1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause 3 * 4 * Copyright (c) 1998-2000 Doug Rabson 5 * Copyright (c) 2004 Peter Wemm 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 */ 29 30 #include <sys/cdefs.h> 31 __FBSDID("$FreeBSD$"); 32 33 #include "opt_ddb.h" 34 35 #include <sys/param.h> 36 #include <sys/systm.h> 37 #include <sys/fcntl.h> 38 #include <sys/kernel.h> 39 #include <sys/lock.h> 40 #include <sys/malloc.h> 41 #include <sys/linker.h> 42 #include <sys/mutex.h> 43 #include <sys/mount.h> 44 #include <sys/namei.h> 45 #include <sys/proc.h> 46 #include <sys/rwlock.h> 47 #include <sys/sysctl.h> 48 #include <sys/vnode.h> 49 50 #include <machine/elf.h> 51 52 #include <net/vnet.h> 53 54 #include <security/mac/mac_framework.h> 55 56 #include <vm/vm.h> 57 #include <vm/vm_param.h> 58 #include <vm/pmap.h> 59 #include <vm/vm_extern.h> 60 #include <vm/vm_kern.h> 61 #include <vm/vm_map.h> 62 #include <vm/vm_object.h> 63 #include <vm/vm_page.h> 64 #include <vm/vm_pager.h> 65 66 #include <sys/link_elf.h> 67 68 #ifdef DDB_CTF 69 #include <contrib/zlib/zlib.h> 70 #endif 71 72 #include "linker_if.h" 73 74 typedef struct { 75 void *addr; 76 Elf_Off size; 77 int flags; /* Section flags. */ 78 int sec; /* Original section number. */ 79 char *name; 80 } Elf_progent; 81 82 typedef struct { 83 Elf_Rel *rel; 84 int nrel; 85 int sec; 86 } Elf_relent; 87 88 typedef struct { 89 Elf_Rela *rela; 90 int nrela; 91 int sec; 92 } Elf_relaent; 93 94 typedef struct elf_file { 95 struct linker_file lf; /* Common fields */ 96 97 int preloaded; 98 caddr_t address; /* Relocation address */ 99 vm_object_t object; /* VM object to hold file pages */ 100 Elf_Shdr *e_shdr; 101 102 Elf_progent *progtab; 103 u_int nprogtab; 104 105 Elf_relaent *relatab; 106 u_int nrelatab; 107 108 Elf_relent *reltab; 109 int nreltab; 110 111 Elf_Sym *ddbsymtab; /* The symbol table we are using */ 112 long ddbsymcnt; /* Number of symbols */ 113 caddr_t ddbstrtab; /* String table */ 114 long ddbstrcnt; /* number of bytes in string table */ 115 116 caddr_t shstrtab; /* Section name string table */ 117 long shstrcnt; /* number of bytes in string table */ 118 119 caddr_t ctftab; /* CTF table */ 120 long ctfcnt; /* number of bytes in CTF table */ 121 caddr_t ctfoff; /* CTF offset table */ 122 caddr_t typoff; /* Type offset table */ 123 long typlen; /* Number of type entries. */ 124 125 } *elf_file_t; 126 127 #include <kern/kern_ctf.c> 128 129 static int link_elf_link_preload(linker_class_t cls, 130 const char *, linker_file_t *); 131 static int link_elf_link_preload_finish(linker_file_t); 132 static int link_elf_load_file(linker_class_t, const char *, linker_file_t *); 133 static int link_elf_lookup_symbol(linker_file_t, const char *, 134 c_linker_sym_t *); 135 static int link_elf_lookup_debug_symbol(linker_file_t, const char *, 136 c_linker_sym_t *); 137 static int link_elf_symbol_values(linker_file_t, c_linker_sym_t, 138 linker_symval_t *); 139 static int link_elf_debug_symbol_values(linker_file_t, c_linker_sym_t, 140 linker_symval_t *); 141 static int link_elf_search_symbol(linker_file_t, caddr_t value, 142 c_linker_sym_t *sym, long *diffp); 143 144 static void link_elf_unload_file(linker_file_t); 145 static int link_elf_lookup_set(linker_file_t, const char *, 146 void ***, void ***, int *); 147 static int link_elf_each_function_name(linker_file_t, 148 int (*)(const char *, void *), void *); 149 static int link_elf_each_function_nameval(linker_file_t, 150 linker_function_nameval_callback_t, 