xref: /freebsd/sys/kern/link_elf.c (revision 4cf49a43559ed9fdad601bdcccd2c55963008675)
1 /*-
2  * Copyright (c) 1998 Doug Rabson
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  * $FreeBSD$
27  */
28 
29 #include <sys/param.h>
30 #include <sys/kernel.h>
31 #include <sys/systm.h>
32 #include <sys/malloc.h>
33 #include <sys/proc.h>
34 #include <sys/namei.h>
35 #include <sys/fcntl.h>
36 #include <sys/vnode.h>
37 #include <sys/linker.h>
38 #include <machine/elf.h>
39 
40 #include <vm/vm.h>
41 #ifdef SPARSE_MAPPING
42 #include <vm/vm_prot.h>
43 #endif
44 #include <vm/vm_param.h>
45 #include <sys/lock.h>
46 #ifdef SPARSE_MAPPING
47 #include <vm/vm_object.h>
48 #include <vm/vm_kern.h>
49 #include <vm/vm_extern.h>
50 #endif
51 #include <vm/pmap.h>
52 #include <vm/vm_map.h>
53 
54 static int	link_elf_load_module(const char*, linker_file_t*);
55 static int	link_elf_load_file(const char*, linker_file_t*);
56 static int	link_elf_lookup_symbol(linker_file_t, const char*,
57 				       c_linker_sym_t*);
58 static int	link_elf_symbol_values(linker_file_t, c_linker_sym_t, linker_symval_t*);
59 static int	link_elf_search_symbol(linker_file_t, caddr_t value,
60 				       c_linker_sym_t* sym, long* diffp);
61 
62 static void	link_elf_unload_file(linker_file_t);
63 static void	link_elf_unload_module(linker_file_t);
64 
65 static struct linker_class_ops link_elf_class_ops = {
66     link_elf_load_module,
67 };
68 
69 static struct linker_file_ops link_elf_file_ops = {
70     link_elf_lookup_symbol,
71     link_elf_symbol_values,
72     link_elf_search_symbol,
73     link_elf_unload_file,
74 };
75 
76 static struct linker_file_ops link_elf_module_ops = {
77     link_elf_lookup_symbol,
78     link_elf_symbol_values,
79     link_elf_search_symbol,
80     link_elf_unload_module,
81 };
82 typedef struct elf_file {
83     caddr_t		address;	/* Relocation address */
84 #ifdef SPARSE_MAPPING
85     vm_object_t		object;		/* VM object to hold file pages */
86 #endif
87     const Elf_Dyn*	dynamic;	/* Symbol table etc. */
88     Elf_Off		nbuckets;	/* DT_HASH info */
89     Elf_Off		nchains;
90     const Elf_Off*	buckets;
91     const Elf_Off*	chains;
92     caddr_t		hash;
93     caddr_t		strtab;		/* DT_STRTAB */
94     int			strsz;		/* DT_STRSZ */
95     const Elf_Sym*	symtab;		/* DT_SYMTAB */
96     Elf_Addr*		got;		/* DT_PLTGOT */
97     const Elf_Rel*	pltrel;		/* DT_JMPREL */
98     int			pltrelsize;	/* DT_PLTRELSZ */
99     const Elf_Rela*	pltrela;	/* DT_JMPREL */
100     int			pltrelasize;	/* DT_PLTRELSZ */
101     const Elf_Rel*	rel;		/* DT_REL */
102     int			relsize;	/* DT_RELSZ */
103     const Elf_Rela*	rela;		/* DT_RELA */
104     int			relasize;	/* DT_RELASZ */
105     caddr_t		modptr;
106     const Elf_Sym*	ddbsymtab;	/* The symbol table we are using */
107     long		ddbsymcnt;	/* Number of symbols */
108     caddr_t		ddbstrtab;	/* String table */
109     long		ddbstrcnt;	/* number of bytes in string table */
110     caddr_t		symbase;	/* malloc'ed symbold base */
111     caddr_t		strbase;	/* malloc'ed string base */
112 } *elf_file_t;
113 
114 static int		parse_dynamic(linker_file_t lf);
115 static int		load_dependancies(linker_file_t lf);
116 static int		relocate_file(linker_file_t lf);
117 static int		parse_module_symbols(linker_file_t lf);
118 
119 /*
120  * The kernel symbol table starts here.
