi_relro, multi_load; 376 unsigned long i, shown, multi_stack, multi_relro, multi_load;
218 int max_pt_load;
219 377
220 if (!show_phdr) return NULL; 378 if (!show_phdr) return NULL;
221 379
222 memcpy(ret, "--- --- ---\0", 12); 380 memcpy(ret, "--- --- ---\0", 12);
223 381
224 shown = 0; 382 shown = 0;
225 multi_stack = multi_relro = multi_load = 0; 383 multi_stack = multi_relro = multi_load = 0;
226 max_pt_load = elf_max_pt_load(elf);
227 384
228#define NOTE_GNU_STACK ".note.GNU-stack" 385#define NOTE_GNU_STACK ".note.GNU-stack"
229#define SHOW_PHDR(B) \ 386#define SHOW_PHDR(B) \
230 if (elf->elf_class == ELFCLASS ## B) { \ 387 if (elf->elf_class == ELFCLASS ## B) { \
231 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 388 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
247 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \ 404 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
248 found = found_relro; \ 405 found = found_relro; \
249 offset = 4; \ 406 offset = 4; \
250 check_flags = PF_X; \ 407 check_flags = PF_X; \
251 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \ 408 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
252 if (EGET(ehdr->e_type) == ET_DYN || EGET(ehdr->e_type) == ET_EXEC) \
253 if (multi_load++ > max_pt_load) \
254 warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
255 if (file_matches_list(elf->filename, qa_wx_load)) \ 409 if (file_matches_list(elf->filename, qa_wx_load)) \
256 continue; \ 410 continue; \
257 found = found_load; \ 411 found = found_load; \
258 offset = 8; \ 412 offset = 8; \
259 check_flags = PF_W|PF_X; \ 413 check_flags = PF_W|PF_X; \
276 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \ 430 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
277 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \ 431 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
278 char *str; \ 432 char *str; \
279 if ((void*)strtbl > elf->data_end) \ 433 if ((void*)strtbl > elf->data_end) \
280 goto skip_this_shdr##B; \ 434 goto skip_this_shdr##B; \
435 /* let's flag -w/+x object files since the final ELF will most likely \
436 * need write access to the stack (who doesn't !?). so the combined \
437 * output will bring in +w automatically and that's bad. \
438 */ \
281 check_flags = SHF_WRITE|SHF_EXECINSTR; \ 439 check_flags = /*SHF_WRITE|*/SHF_EXECINSTR; \
282 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \ 440 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
283 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \ 441 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
284 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \ 442 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
285 str = elf->data + offset; \ 443 str = elf->data + offset; \
286 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \ 444 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
463 else \ 621 else \
464 printf("%s", func_name); \ 622 printf("%s", func_name); \
465 } else \ 623 } else \
466 printf("(optimized out)"); \ 624 printf("(optimized out)"); \
467 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \ 625 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
468 if (be_verbose && has_objdump) { \ 626 if (be_verbose && objdump) { \
469 Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \ 627 Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \
470 char *sysbuf; \ 628 char *sysbuf; \
471 size_t syslen; \ 629 size_t syslen; \
472 int sysret; \
473 const char sysfmt[] = "objdump -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \ 630 const char sysfmt[] = "%s -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \
474 syslen = sizeof(sysfmt) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \ 631 syslen = sizeof(sysfmt) + strlen(objdump) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \
475 sysbuf = xmalloc(syslen); \ 632 sysbuf = xmalloc(syslen); \
476 if (end_addr < r_offset) \ 633 if (end_addr < r_offset) \
477 /* not uncommon when things are optimized out */ \ 634 /* not uncommon when things are optimized out */ \
478 end_addr = r_offset + 0x100; \ 635 end_addr = r_offset + 0x100; \
479 snprintf(sysbuf, syslen, sysfmt, \ 636 snprintf(sysbuf, syslen, sysfmt, \
637 objdump, \
480 (unsigned long)offset_tmp, \ 638 (unsigned long)offset_tmp, \
481 (unsigned long)end_addr, \ 639 (unsigned long)end_addr, \
482 elf->filename, \ 640 elf->filename, \
483 (unsigned long)r_offset); \ 641 (unsigned long)r_offset); \
484 fflush(stdout); \ 642 fflush(stdout); \
485 sysret = system(sysbuf); \ 643 if (system(sysbuf)) {/* don't care */} \
486 fflush(stdout); \ 644 fflush(stdout); \
487 free(sysbuf); \ 645 free(sysbuf); \
488 } \ 646 } \
489 } \ 647 } \
490 } } 648 } }
663 xstrcat(ret, (runpath ? runpath : rpath), ret_len); 821 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
664 else if (!be_quiet) 822 else if (!be_quiet)
665 xstrcat(ret, " - ", ret_len); 823 xstrcat(ret, " - ", ret_len);
666} 824}
667 825
826/* Defines can be seen in glibc's sysdeps/generic/ldconfig.h */
668#define LDSO_CACHE_MAGIC "ld.so-" 827#define LDSO_CACHE_MAGIC "ld.so-"
669#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1) 828#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
670#define LDSO_CACHE_VER "1.7.0" 829#define LDSO_CACHE_VER "1.7.0"
671#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1) 830#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
672#define FLAG_ANY -1 831#define FLAG_ANY -1
681#define FLAG_X8664_LIB64 0x0300 840#define FLAG_X8664_LIB64 0x0300
682#define FLAG_S390_LIB64 0x0400 841#define FLAG_S390_LIB64 0x0400
683#define FLAG_POWERPC_LIB64 0x0500 842#define FLAG_POWERPC_LIB64 0x0500
684#define FLAG_MIPS64_LIBN32 0x0600 843#define FLAG_MIPS64_LIBN32 0x0600
685#define FLAG_MIPS64_LIBN64 0x0700 844#define FLAG_MIPS64_LIBN64 0x0700
845#define FLAG_X8664_LIBX32 0x0800
846#define FLAG_ARM_LIBHF 0x0900
847#define FLAG_AARCH64_LIB64 0x0a00
686 848
687#if defined(__GLIBC__) || defined(__UCLIBC__) 849#if defined(__GLIBC__) || defined(__UCLIBC__)
688 850
689static char *lookup_cache_lib(elfobj *elf, char *fname) 851static char *lookup_cache_lib(elfobj *elf, const char *fname)
690{ 852{
691 int fd; 853 int fd;
692 char *strs; 854 char *strs;
693 static char buf[__PAX_UTILS_PATH_MAX] = ""; 855 static char buf[__PAX_UTILS_PATH_MAX] = "";
694 const char cachefile[] = "/etc/ld.so.cache"; 856 const char *cachefile = root_rel_path("/etc/ld.so.cache");
695 struct stat st; 857 struct stat st;
696 858
697 typedef struct { 859 typedef struct {
698 char magic[LDSO_CACHE_MAGIC_LEN]; 860 char magic[LDSO_CACHE_MAGIC_LEN];
699 char version[LDSO_CACHE_VER_LEN]; 861 char version[LDSO_CACHE_VER_LEN];
710 872
711 if (fname == NULL) 873 if (fname == NULL)
712 return NULL; 874 return NULL;
713 875
714 if (ldcache == NULL) { 876 if (ldcache == NULL) {
715 if (stat(cachefile, &st)) 877 if (fstatat(root_fd, cachefile, &st, 0))
716 return NULL; 878 return NULL;
717 879
718 fd = open(cachefile, O_RDONLY); 880 fd = openat(root_fd, cachefile, O_RDONLY);
719 if (fd == -1) 881 if (fd == -1)
720 return NULL; 882 return NULL;
721 883
722 /* cache these values so we only map/unmap the cache file once */ 884 /* cache these values so we only map/unmap the cache file once */
723 ldcache_size = st.st_size; 885 ldcache_size = st.st_size;
762 924
763 return buf; 925 return buf;
764} 926}
765 927
766#elif defined(__NetBSD__) 928#elif defined(__NetBSD__)
767static char *lookup_cache_lib(elfobj *elf, char *fname) 929static char *lookup_cache_lib(elfobj *elf, const char *fname)
