/[gentoo-projects]/pax-utils/scanelf.c
Gentoo

Diff of /pax-utils/scanelf.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.32 Revision 1.230
1/* 1/*
2 * Copyright 2003 Ned Ludd <solar@gentoo.org>
3 * Copyright 1999-2005 Gentoo Foundation 2 * Copyright 2003-2007 Gentoo Foundation
4 * Distributed under the terms of the GNU General Public License v2 3 * Distributed under the terms of the GNU General Public License v2
5 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.32 2005/04/07 00:01:40 vapier Exp $ 4 * $Header: /var/cvsroot/gentoo-projects/pax-utils/Attic/scanelf.c,v 1.230 2011/09/27 19:56:15 vapier Exp $
6 * 5 *
7 ******************************************************************** 6 * Copyright 2003-2007 Ned Ludd - <solar@gentoo.org>
8 * This program is free software; you can redistribute it and/or 7 * Copyright 2004-2007 Mike Frysinger - <vapier@gentoo.org>
9 * modify it under the terms of the GNU General Public License as
10 * published by the Free Software Foundation; either version 2 of the
11 * License, or (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place - Suite 330, Boston,
21 * MA 02111-1307, USA.
22 */ 8 */
23 9
24#include <stdio.h>
25#include <stdlib.h>
26#include <sys/types.h>
27#define __USE_GNU
28#include <string.h>
29#include <errno.h>
30#include <unistd.h>
31#include <sys/stat.h>
32#include <dirent.h>
33#include <getopt.h>
34#include <assert.h>
35
36#include "paxelf.h"
37
38static const char *rcsid = "$Id: scanelf.c,v 1.32 2005/04/07 00:01:40 vapier Exp $"; 10static const char *rcsid = "$Id: scanelf.c,v 1.230 2011/09/27 19:56:15 vapier Exp $";
11const char argv0[] = "scanelf";
39 12
13#include "paxinc.h"
40 14
41/* helper functions for showing errors */ 15#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+')
42#define argv0 "scanelf" /*((*argv != NULL) ? argv[0] : __FILE__ "\b\b")*/
43#define warn(fmt, args...) \
44 fprintf(stderr, "%s: " fmt "\n", argv0, ## args)
45#define warnf(fmt, args...) warn("%s(): " fmt, __FUNCTION__, ## args)
46#define err(fmt, args...) \
47 do { \
48 warn(fmt, ## args); \
49 exit(EXIT_FAILURE); \
50 } while (0)
51
52
53 16
54/* prototypes */ 17/* prototypes */
55static void scanelf_file(const char *filename); 18static int file_matches_list(const char *filename, char **matchlist);
56static void scanelf_dir(const char *path);
57static void scanelf_ldpath();
58static void scanelf_envpath();
59static void usage(int status);
60static void parseargs(int argc, char *argv[]);
61 19
62/* variables to control behavior */ 20/* variables to control behavior */
21static char *match_etypes = NULL;
22static array_t _ldpaths = array_init_decl, *ldpaths = &_ldpaths;
63static char scan_ldpath = 0; 23static char scan_ldpath = 0;
64static char scan_envpath = 0; 24static char scan_envpath = 0;
25static char scan_symlink = 1;
26static char scan_archives = 0;
65static char dir_recurse = 0; 27static char dir_recurse = 0;
66static char dir_crossmount = 1; 28static char dir_crossmount = 1;
67static char show_pax = 0; 29static char show_pax = 0;
30static char show_perms = 0;
68static char show_stack = 0; 31static char show_size = 0;
32static char show_phdr = 0;
69static char show_textrel = 0; 33static char show_textrel = 0;
70static char show_rpath = 0; 34static char show_rpath = 0;
71static char show_needed = 0; 35static char show_needed = 0;
36static char show_interp = 0;
37static char show_bind = 0;
38static char show_soname = 0;
39static char show_textrels = 0;
72static char show_banner = 1; 40static char show_banner = 1;
41static char show_endian = 0;
42static char show_osabi = 0;
43static char show_eabi = 0;
73static char be_quiet = 0; 44static char be_quiet = 0;
74static char be_verbose = 0; 45static char be_verbose = 0;
46static char be_wewy_wewy_quiet = 0;
47static char be_semi_verbose = 0;
75static char *find_sym = NULL; 48static char *find_sym = NULL;
49static char *find_lib = NULL;
50static array_t _find_lib_arr = array_init_decl, *find_lib_arr = &_find_lib_arr;
51static char *find_section = NULL;
52static array_t _find_section_arr = array_init_decl, *find_section_arr = &_find_section_arr;
53static char *out_format = NULL;
54static char *search_path = NULL;
55static char fix_elf = 0;
56static char g_match = 0;
57static char use_ldcache = 0;
76 58
59static char **qa_textrels = NULL;
60static char **qa_execstack = NULL;
61static char **qa_wx_load = NULL;
62static char *root;
77 63
64static int match_bits = 0;
65static unsigned int match_perms = 0;
66static void *ldcache = NULL;
67static size_t ldcache_size = 0;
68static unsigned long setpax = 0UL;
78 69
79/* scan an elf file and show all the fun stuff */ 70static int has_objdump = 0;
80static void scanelf_file(const char *filename)
81{
82 int i;
83 char found_pax, found_stack, found_relro, found_textrel,
84 found_rpath, found_needed, found_sym;
85 elfobj *elf;
86 71
87 found_pax = found_stack = found_relro = found_textrel = \ 72/* find the path to a file by name */
88 found_rpath = found_needed = found_sym = 0; 73static int bin_in_path(const char *fname)
74{
75 char fullpath[__PAX_UTILS_PATH_MAX];
76 char *path, *p;
89 77
90 /* verify this is real ELF */ 78 path = getenv("PATH");
91 if ((elf = readelf(filename)) == NULL) { 79 if (!path)
92 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
93 return; 80 return 0;
94 }
95 81
96 if (be_verbose > 1) 82 while ((p = strrchr(path, ':')) != NULL) {
97 printf("%s: {%s,%s} scanning file\n", filename, 83 snprintf(fullpath, sizeof(fullpath), "%s/%s", p + 1, fname);
98 get_elfeitype(elf, EI_CLASS, elf->elf_class), 84 *p = 0;
99 get_elfeitype(elf, EI_DATA, elf->data[EI_DATA])); 85 if (access(fullpath, R_OK) != -1)
100 else if (be_verbose) 86 return 1;
101 printf("%s: scanning file\n", filename);
102
103 /* show the header */
104 if (!be_quiet && show_banner) {
105 printf(" TYPE ");
106 if (show_pax) printf(" PAX ");
107 if (show_stack) printf("STK/REL ");
108 if (show_textrel) printf("TEXTREL ");
109 if (show_rpath) printf("RPATH ");
110 if (show_needed) printf("NEEDED ");
111 printf(" FILE\n");
112 show_banner = 0;
113 }
114
115 /* dump all the good stuff */
116 if (!be_quiet)
117 printf("%-7s ", get_elfetype(elf));
118
119 if (show_pax) {
120 char *paxflags = pax_short_hf_flags(PAX_FLAGS(elf));
121 if (!be_quiet || (be_quiet && strncmp(paxflags, "PeMRxS", 6))) {
122 found_pax = 1;
123 printf("%s ", pax_short_hf_flags(PAX_FLAGS(elf)));
124 } 87 }
125 }
126 88
127 /* stack fun */ 89 return 0;
128 if (show_stack) { 90}
129#define SHOW_STACK(B) \ 91
92/* 1 on failure. 0 otherwise */
93static int rematch(const char *regex, const char *match, int cflags)
94{
95 regex_t preg;
96 int ret;
97
98 if ((match == NULL) || (regex == NULL))
99 return EXIT_FAILURE;
100
101 if ((ret = regcomp(&preg, regex, cflags))) {
102 char err[256];
103
104 if (regerror(ret, &preg, err, sizeof(err)))
105 fprintf(stderr, "regcomp failed: %s", err);
106 else
107 fprintf(stderr, "regcomp failed");
108
109 return EXIT_FAILURE;
110 }
111 ret = regexec(&preg, match, 0, NULL, 0);
112 regfree(&preg);
113
114 return ret;
115}
116
117/* sub-funcs for scanelf_file() */
118static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab)
119{
120 /* find the best SHT_DYNSYM and SHT_STRTAB sections */
121
122 /* debug sections */
123 void *symtab = elf_findsecbyname(elf, ".symtab");
124 void *strtab = elf_findsecbyname(elf, ".strtab");
125 /* runtime sections */
126 void *dynsym = elf_findsecbyname(elf, ".dynsym");
127 void *dynstr = elf_findsecbyname(elf, ".dynstr");
128
129#define GET_SYMTABS(B) \
130 if (elf->elf_class == ELFCLASS ## B) { \ 130 if (elf->elf_class == ELFCLASS ## B) { \
131 if (symtab && dynsym) { \
132 Elf ## B ## _Shdr *esymtab = symtab; \
133 Elf ## B ## _Shdr *edynsym = dynsym; \
134 *sym = (EGET(esymtab->sh_size) > EGET(edynsym->sh_size)) ? symtab : dynsym; \
135 } else \
136 *sym = symtab ? symtab : dynsym; \
137 if (strtab && dynstr) { \
138 Elf ## B ## _Shdr *estrtab = strtab; \
139 Elf ## B ## _Shdr *edynstr = dynstr; \
140 *tab = (EGET(estrtab->sh_size) > EGET(edynstr->sh_size)) ? strtab : dynstr; \
141 } else \
142 *tab = strtab ? strtab : dynstr; \
143 }
144 GET_SYMTABS(32)
145 GET_SYMTABS(64)
146}
147
148static char *scanelf_file_pax(elfobj *elf, char *found_pax)
149{
150 static char ret[7];
151 unsigned long i, shown;
152
153 if (!show_pax) return NULL;
154
155 shown = 0;
156 memset(&ret, 0, sizeof(ret));
157
158 if (elf->phdr) {
159#define SHOW_PAX(B) \
160 if (elf->elf_class == ELFCLASS ## B) { \
131 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 161 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
162 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
163 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
164 if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \
165 continue; \
166 if (fix_elf && setpax) { \
167 /* set the paxctl flags */ \
168 ESET(phdr[i].p_flags, setpax); \
169 } \
170 if (be_quiet && (EGET(phdr[i].p_flags) == (PF_NOEMUTRAMP | PF_NORANDEXEC))) \
171 continue; \
172 memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \
173 *found_pax = 1; \
174 ++shown; \
175 break; \
176 } \
177 }
178 SHOW_PAX(32)
179 SHOW_PAX(64)
180 }
181
182 if (fix_elf && setpax) {
183 /* set the chpax settings */
184 if (elf->elf_class == ELFCLASS32) {
185 if (EHDR32(elf->ehdr)->e_type == ET_DYN || EHDR32(elf->ehdr)->e_type == ET_EXEC)
186 ESET(EHDR32(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
187 } else {
188 if (EHDR64(elf->ehdr)->e_type == ET_DYN || EHDR64(elf->ehdr)->e_type == ET_EXEC)
189 ESET(EHDR64(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax));
190 }
191 }
192
193 /* fall back to EI_PAX if no PT_PAX was found */
194 if (!*ret) {
195 static char *paxflags;
196 paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf));
197 if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) {
198 *found_pax = 1;
199 return (be_wewy_wewy_quiet ? NULL : paxflags);
200 }
201 strncpy(ret, paxflags, sizeof(ret));
202 }
203
204 if (be_wewy_wewy_quiet || (be_quiet && !shown))
205 return NULL;
206 else
207 return ret;
208}
209
210static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load)
211{
212 static char ret[12];
213 char *found;
214 unsigned long i, shown, multi_stack, multi_relro, multi_load;
215 int max_pt_load;
216
217 if (!show_phdr) return NULL;
218
219 memcpy(ret, "--- --- ---\0", 12);
220
221 shown = 0;