151 void *); 152 static int link_elf_reloc_local(linker_file_t, bool); 153 static long link_elf_symtab_get(linker_file_t, const Elf_Sym **); 154 static long link_elf_strtab_get(linker_file_t, caddr_t *); 155 156 static int elf_obj_lookup(linker_file_t lf, Elf_Size symidx, int deps, 157 Elf_Addr *); 158 159 static kobj_method_t link_elf_methods[] = { 160 KOBJMETHOD(linker_lookup_symbol, link_elf_lookup_symbol), 161 KOBJMETHOD(linker_lookup_debug_symbol, link_elf_lookup_debug_symbol), 162 KOBJMETHOD(linker_symbol_values, link_elf_symbol_values), 163 KOBJMETHOD(linker_debug_symbol_values, link_elf_debug_symbol_values), 164 KOBJMETHOD(linker_search_symbol, link_elf_search_symbol), 165 KOBJMETHOD(linker_unload, link_elf_unload_file), 166 KOBJMETHOD(linker_load_file, link_elf_load_file), 167 KOBJMETHOD(linker_link_preload, link_elf_link_preload), 168 KOBJMETHOD(linker_link_preload_finish, link_elf_link_preload_finish), 169 KOBJMETHOD(linker_lookup_set, link_elf_lookup_set), 170 KOBJMETHOD(linker_each_function_name, link_elf_each_function_name), 171 KOBJMETHOD(linker_each_function_nameval, link_elf_each_function_nameval), 172 KOBJMETHOD(linker_ctf_get, link_elf_ctf_get), 173 KOBJMETHOD(linker_symtab_get, link_elf_symtab_get), 174 KOBJMETHOD(linker_strtab_get, link_elf_strtab_get), 175 KOBJMETHOD_END 176 }; 177 178 static struct linker_class link_elf_class = { 179 #if ELF_TARG_CLASS == ELFCLASS32 180 "elf32_obj", 181 #else 182 "elf64_obj", 183 #endif 184 link_elf_methods, sizeof(struct elf_file) 185 }; 186 187 static bool link_elf_obj_leak_locals = true; 188 SYSCTL_BOOL(_debug, OID_AUTO, link_elf_obj_leak_locals, 189 CTLFLAG_RWTUN, &link_elf_obj_leak_locals, 0, 190 "Allow local symbols to participate in global module symbol resolution"); 191 192 static int relocate_file(elf_file_t ef); 193 static void elf_obj_cleanup_globals_cache(elf_file_t); 194 195 static void 196 link_elf_error(const char *filename, const char *s) 197 { 198 if (filename == NULL) 199 printf("kldload: %s\n", s); 200 else 201 printf("kldload: %s: %s\n", filename, s); 202 } 203 204 static void 205 link_elf_init(void *arg) 206 { 207 208 linker_add_class(&link_elf_class); 209 } 210 SYSINIT(link_elf_obj, SI_SUB_KLD, SI_ORDER_SECOND, link_elf_init, NULL); 211 212 static void 213 link_elf_protect_range(elf_file_t ef, vm_offset_t start, vm_offset_t end, 214 vm_prot_t prot) 215 { 216 int error __unused; 217 218 KASSERT(start <= end && start >= (vm_offset_t)ef->address && 219 end <= round_page((vm_offset_t)ef->address + ef->lf.size), 220 ("link_elf_protect_range: invalid range %#jx-%#jx", 221 (uintmax_t)start, (uintmax_t)end)); 222 223 if (start == end) 224 return; 225 if (ef->preloaded) { 226 #ifdef __amd64__ 227 error = pmap_change_prot(start, end - start, prot); 228 KASSERT(error == 0, 229 ("link_elf_protect_range: pmap_change_prot() returned %d", 230 error)); 231 #endif 232 return; 233 } 234 error = vm_map_protect(kernel_map, start, end, prot, 0, 235 VM_MAP_PROTECT_SET_PROT); 236 KASSERT(error == KERN_SUCCESS, 237 ("link_elf_protect_range: vm_map_protect() returned %d", error)); 238 } 239 240 /* 241 * Restrict permissions on linker file memory based on section flags. 242 * Sections need not be page-aligned, so overlap within a page is possible. 243 */ 244 static void 245 link_elf_protect(elf_file_t ef) 246 { 247 vm_offset_t end, segend, segstart, start; 248 vm_prot_t gapprot, prot, segprot; 249 int i; 250 251 /* 252 * If the file was preloaded, the last page may contain other preloaded 253 * data which may need to be writeable. ELF files are always 254 * page-aligned, but other preloaded data, such as entropy or CPU 255 * microcode may be loaded with a smaller alignment. 