768{ 930{
769 static char buf[__PAX_UTILS_PATH_MAX] = ""; 931 static char buf[__PAX_UTILS_PATH_MAX] = "";
770 static struct stat st; 932 static struct stat st;
771 size_t n; 933 size_t n;
772 char *ldpath; 934 char *ldpath;
791} 953}
792#else 954#else
793#ifdef __ELF__ 955#ifdef __ELF__
794#warning Cache support not implemented for your target 956#warning Cache support not implemented for your target
795#endif 957#endif
796static char *lookup_cache_lib(elfobj *elf, char *fname) 958static char *lookup_cache_lib(elfobj *elf, const char *fname)
797{ 959{
798 return NULL; 960 return NULL;
799} 961}
800#endif 962#endif
963
964static char *lookup_config_lib(const char *fname)
965{
966 static char buf[__PAX_UTILS_PATH_MAX] = "";
967 const char *ldpath;
968 size_t n;
969
970 array_for_each(ldpaths, n, ldpath) {
971 snprintf(buf, sizeof(buf), "%s/%s", root_rel_path(ldpath), fname);
972 if (faccessat(root_fd, buf, F_OK, AT_SYMLINK_NOFOLLOW) == 0)
973 return buf;
974 }
975
976 return NULL;
977}
801 978
802static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len) 979static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
803{ 980{
804 unsigned long i; 981 unsigned long i;
805 char *needed; 982 char *needed;
843 needed = elf->data + offset; \ 1020 needed = elf->data + offset; \
844 if (op == 0) { \ 1021 if (op == 0) { \
845 /* -n -> print all entries */ \ 1022 /* -n -> print all entries */ \
846 if (!be_wewy_wewy_quiet) { \ 1023 if (!be_wewy_wewy_quiet) { \
847 if (*found_needed) xchrcat(ret, ',', ret_len); \ 1024 if (*found_needed) xchrcat(ret, ',', ret_len); \
848 if (use_ldcache) \ 1025 if (use_ldpath) { \
1026 if ((p = lookup_config_lib(needed)) != NULL) \
1027 needed = p; \
1028 } else if (use_ldcache) { \
849 if ((p = lookup_cache_lib(elf, needed)) != NULL) \ 1029 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
850 needed = p; \ 1030 needed = p; \
1031 } \
851 xstrcat(ret, needed, ret_len); \ 1032 xstrcat(ret, needed, ret_len); \
852 } \ 1033 } \
853 *found_needed = 1; \ 1034 *found_needed = 1; \
854 } else { \ 1035 } else { \
855 /* -N -> print matching entries */ \ 1036 /* -N -> print matching entries */ \
856 size_t n; \ 1037 size_t n; \
857 const char *find_lib_name; \ 1038 const char *find_lib_name; \
858 \ 1039 \
859 array_for_each(find_lib_arr, n, find_lib_name) \ 1040 array_for_each(find_lib_arr, n, find_lib_name) { \
1041 int invert = 1; \
1042 if (find_lib_name[0] == '!') \
1043 invert = 0, ++find_lib_name; \
860 if (!strcmp(find_lib_name, needed)) \ 1044 if (!strcmp(find_lib_name, needed) == invert) \
861 ++matched; \ 1045 ++matched; \
1046 } \
862 \ 1047 \
863 if (matched == array_cnt(find_lib_arr)) { \ 1048 if (matched == array_cnt(find_lib_arr)) { \
864 *found_lib = 1; \ 1049 *found_lib = 1; \
865 return (be_wewy_wewy_quiet ? NULL : find_lib); \ 1050 return (be_wewy_wewy_quiet ? NULL : find_lib); \
866 } \ 1051 } \
892 *found_interp = 1; \ 1077 *found_interp = 1; \
893 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \ 1078 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \
894 } 1079 }
895 SHOW_INTERP(32) 1080 SHOW_INTERP(32)
896 SHOW_INTERP(64) 1081 SHOW_INTERP(64)
1082 } else {
1083 /* Walk all the program headers to find the PT_INTERP */
1084#define SHOW_PT_INTERP(B) \
1085 if (elf->elf_class == ELFCLASS ## B) { \
1086 unsigned long i; \
1087 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
1088 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
1089 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
1090 if (EGET(phdr[i].p_type) != PT_INTERP) \
1091 continue; \
1092 *found_interp = 1; \
1093 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(phdr[i].p_offset)); \
1094 } \
897 } 1095 }
1096 SHOW_PT_INTERP(32)
1097 SHOW_PT_INTERP(64)
1098 }
1099
898 return NULL; 1100 return NULL;
899} 1101}
900static char *scanelf_file_bind(elfobj *elf, char *found_bind) 1102static const char *scanelf_file_bind(elfobj *elf, char *found_bind)
901{ 1103{
902 unsigned long i; 1104 unsigned long i;
903 struct stat s; 1105 struct stat s;
904 char dynamic = 0; 1106 bool dynamic = false;
905 1107
906 if (!show_bind) return NULL; 1108 if (!show_bind) return NULL;
907 if (!elf->phdr) return NULL; 1109 if (!elf->phdr) return NULL;
908 1110
909#define SHOW_BIND(B) \ 1111#define SHOW_BIND(B) \
912 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 1114 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
913 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 1115 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
914 Elf ## B ## _Off offset; \ 1116 Elf ## B ## _Off offset; \
915 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 1117 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
916 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \ 1118 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
917 dynamic = 1; \ 1119 dynamic = true; \
918 offset = EGET(phdr[i].p_offset); \ 1120 offset = EGET(phdr[i].p_offset); \
919 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ 1121 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
920 dyn = DYN ## B (elf->vdata + offset); \ 1122 dyn = DYN ## B (elf->vdata + offset); \
921 while (EGET(dyn->d_tag) != DT_NULL) { \ 1123 while (EGET(dyn->d_tag) != DT_NULL) { \
922 if (EGET(dyn->d_tag) == DT_BIND_NOW || \ 1124 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
938 /* don't output anything if quiet mode and the ELF is static or not setuid */ 1140 /* don't output anything if quiet mode and the ELF is static or not setuid */
939 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) { 1141 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) {
940 return NULL; 1142 return NULL;
941 } else { 1143 } else {
942 *found_bind = 1; 1144 *found_bind = 1;
943 return (char *)(dynamic ? "LAZY" : "STATIC"); 1145 return dynamic ? "LAZY" : "STATIC";
944 } 1146 }
945} 1147}
946static char *scanelf_file_soname(elfobj *elf, char *found_soname) 1148static char *scanelf_file_soname(elfobj *elf, char *found_soname)
947{ 1149{
948 unsigned long i; 1150 unsigned long i;
1001 * defined symbols. If it's a minus ("-"), only match undefined symbols. 1203 * defined symbols. If it's a minus ("-"), only match undefined symbols.
1002 * Putting modifiers in between the percent signs allows for more in depth 1204 * Putting modifiers in between the percent signs allows for more in depth
1003 * filters. There are groups of modifiers. If you don't specify a member 1205 * filters. There are groups of modifiers. If you don't specify a member
1004 * of a group, then all types in that group are matched. The current 1206 * of a group, then all types in that group are matched. The current
1005 * groups and their types are: 1207 * groups and their types are:
1006 * STT group: STT_NOTYPE:n STT_OBJECT:o STT_FUNC:f SST_FILE:F 1208 * STT group: STT_NOTYPE:n STT_OBJECT:o STT_FUNC:f STT_FILE:F
1007 * STB group: STB_LOCAL:l STB_GLOBAL:g STB_WEAK:w 1209 * STB group: STB_LOCAL:l STB_GLOBAL:g STB_WEAK:w
1210 * STV group: STV_DEFAULT:p STV_INTERNAL:i STV_HIDDEN:h STV_PROTECTED:P
1008 * SHN group: SHN_UNDEF:u SHN_ABS:a SHN_COMMON:c {defined}:d 1211 * SHN group: SHN_UNDEF:u SHN_ABS:a SHN_COMMON:c {defined}:d
1009 * The "defined" value in the SHN group does not correspond to a SHN_xxx define. 1212 * The "defined" value in the SHN group does not correspond to a SHN_xxx define.
1010 * You can search for multiple symbols at once by seperating with a comma (","). 1213 * You can search for multiple symbols at once by seperating with a comma (",").