222 multi_stack = multi_relro = multi_load = 0;
223 max_pt_load = elf_max_pt_load(elf);
224
225#define NOTE_GNU_STACK ".note.GNU-stack"
226#define SHOW_PHDR(B) \
227 if (elf->elf_class == ELFCLASS ## B) { \
228 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
229 Elf ## B ## _Off offset; \
230 uint32_t flags, check_flags; \
231 if (elf->phdr != NULL) { \
132 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 232 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
133 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 233 for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \
134 if (EGET(phdr[i].p_type) != PT_GNU_STACK && \ 234 if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \
235 if (multi_stack++) \
236 warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \
237 if (file_matches_list(elf->filename, qa_execstack)) \
238 continue; \
239 found = found_phdr; \
240 offset = 0; \
241 check_flags = PF_X; \
135 EGET(phdr[i].p_type) != PT_GNU_RELRO) continue; \ 242 } else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \
136 if (be_quiet && !(EGET(phdr[i].p_flags) & PF_X)) \ 243 if (multi_relro++) \
244 warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \
245 found = found_relro; \
246 offset = 4; \
247 check_flags = PF_X; \
248 } else if (EGET(phdr[i].p_type) == PT_LOAD) { \
249 if (EGET(ehdr->e_type) == ET_DYN || EGET(ehdr->e_type) == ET_EXEC) \
250 if (multi_load++ > max_pt_load) \
251 warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \
252 if (file_matches_list(elf->filename, qa_wx_load)) \
253 continue; \
254 found = found_load; \
255 offset = 8; \
256 check_flags = PF_W|PF_X; \
257 } else \
137 continue; \ 258 continue; \
138 if (EGET(phdr[i].p_type) == PT_GNU_STACK) \ 259 flags = EGET(phdr[i].p_flags); \
260 if (be_quiet && ((flags & check_flags) != check_flags)) \
261 continue; \
262 if ((EGET(phdr[i].p_type) != PT_LOAD) && (fix_elf && ((flags & PF_X) != flags))) { \
263 ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \
264 ret[3] = ret[7] = '!'; \
265 flags = EGET(phdr[i].p_flags); \
266 } \
267 memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \
139 found_stack = 1; \ 268 *found = 1; \
140 if (EGET(phdr[i].p_type) == PT_GNU_RELRO) \ 269 ++shown; \
141 found_relro = 1; \
142 printf("%s ", gnu_short_stack_flags(EGET(phdr[i].p_flags))); \
143 } \ 270 } \
271 } else if (elf->shdr != NULL) { \
272 /* no program headers which means this is prob an object file */ \
273 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
274 Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \
275 char *str; \
276 if ((void*)strtbl > elf->data_end) \
277 goto skip_this_shdr##B; \
278 check_flags = SHF_WRITE|SHF_EXECINSTR; \
279 for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \
280 if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \
281 offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \
282 str = elf->data + offset; \
283 if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \
284 if (!strcmp(str, NOTE_GNU_STACK)) { \
285 if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \
286 flags = EGET(shdr[i].sh_flags); \
287 if (be_quiet && ((flags & check_flags) != check_flags)) \
288 continue; \
289 ++*found_phdr; \
290 shown = 1; \
291 if (flags & SHF_WRITE) ret[0] = 'W'; \
292 if (flags & SHF_ALLOC) ret[1] = 'A'; \
293 if (flags & SHF_EXECINSTR) ret[2] = 'X'; \
294 if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \
295 break; \
296 } \
297 } \
298 skip_this_shdr##B: \
299 if (!multi_stack) { \
300 if (file_matches_list(elf->filename, qa_execstack)) \
301 return NULL; \
302 *found_phdr = 1; \
303 shown = 1; \
304 memcpy(ret, "!WX", 3); \
305 } \
306 } \
144 } 307 }
145 SHOW_STACK(32) 308 SHOW_PHDR(32)
146 SHOW_STACK(64) 309 SHOW_PHDR(64)
147 if (!be_quiet && !found_stack) printf("--- ");
148 if (!be_quiet && !found_relro) printf("--- ");
149 }
150 310
151 /* textrel fun */ 311 if (be_wewy_wewy_quiet || (be_quiet && !shown))
152 if (show_textrel) { 312 return NULL;
313 else
314 return ret;
315}
316
317/*
318 * See if this ELF contains a DT_TEXTREL tag in any of its
319 * PT_DYNAMIC sections.
320 */
321static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel)
322{
323 static const char *ret = "TEXTREL";
324 unsigned long i;
325
326 if (!show_textrel && !show_textrels) return NULL;
327
328 if (file_matches_list(elf->filename, qa_textrels)) return NULL;
329
330 if (elf->phdr) {
153#define SHOW_TEXTREL(B) \ 331#define SHOW_TEXTREL(B) \
154 if (elf->elf_class == ELFCLASS ## B) { \ 332 if (elf->elf_class == ELFCLASS ## B) { \
155 Elf ## B ## _Dyn *dyn; \ 333 Elf ## B ## _Dyn *dyn; \
156 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 334 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
157 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 335 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
336 Elf ## B ## _Off offset; \
158 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 337 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
159 if (phdr[i].p_type != PT_DYNAMIC) continue; \ 338 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
339 offset = EGET(phdr[i].p_offset); \
340 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
160 dyn = DYN ## B (elf->data + EGET(phdr[i].p_offset)); \ 341 dyn = DYN ## B (elf->vdata + offset); \
161 while (EGET(dyn->d_tag) != DT_NULL) { \ 342 while (EGET(dyn->d_tag) != DT_NULL) { \
162 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ 343 if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \
163 found_textrel = 1; \ 344 *found_textrel = 1; \
164 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ 345 /*if (dyn->d_un.d_val & DF_TEXTREL)*/ \
165 printf("TEXTREL "); \ 346 return (be_wewy_wewy_quiet ? NULL : ret); \
347 } \
348 ++dyn; \
349 } \
350 } }
351 SHOW_TEXTREL(32)
352 SHOW_TEXTREL(64)
353 }
354
355 if (be_quiet || be_wewy_wewy_quiet)
356 return NULL;
357 else
358 return " - ";
359}
360
361/*
362 * Scan the .text section to see if there are any relocations in it.
363 * Should rewrite this to check PT_LOAD sections that are marked
364 * Executable rather than the section named '.text'.
365 */
366static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel)
367{
368 unsigned long s, r, rmax;
369 void *symtab_void, *strtab_void, *text_void;
370
371 if (!show_textrels) return NULL;
372
373 /* don't search for TEXTREL's if the ELF doesn't have any */
374 if (!*found_textrel) scanelf_file_textrel(elf, found_textrel);
375 if (!*found_textrel) return NULL;
376
377 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
378 text_void = elf_findsecbyname(elf, ".text");
379
380 if (symtab_void && strtab_void && text_void && elf->shdr) {
381#define SHOW_TEXTRELS(B) \
382 if (elf->elf_class == ELFCLASS ## B) { \
383 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
384 Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \
385 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
386 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
387 Elf ## B ## _Shdr *text = SHDR ## B (text_void); \
388 Elf ## B ## _Addr vaddr = EGET(text->sh_addr); \
389 uint ## B ## _t memsz = EGET(text->sh_size); \
390 Elf ## B ## _Rel *rel; \
391 Elf ## B ## _Rela *rela; \
392 /* search the section headers for relocations */ \
393 for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \
394 uint32_t sh_type = EGET(shdr[s].sh_type); \
395 if (sh_type == SHT_REL) { \
396 rel = REL ## B (elf->vdata + EGET(shdr[s].sh_offset)); \
397 rela = NULL; \
398 rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \
399 } else if (sh_type == SHT_RELA) { \
400 rel = NULL; \
401 rela = RELA ## B (elf->vdata + EGET(shdr[s].sh_offset)); \
402 rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \
403 } else \
404 continue; \
405 /* now see if any of the relocs are in the .text */ \
406 for (r = 0; r < rmax; ++r) { \
407 unsigned long sym_max; \
408 Elf ## B ## _Addr offset_tmp; \
409 Elf ## B ## _Sym *func; \
410 Elf ## B ## _Sym *sym; \
411 Elf ## B ## _Addr r_offset; \
412 uint ## B ## _t r_info; \
413 if (sh_type == SHT_REL) { \
414 r_offset = EGET(rel[r].r_offset); \
415 r_info = EGET(rel[r].r_info); \
416 } else { \
417 r_offset = EGET(rela[r].r_offset); \
418 r_info = EGET(rela[r].r_info); \
419 } \
420 /* make sure this relocation is inside of the .text */ \
421 if (r_offset < vaddr || r_offset >= vaddr + memsz) { \
422 if (be_verbose <= 2) continue; \
423 } else \
424 *found_textrels = 1; \
425 /* locate this relocation symbol name */ \
426 sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
427 if ((void*)sym > elf->data_end) { \
428 warn("%s: corrupt ELF symbol", elf->filename); \
429 continue; \
430 } \
431 sym_max = ELF ## B ## _R_SYM(r_info); \
432 if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \
433 sym += sym_max; \
434 else \
435 sym = NULL; \
436 sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \
437 /* show the raw details about this reloc */ \
438 printf(" %s: ", elf->base_filename); \
439 if (sym && sym->st_name) \
440 printf("%s", elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \
441 else \
442 printf("(memory/data?)"); \
443 printf(" [0x%lX]", (unsigned long)r_offset); \
444 /* now try to find the closest symbol that this rel is probably in */ \
445 sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
446 func = NULL; \
447 offset_tmp = 0; \
448 while (sym_max--) { \
449 if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \
450 func = sym; \
451 offset_tmp = EGET(sym->st_value); \
166 } \ 452 } \
167 ++dyn; \ 453 ++sym; \
168 } \ 454 } \
455 printf(" in "); \
456 if (func && func->st_name) { \
457 const char *func_name = elf->data + EGET(strtab->sh_offset) + EGET(func->st_name); \
458 if (r_offset > EGET(func->st_size)) \
459 printf("(optimized out: previous %s)", func_name); \
460 else \
461 printf("%s", func_name); \
462 } else \
463 printf("(optimized out)"); \
464 printf(" [0x%lX]\n", (unsigned long)offset_tmp); \
465 if (be_verbose && has_objdump) { \
466 Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \
467 char *sysbuf; \
468 size_t syslen; \
469 int sysret; \
470 const char sysfmt[] = "objdump -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \
471 syslen = sizeof(sysfmt) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \
472 sysbuf = xmalloc(syslen); \
473 if (end_addr < r_offset) \
474 /* not uncommon when things are optimized out */ \
475 end_addr = r_offset + 0x100; \
