| 1 |
/* |
| 2 |
* Copyright 2003-2007 Gentoo Foundation |
| 3 |
* Distributed under the terms of the GNU General Public License v2 |
| 4 |
* $Header: /var/cvsroot/gentoo-projects/pax-utils/scanelf.c,v 1.232 2011/09/27 22:20:07 vapier Exp $ |
| 5 |
* |
| 6 |
* Copyright 2003-2007 Ned Ludd - <solar@gentoo.org> |
| 7 |
* Copyright 2004-2007 Mike Frysinger - <vapier@gentoo.org> |
| 8 |
*/ |
| 9 |
|
| 10 |
static const char rcsid[] = "$Id: scanelf.c,v 1.232 2011/09/27 22:20:07 vapier Exp $"; |
| 11 |
const char argv0[] = "scanelf"; |
| 12 |
|
| 13 |
#include "paxinc.h" |
| 14 |
|
| 15 |
#define IS_MODIFIER(c) (c == '%' || c == '#' || c == '+') |
| 16 |
|
| 17 |
/* prototypes */ |
| 18 |
static int file_matches_list(const char *filename, char **matchlist); |
| 19 |
|
| 20 |
/* variables to control behavior */ |
| 21 |
static char *match_etypes = NULL; |
| 22 |
static array_t _ldpaths = array_init_decl, *ldpaths = &_ldpaths; |
| 23 |
static char scan_ldpath = 0; |
| 24 |
static char scan_envpath = 0; |
| 25 |
static char scan_symlink = 1; |
| 26 |
static char scan_archives = 0; |
| 27 |
static char dir_recurse = 0; |
| 28 |
static char dir_crossmount = 1; |
| 29 |
static char show_pax = 0; |
| 30 |
static char show_perms = 0; |
| 31 |
static char show_size = 0; |
| 32 |
static char show_phdr = 0; |
| 33 |
static char show_textrel = 0; |
| 34 |
static char show_rpath = 0; |
| 35 |
static char show_needed = 0; |
| 36 |
static char show_interp = 0; |
| 37 |
static char show_bind = 0; |
| 38 |
static char show_soname = 0; |
| 39 |
static char show_textrels = 0; |
| 40 |
static char show_banner = 1; |
| 41 |
static char show_endian = 0; |
| 42 |
static char show_osabi = 0; |
| 43 |
static char show_eabi = 0; |
| 44 |
static char be_quiet = 0; |
| 45 |
static char be_verbose = 0; |
| 46 |
static char be_wewy_wewy_quiet = 0; |
| 47 |
static char be_semi_verbose = 0; |
| 48 |
static char *find_sym = NULL; |
| 49 |
static char *find_lib = NULL; |
| 50 |
static array_t _find_lib_arr = array_init_decl, *find_lib_arr = &_find_lib_arr; |
| 51 |
static char *find_section = NULL; |
| 52 |
static array_t _find_section_arr = array_init_decl, *find_section_arr = &_find_section_arr; |
| 53 |
static char *out_format = NULL; |
| 54 |
static char *search_path = NULL; |
| 55 |
static char fix_elf = 0; |
| 56 |
static char g_match = 0; |
| 57 |
static char use_ldcache = 0; |
| 58 |
|
| 59 |
static char **qa_textrels = NULL; |
| 60 |
static char **qa_execstack = NULL; |
| 61 |
static char **qa_wx_load = NULL; |
| 62 |
static int root_fd = AT_FDCWD; |
| 63 |
|
| 64 |
static int match_bits = 0; |
| 65 |
static unsigned int match_perms = 0; |
| 66 |
static void *ldcache = NULL; |
| 67 |
static size_t ldcache_size = 0; |
| 68 |
static unsigned long setpax = 0UL; |
| 69 |
|
| 70 |
static int has_objdump = 0; |
| 71 |
|
| 72 |
/* find the path to a file by name */ |
| 73 |
static int bin_in_path(const char *fname) |
| 74 |
{ |
| 75 |
char fullpath[__PAX_UTILS_PATH_MAX]; |
| 76 |
char *path, *p; |
| 77 |
|
| 78 |
path = getenv("PATH"); |
| 79 |
if (!path) |
| 80 |
return 0; |
| 81 |
|
| 82 |
while ((p = strrchr(path, ':')) != NULL) { |
| 83 |
snprintf(fullpath, sizeof(fullpath), "%s/%s", p + 1, fname); |
| 84 |
*p = 0; |
| 85 |
if (access(fullpath, R_OK) != -1) |
| 86 |
return 1; |
| 87 |
} |
| 88 |
|
| 89 |
return 0; |
| 90 |
} |
| 91 |
|
| 92 |
static FILE *fopenat_r(int dir_fd, const char *path) |
| 93 |
{ |
| 94 |
int fd = openat(dir_fd, path, O_RDONLY|O_CLOEXEC); |
| 95 |
if (fd == -1) |
| 96 |
return NULL; |
| 97 |
return fdopen(fd, "re"); |
| 98 |
} |
| 99 |
|
| 100 |
static const char *root_rel_path(const char *path) |
| 101 |
{ |
| 102 |
/* |
| 103 |
* openat() will ignore the dirfd if path starts with |
| 104 |
* a /, so consume all of that noise |
| 105 |
* |
| 106 |
* XXX: we don't handle relative paths like ../ that |
| 107 |
* break out of the --root option, but for now, just |
| 108 |
* don't do that :P. |
| 109 |
*/ |
| 110 |
if (root_fd != AT_FDCWD) { |
| 111 |
while (*path == '/') |
| 112 |
++path; |
| 113 |
if (*path == '\0') |
| 114 |
path = "."; |
| 115 |
} |
| 116 |
|
| 117 |
return path; |
| 118 |
} |
| 119 |
|
| 120 |
/* 1 on failure. 0 otherwise */ |
| 121 |
static int rematch(const char *regex, const char *match, int cflags) |
| 122 |
{ |
| 123 |
regex_t preg; |
| 124 |
int ret; |
| 125 |
|
| 126 |
if ((match == NULL) || (regex == NULL)) |
| 127 |
return EXIT_FAILURE; |
| 128 |
|
| 129 |
if ((ret = regcomp(&preg, regex, cflags))) { |
| 130 |
char err[256]; |
| 131 |
|
| 132 |
if (regerror(ret, &preg, err, sizeof(err))) |
| 133 |
fprintf(stderr, "regcomp failed: %s", err); |
| 134 |
else |
| 135 |
fprintf(stderr, "regcomp failed"); |
| 136 |
|
| 137 |
return EXIT_FAILURE; |
| 138 |
} |
| 139 |
ret = regexec(&preg, match, 0, NULL, 0); |
| 140 |
regfree(&preg); |
| 141 |
|
| 142 |
return ret; |
| 143 |
} |
| 144 |
|
| 145 |
/* sub-funcs for scanelf_fileat() */ |
| 146 |
static void scanelf_file_get_symtabs(elfobj *elf, void **sym, void **tab) |
| 147 |
{ |
| 148 |
/* find the best SHT_DYNSYM and SHT_STRTAB sections */ |
| 149 |
|
| 150 |
/* debug sections */ |
| 151 |
void *symtab = elf_findsecbyname(elf, ".symtab"); |
| 152 |
void *strtab = elf_findsecbyname(elf, ".strtab"); |
| 153 |
/* runtime sections */ |
| 154 |
void *dynsym = elf_findsecbyname(elf, ".dynsym"); |
| 155 |
void *dynstr = elf_findsecbyname(elf, ".dynstr"); |
| 156 |
|
| 157 |
#define GET_SYMTABS(B) \ |
| 158 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 159 |
if (symtab && dynsym) { \ |
| 160 |
Elf ## B ## _Shdr *esymtab = symtab; \ |
| 161 |
Elf ## B ## _Shdr *edynsym = dynsym; \ |
| 162 |
*sym = (EGET(esymtab->sh_size) > EGET(edynsym->sh_size)) ? symtab : dynsym; \ |
| 163 |
} else \ |
| 164 |
*sym = symtab ? symtab : dynsym; \ |
| 165 |
if (strtab && dynstr) { \ |
| 166 |
Elf ## B ## _Shdr *estrtab = strtab; \ |
| 167 |
Elf ## B ## _Shdr *edynstr = dynstr; \ |
| 168 |
*tab = (EGET(estrtab->sh_size) > EGET(edynstr->sh_size)) ? strtab : dynstr; \ |
| 169 |
} else \ |
| 170 |
*tab = strtab ? strtab : dynstr; \ |
| 171 |
} |
| 172 |
GET_SYMTABS(32) |
| 173 |
GET_SYMTABS(64) |
| 174 |
} |
| 175 |
|
| 176 |
static char *scanelf_file_pax(elfobj *elf, char *found_pax) |
| 177 |
{ |
| 178 |
static char ret[7]; |
| 179 |
unsigned long i, shown; |
| 180 |
|
| 181 |
if (!show_pax) return NULL; |
| 182 |
|
| 183 |
shown = 0; |
| 184 |
memset(&ret, 0, sizeof(ret)); |
| 185 |
|
| 186 |
if (elf->phdr) { |
| 187 |
#define SHOW_PAX(B) \ |
| 188 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 189 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 190 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 191 |
for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ |
| 192 |
if (EGET(phdr[i].p_type) != PT_PAX_FLAGS) \ |
| 193 |
continue; \ |
| 194 |
if (fix_elf && setpax) { \ |
| 195 |
/* set the paxctl flags */ \ |
| 196 |
ESET(phdr[i].p_flags, setpax); \ |
| 197 |
} \ |
| 198 |
if (be_quiet && (EGET(phdr[i].p_flags) == (PF_NOEMUTRAMP | PF_NORANDEXEC))) \ |
| 199 |
continue; \ |
| 200 |
memcpy(ret, pax_short_pf_flags(EGET(phdr[i].p_flags)), 6); \ |
| 201 |
*found_pax = 1; \ |
| 202 |
++shown; \ |
| 203 |
break; \ |
| 204 |
} \ |
| 205 |
} |
| 206 |
SHOW_PAX(32) |
| 207 |
SHOW_PAX(64) |
| 208 |
} |
| 209 |
|
| 210 |
if (fix_elf && setpax) { |
| 211 |
/* set the chpax settings */ |
| 212 |
if (elf->elf_class == ELFCLASS32) { |
| 213 |
if (EHDR32(elf->ehdr)->e_type == ET_DYN || EHDR32(elf->ehdr)->e_type == ET_EXEC) |
| 214 |
ESET(EHDR32(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax)); |
| 215 |
} else { |
| 216 |
if (EHDR64(elf->ehdr)->e_type == ET_DYN || EHDR64(elf->ehdr)->e_type == ET_EXEC) |
| 217 |
ESET(EHDR64(elf->ehdr)->e_ident[EI_PAX], pax_pf2hf_flags(setpax)); |
| 218 |
} |
| 219 |
} |
| 220 |
|
| 221 |
/* fall back to EI_PAX if no PT_PAX was found */ |
| 222 |
if (!*ret) { |
| 223 |
static char *paxflags; |
| 224 |
paxflags = pax_short_hf_flags(EI_PAX_FLAGS(elf)); |
| 225 |
if (!be_quiet || (be_quiet && EI_PAX_FLAGS(elf))) { |
| 226 |
*found_pax = 1; |
| 227 |
return (be_wewy_wewy_quiet ? NULL : paxflags); |
| 228 |
} |
| 229 |
strncpy(ret, paxflags, sizeof(ret)); |
| 230 |
} |
| 231 |
|
| 232 |
if (be_wewy_wewy_quiet || (be_quiet && !shown)) |
| 233 |
return NULL; |
| 234 |
else |
| 235 |
return ret; |
| 236 |
} |
| 237 |
|
| 238 |
static char *scanelf_file_phdr(elfobj *elf, char *found_phdr, char *found_relro, char *found_load) |
| 239 |
{ |
| 240 |
static char ret[12]; |
| 241 |
char *found; |
| 242 |
unsigned long i, shown, multi_stack, multi_relro, multi_load; |
| 243 |
int max_pt_load; |
| 244 |
|
| 245 |
if (!show_phdr) return NULL; |
| 246 |
|
| 247 |
memcpy(ret, "--- --- ---\0", 12); |
| 248 |
|
| 249 |
shown = 0; |
| 250 |
multi_stack = multi_relro = multi_load = 0; |
| 251 |
max_pt_load = elf_max_pt_load(elf); |
| 252 |
|
| 253 |
#define NOTE_GNU_STACK ".note.GNU-stack" |
| 254 |
#define SHOW_PHDR(B) \ |
| 255 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 256 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 257 |
Elf ## B ## _Off offset; \ |
| 258 |
uint32_t flags, check_flags; \ |
| 259 |
if (elf->phdr != NULL) { \ |
| 260 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 261 |
for (i = 0; i < EGET(ehdr->e_phnum); ++i) { \ |
| 262 |
if (EGET(phdr[i].p_type) == PT_GNU_STACK) { \ |
| 263 |
if (multi_stack++) \ |
| 264 |
warnf("%s: multiple PT_GNU_STACK's !?", elf->filename); \ |
| 265 |
if (file_matches_list(elf->filename, qa_execstack)) \ |
| 266 |
continue; \ |
| 267 |
found = found_phdr; \ |
| 268 |
offset = 0; \ |
| 269 |
check_flags = PF_X; \ |
| 270 |
} else if (EGET(phdr[i].p_type) == PT_GNU_RELRO) { \ |
| 271 |
if (multi_relro++) \ |
| 272 |
warnf("%s: multiple PT_GNU_RELRO's !?", elf->filename); \ |
| 273 |
found = found_relro; \ |
| 274 |
offset = 4; \ |
| 275 |
check_flags = PF_X; \ |
| 276 |
} else if (EGET(phdr[i].p_type) == PT_LOAD) { \ |
| 277 |
if (EGET(ehdr->e_type) == ET_DYN || EGET(ehdr->e_type) == ET_EXEC) \ |
| 278 |
if (multi_load++ > max_pt_load) \ |
| 279 |
warnf("%s: more than %i PT_LOAD's !?", elf->filename, max_pt_load); \ |
| 280 |
if (file_matches_list(elf->filename, qa_wx_load)) \ |
| 281 |
continue; \ |
| 282 |
found = found_load; \ |
| 283 |
offset = 8; \ |
| 284 |
check_flags = PF_W|PF_X; \ |
| 285 |
} else \ |
| 286 |
continue; \ |
| 287 |
flags = EGET(phdr[i].p_flags); \ |
| 288 |
if (be_quiet && ((flags & check_flags) != check_flags)) \ |
| 289 |
continue; \ |
| 290 |