1011 * 1214 *
1012 * Some examples: 1215 * Some examples:
1021 * All global defined objects in an ELF: 1224 * All global defined objects in an ELF:
1022 * scanelf -s %ogd% <ELF> 1225 * scanelf -s %ogd% <ELF>
1023 */ 1226 */
1024static void 1227static void
1025scanelf_match_symname(elfobj *elf, char *found_sym, char **ret, size_t *ret_len, const char *symname, 1228scanelf_match_symname(elfobj *elf, char *found_sym, char **ret, size_t *ret_len, const char *symname,
1026 unsigned int stt, unsigned int stb, unsigned int shn, unsigned long size) 1229 unsigned int stt, unsigned int stb, unsigned int stv, unsigned int shn, unsigned long size)
1027{ 1230{
1028 char *this_sym, *next_sym, saved = saved; 1231 const char *this_sym;
1232 size_t n;
1029 1233
1030 /* allow the user to specify a comma delimited list of symbols to search for */ 1234 array_for_each(find_sym_arr, n, this_sym) {
1031 next_sym = NULL;
1032 do {
1033 bool inc_notype, inc_object, inc_func, inc_file, 1235 bool inc_notype, inc_object, inc_func, inc_file,
1034 inc_local, inc_global, inc_weak, 1236 inc_local, inc_global, inc_weak,
1237 inc_visdef, inc_intern, inc_hidden, inc_prot,
1035 inc_def, inc_undef, inc_abs, inc_common; 1238 inc_def, inc_undef, inc_abs, inc_common;
1036 1239
1037 if (next_sym) {
1038 next_sym[-1] = saved;
1039 this_sym = next_sym;
1040 } else
1041 this_sym = find_sym;
1042 if ((next_sym = strchr(this_sym, ','))) {
1043 /* make parsing easier by killing the comma temporarily */
1044 saved = *next_sym;
1045 *next_sym = '\0';
1046 next_sym += 1;
1047 }
1048
1049 /* symbol selection! */ 1240 /* symbol selection! */
1050 inc_notype = inc_object = inc_func = inc_file = \ 1241 inc_notype = inc_object = inc_func = inc_file =
1051 inc_local = inc_global = inc_weak = \ 1242 inc_local = inc_global = inc_weak =
1243 inc_visdef = inc_intern = inc_hidden = inc_prot =
1052 inc_def = inc_undef = inc_abs = inc_common = \ 1244 inc_def = inc_undef = inc_abs = inc_common =
1053 (*this_sym != '%'); 1245 (*this_sym != '%');
1054 1246
1055 /* parse the contents of %...% */ 1247 /* parse the contents of %...% */
1056 if (!inc_notype) { 1248 if (!inc_notype) {
1057 while (*(this_sym++)) { 1249 while (*(this_sym++)) {
1065 case 'f': inc_func = true; break; 1257 case 'f': inc_func = true; break;
1066 case 'F': inc_file = true; break; 1258 case 'F': inc_file = true; break;
1067 case 'l': inc_local = true; break; 1259 case 'l': inc_local = true; break;
1068 case 'g': inc_global = true; break; 1260 case 'g': inc_global = true; break;
1069 case 'w': inc_weak = true; break; 1261 case 'w': inc_weak = true; break;
1262 case 'p': inc_visdef = true; break;
1263 case 'i': inc_intern = true; break;
1264 case 'h': inc_hidden = true; break;
1265 case 'P': inc_prot = true; break;
1070 case 'd': inc_def = true; break; 1266 case 'd': inc_def = true; break;
1071 case 'u': inc_undef = true; break; 1267 case 'u': inc_undef = true; break;
1072 case 'a': inc_abs = true; break; 1268 case 'a': inc_abs = true; break;
1073 case 'c': inc_common = true; break; 1269 case 'c': inc_common = true; break;
1074 default: err("invalid symbol selector '%c'", *this_sym); 1270 default: err("invalid symbol selector '%c'", *this_sym);
1078 /* If no types are matched, not match all */ 1274 /* If no types are matched, not match all */
1079 if (!inc_notype && !inc_object && !inc_func && !inc_file) 1275 if (!inc_notype && !inc_object && !inc_func && !inc_file)
1080 inc_notype = inc_object = inc_func = inc_file = true; 1276 inc_notype = inc_object = inc_func = inc_file = true;
1081 if (!inc_local && !inc_global && !inc_weak) 1277 if (!inc_local && !inc_global && !inc_weak)
1082 inc_local = inc_global = inc_weak = true; 1278 inc_local = inc_global = inc_weak = true;
1279 if (!inc_visdef && !inc_intern && !inc_hidden && !inc_prot)
1280 inc_visdef = inc_intern = inc_hidden = inc_prot = true;
1083 if (!inc_def && !inc_undef && !inc_abs && !inc_common) 1281 if (!inc_def && !inc_undef && !inc_abs && !inc_common)
1084 inc_def = inc_undef = inc_abs = inc_common = true; 1282 inc_def = inc_undef = inc_abs = inc_common = true;
1085 1283
1086 /* backwards compat for defined/undefined short hand */ 1284 /* backwards compat for defined/undefined short hand */
1087 } else if (*this_sym == '+') { 1285 } else if (*this_sym == '+') {
1091 inc_def = inc_abs = inc_common = false; 1289 inc_def = inc_abs = inc_common = false;
1092 ++this_sym; 1290 ++this_sym;
1093 } 1291 }
1094 1292
1095 /* filter symbols */ 1293 /* filter symbols */
1096 if ((!inc_notype && stt == STT_NOTYPE) || \ 1294 if ((!inc_notype && stt == STT_NOTYPE ) || \
1097 (!inc_object && stt == STT_OBJECT) || \ 1295 (!inc_object && stt == STT_OBJECT ) || \
1098 (!inc_func && stt == STT_FUNC ) || \ 1296 (!inc_func && stt == STT_FUNC ) || \
1099 (!inc_file && stt == STT_FILE ) || \ 1297 (!inc_file && stt == STT_FILE ) || \
1100 (!inc_local && stb == STB_LOCAL ) || \ 1298 (!inc_local && stb == STB_LOCAL ) || \
1101 (!inc_global && stb == STB_GLOBAL) || \ 1299 (!inc_global && stb == STB_GLOBAL ) || \
1102 (!inc_weak && stb == STB_WEAK ) || \ 1300 (!inc_weak && stb == STB_WEAK ) || \
1301 (!inc_visdef && stv == STV_DEFAULT ) || \
1302 (!inc_intern && stv == STV_INTERNAL ) || \
1303 (!inc_hidden && stv == STV_HIDDEN ) || \
1304 (!inc_prot && stv == STV_PROTECTED) || \
1103 (!inc_def && shn && shn < SHN_LORESERVE) || \ 1305 (!inc_def && shn && shn < SHN_LORESERVE) || \
1104 (!inc_undef && shn == SHN_UNDEF ) || \ 1306 (!inc_undef && shn == SHN_UNDEF ) || \
1105 (!inc_abs && shn == SHN_ABS ) || \ 1307 (!inc_abs && shn == SHN_ABS ) || \
1106 (!inc_common && shn == SHN_COMMON)) 1308 (!inc_common && shn == SHN_COMMON ))
1107 continue; 1309 continue;
1108 1310
1109 if (*this_sym == '*') { 1311 if (*this_sym == '*') {
1110 /* a "*" symbol gets you debug output */ 1312 /* a "*" symbol gets you debug output */
1111 printf("%s(%s) %5lX %15s %15s %15s %s\n", 1313 printf("%s(%s) %5lX %-15s %-15s %-15s %-15s %s\n",
1112 ((*found_sym == 0) ? "\n\t" : "\t"), 1314 ((*found_sym == 0) ? "\n\t" : "\t"),
1113 elf->base_filename, 1315 elf->base_filename,
1114 size, 1316 size,
1115 get_elfstttype(stt), 1317 get_elfstttype(stt),
1116 get_elfstbtype(stb), 1318 get_elfstbtype(stb),
1319 get_elfstvtype(stv),
1117 get_elfshntype(shn), 1320 get_elfshntype(shn),
1118 symname); 1321 symname);
1119 goto matched; 1322 goto matched;
1120 1323
1121 } else { 1324 } else {
1122 if (g_match) { 1325 if (g_match) {
1123 /* regex match the symbol */ 1326 /* regex match the symbol */
1124 if (rematch(this_sym, symname, REG_EXTENDED) != 0) 1327 if (regexec(find_sym_regex_arr->eles[n], symname, 0, NULL, 0) == REG_NOMATCH)
1125 continue; 1328 continue;
1126 1329
1127 } else if (*this_sym) { 1330 } else if (*this_sym) {
1128 /* give empty symbols a "pass", else do a normal compare */ 1331 /* give empty symbols a "pass", else do a normal compare */
1129 const size_t len = strlen(this_sym); 1332 const size_t len = strlen(this_sym);
1145 xstrcat(ret, symname, ret_len); 1348 xstrcat(ret, symname, ret_len);
1146 } 1349 }
1147 1350
1148 goto matched; 1351 goto matched;
1149 } 1352 }
1150 } while (next_sym); 1353 }
1151 1354
1152 return; 1355 return;
1153 1356
1154 matched: 1357 matched:
1155 *found_sym = 1; 1358 *found_sym = 1;
1156 if (next_sym)