476 snprintf(sysbuf, syslen, sysfmt, \
477 (unsigned long)offset_tmp, \
478 (unsigned long)end_addr, \
479 elf->filename, \
480 (unsigned long)r_offset); \
481 fflush(stdout); \
482 sysret = system(sysbuf); \
483 fflush(stdout); \
484 free(sysbuf); \
485 } \
486 } \
169 } } 487 } }
170 SHOW_TEXTREL(32) 488 SHOW_TEXTRELS(32)
171 SHOW_TEXTREL(64) 489 SHOW_TEXTRELS(64)
172 if (!be_quiet && !found_textrel) printf("------- ");
173 } 490 }
491 if (!*found_textrels)
492 warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename);
174 493
175 /* rpath fun */ 494 return NULL;
176 /* TODO: if be_quiet, only output RPATH's which aren't in /etc/ld.so.conf */ 495}
177 if (show_rpath) { 496
497static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type)
498{
499 struct stat st;
500 switch (*item) {
501 case '/': break;
502 case '.':
503 warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename);
504 break;
505 case ':':
506 case '\0':
507 warnf("Security problem NULL %s in %s", dt_type, elf->filename);
508 break;
509 case '$':
510 if (fstat(elf->fd, &st) != -1)
511 if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID))
512 warnf("Security problem with %s='%s' in %s with mode set of %o",
513 dt_type, item, elf->filename, (unsigned int) st.st_mode & 07777);
514 break;
515 default:
516 warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename);
517 break;
518 }
519}
520static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len)
521{
522 unsigned long i;
178 char *rpath, *runpath; 523 char *rpath, *runpath, **r;
524 void *strtbl_void;
525
526 if (!show_rpath) return;
527
179 void *strtbl_void = elf_findsecbyname(elf, ".dynstr"); 528 strtbl_void = elf_findsecbyname(elf, ".dynstr");
180 rpath = runpath = NULL; 529 rpath = runpath = NULL;
181 530
182 if (strtbl_void) { 531 if (elf->phdr && strtbl_void) {
183#define SHOW_RPATH(B) \ 532#define SHOW_RPATH(B) \
184 if (elf->elf_class == ELFCLASS ## B) { \ 533 if (elf->elf_class == ELFCLASS ## B) { \
185 Elf ## B ## _Dyn *dyn; \ 534 Elf ## B ## _Dyn *dyn; \
186 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 535 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
187 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 536 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
188 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 537 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
538 Elf ## B ## _Off offset; \
539 Elf ## B ## _Xword word; \
540 /* Scan all the program headers */ \
189 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 541 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
542 /* Just scan dynamic headers */ \
190 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 543 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
544 offset = EGET(phdr[i].p_offset); \
545 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
546 /* Just scan dynamic RPATH/RUNPATH headers */ \
191 dyn = DYN ## B (elf->data + EGET(phdr[i].p_offset)); \ 547 dyn = DYN ## B (elf->vdata + offset); \
192 while (EGET(dyn->d_tag) != DT_NULL) { \ 548 while ((word=EGET(dyn->d_tag)) != DT_NULL) { \
193 if (EGET(dyn->d_tag) == DT_RPATH) { \ 549 if (word == DT_RPATH) { \
550 r = &rpath; \
551 } else if (word == DT_RUNPATH) { \
552 r = &runpath; \
553 } else { \
554 ++dyn; \
555 continue; \
556 } \
557 /* Verify the memory is somewhat sane */ \
194 rpath = elf->data + EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 558 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
559 if (offset < (Elf ## B ## _Off)elf->len) { \
560 if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \
561 *r = elf->data + offset; \
562 /* cache the length in case we need to nuke this section later on */ \
563 if (fix_elf) \
564 offset = strlen(*r); \
565 /* If quiet, don't output paths in ld.so.conf */ \
566 if (be_quiet) { \
567 size_t len; \
568 char *start, *end; \
569 /* note that we only 'chop' off leading known paths. */ \
570 /* since *r is read-only memory, we can only move the ptr forward. */ \
571 start = *r; \
572 /* scan each path in : delimited list */ \
573 while (start) { \
574 rpath_security_checks(elf, start, get_elfdtype(word)); \
575 end = strchr(start, ':'); \
576 len = (end ? abs(end - start) : strlen(start)); \
577 if (use_ldcache) { \
578 size_t n; \
579 const char *ldpath; \
580 array_for_each(ldpaths, n, ldpath) \
581 if (!strncmp(ldpath, start, len) && !ldpath[len]) { \
582 *r = end; \
583 /* corner case ... if RPATH reads "/usr/lib:", we want \
584 * to show ':' rather than '' */ \
585 if (end && end[1] != '\0') \
586 (*r)++; \
587 break; \
588 } \
589 } \
590 if (!*r || !end) \
591 break; \
592 else \
593 start = start + len + 1; \
594 } \
595 } \
596 if (*r) { \
597 if (fix_elf > 2 || (fix_elf && **r == '\0')) { \
598 /* just nuke it */ \
599 nuke_it##B: \
600 memset(*r, 0x00, offset); \
601 *r = NULL; \
602 ESET(dyn->d_tag, DT_DEBUG); \
603 ESET(dyn->d_un.d_ptr, 0); \
604 } else if (fix_elf) { \
605 /* try to clean "bad" paths */ \
606 size_t len, tmpdir_len; \
607 char *start, *end; \
608 const char *tmpdir; \
609 start = *r; \
610 tmpdir = (getenv("TMPDIR") ? : "."); \
611 tmpdir_len = strlen(tmpdir); \
612 while (1) { \
613 end = strchr(start, ':'); \
614 if (start == end) { \
615 eat_this_path##B: \
616 len = strlen(end); \
617 memmove(start, end+1, len); \
618 start[len-1] = '\0'; \
619 end = start - 1; \
620 } else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \
621 if (!end) { \
622 if (start == *r) \
623 goto nuke_it##B; \
624 *--start = '\0'; \
625 } else \
626 goto eat_this_path##B; \
627 } \
628 if (!end) \
629 break; \
630 start = end + 1; \
631 } \
632 if (**r == '\0') \
633 goto nuke_it##B; \
634 } \
635 if (*r) \
195 found_rpath = 1; \ 636 *found_rpath = 1; \
196 } else if (EGET(dyn->d_tag) == DT_RUNPATH) { \ 637 } \
197 runpath = elf->data + EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
198 found_rpath = 1; \
199 } \ 638 } \
200 ++dyn; \ 639 ++dyn; \
201 } \ 640 } \
202 } } 641 } }
203 SHOW_RPATH(32) 642 SHOW_RPATH(32)
204 SHOW_RPATH(64) 643 SHOW_RPATH(64)
205 } 644 }
645
646 if (be_wewy_wewy_quiet) return;
647
206 if (rpath && runpath) { 648 if (rpath && runpath) {
207 if (!strcmp(rpath, runpath)) 649 if (!strcmp(rpath, runpath)) {
208 printf("%-5s ", runpath); 650 xstrcat(ret, runpath, ret_len);
209 else { 651 } else {
210 fprintf(stderr, "%s's RPATH [%s] != RUNPATH [%s]\n", filename, rpath, runpath); 652 fprintf(stderr, "RPATH [%s] != RUNPATH [%s]\n", rpath, runpath);
211 printf("{%s,%s} ", rpath, runpath); 653 xchrcat(ret, '{', ret_len);
654 xstrcat(ret, rpath, ret_len);
655 xchrcat(ret, ',', ret_len);
656 xstrcat(ret, runpath, ret_len);
657 xchrcat(ret, '}', ret_len);
212 } 658 }
213 } else if (rpath || runpath) 659 } else if (rpath || runpath)
214 printf("%-5s ", (runpath ? runpath : rpath)); 660 xstrcat(ret, (runpath ? runpath : rpath), ret_len);
215 else if (!be_quiet && !found_rpath) 661 else if (!be_quiet)
216 printf(" - "); 662 xstrcat(ret, " - ", ret_len);
663}
664
665#define LDSO_CACHE_MAGIC "ld.so-"
666#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1)
667#define LDSO_CACHE_VER "1.7.0"
668#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1)
669#define FLAG_ANY -1
670#define FLAG_TYPE_MASK 0x00ff
671#define FLAG_LIBC4 0x0000
672#define FLAG_ELF 0x0001
673#define FLAG_ELF_LIBC5 0x0002
674#define FLAG_ELF_LIBC6 0x0003
675#define FLAG_REQUIRED_MASK 0xff00
676#define FLAG_SPARC_LIB64 0x0100
677#define FLAG_IA64_LIB64 0x0200
678#define FLAG_X8664_LIB64 0x0300
679#define FLAG_S390_LIB64 0x0400
680#define FLAG_POWERPC_LIB64 0x0500
681#define FLAG_MIPS64_LIBN32 0x0600
682#define FLAG_MIPS64_LIBN64 0x0700
683
684#if defined(__GLIBC__) || defined(__UCLIBC__)
685
686static char *lookup_cache_lib(elfobj *elf, char *fname)
687{
688 int fd;
689 char *strs;
690 static char buf[__PAX_UTILS_PATH_MAX] = "";
691 const char cachefile[] = "/etc/ld.so.cache";
692 struct stat st;
693
694 typedef struct {
695 char magic[LDSO_CACHE_MAGIC_LEN];
696 char version[LDSO_CACHE_VER_LEN];
697 int nlibs;
698 } header_t;
699 header_t *header;
700
701 typedef struct {
702 int flags;
703 int sooffset;
704 int liboffset;
705 } libentry_t;
706 libentry_t *libent;
707
708 if (fname == NULL)
709 return NULL;
710
711 if (ldcache == NULL) {
712 if (stat(cachefile, &st))
713 return NULL;
714
715 fd = open(cachefile, O_RDONLY);
716 if (fd == -1)
717 return NULL;
718
719 /* cache these values so we only map/unmap the cache file once */
720 ldcache_size = st.st_size;
721 header = ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0);
722 close(fd);
723
724 if (ldcache == MAP_FAILED) {
725 ldcache = NULL;
726 return NULL;
217 } 727 }
218 728
219 /* print out all the NEEDED entries */ 729 if (memcmp(header->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN) ||
220 if (show_needed) { 730 memcmp(header->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN))
731 {
732 munmap(ldcache, ldcache_size);
733 ldcache = NULL;
734 return NULL;
735 }
736 } else
737 header = ldcache;
738
739 libent = ldcache + sizeof(header_t);
740 strs = (char *) &libent[header->nlibs];
741
742 for (fd = 0; fd < header->nlibs; ++fd) {
743 /* This should be more fine grained, but for now we assume that
744 * diff arches will not be cached together, and we ignore the
745 * the different multilib mips cases.
746 */
747 if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK))
748 continue;
749 if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK))
750 continue;
751
752 if (strcmp(fname, strs + libent[fd].sooffset) != 0)
753 continue;
754
755 /* Return first hit because that is how the ldso rolls */
756 strncpy(buf, strs + libent[fd].liboffset, sizeof(buf));
757 break;
758 }
759
760 return buf;
761}
762
763#elif defined(__NetBSD__)
764static char *lookup_cache_lib(elfobj *elf, char *fname)
765{
766 static char buf[__PAX_UTILS_PATH_MAX] = "";
767 static struct stat st;
768 size_t n;
769 char *ldpath;
770
771 array_for_each(ldpath, n, ldpath) {
772 if ((unsigned) snprintf(buf, sizeof(buf), "%s/%s", ldpath, fname) >= sizeof(buf))
773 continue; /* if the pathname is too long, or something went wrong, ignore */
774
775 if (stat(buf, &st) != 0)
776 continue; /* if the lib doesn't exist in *ldpath, look further */
777
778 /* NetBSD doesn't actually do sanity checks, it just loads the file
779 * and if that doesn't work, continues looking in other directories.