if ((EGET(phdr[i].p_type) != PT_LOAD) && (fix_elf && ((flags & PF_X) != flags))) { \ |
| 291 |
ESET(phdr[i].p_flags, flags & (PF_X ^ (size_t)-1)); \ |
| 292 |
ret[3] = ret[7] = '!'; \ |
| 293 |
flags = EGET(phdr[i].p_flags); \ |
| 294 |
} \ |
| 295 |
memcpy(ret+offset, gnu_short_stack_flags(flags), 3); \ |
| 296 |
*found = 1; \ |
| 297 |
++shown; \ |
| 298 |
} \ |
| 299 |
} else if (elf->shdr != NULL) { \ |
| 300 |
/* no program headers which means this is prob an object file */ \ |
| 301 |
Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \ |
| 302 |
Elf ## B ## _Shdr *strtbl = shdr + EGET(ehdr->e_shstrndx); \ |
| 303 |
char *str; \ |
| 304 |
if ((void*)strtbl > elf->data_end) \ |
| 305 |
goto skip_this_shdr##B; \ |
| 306 |
check_flags = SHF_WRITE|SHF_EXECINSTR; \ |
| 307 |
for (i = 0; i < EGET(ehdr->e_shnum); ++i) { \ |
| 308 |
if (EGET(shdr[i].sh_type) != SHT_PROGBITS) continue; \ |
| 309 |
offset = EGET(strtbl->sh_offset) + EGET(shdr[i].sh_name); \ |
| 310 |
str = elf->data + offset; \ |
| 311 |
if (str > elf->data + offset + sizeof(NOTE_GNU_STACK)) continue; \ |
| 312 |
if (!strcmp(str, NOTE_GNU_STACK)) { \ |
| 313 |
if (multi_stack++) warnf("%s: multiple .note.GNU-stack's !?", elf->filename); \ |
| 314 |
flags = EGET(shdr[i].sh_flags); \ |
| 315 |
if (be_quiet && ((flags & check_flags) != check_flags)) \ |
| 316 |
continue; \ |
| 317 |
++*found_phdr; \ |
| 318 |
shown = 1; \ |
| 319 |
if (flags & SHF_WRITE) ret[0] = 'W'; \ |
| 320 |
if (flags & SHF_ALLOC) ret[1] = 'A'; \ |
| 321 |
if (flags & SHF_EXECINSTR) ret[2] = 'X'; \ |
| 322 |
if (flags & 0xFFFFFFF8) warn("Invalid section flags for GNU-stack"); \ |
| 323 |
break; \ |
| 324 |
} \ |
| 325 |
} \ |
| 326 |
skip_this_shdr##B: \ |
| 327 |
if (!multi_stack) { \ |
| 328 |
if (file_matches_list(elf->filename, qa_execstack)) \ |
| 329 |
return NULL; \ |
| 330 |
*found_phdr = 1; \ |
| 331 |
shown = 1; \ |
| 332 |
memcpy(ret, "!WX", 3); \ |
| 333 |
} \ |
| 334 |
} \ |
| 335 |
} |
| 336 |
SHOW_PHDR(32) |
| 337 |
SHOW_PHDR(64) |
| 338 |
|
| 339 |
if (be_wewy_wewy_quiet || (be_quiet && !shown)) |
| 340 |
return NULL; |
| 341 |
else |
| 342 |
return ret; |
| 343 |
} |
| 344 |
|
| 345 |
/* |
| 346 |
* See if this ELF contains a DT_TEXTREL tag in any of its |
| 347 |
* PT_DYNAMIC sections. |
| 348 |
*/ |
| 349 |
static const char *scanelf_file_textrel(elfobj *elf, char *found_textrel) |
| 350 |
{ |
| 351 |
static const char *ret = "TEXTREL"; |
| 352 |
unsigned long i; |
| 353 |
|
| 354 |
if (!show_textrel && !show_textrels) return NULL; |
| 355 |
|
| 356 |
if (file_matches_list(elf->filename, qa_textrels)) return NULL; |
| 357 |
|
| 358 |
if (elf->phdr) { |
| 359 |
#define SHOW_TEXTREL(B) \ |
| 360 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 361 |
Elf ## B ## _Dyn *dyn; \ |
| 362 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 363 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 364 |
Elf ## B ## _Off offset; \ |
| 365 |
for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ |
| 366 |
if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \ |
| 367 |
offset = EGET(phdr[i].p_offset); \ |
| 368 |
if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ |
| 369 |
dyn = DYN ## B (elf->vdata + offset); \ |
| 370 |
while (EGET(dyn->d_tag) != DT_NULL) { \ |
| 371 |
if (EGET(dyn->d_tag) == DT_TEXTREL) { /*dyn->d_tag != DT_FLAGS)*/ \ |
| 372 |
*found_textrel = 1; \ |
| 373 |
/*if (dyn->d_un.d_val & DF_TEXTREL)*/ \ |
| 374 |
return (be_wewy_wewy_quiet ? NULL : ret); \ |
| 375 |
} \ |
| 376 |
++dyn; \ |
| 377 |
} \ |
| 378 |
} } |
| 379 |
SHOW_TEXTREL(32) |
| 380 |
SHOW_TEXTREL(64) |
| 381 |
} |
| 382 |
|
| 383 |
if (be_quiet || be_wewy_wewy_quiet) |
| 384 |
return NULL; |
| 385 |
else |
| 386 |
return " - "; |
| 387 |
} |
| 388 |
|
| 389 |
/* |
| 390 |
* Scan the .text section to see if there are any relocations in it. |
| 391 |
* Should rewrite this to check PT_LOAD sections that are marked |
| 392 |
* Executable rather than the section named '.text'. |
| 393 |
*/ |
| 394 |
static char *scanelf_file_textrels(elfobj *elf, char *found_textrels, char *found_textrel) |
| 395 |
{ |
| 396 |
unsigned long s, r, rmax; |
| 397 |
void *symtab_void, *strtab_void, *text_void; |
| 398 |
|
| 399 |
if (!show_textrels) return NULL; |
| 400 |
|
| 401 |
/* don't search for TEXTREL's if the ELF doesn't have any */ |
| 402 |
if (!*found_textrel) scanelf_file_textrel(elf, found_textrel); |
| 403 |
if (!*found_textrel) return NULL; |
| 404 |
|
| 405 |
scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void); |
| 406 |
text_void = elf_findsecbyname(elf, ".text"); |
| 407 |
|
| 408 |
if (symtab_void && strtab_void && text_void && elf->shdr) { |
| 409 |
#define SHOW_TEXTRELS(B) \ |
| 410 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 411 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 412 |
Elf ## B ## _Shdr *shdr = SHDR ## B (elf->shdr); \ |
| 413 |
Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ |
| 414 |
Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ |
| 415 |
Elf ## B ## _Shdr *text = SHDR ## B (text_void); \ |
| 416 |
Elf ## B ## _Addr vaddr = EGET(text->sh_addr); \ |
| 417 |
uint ## B ## _t memsz = EGET(text->sh_size); \ |
| 418 |
Elf ## B ## _Rel *rel; \ |
| 419 |
Elf ## B ## _Rela *rela; \ |
| 420 |
/* search the section headers for relocations */ \ |
| 421 |
for (s = 0; s < EGET(ehdr->e_shnum); ++s) { \ |
| 422 |
uint32_t sh_type = EGET(shdr[s].sh_type); \ |
| 423 |
if (sh_type == SHT_REL) { \ |
| 424 |
rel = REL ## B (elf->vdata + EGET(shdr[s].sh_offset)); \ |
| 425 |
rela = NULL; \ |
| 426 |
rmax = EGET(shdr[s].sh_size) / sizeof(*rel); \ |
| 427 |
} else if (sh_type == SHT_RELA) { \ |
| 428 |
rel = NULL; \ |
| 429 |
rela = RELA ## B (elf->vdata + EGET(shdr[s].sh_offset)); \ |
| 430 |
rmax = EGET(shdr[s].sh_size) / sizeof(*rela); \ |
| 431 |
} else \ |
| 432 |
continue; \ |
| 433 |
/* now see if any of the relocs are in the .text */ \ |
| 434 |
for (r = 0; r < rmax; ++r) { \ |
| 435 |
unsigned long sym_max; \ |
| 436 |
Elf ## B ## _Addr offset_tmp; \ |
| 437 |
Elf ## B ## _Sym *func; \ |
| 438 |
Elf ## B ## _Sym *sym; \ |
| 439 |
Elf ## B ## _Addr r_offset; \ |
| 440 |
uint ## B ## _t r_info; \ |
| 441 |
if (sh_type == SHT_REL) { \ |
| 442 |
r_offset = EGET(rel[r].r_offset); \ |
| 443 |
r_info = EGET(rel[r].r_info); \ |
| 444 |
} else { \ |
| 445 |
r_offset = EGET(rela[r].r_offset); \ |
| 446 |
r_info = EGET(rela[r].r_info); \ |
| 447 |
} \ |
| 448 |
/* make sure this relocation is inside of the .text */ \ |
| 449 |
if (r_offset < vaddr || r_offset >= vaddr + memsz) { \ |
| 450 |
if (be_verbose <= 2) continue; \ |
| 451 |
} else \ |
| 452 |
*found_textrels = 1; \ |
| 453 |
/* locate this relocation symbol name */ \ |
| 454 |
sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \ |
| 455 |
if ((void*)sym > elf->data_end) { \ |
| 456 |
warn("%s: corrupt ELF symbol", elf->filename); \ |
| 457 |
continue; \ |
| 458 |
} \ |
| 459 |
sym_max = ELF ## B ## _R_SYM(r_info); \ |
| 460 |
if (sym_max * EGET(symtab->sh_entsize) < symtab->sh_size) \ |
| 461 |
sym += sym_max; \ |
| 462 |
else \ |
| 463 |
sym = NULL; \ |
| 464 |
sym_max = EGET(symtab->sh_size) / EGET(symtab->sh_entsize); \ |
| 465 |
/* show the raw details about this reloc */ \ |
| 466 |
printf(" %s: ", elf->base_filename); \ |
| 467 |
if (sym && sym->st_name) \ |
| 468 |
printf("%s", elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name)); \ |
| 469 |
else \ |
| 470 |
printf("(memory/data?)"); \ |
| 471 |
printf(" [0x%lX]", (unsigned long)r_offset); \ |
| 472 |
/* now try to find the closest symbol that this rel is probably in */ \ |
| 473 |
sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \ |
| 474 |
func = NULL; \ |
| 475 |
offset_tmp = 0; \ |
| 476 |
while (sym_max--) { \ |
| 477 |
if (EGET(sym->st_value) < r_offset && EGET(sym->st_value) > offset_tmp) { \ |
| 478 |
func = sym; \ |
| 479 |
offset_tmp = EGET(sym->st_value); \ |
| 480 |
} \ |
| 481 |
++sym; \ |
| 482 |
} \ |
| 483 |
printf(" in "); \ |
| 484 |
if (func && func->st_name) { \ |
| 485 |
const char *func_name = elf->data + EGET(strtab->sh_offset) + EGET(func->st_name); \ |
| 486 |
if (r_offset > EGET(func->st_size)) \ |
| 487 |
printf("(optimized out: previous %s)", func_name); \ |
| 488 |
else \ |
| 489 |
printf("%s", func_name); \ |
| 490 |
} else \ |
| 491 |
printf("(optimized out)"); \ |
| 492 |
printf(" [0x%lX]\n", (unsigned long)offset_tmp); \ |
| 493 |
if (be_verbose && has_objdump) { \ |
| 494 |
Elf ## B ## _Addr end_addr = offset_tmp + EGET(func->st_size); \ |
| 495 |
char *sysbuf; \ |
| 496 |
size_t syslen; \ |
| 497 |
const char sysfmt[] = "objdump -r -R -d -w -l --start-address=0x%lX --stop-address=0x%lX %s | grep --color -i -C 3 '.*[[:space:]]%lX:[[:space:]]*R_.*'\n"; \ |
| 498 |
syslen = sizeof(sysfmt) + strlen(elf->filename) + 3 * sizeof(unsigned long) + 1; \ |
| 499 |
sysbuf = xmalloc(syslen); \ |
| 500 |
if (end_addr < r_offset) \ |
| 501 |
/* not uncommon when things are optimized out */ \ |
| 502 |
end_addr = r_offset + 0x100; \ |
| 503 |
snprintf(sysbuf, syslen, sysfmt, \ |
| 504 |
(unsigned long)offset_tmp, \ |
| 505 |
(unsigned long)end_addr, \ |
| 506 |
elf->filename, \ |
| 507 |
(unsigned long)r_offset); \ |
| 508 |
fflush(stdout); \ |
| 509 |
if (system(sysbuf)) /* don't care */; \ |
| 510 |
fflush(stdout); \ |
| 511 |
free(sysbuf); \ |
| 512 |
} \ |
| 513 |
} \ |
| 514 |
} } |
| 515 |
SHOW_TEXTRELS(32) |
| 516 |
SHOW_TEXTRELS(64) |
| 517 |
} |
| 518 |
if (!*found_textrels) |
| 519 |
warnf("ELF %s has TEXTREL markings but doesnt appear to have any real TEXTREL's !?", elf->filename); |
| 520 |
|
| 521 |
return NULL; |
| 522 |
} |
| 523 |
|
| 524 |
static void rpath_security_checks(elfobj *elf, char *item, const char *dt_type) |
| 525 |
{ |
| 526 |
struct stat st; |
| 527 |
switch (*item) { |
| 528 |
case '/': break; |
| 529 |
case '.': |
| 530 |
warnf("Security problem with relative %s '%s' in %s", dt_type, item, elf->filename); |
| 531 |
break; |
| 532 |
case ':': |
| 533 |
case '\0': |
| 534 |
warnf("Security problem NULL %s in %s", dt_type, elf->filename); |
| 535 |
break; |
| 536 |
case '$': |
| 537 |
if (fstat(elf->fd, &st) != -1) |
| 538 |
if ((st.st_mode & S_ISUID) || (st.st_mode & S_ISGID)) |
| 539 |
warnf("Security problem with %s='%s' in %s with mode set of %o", |
| 540 |
dt_type, item, elf->filename, (unsigned int) st.st_mode & 07777); |
| 541 |
break; |
| 542 |
default: |
| 543 |
warnf("Maybe? sec problem with %s='%s' in %s", dt_type, item, elf->filename); |
| 544 |
break; |
| 545 |
} |
| 546 |
} |
| 547 |