1157 next_sym[-1] = saved;
1158} 1359}
1159 1360
1160static const char *scanelf_file_sym(elfobj *elf, char *found_sym) 1361static const char *scanelf_file_sym(elfobj *elf, char *found_sym)
1161{ 1362{
1162 unsigned long i;
1163 char *ret; 1363 char *ret;
1164 void *symtab_void, *strtab_void; 1364 void *symtab_void, *strtab_void;
1165 1365
1166 if (!find_sym) return NULL; 1366 if (!find_sym) return NULL;
1167 ret = NULL; 1367 ret = NULL;
1172#define FIND_SYM(B) \ 1372#define FIND_SYM(B) \
1173 if (elf->elf_class == ELFCLASS ## B) { \ 1373 if (elf->elf_class == ELFCLASS ## B) { \
1174 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 1374 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
1175 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 1375 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
1176 Elf ## B ## _Sym *sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \ 1376 Elf ## B ## _Sym *sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
1177 unsigned long cnt = EGET(symtab->sh_entsize); \ 1377 Elf ## B ## _Word i, cnt = EGET(symtab->sh_entsize); \
1178 char *symname; \ 1378 char *symname; \
1179 size_t ret_len = 0; \ 1379 size_t ret_len = 0; \
1180 if (cnt) \ 1380 if (cnt) \
1181 cnt = EGET(symtab->sh_size) / cnt; \ 1381 cnt = EGET(symtab->sh_size) / cnt; \
1182 for (i = 0; i < cnt; ++i) { \ 1382 for (i = 0; i < cnt; ++i) { \
1194 } \ 1394 } \
1195 scanelf_match_symname(elf, found_sym, \ 1395 scanelf_match_symname(elf, found_sym, \
1196 &ret, &ret_len, symname, \ 1396 &ret, &ret_len, symname, \
1197 ELF##B##_ST_TYPE(EGET(sym->st_info)), \ 1397 ELF##B##_ST_TYPE(EGET(sym->st_info)), \
1198 ELF##B##_ST_BIND(EGET(sym->st_info)), \ 1398 ELF##B##_ST_BIND(EGET(sym->st_info)), \
1399 ELF##B##_ST_VISIBILITY(EGET(sym->st_other)), \
1199 EGET(sym->st_shndx), \ 1400 EGET(sym->st_shndx), \
1200 /* st_size can be 64bit, but no one is really that big, so screw em */ \ 1401 /* st_size can be 64bit, but no one is really that big, so screw em */ \
1201 EGET(sym->st_size)); \ 1402 EGET(sym->st_size)); \
1202 } \ 1403 } \
1203 ++sym; \ 1404 ++sym; \
1204 } } 1405 } \
1406 }
1205 FIND_SYM(32) 1407 FIND_SYM(32)
1206 FIND_SYM(64) 1408 FIND_SYM(64)
1207 } 1409 }
1208 1410
1209break_out: 1411break_out:
1300 case 'x': prints(" PAX "); break; 1502 case 'x': prints(" PAX "); break;
1301 case 'e': prints("STK/REL/PTL "); break; 1503 case 'e': prints("STK/REL/PTL "); break;
1302 case 't': prints("TEXTREL "); break; 1504 case 't': prints("TEXTREL "); break;
1303 case 'r': prints("RPATH "); break; 1505 case 'r': prints("RPATH "); break;
1304 case 'M': prints("CLASS "); break; 1506 case 'M': prints("CLASS "); break;
1507 case 'l':
1305 case 'n': prints("NEEDED "); break; 1508 case 'n': prints("NEEDED "); break;
1306 case 'i': prints("INTERP "); break; 1509 case 'i': prints("INTERP "); break;
1307 case 'b': prints("BIND "); break; 1510 case 'b': prints("BIND "); break;
1308 case 'Z': prints("SIZE "); break; 1511 case 'Z': prints("SIZE "); break;
1309 case 'S': prints("SONAME "); break; 1512 case 'S': prints("SONAME "); break;
1414 1617
1415/* scan a single elf */ 1618/* scan a single elf */
1416static int scanelf_elf(const char *filename, int fd, size_t len) 1619static int scanelf_elf(const char *filename, int fd, size_t len)
1417{ 1620{
1418 int ret = 1; 1621 int ret = 1;
1622 size_t n;
1623 const char *match_etype;
1419 elfobj *elf; 1624 elfobj *elf;
1420 1625
1421 /* verify this is real ELF */ 1626 /* Verify this is a real ELF */
1422 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) { 1627 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1423 if (be_verbose > 2) printf("%s: not an ELF\n", filename); 1628 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1424 return ret; 1629 return 2;
1425 } 1630 }
1631
1632 /* Possibly filter based on ELF bitness */
1426 switch (match_bits) { 1633 switch (match_bits) {
1427 case 32: 1634 case 32:
1428 if (elf->elf_class != ELFCLASS32) 1635 if (elf->elf_class != ELFCLASS32)
1429 goto label_done; 1636 goto done;
1430 break; 1637 break;
1431 case 64: 1638 case 64:
1432 if (elf->elf_class != ELFCLASS64) 1639 if (elf->elf_class != ELFCLASS64)
1433 goto label_done; 1640 goto done;
1434 break; 1641 break;
1435 default: break;
1436 } 1642 }
1437 if (match_etypes) { 1643
1438 char sbuf[126]; 1644 /* Possibly filter based on the ELF's e_type field */
1439 strncpy(sbuf, match_etypes, sizeof(sbuf)); 1645 array_for_each(match_etypes, n, match_etype)
1440 if (strchr(match_etypes, ',') != NULL) {
1441 char *p;
1442 while ((p = strrchr(sbuf, ',')) != NULL) {
1443 *p = 0;
1444 if (etype_lookup(p+1) == get_etype(elf)) 1646 if (etype_lookup(match_etype) == get_etype(elf))
1445 goto label_ret; 1647 goto scanit;
1446 } 1648 if (array_cnt(match_etypes))
1447 }
1448 if (etype_lookup(sbuf) != get_etype(elf))
1449 goto label_done; 1649 goto done;
1450 }
1451 1650
1452label_ret: 1651 scanit:
1453 ret = scanelf_elfobj(elf); 1652 ret = scanelf_elfobj(elf);
1454 1653
1455label_done: 1654 done:
1456 unreadelf(elf); 1655 unreadelf(elf);
1457 return ret; 1656 return ret;
1458} 1657}
1459 1658
1460/* scan an archive of elfs */ 1659/* scan an archive of elfs */
1483 munmap(ar_buffer, len); 1682 munmap(ar_buffer, len);
1484 1683
1485 return 0; 1684 return 0;
1486} 1685}
1487/* scan a file which may be an elf or an archive or some other magical beast */ 1686/* scan a file which may be an elf or an archive or some other magical beast */
1488static int scanelf_file(const char *filename, const struct stat *st_cache) 1687static int scanelf_fileat(int dir_fd, const char *filename, const struct stat *st_cache)
1489{ 1688{
1490 const struct stat *st = st_cache; 1689 const struct stat *st = st_cache;
1491 struct stat symlink_st; 1690 struct stat symlink_st;
1492 int fd; 1691 int fd;
1493 1692
1494 /* always handle regular files and handle symlinked files if no -y */ 1693 /* always handle regular files and handle symlinked files if no -y */
1495 if (S_ISLNK(st->st_mode)) { 1694 if (S_ISLNK(st->st_mode)) {
1496 if (!scan_symlink) return 1; 1695 if (!scan_symlink)
1696 return 1;
1497 stat(filename, &symlink_st); 1697 fstatat(dir_fd, filename, &symlink_st, 0);
1498 st = &symlink_st; 1698 st = &symlink_st;
1499 } 1699 }
1500 1700
1501 if (!S_ISREG(st->st_mode)) { 1701 if (!S_ISREG(st->st_mode)) {
1502 if (be_verbose > 2) printf("%s: skipping non-file\n", filename); 1702 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1505 1705
1506 if (match_perms) { 1706 if (match_perms) {
1507 if ((st->st_mode | match_perms) != st->st_mode) 1707 if ((st->st_mode | match_perms) != st->st_mode)
1508 return 1; 1708 return 1;
1509 } 1709 }
1510 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1) 1710 fd = openat(dir_fd, filename, (fix_elf ? O_RDWR : O_RDONLY) | O_CLOEXEC);
1711 if (fd == -1) {
1712 if (fix_elf && errno == ETXTBSY)
1713 warnp("%s: could not fix", filename);
1714 else if (be_verbose > 2)
1715 printf("%s: skipping file: %s\n", filename, strerror(errno));
1511 return 1; 1716 return 1;
1717 }
1512 1718
1513 if (scanelf_elf(filename, fd, st->st_size) == 1 && scan_archives) 1719 if (scanelf_elf(filename, fd, st->st_size) == 2) {
1514 /* if it isn't an ELF, maybe it's an .a archive */ 1720 /* if it isn't an ELF, maybe it's an .a archive */