121  */
122 extern struct _dynamic _DYNAMIC;
123 
124 static void
125 link_elf_init(void* arg)
126 {
127 #ifdef __ELF__
128     Elf_Dyn	*dp;
129     caddr_t	modptr, baseptr, sizeptr;
130     elf_file_t	ef;
131     char	*modname;
132 #endif
133 
134 #if ELF_TARG_CLASS == ELFCLASS32
135     linker_add_class("elf32", NULL, &link_elf_class_ops);
136 #else
137     linker_add_class("elf64", NULL, &link_elf_class_ops);
138 #endif
139 
140 #ifdef __ELF__
141     dp = (Elf_Dyn*) &_DYNAMIC;
142     if (dp) {
143 	ef = malloc(sizeof(struct elf_file), M_LINKER, M_NOWAIT);
144 	if (ef == NULL)
145 	    panic("link_elf_init: Can't create linker structures for kernel");
146 	bzero(ef, sizeof(*ef));
147 
148 	ef->address = 0;
149 #ifdef SPARSE_MAPPING
150 	ef->object = 0;
151 #endif
152 	ef->dynamic = dp;
153 	modname = NULL;
154 	modptr = preload_search_by_type("elf kernel");
155 	if (modptr)
156 	    modname = (char *)preload_search_info(modptr, MODINFO_NAME);
157 	if (modname == NULL)
158 	    modname = "kernel";
159 	linker_kernel_file = linker_make_file(modname, ef, &link_elf_file_ops);
160 	if (linker_kernel_file == NULL)
161 	    panic("link_elf_init: Can't create linker structures for kernel");
162 	parse_dynamic(linker_kernel_file);
163 	linker_kernel_file->address = (caddr_t) KERNBASE;
164 	linker_kernel_file->size = -(intptr_t)linker_kernel_file->address;
165 
166 	if (modptr) {
167 	    ef->modptr = modptr;
168 	    baseptr = preload_search_info(modptr, MODINFO_ADDR);
169 	    if (baseptr)
170 		linker_kernel_file->address = *(caddr_t *)baseptr;
171 	    sizeptr = preload_search_info(modptr, MODINFO_SIZE);
172 	    if (sizeptr)
173 		linker_kernel_file->size = *(size_t *)sizeptr;
174 	}
175 	(void)parse_module_symbols(linker_kernel_file);
176 	linker_current_file = linker_kernel_file;
177 	linker_kernel_file->flags |= LINKER_FILE_LINKED;
178     }
179 #endif
180 }
181 
182 SYSINIT(link_elf, SI_SUB_KLD, SI_ORDER_SECOND, link_elf_init, 0);
183 
184 static int
185 parse_module_symbols(linker_file_t lf)
186 {
187     elf_file_t ef = lf->priv;
188     caddr_t	pointer;
189     caddr_t	ssym, esym, base;
190     caddr_t	strtab;
191     int		strcnt;
192     Elf_Sym*	symtab;
193     int		symcnt;
194 
195     if (ef->modptr == NULL)
196 	return 0;
197     pointer = preload_search_info(ef->modptr, MODINFO_METADATA|MODINFOMD_SSYM);
198     if (pointer == NULL)
199 	return 0;
200     ssym = *(caddr_t *)pointer;
201     pointer = preload_search_info(ef->modptr, MODINFO_METADATA|MODINFOMD_ESYM);
202     if (pointer == NULL)
203 	return 0;
204     esym = *(caddr_t *)pointer;
205 
206     base = ssym;
207 
208     symcnt = *(long *)base;
209     base += sizeof(long);
210     symtab = (Elf_Sym *)base;
211     base += roundup(symcnt, sizeof(long));
212 
213     if (base > esym || base < ssym) {
214 	printf("Symbols are corrupt!\n");
215 	return EINVAL;
216     }
217 
218     strcnt = *(long *)base;
219     base += sizeof(long);
220     strtab = base;
221     base += roundup(strcnt, sizeof(long));
222 
223     if (base > esym || base < ssym) {
224 	printf("Symbols are corrupt!\n");
225 	return EINVAL;
226     }
227 
228     ef->ddbsymtab = symtab;
229     ef->ddbsymcnt = symcnt / sizeof(Elf_Sym);
230     ef->ddbstrtab = strtab;
231     ef->ddbstrcnt = strcnt;
232 
233     return 0;
234 }
235 
236 static int
237 parse_dynamic(linker_file_t lf)
238 {
239     elf_file_t ef = lf->priv;
240     const Elf_Dyn *dp;
241     int plttype = DT_REL;