780 * This cannot easily be safely emulated, unfortunately. For now,
781 * just assume that if it exists, it's a valid library. */
782
783 return buf;
784 }
785
786 /* not found in any path */
787 return NULL;
788}
789#else
790#ifdef __ELF__
791#warning Cache support not implemented for your target
792#endif
793static char *lookup_cache_lib(elfobj *elf, char *fname)
794{
795 return NULL;
796}
797#endif
798
799static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len)
800{
801 unsigned long i;
221 char *needed; 802 char *needed;
803 void *strtbl_void;
804 char *p;
805
806 /*
807 * -n -> op==0 -> print all
808 * -N -> op==1 -> print requested
809 */
810 if ((op == 0 && !show_needed) || (op == 1 && !find_lib))
811 return NULL;
812
222 void *strtbl_void = elf_findsecbyname(elf, ".dynstr"); 813 strtbl_void = elf_findsecbyname(elf, ".dynstr");
223 814
224 if (strtbl_void) { 815 if (elf->phdr && strtbl_void) {
225#define SHOW_NEEDED(B) \ 816#define SHOW_NEEDED(B) \
226 if (elf->elf_class == ELFCLASS ## B) { \ 817 if (elf->elf_class == ELFCLASS ## B) { \
227 Elf ## B ## _Dyn *dyn; \ 818 Elf ## B ## _Dyn *dyn; \
228 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ 819 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
229 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ 820 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
230 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ 821 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
822 Elf ## B ## _Off offset; \
823 size_t matched = 0; \
824 /* Walk all the program headers to find the PT_DYNAMIC */ \
231 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ 825 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
232 if (be_verbose && EGET(phdr[i].p_type) == PT_INTERP) { \ 826 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) \
233 dyn = DYN ## B (elf->data + EGET(phdr[i].p_offset)); \ 827 continue; \
234 printf("%s\n", elf->data + EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr)); \ 828 offset = EGET(phdr[i].p_offset); \
235 exit(0); \ 829 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) \
236 } \ 830 continue; \
237 if (EGET(phdr[i].p_type) != PT_DYNAMIC) continue; \ 831 /* Walk all the dynamic tags to find NEEDED entries */ \
238 dyn = DYN ## B (elf->data + EGET(phdr[i].p_offset)); \ 832 dyn = DYN ## B (elf->vdata + offset); \
239 while (EGET(dyn->d_tag) != DT_NULL) { \ 833 while (EGET(dyn->d_tag) != DT_NULL) { \
240 if (EGET(dyn->d_tag) == DT_NEEDED) { \ 834 if (EGET(dyn->d_tag) == DT_NEEDED) { \
241 needed = elf->data + EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ 835 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
242 if (found_needed) printf(","); \ 836 if (offset >= (Elf ## B ## _Off)elf->len) { \
243 printf("%s", needed); \ 837 ++dyn; \
838 continue; \
839 } \
840 needed = elf->data + offset; \
841 if (op == 0) { \
842 /* -n -> print all entries */ \
843 if (!be_wewy_wewy_quiet) { \
844 if (*found_needed) xchrcat(ret, ',', ret_len); \
845 if (use_ldcache) \
846 if ((p = lookup_cache_lib(elf, needed)) != NULL) \
847 needed = p; \
848 xstrcat(ret, needed, ret_len); \
849 } \
244 found_needed = 1; \ 850 *found_needed = 1; \
851 } else { \
852 /* -N -> print matching entries */ \
853 size_t n; \
854 const char *find_lib_name; \
855 \
856 array_for_each(find_lib_arr, n, find_lib_name) \
857 if (!strcmp(find_lib_name, needed)) \
858 ++matched; \
859 \
860 if (matched == array_cnt(find_lib_arr)) { \
861 *found_lib = 1; \
862 return (be_wewy_wewy_quiet ? NULL : find_lib); \
863 } \
864 } \
245 } \ 865 } \
246 ++dyn; \ 866 ++dyn; \
247 } \ 867 } \
248 } } 868 } }
249 SHOW_NEEDED(32) 869 SHOW_NEEDED(32)
250 SHOW_NEEDED(64) 870 SHOW_NEEDED(64)
871 if (op == 0 && !*found_needed && be_verbose)
872 warn("ELF lacks DT_NEEDED sections: %s", elf->filename);
873 }
874
875 return NULL;
876}
877static char *scanelf_file_interp(elfobj *elf, char *found_interp)
878{
879 void *strtbl_void;
880
881 if (!show_interp) return NULL;
882
883 strtbl_void = elf_findsecbyname(elf, ".interp");
884
885 if (strtbl_void) {
886#define SHOW_INTERP(B) \
887 if (elf->elf_class == ELFCLASS ## B) { \
888 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
889 *found_interp = 1; \
890 return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \
891 }
892 SHOW_INTERP(32)
893 SHOW_INTERP(64)
894 }
895 return NULL;
896}
897static char *scanelf_file_bind(elfobj *elf, char *found_bind)
898{
899 unsigned long i;
900 struct stat s;
901 char dynamic = 0;
902
903 if (!show_bind) return NULL;
904 if (!elf->phdr) return NULL;
905
906#define SHOW_BIND(B) \
907 if (elf->elf_class == ELFCLASS ## B) { \
908 Elf ## B ## _Dyn *dyn; \
909 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
910 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
911 Elf ## B ## _Off offset; \
912 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
913 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
914 dynamic = 1; \
915 offset = EGET(phdr[i].p_offset); \
916 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
917 dyn = DYN ## B (elf->vdata + offset); \
918 while (EGET(dyn->d_tag) != DT_NULL) { \
919 if (EGET(dyn->d_tag) == DT_BIND_NOW || \
920 (EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \
921 { \
922 if (be_quiet) return NULL; \
923 *found_bind = 1; \
924 return (char *)(be_wewy_wewy_quiet ? NULL : "NOW"); \
925 } \
926 ++dyn; \
927 } \
928 } \
929 }
930 SHOW_BIND(32)
931 SHOW_BIND(64)
932
933 if (be_wewy_wewy_quiet) return NULL;
934
935 /* don't output anything if quiet mode and the ELF is static or not setuid */
936 if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) {
937 return NULL;
938 } else {
939 *found_bind = 1;
940 return (char *)(dynamic ? "LAZY" : "STATIC");
941 }
942}
943static char *scanelf_file_soname(elfobj *elf, char *found_soname)
944{
945 unsigned long i;
946 char *soname;
947 void *strtbl_void;
948
949 if (!show_soname) return NULL;
950
951 strtbl_void = elf_findsecbyname(elf, ".dynstr");
952
953 if (elf->phdr && strtbl_void) {
954#define SHOW_SONAME(B) \
955 if (elf->elf_class == ELFCLASS ## B) { \
956 Elf ## B ## _Dyn *dyn; \
957 Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \
958 Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \
959 Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \
960 Elf ## B ## _Off offset; \
961 /* only look for soname in shared objects */ \
962 if (EGET(ehdr->e_type) != ET_DYN) \
963 return NULL; \
964 for (i = 0; i < EGET(ehdr->e_phnum); i++) { \
965 if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \
966 offset = EGET(phdr[i].p_offset); \
967 if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \
968 dyn = DYN ## B (elf->vdata + offset); \
969 while (EGET(dyn->d_tag) != DT_NULL) { \
970 if (EGET(dyn->d_tag) == DT_SONAME) { \
971 offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \
972 if (offset >= (Elf ## B ## _Off)elf->len) { \
973 ++dyn; \
974 continue; \
975 } \
976 soname = elf->data + offset; \
977 *found_soname = 1; \
978 return (be_wewy_wewy_quiet ? NULL : soname); \
979 } \
980 ++dyn; \
981 } \
982 } }
983 SHOW_SONAME(32)
984 SHOW_SONAME(64)
985 }
986
987 return NULL;
988}
989
990/*
991 * We support the symbol form:
992 * [%[modifiers]%][[+-]<symbol name>][,[.....]]
993 * If the symbol name is empty, then all symbols are matched.
994 * If the symbol name is a glob ("*"), then all symbols are dumped (debug).
995 * Do not rely on this output format at all.
996 * Otherwise the symbol name is used to search (either regex or string compare).
997 * If the first char of the symbol name is a plus ("+"), then only match
998 * defined symbols. If it's a minus ("-"), only match undefined symbols.
999 * Putting modifiers in between the percent signs allows for more in depth
1000 * filters. There are groups of modifiers. If you don't specify a member
1001 * of a group, then all types in that group are matched. The current
1002 * groups and their types are:
1003 * STT group: STT_NOTYPE:n STT_OBJECT:o STT_FUNC:f SST_FILE:F
1004 * STB group: STB_LOCAL:l STB_GLOBAL:g STB_WEAK:w
1005 * SHN group: SHN_UNDEF:u SHN_ABS:a SHN_COMMON:c {defined}:d
1006 * The "defined" value in the SHN group does not correspond to a SHN_xxx define.
1007 * You can search for multiple symbols at once by seperating with a comma (",").
1008 *
1009 * Some examples:
1010 * ELFs with a weak function "foo":
1011 * scanelf -s %wf%foo <ELFs>
1012 * ELFs that define the symbol "main":
1013 * scanelf -s +main <ELFs>
1014 * scanelf -s %d%main <ELFs>
1015 * ELFs that refer to the undefined symbol "brk":
1016 * scanelf -s -brk <ELFs>
1017 * scanelf -s %u%brk <ELFs>
1018 * All global defined objects in an ELF:
1019 * scanelf -s %ogd% <ELF>
1020 */
1021static void
1022scanelf_match_symname(elfobj *elf, char *found_sym, char **ret, size_t *ret_len, const char *symname,
1023 unsigned int stt, unsigned int stb, unsigned int shn, unsigned long size)
1024{
1025 char *this_sym, *next_sym, saved = saved;
1026
1027 /* allow the user to specify a comma delimited list of symbols to search for */
1028 next_sym = NULL;
1029 do {
1030 bool inc_notype, inc_object, inc_func, inc_file,
1031 inc_local, inc_global, inc_weak,
1032 inc_def, inc_undef, inc_abs, inc_common;
1033
1034 if (next_sym) {
1035 next_sym[-1] = saved;
1036 this_sym = next_sym;
1037 } else
1038 this_sym = find_sym;
1039 if ((next_sym = strchr(this_sym, ','))) {
1040 /* make parsing easier by killing the comma temporarily */
1041 saved = *next_sym;
1042 *next_sym = '\0';
1043 next_sym += 1;
1044 }
1045
1046 /* symbol selection! */
1047 inc_notype = inc_object = inc_func = inc_file = \
1048 inc_local = inc_global = inc_weak = \
1049 inc_def = inc_undef = inc_abs = inc_common = \
1050 (*this_sym != '%');
1051
1052 /* parse the contents of %...% */
1053 if (!inc_notype) {
1054 while (*(this_sym++)) {
1055 if (*this_sym == '%') {
1056 ++this_sym;
1057 break;
1058 }
1059 switch (*this_sym) {
1060 case 'n': inc_notype = true; break;
1061 case 'o': inc_object = true; break;
1062 case 'f': inc_func = true; break;
1063 case 'F': inc_file = true; break;
1064 case 'l': inc_local = true; break;
1065 case 'g': inc_global = true; break;
1066 case 'w': inc_weak = true; break;
1067 case 'd': inc_def = true; break;
1068 case 'u': inc_undef = true; break;
1069 case 'a': inc_abs = true; break;
1070 case 'c': inc_common = true; break;
1071 default: err("invalid symbol selector '%c'", *this_sym);
1072 }
251 } 1073 }
252 if (!be_quiet && !found_needed) 1074
253 printf(" - "); 1075 /* If no types are matched, not match all */
254 else if (found_needed) 1076 if (!inc_notype && !inc_object && !inc_func && !inc_file)
255 printf(" "); 1077 inc_notype = inc_object = inc_func = inc_file = true;
1078 if (!inc_local && !inc_global && !inc_weak)
1079 inc_local = inc_global = inc_weak = true;
1080 if (!inc_def && !inc_undef && !inc_abs && !inc_common)