1721 if (scan_archives)
1515 scanelf_archive(filename, fd, st->st_size); 1722 scanelf_archive(filename, fd, st->st_size);
1516 1723
1724 /*
1725 * unreadelf() implicitly closes its fd, so only close it
1726 * when we are returning it in the non-ELF case
1727 */
1517 close(fd); 1728 close(fd);
1729 }
1730
1518 return 0; 1731 return 0;
1519} 1732}
1520 1733
1521static const char *maybe_add_root(const char *fname, char *buf)
1522{
1523 if (root && strncmp(fname, root, strlen(root))) {
1524 strcpy(buf, root);
1525 strncat(buf, fname, __PAX_UTILS_PATH_MAX - strlen(root) - 1);
1526 fname = buf;
1527 }
1528 return fname;
1529}
1530
1531/* scan a directory for ET_EXEC files and print when we find one */ 1734/* scan a directory for ET_EXEC files and print when we find one */
1532static int scanelf_dir(const char *path) 1735static int scanelf_dirat(int dir_fd, const char *path)
1533{ 1736{
1534 register DIR *dir; 1737 register DIR *dir;
1535 register struct dirent *dentry; 1738 register struct dirent *dentry;
1536 struct stat st_top, st; 1739 struct stat st_top, st;
1537 char buf[__PAX_UTILS_PATH_MAX]; 1740 char buf[__PAX_UTILS_PATH_MAX], *subpath;
1538 char _path[__PAX_UTILS_PATH_MAX];
1539 size_t pathlen = 0, len = 0; 1741 size_t pathlen = 0, len = 0;
1540 int ret = 0; 1742 int ret = 0;
1541 1743 int subdir_fd;
1542 path = maybe_add_root(path, _path);
1543 1744
1544 /* make sure path exists */ 1745 /* make sure path exists */
1545 if (lstat(path, &st_top) == -1) { 1746 if (fstatat(dir_fd, path, &st_top, AT_SYMLINK_NOFOLLOW) == -1) {
1546 if (be_verbose > 2) printf("%s: does not exist\n", path); 1747 if (be_verbose > 2) printf("%s: does not exist\n", path);
1547 return 1; 1748 return 1;
1548 } 1749 }
1549 1750
1550 /* ok, if it isn't a directory, assume we can open it */ 1751 /* ok, if it isn't a directory, assume we can open it */
1551 if (!S_ISDIR(st_top.st_mode)) { 1752 if (!S_ISDIR(st_top.st_mode))
1552 return scanelf_file(path, &st_top); 1753 return scanelf_fileat(dir_fd, path, &st_top);
1553 }
1554 1754
1555 /* now scan the dir looking for fun stuff */ 1755 /* now scan the dir looking for fun stuff */
1556 if ((dir = opendir(path)) == NULL) { 1756 subdir_fd = openat(dir_fd, path, O_RDONLY|O_CLOEXEC);
1557 warnf("could not opendir %s: %s", path, strerror(errno)); 1757 if (subdir_fd == -1)
1758 dir = NULL;
1759 else
1760 dir = fdopendir(subdir_fd);
1761 if (dir == NULL) {
1762 if (subdir_fd != -1)
1763 close(subdir_fd);
1764 else if (be_verbose > 2)
1765 printf("%s: skipping dir: %s\n", path, strerror(errno));
1558 return 1; 1766 return 1;
1559 } 1767 }
1560 if (be_verbose > 1) printf("%s: scanning dir\n", path); 1768 if (be_verbose > 1) printf("%s: scanning dir\n", path);
1561 1769
1562 pathlen = strlen(path); 1770 subpath = stpcpy(buf, path);
1771 if (subpath[-1] != '/')
1772 *subpath++ = '/';
1773 pathlen = subpath - buf;
1563 while ((dentry = readdir(dir))) { 1774 while ((dentry = readdir(dir))) {
1564 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1775 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
1565 continue; 1776 continue;
1777
1778 if (fstatat(subdir_fd, dentry->d_name, &st, AT_SYMLINK_NOFOLLOW) == -1)
1779 continue;
1780
1566 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1781 len = strlen(dentry->d_name);
1567 if (len >= sizeof(buf)) { 1782 if (len + pathlen + 1 >= sizeof(buf)) {
1568 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path, 1783 warnf("Skipping '%s%s': len > sizeof(buf); %zu > %zu\n",
1569 (unsigned long)len, (unsigned long)sizeof(buf)); 1784 path, dentry->d_name, len + pathlen + 1, sizeof(buf));
1570 continue; 1785 continue;
1571 } 1786 }
1572 snprintf(buf, sizeof(buf), "%s%s%s", path, (path[pathlen-1] == '/') ? "" : "/", dentry->d_name); 1787 memcpy(subpath, dentry->d_name, len);
1573 if (lstat(buf, &st) != -1) { 1788 subpath[len] = '\0';
1789
1574 if (S_ISREG(st.st_mode)) 1790 if (S_ISREG(st.st_mode))
1575 ret = scanelf_file(buf, &st); 1791 ret = scanelf_fileat(dir_fd, buf, &st);
1576 else if (dir_recurse && S_ISDIR(st.st_mode)) { 1792 else if (dir_recurse && S_ISDIR(st.st_mode)) {
1577 if (dir_crossmount || (st_top.st_dev == st.st_dev)) 1793 if (dir_crossmount || (st_top.st_dev == st.st_dev))
1578 ret = scanelf_dir(buf); 1794 ret = scanelf_dirat(dir_fd, buf);
1579 }
1580 } 1795 }
1581 } 1796 }
1582 closedir(dir); 1797 closedir(dir);
1798
1583 return ret; 1799 return ret;
1584} 1800}
1801static int scanelf_dir(const char *path)
1802{
1803 return scanelf_dirat(root_fd, root_rel_path(path));
1804}
1585 1805
1586static int scanelf_from_file(const char *filename) 1806static int scanelf_from_file(const char *filename)
1587{ 1807{
1588 FILE *fp = NULL; 1808 FILE *fp;
1589 char *p; 1809 char *p, *path;
1590 char path[__PAX_UTILS_PATH_MAX]; 1810 size_t len;
1591 int ret = 0; 1811 int ret;
1592 1812
1593 if (strcmp(filename, "-") == 0) 1813 if (strcmp(filename, "-") == 0)
1594 fp = stdin; 1814 fp = stdin;
1595 else if ((fp = fopen(filename, "r")) == NULL) 1815 else if ((fp = fopen(filename, "r")) == NULL)
1596 return 1; 1816 return 1;
1597 1817
1598 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) { 1818 path = NULL;
1819 len = 0;
1820 ret = 0;
1821 while (getline(&path, &len, fp) != -1) {
1599 if ((p = strchr(path, '\n')) != NULL) 1822 if ((p = strchr(path, '\n')) != NULL)
1600 *p = 0; 1823 *p = 0;
1601 search_path = path; 1824 search_path = path;
1602 ret = scanelf_dir(path); 1825 ret = scanelf_dir(path);
1603 } 1826 }
1827 free(path);
1828
1604 if (fp != stdin) 1829 if (fp != stdin)
1605 fclose(fp); 1830 fclose(fp);
1831
1606 return ret; 1832 return ret;
1607} 1833}
1608 1834
1609#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__) 1835#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__)
1610 1836
1611static int load_ld_cache_config(int i, const char *fname) 1837static int _load_ld_cache_config(const char *fname)
1612{ 1838{
1613 FILE *fp = NULL; 1839 FILE *fp = NULL;
1614 char *p; 1840 char *p, *path;
1615 char path[__PAX_UTILS_PATH_MAX]; 1841 size_t len;
1616 char _fname[__PAX_UTILS_PATH_MAX]; 1842 int curr_fd = -1;
1617 1843
1618 fname = maybe_add_root(fname, _fname); 1844 fp = fopenat_r(root_fd, root_rel_path(fname));
1619 1845 if (fp == NULL)
1620 if ((fp = fopen(fname, "r")) == NULL)
1621 return i; 1846 return -1;
1622 1847
1623 while ((fgets(path, __PAX_UTILS_PATH_MAX, fp)) != NULL) { 1848 path = NULL;
1849 len = 0;
1850 while (getline(&path, &len, fp) != -1) {
1624 if ((p = strrchr(path, '\r')) != NULL) 1851 if ((p = strrchr(path, '\r')) != NULL)
1625 *p = 0; 1852 *p = 0;
1626 if ((p = strchr(path, '\n')) != NULL) 1853 if ((p = strchr(path, '\n')) != NULL)
1627 *p = 0; 1854 *p = 0;
1628 1855
1629 /* recursive includes of the same file will make this segfault. */ 1856 /* recursive includes of the same file will make this segfault. */
1630 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) { 1857 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) {
1631 glob_t gl; 1858 glob_t gl;
1632 size_t x; 1859 size_t x;
1633 char gpath[__PAX_UTILS_PATH_MAX]; 1860 const char *gpath;
1634 1861
1635 memset(gpath, 0, sizeof(gpath)); 1862 /* re-use existing path buffer ... need to be creative */
1636 if (root)
1637 strcpy(gpath, root);
1638