242 
243     for (dp = ef->dynamic; dp->d_tag != DT_NULL; dp++) {
244 	switch (dp->d_tag) {
245 	case DT_HASH:
246 	{
247 	    /* From src/libexec/rtld-elf/rtld.c */
248 	    const Elf_Off *hashtab = (const Elf_Off *)
249 		(ef->address + dp->d_un.d_ptr);
250 	    ef->nbuckets = hashtab[0];
251 	    ef->nchains = hashtab[1];
252 	    ef->buckets = hashtab + 2;
253 	    ef->chains = ef->buckets + ef->nbuckets;
254 	    break;
255 	}
256 	case DT_STRTAB:
257 	    ef->strtab = (caddr_t) (ef->address + dp->d_un.d_ptr);
258 	    break;
259 	case DT_STRSZ:
260 	    ef->strsz = dp->d_un.d_val;
261 	    break;
262 	case DT_SYMTAB:
263 	    ef->symtab = (Elf_Sym*) (ef->address + dp->d_un.d_ptr);
264 	    break;
265 	case DT_SYMENT:
266 	    if (dp->d_un.d_val != sizeof(Elf_Sym))
267 		return ENOEXEC;
268 	    break;
269 	case DT_PLTGOT:
270 	    ef->got = (Elf_Addr *) (ef->address + dp->d_un.d_ptr);
271 	    break;
272 	case DT_REL:
273 	    ef->rel = (const Elf_Rel *) (ef->address + dp->d_un.d_ptr);
274 	    break;
275 	case DT_RELSZ:
276 	    ef->relsize = dp->d_un.d_val;
277 	    break;
278 	case DT_RELENT:
279 	    if (dp->d_un.d_val != sizeof(Elf_Rel))
280 		return ENOEXEC;
281 	    break;
282 	case DT_JMPREL:
283 	    ef->pltrel = (const Elf_Rel *) (ef->address + dp->d_un.d_ptr);
284 	    break;
285 	case DT_PLTRELSZ:
286 	    ef->pltrelsize = dp->d_un.d_val;
287 	    break;
288 	case DT_RELA:
289 	    ef->rela = (const Elf_Rela *) (ef->address + dp->d_un.d_ptr);
290 	    break;
291 	case DT_RELASZ:
292 	    ef->relasize = dp->d_un.d_val;
293 	    break;
294 	case DT_RELAENT:
295 	    if (dp->d_un.d_val != sizeof(Elf_Rela))
296 		return ENOEXEC;
297 	    break;
298 	case DT_PLTREL:
299 	    plttype = dp->d_un.d_val;
300 	    if (plttype != DT_REL && plttype != DT_RELA)
301 		return ENOEXEC;
302 	    break;
303 	}
304     }
305 
306     if (plttype == DT_RELA) {
307 	ef->pltrela = (const Elf_Rela *) ef->pltrel;
308 	ef->pltrel = NULL;
309 	ef->pltrelasize = ef->pltrelsize;
310 	ef->pltrelsize = 0;
311     }
312 
313     ef->ddbsymtab = ef->symtab;
314     ef->ddbsymcnt = ef->nchains;
315     ef->ddbstrtab = ef->strtab;
316     ef->ddbstrcnt = ef->strsz;
317 
318     return 0;
319 }
320 
321 static void
322 link_elf_error(const char *s)
323 {
324     printf("kldload: %s\n", s);
325 }
326 
327 static int
328 link_elf_load_module(const char *filename, linker_file_t *result)
329 {
330     caddr_t		modptr, baseptr, sizeptr, dynptr;
331     char		*type;
332     elf_file_t		ef;
333     linker_file_t	lf;
334     int			error;
335     vm_offset_t		dp;
336 
337     /* Look to see if we have the module preloaded */
338     modptr = preload_search_by_name(filename);
339     if (modptr == NULL)
340 	return (link_elf_load_file(filename, result));
341 
342     /* It's preloaded, check we can handle it and collect information */
343     type = (char *)preload_search_info(modptr, MODINFO_TYPE);
344     baseptr = preload_search_info(modptr, MODINFO_ADDR);
345     sizeptr = preload_search_info(modptr, MODINFO_SIZE);
346     dynptr = preload_search_info(modptr, MODINFO_METADATA|MODINFOMD_DYNAMIC);
347     if (type == NULL || strcmp(type, "elf module") != 0)
348 	return (EFTYPE);
349     if (baseptr == NULL || sizeptr == NULL || dynptr == NULL)
350 	return (EINVAL);
351 
352     ef = malloc(sizeof(struct elf_file), M_LINKER, M_WAITOK);
353     if (ef == NULL)
354 	return (ENOMEM);
355     bzero(ef, sizeof(*ef));