static void scanelf_file_rpath(elfobj *elf, char *found_rpath, char **ret, size_t *ret_len) |
| 548 |
{ |
| 549 |
unsigned long i; |
| 550 |
char *rpath, *runpath, **r; |
| 551 |
void *strtbl_void; |
| 552 |
|
| 553 |
if (!show_rpath) return; |
| 554 |
|
| 555 |
strtbl_void = elf_findsecbyname(elf, ".dynstr"); |
| 556 |
rpath = runpath = NULL; |
| 557 |
|
| 558 |
if (elf->phdr && strtbl_void) { |
| 559 |
#define SHOW_RPATH(B) \ |
| 560 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 561 |
Elf ## B ## _Dyn *dyn; \ |
| 562 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 563 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 564 |
Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ |
| 565 |
Elf ## B ## _Off offset; \ |
| 566 |
Elf ## B ## _Xword word; \ |
| 567 |
/* Scan all the program headers */ \ |
| 568 |
for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ |
| 569 |
/* Just scan dynamic headers */ \ |
| 570 |
if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \ |
| 571 |
offset = EGET(phdr[i].p_offset); \ |
| 572 |
if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ |
| 573 |
/* Just scan dynamic RPATH/RUNPATH headers */ \ |
| 574 |
dyn = DYN ## B (elf->vdata + offset); \ |
| 575 |
while ((word=EGET(dyn->d_tag)) != DT_NULL) { \ |
| 576 |
if (word == DT_RPATH) { \ |
| 577 |
r = &rpath; \ |
| 578 |
} else if (word == DT_RUNPATH) { \ |
| 579 |
r = &runpath; \ |
| 580 |
} else { \ |
| 581 |
++dyn; \ |
| 582 |
continue; \ |
| 583 |
} \ |
| 584 |
/* Verify the memory is somewhat sane */ \ |
| 585 |
offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ |
| 586 |
if (offset < (Elf ## B ## _Off)elf->len) { \ |
| 587 |
if (*r) warn("ELF has multiple %s's !?", get_elfdtype(word)); \ |
| 588 |
*r = elf->data + offset; \ |
| 589 |
/* cache the length in case we need to nuke this section later on */ \ |
| 590 |
if (fix_elf) \ |
| 591 |
offset = strlen(*r); \ |
| 592 |
/* If quiet, don't output paths in ld.so.conf */ \ |
| 593 |
if (be_quiet) { \ |
| 594 |
size_t len; \ |
| 595 |
char *start, *end; \ |
| 596 |
/* note that we only 'chop' off leading known paths. */ \ |
| 597 |
/* since *r is read-only memory, we can only move the ptr forward. */ \ |
| 598 |
start = *r; \ |
| 599 |
/* scan each path in : delimited list */ \ |
| 600 |
while (start) { \ |
| 601 |
rpath_security_checks(elf, start, get_elfdtype(word)); \ |
| 602 |
end = strchr(start, ':'); \ |
| 603 |
len = (end ? abs(end - start) : strlen(start)); \ |
| 604 |
if (use_ldcache) { \ |
| 605 |
size_t n; \ |
| 606 |
const char *ldpath; \ |
| 607 |
array_for_each(ldpaths, n, ldpath) \ |
| 608 |
if (!strncmp(ldpath, start, len) && !ldpath[len]) { \ |
| 609 |
*r = end; \ |
| 610 |
/* corner case ... if RPATH reads "/usr/lib:", we want \ |
| 611 |
* to show ':' rather than '' */ \ |
| 612 |
if (end && end[1] != '\0') \ |
| 613 |
(*r)++; \ |
| 614 |
break; \ |
| 615 |
} \ |
| 616 |
} \ |
| 617 |
if (!*r || !end) \ |
| 618 |
break; \ |
| 619 |
else \ |
| 620 |
start = start + len + 1; \ |
| 621 |
} \ |
| 622 |
} \ |
| 623 |
if (*r) { \ |
| 624 |
if (fix_elf > 2 || (fix_elf && **r == '\0')) { \ |
| 625 |
/* just nuke it */ \ |
| 626 |
nuke_it##B: \ |
| 627 |
memset(*r, 0x00, offset); \ |
| 628 |
*r = NULL; \ |
| 629 |
ESET(dyn->d_tag, DT_DEBUG); \ |
| 630 |
ESET(dyn->d_un.d_ptr, 0); \ |
| 631 |
} else if (fix_elf) { \ |
| 632 |
/* try to clean "bad" paths */ \ |
| 633 |
size_t len, tmpdir_len; \ |
| 634 |
char *start, *end; \ |
| 635 |
const char *tmpdir; \ |
| 636 |
start = *r; \ |
| 637 |
tmpdir = (getenv("TMPDIR") ? : "."); \ |
| 638 |
tmpdir_len = strlen(tmpdir); \ |
| 639 |
while (1) { \ |
| 640 |
end = strchr(start, ':'); \ |
| 641 |
if (start == end) { \ |
| 642 |
eat_this_path##B: \ |
| 643 |
len = strlen(end); \ |
| 644 |
memmove(start, end+1, len); \ |
| 645 |
start[len-1] = '\0'; \ |
| 646 |
end = start - 1; \ |
| 647 |
} else if (tmpdir && !strncmp(start, tmpdir, tmpdir_len)) { \ |
| 648 |
if (!end) { \ |
| 649 |
if (start == *r) \ |
| 650 |
goto nuke_it##B; \ |
| 651 |
*--start = '\0'; \ |
| 652 |
} else \ |
| 653 |
goto eat_this_path##B; \ |
| 654 |
} \ |
| 655 |
if (!end) \ |
| 656 |
break; \ |
| 657 |
start = end + 1; \ |
| 658 |
} \ |
| 659 |
if (**r == '\0') \ |
| 660 |
goto nuke_it##B; \ |
| 661 |
} \ |
| 662 |
if (*r) \ |
| 663 |
*found_rpath = 1; \ |
| 664 |
} \ |
| 665 |
} \ |
| 666 |
++dyn; \ |
| 667 |
} \ |
| 668 |
} } |
| 669 |
SHOW_RPATH(32) |
| 670 |
SHOW_RPATH(64) |
| 671 |
} |
| 672 |
|
| 673 |
if (be_wewy_wewy_quiet) return; |
| 674 |
|
| 675 |
if (rpath && runpath) { |
| 676 |
if (!strcmp(rpath, runpath)) { |
| 677 |
xstrcat(ret, runpath, ret_len); |
| 678 |
} else { |
| 679 |
fprintf(stderr, "RPATH [%s] != RUNPATH [%s]\n", rpath, runpath); |
| 680 |
xchrcat(ret, '{', ret_len); |
| 681 |
xstrcat(ret, rpath, ret_len); |
| 682 |
xchrcat(ret, ',', ret_len); |
| 683 |
xstrcat(ret, runpath, ret_len); |
| 684 |
xchrcat(ret, '}', ret_len); |
| 685 |
} |
| 686 |
} else if (rpath || runpath) |
| 687 |
xstrcat(ret, (runpath ? runpath : rpath), ret_len); |
| 688 |
else if (!be_quiet) |
| 689 |
xstrcat(ret, " - ", ret_len); |
| 690 |
} |
| 691 |
|
| 692 |
#define LDSO_CACHE_MAGIC "ld.so-" |
| 693 |
#define LDSO_CACHE_MAGIC_LEN (sizeof LDSO_CACHE_MAGIC -1) |
| 694 |
#define LDSO_CACHE_VER "1.7.0" |
| 695 |
#define LDSO_CACHE_VER_LEN (sizeof LDSO_CACHE_VER -1) |
| 696 |
#define FLAG_ANY -1 |
| 697 |
#define FLAG_TYPE_MASK 0x00ff |
| 698 |
#define FLAG_LIBC4 0x0000 |
| 699 |
#define FLAG_ELF 0x0001 |
| 700 |
#define FLAG_ELF_LIBC5 0x0002 |
| 701 |
#define FLAG_ELF_LIBC6 0x0003 |
| 702 |
#define FLAG_REQUIRED_MASK 0xff00 |
| 703 |
#define FLAG_SPARC_LIB64 0x0100 |
| 704 |
#define FLAG_IA64_LIB64 0x0200 |
| 705 |
#define FLAG_X8664_LIB64 0x0300 |
| 706 |
#define FLAG_S390_LIB64 0x0400 |
| 707 |
#define FLAG_POWERPC_LIB64 0x0500 |
| 708 |
#define FLAG_MIPS64_LIBN32 0x0600 |
| 709 |
#define FLAG_MIPS64_LIBN64 0x0700 |
| 710 |
|
| 711 |
#if defined(__GLIBC__) || defined(__UCLIBC__) |
| 712 |
|
| 713 |
static char *lookup_cache_lib(elfobj *elf, char *fname) |
| 714 |
{ |
| 715 |
int fd; |
| 716 |
char *strs; |
| 717 |
static char buf[__PAX_UTILS_PATH_MAX] = ""; |
| 718 |
const char *cachefile = root_rel_path("/etc/ld.so.cache"); |
| 719 |
struct stat st; |
| 720 |
|
| 721 |
typedef struct { |
| 722 |
char magic[LDSO_CACHE_MAGIC_LEN]; |
| 723 |
char version[LDSO_CACHE_VER_LEN]; |
| 724 |
int nlibs; |
| 725 |
} header_t; |
| 726 |
header_t *header; |
| 727 |
|
| 728 |
typedef struct { |
| 729 |
int flags; |
| 730 |
int sooffset; |
| 731 |
int liboffset; |
| 732 |
} libentry_t; |
| 733 |
libentry_t *libent; |
| 734 |
|
| 735 |
if (fname == NULL) |
| 736 |
return NULL; |
| 737 |
|
| 738 |
if (ldcache == NULL) { |
| 739 |
if (fstatat(root_fd, cachefile, &st, 0)) |
| 740 |
return NULL; |
| 741 |
|
| 742 |
fd = openat(root_fd, cachefile, O_RDONLY); |
| 743 |
if (fd == -1) |
| 744 |
return NULL; |
| 745 |
|
| 746 |
/* cache these values so we only map/unmap the cache file once */ |
| 747 |
ldcache_size = st.st_size; |
| 748 |
header = ldcache = mmap(0, ldcache_size, PROT_READ, MAP_SHARED, fd, 0); |
| 749 |
close(fd); |
| 750 |
|
| 751 |
if (ldcache == MAP_FAILED) { |
| 752 |
ldcache = NULL; |
| 753 |
return NULL; |
| 754 |
} |
| 755 |
|
| 756 |
if (memcmp(header->magic, LDSO_CACHE_MAGIC, LDSO_CACHE_MAGIC_LEN) || |
| 757 |
memcmp(header->version, LDSO_CACHE_VER, LDSO_CACHE_VER_LEN)) |
| 758 |
{ |
| 759 |
munmap(ldcache, ldcache_size); |
| 760 |
ldcache = NULL; |
| 761 |
return NULL; |
| 762 |
} |
| 763 |
} else |
| 764 |
header = ldcache; |
| 765 |
|
| 766 |
libent = ldcache + sizeof(header_t); |
| 767 |
strs = (char *) &libent[header->nlibs]; |
| 768 |
|
| 769 |
for (fd = 0; fd < header->nlibs; ++fd) { |
| 770 |
/* This should be more fine grained, but for now we assume that |
| 771 |
* diff arches will not be cached together, and we ignore the |
| 772 |
* the different multilib mips cases. |
| 773 |
*/ |
| 774 |
if (elf->elf_class == ELFCLASS64 && !(libent[fd].flags & FLAG_REQUIRED_MASK)) |
| 775 |
continue; |
| 776 |
if (elf->elf_class == ELFCLASS32 && (libent[fd].flags & FLAG_REQUIRED_MASK)) |
| 777 |
continue; |
| 778 |
|
| 779 |
if (strcmp(fname, strs + libent[fd].sooffset) != 0) |
| 780 |
continue; |
| 781 |
|
| 782 |
/* Return first hit because that is how the ldso rolls */ |
| 783 |
strncpy(buf, strs + libent[fd].liboffset, sizeof(buf)); |
| 784 |
break; |
| 785 |
} |
| 786 |
|
| 787 |
return buf; |
| 788 |
} |
| 789 |
|
| 790 |
#elif defined(__NetBSD__) |
| 791 |
static char *lookup_cache_lib(elfobj *elf, char *fname) |
| 792 |
{ |
| 793 |
static char buf[__PAX_UTILS_PATH_MAX] = ""; |
| 794 |
static struct stat st; |
| 795 |
size_t n; |
| 796 |
char *ldpath; |
| 797 |
|
| 798 |
array_for_each(ldpath, n, ldpath) { |
| 799 |
if ((unsigned) snprintf(buf, sizeof(buf), "%s/%s", ldpath, fname) >= sizeof(buf)) |
| 800 |
continue; /* if the pathname is too long, or something went wrong, ignore */ |
| 801 |
|
| 802 |
if (stat(buf, &st) != 0) |
| 803 |
continue; /* if the lib doesn't exist in *ldpath, look further */ |
| 804 |
|
| 805 |
/* NetBSD doesn't actually do sanity checks, it just loads the file |
| 806 |
* and if that doesn't work, continues looking in other directories. |
| 807 |
* This cannot easily be safely emulated, unfortunately. For now, |
| 808 |
* just assume that if it exists, it's a valid library. */ |
| 809 |
|
| 810 |
return buf; |
| 811 |
} |
| 812 |
|
| 813 |
/* not found in any path */ |
| 814 |
return NULL; |
| 815 |
} |
| 816 |
#else |
| 817 |
#ifdef __ELF__ |
| 818 |
#warning Cache support not implemented for your target |
| 819 |
#endif |
| 820 |
static char *lookup_cache_lib(elfobj *elf, char *fname) |
| 821 |
{ |
| 822 |
return NULL; |
| 823 |
} |
| 824 |
#endif |
| 825 |
|
| 826 |
static const char *scanelf_file_needed_lib(elfobj *elf, char *found_needed, char *found_lib, int op, char **ret, size_t *ret_len) |
| 827 |
{ |
| 828 |
unsigned long i; |
| 829 |
char *needed; |
| 830 |
void *strtbl_void; |
| 831 |
char *p; |
| 832 |
|
| 833 |
/* |
| 834 |
* -n -> op==0 -> print all |
| 835 |
* -N -> op==1 -> print requested |
| 836 |
*/ |
| 837 |
if ((op == 0 && !show_needed) || (op == 1 && !find_lib)) |
| 838 |
return NULL; |
| 839 |
|
| 840 |
strtbl_void = elf_findsecbyname(elf, ".dynstr"); |
| 841 |
|
| 842 |
if (elf->phdr && strtbl_void) { |
| 843 |
#define SHOW_NEEDED(B) \ |
| 844 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 845 |
Elf ## B ## _Dyn *dyn; \ |