1081 inc_def = inc_undef = inc_abs = inc_common = true;
1082
1083 /* backwards compat for defined/undefined short hand */
1084 } else if (*this_sym == '+') {
1085 inc_undef = false;
1086 ++this_sym;
1087 } else if (*this_sym == '-') {
1088 inc_def = inc_abs = inc_common = false;
1089 ++this_sym;
256 } 1090 }
257 1091
258 /* search the symbol table for a specified symbol */ 1092 /* filter symbols */
259 if (find_sym) { 1093 if ((!inc_notype && stt == STT_NOTYPE) || \
1094 (!inc_object && stt == STT_OBJECT) || \
1095 (!inc_func && stt == STT_FUNC ) || \
1096 (!inc_file && stt == STT_FILE ) || \
1097 (!inc_local && stb == STB_LOCAL ) || \
1098 (!inc_global && stb == STB_GLOBAL) || \
1099 (!inc_weak && stb == STB_WEAK ) || \
1100 (!inc_def && shn && shn < SHN_LORESERVE) || \
1101 (!inc_undef && shn == SHN_UNDEF ) || \
1102 (!inc_abs && shn == SHN_ABS ) || \
1103 (!inc_common && shn == SHN_COMMON))
1104 continue;
1105
1106 if (*this_sym == '*') {
1107 /* a "*" symbol gets you debug output */
1108 printf("%s(%s) %5lX %15s %15s %15s %s\n",
1109 ((*found_sym == 0) ? "\n\t" : "\t"),
1110 elf->base_filename,
1111 size,
1112 get_elfstttype(stt),
1113 get_elfstbtype(stb),
1114 get_elfshntype(shn),
1115 symname);
1116 goto matched;
1117
1118 } else {
1119 if (g_match) {
1120 /* regex match the symbol */
1121 if (rematch(this_sym, symname, REG_EXTENDED) != 0)
1122 continue;
1123
1124 } else if (*this_sym) {
1125 /* give empty symbols a "pass", else do a normal compare */
1126 const size_t len = strlen(this_sym);
1127 if (!(strncmp(this_sym, symname, len) == 0 &&
1128 /* Accept unversioned symbol names */
1129 (symname[len] == '\0' || symname[len] == '@')))
1130 continue;
1131 }
1132
1133 if (be_semi_verbose) {
1134 char buf[1024];
1135 snprintf(buf, sizeof(buf), "%lX %s %s",
1136 size,
1137 get_elfstttype(stt),
1138 this_sym);
1139 *ret = xstrdup(buf);
1140 } else {
1141 if (*ret) xchrcat(ret, ',', ret_len);
1142 xstrcat(ret, symname, ret_len);
1143 }
1144
1145 goto matched;
1146 }
1147 } while (next_sym);
1148
1149 return;
1150
1151 matched:
1152 *found_sym = 1;
1153 if (next_sym)
1154 next_sym[-1] = saved;
1155}
1156
1157static const char *scanelf_file_sym(elfobj *elf, char *found_sym)
1158{
1159 unsigned long i;
1160 char *ret;
260 void *symtab_void, *strtab_void; 1161 void *symtab_void, *strtab_void;
261 char *versioned_symname;
262 size_t len;
263 1162
264 len = strlen(find_sym) + 1; 1163 if (!find_sym) return NULL;
265 versioned_symname = (char *)malloc(sizeof(char) * (len+1)); 1164 ret = NULL;
266 if (!versioned_symname) {
267 warnf("Could not malloc() mem for sym scan");
268 return;
269 }
270 sprintf(versioned_symname, "%s@", find_sym);
271 1165
272 symtab_void = elf_findsecbyname(elf, ".symtab"); 1166 scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void);
273 strtab_void = elf_findsecbyname(elf, ".strtab");
274 1167
275 if (symtab_void && strtab_void) { 1168 if (symtab_void && strtab_void) {
276#define FIND_SYM(B) \ 1169#define FIND_SYM(B) \
277 if (elf->elf_class == ELFCLASS ## B) { \ 1170 if (elf->elf_class == ELFCLASS ## B) { \
278 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ 1171 Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \
279 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ 1172 Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \
280 Elf ## B ## _Sym *sym = SYM ## B (elf->data + EGET(symtab->sh_offset)); \ 1173 Elf ## B ## _Sym *sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \
281 int cnt = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ 1174 unsigned long cnt = EGET(symtab->sh_entsize); \
282 char *symname; \ 1175 char *symname; \
1176 size_t ret_len = 0; \
1177 if (cnt) \
1178 cnt = EGET(symtab->sh_size) / cnt; \
283 for (i = 0; i < cnt; ++i) { \ 1179 for (i = 0; i < cnt; ++i) { \
1180 if ((void*)sym > elf->data_end) { \
1181 warnf("%s: corrupt ELF symbols - aborting", elf->filename); \
1182 goto break_out; \
1183 } \
284 if (sym->st_name) { \ 1184 if (sym->st_name) { \
1185 /* make sure the symbol name is in acceptable memory range */ \
285 symname = (char *)(elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ 1186 symname = elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name); \
286 if (*find_sym == '*') { \ 1187 if ((void*)symname > elf->data_end) { \
287 printf("%s(%s) %5lX %15s %s\n", \ 1188 warnf("%s: corrupt ELF symbols", elf->filename); \
288 ((found_sym == 0) ? "\n\t" : "\t"), \ 1189 ++sym; \
289 (char *)basename(filename), \ 1190 continue; \
290 (long)sym->st_size, \ 1191 } \
291 (char *)get_elfstttype(sym->st_info), \ 1192 scanelf_match_symname(elf, found_sym, \
292 symname); \ 1193 &ret, &ret_len, symname, \
293 found_sym = 1; \ 1194 ELF##B##_ST_TYPE(EGET(sym->st_info)), \
294 } else if ((strcmp(find_sym, symname) == 0) || \ 1195 ELF##B##_ST_BIND(EGET(sym->st_info)), \
295 (strncmp(symname, versioned_symname, len) == 0)) \ 1196 EGET(sym->st_shndx), \
296 found_sym++; \ 1197 /* st_size can be 64bit, but no one is really that big, so screw em */ \
1198 EGET(sym->st_size)); \
297 } \ 1199 } \
298 ++sym; \ 1200 ++sym; \
299 } } 1201 } }
300 FIND_SYM(32) 1202 FIND_SYM(32)
301 FIND_SYM(64) 1203 FIND_SYM(64)
1204 }
1205
1206break_out:
1207 if (be_wewy_wewy_quiet) return NULL;
1208
1209 if (*find_sym != '*' && *found_sym)
1210 return ret;
1211 if (be_quiet)
1212 return NULL;
1213 else
1214 return " - ";
1215}
1216
1217static const char *scanelf_file_sections(elfobj *elf, char *found_section)
1218{
1219 if (!find_section)
1220 return NULL;
1221
1222#define FIND_SECTION(B) \
1223 if (elf->elf_class == ELFCLASS ## B) { \
1224 size_t matched, n; \
1225 int invert; \
1226 const char *section_name; \
1227 Elf ## B ## _Shdr *section; \
1228 \
1229 matched = 0; \
1230 array_for_each(find_section_arr, n, section_name) { \
1231 invert = (*section_name == '!' ? 1 : 0); \
1232 section = SHDR ## B (elf_findsecbyname(elf, section_name + invert)); \
1233 if ((section == NULL && invert) || (section != NULL && !invert)) \
1234 ++matched; \
1235 } \
1236 \
1237 if (matched == array_cnt(find_section_arr)) \
1238 *found_section = 1; \
1239 }
1240 FIND_SECTION(32)
1241 FIND_SECTION(64)
1242
1243 if (be_wewy_wewy_quiet)
1244 return NULL;
1245
1246 if (*found_section)
1247 return find_section;
1248
1249 if (be_quiet)
1250 return NULL;
1251 else
1252 return " - ";
1253}
1254
1255/* scan an elf file and show all the fun stuff */
1256#define prints(str) ({ ssize_t ret = write(fileno(stdout), str, strlen(str)); ret; })
1257static int scanelf_elfobj(elfobj *elf)
1258{
1259 unsigned long i;
1260 char found_pax, found_phdr, found_relro, found_load, found_textrel,
1261 found_rpath, found_needed, found_interp, found_bind, found_soname,
1262 found_sym, found_lib, found_file, found_textrels, found_section;
1263 static char *out_buffer = NULL;
1264 static size_t out_len;
1265
1266 found_pax = found_phdr = found_relro = found_load = found_textrel = \
1267 found_rpath = found_needed = found_interp = found_bind = found_soname = \
1268 found_sym = found_lib = found_file = found_textrels = found_section = 0;
1269
1270 if (be_verbose > 2)
1271 printf("%s: scanning file {%s,%s}\n", elf->filename,
1272 get_elfeitype(EI_CLASS, elf->elf_class),
1273 get_elfeitype(EI_DATA, elf->data[EI_DATA]));
1274 else if (be_verbose > 1)
1275 printf("%s: scanning file\n", elf->filename);
1276
1277 /* init output buffer */
1278 if (!out_buffer) {
1279 out_len = sizeof(char) * 80;
1280 out_buffer = xmalloc(out_len);
1281 }
1282 *out_buffer = '\0';
1283
1284 /* show the header */
1285 if (!be_quiet && show_banner) {
1286 for (i = 0; out_format[i]; ++i) {
1287 if (!IS_MODIFIER(out_format[i])) continue;
1288
1289 switch (out_format[++i]) {
1290 case '+': break;
1291 case '%': break;
1292 case '#': break;
1293 case 'F':
1294 case 'p':
1295 case 'f': prints("FILE "); found_file = 1; break;
1296 case 'o': prints(" TYPE "); break;
1297 case 'x': prints(" PAX "); break;
1298 case 'e': prints("STK/REL/PTL "); break;
1299 case 't': prints("TEXTREL "); break;
1300 case 'r': prints("RPATH "); break;
1301 case 'M': prints("CLASS "); break;
1302 case 'n': prints("NEEDED "); break;
1303 case 'i': prints("INTERP "); break;
1304 case 'b': prints("BIND "); break;
1305 case 'Z': prints("SIZE "); break;
1306 case 'S': prints("SONAME "); break;
1307 case 's': prints("SYM "); break;
1308 case 'N': prints("LIB "); break;
1309 case 'T': prints("TEXTRELS "); break;
1310 case 'k': prints("SECTION "); break;
1311 case 'a': prints("ARCH "); break;
1312 case 'I': prints("OSABI "); break;
1313 case 'Y': prints("EABI "); break;
1314 case 'O': prints("PERM "); break;
1315 case 'D': prints("ENDIAN "); break;
1316 default: warnf("'%c' has no title ?", out_format[i]);
302 } 1317 }
303 free(versioned_symname); 1318 }
304 if (*find_sym != '*') { 1319 if (!found_file) prints("FILE ");
305 if (found_sym) 1320 prints("\n");
306 printf(" %s ", find_sym); 1321 found_file = 0;
307 else if (!be_quiet) 1322 show_banner = 0;
308 printf(" - "); 1323 }
1324
1325 /* dump all the good stuff */
1326 for (i = 0; out_format[i]; ++i) {
1327 const char *out;
1328 const char *tmp;
1329 static char ubuf[sizeof(unsigned long)*2];
1330 if (!IS_MODIFIER(out_format[i])) {
1331 xchrcat(&out_buffer, out_format[i], &out_len);
1332 continue;
1333 }
1334
1335 out = NULL;
1336 be_wewy_wewy_quiet = (out_format[i] == '#');
1337 be_semi_verbose = (out_format[i] == '+');
1338 switch (out_format[++i]) {
1339 case '+':
1340 case '%':
1341 case '#':
1342 xchrcat(&out_buffer, out_format[i], &out_len); break;
1343 case 'F':
1344 found_file = 1;
1345 if (be_wewy_wewy_quiet) break;
1346 xstrcat(&out_buffer, elf->filename, &out_len);
1347 break;
1348 case 'p':
1349 found_file = 1;
1350 if (be_wewy_wewy_quiet) break;
1351 tmp = elf->filename;
1352 if (search_path) {
1353 ssize_t len_search = strlen(search_path);
1354 ssize_t len_file = strlen(elf->filename);
1355 if (!strncmp(elf->filename, search_path, len_search) && \
1356 len_file > len_search)
1357 tmp += len_search;
1358 if (*tmp == '/' && search_path[len_search-1] == '/') tmp++;
309 } 1359 }
1360 xstrcat(&out_buffer, tmp, &out_len);
1361 break;
1362 case 'f':
1363 found_file = 1;
1364 if (be_wewy_wewy_quiet) break;
1365 tmp = strrchr(elf->filename, '/');
1366 tmp = (tmp == NULL ? elf->filename : tmp+1);
1367 xstrcat(&out_buffer, tmp, &out_len);
1368 break;
1369 case 'o': out = get_elfetype(elf); break;
1370 case 'x': out = scanelf_file_pax(elf, &found_pax); break;
1371 case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break;
1372 case 't': out = scanelf_file_textrel(elf, &found_textrel); break;
1373 case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break;
1374 case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break;
1375 case 'M': out = get_elfeitype(EI_CLASS, elf->data[EI_CLASS]); break;
1376 case 'D': out = get_endian(elf); break;