356     ef->modptr = modptr;
357     ef->address = *(caddr_t *)baseptr;
358 #ifdef SPARSE_MAPPING
359     ef->object = 0;
360 #endif
361     dp = (vm_offset_t)ef->address + *(vm_offset_t *)dynptr;
362     ef->dynamic = (Elf_Dyn *)dp;
363     lf = linker_make_file(filename, ef, &link_elf_module_ops);
364     if (lf == NULL) {
365 	free(ef, M_LINKER);
366 	return ENOMEM;
367     }
368     lf->address = ef->address;
369     lf->size = *(size_t *)sizeptr;
370 
371     error = parse_dynamic(lf);
372     if (error) {
373 	linker_file_unload(lf);
374 	return error;
375     }
376     error = load_dependancies(lf);
377     if (error) {
378 	linker_file_unload(lf);
379 	return error;
380     }
381     error = relocate_file(lf);
382     if (error) {
383 	linker_file_unload(lf);
384 	return error;
385     }
386     (void)parse_module_symbols(lf);
387     lf->flags |= LINKER_FILE_LINKED;
388     *result = lf;
389     return (0);
390 }
391 
392 static int
393 link_elf_load_file(const char* filename, linker_file_t* result)
394 {
395     struct nameidata nd;
396     struct proc* p = curproc;	/* XXX */
397     Elf_Ehdr *hdr;
398     caddr_t firstpage;
399     int nbytes, i;
400     Elf_Phdr *phdr;
401     Elf_Phdr *phlimit;
402     Elf_Phdr *segs[2];
403     int nsegs;
404     Elf_Phdr *phdyn;
405     Elf_Phdr *phphdr;
406     caddr_t mapbase;
407     size_t mapsize;
408     Elf_Off base_offset;
409     Elf_Addr base_vaddr;
410     Elf_Addr base_vlimit;
411     int error = 0;
412     int resid;
413     elf_file_t ef;
414     linker_file_t lf;
415     char *pathname;
416     Elf_Shdr *shdr;
417     int symtabindex;
418     int symstrindex;
419     int symcnt;
420     int strcnt;
421 
422     shdr = NULL;
423     lf = NULL;
424 
425     pathname = linker_search_path(filename);
426     if (pathname == NULL)
427 	return ENOENT;
428 
429     NDINIT(&nd, LOOKUP, FOLLOW, UIO_SYSSPACE, pathname, p);
430     error = vn_open(&nd, FREAD, 0);
431     free(pathname, M_LINKER);
432     if (error)
433 	return error;
434 
435     /*
436      * Read the elf header from the file.
437      */
438     firstpage = malloc(PAGE_SIZE, M_LINKER, M_WAITOK);
439     if (firstpage == NULL) {
440 	error = ENOMEM;
441 	goto out;
442     }
443     hdr = (Elf_Ehdr *)firstpage;
444     error = vn_rdwr(UIO_READ, nd.ni_vp, firstpage, PAGE_SIZE, 0,
445 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
446     nbytes = PAGE_SIZE - resid;
447     if (error)
448 	goto out;
449 
450     if (!IS_ELF(*hdr)) {
451 	error = ENOEXEC;
452 	goto out;
453     }
454 
455     if (hdr->e_ident[EI_CLASS] != ELF_TARG_CLASS
456       || hdr->e_ident[EI_DATA] != ELF_TARG_DATA) {
457 	link_elf_error("Unsupported file layout");
458 	error = ENOEXEC;
459 	goto out;
460     }
461     if (hdr->e_ident[EI_VERSION] != EV_CURRENT
462       || hdr->e_version != EV_CURRENT) {
463 	link_elf_error("Unsupported file version");
464 	error = ENOEXEC;
465 	goto out;
466     }
467     if (hdr->e_type != ET_EXEC && hdr->e_type != ET_DYN) {
468 	link_elf_error("Unsupported file type");
469 	error = ENOEXEC;
470 	goto out;
471     }
472     if (hdr->e_machine != ELF_TARG_MACH) {
473 	link_elf_error("Unsupported machine");
474 	error = ENOEXEC;
475 	goto out;
476     }
477 
478     /*
479      * We rely on the program header being in the first page.  This is
480      * not strictly required by the ABI specification, but it seems to
481      * always true in practice.  And, it simplifies things considerably.