| 846 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 847 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 848 |
Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ |
| 849 |
Elf ## B ## _Off offset; \ |
| 850 |
size_t matched = 0; \ |
| 851 |
/* Walk all the program headers to find the PT_DYNAMIC */ \ |
| 852 |
for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ |
| 853 |
if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) \ |
| 854 |
continue; \ |
| 855 |
offset = EGET(phdr[i].p_offset); \ |
| 856 |
if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) \ |
| 857 |
continue; \ |
| 858 |
/* Walk all the dynamic tags to find NEEDED entries */ \ |
| 859 |
dyn = DYN ## B (elf->vdata + offset); \ |
| 860 |
while (EGET(dyn->d_tag) != DT_NULL) { \ |
| 861 |
if (EGET(dyn->d_tag) == DT_NEEDED) { \ |
| 862 |
offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ |
| 863 |
if (offset >= (Elf ## B ## _Off)elf->len) { \ |
| 864 |
++dyn; \ |
| 865 |
continue; \ |
| 866 |
} \ |
| 867 |
needed = elf->data + offset; \ |
| 868 |
if (op == 0) { \ |
| 869 |
/* -n -> print all entries */ \ |
| 870 |
if (!be_wewy_wewy_quiet) { \ |
| 871 |
if (*found_needed) xchrcat(ret, ',', ret_len); \ |
| 872 |
if (use_ldcache) \ |
| 873 |
if ((p = lookup_cache_lib(elf, needed)) != NULL) \ |
| 874 |
needed = p; \ |
| 875 |
xstrcat(ret, needed, ret_len); \ |
| 876 |
} \ |
| 877 |
*found_needed = 1; \ |
| 878 |
} else { \ |
| 879 |
/* -N -> print matching entries */ \ |
| 880 |
size_t n; \ |
| 881 |
const char *find_lib_name; \ |
| 882 |
\ |
| 883 |
array_for_each(find_lib_arr, n, find_lib_name) \ |
| 884 |
if (!strcmp(find_lib_name, needed)) \ |
| 885 |
++matched; \ |
| 886 |
\ |
| 887 |
if (matched == array_cnt(find_lib_arr)) { \ |
| 888 |
*found_lib = 1; \ |
| 889 |
return (be_wewy_wewy_quiet ? NULL : find_lib); \ |
| 890 |
} \ |
| 891 |
} \ |
| 892 |
} \ |
| 893 |
++dyn; \ |
| 894 |
} \ |
| 895 |
} } |
| 896 |
SHOW_NEEDED(32) |
| 897 |
SHOW_NEEDED(64) |
| 898 |
if (op == 0 && !*found_needed && be_verbose) |
| 899 |
warn("ELF lacks DT_NEEDED sections: %s", elf->filename); |
| 900 |
} |
| 901 |
|
| 902 |
return NULL; |
| 903 |
} |
| 904 |
static char *scanelf_file_interp(elfobj *elf, char *found_interp) |
| 905 |
{ |
| 906 |
void *strtbl_void; |
| 907 |
|
| 908 |
if (!show_interp) return NULL; |
| 909 |
|
| 910 |
strtbl_void = elf_findsecbyname(elf, ".interp"); |
| 911 |
|
| 912 |
if (strtbl_void) { |
| 913 |
#define SHOW_INTERP(B) \ |
| 914 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 915 |
Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ |
| 916 |
*found_interp = 1; \ |
| 917 |
return (be_wewy_wewy_quiet ? NULL : elf->data + EGET(strtbl->sh_offset)); \ |
| 918 |
} |
| 919 |
SHOW_INTERP(32) |
| 920 |
SHOW_INTERP(64) |
| 921 |
} |
| 922 |
return NULL; |
| 923 |
} |
| 924 |
static char *scanelf_file_bind(elfobj *elf, char *found_bind) |
| 925 |
{ |
| 926 |
unsigned long i; |
| 927 |
struct stat s; |
| 928 |
char dynamic = 0; |
| 929 |
|
| 930 |
if (!show_bind) return NULL; |
| 931 |
if (!elf->phdr) return NULL; |
| 932 |
|
| 933 |
#define SHOW_BIND(B) \ |
| 934 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 935 |
Elf ## B ## _Dyn *dyn; \ |
| 936 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 937 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 938 |
Elf ## B ## _Off offset; \ |
| 939 |
for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ |
| 940 |
if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \ |
| 941 |
dynamic = 1; \ |
| 942 |
offset = EGET(phdr[i].p_offset); \ |
| 943 |
if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ |
| 944 |
dyn = DYN ## B (elf->vdata + offset); \ |
| 945 |
while (EGET(dyn->d_tag) != DT_NULL) { \ |
| 946 |
if (EGET(dyn->d_tag) == DT_BIND_NOW || \ |
| 947 |
(EGET(dyn->d_tag) == DT_FLAGS && EGET(dyn->d_un.d_val) & DF_BIND_NOW)) \ |
| 948 |
{ \ |
| 949 |
if (be_quiet) return NULL; \ |
| 950 |
*found_bind = 1; \ |
| 951 |
return (char *)(be_wewy_wewy_quiet ? NULL : "NOW"); \ |
| 952 |
} \ |
| 953 |
++dyn; \ |
| 954 |
} \ |
| 955 |
} \ |
| 956 |
} |
| 957 |
SHOW_BIND(32) |
| 958 |
SHOW_BIND(64) |
| 959 |
|
| 960 |
if (be_wewy_wewy_quiet) return NULL; |
| 961 |
|
| 962 |
/* don't output anything if quiet mode and the ELF is static or not setuid */ |
| 963 |
if (be_quiet && (!dynamic || (!fstat(elf->fd, &s) && !(s.st_mode & (S_ISUID|S_ISGID))))) { |
| 964 |
return NULL; |
| 965 |
} else { |
| 966 |
*found_bind = 1; |
| 967 |
return (char *)(dynamic ? "LAZY" : "STATIC"); |
| 968 |
} |
| 969 |
} |
| 970 |
static char *scanelf_file_soname(elfobj *elf, char *found_soname) |
| 971 |
{ |
| 972 |
unsigned long i; |
| 973 |
char *soname; |
| 974 |
void *strtbl_void; |
| 975 |
|
| 976 |
if (!show_soname) return NULL; |
| 977 |
|
| 978 |
strtbl_void = elf_findsecbyname(elf, ".dynstr"); |
| 979 |
|
| 980 |
if (elf->phdr && strtbl_void) { |
| 981 |
#define SHOW_SONAME(B) \ |
| 982 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 983 |
Elf ## B ## _Dyn *dyn; \ |
| 984 |
Elf ## B ## _Ehdr *ehdr = EHDR ## B (elf->ehdr); \ |
| 985 |
Elf ## B ## _Phdr *phdr = PHDR ## B (elf->phdr); \ |
| 986 |
Elf ## B ## _Shdr *strtbl = SHDR ## B (strtbl_void); \ |
| 987 |
Elf ## B ## _Off offset; \ |
| 988 |
/* only look for soname in shared objects */ \ |
| 989 |
if (EGET(ehdr->e_type) != ET_DYN) \ |
| 990 |
return NULL; \ |
| 991 |
for (i = 0; i < EGET(ehdr->e_phnum); i++) { \ |
| 992 |
if (EGET(phdr[i].p_type) != PT_DYNAMIC || EGET(phdr[i].p_filesz) == 0) continue; \ |
| 993 |
offset = EGET(phdr[i].p_offset); \ |
| 994 |
if (offset >= elf->len - sizeof(Elf ## B ## _Dyn)) continue; \ |
| 995 |
dyn = DYN ## B (elf->vdata + offset); \ |
| 996 |
while (EGET(dyn->d_tag) != DT_NULL) { \ |
| 997 |
if (EGET(dyn->d_tag) == DT_SONAME) { \ |
| 998 |
offset = EGET(strtbl->sh_offset) + EGET(dyn->d_un.d_ptr); \ |
| 999 |
if (offset >= (Elf ## B ## _Off)elf->len) { \ |
| 1000 |
++dyn; \ |
| 1001 |
continue; \ |
| 1002 |
} \ |
| 1003 |
soname = elf->data + offset; \ |
| 1004 |
*found_soname = 1; \ |
| 1005 |
return (be_wewy_wewy_quiet ? NULL : soname); \ |
| 1006 |
} \ |
| 1007 |
++dyn; \ |
| 1008 |
} \ |
| 1009 |
} } |
| 1010 |
SHOW_SONAME(32) |
| 1011 |
SHOW_SONAME(64) |
| 1012 |
} |
| 1013 |
|
| 1014 |
return NULL; |
| 1015 |
} |
| 1016 |
|
| 1017 |
/* |
| 1018 |
* We support the symbol form: |
| 1019 |
* [%[modifiers]%][[+-]<symbol name>][,[.....]] |
| 1020 |
* If the symbol name is empty, then all symbols are matched. |
| 1021 |
* If the symbol name is a glob ("*"), then all symbols are dumped (debug). |
| 1022 |
* Do not rely on this output format at all. |
| 1023 |
* Otherwise the symbol name is used to search (either regex or string compare). |
| 1024 |
* If the first char of the symbol name is a plus ("+"), then only match |
| 1025 |
* defined symbols. If it's a minus ("-"), only match undefined symbols. |
| 1026 |
* Putting modifiers in between the percent signs allows for more in depth |
| 1027 |
* filters. There are groups of modifiers. If you don't specify a member |
| 1028 |
* of a group, then all types in that group are matched. The current |
| 1029 |
* groups and their types are: |
| 1030 |
* STT group: STT_NOTYPE:n STT_OBJECT:o STT_FUNC:f SST_FILE:F |
| 1031 |
* STB group: STB_LOCAL:l STB_GLOBAL:g STB_WEAK:w |
| 1032 |
* SHN group: SHN_UNDEF:u SHN_ABS:a SHN_COMMON:c {defined}:d |
| 1033 |
* The "defined" value in the SHN group does not correspond to a SHN_xxx define. |
| 1034 |
* You can search for multiple symbols at once by seperating with a comma (","). |
| 1035 |
* |
| 1036 |
* Some examples: |
| 1037 |
* ELFs with a weak function "foo": |
| 1038 |
* scanelf -s %wf%foo <ELFs> |
| 1039 |
* ELFs that define the symbol "main": |
| 1040 |
* scanelf -s +main <ELFs> |
| 1041 |
* scanelf -s %d%main <ELFs> |
| 1042 |
* ELFs that refer to the undefined symbol "brk": |
| 1043 |
* scanelf -s -brk <ELFs> |
| 1044 |
* scanelf -s %u%brk <ELFs> |
| 1045 |
* All global defined objects in an ELF: |
| 1046 |
* scanelf -s %ogd% <ELF> |
| 1047 |
*/ |
| 1048 |
static void |
| 1049 |
scanelf_match_symname(elfobj *elf, char *found_sym, char **ret, size_t *ret_len, const char *symname, |
| 1050 |
unsigned int stt, unsigned int stb, unsigned int shn, unsigned long size) |
| 1051 |
{ |
| 1052 |
char *this_sym, *next_sym, saved = saved; |
| 1053 |
|
| 1054 |
/* allow the user to specify a comma delimited list of symbols to search for */ |
| 1055 |
next_sym = NULL; |
| 1056 |
do { |
| 1057 |
bool inc_notype, inc_object, inc_func, inc_file, |
| 1058 |
inc_local, inc_global, inc_weak, |
| 1059 |
inc_def, inc_undef, inc_abs, inc_common; |
| 1060 |
|
| 1061 |
if (next_sym) { |
| 1062 |
next_sym[-1] = saved; |
| 1063 |
this_sym = next_sym; |
| 1064 |
} else |
| 1065 |
this_sym = find_sym; |
| 1066 |
if ((next_sym = strchr(this_sym, ','))) { |
| 1067 |
/* make parsing easier by killing the comma temporarily */ |
| 1068 |
saved = *next_sym; |
| 1069 |
*next_sym = '\0'; |
| 1070 |
next_sym += 1; |
| 1071 |
} |
| 1072 |
|
| 1073 |
/* symbol selection! */ |
| 1074 |
inc_notype = inc_object = inc_func = inc_file = \ |
| 1075 |
inc_local = inc_global = inc_weak = \ |
| 1076 |
inc_def = inc_undef = inc_abs = inc_common = \ |
| 1077 |
(*this_sym != '%'); |
| 1078 |
|
| 1079 |
/* parse the contents of %...% */ |
| 1080 |
if (!inc_notype) { |
| 1081 |
while (*(this_sym++)) { |
| 1082 |
if (*this_sym == '%') { |
| 1083 |
++this_sym; |
| 1084 |
break; |
| 1085 |
} |
| 1086 |
switch (*this_sym) { |
| 1087 |
case 'n': inc_notype = true; break; |
| 1088 |
case 'o': inc_object = true; break; |
| 1089 |
case 'f': inc_func = true; break; |
| 1090 |
case 'F': inc_file = true; break; |
| 1091 |
case 'l': inc_local = true; break; |
| 1092 |
case 'g': inc_global = true; break; |
| 1093 |
case 'w': inc_weak = true; break; |
| 1094 |
case 'd': inc_def = true; break; |
| 1095 |
case 'u': inc_undef = true; break; |
| 1096 |
case 'a': inc_abs = true; break; |
| 1097 |
case 'c': inc_common = true; break; |
| 1098 |
default: err("invalid symbol selector '%c'", *this_sym); |
| 1099 |
} |
| 1100 |
} |
| 1101 |
|
| 1102 |
/* If no types are matched, not match all */ |
| 1103 |
if (!inc_notype && !inc_object && !inc_func && !inc_file) |
| 1104 |
inc_notype = inc_object = inc_func = inc_file = true; |
| 1105 |
if (!inc_local && !inc_global && !inc_weak) |
| 1106 |
inc_local = inc_global = inc_weak = true; |
| 1107 |
if (!inc_def && !inc_undef && !inc_abs && !inc_common) |
| 1108 |
inc_def = inc_undef = inc_abs = inc_common = true; |
| 1109 |
|
| 1110 |
/* backwards compat for defined/undefined short hand */ |