256 */ 257 gapprot = ef->preloaded ? VM_PROT_RW : VM_PROT_READ; 258 259 start = end = (vm_offset_t)ef->address; 260 prot = VM_PROT_READ; 261 for (i = 0; i < ef->nprogtab; i++) { 262 /* 263 * VNET and DPCPU sections have their memory allocated by their 264 * respective subsystems. 265 */ 266 if (ef->progtab[i].name != NULL && ( 267 #ifdef VIMAGE 268 strcmp(ef->progtab[i].name, VNET_SETNAME) == 0 || 269 #endif 270 strcmp(ef->progtab[i].name, DPCPU_SETNAME) == 0)) 271 continue; 272 273 segstart = trunc_page((vm_offset_t)ef->progtab[i].addr); 274 segend = round_page((vm_offset_t)ef->progtab[i].addr + 275 ef->progtab[i].size); 276 segprot = VM_PROT_READ; 277 if ((ef->progtab[i].flags & SHF_WRITE) != 0) 278 segprot |= VM_PROT_WRITE; 279 if ((ef->progtab[i].flags & SHF_EXECINSTR) != 0) 280 segprot |= VM_PROT_EXECUTE; 281 282 if (end <= segstart) { 283 /* 284 * Case 1: there is no overlap between the previous 285 * segment and this one. Apply protections to the 286 * previous segment, and protect the gap between the 287 * previous and current segments, if any. 288 */ 289 link_elf_protect_range(ef, start, end, prot); 290 link_elf_protect_range(ef, end, segstart, gapprot); 291 292 start = segstart; 293 end = segend; 294 prot = segprot; 295 } else if (start < segstart && end == segend) { 296 /* 297 * Case 2: the current segment is a subrange of the 298 * previous segment. Apply protections to the 299 * non-overlapping portion of the previous segment. 300 */ 301 link_elf_protect_range(ef, start, segstart, prot); 302 303 start = segstart; 304 prot |= segprot; 305 } else if (end < segend) { 306 /* 307 * Case 3: there is partial overlap between the previous 308 * and current segments. Apply protections to the 309 * non-overlapping portion of the previous segment, and 310 * then the overlap, which must use the union of the two 311 * segments' protections. 312 */ 313 link_elf_protect_range(ef, start, segstart, prot); 314 link_elf_protect_range(ef, segstart, end, 315 prot | segprot); 316 start = end; 317 end = segend; 318 prot = segprot; 319 } else { 320 /* 321 * Case 4: the two segments reside in the same page. 322 */ 323 prot |= segprot; 324 } 325 } 326 327 /* 328 * Fix up the last unprotected segment and trailing data. 329 */ 330 link_elf_protect_range(ef, start, end, prot); 331 link_elf_protect_range(ef, end, 332 round_page((vm_offset_t)ef->address + ef->lf.size), gapprot); 333 } 334 335 static int 336 link_elf_link_preload(linker_class_t cls, const char *filename, 337 linker_file_t *result) 338 { 339 Elf_Ehdr *hdr; 340 Elf_Shdr *shdr; 341 Elf_Sym *es; 342 void *modptr, *baseptr, *sizeptr; 343 char *type; 344 elf_file_t ef; 345 linker_file_t lf; 346 Elf_Addr off; 347 int error, i, j, pb, ra, rl, shstrindex, symstrindex, symtabindex; 348 349 /* Look to see if we have the file preloaded */ 350 modptr = preload_search_by_name(filename); 351 if (modptr == NULL) 352 return ENOENT; 353 354 type = (char *)preload_search_info(modptr, MODINFO_TYPE); 355 baseptr = preload_search_info(modptr, MODINFO_ADDR); 356 sizeptr = preload_search_info(modptr, MODINFO_SIZE); 357 hdr = (Elf_Ehdr *)preload_search_info(modptr, MODINFO_METADATA | 358 MODINFOMD_ELFHDR); 359 shdr = (Elf_Shdr *)preload_search_info(modptr, MODINFO_METADATA | 360 MODINFOMD_SHDR); 361 if (type == NULL || (strcmp(type, "elf" __XSTRING(__ELF_WORD_SIZE) 362 " obj module") != 0 && 363 strcmp(type, "elf obj module") != 0)) { 364 return (EFTYPE); 365 } 366 if (baseptr == NULL || sizeptr == NULL || hdr == NULL || 367 shdr == NULL) 368 return (EINVAL); 369 370 lf = linker_make_file(filename, &link_elf_class); 371 if (lf == NULL) 372 return (ENOMEM); 373 374 ef = (elf_file_t)lf; 375 ef->preloaded = 1; 376 ef->address = *(caddr_t *)baseptr; 377 lf->address = *(caddr_t *)baseptr; 378 lf->size = *(size_t *)sizeptr; 379 380 if (hdr->e_ident[EI_CLASS] != ELF_TARG_CLASS || 381 hdr->e_ident[EI_DATA] != ELF_TARG_DATA || 382 hdr->e_ident[EI_VERSION] != EV_CURRENT || 383 hdr->e_version != EV_CURRENT || 384 hdr->e_type != ET_REL || 385 hdr->e_machine != ELF_TARG_MACH) { 386 error = EFTYPE; 387 goto out; 388 } 389 ef->e_shdr = shdr; 390 391 /* Scan the section header for information and table sizing. */ 392 symtabindex = -1; 393 symstrindex = -1; 394 for (i = 0; i < hdr->e_shnum; i++) { 395 switch (shdr[i].sh_type) { 396 case SHT_PROGBITS: 397 case SHT_NOBITS: 398 #ifdef __amd64__ 399 case SHT_X86_64_UNWIND: 400 #endif 401 case SHT_INIT_ARRAY: 402 case SHT_FINI_ARRAY: 403 /* Ignore sections not loaded by the loader. */ 404 if (shdr[i].sh_addr == 0) 405 break; 406 ef->nprogtab++; 407 break; 408 case SHT_SYMTAB: 409 symtabindex = i; 410 symstrindex = shdr[i].sh_link; 411 break; 412 case SHT_REL: 413 /* 414 * Ignore relocation tables for sections not 415 * loaded by the loader. 416 */ 417 if (shdr[shdr[i].sh_info].sh_addr == 0) 418 break; 419 ef->nreltab++; 420 break; 421 case SHT_RELA: 422 if (shdr[shdr[i].sh_info].sh_addr == 0) 423 break; 424 ef->nrelatab++; 425 break; 426 } 427 } 428 429 shstrindex = hdr->e_shstrndx; 430 if (ef->nprogtab == 0 || symstrindex < 0 || 431 symstrindex >= hdr->e_shnum || 432 shdr[symstrindex].sh_type != SHT_STRTAB || shstrindex == 0 || 433 shstrindex >= hdr->e_shnum || 434 shdr[shstrindex].sh_type != SHT_STRTAB) { 435 printf("%s: bad/missing section headers\n", filename); 436 error = ENOEXEC; 437 goto out; 438 } 439 440 /* Allocate space for tracking the load chunks */ 441 if (ef->nprogtab != 0) 442 ef->progtab = malloc(ef->nprogtab * sizeof(*ef->progtab), 443 M_LINKER, M_WAITOK | M_ZERO); 444 if (ef->nreltab != 0) 445 ef->reltab = malloc(ef->nreltab * sizeof(*ef->reltab), 446 M_LINKER, M_WAITOK | M_ZERO); 447 if (ef->nrelatab != 0) 448 ef->relatab = malloc(ef->nrelatab * sizeof(*ef->relatab), 449 M_LINKER, M_WAITOK | M_ZERO); 450 if ((ef->nprogtab != 0 && ef->progtab == NULL) || 451 (ef->nreltab != 0 && ef->reltab == NULL) || 452 (ef->nrelatab != 0 && ef->relatab == NULL)) { 453 error = ENOMEM; 454 goto out; 455 } 456 457 /* XXX, relocate the sh_addr fields saved by the loader. */ 458 off = 0; 459 for (i = 0; i < hdr->e_shnum; i++) { 460 if (shdr[i].sh_addr != 0 && (off == 0 || shdr[i].sh_addr < off)) 461 off = shdr[i].sh_addr; 462 } 463 for (i = 0; i < hdr->e_shnum; i++) { 464 if (shdr[i].sh_addr != 0) 465 shdr[i].sh_addr = shdr[i].sh_addr - off + 466 (Elf_Addr)ef->address; 467 } 468 469 ef->ddbsymcnt = shdr[symtabindex].sh_size / sizeof(Elf_Sym); 470 ef->ddbsymtab = (Elf_Sym *)shdr[symtabindex].sh_addr; 471 ef->ddbstrcnt = shdr[symstrindex].sh_size; 472 ef->ddbstrtab = (char *)shdr[symstrindex].sh_addr; 473 ef->shstrcnt = shdr[shstrindex].sh_size; 474 ef->shstrtab = (char *)shdr[shstrindex].sh_addr; 475 476 /* Now fill out progtab and the relocation tables. */ 477 pb = 0; 478 rl = 0; 479 ra = 0; 480 for (i = 0; i < hdr->e_shnum; i++) { 