1639 if (path[8] != '/') 1863 if (path[8] != '/')
1640 snprintf(gpath+strlen(gpath), sizeof(gpath)-strlen(gpath), "/etc/%s", &path[8]); 1864 gpath = memcpy(path + 3, "/etc/", 5);
1641 else 1865 else
1642 strncpy(gpath+strlen(gpath), &path[8], sizeof(gpath)-strlen(gpath)); 1866 gpath = path + 8;
1867 if (root_fd != AT_FDCWD) {
1868 if (curr_fd == -1) {
1869 curr_fd = open(".", O_RDONLY|O_CLOEXEC);
1870 if (fchdir(root_fd))
1871 errp("unable to change to root dir");
1872 }
1873 gpath = root_rel_path(gpath);
1874 }
1643 1875
1644 if (glob(gpath, 0, NULL, &gl) == 0) { 1876 if (glob(gpath, 0, NULL, &gl) == 0) {
1645 for (x = 0; x < gl.gl_pathc; ++x) { 1877 for (x = 0; x < gl.gl_pathc; ++x) {
1646 /* try to avoid direct loops */ 1878 /* try to avoid direct loops */
1647 if (strcmp(gl.gl_pathv[x], fname) == 0) 1879 if (strcmp(gl.gl_pathv[x], fname) == 0)
1648 continue; 1880 continue;
1649 i = load_ld_cache_config(i, gl.gl_pathv[x]); 1881 _load_ld_cache_config(gl.gl_pathv[x]);
1650 } 1882 }
1651 globfree(&gl); 1883 globfree(&gl);
1652 continue;
1653 } 1884 }
1885
1886 /* failed globs are ignored by glibc */
1887 continue;
1654 } 1888 }
1655 1889
1656 if (*path != '/') 1890 if (*path != '/')
1657 continue; 1891 continue;
1658 1892
1659 xarraypush(ldpaths, path, strlen(path)); 1893 xarraypush_str(ldpaths, path);
1660 } 1894 }
1895 free(path);
1661 1896
1662 fclose(fp); 1897 fclose(fp);
1898
1899 if (curr_fd != -1) {
1900 if (fchdir(curr_fd))
1901 {/* don't care */}
1902 close(curr_fd);
1903 }
1904
1663 return i; 1905 return 0;
1664} 1906}
1665 1907
1666#elif defined(__FreeBSD__) || defined(__DragonFly__) 1908#elif defined(__FreeBSD__) || defined(__DragonFly__)
1667 1909
1668static int load_ld_cache_config(int i, const char *fname) 1910static int _load_ld_cache_config(const char *fname)
1669{ 1911{
1670 FILE *fp = NULL; 1912 FILE *fp = NULL;
1671 char *b = NULL, *p; 1913 char *b = NULL, *p;
1672 struct elfhints_hdr hdr; 1914 struct elfhints_hdr hdr;
1673 char _fname[__PAX_UTILS_PATH_MAX];
1674 1915
1675 fname = maybe_add_root(fname, _fname); 1916 fp = fopenat_r(root_fd, root_rel_path(fname));
1676 1917 if (fp == NULL)
1677 if ((fp = fopen(fname, "r")) == NULL)
1678 return i; 1918 return -1;
1679 1919
1680 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) || 1920 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) ||
1681 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 || 1921 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 ||
1682 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1) 1922 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1)
1683 { 1923 {
1684 fclose(fp); 1924 fclose(fp);
1685 return i; 1925 return -1;
1686 } 1926 }
1687 1927
1688 b = xmalloc(hdr.dirlistlen + 1); 1928 b = xmalloc(hdr.dirlistlen + 1);
1689 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) { 1929 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) {
1690 fclose(fp); 1930 fclose(fp);
1691 free(b); 1931 free(b);
1692 return i; 1932 return -1;
1693 } 1933 }
1694 1934
1695 while ((p = strsep(&b, ":"))) { 1935 while ((p = strsep(&b, ":"))) {
1696 if (*p == '\0') 1936 if (*p == '\0')
1697 continue; 1937 continue;
1698 xarraypush(ldpaths, p, strlen(p)); 1938 xarraypush_str(ldpaths, p);
1699 } 1939 }
1700 1940
1701 free(b); 1941 free(b);
1702 fclose(fp); 1942 fclose(fp);
1703 return i; 1943 return 0;
1704} 1944}
1705 1945
1706#else 1946#else
1707#ifdef __ELF__ 1947#ifdef __ELF__
1708#warning Cache config support not implemented for your target 1948#warning Cache config support not implemented for your target
1709#endif 1949#endif
1710static int load_ld_cache_config(int i, const char *fname) 1950static int _load_ld_cache_config(const char *fname)
1711{ 1951{
1712 return 0; 1952 return 0;
1713} 1953}
1714#endif 1954#endif
1955
1956static void load_ld_cache_config(const char *fname)
1957{
1958 bool scan_l, scan_ul, scan_ull;
1959 size_t n;
1960 const char *ldpath;
1961
1962 _load_ld_cache_config(fname);
1963
1964 scan_l = scan_ul = scan_ull = false;
1965 array_for_each(ldpaths, n, ldpath) {
1966 if (!scan_l && !strcmp(ldpath, "/lib")) scan_l = true;
1967 if (!scan_ul && !strcmp(ldpath, "/usr/lib")) scan_ul = true;
1968 if (!scan_ull && !strcmp(ldpath, "/usr/local/lib")) scan_ull = true;
1969 }
1970
1971 if (!scan_l) xarraypush_str(ldpaths, "/lib");
1972 if (!scan_ul) xarraypush_str(ldpaths, "/usr/lib");
1973 if (!scan_ull) xarraypush_str(ldpaths, "/usr/local/lib");
1974}
1715 1975
1716/* scan /etc/ld.so.conf for paths */ 1976/* scan /etc/ld.so.conf for paths */
1717static void scanelf_ldpath(void) 1977static void scanelf_ldpath(void)
1718{ 1978{
1719 char scan_l, scan_ul, scan_ull;
1720 size_t n; 1979 size_t n;
1721 const char *ldpath; 1980 const char *ldpath;
1722 int i = 0;
1723 1981
1724 if (array_cnt(ldpaths) == 0)
1725 err("Unable to load any paths from ld.so.conf");
1726
1727 scan_l = scan_ul = scan_ull = 0;
1728
1729 array_for_each(ldpaths, n, ldpath) { 1982 array_for_each(ldpaths, n, ldpath)
1730 if (!scan_l && !strcmp(ldpath, "/lib")) scan_l = 1;
1731 if (!scan_ul && !strcmp(ldpath, "/usr/lib")) scan_ul = 1;
1732 if (!scan_ull && !strcmp(ldpath, "/usr/local/lib")) scan_ull = 1;
1733 scanelf_dir(ldpath); 1983 scanelf_dir(ldpath);
1734 ++i;
1735 }
1736
1737 if (!scan_l) scanelf_dir("/lib");
1738 if (!scan_ul) scanelf_dir("/usr/lib");
1739 if (!scan_ull) scanelf_dir("/usr/local/lib");
1740} 1984}
1741 1985
1742/* scan env PATH for paths */ 1986/* scan env PATH for paths */
1743static void scanelf_envpath(void) 1987static void scanelf_envpath(void)
1744{ 1988{
1761#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DIYO:ZCBhV" 2005#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DIYO:ZCBhV"
1762#define a_argument required_argument 2006#define a_argument required_argument
1763static struct option const long_opts[] = { 2007static struct option const long_opts[] = {
1764 {"path", no_argument, NULL, 'p'}, 2008 {"path", no_argument, NULL, 'p'},
1765 {"ldpath", no_argument, NULL, 'l'}, 2009 {"ldpath", no_argument, NULL, 'l'},
2010 {"use-ldpath",no_argument, NULL, 129},
1766 {"root", a_argument, NULL, 128}, 2011 {"root", a_argument, NULL, 128},
1767 {"recursive", no_argument, NULL, 'R'}, 2012 {"recursive", no_argument, NULL, 'R'},
1768 {"mount", no_argument, NULL, 'm'}, 2013 {"mount", no_argument, NULL, 'm'},
1769 {"symlink", no_argument, NULL, 'y'}, 2014 {"symlink", no_argument, NULL, 'y'},
1770 {"archives", no_argument, NULL, 'A'}, 2015 {"archives", no_argument, NULL, 'A'},
1805}; 2050};
1806 2051
1807static const char * const opts_help[] = { 2052static const char * const opts_help[] = {
1808 "Scan all directories in PATH environment", 2053 "Scan all directories in PATH environment",
1809 "Scan all directories in /etc/ld.so.conf", 2054 "Scan all directories in /etc/ld.so.conf",
2055 "Use ld.so.conf to show full path (use with -r/-n)",
1810 "Root directory (use with -l or -p)", 2056 "Root directory (use with -l or -p)",
1811 "Scan directories recursively", 2057 "Scan directories recursively",
1812 "Don't recursively cross mount points", 2058 "Don't recursively cross mount points",
1813 "Don't scan symlinks", 2059 "Don't scan symlinks",
1814 "Scan archives (.a files)", 2060 "Scan archives (.a files)",