1377 case 'O': out = strfileperms(elf->filename); break;
1378 case 'n':
1379 case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break;
1380 case 'i': out = scanelf_file_interp(elf, &found_interp); break;
1381 case 'b': out = scanelf_file_bind(elf, &found_bind); break;
1382 case 'S': out = scanelf_file_soname(elf, &found_soname); break;
1383 case 's': out = scanelf_file_sym(elf, &found_sym); break;
1384 case 'k': out = scanelf_file_sections(elf, &found_section); break;
1385 case 'a': out = get_elfemtype(elf); break;
1386 case 'I': out = get_elfosabi(elf); break;
1387 case 'Y': out = get_elf_eabi(elf); break;
1388 case 'Z': snprintf(ubuf, sizeof(ubuf), "%lu", (unsigned long)elf->len); out = ubuf; break;;
1389 default: warnf("'%c' has no scan code?", out_format[i]);
310 } 1390 }
1391 if (out)
1392 xstrcat(&out_buffer, out, &out_len);
1393 }
311 1394
312 if (!be_quiet || found_pax || found_stack || found_textrel || \ 1395#define FOUND_SOMETHING() \
313 found_rpath || found_needed || found_sym) 1396 (found_pax || found_phdr || found_relro || found_load || found_textrel || \
314 printf("%s\n", filename); 1397 found_rpath || found_needed || found_interp || found_bind || \
1398 found_soname || found_sym || found_lib || found_textrels || found_section )
315 1399
1400 if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) {
1401 xchrcat(&out_buffer, ' ', &out_len);
1402 xstrcat(&out_buffer, elf->filename, &out_len);
1403 }
1404 if (!be_quiet || (be_quiet && FOUND_SOMETHING())) {
1405 puts(out_buffer);
1406 fflush(stdout);
1407 }
1408
1409 return 0;
1410}
1411
1412/* scan a single elf */
1413static int scanelf_elf(const char *filename, int fd, size_t len)
1414{
1415 int ret = 1;
1416 elfobj *elf;
1417
1418 /* verify this is real ELF */
1419 if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) {
1420 if (be_verbose > 2) printf("%s: not an ELF\n", filename);
1421 return ret;
1422 }
1423 switch (match_bits) {
1424 case 32:
1425 if (elf->elf_class != ELFCLASS32)
1426 goto label_done;
1427 break;
1428 case 64:
1429 if (elf->elf_class != ELFCLASS64)
1430 goto label_done;
1431 break;
1432 default: break;
1433 }
1434 if (match_etypes) {
1435 char sbuf[126];
1436 strncpy(sbuf, match_etypes, sizeof(sbuf));
1437 if (strchr(match_etypes, ',') != NULL) {
1438 char *p;
1439 while ((p = strrchr(sbuf, ',')) != NULL) {
1440 *p = 0;
1441 if (etype_lookup(p+1) == get_etype(elf))
1442 goto label_ret;
1443 }
1444 }
1445 if (etype_lookup(sbuf) != get_etype(elf))
1446 goto label_done;
1447 }
1448
1449label_ret:
1450 ret = scanelf_elfobj(elf);
1451
1452label_done:
316 unreadelf(elf); 1453 unreadelf(elf);
1454 return ret;
1455}
1456
1457/* scan an archive of elfs */
1458static int scanelf_archive(const char *filename, int fd, size_t len)
1459{
1460 archive_handle *ar;
1461 archive_member *m;
1462 char *ar_buffer;
1463 elfobj *elf;
1464
1465 ar = ar_open_fd(filename, fd);
1466 if (ar == NULL)
1467 return 1;
1468
1469 ar_buffer = mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0);
1470 while ((m = ar_next(ar)) != NULL) {
1471 off_t cur_pos = lseek(fd, 0, SEEK_CUR);
1472 if (cur_pos == -1)
1473 errp("lseek() failed");
1474 elf = readelf_buffer(m->name, ar_buffer + cur_pos, m->size);
1475 if (elf) {
1476 scanelf_elfobj(elf);
1477 unreadelf(elf);
1478 }
1479 }
1480 munmap(ar_buffer, len);
1481
1482 return 0;
1483}
1484/* scan a file which may be an elf or an archive or some other magical beast */
1485static int scanelf_file(const char *filename, const struct stat *st_cache)
1486{
1487 const struct stat *st = st_cache;
1488 struct stat symlink_st;
1489 int fd;
1490
1491 /* always handle regular files and handle symlinked files if no -y */
1492 if (S_ISLNK(st->st_mode)) {
1493 if (!scan_symlink) return 1;
1494 stat(filename, &symlink_st);
1495 st = &symlink_st;
1496 }
1497
1498 if (!S_ISREG(st->st_mode)) {
1499 if (be_verbose > 2) printf("%s: skipping non-file\n", filename);
1500 return 1;
1501 }
1502
1503 if (match_perms) {
1504 if ((st->st_mode | match_perms) != st->st_mode)
1505 return 1;
1506 }
1507 if ((fd=open(filename, (fix_elf ? O_RDWR : O_RDONLY))) == -1)
1508 return 1;
1509
1510 if (scanelf_elf(filename, fd, st->st_size) == 1 && scan_archives)
1511 /* if it isn't an ELF, maybe it's an .a archive */
1512 scanelf_archive(filename, fd, st->st_size);
1513
1514 close(fd);
1515 return 0;
1516}
1517
1518static const char *maybe_add_root(const char *fname, char *buf)
1519{
1520 if (root && strncmp(fname, root, strlen(root))) {
1521 strcpy(buf, root);
1522 strncat(buf, fname, __PAX_UTILS_PATH_MAX - strlen(root) - 1);
1523 fname = buf;
1524 }
1525 return fname;
317} 1526}
318 1527
319/* scan a directory for ET_EXEC files and print when we find one */ 1528/* scan a directory for ET_EXEC files and print when we find one */
320static void scanelf_dir(const char *path) 1529static int scanelf_dir(const char *path)
321{ 1530{
322 register DIR *dir; 1531 register DIR *dir;
323 register struct dirent *dentry; 1532 register struct dirent *dentry;
324 struct stat st_top, st; 1533 struct stat st_top, st;
325 char buf[_POSIX_PATH_MAX]; 1534 char buf[__PAX_UTILS_PATH_MAX];
1535 char _path[__PAX_UTILS_PATH_MAX];
326 size_t pathlen = 0, len = 0; 1536 size_t pathlen = 0, len = 0;
1537 int ret = 0;
1538
1539 path = maybe_add_root(path, _path);
327 1540
328 /* make sure path exists */ 1541 /* make sure path exists */
329 if (lstat(path, &st_top) == -1) 1542 if (lstat(path, &st_top) == -1) {
1543 if (be_verbose > 2) printf("%s: does not exist\n", path);
330 return; 1544 return 1;
1545 }
331 1546
332 /* ok, if it isn't a directory, assume we can open it */ 1547 /* ok, if it isn't a directory, assume we can open it */
333 if (!S_ISDIR(st_top.st_mode)) { 1548 if (!S_ISDIR(st_top.st_mode)) {
334 scanelf_file(path); 1549 return scanelf_file(path, &st_top);
335 return;
336 } 1550 }
337 1551
338 /* now scan the dir looking for fun stuff */ 1552 /* now scan the dir looking for fun stuff */
339 if ((dir = opendir(path)) == NULL) { 1553 if ((dir = opendir(path)) == NULL) {
340 warnf("could not opendir %s: %s", path, strerror(errno)); 1554 warnf("could not opendir %s: %s", path, strerror(errno));
341 return; 1555 return 1;
342 } 1556 }
343 if (be_verbose) printf("%s: scanning dir\n", path); 1557 if (be_verbose > 1) printf("%s: scanning dir\n", path);
344 1558
345 pathlen = strlen(path); 1559 pathlen = strlen(path);
346 while ((dentry = readdir(dir))) { 1560 while ((dentry = readdir(dir))) {
347 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) 1561 if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, ".."))
348 continue; 1562 continue;
349 len = (pathlen + 1 + strlen(dentry->d_name) + 1); 1563 len = (pathlen + 1 + strlen(dentry->d_name) + 1);
350 if (len >= sizeof(buf)) { 1564 if (len >= sizeof(buf)) {
351 warnf("Skipping '%s': len > sizeof(buf); %d > %d\n", path, (int)len, (int)sizeof(buf)); 1565 warnf("Skipping '%s': len > sizeof(buf); %lu > %lu\n", path,
1566 (unsigned long)len, (unsigned long)sizeof(buf));
352 continue; 1567 continue;
353 } 1568 }
354 sprintf(buf, "%s/%s", path, dentry->d_name); 1569 snprintf(buf, sizeof(buf), "%s%s%s", path, (path[pathlen-1] == '/') ? "" : "/", dentry->d_name);
355 if (lstat(buf, &st) != -1) { 1570 if (lstat(buf, &st) != -1) {
356 if (S_ISREG(st.st_mode)) 1571 if (S_ISREG(st.st_mode))
357 scanelf_file(buf); 1572 ret = scanelf_file(buf, &st);
358 else if (dir_recurse && S_ISDIR(st.st_mode)) { 1573 else if (dir_recurse && S_ISDIR(st.st_mode)) {
359 if (dir_crossmount || (st_top.st_dev == st.st_dev)) 1574 if (dir_crossmount || (st_top.st_dev == st.st_dev))
360 scanelf_dir(buf); 1575 ret = scanelf_dir(buf);
361 } 1576 }
362 } 1577 }
363 } 1578 }
364 closedir(dir); 1579 closedir(dir);
1580 return ret;
365} 1581}
1582
1583static int scanelf_from_file(const char *filename)
1584{
1585 FILE *fp;
1586 char *p, *path;
1587 size_t len;
1588 int ret;
1589
1590 if (strcmp(filename, "-") == 0)
1591 fp = stdin;
1592 else if ((fp = fopen(filename, "r")) == NULL)
1593 return 1;
1594
1595 path = NULL;
1596 len = 0;
1597 ret = 0;
1598 while (getline(&path, &len, fp) != -1) {
1599 if ((p = strchr(path, '\n')) != NULL)
1600 *p = 0;
1601 search_path = path;
1602 ret = scanelf_dir(path);
1603 }
1604 free(path);
1605
1606 if (fp != stdin)
1607 fclose(fp);
1608
1609 return ret;
1610}
1611
1612#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__)
1613
1614static int load_ld_cache_config(int i, const char *fname)
1615{
1616 FILE *fp = NULL;
1617 char *p, *path;
1618 size_t len;
1619 char _fname[__PAX_UTILS_PATH_MAX];
1620
1621 fname = maybe_add_root(fname, _fname);
1622
1623 if ((fp = fopen(fname, "r")) == NULL)
1624 return i;
1625
1626 path = NULL;
1627 len = 0;
1628 while (getline(&path, &len, fp) != -1) {
1629 if ((p = strrchr(path, '\r')) != NULL)
1630 *p = 0;
1631 if ((p = strchr(path, '\n')) != NULL)
1632 *p = 0;
1633
1634 /* recursive includes of the same file will make this segfault. */
1635 if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) {
1636 glob_t gl;
1637 size_t x;
1638 char gpath[__PAX_UTILS_PATH_MAX];
1639
1640 memset(gpath, 0, sizeof(gpath));
1641 if (root)
1642 strcpy(gpath, root);
1643
1644 if (path[8] != '/')
1645 snprintf(gpath+strlen(gpath), sizeof(gpath)-strlen(gpath), "/etc/%s", &path[8]);
1646 else
1647 strncpy(gpath+strlen(gpath), &path[8], sizeof(gpath)-strlen(gpath));
1648
1649 if (glob(gpath, 0, NULL, &gl) == 0) {
1650 for (x = 0; x < gl.gl_pathc; ++x) {
1651 /* try to avoid direct loops */
1652 if (strcmp(gl.gl_pathv[x], fname) == 0)
1653 continue;
1654 i = load_ld_cache_config(i, gl.gl_pathv[x]);
1655 }
1656 globfree(&gl);
1657 continue;
1658 }
1659 }
1660
1661 if (*path != '/')
1662 continue;
1663
1664 xarraypush(ldpaths, path, strlen(path));
1665 }
1666 free(path);
1667
1668 fclose(fp);
1669
1670 return i;
1671}
1672
1673#elif defined(__FreeBSD__) || defined(__DragonFly__)
1674
1675static int load_ld_cache_config(int i, const char *fname)
1676{
1677 FILE *fp = NULL;
1678 char *b = NULL, *p;
1679 struct elfhints_hdr hdr;
1680 char _fname[__PAX_UTILS_PATH_MAX];
1681
1682 fname = maybe_add_root(fname, _fname);
1683
1684 if ((fp = fopen(fname, "r")) == NULL)
1685 return i;
1686
1687 if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) ||
1688 hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 ||
1689 fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1)
1690 {
1691 fclose(fp);
1692 return i;
1693 }
1694
1695 b = xmalloc(hdr.dirlistlen + 1);
1696 if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) {
1697 fclose(fp);
1698 free(b);
1699 return i;
1700 }
1701
1702 while ((p = strsep(&b, ":"))) {
1703 if (*p == '\0')
1704 continue;
1705 xarraypush(ldpaths, p, strlen(p));
1706 }
1707
1708 free(b);
1709 fclose(fp);
1710 return i;
1711}
1712
1713#else
1714#ifdef __ELF__
1715#warning Cache config support not implemented for your target