482      */
483     if (!((hdr->e_phentsize == sizeof(Elf_Phdr)) &&
484 	  (hdr->e_phoff + hdr->e_phnum*sizeof(Elf_Phdr) <= PAGE_SIZE) &&
485 	  (hdr->e_phoff + hdr->e_phnum*sizeof(Elf_Phdr) <= nbytes)))
486 	link_elf_error("Unreadable program headers");
487 
488     /*
489      * Scan the program header entries, and save key information.
490      *
491      * We rely on there being exactly two load segments, text and data,
492      * in that order.
493      */
494     phdr = (Elf_Phdr *) (firstpage + hdr->e_phoff);
495     phlimit = phdr + hdr->e_phnum;
496     nsegs = 0;
497     phdyn = NULL;
498     phphdr = NULL;
499     while (phdr < phlimit) {
500 	switch (phdr->p_type) {
501 
502 	case PT_LOAD:
503 	    if (nsegs == 2) {
504 		link_elf_error("Too many sections");
505 		error = ENOEXEC;
506 		goto out;
507 	    }
508 	    segs[nsegs] = phdr;
509 	    ++nsegs;
510 	    break;
511 
512 	case PT_PHDR:
513 	    phphdr = phdr;
514 	    break;
515 
516 	case PT_DYNAMIC:
517 	    phdyn = phdr;
518 	    break;
519 	}
520 
521 	++phdr;
522     }
523     if (phdyn == NULL) {
524 	link_elf_error("Object is not dynamically-linked");
525 	error = ENOEXEC;
526 	goto out;
527     }
528 
529     /*
530      * Allocate the entire address space of the object, to stake out our
531      * contiguous region, and to establish the base address for relocation.
532      */
533     base_offset = trunc_page(segs[0]->p_offset);
534     base_vaddr = trunc_page(segs[0]->p_vaddr);
535     base_vlimit = round_page(segs[1]->p_vaddr + segs[1]->p_memsz);
536     mapsize = base_vlimit - base_vaddr;
537 
538     ef = malloc(sizeof(struct elf_file), M_LINKER, M_WAITOK);
539     bzero(ef, sizeof(*ef));
540 #ifdef SPARSE_MAPPING
541     ef->object = vm_object_allocate(OBJT_DEFAULT, mapsize >> PAGE_SHIFT);
542     if (ef->object == NULL) {
543 	free(ef, M_LINKER);
544 	error = ENOMEM;
545 	goto out;
546     }
547     vm_object_reference(ef->object);
548     ef->address = (caddr_t) vm_map_min(kernel_map);
549     error = vm_map_find(kernel_map, ef->object, 0,
550 			(vm_offset_t *) &ef->address,
551 			mapsize, 1,
552 			VM_PROT_ALL, VM_PROT_ALL, 0);
553     if (error) {
554 	vm_object_deallocate(ef->object);
555 	free(ef, M_LINKER);
556 	goto out;
557     }
558 #else
559     ef->address = malloc(mapsize, M_LINKER, M_WAITOK);
560 #endif
561     mapbase = ef->address;
562 
563     /*
564      * Read the text and data sections and zero the bss.
565      */
566     for (i = 0; i < 2; i++) {
567 	caddr_t segbase = mapbase + segs[i]->p_vaddr - base_vaddr;
568 	error = vn_rdwr(UIO_READ, nd.ni_vp,
569 			segbase, segs[i]->p_filesz, segs[i]->p_offset,
570 			UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
571 	if (error) {
572 #ifdef SPARSE_MAPPING
573 	    vm_map_remove(kernel_map, (vm_offset_t) ef->address,
574 			  (vm_offset_t) ef->address
575 			  + (ef->object->size << PAGE_SHIFT));
576 	    vm_object_deallocate(ef->object);
577 #else
578 	    free(ef->address, M_LINKER);
579 #endif
580 	    free(ef, M_LINKER);
581 	    goto out;
582 	}
583 	bzero(segbase + segs[i]->p_filesz,
584 	      segs[i]->p_memsz - segs[i]->p_filesz);
585 
586 #ifdef SPARSE_MAPPING
587 	/*
588 	 * Wire down the pages
589 	 */
590 	vm_map_pageable(kernel_map,
591 			(vm_offset_t) segbase,
592 			(vm_offset_t) segbase + segs[i]->p_memsz,
593 			FALSE);
594 #endif
595     }
596 
597     ef->dynamic = (const Elf_Dyn *) (mapbase + phdyn->p_vaddr - base_vaddr);
598 
599     lf = linker_make_file(filename, ef, &link_elf_file_ops);
600     if (lf == NULL) {
601 #ifdef SPARSE_MAPPING
602 	vm_map_remove(kernel_map, (vm_offset_t) ef->address,
603 		      (vm_offset_t) ef->address