| 1111 |
} else if (*this_sym == '+') { |
| 1112 |
inc_undef = false; |
| 1113 |
++this_sym; |
| 1114 |
} else if (*this_sym == '-') { |
| 1115 |
inc_def = inc_abs = inc_common = false; |
| 1116 |
++this_sym; |
| 1117 |
} |
| 1118 |
|
| 1119 |
/* filter symbols */ |
| 1120 |
if ((!inc_notype && stt == STT_NOTYPE) || \ |
| 1121 |
(!inc_object && stt == STT_OBJECT) || \ |
| 1122 |
(!inc_func && stt == STT_FUNC ) || \ |
| 1123 |
(!inc_file && stt == STT_FILE ) || \ |
| 1124 |
(!inc_local && stb == STB_LOCAL ) || \ |
| 1125 |
(!inc_global && stb == STB_GLOBAL) || \ |
| 1126 |
(!inc_weak && stb == STB_WEAK ) || \ |
| 1127 |
(!inc_def && shn && shn < SHN_LORESERVE) || \ |
| 1128 |
(!inc_undef && shn == SHN_UNDEF ) || \ |
| 1129 |
(!inc_abs && shn == SHN_ABS ) || \ |
| 1130 |
(!inc_common && shn == SHN_COMMON)) |
| 1131 |
continue; |
| 1132 |
|
| 1133 |
if (*this_sym == '*') { |
| 1134 |
/* a "*" symbol gets you debug output */ |
| 1135 |
printf("%s(%s) %5lX %15s %15s %15s %s\n", |
| 1136 |
((*found_sym == 0) ? "\n\t" : "\t"), |
| 1137 |
elf->base_filename, |
| 1138 |
size, |
| 1139 |
get_elfstttype(stt), |
| 1140 |
get_elfstbtype(stb), |
| 1141 |
get_elfshntype(shn), |
| 1142 |
symname); |
| 1143 |
goto matched; |
| 1144 |
|
| 1145 |
} else { |
| 1146 |
if (g_match) { |
| 1147 |
/* regex match the symbol */ |
| 1148 |
if (rematch(this_sym, symname, REG_EXTENDED) != 0) |
| 1149 |
continue; |
| 1150 |
|
| 1151 |
} else if (*this_sym) { |
| 1152 |
/* give empty symbols a "pass", else do a normal compare */ |
| 1153 |
const size_t len = strlen(this_sym); |
| 1154 |
if (!(strncmp(this_sym, symname, len) == 0 && |
| 1155 |
/* Accept unversioned symbol names */ |
| 1156 |
(symname[len] == '\0' || symname[len] == '@'))) |
| 1157 |
continue; |
| 1158 |
} |
| 1159 |
|
| 1160 |
if (be_semi_verbose) { |
| 1161 |
char buf[1024]; |
| 1162 |
snprintf(buf, sizeof(buf), "%lX %s %s", |
| 1163 |
size, |
| 1164 |
get_elfstttype(stt), |
| 1165 |
this_sym); |
| 1166 |
*ret = xstrdup(buf); |
| 1167 |
} else { |
| 1168 |
if (*ret) xchrcat(ret, ',', ret_len); |
| 1169 |
xstrcat(ret, symname, ret_len); |
| 1170 |
} |
| 1171 |
|
| 1172 |
goto matched; |
| 1173 |
} |
| 1174 |
} while (next_sym); |
| 1175 |
|
| 1176 |
return; |
| 1177 |
|
| 1178 |
matched: |
| 1179 |
*found_sym = 1; |
| 1180 |
if (next_sym) |
| 1181 |
next_sym[-1] = saved; |
| 1182 |
} |
| 1183 |
|
| 1184 |
static const char *scanelf_file_sym(elfobj *elf, char *found_sym) |
| 1185 |
{ |
| 1186 |
unsigned long i; |
| 1187 |
char *ret; |
| 1188 |
void *symtab_void, *strtab_void; |
| 1189 |
|
| 1190 |
if (!find_sym) return NULL; |
| 1191 |
ret = NULL; |
| 1192 |
|
| 1193 |
scanelf_file_get_symtabs(elf, &symtab_void, &strtab_void); |
| 1194 |
|
| 1195 |
if (symtab_void && strtab_void) { |
| 1196 |
#define FIND_SYM(B) \ |
| 1197 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 1198 |
Elf ## B ## _Shdr *symtab = SHDR ## B (symtab_void); \ |
| 1199 |
Elf ## B ## _Shdr *strtab = SHDR ## B (strtab_void); \ |
| 1200 |
Elf ## B ## _Sym *sym = SYM ## B (elf->vdata + EGET(symtab->sh_offset)); \ |
| 1201 |
unsigned long cnt = EGET(symtab->sh_entsize); \ |
| 1202 |
char *symname; \ |
| 1203 |
size_t ret_len = 0; \ |
| 1204 |
if (cnt) \ |
| 1205 |
cnt = EGET(symtab->sh_size) / cnt; \ |
| 1206 |
for (i = 0; i < cnt; ++i) { \ |
| 1207 |
if ((void*)sym > elf->data_end) { \ |
| 1208 |
warnf("%s: corrupt ELF symbols - aborting", elf->filename); \ |
| 1209 |
goto break_out; \ |
| 1210 |
} \ |
| 1211 |
if (sym->st_name) { \ |
| 1212 |
/* make sure the symbol name is in acceptable memory range */ \ |
| 1213 |
symname = elf->data + EGET(strtab->sh_offset) + EGET(sym->st_name); \ |
| 1214 |
if ((void*)symname > elf->data_end) { \ |
| 1215 |
warnf("%s: corrupt ELF symbols", elf->filename); \ |
| 1216 |
++sym; \ |
| 1217 |
continue; \ |
| 1218 |
} \ |
| 1219 |
scanelf_match_symname(elf, found_sym, \ |
| 1220 |
&ret, &ret_len, symname, \ |
| 1221 |
ELF##B##_ST_TYPE(EGET(sym->st_info)), \ |
| 1222 |
ELF##B##_ST_BIND(EGET(sym->st_info)), \ |
| 1223 |
EGET(sym->st_shndx), \ |
| 1224 |
/* st_size can be 64bit, but no one is really that big, so screw em */ \ |
| 1225 |
EGET(sym->st_size)); \ |
| 1226 |
} \ |
| 1227 |
++sym; \ |
| 1228 |
} } |
| 1229 |
FIND_SYM(32) |
| 1230 |
FIND_SYM(64) |
| 1231 |
} |
| 1232 |
|
| 1233 |
break_out: |
| 1234 |
if (be_wewy_wewy_quiet) return NULL; |
| 1235 |
|
| 1236 |
if (*find_sym != '*' && *found_sym) |
| 1237 |
return ret; |
| 1238 |
if (be_quiet) |
| 1239 |
return NULL; |
| 1240 |
else |
| 1241 |
return " - "; |
| 1242 |
} |
| 1243 |
|
| 1244 |
static const char *scanelf_file_sections(elfobj *elf, char *found_section) |
| 1245 |
{ |
| 1246 |
if (!find_section) |
| 1247 |
return NULL; |
| 1248 |
|
| 1249 |
#define FIND_SECTION(B) \ |
| 1250 |
if (elf->elf_class == ELFCLASS ## B) { \ |
| 1251 |
size_t matched, n; \ |
| 1252 |
int invert; \ |
| 1253 |
const char *section_name; \ |
| 1254 |
Elf ## B ## _Shdr *section; \ |
| 1255 |
\ |
| 1256 |
matched = 0; \ |
| 1257 |
array_for_each(find_section_arr, n, section_name) { \ |
| 1258 |
invert = (*section_name == '!' ? 1 : 0); \ |
| 1259 |
section = SHDR ## B (elf_findsecbyname(elf, section_name + invert)); \ |
| 1260 |
if ((section == NULL && invert) || (section != NULL && !invert)) \ |
| 1261 |
++matched; \ |
| 1262 |
} \ |
| 1263 |
\ |
| 1264 |
if (matched == array_cnt(find_section_arr)) \ |
| 1265 |
*found_section = 1; \ |
| 1266 |
} |
| 1267 |
FIND_SECTION(32) |
| 1268 |
FIND_SECTION(64) |
| 1269 |
|
| 1270 |
if (be_wewy_wewy_quiet) |
| 1271 |
return NULL; |
| 1272 |
|
| 1273 |
if (*found_section) |
| 1274 |
return find_section; |
| 1275 |
|
| 1276 |
if (be_quiet) |
| 1277 |
return NULL; |
| 1278 |
else |
| 1279 |
return " - "; |
| 1280 |
} |
| 1281 |
|
| 1282 |
/* scan an elf file and show all the fun stuff */ |
| 1283 |
#define prints(str) ({ ssize_t ret = write(fileno(stdout), str, strlen(str)); ret; }) |
| 1284 |
static int scanelf_elfobj(elfobj *elf) |
| 1285 |
{ |
| 1286 |
unsigned long i; |
| 1287 |
char found_pax, found_phdr, found_relro, found_load, found_textrel, |
| 1288 |
found_rpath, found_needed, found_interp, found_bind, found_soname, |
| 1289 |
found_sym, found_lib, found_file, found_textrels, found_section; |
| 1290 |
static char *out_buffer = NULL; |
| 1291 |
static size_t out_len; |
| 1292 |
|
| 1293 |
found_pax = found_phdr = found_relro = found_load = found_textrel = \ |
| 1294 |
found_rpath = found_needed = found_interp = found_bind = found_soname = \ |
| 1295 |
found_sym = found_lib = found_file = found_textrels = found_section = 0; |
| 1296 |
|
| 1297 |
if (be_verbose > 2) |
| 1298 |
printf("%s: scanning file {%s,%s}\n", elf->filename, |
| 1299 |
get_elfeitype(EI_CLASS, elf->elf_class), |
| 1300 |
get_elfeitype(EI_DATA, elf->data[EI_DATA])); |
| 1301 |
else if (be_verbose > 1) |
| 1302 |
printf("%s: scanning file\n", elf->filename); |
| 1303 |
|
| 1304 |
/* init output buffer */ |
| 1305 |
if (!out_buffer) { |
| 1306 |
out_len = sizeof(char) * 80; |
| 1307 |
out_buffer = xmalloc(out_len); |
| 1308 |
} |
| 1309 |
*out_buffer = '\0'; |
| 1310 |
|
| 1311 |
/* show the header */ |
| 1312 |
if (!be_quiet && show_banner) { |
| 1313 |
for (i = 0; out_format[i]; ++i) { |
| 1314 |
if (!IS_MODIFIER(out_format[i])) continue; |
| 1315 |
|
| 1316 |
switch (out_format[++i]) { |
| 1317 |
case '+': break; |
| 1318 |
case '%': break; |
| 1319 |
case '#': break; |
| 1320 |
case 'F': |
| 1321 |
case 'p': |
| 1322 |
case 'f': prints("FILE "); found_file = 1; break; |
| 1323 |
case 'o': prints(" TYPE "); break; |
| 1324 |
case 'x': prints(" PAX "); break; |
| 1325 |
case 'e': prints("STK/REL/PTL "); break; |
| 1326 |
case 't': prints("TEXTREL "); break; |
| 1327 |
case 'r': prints("RPATH "); break; |
| 1328 |
case 'M': prints("CLASS "); break; |
| 1329 |
case 'n': prints("NEEDED "); break; |
| 1330 |
case 'i': prints("INTERP "); break; |
| 1331 |
case 'b': prints("BIND "); break; |
| 1332 |
case 'Z': prints("SIZE "); break; |
| 1333 |
case 'S': prints("SONAME "); break; |
| 1334 |
case 's': prints("SYM "); break; |
| 1335 |
case 'N': prints("LIB "); break; |
| 1336 |
case 'T': prints("TEXTRELS "); break; |
| 1337 |
case 'k': prints("SECTION "); break; |
| 1338 |
case 'a': prints("ARCH "); break; |
| 1339 |
case 'I': prints("OSABI "); break; |
| 1340 |
case 'Y': prints("EABI "); break; |
| 1341 |
case 'O': prints("PERM "); break; |
| 1342 |
case 'D': prints("ENDIAN "); break; |
| 1343 |
default: warnf("'%c' has no title ?", out_format[i]); |
| 1344 |
} |
| 1345 |
} |
| 1346 |
if (!found_file) prints("FILE "); |
| 1347 |
prints("\n"); |
| 1348 |
found_file = 0; |
| 1349 |
show_banner = 0; |
| 1350 |
} |
| 1351 |
|
| 1352 |
/* dump all the good stuff */ |
| 1353 |
for (i = 0; out_format[i]; ++i) { |
| 1354 |
const char *out; |
| 1355 |
const char *tmp; |
| 1356 |
static char ubuf[sizeof(unsigned long)*2]; |
| 1357 |
if (!IS_MODIFIER(out_format[i])) { |
| 1358 |
xchrcat(&out_buffer, out_format[i], &out_len); |
| 1359 |
continue; |
| 1360 |
} |
| 1361 |
|
| 1362 |
out = NULL; |
| 1363 |
be_wewy_wewy_quiet = (out_format[i] == '#'); |
| 1364 |
be_semi_verbose = (out_format[i] == '+'); |
| 1365 |
switch (out_format[++i]) { |
| 1366 |
case '+': |
| 1367 |
case '%': |
| 1368 |
case '#': |
| 1369 |
xchrcat(&out_buffer, out_format[i], &out_len); break; |
| 1370 |
case 'F': |
| 1371 |
found_file = 1; |
| 1372 |
if (be_wewy_wewy_quiet) break; |
| 1373 |
xstrcat(&out_buffer, elf->filename, &out_len); |
| 1374 |
break; |
| 1375 |
case 'p': |
| 1376 |
found_file = 1; |
| 1377 |
if (be_wewy_wewy_quiet) break; |
| 1378 |
tmp = elf->filename; |
| 1379 |
if (search_path) { |
| 1380 |
ssize_t len_search = strlen(search_path); |
| 1381 |
ssize_t len_file = strlen(elf->filename); |
| 1382 |
if (!strncmp(elf->filename, search_path, len_search) && \ |
| 1383 |
len_file > len_search) |
| 1384 |
tmp += len_search; |
| 1385 |
if (*tmp == '/' && search_path[len_search-1] == '/') tmp++; |
| 1386 |
} |
| 1387 |
xstrcat(&out_buffer, tmp, &out_len); |
| 1388 |
break; |
| 1389 |
case 'f': |
| 1390 |
found_file = 1; |
| 1391 |
if (be_wewy_wewy_quiet) break; |
| 1392 |
tmp = strrchr(elf->filename, '/'); |
| 1393 |
tmp = (tmp == NULL ? elf->filename : tmp+1); |
| 1394 |
xstrcat(&out_buffer, tmp, &out_len); |
| 1395 |
break; |
| 1396 |
case 'o': out = get_elfetype(elf); break; |
| 1397 |
case 'x': out = scanelf_file_pax(elf, &found_pax); break; |
| 1398 |
case 'e': out = scanelf_file_phdr(elf, &found_phdr, &found_relro, &found_load); break; |
| 1399 |