1815 "Utilize ld.so.cache information (use with -r/-n)", 2061 "Utilize ld.so.cache to show full path (use with -r/-n)",
1816 "Try and 'fix' bad things (use with -r/-e)", 2062 "Try and 'fix' bad things (use with -r/-e)",
1817 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n", 2063 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
1818 "Print PaX markings", 2064 "Print PaX markings",
1819 "Print GNU_STACK/PT_LOAD markings", 2065 "Print GNU_STACK/PT_LOAD markings",
1820 "Print TEXTREL information", 2066 "Print TEXTREL information",
1824 "Print BIND information", 2070 "Print BIND information",
1825 "Print SONAME information", 2071 "Print SONAME information",
1826 "Find a specified symbol", 2072 "Find a specified symbol",
1827 "Find a specified section", 2073 "Find a specified section",
1828 "Find a specified library", 2074 "Find a specified library",
1829 "Use regex matching rather than string compare (use with -s)", 2075 "Use regex rather than string compare (with -s); specify twice for case insensitive",
1830 "Locate cause of TEXTREL", 2076 "Locate cause of TEXTREL",
1831 "Print only ELF files matching etype ET_DYN,ET_EXEC ...", 2077 "Print only ELF files matching etype ET_DYN,ET_EXEC ...",
1832 "Print only ELF files matching numeric bits", 2078 "Print only ELF files matching numeric bits",
1833 "Print Endianness", 2079 "Print Endianness",
1834 "Print OSABI", 2080 "Print OSABI",
1849}; 2095};
1850 2096
1851/* display usage and exit */ 2097/* display usage and exit */
1852static void usage(int status) 2098static void usage(int status)
1853{ 2099{
1854 unsigned long i; 2100 const char a_arg[] = "<arg>";
2101 size_t a_arg_len = strlen(a_arg) + 2;
2102 size_t i;
2103 int optlen;
1855 printf("* Scan ELF binaries for stuff\n\n" 2104 printf("* Scan ELF binaries for stuff\n\n"
1856 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0); 2105 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
1857 printf("Options: -[%s]\n", PARSE_FLAGS); 2106 printf("Options: -[%s]\n", PARSE_FLAGS);
2107
2108 /* prescan the --long opt length to auto-align */
2109 optlen = 0;
1858 for (i = 0; long_opts[i].name; ++i) 2110 for (i = 0; long_opts[i].name; ++i) {
2111 int l = strlen(long_opts[i].name);
2112 if (long_opts[i].has_arg == a_argument)
2113 l += a_arg_len;
2114 optlen = max(l, optlen);
2115 }
2116
2117 for (i = 0; long_opts[i].name; ++i) {
2118 /* first output the short flag if it has one */
2119 if (long_opts[i].val > '~')
2120 printf(" ");
2121 else
2122 printf(" -%c, ", long_opts[i].val);
2123
2124 /* then the long flag */
1859 if (long_opts[i].has_arg == no_argument) 2125 if (long_opts[i].has_arg == no_argument)
1860 printf(" -%c, --%-14s* %s\n", long_opts[i].val, 2126 printf("--%-*s", optlen, long_opts[i].name);
1861 long_opts[i].name, opts_help[i]);
1862 else if (long_opts[i].val > '~')
1863 printf(" --%-7s <arg> * %s\n",
1864 long_opts[i].name, opts_help[i]);
1865 else 2127 else
1866 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val, 2128 printf("--%s %s %*s", long_opts[i].name, a_arg,
1867 long_opts[i].name, opts_help[i]); 2129 (int)(optlen - strlen(long_opts[i].name) - a_arg_len), "");
2130
2131 /* finally the help text */
2132 printf("* %s\n", opts_help[i]);
2133 }
1868 2134
1869 puts("\nFor more information, see the scanelf(1) manpage"); 2135 puts("\nFor more information, see the scanelf(1) manpage");
1870 exit(status); 2136 exit(status);
1871} 2137}
1872 2138
1877 flags |= PF_NO##flag; \ 2143 flags |= PF_NO##flag; \
1878 } else { \ 2144 } else { \
1879 flags &= ~PF_NO##flag; \ 2145 flags &= ~PF_NO##flag; \
1880 flags |= PF_##flag; \ 2146 flags |= PF_##flag; \
1881 } 2147 }
2148static void parse_delimited(array_t *arr, char *arg, const char *delim)
2149{
2150 char *ele = strtok(arg, delim);
2151 if (!ele) /* edge case: -s '' */
2152 xarraypush_str(arr, "");
2153 while (ele) {
2154 xarraypush_str(arr, ele);
2155 ele = strtok(NULL, delim);
2156 }
2157}
1882static int parseargs(int argc, char *argv[]) 2158static int parseargs(int argc, char *argv[])
1883{ 2159{
1884 int i; 2160 int i;
1885 const char *from_file = NULL; 2161 const char *from_file = NULL;
1886 int ret = 0; 2162 int ret = 0;
2163 char load_cache_config = 0;
1887 2164
1888 opterr = 0; 2165 opterr = 0;
1889 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 2166 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
1890 switch (i) { 2167 switch (i) {
1891 2168
1899 case 'f': 2176 case 'f':
1900 if (from_file) warn("You prob don't want to specify -f twice"); 2177 if (from_file) warn("You prob don't want to specify -f twice");
1901 from_file = optarg; 2178 from_file = optarg;
1902 break; 2179 break;
1903 case 'E': 2180 case 'E':
1904 match_etypes = optarg; 2181 /* historically, this was comma delimited */
2182 parse_delimited(match_etypes, optarg, ",");
1905 break; 2183 break;
1906 case 'M': 2184 case 'M':
1907 match_bits = atoi(optarg); 2185 match_bits = atoi(optarg);
1908 if (match_bits == 0) { 2186 if (match_bits == 0) {
1909 if (strcmp(optarg, "ELFCLASS32") == 0) 2187 if (strcmp(optarg, "ELFCLASS32") == 0)
1916 if (sscanf(optarg, "%o", &match_perms) == -1) 2194 if (sscanf(optarg, "%o", &match_perms) == -1)
1917 match_bits = 0; 2195 match_bits = 0;
1918 break; 2196 break;
1919 case 'o': { 2197 case 'o': {
1920 if (freopen(optarg, "w", stdout) == NULL) 2198 if (freopen(optarg, "w", stdout) == NULL)
1921 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 2199 errp("Could not freopen(%s)", optarg);
1922 break; 2200 break;
1923 } 2201 }
1924 case 'k': 2202 case 'k':
1925 xarraypush(find_section_arr, optarg, strlen(optarg)); 2203 xarraypush_str(find_section_arr, optarg);
1926 break; 2204 break;
1927 case 's': { 2205 case 's':
1928 if (find_sym) warn("You prob don't want to specify -s twice"); 2206 /* historically, this was comma delimited */
1929 find_sym = optarg; 2207 parse_delimited(find_sym_arr, optarg, ",");
1930 break; 2208 break;
1931 }
1932 case 'N': 2209 case 'N':
1933 xarraypush(find_lib_arr, optarg, strlen(optarg)); 2210 xarraypush_str(find_lib_arr, optarg);
1934 break; 2211 break;
1935 case 'F': { 2212 case 'F': {
1936 if (out_format) warn("You prob don't want to specify -F twice"); 2213 if (out_format) warn("You prob don't want to specify -F twice");
1937 out_format = optarg; 2214 out_format = optarg;
1938 break; 2215 break;
1979 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)))) 2256 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1980 setpax = flags; 2257 setpax = flags;
1981 break; 2258 break;
1982 } 2259 }
1983 case 'Z': show_size = 1; break; 2260 case 'Z': show_size = 1; break;
1984 case 'g': g_match = 1; break; 2261 case 'g': ++g_match; break;
1985 case 'L': use_ldcache = 1; break; 2262 case 'L': load_cache_config = use_ldcache = 1; break;
1986 case 'y': scan_symlink = 0; break; 2263 case 'y': scan_symlink = 0; break;
1987 case 'A': scan_archives = 1; break; 2264 case 'A': scan_archives = 1; break;
1988 case 'C': color_init(true); break; 2265 case 'C': color_init(true); break;
1989 case 'B': show_banner = 0; break; 2266 case 'B': show_banner = 0; break;
1990 case 'l': scan_ldpath = 1; break; 2267 case 'l': load_cache_config = scan_ldpath = 1; break;
1991 case 'p': scan_envpath = 1; break; 2268 case 'p': scan_envpath = 1; break;
1992 case 'R': dir_recurse = 1; break; 2269 case 'R': dir_recurse = 1; break;