604 		      + (ef->object->size << PAGE_SHIFT));
605 	vm_object_deallocate(ef->object);
606 #else
607 	free(ef->address, M_LINKER);
608 #endif
609 	free(ef, M_LINKER);
610 	error = ENOMEM;
611 	goto out;
612     }
613     lf->address = ef->address;
614     lf->size = mapsize;
615 
616     error = parse_dynamic(lf);
617     if (error)
618 	goto out;
619     error = load_dependancies(lf);
620     if (error)
621 	goto out;
622     error = relocate_file(lf);
623     if (error)
624 	goto out;
625 
626     /* Try and load the symbol table if it's present.  (you can strip it!) */
627     nbytes = hdr->e_shnum * hdr->e_shentsize;
628     if (nbytes == 0 || hdr->e_shoff == 0)
629 	goto nosyms;
630     shdr = malloc(nbytes, M_LINKER, M_WAITOK);
631     if (shdr == NULL) {
632 	error = ENOMEM;
633 	goto out;
634     }
635     bzero(shdr, nbytes);
636     error = vn_rdwr(UIO_READ, nd.ni_vp,
637 		    (caddr_t)shdr, nbytes, hdr->e_shoff,
638 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
639     if (error)
640 	goto out;
641     symtabindex = -1;
642     symstrindex = -1;
643     for (i = 0; i < hdr->e_shnum; i++) {
644 	if (shdr[i].sh_type == SHT_SYMTAB) {
645 	    symtabindex = i;
646 	    symstrindex = shdr[i].sh_link;
647 	}
648     }
649     if (symtabindex < 0 || symstrindex < 0)
650 	goto nosyms;
651 
652     symcnt = shdr[symtabindex].sh_size;
653     ef->symbase = malloc(symcnt, M_LINKER, M_WAITOK);
654     strcnt = shdr[symstrindex].sh_size;
655     ef->strbase = malloc(strcnt, M_LINKER, M_WAITOK);
656 
657     if (ef->symbase == NULL || ef->strbase == NULL) {
658 	error = ENOMEM;
659 	goto out;
660     }
661     error = vn_rdwr(UIO_READ, nd.ni_vp,
662 		    ef->symbase, symcnt, shdr[symtabindex].sh_offset,
663 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
664     if (error)
665 	goto out;
666     error = vn_rdwr(UIO_READ, nd.ni_vp,
667 		    ef->strbase, strcnt, shdr[symstrindex].sh_offset,
668 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
669     if (error)
670 	goto out;
671 
672     ef->ddbsymcnt = symcnt / sizeof(Elf_Sym);
673     ef->ddbsymtab = (const Elf_Sym *)ef->symbase;
674     ef->ddbstrcnt = strcnt;
675     ef->ddbstrtab = ef->strbase;
676 
677     lf->flags |= LINKER_FILE_LINKED;
678 
679 nosyms:
680 
681     *result = lf;
682 
683 out:
684     if (error && lf)
685 	linker_file_unload(lf);
686     if (shdr)
687 	free(shdr, M_LINKER);
688     if (firstpage)
689 	free(firstpage, M_LINKER);
690     VOP_UNLOCK(nd.ni_vp, 0, p);
691     vn_close(nd.ni_vp, FREAD, p->p_ucred, p);
692 
693     return error;
694 }
695 
696 static void
697 link_elf_unload_file(linker_file_t file)
698 {
699     elf_file_t ef = file->priv;
700 
701     if (ef) {
702 #ifdef SPARSE_MAPPING
703 	if (ef->object) {
704 	    vm_map_remove(kernel_map, (vm_offset_t) ef->address,
705 			  (vm_offset_t) ef->address
706 			  + (ef->object->size << PAGE_SHIFT));
707 	    vm_object_deallocate(ef->object);
708 	}
709 #else
710 	if (ef->address)
711 	    free(ef->address, M_LINKER);
712 #endif
713 	if (ef->symbase)
714 	    free(ef->symbase, M_LINKER);
715 	if (ef->strbase)
716 	    free(ef->strbase, M_LINKER);
717 	free(ef, M_LINKER);
718     }
719 }
720 
721 static void
722 link_elf_unload_module(linker_file_t file)
723 {
724     elf_file_t ef = file->priv;
725 
726     if (ef)
727 	free(ef, M_LINKER);
728     if (file->filename)
729 	preload_delete_name(file->filename);
730 }
731 
732 static int
733 load_dependancies(linker_file_t lf)
734 {
735     elf_file_t ef = lf->priv;
736     linker_file_t lfdep;
737     char* name;
738     const Elf_Dyn *dp;
739     int error = 0;
740 
741     /*
742      * All files are dependant on /kernel.