case 't': out = scanelf_file_textrel(elf, &found_textrel); break; |
| 1400 |
case 'T': out = scanelf_file_textrels(elf, &found_textrels, &found_textrel); break; |
| 1401 |
case 'r': scanelf_file_rpath(elf, &found_rpath, &out_buffer, &out_len); break; |
| 1402 |
case 'M': out = get_elfeitype(EI_CLASS, elf->data[EI_CLASS]); break; |
| 1403 |
case 'D': out = get_endian(elf); break; |
| 1404 |
case 'O': out = strfileperms(elf->filename); break; |
| 1405 |
case 'n': |
| 1406 |
case 'N': out = scanelf_file_needed_lib(elf, &found_needed, &found_lib, (out_format[i]=='N'), &out_buffer, &out_len); break; |
| 1407 |
case 'i': out = scanelf_file_interp(elf, &found_interp); break; |
| 1408 |
case 'b': out = scanelf_file_bind(elf, &found_bind); break; |
| 1409 |
case 'S': out = scanelf_file_soname(elf, &found_soname); break; |
| 1410 |
case 's': out = scanelf_file_sym(elf, &found_sym); break; |
| 1411 |
case 'k': out = scanelf_file_sections(elf, &found_section); break; |
| 1412 |
case 'a': out = get_elfemtype(elf); break; |
| 1413 |
case 'I': out = get_elfosabi(elf); break; |
| 1414 |
case 'Y': out = get_elf_eabi(elf); break; |
| 1415 |
case 'Z': snprintf(ubuf, sizeof(ubuf), "%lu", (unsigned long)elf->len); out = ubuf; break;; |
| 1416 |
default: warnf("'%c' has no scan code?", out_format[i]); |
| 1417 |
} |
| 1418 |
if (out) |
| 1419 |
xstrcat(&out_buffer, out, &out_len); |
| 1420 |
} |
| 1421 |
|
| 1422 |
#define FOUND_SOMETHING() \ |
| 1423 |
(found_pax || found_phdr || found_relro || found_load || found_textrel || \ |
| 1424 |
found_rpath || found_needed || found_interp || found_bind || \ |
| 1425 |
found_soname || found_sym || found_lib || found_textrels || found_section ) |
| 1426 |
|
| 1427 |
if (!found_file && (!be_quiet || (be_quiet && FOUND_SOMETHING()))) { |
| 1428 |
xchrcat(&out_buffer, ' ', &out_len); |
| 1429 |
xstrcat(&out_buffer, elf->filename, &out_len); |
| 1430 |
} |
| 1431 |
if (!be_quiet || (be_quiet && FOUND_SOMETHING())) { |
| 1432 |
puts(out_buffer); |
| 1433 |
fflush(stdout); |
| 1434 |
} |
| 1435 |
|
| 1436 |
return 0; |
| 1437 |
} |
| 1438 |
|
| 1439 |
/* scan a single elf */ |
| 1440 |
static int scanelf_elf(const char *filename, int fd, size_t len) |
| 1441 |
{ |
| 1442 |
int ret = 1; |
| 1443 |
elfobj *elf; |
| 1444 |
|
| 1445 |
/* verify this is real ELF */ |
| 1446 |
if ((elf = _readelf_fd(filename, fd, len, !fix_elf)) == NULL) { |
| 1447 |
if (be_verbose > 2) printf("%s: not an ELF\n", filename); |
| 1448 |
return ret; |
| 1449 |
} |
| 1450 |
switch (match_bits) { |
| 1451 |
case 32: |
| 1452 |
if (elf->elf_class != ELFCLASS32) |
| 1453 |
goto label_done; |
| 1454 |
break; |
| 1455 |
case 64: |
| 1456 |
if (elf->elf_class != ELFCLASS64) |
| 1457 |
goto label_done; |
| 1458 |
break; |
| 1459 |
default: break; |
| 1460 |
} |
| 1461 |
if (match_etypes) { |
| 1462 |
char sbuf[126]; |
| 1463 |
strncpy(sbuf, match_etypes, sizeof(sbuf)); |
| 1464 |
if (strchr(match_etypes, ',') != NULL) { |
| 1465 |
char *p; |
| 1466 |
while ((p = strrchr(sbuf, ',')) != NULL) { |
| 1467 |
*p = 0; |
| 1468 |
if (etype_lookup(p+1) == get_etype(elf)) |
| 1469 |
goto label_ret; |
| 1470 |
} |
| 1471 |
} |
| 1472 |
if (etype_lookup(sbuf) != get_etype(elf)) |
| 1473 |
goto label_done; |
| 1474 |
} |
| 1475 |
|
| 1476 |
label_ret: |
| 1477 |
ret = scanelf_elfobj(elf); |
| 1478 |
|
| 1479 |
label_done: |
| 1480 |
unreadelf(elf); |
| 1481 |
return ret; |
| 1482 |
} |
| 1483 |
|
| 1484 |
/* scan an archive of elfs */ |
| 1485 |
static int scanelf_archive(const char *filename, int fd, size_t len) |
| 1486 |
{ |
| 1487 |
archive_handle *ar; |
| 1488 |
archive_member *m; |
| 1489 |
char *ar_buffer; |
| 1490 |
elfobj *elf; |
| 1491 |
|
| 1492 |
ar = ar_open_fd(filename, fd); |
| 1493 |
if (ar == NULL) |
| 1494 |
return 1; |
| 1495 |
|
| 1496 |
ar_buffer = mmap(0, len, PROT_READ | (fix_elf ? PROT_WRITE : 0), (fix_elf ? MAP_SHARED : MAP_PRIVATE), fd, 0); |
| 1497 |
while ((m = ar_next(ar)) != NULL) { |
| 1498 |
off_t cur_pos = lseek(fd, 0, SEEK_CUR); |
| 1499 |
if (cur_pos == -1) |
| 1500 |
errp("lseek() failed"); |
| 1501 |
elf = readelf_buffer(m->name, ar_buffer + cur_pos, m->size); |
| 1502 |
if (elf) { |
| 1503 |
scanelf_elfobj(elf); |
| 1504 |
unreadelf(elf); |
| 1505 |
} |
| 1506 |
} |
| 1507 |
munmap(ar_buffer, len); |
| 1508 |
|
| 1509 |
return 0; |
| 1510 |
} |
| 1511 |
/* scan a file which may be an elf or an archive or some other magical beast */ |
| 1512 |
static int scanelf_fileat(int dir_fd, const char *filename, const struct stat *st_cache) |
| 1513 |
{ |
| 1514 |
const struct stat *st = st_cache; |
| 1515 |
struct stat symlink_st; |
| 1516 |
int fd; |
| 1517 |
|
| 1518 |
/* always handle regular files and handle symlinked files if no -y */ |
| 1519 |
if (S_ISLNK(st->st_mode)) { |
| 1520 |
if (!scan_symlink) |
| 1521 |
return 1; |
| 1522 |
fstatat(dir_fd, filename, &symlink_st, 0); |
| 1523 |
st = &symlink_st; |
| 1524 |
} |
| 1525 |
|
| 1526 |
if (!S_ISREG(st->st_mode)) { |
| 1527 |
if (be_verbose > 2) printf("%s: skipping non-file\n", filename); |
| 1528 |
return 1; |
| 1529 |
} |
| 1530 |
|
| 1531 |
if (match_perms) { |
| 1532 |
if ((st->st_mode | match_perms) != st->st_mode) |
| 1533 |
return 1; |
| 1534 |
} |
| 1535 |
fd = openat(dir_fd, filename, (fix_elf ? O_RDWR : O_RDONLY) | O_CLOEXEC); |
| 1536 |
if (fd == -1) |
| 1537 |
return 1; |
| 1538 |
|
| 1539 |
if (scanelf_elf(filename, fd, st->st_size) == 1 && scan_archives) |
| 1540 |
/* if it isn't an ELF, maybe it's an .a archive */ |
| 1541 |
scanelf_archive(filename, fd, st->st_size); |
| 1542 |
|
| 1543 |
/* XXX: unreadelf() implicitly closes its fd */ |
| 1544 |
close(fd); |
| 1545 |
return 0; |
| 1546 |
} |
| 1547 |
|
| 1548 |
/* scan a directory for ET_EXEC files and print when we find one */ |
| 1549 |
static int scanelf_dirat(int dir_fd, const char *path) |
| 1550 |
{ |
| 1551 |
register DIR *dir; |
| 1552 |
register struct dirent *dentry; |
| 1553 |
struct stat st_top, st; |
| 1554 |
char buf[__PAX_UTILS_PATH_MAX], *subpath; |
| 1555 |
size_t pathlen = 0, len = 0; |
| 1556 |
int ret = 0; |
| 1557 |
int subdir_fd; |
| 1558 |
|
| 1559 |
/* make sure path exists */ |
| 1560 |
if (fstatat(dir_fd, path, &st_top, AT_SYMLINK_NOFOLLOW) == -1) { |
| 1561 |
if (be_verbose > 2) printf("%s: does not exist\n", path); |
| 1562 |
return 1; |
| 1563 |
} |
| 1564 |
|
| 1565 |
/* ok, if it isn't a directory, assume we can open it */ |
| 1566 |
if (!S_ISDIR(st_top.st_mode)) |
| 1567 |
return scanelf_fileat(dir_fd, path, &st_top); |
| 1568 |
|
| 1569 |
/* now scan the dir looking for fun stuff */ |
| 1570 |
subdir_fd = openat(dir_fd, path, O_RDONLY|O_CLOEXEC); |
| 1571 |
if (subdir_fd == -1) |
| 1572 |
dir = NULL; |
| 1573 |
else |
| 1574 |
dir = fdopendir(subdir_fd); |
| 1575 |
if (dir == NULL) { |
| 1576 |
if (subdir_fd != -1) |
| 1577 |
close(subdir_fd); |
| 1578 |
warnf("could not opendir %s: %s", path, strerror(errno)); |
| 1579 |
return 1; |
| 1580 |
} |
| 1581 |
if (be_verbose > 1) printf("%s: scanning dir\n", path); |
| 1582 |
|
| 1583 |
subpath = stpcpy(buf, path); |
| 1584 |
*subpath++ = '/'; |
| 1585 |
pathlen = subpath - buf; |
| 1586 |
while ((dentry = readdir(dir))) { |
| 1587 |
if (!strcmp(dentry->d_name, ".") || !strcmp(dentry->d_name, "..")) |
| 1588 |
continue; |
| 1589 |
|
| 1590 |
if (fstatat(subdir_fd, dentry->d_name, &st, AT_SYMLINK_NOFOLLOW) == -1) |
| 1591 |
continue; |
| 1592 |
|
| 1593 |
len = strlen(dentry->d_name); |
| 1594 |
if (len + pathlen + 1 >= sizeof(buf)) { |
| 1595 |
warnf("Skipping '%s%s': len > sizeof(buf); %zu > %zu\n", |
| 1596 |
path, dentry->d_name, len + pathlen + 1, sizeof(buf)); |
| 1597 |
continue; |
| 1598 |
} |
| 1599 |
memcpy(subpath, dentry->d_name, len); |
| 1600 |
subpath[len] = '\0'; |
| 1601 |
|
| 1602 |
if (S_ISREG(st.st_mode)) |
| 1603 |
ret = scanelf_fileat(dir_fd, buf, &st); |
| 1604 |
else if (dir_recurse && S_ISDIR(st.st_mode)) { |
| 1605 |
if (dir_crossmount || (st_top.st_dev == st.st_dev)) |
| 1606 |
ret = scanelf_dirat(dir_fd, buf); |
| 1607 |
} |
| 1608 |
} |
| 1609 |
closedir(dir); |
| 1610 |
|
| 1611 |
return ret; |
| 1612 |
} |
| 1613 |
static int scanelf_dir(const char *path) |
| 1614 |
{ |
| 1615 |
return scanelf_dirat(root_fd, root_rel_path(path)); |
| 1616 |
} |
| 1617 |
|
| 1618 |
static int scanelf_from_file(const char *filename) |
| 1619 |
{ |
| 1620 |
FILE *fp; |
| 1621 |
char *p, *path; |
| 1622 |
size_t len; |
| 1623 |
int ret; |
| 1624 |
|
| 1625 |
if (strcmp(filename, "-") == 0) |
| 1626 |
fp = stdin; |
| 1627 |
else if ((fp = fopen(filename, "r")) == NULL) |
| 1628 |
return 1; |
| 1629 |
|
| 1630 |
path = NULL; |
| 1631 |
len = 0; |
| 1632 |
ret = 0; |
| 1633 |
while (getline(&path, &len, fp) != -1) { |
| 1634 |
if ((p = strchr(path, '\n')) != NULL) |
| 1635 |
*p = 0; |
| 1636 |
search_path = path; |
| 1637 |
ret = scanelf_dir(path); |
| 1638 |
} |
| 1639 |
free(path); |
| 1640 |
|
| 1641 |
if (fp != stdin) |
| 1642 |
fclose(fp); |
| 1643 |
|
| 1644 |
return ret; |
| 1645 |
} |
| 1646 |
|
| 1647 |
#if defined(__GLIBC__) || defined(__UCLIBC__) || defined(__NetBSD__) |
| 1648 |
|
| 1649 |
static int load_ld_cache_config(int i, const char *fname) |
| 1650 |
{ |
| 1651 |
FILE *fp = NULL; |
| 1652 |
char *p, *path; |
| 1653 |
size_t len; |
| 1654 |
int curr_fd = -1; |
| 1655 |
|
| 1656 |
fp = fopenat_r(root_fd, root_rel_path(fname)); |
| 1657 |
if (fp == NULL) |
| 1658 |
return i; |
| 1659 |
|
| 1660 |
path = NULL; |
| 1661 |
len = 0; |
| 1662 |
while (getline(&path, &len, fp) != -1) { |
| 1663 |
if ((p = strrchr(path, '\r')) != NULL) |
| 1664 |
*p = 0; |
| 1665 |
if ((p = strchr(path, '\n')) != NULL) |
| 1666 |
*p = 0; |
| 1667 |
|
| 1668 |
/* recursive includes of the same file will make this segfault. */ |
| 1669 |
if ((memcmp(path, "include", 7) == 0) && isblank(path[7])) { |
| 1670 |
glob_t gl; |
| 1671 |
size_t x; |
| 1672 |
const char *gpath; |
| 1673 |
|
| 1674 |
/* re-use existing path buffer ... need to be creative */ |
| 1675 |
if (path[8] != '/') |
| 1676 |
gpath = memcpy(path + 3, "/etc/", 5); |
| 1677 |
else |
| 1678 |
gpath = path + 8; |
| 1679 |
if (root_fd != AT_FDCWD) { |
| 1680 |
if (curr_fd == -1) { |
| 1681 |
curr_fd = open(".", O_RDONLY|O_CLOEXEC); |
| 1682 |
if (fchdir(root_fd)) |
| 1683 |
errp("unable to change to root dir"); |
| 1684 |
} |
| 1685 |
gpath = root_rel_path(gpath); |
| 1686 |
} |
| 1687 |
|
| 1688 |
if (glob(gpath, 0, NULL, &gl) == 0) { |
| 1689 |
for (x = 0; x < gl.gl_pathc; ++x) { |
| 1690 |
/* try to avoid direct loops */ |
| 1691 |
if (strcmp(gl.gl_pathv[x], fname) == 0) |