481 switch (shdr[i].sh_type) { 482 case SHT_PROGBITS: 483 case SHT_NOBITS: 484 #ifdef __amd64__ 485 case SHT_X86_64_UNWIND: 486 #endif 487 case SHT_INIT_ARRAY: 488 case SHT_FINI_ARRAY: 489 if (shdr[i].sh_addr == 0) 490 break; 491 ef->progtab[pb].addr = (void *)shdr[i].sh_addr; 492 if (shdr[i].sh_type == SHT_PROGBITS) 493 ef->progtab[pb].name = "<<PROGBITS>>"; 494 #ifdef __amd64__ 495 else if (shdr[i].sh_type == SHT_X86_64_UNWIND) 496 ef->progtab[pb].name = "<<UNWIND>>"; 497 #endif 498 else if (shdr[i].sh_type == SHT_INIT_ARRAY) 499 ef->progtab[pb].name = "<<INIT_ARRAY>>"; 500 else if (shdr[i].sh_type == SHT_FINI_ARRAY) 501 ef->progtab[pb].name = "<<FINI_ARRAY>>"; 502 else 503 ef->progtab[pb].name = "<<NOBITS>>"; 504 ef->progtab[pb].size = shdr[i].sh_size; 505 ef->progtab[pb].flags = shdr[i].sh_flags; 506 ef->progtab[pb].sec = i; 507 if (ef->shstrtab && shdr[i].sh_name != 0) 508 ef->progtab[pb].name = 509 ef->shstrtab + shdr[i].sh_name; 510 if (ef->progtab[pb].name != NULL && 511 !strcmp(ef->progtab[pb].name, DPCPU_SETNAME)) { 512 void *dpcpu; 513 514 dpcpu = dpcpu_alloc(shdr[i].sh_size); 515 if (dpcpu == NULL) { 516 printf("%s: pcpu module space is out " 517 "of space; cannot allocate %#jx " 518 "for %s\n", __func__, 519 (uintmax_t)shdr[i].sh_size, 520 filename); 521 error = ENOSPC; 522 goto out; 523 } 524 memcpy(dpcpu, ef->progtab[pb].addr, 525 ef->progtab[pb].size); 526 dpcpu_copy(dpcpu, shdr[i].sh_size); 527 ef->progtab[pb].addr = dpcpu; 528 #ifdef VIMAGE 529 } else if (ef->progtab[pb].name != NULL && 530 !strcmp(ef->progtab[pb].name, VNET_SETNAME)) { 531 void *vnet_data; 532 533 vnet_data = vnet_data_alloc(shdr[i].sh_size); 534 if (vnet_data == NULL) { 535 printf("%s: vnet module space is out " 536 "of space; cannot allocate %#jx " 537 "for %s\n", __func__, 538 (uintmax_t)shdr[i].sh_size, 539 filename); 540 error = ENOSPC; 541 goto out; 542 } 543 memcpy(vnet_data, ef->progtab[pb].addr, 544 ef->progtab[pb].size); 545 vnet_data_copy(vnet_data, shdr[i].sh_size); 546 ef->progtab[pb].addr = vnet_data; 547 #endif 548 } else if ((ef->progtab[pb].name != NULL && 549 strcmp(ef->progtab[pb].name, ".ctors") == 0) || 550 shdr[i].sh_type == SHT_INIT_ARRAY) { 551 if (lf->ctors_addr != 0) { 552 printf( 553 "%s: multiple ctor sections in %s\n", 554 __func__, filename); 555 } else { 556 lf->ctors_addr = ef->progtab[pb].addr; 557 lf->ctors_size = shdr[i].sh_size; 558 } 559 } else if ((ef->progtab[pb].name != NULL && 560 strcmp(ef->progtab[pb].name, ".dtors") == 0) || 561 shdr[i].sh_type == SHT_FINI_ARRAY) { 562 if (lf->dtors_addr != 0) { 563 printf( 564 "%s: multiple dtor sections in %s\n", 565 __func__, filename); 566 } else { 567 lf->dtors_addr = ef->progtab[pb].addr; 568 lf->dtors_size = shdr[i].sh_size; 569 } 570 } 571 572 /* Update all symbol values with the offset. */ 573 for (j = 0; j < ef->ddbsymcnt; j++) { 574 es = &ef->ddbsymtab[j]; 575 if (es->st_shndx != i) 576 continue; 577 es->st_value += (Elf_Addr)ef->progtab[pb].addr; 578 } 579 pb++; 580 break; 581 case SHT_REL: 582 if (shdr[shdr[i].sh_info].sh_addr == 0) 583 break; 584 ef->reltab[rl].rel = (Elf_Rel *)shdr[i].sh_addr; 585 ef->reltab[rl].nrel = shdr[i].sh_size / sizeof(Elf_Rel); 586 ef->reltab[rl].sec = shdr[i].sh_info; 587 rl++; 588 break; 589 case SHT_RELA: 590 if (shdr[shdr[i].sh_info].sh_addr == 0) 591 break; 592 ef->relatab[ra].rela = (Elf_Rela *)shdr[i].sh_addr; 593 ef->relatab[ra].nrela = 594 shdr[i].sh_size / sizeof(Elf_Rela); 595 ef->relatab[ra].sec = shdr[i].sh_info; 