743      */
744     if (linker_kernel_file) {
745 	linker_kernel_file->refs++;
746 	linker_file_add_dependancy(lf, linker_kernel_file);
747     }
748 
749     for (dp = ef->dynamic; dp->d_tag != DT_NULL; dp++) {
750 	if (dp->d_tag == DT_NEEDED) {
751 	    name = ef->strtab + dp->d_un.d_val;
752 
753 	    error = linker_load_file(name, &lfdep);
754 	    if (error)
755 		goto out;
756 	    error = linker_file_add_dependancy(lf, lfdep);
757 	    if (error)
758 		goto out;
759 	}
760     }
761 
762 out:
763     return error;
764 }
765 
766 static const char *
767 symbol_name(elf_file_t ef, Elf_Word r_info)
768 {
769     const Elf_Sym *ref;
770 
771     if (ELF_R_SYM(r_info)) {
772 	ref = ef->symtab + ELF_R_SYM(r_info);
773 	return ef->strtab + ref->st_name;
774     } else
775 	return NULL;
776 }
777 
778 static int
779 relocate_file(linker_file_t lf)
780 {
781     elf_file_t ef = lf->priv;
782     const Elf_Rel *rellim;
783     const Elf_Rel *rel;
784     const Elf_Rela *relalim;
785     const Elf_Rela *rela;
786     const char *symname;
787 
788     /* Perform relocations without addend if there are any: */
789     rel = ef->rel;
790     if (rel) {
791 	rellim = (const Elf_Rel *)((const char *)ef->rel + ef->relsize);
792 	while (rel < rellim) {
793 	    symname = symbol_name(ef, rel->r_info);
794 	    if (elf_reloc(lf, rel, ELF_RELOC_REL, symname)) {
795 		printf("link_elf: symbol %s undefined\n", symname);
796 		return ENOENT;
797 	    }
798 	    rel++;
799 	}
800     }
801 
802     /* Perform relocations with addend if there are any: */
803     rela = ef->rela;
804     if (rela) {
805 	relalim = (const Elf_Rela *)((const char *)ef->rela + ef->relasize);
806 	while (rela < relalim) {
807 	    symname = symbol_name(ef, rela->r_info);
808 	    if (elf_reloc(lf, rela, ELF_RELOC_RELA, symname)) {
809 		printf("link_elf: symbol %s undefined\n", symname);
810 		return ENOENT;
811 	    }
812 	    rela++;
813 	}
814     }
815 
816     /* Perform PLT relocations without addend if there are any: */
817     rel = ef->pltrel;
818     if (rel) {
819 	rellim = (const Elf_Rel *)((const char *)ef->pltrel + ef->pltrelsize);
820 	while (rel < rellim) {
821 	    symname = symbol_name(ef, rel->r_info);
822 	    if (elf_reloc(lf, rel, ELF_RELOC_REL, symname)) {
823 		printf("link_elf: symbol %s undefined\n", symname);
824 		return ENOENT;
825 	    }
826 	    rel++;
827 	}
828     }
829 
830     /* Perform relocations with addend if there are any: */
831     rela = ef->pltrela;
832     if (rela) {
833 	relalim = (const Elf_Rela *)((const char *)ef->pltrela + ef->pltrelasize);
834 	while (rela < relalim) {
835 	    symname = symbol_name(ef, rela->r_info);
836 	    if (elf_reloc(lf, rela, ELF_RELOC_RELA, symname)) {
837 		printf("link_elf: symbol %s undefined\n", symname);
838 		return ENOENT;
839 	    }
840 	    rela++;
841 	}
842     }
843 
844     return 0;
845 }
846 
847 /*
848  * Hash function for symbol table lookup.  Don't even think about changing
849  * this.  It is specified by the System V ABI.