| 1692 |
continue; |
| 1693 |
i = load_ld_cache_config(i, gl.gl_pathv[x]); |
| 1694 |
} |
| 1695 |
globfree(&gl); |
| 1696 |
} |
| 1697 |
|
| 1698 |
/* failed globs are ignored by glibc */ |
| 1699 |
continue; |
| 1700 |
} |
| 1701 |
|
| 1702 |
if (*path != '/') |
| 1703 |
continue; |
| 1704 |
|
| 1705 |
xarraypush_str(ldpaths, path); |
| 1706 |
} |
| 1707 |
free(path); |
| 1708 |
|
| 1709 |
fclose(fp); |
| 1710 |
|
| 1711 |
if (curr_fd != -1) { |
| 1712 |
if (fchdir(curr_fd)) |
| 1713 |
/* don't care */; |
| 1714 |
close(curr_fd); |
| 1715 |
} |
| 1716 |
|
| 1717 |
return i; |
| 1718 |
} |
| 1719 |
|
| 1720 |
#elif defined(__FreeBSD__) || defined(__DragonFly__) |
| 1721 |
|
| 1722 |
static int load_ld_cache_config(int i, const char *fname) |
| 1723 |
{ |
| 1724 |
FILE *fp = NULL; |
| 1725 |
char *b = NULL, *p; |
| 1726 |
struct elfhints_hdr hdr; |
| 1727 |
|
| 1728 |
fp = fopenat_r(root_fd, root_rel_path(fname)); |
| 1729 |
if (fp == NULL) |
| 1730 |
return i; |
| 1731 |
|
| 1732 |
if (fread(&hdr, 1, sizeof(hdr), fp) != sizeof(hdr) || |
| 1733 |
hdr.magic != ELFHINTS_MAGIC || hdr.version != 1 || |
| 1734 |
fseek(fp, hdr.strtab + hdr.dirlist, SEEK_SET) == -1) |
| 1735 |
{ |
| 1736 |
fclose(fp); |
| 1737 |
return i; |
| 1738 |
} |
| 1739 |
|
| 1740 |
b = xmalloc(hdr.dirlistlen + 1); |
| 1741 |
if (fread(b, 1, hdr.dirlistlen+1, fp) != hdr.dirlistlen+1) { |
| 1742 |
fclose(fp); |
| 1743 |
free(b); |
| 1744 |
return i; |
| 1745 |
} |
| 1746 |
|
| 1747 |
while ((p = strsep(&b, ":"))) { |
| 1748 |
if (*p == '\0') |
| 1749 |
continue; |
| 1750 |
xarraypush_str(ldpaths, p); |
| 1751 |
} |
| 1752 |
|
| 1753 |
free(b); |
| 1754 |
fclose(fp); |
| 1755 |
return i; |
| 1756 |
} |
| 1757 |
|
| 1758 |
#else |
| 1759 |
#ifdef __ELF__ |
| 1760 |
#warning Cache config support not implemented for your target |
| 1761 |
#endif |
| 1762 |
static int load_ld_cache_config(int i, const char *fname) |
| 1763 |
{ |
| 1764 |
return 0; |
| 1765 |
} |
| 1766 |
#endif |
| 1767 |
|
| 1768 |
/* scan /etc/ld.so.conf for paths */ |
| 1769 |
static void scanelf_ldpath(void) |
| 1770 |
{ |
| 1771 |
char scan_l, scan_ul, scan_ull; |
| 1772 |
size_t n; |
| 1773 |
const char *ldpath; |
| 1774 |
int i = 0; |
| 1775 |
|
| 1776 |
if (array_cnt(ldpaths) == 0) |
| 1777 |
err("Unable to load any paths from ld.so.conf"); |
| 1778 |
|
| 1779 |
scan_l = scan_ul = scan_ull = 0; |
| 1780 |
|
| 1781 |
array_for_each(ldpaths, n, ldpath) { |
| 1782 |
if (!scan_l && !strcmp(ldpath, "/lib")) scan_l = 1; |
| 1783 |
if (!scan_ul && !strcmp(ldpath, "/usr/lib")) scan_ul = 1; |
| 1784 |
if (!scan_ull && !strcmp(ldpath, "/usr/local/lib")) scan_ull = 1; |
| 1785 |
scanelf_dir(ldpath); |
| 1786 |
++i; |
| 1787 |
} |
| 1788 |
|
| 1789 |
if (!scan_l) scanelf_dir("/lib"); |
| 1790 |
if (!scan_ul) scanelf_dir("/usr/lib"); |
| 1791 |
if (!scan_ull) scanelf_dir("/usr/local/lib"); |
| 1792 |
} |
| 1793 |
|
| 1794 |
/* scan env PATH for paths */ |
| 1795 |
static void scanelf_envpath(void) |
| 1796 |
{ |
| 1797 |
char *path, *p; |
| 1798 |
|
| 1799 |
path = getenv("PATH"); |
| 1800 |
if (!path) |
| 1801 |
err("PATH is not set in your env !"); |
| 1802 |
path = xstrdup(path); |
| 1803 |
|
| 1804 |
while ((p = strrchr(path, ':')) != NULL) { |
| 1805 |
scanelf_dir(p + 1); |
| 1806 |
*p = 0; |
| 1807 |
} |
| 1808 |
|
| 1809 |
free(path); |
| 1810 |
} |
| 1811 |
|
| 1812 |
/* usage / invocation handling functions */ /* Free Flags: c d j u w G H J K P Q U W */ |
| 1813 |
#define PARSE_FLAGS "plRmyAXz:xetrnLibSs:k:gN:TaqvF:f:o:E:M:DIYO:ZCBhV" |
| 1814 |
#define a_argument required_argument |
| 1815 |
static struct option const long_opts[] = { |
| 1816 |
{"path", no_argument, NULL, 'p'}, |
| 1817 |
{"ldpath", no_argument, NULL, 'l'}, |
| 1818 |
{"root", a_argument, NULL, 128}, |
| 1819 |
{"recursive", no_argument, NULL, 'R'}, |
| 1820 |
{"mount", no_argument, NULL, 'm'}, |
| 1821 |
{"symlink", no_argument, NULL, 'y'}, |
| 1822 |
{"archives", no_argument, NULL, 'A'}, |
| 1823 |
{"ldcache", no_argument, NULL, 'L'}, |
| 1824 |
{"fix", no_argument, NULL, 'X'}, |
| 1825 |
{"setpax", a_argument, NULL, 'z'}, |
| 1826 |
{"pax", no_argument, NULL, 'x'}, |
| 1827 |
{"header", no_argument, NULL, 'e'}, |
| 1828 |
{"textrel", no_argument, NULL, 't'}, |
| 1829 |
{"rpath", no_argument, NULL, 'r'}, |
| 1830 |
{"needed", no_argument, NULL, 'n'}, |
| 1831 |
{"interp", no_argument, NULL, 'i'}, |
| 1832 |
{"bind", no_argument, NULL, 'b'}, |
| 1833 |
{"soname", no_argument, NULL, 'S'}, |
| 1834 |
{"symbol", a_argument, NULL, 's'}, |
| 1835 |
{"section", a_argument, NULL, 'k'}, |
| 1836 |
{"lib", a_argument, NULL, 'N'}, |
| 1837 |
{"gmatch", no_argument, NULL, 'g'}, |
| 1838 |
{"textrels", no_argument, NULL, 'T'}, |
| 1839 |
{"etype", a_argument, NULL, 'E'}, |
| 1840 |
{"bits", a_argument, NULL, 'M'}, |
| 1841 |
{"endian", no_argument, NULL, 'D'}, |
| 1842 |
{"osabi", no_argument, NULL, 'I'}, |
| 1843 |
{"eabi", no_argument, NULL, 'Y'}, |
| 1844 |
{"perms", a_argument, NULL, 'O'}, |
| 1845 |
{"size", no_argument, NULL, 'Z'}, |
| 1846 |
{"all", no_argument, NULL, 'a'}, |
| 1847 |
{"quiet", no_argument, NULL, 'q'}, |
| 1848 |
{"verbose", no_argument, NULL, 'v'}, |
| 1849 |
{"format", a_argument, NULL, 'F'}, |
| 1850 |
{"from", a_argument, NULL, 'f'}, |
| 1851 |
{"file", a_argument, NULL, 'o'}, |
| 1852 |
{"nocolor", no_argument, NULL, 'C'}, |
| 1853 |
{"nobanner", no_argument, NULL, 'B'}, |
| 1854 |
{"help", no_argument, NULL, 'h'}, |
| 1855 |
{"version", no_argument, NULL, 'V'}, |
| 1856 |
{NULL, no_argument, NULL, 0x0} |
| 1857 |
}; |
| 1858 |
|
| 1859 |
static const char * const opts_help[] = { |
| 1860 |
"Scan all directories in PATH environment", |
| 1861 |
"Scan all directories in /etc/ld.so.conf", |
| 1862 |
"Root directory (use with -l or -p)", |
| 1863 |
"Scan directories recursively", |
| 1864 |
"Don't recursively cross mount points", |
| 1865 |
"Don't scan symlinks", |
| 1866 |
"Scan archives (.a files)", |
| 1867 |
"Utilize ld.so.cache information (use with -r/-n)", |
| 1868 |
"Try and 'fix' bad things (use with -r/-e)", |
| 1869 |
"Sets EI_PAX/PT_PAX_FLAGS to <arg> (use with -Xx)\n", |
| 1870 |
"Print PaX markings", |
| 1871 |
"Print GNU_STACK/PT_LOAD markings", |
| 1872 |
"Print TEXTREL information", |
| 1873 |
"Print RPATH information", |
| 1874 |
"Print NEEDED information", |
| 1875 |
"Print INTERP information", |
| 1876 |
"Print BIND information", |
| 1877 |
"Print SONAME information", |
| 1878 |
"Find a specified symbol", |
| 1879 |
"Find a specified section", |
| 1880 |
"Find a specified library", |
| 1881 |
"Use regex matching rather than string compare (use with -s)", |
| 1882 |
"Locate cause of TEXTREL", |
| 1883 |
"Print only ELF files matching etype ET_DYN,ET_EXEC ...", |
| 1884 |
"Print only ELF files matching numeric bits", |
| 1885 |
"Print Endianness", |
| 1886 |
"Print OSABI", |
| 1887 |
"Print EABI (EM_ARM Only)", |
| 1888 |
"Print only ELF files matching octal permissions", |
| 1889 |
"Print ELF file size", |
| 1890 |
"Print all useful/simple info\n", |
| 1891 |
"Only output 'bad' things", |
| 1892 |
"Be verbose (can be specified more than once)", |
| 1893 |
"Use specified format for output", |
| 1894 |
"Read input stream from a filename", |
| 1895 |
"Write output stream to a filename", |
| 1896 |
"Don't emit color in output", |
| 1897 |
"Don't display the header", |
| 1898 |
"Print this help and exit", |
| 1899 |
"Print version and exit", |
| 1900 |
NULL |
| 1901 |
}; |
| 1902 |
|
| 1903 |
/* display usage and exit */ |
| 1904 |
static void usage(int status) |
| 1905 |
{ |
| 1906 |
unsigned long i; |
| 1907 |
printf("* Scan ELF binaries for stuff\n\n" |
| 1908 |
"Usage: %s [options] <dir1/file1> [dir2 dirN file2 fileN ...]\n\n", argv0); |
| 1909 |
printf("Options: -[%s]\n", PARSE_FLAGS); |
| 1910 |
for (i = 0; long_opts[i].name; ++i) |
| 1911 |
if (long_opts[i].has_arg == no_argument) |
| 1912 |
printf(" -%c, --%-14s* %s\n", long_opts[i].val, |
| 1913 |
long_opts[i].name, opts_help[i]); |
| 1914 |
else if (long_opts[i].val > '~') |
| 1915 |
printf(" --%-7s <arg> * %s\n", |
| 1916 |
long_opts[i].name, opts_help[i]); |
| 1917 |
else |
| 1918 |
printf(" -%c, --%-7s <arg> * %s\n", long_opts[i].val, |
| 1919 |
long_opts[i].name, opts_help[i]); |
| 1920 |
|
| 1921 |
puts("\nFor more information, see the scanelf(1) manpage"); |
| 1922 |
exit(status); |
| 1923 |
} |
| 1924 |
|
| 1925 |
/* parse command line arguments and preform needed actions */ |
| 1926 |
#define do_pax_state(option, flag) \ |
| 1927 |
if (islower(option)) { \ |
| 1928 |
flags &= ~PF_##flag; \ |
| 1929 |
flags |= PF_NO##flag; \ |
| 1930 |
} else { \ |
| 1931 |
flags &= ~PF_NO##flag; \ |
| 1932 |
flags |= PF_##flag; \ |
| 1933 |
} |
| 1934 |
static int parseargs(int argc, char *argv[]) |
| 1935 |
{ |
| 1936 |
int i; |
| 1937 |
const char *from_file = NULL; |
| 1938 |
int ret = 0; |
| 1939 |
|
| 1940 |
opterr = 0; |
| 1941 |
while ((i=getopt_long(argc, argv, PARSE_FLAGS, long_opts, NULL)) != -1) { |
| 1942 |
switch (i) { |
| 1943 |
|
| 1944 |
case 'V': |
| 1945 |
printf("pax-utils-%s: %s compiled %s\n%s\n" |
| 1946 |
"%s written for Gentoo by <solar and vapier @ gentoo.org>\n", |
| 1947 |
VERSION, __FILE__, __DATE__, rcsid, argv0); |
| 1948 |
exit(EXIT_SUCCESS); |
| 1949 |
break; |
| 1950 |
case 'h': usage(EXIT_SUCCESS); break; |
| 1951 |
case 'f': |
| 1952 |
if (from_file) warn("You prob don't want to specify -f twice"); |
| 1953 |
from_file = optarg; |
| 1954 |
break; |
| 1955 |
case 'E': |
| 1956 |
match_etypes = optarg; |
| 1957 |
break; |
| 1958 |
case 'M': |
| 1959 |
match_bits = atoi(optarg); |
| 1960 |
if (match_bits == 0) { |
| 1961 |
if (strcmp(optarg, "ELFCLASS32") == 0) |
| 1962 |
match_bits = 32; |
| 1963 |
if (strcmp(optarg, "ELFCLASS64") == 0) |
| 1964 |
match_bits = 64; |
| 1965 |
} |
| 1966 |
break; |
| 1967 |
case 'O': |
| 1968 |
if (sscanf(optarg, "%o", &match_perms) == -1) |
| 1969 |
match_bits = 0; |
| 1970 |
break; |
| 1971 |
case 'o': { |
| 1972 |
if (freopen(optarg, "w", stdout) == NULL) |
| 1973 |
err("Could not open output stream '%s': %s", optarg, strerror(errno)); |
| 1974 |
break; |
| 1975 |
} |
| 1976 |
case 'k': |
| 1977 |
xarraypush_str(find_section_arr, optarg); |
| 1978 |
break; |
| 1979 |
case 's': { |
| 1980 |
if (find_sym) warn("You prob don't want to specify -s twice"); |
| 1981 |
find_sym = optarg; |
| 1982 |
break; |
| 1983 |
} |
| 1984 |
case 'N': |
| 1985 |
xarraypush_str(find_lib_arr, optarg); |
| 1986 |
break; |
| 1987 |
case 'F': { |
| 1988 |
if (out_format) warn("You prob don't want to specify -F twice"); |