1993 case 'm': dir_crossmount = 0; break; 2270 case 'm': dir_crossmount = 0; break;
1994 case 'X': ++fix_elf; break; 2271 case 'X': ++fix_elf; break;
1995 case 'x': show_pax = 1; break; 2272 case 'x': show_pax = 1; break;
1999 case 'n': show_needed = 1; break; 2276 case 'n': show_needed = 1; break;
2000 case 'i': show_interp = 1; break; 2277 case 'i': show_interp = 1; break;
2001 case 'b': show_bind = 1; break; 2278 case 'b': show_bind = 1; break;
2002 case 'S': show_soname = 1; break; 2279 case 'S': show_soname = 1; break;
2003 case 'T': show_textrels = 1; break; 2280 case 'T': show_textrels = 1; break;
2004 case 'q': be_quiet = 1; break; 2281 case 'q': be_quiet = min(be_quiet, 20) + 1; break;
2005 case 'v': be_verbose = (be_verbose % 20) + 1; break; 2282 case 'v': be_verbose = min(be_verbose, 20) + 1; break;
2006 case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break; 2283 case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break;
2007 case 'D': show_endian = 1; break; 2284 case 'D': show_endian = 1; break;
2008 case 'I': show_osabi = 1; break; 2285 case 'I': show_osabi = 1; break;
2009 case 'Y': show_eabi = 1; break; 2286 case 'Y': show_eabi = 1; break;
2010 case 128: 2287 case 128:
2011 root = optarg; 2288 root_fd = open(optarg, O_RDONLY|O_CLOEXEC);
2289 if (root_fd == -1)
2290 err("Could not open root: %s", optarg);
2012 break; 2291 break;
2292 case 129: load_cache_config = use_ldpath = 1; break;
2013 case ':': 2293 case ':':
2014 err("Option '%c' is missing parameter", optopt); 2294 err("Option '%c' is missing parameter", optopt);
2015 case '?': 2295 case '?':
2016 err("Unknown option '%c' or argument missing", optopt); 2296 err("Unknown option '%c' or argument missing", optopt);
2017 default: 2297 default:
2018 err("Unhandled option '%c'; please report this", i); 2298 err("Unhandled option '%c'; please report this", i);
2019 } 2299 }
2020 } 2300 }
2021 if (show_textrels && be_verbose) { 2301 if (show_textrels && be_verbose)
2022 if (which("objdump") != NULL) 2302 objdump = which("objdump", "OBJDUMP");
2023 has_objdump = 1; 2303 /* precompile all the regexes */
2304 if (g_match) {
2305 regex_t preg;
2306 const char *this_sym;
2307 size_t n;
2308 int flags = REG_EXTENDED | REG_NOSUB | (g_match > 1 ? REG_ICASE : 0);
2309
2310 array_for_each(find_sym_arr, n, this_sym) {
2311 /* see scanelf_match_symname for logic info */
2312 switch (this_sym[0]) {
2313 case '%':
2314 while (*(this_sym++))
2315 if (*this_sym == '%') {
2316 ++this_sym;
2317 break;
2318 }
2319 break;
2320 case '+':
2321 case '-':
2322 ++this_sym;
2323 break;
2324 }
2325 if (*this_sym == '*')
2326 ++this_sym;
2327
2328 ret = regcomp(&preg, this_sym, flags);
2329 if (ret) {
2330 char err[256];
2331 regerror(ret, &preg, err, sizeof(err));
2332 err("regcomp of %s failed: %s", this_sym, err);
2333 }
2334 xarraypush(find_sym_regex_arr, &preg, sizeof(preg));
2335 }
2024 } 2336 }
2025 /* flatten arrays for display */ 2337 /* flatten arrays for display */
2026 if (array_cnt(find_lib_arr)) 2338 find_sym = array_flatten_str(find_sym_arr);
2027 find_lib = array_flatten_str(find_lib_arr); 2339 find_lib = array_flatten_str(find_lib_arr);
2028 if (array_cnt(find_section_arr))
2029 find_section = array_flatten_str(find_section_arr); 2340 find_section = array_flatten_str(find_section_arr);
2030 /* let the format option override all other options */ 2341 /* let the format option override all other options */
2031 if (out_format) { 2342 if (out_format) {
2032 show_pax = show_phdr = show_textrel = show_rpath = \ 2343 show_pax = show_phdr = show_textrel = show_rpath = \
2033 show_needed = show_interp = show_bind = show_soname = \ 2344 show_needed = show_interp = show_bind = show_soname = \
2034 show_textrels = show_perms = show_endian = show_size = \ 2345 show_textrels = show_perms = show_endian = show_size = \
2062 case 'i': show_interp = 1; break; 2373 case 'i': show_interp = 1; break;
2063 case 'b': show_bind = 1; break; 2374 case 'b': show_bind = 1; break;
2064 case 'S': show_soname = 1; break; 2375 case 'S': show_soname = 1; break;
2065 case 'T': show_textrels = 1; break; 2376 case 'T': show_textrels = 1; break;
2066 default: 2377 default:
2067 err("Invalid format specifier '%c' (byte %i)", 2378 err("invalid format specifier '%c' (byte %i)",
2068 out_format[i], i+1); 2379 out_format[i], i+1);
2069 } 2380 }
2070 } 2381 }
2071 2382
2072 /* construct our default format */ 2383 /* construct our default format */
2095 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); 2406 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
2096 } 2407 }
2097 if (be_verbose > 2) printf("Format: %s\n", out_format); 2408 if (be_verbose > 2) printf("Format: %s\n", out_format);
2098 2409
2099 /* now lets actually do the scanning */ 2410 /* now lets actually do the scanning */
2100 if (scan_ldpath || use_ldcache) 2411 if (load_cache_config)
2101 load_ld_cache_config(0, __PAX_UTILS_DEFAULT_LD_CACHE_CONFIG); 2412 load_ld_cache_config(__PAX_UTILS_DEFAULT_LD_CACHE_CONFIG);
2102 if (scan_ldpath) scanelf_ldpath(); 2413 if (scan_ldpath) scanelf_ldpath();
2103 if (scan_envpath) scanelf_envpath(); 2414 if (scan_envpath) scanelf_envpath();
2104 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath) 2415 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath)
2105 from_file = "-"; 2416 from_file = "-";
2106 if (from_file) { 2417 if (from_file) {
2112 while (optind < argc) { 2423 while (optind < argc) {
2113 search_path = argv[optind++]; 2424 search_path = argv[optind++];
2114 ret = scanelf_dir(search_path); 2425 ret = scanelf_dir(search_path);
2115 } 2426 }
2116 2427
2428#ifdef __PAX_UTILS_CLEANUP
2117 /* clean up */ 2429 /* clean up */
2118 xarrayfree(ldpaths); 2430 xarrayfree(ldpaths);
2431 xarrayfree(find_sym_arr);
2119 xarrayfree(find_lib_arr); 2432 xarrayfree(find_lib_arr);
2120 xarrayfree(find_section_arr); 2433 xarrayfree(find_section_arr);
2434 free(find_sym);
2121 free(find_lib); 2435 free(find_lib);
2122 free(find_section); 2436 free(find_section);
2437 {
2438 size_t n;
2439 regex_t *preg;
2440 array_for_each(find_sym_regex_arr, n, preg)
2441 regfree(preg);
2442 xarrayfree(find_sym_regex_arr);
2443 }
2123 2444
2124 if (ldcache != 0) 2445 if (ldcache != 0)
2125 munmap(ldcache, ldcache_size); 2446 munmap(ldcache, ldcache_size);
2447#endif
2448
2126 return ret; 2449 return ret;
2127} 2450}
2128 2451
2129static char **get_split_env(const char *envvar) 2452static char **get_split_env(const char *envvar)
2130{ 2453{
2187 ret = parseargs(argc, argv); 2510 ret = parseargs(argc, argv);
2188 fclose(stdout); 2511 fclose(stdout);
2189#ifdef __PAX_UTILS_CLEANUP 2512#ifdef __PAX_UTILS_CLEANUP
2190 cleanup(); 2513 cleanup();
2191 warn("The calls to add/delete heap should be off:\n" 2514 warn("The calls to add/delete heap should be off:\n"
2192 "\t- 1 due to the out_buffer not being freed in scanelf_file()\n" 2515 "\t- 1 due to the out_buffer not being freed in scanelf_fileat()\n"
2193 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD"); 2516 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD");
2194#endif 2517#endif
2195 return ret; 2518 return ret;
2196} 2519}
2197 2520

Legend:
Removed from v.1.229  
changed lines
  Added in v.1.267

  ViewVC Help
Powered by ViewVC 1.1.20