1716#endif
1717static int load_ld_cache_config(int i, const char *fname)
1718{
1719 return 0;
1720}
1721#endif
366 1722
367/* scan /etc/ld.so.conf for paths */ 1723/* scan /etc/ld.so.conf for paths */
368static void scanelf_ldpath() 1724static void scanelf_ldpath(void)
369{ 1725{
370 char scan_l, scan_ul, scan_ull; 1726 char scan_l, scan_ul, scan_ull;
371 char *path, *p; 1727 size_t n;
372 FILE *fp; 1728 const char *ldpath;
1729 int i = 0;
373 1730
374 if ((fp = fopen("/etc/ld.so.conf", "r")) == NULL) 1731 if (array_cnt(ldpaths) == 0)
375 err("Unable to open ld.so.conf: %s", strerror(errno)); 1732 err("Unable to load any paths from ld.so.conf");
376 1733
377 scan_l = scan_ul = scan_ull = 0; 1734 scan_l = scan_ul = scan_ull = 0;
378 1735
379 if ((path = malloc(_POSIX_PATH_MAX)) == NULL) { 1736 array_for_each(ldpaths, n, ldpath) {
380 warn("Can not malloc() memory for ldpath scanning");
381 return;
382 }
383 while ((fgets(path, _POSIX_PATH_MAX, fp)) != NULL)
384 if (*path == '/') {
385 if ((p = strrchr(path, '\r')) != NULL)
386 *p = 0;
387 if ((p = strrchr(path, '\n')) != NULL)
388 *p = 0;
389 if (!scan_l && !strcmp(path, "/lib")) scan_l = 1; 1737 if (!scan_l && !strcmp(ldpath, "/lib")) scan_l = 1;
390 if (!scan_ul && !strcmp(path, "/usr/lib")) scan_ul = 1; 1738 if (!scan_ul && !strcmp(ldpath, "/usr/lib")) scan_ul = 1;
391 if (!scan_ull && !strcmp(path, "/usr/local/lib")) scan_ull = 1; 1739 if (!scan_ull && !strcmp(ldpath, "/usr/local/lib")) scan_ull = 1;
392 scanelf_dir(path); 1740 scanelf_dir(ldpath);
1741 ++i;
393 } 1742 }
394 free(path);
395 fclose(fp);
396 1743
397 if (!scan_l) scanelf_dir("/lib"); 1744 if (!scan_l) scanelf_dir("/lib");
398 if (!scan_ul) scanelf_dir("/usr/lib"); 1745 if (!scan_ul) scanelf_dir("/usr/lib");
399 if (!scan_ull) scanelf_dir("/usr/local/lib"); 1746 if (!scan_ull) scanelf_dir("/usr/local/lib");
400} 1747}
401 1748
402/* scan env PATH for paths */ 1749/* scan env PATH for paths */
403static void scanelf_envpath() 1750static void scanelf_envpath(void)
404{ 1751{
405 char *path, *p; 1752 char *path, *p;
406 1753
407 path = getenv("PATH"); 1754 path = getenv("PATH");
408 if (!path) 1755 if (!path)
409 err("PATH is not set in your env !"); 1756 err("PATH is not set in your env !");
410 1757 path = xstrdup(path);
411 if ((path = strdup(path)) == NULL)
412 err("strdup failed: %s", strerror(errno));
413 1758
414 while ((p = strrchr(path, ':')) != NULL) { 1759 while ((p = strrchr(path, ':')) != NULL) {
415 scanelf_dir(p + 1); 1760 scanelf_dir(p + 1);
416 *p = 0; 1761 *p = 0;
417 } 1762 }
418 1763
419 free(path); 1764 free(path);
420} 1765}
421 1766
422 1767/* usage / invocation handling functions */ /* Free Flags: c d j u w G H J K P Q U W */
423 1768#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DIYO:ZCBhV"
424/* usage / invocation handling functions */
425#define PARSE_FLAGS "plRmxetrns:aqvo:BhV"
426#define a_argument required_argument 1769#define a_argument required_argument
427static struct option const long_opts[] = { 1770static struct option const long_opts[] = {
428 {"path", no_argument, NULL, 'p'}, 1771 {"path", no_argument, NULL, 'p'},
429 {"ldpath", no_argument, NULL, 'l'}, 1772 {"ldpath", no_argument, NULL, 'l'},
1773 {"root", a_argument, NULL, 128},
430 {"recursive", no_argument, NULL, 'R'}, 1774 {"recursive", no_argument, NULL, 'R'},
431 {"mount", no_argument, NULL, 'm'}, 1775 {"mount", no_argument, NULL, 'm'},
1776 {"symlink", no_argument, NULL, 'y'},
1777 {"archives", no_argument, NULL, 'A'},
1778 {"ldcache", no_argument, NULL, 'L'},
1779 {"fix", no_argument, NULL, 'X'},
1780 {"setpax", a_argument, NULL, 'z'},
432 {"pax", no_argument, NULL, 'x'}, 1781 {"pax", no_argument, NULL, 'x'},
433 {"header", no_argument, NULL, 'e'}, 1782 {"header", no_argument, NULL, 'e'},
434 {"textrel", no_argument, NULL, 't'}, 1783 {"textrel", no_argument, NULL, 't'},
435 {"rpath", no_argument, NULL, 'r'}, 1784 {"rpath", no_argument, NULL, 'r'},
436 {"needed", no_argument, NULL, 'n'}, 1785 {"needed", no_argument, NULL, 'n'},
1786 {"interp", no_argument, NULL, 'i'},
1787 {"bind", no_argument, NULL, 'b'},
1788 {"soname", no_argument, NULL, 'S'},
437 {"symbol", a_argument, NULL, 's'}, 1789 {"symbol", a_argument, NULL, 's'},
1790 {"section", a_argument, NULL, 'k'},
1791 {"lib", a_argument, NULL, 'N'},
1792 {"gmatch", no_argument, NULL, 'g'},
1793 {"textrels", no_argument, NULL, 'T'},
1794 {"etype", a_argument, NULL, 'E'},
1795 {"bits", a_argument, NULL, 'M'},
1796 {"endian", no_argument, NULL, 'D'},
1797 {"osabi", no_argument, NULL, 'I'},
1798 {"eabi", no_argument, NULL, 'Y'},
1799 {"perms", a_argument, NULL, 'O'},
1800 {"size", no_argument, NULL, 'Z'},
438 {"all", no_argument, NULL, 'a'}, 1801 {"all", no_argument, NULL, 'a'},
439 {"quiet", no_argument, NULL, 'q'}, 1802 {"quiet", no_argument, NULL, 'q'},
440 {"verbose", no_argument, NULL, 'v'}, 1803 {"verbose", no_argument, NULL, 'v'},
1804 {"format", a_argument, NULL, 'F'},
1805 {"from", a_argument, NULL, 'f'},
441 {"file", a_argument, NULL, 'o'}, 1806 {"file", a_argument, NULL, 'o'},
1807 {"nocolor", no_argument, NULL, 'C'},
442 {"nobanner", no_argument, NULL, 'B'}, 1808 {"nobanner", no_argument, NULL, 'B'},
443 {"help", no_argument, NULL, 'h'}, 1809 {"help", no_argument, NULL, 'h'},
444 {"version", no_argument, NULL, 'V'}, 1810 {"version", no_argument, NULL, 'V'},
445 {NULL, no_argument, NULL, 0x0} 1811 {NULL, no_argument, NULL, 0x0}
446}; 1812};
1813
447static char *opts_help[] = { 1814static const char * const opts_help[] = {
448 "Scan all directories in PATH environment", 1815 "Scan all directories in PATH environment",
449 "Scan all directories in /etc/ld.so.conf", 1816 "Scan all directories in /etc/ld.so.conf",
1817 "Root directory (use with -l or -p)",
450 "Scan directories recursively", 1818 "Scan directories recursively",
451 "Don't recursively cross mount points\n", 1819 "Don't recursively cross mount points",
1820 "Don't scan symlinks",
1821 "Scan archives (.a files)",
1822 "Utilize ld.so.cache information (use with -r/-n)",
1823 "Try and 'fix' bad things (use with -r/-e)",
1824 "Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n",
452 "Print PaX markings", 1825 "Print PaX markings",
453 "Print GNU_STACK markings", 1826 "Print GNU_STACK/PT_LOAD markings",
454 "Print TEXTREL information", 1827 "Print TEXTREL information",
455 "Print RPATH information", 1828 "Print RPATH information",
456 "Print NEEDED information", 1829 "Print NEEDED information",
1830 "Print INTERP information",
1831 "Print BIND information",
1832 "Print SONAME information",
457 "Find a specified symbol", 1833 "Find a specified symbol",
458 "Print all scanned info (-x -e -t -r)\n", 1834 "Find a specified section",
1835 "Find a specified library",
1836 "Use regex matching rather than string compare (use with -s)",
1837 "Locate cause of TEXTREL",
1838 "Print only ELF files matching etype ET_DYN,ET_EXEC ...",
1839 "Print only ELF files matching numeric bits",
1840 "Print Endianness",
1841 "Print OSABI",
1842 "Print EABI (EM_ARM Only)",
1843 "Print only ELF files matching octal permissions",
1844 "Print ELF file size",
1845 "Print all useful/simple info\n",
459 "Only output 'bad' things", 1846 "Only output 'bad' things",
460 "Be verbose (can be specified more than once)", 1847 "Be verbose (can be specified more than once)",
1848 "Use specified format for output",
1849 "Read input stream from a filename",
461 "Write output stream to a filename", 1850 "Write output stream to a filename",
1851 "Don't emit color in output",
462 "Don't display the header", 1852 "Don't display the header",
463 "Print this help and exit", 1853 "Print this help and exit",
464 "Print version and exit", 1854 "Print version and exit",
465 NULL 1855 NULL
466}; 1856};
467 1857
468/* display usage and exit */ 1858/* display usage and exit */
469static void usage(int status) 1859static void usage(int status)
470{ 1860{
471 int i; 1861 unsigned long i;
472 printf(" Scan ELF binaries for stuff\n" 1862 printf("* Scan ELF binaries for stuff\n\n"
473 "Usage: %s [options] <dir1> [dir2 dirN ...]\n\n", argv0); 1863 "Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0);
474 printf("Options:\n"); 1864 printf("Options: -[%s]\n", PARSE_FLAGS);
475 for (i = 0; long_opts[i].name; ++i) 1865 for (i = 0; long_opts[i].name; ++i)
476 if (long_opts[i].has_arg == no_argument) 1866 if (long_opts[i].has_arg == no_argument)
477 printf(" -%c, --%-13s %s\n", long_opts[i].val, 1867 printf(" -%c, --%-14s* %s\n", long_opts[i].val,
1868 long_opts[i].name, opts_help[i]);
1869 else if (long_opts[i].val > '~')
1870 printf(" --%-7s <arg> * %s\n",
478 long_opts[i].name, opts_help[i]); 1871 long_opts[i].name, opts_help[i]);
479 else 1872 else
480 printf(" -%c, --%-6s <arg> %s\n", long_opts[i].val, 1873 printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val,
481 long_opts[i].name, opts_help[i]); 1874 long_opts[i].name, opts_help[i]);
1875
1876 puts("\nFor more information, see the scanelf(1) manpage");
482 exit(status); 1877 exit(status);
483} 1878}
484 1879
485/* parse command line arguments and preform needed actions */ 1880/* parse command line arguments and preform needed actions */
1881#define do_pax_state(option, flag) \
1882 if (islower(option)) { \
1883 flags &= ~PF_##flag; \
1884 flags |= PF_NO##flag; \
1885 } else { \
1886 flags &= ~PF_NO##flag; \
1887 flags |= PF_##flag; \
1888 }
486static void parseargs(int argc, char *argv[]) 1889static int parseargs(int argc, char *argv[])
487{ 1890{
488 int flag; 1891 int i;
1892 const char *from_file = NULL;
1893 int ret = 0;
489 1894
490 opterr = 0; 1895 opterr = 0;
491 while ((flag=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { 1896 while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) {
492 switch (flag) { 1897 switch (i) {
493 1898
494 case 'V': /* version info */ 1899 case 'V':
495 printf("%s compiled %s\n%s\n" 1900 printf("pax-utils-%s: %s compiled %s\n%s\n"
496 "%s written for Gentoo Linux by <solar and vapier @ gentoo.org>\n", 1901 "%s written for Gentoo by <solar and vapier @ gentoo.org>\n",
497 __FILE__, __DATE__, rcsid, argv0); 1902 VERSION, __FILE__, __DATE__, rcsid, argv0);
498 exit(EXIT_SUCCESS); 1903 exit(EXIT_SUCCESS);
499 break; 1904 break;
500 case 'h': usage(EXIT_SUCCESS); break; 1905 case 'h': usage(EXIT_SUCCESS); break;
501 1906 case 'f':
1907 if (from_file) warn("You prob don't want to specify -f twice");
1908 from_file = optarg;
1909 break;
1910 case 'E':
1911 match_etypes = optarg;
1912 break;
1913 case 'M':
1914 match_bits = atoi(optarg);
1915 if (match_bits == 0) {
1916 if (strcmp(optarg, "ELFCLASS32") == 0)
1917 match_bits = 32;
1918 if (strcmp(optarg, "ELFCLASS64") == 0)
1919 match_bits = 64;
1920 }
1921 break;
1922 case 'O':
1923 if (sscanf(optarg, "%o", &match_perms) == -1)
1924 match_bits = 0;
1925 break;
502 case 'o': { 1926 case 'o': {
503 FILE *fp = NULL;