| 1989 |
out_format = optarg; |
| 1990 |
break; |
| 1991 |
} |
| 1992 |
case 'z': { |
| 1993 |
unsigned long flags = (PF_NOEMUTRAMP | PF_NORANDEXEC); |
| 1994 |
size_t x; |
| 1995 |
|
| 1996 |
for (x = 0; x < strlen(optarg); x++) { |
| 1997 |
switch (optarg[x]) { |
| 1998 |
case 'p': |
| 1999 |
case 'P': |
| 2000 |
do_pax_state(optarg[x], PAGEEXEC); |
| 2001 |
break; |
| 2002 |
case 's': |
| 2003 |
case 'S': |
| 2004 |
do_pax_state(optarg[x], SEGMEXEC); |
| 2005 |
break; |
| 2006 |
case 'm': |
| 2007 |
case 'M': |
| 2008 |
do_pax_state(optarg[x], MPROTECT); |
| 2009 |
break; |
| 2010 |
case 'e': |
| 2011 |
case 'E': |
| 2012 |
do_pax_state(optarg[x], EMUTRAMP); |
| 2013 |
break; |
| 2014 |
case 'r': |
| 2015 |
case 'R': |
| 2016 |
do_pax_state(optarg[x], RANDMMAP); |
| 2017 |
break; |
| 2018 |
case 'x': |
| 2019 |
case 'X': |
| 2020 |
do_pax_state(optarg[x], RANDEXEC); |
| 2021 |
break; |
| 2022 |
default: |
| 2023 |
break; |
| 2024 |
} |
| 2025 |
} |
| 2026 |
if (!(((flags & PF_PAGEEXEC) && (flags & PF_NOPAGEEXEC)) || |
| 2027 |
((flags & PF_SEGMEXEC) && (flags & PF_NOSEGMEXEC)) || |
| 2028 |
((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)) || |
| 2029 |
((flags & PF_RANDEXEC) && (flags & PF_NORANDEXEC)) || |
| 2030 |
((flags & PF_EMUTRAMP) && (flags & PF_NOEMUTRAMP)) || |
| 2031 |
((flags & PF_RANDMMAP) && (flags & PF_NORANDMMAP)))) |
| 2032 |
setpax = flags; |
| 2033 |
break; |
| 2034 |
} |
| 2035 |
case 'Z': show_size = 1; break; |
| 2036 |
case 'g': g_match = 1; break; |
| 2037 |
case 'L': use_ldcache = 1; break; |
| 2038 |
case 'y': scan_symlink = 0; break; |
| 2039 |
case 'A': scan_archives = 1; break; |
| 2040 |
case 'C': color_init(true); break; |
| 2041 |
case 'B': show_banner = 0; break; |
| 2042 |
case 'l': scan_ldpath = 1; break; |
| 2043 |
case 'p': scan_envpath = 1; break; |
| 2044 |
case 'R': dir_recurse = 1; break; |
| 2045 |
case 'm': dir_crossmount = 0; break; |
| 2046 |
case 'X': ++fix_elf; break; |
| 2047 |
case 'x': show_pax = 1; break; |
| 2048 |
case 'e': show_phdr = 1; break; |
| 2049 |
case 't': show_textrel = 1; break; |
| 2050 |
case 'r': show_rpath = 1; break; |
| 2051 |
case 'n': show_needed = 1; break; |
| 2052 |
case 'i': show_interp = 1; break; |
| 2053 |
case 'b': show_bind = 1; break; |
| 2054 |
case 'S': show_soname = 1; break; |
| 2055 |
case 'T': show_textrels = 1; break; |
| 2056 |
case 'q': be_quiet = 1; break; |
| 2057 |
case 'v': be_verbose = (be_verbose % 20) + 1; break; |
| 2058 |
case 'a': show_perms = show_pax = show_phdr = show_textrel = show_rpath = show_bind = show_endian = 1; break; |
| 2059 |
case 'D': show_endian = 1; break; |
| 2060 |
case 'I': show_osabi = 1; break; |
| 2061 |
case 'Y': show_eabi = 1; break; |
| 2062 |
case 128: |
| 2063 |
root_fd = open(optarg, O_RDONLY|O_CLOEXEC); |
| 2064 |
if (root_fd == -1) |
| 2065 |
err("Could not open root: %s", optarg); |
| 2066 |
break; |
| 2067 |
case ':': |
| 2068 |
err("Option '%c' is missing parameter", optopt); |
| 2069 |
case '?': |
| 2070 |
err("Unknown option '%c' or argument missing", optopt); |
| 2071 |
default: |
| 2072 |
err("Unhandled option '%c'; please report this", i); |
| 2073 |
} |
| 2074 |
} |
| 2075 |
if (show_textrels && be_verbose) |
| 2076 |
has_objdump = bin_in_path("objdump"); |
| 2077 |
/* flatten arrays for display */ |
| 2078 |
if (array_cnt(find_lib_arr)) |
| 2079 |
find_lib = array_flatten_str(find_lib_arr); |
| 2080 |
if (array_cnt(find_section_arr)) |
| 2081 |
find_section = array_flatten_str(find_section_arr); |
| 2082 |
/* let the format option override all other options */ |
| 2083 |
if (out_format) { |
| 2084 |
show_pax = show_phdr = show_textrel = show_rpath = \ |
| 2085 |
show_needed = show_interp = show_bind = show_soname = \ |
| 2086 |
show_textrels = show_perms = show_endian = show_size = \ |
| 2087 |
show_osabi = show_eabi = 0; |
| 2088 |
for (i = 0; out_format[i]; ++i) { |
| 2089 |
if (!IS_MODIFIER(out_format[i])) continue; |
| 2090 |
|
| 2091 |
switch (out_format[++i]) { |
| 2092 |
case '+': break; |
| 2093 |
case '%': break; |
| 2094 |
case '#': break; |
| 2095 |
case 'F': break; |
| 2096 |
case 'p': break; |
| 2097 |
case 'f': break; |
| 2098 |
case 'k': break; |
| 2099 |
case 's': break; |
| 2100 |
case 'N': break; |
| 2101 |
case 'o': break; |
| 2102 |
case 'a': break; |
| 2103 |
case 'M': break; |
| 2104 |
case 'Z': show_size = 1; break; |
| 2105 |
case 'D': show_endian = 1; break; |
| 2106 |
case 'I': show_osabi = 1; break; |
| 2107 |
case 'Y': show_eabi = 1; break; |
| 2108 |
case 'O': show_perms = 1; break; |
| 2109 |
case 'x': show_pax = 1; break; |
| 2110 |
case 'e': show_phdr = 1; break; |
| 2111 |
case 't': show_textrel = 1; break; |
| 2112 |
case 'r': show_rpath = 1; break; |
| 2113 |
case 'n': show_needed = 1; break; |
| 2114 |
case 'i': show_interp = 1; break; |
| 2115 |
case 'b': show_bind = 1; break; |
| 2116 |
case 'S': show_soname = 1; break; |
| 2117 |
case 'T': show_textrels = 1; break; |
| 2118 |
default: |
| 2119 |
err("Invalid format specifier '%c' (byte %i)", |
| 2120 |
out_format[i], i+1); |
| 2121 |
} |
| 2122 |
} |
| 2123 |
|
| 2124 |
/* construct our default format */ |
| 2125 |
} else { |
| 2126 |
size_t fmt_len = 30; |
| 2127 |
out_format = xmalloc(sizeof(char) * fmt_len); |
| 2128 |
*out_format = '\0'; |
| 2129 |
if (!be_quiet) xstrcat(&out_format, "%o ", &fmt_len); |
| 2130 |
if (show_pax) xstrcat(&out_format, "%x ", &fmt_len); |
| 2131 |
if (show_perms) xstrcat(&out_format, "%O ", &fmt_len); |
| 2132 |
if (show_size) xstrcat(&out_format, "%Z ", &fmt_len); |
| 2133 |
if (show_endian) xstrcat(&out_format, "%D ", &fmt_len); |
| 2134 |
if (show_osabi) xstrcat(&out_format, "%I ", &fmt_len); |
| 2135 |
if (show_eabi) xstrcat(&out_format, "%Y ", &fmt_len); |
| 2136 |
if (show_phdr) xstrcat(&out_format, "%e ", &fmt_len); |
| 2137 |
if (show_textrel) xstrcat(&out_format, "%t ", &fmt_len); |
| 2138 |
if (show_rpath) xstrcat(&out_format, "%r ", &fmt_len); |
| 2139 |
if (show_needed) xstrcat(&out_format, "%n ", &fmt_len); |
| 2140 |
if (show_interp) xstrcat(&out_format, "%i ", &fmt_len); |
| 2141 |
if (show_bind) xstrcat(&out_format, "%b ", &fmt_len); |
| 2142 |
if (show_soname) xstrcat(&out_format, "%S ", &fmt_len); |
| 2143 |
if (show_textrels) xstrcat(&out_format, "%T ", &fmt_len); |
| 2144 |
if (find_sym) xstrcat(&out_format, "%s ", &fmt_len); |
| 2145 |
if (find_section) xstrcat(&out_format, "%k ", &fmt_len); |
| 2146 |
if (find_lib) xstrcat(&out_format, "%N ", &fmt_len); |
| 2147 |
if (!be_quiet) xstrcat(&out_format, "%F ", &fmt_len); |
| 2148 |
} |
| 2149 |
if (be_verbose > 2) printf("Format: %s\n", out_format); |
| 2150 |
|
| 2151 |
/* now lets actually do the scanning */ |
| 2152 |
if (scan_ldpath || use_ldcache) |
| 2153 |
load_ld_cache_config(0, __PAX_UTILS_DEFAULT_LD_CACHE_CONFIG); |
| 2154 |
if (scan_ldpath) scanelf_ldpath(); |
| 2155 |
if (scan_envpath) scanelf_envpath(); |
| 2156 |
if (!from_file && optind == argc && ttyname(0) == NULL && !scan_ldpath && !scan_envpath) |
| 2157 |
from_file = "-"; |
| 2158 |
if (from_file) { |
| 2159 |
scanelf_from_file(from_file); |
| 2160 |
from_file = *argv; |
| 2161 |
} |
| 2162 |
if (optind == argc && !scan_ldpath && !scan_envpath && !from_file) |
| 2163 |
err("Nothing to scan !?"); |
| 2164 |
while (optind < argc) { |
| 2165 |
search_path = argv[optind++]; |
| 2166 |
ret = scanelf_dir(search_path); |
| 2167 |
} |
| 2168 |
|
| 2169 |
/* clean up */ |
| 2170 |
xarrayfree(ldpaths); |
| 2171 |
xarrayfree(find_lib_arr); |
| 2172 |
xarrayfree(find_section_arr); |
| 2173 |
free(find_lib); |
| 2174 |
free(find_section); |
| 2175 |
|
| 2176 |
if (ldcache != 0) |
| 2177 |
munmap(ldcache, ldcache_size); |
| 2178 |
return ret; |
| 2179 |
} |
| 2180 |
|
| 2181 |
static char **get_split_env(const char *envvar) |
| 2182 |
{ |
| 2183 |
const char *delims = " \t\n"; |
| 2184 |
char **envvals = NULL; |
| 2185 |
char *env, *s; |
| 2186 |
int nentry; |
| 2187 |
|
| 2188 |
if ((env = getenv(envvar)) == NULL) |
| 2189 |
return NULL; |
| 2190 |
|
| 2191 |
env = xstrdup(env); |
| 2192 |
if (env == NULL) |
| 2193 |
return NULL; |
| 2194 |
|
| 2195 |
s = strtok(env, delims); |
| 2196 |
if (s == NULL) { |
| 2197 |
free(env); |
| 2198 |
return NULL; |
| 2199 |
} |
| 2200 |
|
| 2201 |
nentry = 0; |
| 2202 |
while (s != NULL) { |
| 2203 |
++nentry; |
| 2204 |
envvals = xrealloc(envvals, sizeof(*envvals) * (nentry+1)); |
| 2205 |
envvals[nentry-1] = s; |
| 2206 |
s = strtok(NULL, delims); |
| 2207 |
} |
| 2208 |
envvals[nentry] = NULL; |
| 2209 |
|
| 2210 |
/* don't want to free(env) as it contains the memory that backs |
| 2211 |
* the envvals array of strings */ |
| 2212 |
return envvals; |
| 2213 |
} |
| 2214 |
|
| 2215 |
static void parseenv(void) |
| 2216 |
{ |
| 2217 |
color_init(false); |
| 2218 |
qa_textrels = get_split_env("QA_TEXTRELS"); |
| 2219 |
qa_execstack = get_split_env("QA_EXECSTACK"); |
| 2220 |
qa_wx_load = get_split_env("QA_WX_LOAD"); |
| 2221 |
} |
| 2222 |
|
| 2223 |
#ifdef __PAX_UTILS_CLEANUP |
| 2224 |
static void cleanup(void) |
| 2225 |
{ |
| 2226 |
free(out_format); |
| 2227 |
free(qa_textrels); |
| 2228 |
free(qa_execstack); |
| 2229 |
free(qa_wx_load); |
| 2230 |
} |
| 2231 |
#endif |
| 2232 |
|
| 2233 |
int main(int argc, char *argv[]) |
| 2234 |
{ |
| 2235 |
int ret; |
| 2236 |
if (argc < 2) |
| 2237 |
usage(EXIT_FAILURE); |
| 2238 |
parseenv(); |
| 2239 |
ret = parseargs(argc, argv); |
| 2240 |
fclose(stdout); |
| 2241 |
#ifdef __PAX_UTILS_CLEANUP |
| 2242 |
cleanup(); |
| 2243 |
warn("The calls to add/delete heap should be off:\n" |
| 2244 |
"\t- 1 due to the out_buffer not being freed in scanelf_fileat()\n" |
| 2245 |
"\t- 1 per QA_TEXTRELS/QA_EXECSTACK/QA_WX_LOAD"); |
| 2246 |
#endif |
| 2247 |
return ret; |
| 2248 |
} |
| 2249 |
|
| 2250 |
/* Match filename against entries in matchlist, return TRUE |
| 2251 |
* if the file is listed */ |
| 2252 |
static int file_matches_list(const char *filename, char **matchlist) |
| 2253 |
{ |
| 2254 |
char **file; |
| 2255 |
char *match; |
| 2256 |
char buf[__PAX_UTILS_PATH_MAX]; |
| 2257 |
|
| 2258 |
if (matchlist == NULL) |
| 2259 |
return 0; |
| 2260 |
|
| 2261 |
for (file = matchlist; *file != NULL; file++) { |
| 2262 |
if (search_path) { |
| 2263 |
snprintf(buf, sizeof(buf), "%s%s", search_path, *file); |
| 2264 |
match = buf; |
| 2265 |
} else { |
| 2266 |
match = *file; |
| 2267 |
} |
| 2268 |
if (fnmatch(match, filename, 0) == 0) |
| 2269 |
return 1; |
| 2270 |
} |
| 2271 |
return 0; |
| 2272 |
} |
Parent Directory
| 
Revision Log