596 ra++; 597 break; 598 } 599 } 600 if (pb != ef->nprogtab) { 601 printf("%s: lost progbits\n", filename); 602 error = ENOEXEC; 603 goto out; 604 } 605 if (rl != ef->nreltab) { 606 printf("%s: lost reltab\n", filename); 607 error = ENOEXEC; 608 goto out; 609 } 610 if (ra != ef->nrelatab) { 611 printf("%s: lost relatab\n", filename); 612 error = ENOEXEC; 613 goto out; 614 } 615 616 /* 617 * The file needs to be writeable and executable while applying 618 * relocations. Mapping protections are applied once relocation 619 * processing is complete. 620 */ 621 link_elf_protect_range(ef, (vm_offset_t)ef->address, 622 round_page((vm_offset_t)ef->address + ef->lf.size), VM_PROT_ALL); 623 624 /* Local intra-module relocations */ 625 error = link_elf_reloc_local(lf, false); 626 if (error != 0) 627 goto out; 628 *result = lf; 629 return (0); 630 631 out: 632 /* preload not done this way */ 633 linker_file_unload(lf, LINKER_UNLOAD_FORCE); 634 return (error); 635 } 636 637 static void 638 link_elf_invoke_cbs(caddr_t addr, size_t size) 639 { 640 void (**ctor)(void); 641 size_t i, cnt; 642 643 if (addr == NULL || size == 0) 644 return; 645 cnt = size / sizeof(*ctor); 646 ctor = (void *)addr; 647 for (i = 0; i < cnt; i++) { 648 if (ctor[i] != NULL) 649 (*ctor[i])(); 650 } 651 } 652 653 static int 654 link_elf_link_preload_finish(linker_file_t lf) 655 { 656 elf_file_t ef; 657 int error; 658 659 ef = (elf_file_t)lf; 660 error = relocate_file(ef); 661 if (error) 662 return (error); 663 664 /* Notify MD code that a module is being loaded. */ 665 error = elf_cpu_load_file(lf); 666 if (error) 667 return (error); 668 669 #if defined(__i386__) || defined(__amd64__) 670 /* Now ifuncs. */ 671 error = link_elf_reloc_local(lf, true); 672 if (error != 0) 673 return (error); 674 #endif 675 676 /* Apply protections now that relocation processing is complete. */ 677 link_elf_protect(ef); 678 679 link_elf_invoke_cbs(lf->ctors_addr, lf->ctors_size); 680 return (0); 681 } 682 683 static int 684 link_elf_load_file(linker_class_t cls, const char *filename, 685 linker_file_t *result) 686 { 687 struct nameidata *nd; 688 struct thread *td = curthread; /* XXX */ 689 Elf_Ehdr *hdr; 690 Elf_Shdr *shdr; 691 Elf_Sym *es; 692 int nbytes, i, j; 693 vm_offset_t mapbase; 694 size_t mapsize; 695 int error = 0; 696 ssize_t resid; 697 int flags; 698 elf_file_t ef; 699 linker_file_t lf; 700 int symtabindex; 701 int symstrindex; 702 int shstrindex; 703 int nsym; 704 int pb, rl, ra; 705 int alignmask; 706 707 shdr = NULL; 708 lf = NULL; 709 mapsize = 0; 710 hdr = NULL; 711 712 nd = malloc(sizeof(struct nameidata), M_TEMP, M_WAITOK); 713 NDINIT(nd, LOOKUP, FOLLOW, UIO_SYSSPACE, filename); 714 flags = FREAD; 715 error = vn_open(nd, &flags, 0, NULL); 716 if (error) { 717 free(nd, M_TEMP); 718 return error; 719 } 720 NDFREE_PNBUF(nd); 721 if (nd->ni_vp->v_type != VREG) { 722 error = ENOEXEC; 723 goto out; 724 } 725 #ifdef MAC 726 error = mac_kld_check_load(td->td_ucred, nd->ni_vp); 727 if (error) { 728 goto out; 729 } 730 #endif 731 732 /* Read the elf header from the file. */ 733 hdr = malloc(sizeof(*hdr), M_LINKER, M_WAITOK); 734 error = vn_rdwr(UIO_READ, nd->ni_vp, (void *)hdr, sizeof(*hdr), 0, 735 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, NOCRED, 736 &resid, td); 737 if (error) 738 goto out; 739 if (resid != 0){ 740 error = ENOEXEC; 741 goto out; 742 } 743 744 if (!IS_ELF(*hdr)) { 745 error = ENOEXEC; 746 goto out; 747 } 748 749 if (hdr->e_ident[EI_CLASS] != ELF_TARG_CLASS 750 || hdr->e_ident[EI_DATA] != ELF_TARG_DATA) { 751 link_elf_error(filename, "Unsupported file layout"); 752 error = ENOEXEC; 753 goto out; 754 } 755 if (hdr->e_ident[EI_VERSION] != EV_CURRENT 756 || hdr->e_version != EV_CURRENT) { 757 link_elf_error(filename, "Unsupported file version"); 758 error = ENOEXEC; 759 goto out; 760 } 761 if (hdr->e_type != ET_REL) { 762 error = ENOSYS; 763 goto out; 764 } 765 if (hdr->e_machine != ELF_TARG_MACH) { 766 link_elf_error(filename, "Unsupported machine"); 767 error = ENOEXEC; 768 goto out; 769 } 770 771 lf = linker_make_file(filename, &link_elf_class); 772 if (!lf) { 773 error = ENOMEM; 774 goto out; 775 } 776 ef = (elf_file_t) lf; 777 ef->nprogtab = 0; 778 ef->e_shdr = 0; 779 ef->nreltab = 0; 780 ef->nrelatab = 0; 781 782 /* Allocate and read in the section header */ 783 nbytes = hdr->e_shnum * hdr->e_shentsize; 784 if (nbytes == 0 || hdr->e_shoff == 0 || 785 hdr->e_shentsize != sizeof(Elf_Shdr)) { 786 error = ENOEXEC; 787 goto out; 788 } 789 shdr = malloc(nbytes, M_LINKER, M_WAITOK); 790 ef->e_shdr = shdr; 791 error = vn_rdwr(UIO_READ, nd->ni_vp, (caddr_t)shdr, nbytes, 792 hdr->e_shoff, UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, 793 NOCRED, &resid, td); 794 if (error) 795 goto out; 796 if (resid) { 797 error = ENOEXEC; 798 goto out; 799 } 800 801 /* Scan the section header for information and table sizing. */ 802 nsym = 0; 803 symtabindex = -1; 804 symstrindex = -1; 805 for (i = 0; i < hdr->e_shnum; i++) { 806 if (shdr[i].sh_size == 0) 807 continue; 808 switch (shdr[i].sh_type) { 809 case SHT_PROGBITS: 810 case SHT_NOBITS: 811 #ifdef __amd64__ 812 case SHT_X86_64_UNWIND: 813 #endif 814 case SHT_INIT_ARRAY: 815 case SHT_FINI_ARRAY: 816 if ((shdr[i].sh_flags & SHF_ALLOC) == 0) 817 break; 818 ef->nprogtab++; 819 break; 820 case SHT_SYMTAB: 821 nsym++; 822 symtabindex = i; 823 symstrindex = shdr[i].sh_link; 824 break; 825 case SHT_REL: 826 /* 827 * Ignore relocation tables for unallocated 828 * sections. 829 */ 830 if ((shdr[shdr[i].sh_info].sh_flags & SHF_ALLOC) == 0) 831 break; 832 ef->nreltab++; 833 break; 834 case SHT_RELA: 835 if ((shdr[shdr[i].sh_info].sh_flags & SHF_ALLOC) == 0) 836 break; 837 ef->nrelatab++; 838 break; 839 case SHT_STRTAB: 840 break; 841 } 842 } 843 if (ef->nprogtab == 0) { 844 link_elf_error(filename, "file has no contents"); 845 error = ENOEXEC; 846 goto out; 847 } 848 if (nsym != 1) { 849 /* Only allow one symbol table for now */ 850 link_elf_error(filename, 851 "file must have exactly one symbol table"); 852 error = ENOEXEC; 853 goto out; 854 } 855 if (symstrindex < 0 || symstrindex > hdr->e_shnum || 856 shdr[symstrindex].sh_type != SHT_STRTAB) { 857 link_elf_error(filename, "file has invalid symbol strings"); 858 error = ENOEXEC; 859 goto out; 860 } 861 862 /* Allocate space for tracking the load chunks */ 863 if (ef->nprogtab != 0) 864 ef->progtab = malloc(ef->nprogtab * sizeof(*ef->progtab), 865 M_LINKER, M_WAITOK | M_ZERO); 866 if (ef->nreltab != 0) 867 ef->reltab = malloc(ef->nreltab * sizeof(*ef->reltab), 868 M_LINKER, M_WAITOK | M_ZERO); 869 if (ef->nrelatab != 0) 870 ef->relatab = malloc(ef->nrelatab * sizeof(*ef->relatab), 871 M_LINKER, M_WAITOK | M_ZERO); 872 873 if (symtabindex == -1) { 874 link_elf_error(filename, "lost symbol table index"); 875 error = ENOEXEC; 876 goto out; 877 } 878 /* Allocate space for and load the symbol table */ 879 ef->ddbsymcnt = shdr[symtabindex].sh_size / sizeof(Elf_Sym); 880 ef->ddbsymtab = malloc(shdr[symtabindex].sh_size, M_LINKER, M_WAITOK); 