504 fp = freopen(optarg, "w", stdout); 1927 if (freopen(optarg, "w", stdout) == NULL)
505 if (fp == NULL)
506 err("Could not open output stream '%s': %s", optarg, strerror(errno)); 1928 err("Could not open output stream '%s': %s", optarg, strerror(errno));
507 stdout = fp;
508 break; 1929 break;
509 } 1930 }
1931 case 'k':
1932 xarraypush(find_section_arr, optarg, strlen(optarg));
1933 break;
1934 case 's': {
1935 if (find_sym) warn("You prob don't want to specify -s twice");
1936 find_sym = optarg;
1937 break;
1938 }
1939 case 'N':
1940 xarraypush(find_lib_arr, optarg, strlen(optarg));
1941 break;
1942 case 'F': {
1943 if (out_format) warn("You prob don't want to specify -F twice");
1944 out_format = optarg;
1945 break;
1946 }
1947 case 'z': {
1948 unsigned long flags = (PF_NOEMUTRAMP | PF_NORANDEXEC);
1949 size_t x;
510 1950
511 case 's': find_sym = strdup(optarg); break; 1951 for (x = 0; x < strlen(optarg); x++) {
512 1952 switch (optarg[x]) {
1953 case 'p':
1954 case 'P':
1955 do_pax_state(optarg[x], PAGEEXEC);
1956 break;
1957 case 's':
1958 case 'S':
1959 do_pax_state(optarg[x], SEGMEXEC);
1960 break;
1961 case 'm':
1962 case 'M':
1963 do_pax_state(optarg[x], MPROTECT);
1964 break;
1965 case 'e':
1966 case 'E':
1967 do_pax_state(optarg[x], EMUTRAMP);
1968 break;
1969 case 'r':
1970 case 'R':
1971 do_pax_state(optarg[x], RANDMMAP);
1972 break;
1973 case 'x':
1974 case 'X':
1975 do_pax_state(optarg[x], RANDEXEC);
1976 break;
1977 default:
1978 break;
1979 }
1980 }
1981 if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) ||
1982 ((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) ||
1983 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) ||
1984 ((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) ||
1985 ((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) ||
1986 ((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP))))
1987 setpax = flags;
1988 break;
1989 }
1990 case 'Z': show_size = 1; break;
1991 case 'g': g_match = 1; break;
1992 case 'L': use_ldcache = 1; break;
1993 case 'y': scan_symlink = 0; break;
1994 case 'A': scan_archives = 1; break;
1995 case 'C': color_init(true); break;
513 case 'B': show_banner = 0; break; 1996 case 'B': show_banner = 0; break;
514 case 'l': scan_ldpath = 1; break; 1997 case 'l': scan_ldpath = 1; break;
515 case 'p': scan_envpath = 1; break; 1998 case 'p': scan_envpath = 1; break;
516 case 'R': dir_recurse = 1; break; 1999 case 'R': dir_recurse = 1; break;
517 case 'm': dir_crossmount = 0; break; 2000 case 'm': dir_crossmount = 0; break;
2001 case 'X': ++fix_elf; break;
518 case 'x': show_pax = 1; break; 2002 case 'x': show_pax = 1; break;
519 case 'e': show_stack = 1; break; 2003 case 'e': show_phdr = 1; break;
520 case 't': show_textrel = 1; break; 2004 case 't': show_textrel = 1; break;
521 case 'r': show_rpath = 1; break; 2005 case 'r': show_rpath = 1; break;
522 case 'n': show_needed = 1; break; 2006 case 'n': show_needed = 1; break;
2007 case 'i': show_interp = 1; break;
2008 case 'b': show_bind = 1; break;
2009 case 'S': show_soname = 1; break;
2010 case 'T': show_textrels = 1; break;
523 case 'q': be_quiet = 1; break; 2011 case 'q': be_quiet = 1; break;
524 case 'v': be_verbose = (be_verbose % 20) + 1; break; 2012 case 'v': be_verbose = (be_verbose % 20) + 1; break;
525 case 'a': show_pax = show_stack = show_textrel = show_needed = show_rpath = 1; break; 2013 case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break;
526 2014 case 'D': show_endian = 1; break;
2015 case 'I': show_osabi = 1; break;
2016 case 'Y': show_eabi = 1; break;
2017 case 128:
2018 root = optarg;
2019 break;
527 case ':': 2020 case ':':
528 warn("Option missing parameter"); 2021 err("Option '%c' is missing parameter", optopt);
529 usage(EXIT_FAILURE);
530 break;
531 case '?': 2022 case '?':
532 warn("Unknown option"); 2023 err("Unknown option '%c' or argument missing", optopt);
533 usage(EXIT_FAILURE);
534 break;
535 default: 2024 default:
536 err("Unhandled option '%c'", flag); 2025 err("Unhandled option '%c'; please report this", i);
537 break; 2026 }
2027 }
2028 if (show_textrels && be_verbose)
2029 has_objdump = bin_in_path("objdump");
2030 /* flatten arrays for display */
2031 if (array_cnt(find_lib_arr))
2032 find_lib = array_flatten_str(find_lib_arr);
2033 if (array_cnt(find_section_arr))
2034 find_section = array_flatten_str(find_section_arr);
2035 /* let the format option override all other options */
2036 if (out_format) {
2037 show_pax = show_phdr = show_textrel = show_rpath = \
2038 show_needed = show_interp = show_bind = show_soname = \
2039 show_textrels = show_perms = show_endian = show_size = \
2040 show_osabi = show_eabi = 0;
2041 for (i = 0; out_format[i]; ++i) {
2042 if (!IS_MODIFIER(out_format[i])) continue;
2043
2044 switch (out_format[++i]) {
2045 case '+': break;
2046 case '%': break;
2047 case '#': break;
2048 case 'F': break;
2049 case 'p': break;
2050 case 'f': break;
2051 case 'k': break;
2052 case 's': break;
2053 case 'N': break;
2054 case 'o': break;
2055 case 'a': break;
2056 case 'M': break;
2057 case 'Z': show_size = 1; break;
2058 case 'D': show_endian = 1; break;
2059 case 'I': show_osabi = 1; break;
2060 case 'Y': show_eabi = 1; break;
2061 case 'O': show_perms = 1; break;
2062 case 'x': show_pax = 1; break;
2063 case 'e': show_phdr = 1; break;
2064 case 't': show_textrel = 1; break;
2065 case 'r': show_rpath = 1; break;
2066 case 'n': show_needed = 1; break;
2067 case 'i': show_interp = 1; break;
2068 case 'b': show_bind = 1; break;
2069 case 'S': show_soname = 1; break;
2070 case 'T': show_textrels = 1; break;
2071 default:
2072 err("Invalid format specifier '%c' (byte %i)",
2073 out_format[i], i+1);
538 } 2074 }
539 } 2075 }
540 2076
541 if (be_quiet && be_verbose) 2077 /* construct our default format */
542 err("You can be quiet or you can be verbose, not both, stupid"); 2078 } else {
2079 size_t fmt_len = 30;
2080 out_format = xmalloc(sizeof(char) * fmt_len);
2081 *out_format = '\0';
2082 if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len);
2083 if (show_pax) xstrcat(&out_format, "%x ", &fmt_len);
2084 if (show_perms) xstrcat(&out_format, "%O ", &fmt_len);
2085 if (show_size) xstrcat(&out_format, "%Z ", &fmt_len);
2086 if (show_endian) xstrcat(&out_format, "%D ", &fmt_len);
2087 if (show_osabi) xstrcat(&out_format, "%I ", &fmt_len);
2088 if (show_eabi) xstrcat(&out_format, "%Y ", &fmt_len);
2089 if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len);
2090 if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len);
2091 if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len);
2092 if (show_needed) xstrcat(&out_format, "%n ", &fmt_len);
2093 if (show_interp) xstrcat(&out_format, "%i ", &fmt_len);
2094 if (show_bind) xstrcat(&out_format, "%b ", &fmt_len);
2095 if (show_soname) xstrcat(&out_format, "%S ", &fmt_len);
2096 if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len);
2097 if (find_sym) xstrcat(&out_format, "%s ", &fmt_len);
2098 if (find_section) xstrcat(&out_format, "%k ", &fmt_len);
2099 if (find_lib) xstrcat(&out_format, "%N ", &fmt_len);
2100 if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len);
2101 }
2102 if (be_verbose > 2) printf("Format: %s\n", out_format);
543 2103
2104 /* now lets actually do the scanning */
2105 if (scan_ldpath || use_ldcache)
2106 load_ld_cache_config(0, __PAX_UTILS_DEFAULT_LD_CACHE_CONFIG);
544 if (scan_ldpath) scanelf_ldpath(); 2107 if (scan_ldpath) scanelf_ldpath();
545 if (scan_envpath) scanelf_envpath(); 2108 if (scan_envpath) scanelf_envpath();
2109 if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath)
2110 from_file = "-";
2111 if (from_file) {
2112 scanelf_from_file(from_file);
2113 from_file = *argv;
2114 }
546 if (optind == argc && !scan_ldpath && !scan_envpath) 2115 if (optind == argc && !scan_ldpath && !scan_envpath && !from_file)
547 err("Nothing to scan !?"); 2116 err("Nothing to scan !?");
548 while (optind < argc) 2117 while (optind < argc) {
549 scanelf_dir(argv[optind++]); 2118 search_path = argv[optind++];
2119 ret = scanelf_dir(search_path);
2120 }
550 2121
551 if (find_sym) free(find_sym); 2122 /* clean up */
552} 2123 xarrayfree(ldpaths);
2124 xarrayfree(find_lib_arr);
2125 xarrayfree(find_section_arr);
2126 free(find_lib);
2127 free(find_section);
553 2128
2129 if (ldcache != 0)
2130 munmap(ldcache, ldcache_size);
2131 return ret;
2132}
554 2133
2134static char **get_split_env(const char *envvar)
2135{
2136 const char *delims = " \t\n";
2137 char **envvals = NULL;
2138 char *env, *s;
2139 int nentry;
2140
2141 if ((env = getenv(envvar)) == NULL)
2142 return NULL;
2143
2144 env = xstrdup(env);
2145 if (env == NULL)
2146 return NULL;
2147
2148 s = strtok(env, delims);
2149 if (s == NULL) {
2150 free(env);
2151 return NULL;
2152 }
2153
2154 nentry = 0;
2155 while (s != NULL) {
2156 ++nentry;
2157 envvals = xrealloc(envvals, sizeof(*envvals) * (nentry+1));
2158 envvals[nentry-1] = s;
2159 s = strtok(NULL, delims);
2160 }
2161 envvals[nentry] = NULL;
2162
2163 /* don't want to free(env) as it contains the memory that backs
2164 * the envvals array of strings */
2165 return envvals;
2166}
2167
2168static void parseenv(void)
2169{
2170 color_init(false);
2171 qa_textrels = get_split_env("QA_TEXTRELS");
2172 qa_execstack = get_split_env("QA_EXECSTACK");
2173 qa_wx_load = get_split_env("QA_WX_LOAD");
2174}
2175
2176#ifdef __PAX_UTILS_CLEANUP
2177static void cleanup(void)
2178{
2179 free(out_format);
2180 free(qa_textrels);
2181 free(qa_execstack);
2182 free(qa_wx_load);
2183}
2184#endif
555 2185
556int main(int argc, char *argv[]) 2186int main(int argc, char *argv[])
557{ 2187{
2188 int ret;
558 if (argc < 2) 2189 if (argc < 2)
559 usage(EXIT_FAILURE); 2190 usage(EXIT_FAILURE);
2191 parseenv();
560 parseargs(argc, argv); 2192 ret = parseargs(argc, argv);
561 fclose(stdout); 2193 fclose(stdout);
562 return EXIT_SUCCESS; 2194#ifdef __PAX_UTILS_CLEANUP
2195 cleanup();
2196 warn("The calls to add/delete heap should be off:\n"
2197 "\t- 1 due to the out_buffer not being freed in scanelf_file()\n"
2198 "\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD");
2199#endif
2200 return ret;
563} 2201}
2202
2203/* Match filename against entries in matchlist, return TRUE
2204 * if the file is listed */
2205static int file_matches_list(const char *filename, char **matchlist)
2206{
2207 char **file;
2208 char *match;
2209 char buf[__PAX_UTILS_PATH_MAX];
2210
2211 if (matchlist == NULL)
2212 return 0;
2213
2214 for (file = matchlist; *file != NULL; file++) {
2215 if (search_path) {
2216 snprintf(buf, sizeof(buf), "%s%s", search_path, *file);
2217 match = buf;
2218 } else {
2219 match = *file;
2220 }
2221 if (fnmatch(match, filename, 0) == 0)
2222 return 1;
2223 }
2224 return 0;
2225}

Legend:
Removed from v.1.32  
changed lines
  Added in v.1.230

  ViewVC Help
Powered by ViewVC 1.1.20