850  */
851 static unsigned long
852 elf_hash(const char *name)
853 {
854     const unsigned char *p = (const unsigned char *) name;
855     unsigned long h = 0;
856     unsigned long g;
857 
858     while (*p != '\0') {
859 	h = (h << 4) + *p++;
860 	if ((g = h & 0xf0000000) != 0)
861 	    h ^= g >> 24;
862 	h &= ~g;
863     }
864     return h;
865 }
866 
867 int
868 link_elf_lookup_symbol(linker_file_t lf, const char* name, c_linker_sym_t* sym)
869 {
870     elf_file_t ef = lf->priv;
871     unsigned long symnum;
872     const Elf_Sym* symp;
873     const char *strp;
874     unsigned long hash;
875     int i;
876 
877     /* First, search hashed global symbols */
878     hash = elf_hash(name);
879     symnum = ef->buckets[hash % ef->nbuckets];
880 
881     while (symnum != STN_UNDEF) {
882 	if (symnum >= ef->nchains) {
883 	    printf("link_elf_lookup_symbol: corrupt symbol table\n");
884 	    return ENOENT;
885 	}
886 
887 	symp = ef->symtab + symnum;
888 	if (symp->st_name == 0) {
889 	    printf("link_elf_lookup_symbol: corrupt symbol table\n");
890 	    return ENOENT;
891 	}
892 
893 	strp = ef->strtab + symp->st_name;
894 
895 	if (strcmp(name, strp) == 0) {
896 	    if (symp->st_shndx != SHN_UNDEF ||
897 		(symp->st_value != 0 &&
898 		 ELF_ST_TYPE(symp->st_info) == STT_FUNC)) {
899 		*sym = (c_linker_sym_t) symp;
900 		return 0;
901 	    } else
902 		return ENOENT;
903 	}
904 
905 	symnum = ef->chains[symnum];
906     }
907 
908     /* If we have not found it, look at the full table (if loaded) */
909     if (ef->symtab == ef->ddbsymtab)
910 	return ENOENT;
911 
912     /* Exhaustive search */
913     for (i = 0, symp = ef->ddbsymtab; i < ef->ddbsymcnt; i++, symp++) {
914 	strp = ef->ddbstrtab + symp->st_name;
915 	if (strcmp(name, strp) == 0) {
916 	    if (symp->st_shndx != SHN_UNDEF ||
917 		(symp->st_value != 0 &&
918 		 ELF_ST_TYPE(symp->st_info) == STT_FUNC)) {
919 		*sym = (c_linker_sym_t) symp;
920 		return 0;
921 	    } else
922 		return ENOENT;
923 	}
924     }
925 
926     return ENOENT;
927 }
928 
929 static int
930 link_elf_symbol_values(linker_file_t lf, c_linker_sym_t sym, linker_symval_t* symval)
931 {
932 	elf_file_t ef = lf->priv;
933 	const Elf_Sym* es = (const Elf_Sym*) sym;
934 
935 	if (es >= ef->symtab && ((es - ef->symtab) < ef->nchains)) {
936 	    symval->name = ef->strtab + es->st_name;
937 	    symval->value = (caddr_t) ef->address + es->st_value;
938 	    symval->size = es->st_size;
939 	    return 0;
940 	}
941 	if (ef->symtab == ef->ddbsymtab)
942 	    return ENOENT;
943 	if (es >= ef->ddbsymtab && ((es - ef->ddbsymtab) < ef->ddbsymcnt)) {
944 	    symval->name = ef->ddbstrtab + es->st_name;
945 	    symval->value = (caddr_t) ef->address + es->st_value;
946 	    symval->size = es->st_size;
947 	    return 0;
948 	}
949 	return ENOENT;
950 }
951 
952 static int
953 link_elf_search_symbol(linker_file_t lf, caddr_t value,
954 		       c_linker_sym_t* sym, long* diffp)
955 {
956 	elf_file_t ef = lf->priv;
957 	u_long off = (uintptr_t) value;
958 	u_long diff = off;
959 	const Elf_Sym* es;
960 	const Elf_Sym* best = 0;
961 	int i;
962 
963 	for (i = 0, es = ef->ddbsymtab; i < ef->ddbsymcnt; i++, es++) {
964 		if (es->st_name == 0)
965 			continue;
966 		if (off >= es->st_value) {
967 			if (off - es->st_value < diff) {
968 				diff = off - es->st_value;
969 				best = es;
970 				if (diff == 0)
971 					break;
972 			} else if (off - es->st_value == diff) {
973 				best = es;
974 			}
975 		}
976 	}
977 	if (best == 0)
978 		*diffp = off;
979 	else
980 		*diffp = diff;
981 	*sym = (c_linker_sym_t) best;
982 
983 	return 0;
984 }
985