881 error = vn_rdwr(UIO_READ, nd->ni_vp, (void *)ef->ddbsymtab, 882 shdr[symtabindex].sh_size, shdr[symtabindex].sh_offset, 883 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, NOCRED, 884 &resid, td); 885 if (error) 886 goto out; 887 if (resid != 0){ 888 error = EINVAL; 889 goto out; 890 } 891 892 /* Allocate space for and load the symbol strings */ 893 ef->ddbstrcnt = shdr[symstrindex].sh_size; 894 ef->ddbstrtab = malloc(shdr[symstrindex].sh_size, M_LINKER, M_WAITOK); 895 error = vn_rdwr(UIO_READ, nd->ni_vp, ef->ddbstrtab, 896 shdr[symstrindex].sh_size, shdr[symstrindex].sh_offset, 897 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, NOCRED, 898 &resid, td); 899 if (error) 900 goto out; 901 if (resid != 0){ 902 error = EINVAL; 903 goto out; 904 } 905 906 /* Do we have a string table for the section names? */ 907 shstrindex = -1; 908 if (hdr->e_shstrndx != 0 && 909 shdr[hdr->e_shstrndx].sh_type == SHT_STRTAB) { 910 shstrindex = hdr->e_shstrndx; 911 ef->shstrcnt = shdr[shstrindex].sh_size; 912 ef->shstrtab = malloc(shdr[shstrindex].sh_size, M_LINKER, 913 M_WAITOK); 914 error = vn_rdwr(UIO_READ, nd->ni_vp, ef->shstrtab, 915 shdr[shstrindex].sh_size, shdr[shstrindex].sh_offset, 916 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, NOCRED, 917 &resid, td); 918 if (error) 919 goto out; 920 if (resid != 0){ 921 error = EINVAL; 922 goto out; 923 } 924 } 925 926 /* Size up code/data(progbits) and bss(nobits). */ 927 alignmask = 0; 928 for (i = 0; i < hdr->e_shnum; i++) { 929 if (shdr[i].sh_size == 0) 930 continue; 931 switch (shdr[i].sh_type) { 932 case SHT_PROGBITS: 933 case SHT_NOBITS: 934 #ifdef __amd64__ 935 case SHT_X86_64_UNWIND: 936 #endif 937 case SHT_INIT_ARRAY: 938 case SHT_FINI_ARRAY: 939 if ((shdr[i].sh_flags & SHF_ALLOC) == 0) 940 break; 941 alignmask = shdr[i].sh_addralign - 1; 942 mapsize += alignmask; 943 mapsize &= ~alignmask; 944 mapsize += shdr[i].sh_size; 945 break; 946 } 947 } 948 949 /* 950 * We know how much space we need for the text/data/bss/etc. 951 * This stuff needs to be in a single chunk so that profiling etc 952 * can get the bounds and gdb can associate offsets with modules 953 */ 954 ef->object = vm_pager_allocate(OBJT_PHYS, NULL, round_page(mapsize), 955 VM_PROT_ALL, 0, thread0.td_ucred); 956 if (ef->object == NULL) { 957 error = ENOMEM; 958 goto out; 959 } 960 #if VM_NRESERVLEVEL > 0 961 vm_object_color(ef->object, 0); 962 #endif 963 964 /* 965 * In order to satisfy amd64's architectural requirements on the 966 * location of code and data in the kernel's address space, request a 967 * mapping that is above the kernel. 968 * 969 * Protections will be restricted once relocations are applied. 970 */ 971 #ifdef __amd64__ 972 mapbase = KERNBASE; 973 #else 974 mapbase = VM_MIN_KERNEL_ADDRESS; 975 #endif 976 error = vm_map_find(kernel_map, ef->object, 0, &mapbase, 977 round_page(mapsize), 0, VMFS_OPTIMAL_SPACE, VM_PROT_ALL, 978 VM_PROT_ALL, 0); 979 if (error != KERN_SUCCESS) { 980 vm_object_deallocate(ef->object); 981 ef->object = NULL; 982 error = ENOMEM; 983 goto out; 984 } 985 986 /* Wire the pages */ 987 error = vm_map_wire(kernel_map, mapbase, 988 mapbase + round_page(mapsize), 989 VM_MAP_WIRE_SYSTEM|VM_MAP_WIRE_NOHOLES); 990 if (error != KERN_SUCCESS) { 991 error = ENOMEM; 992 goto out; 993 } 994 995 /* Inform the kld system about the situation */ 996 lf->address = ef->address = (caddr_t)mapbase; 997 lf->size = mapsize; 998 999 /* 1000 * Now load code/data(progbits), zero bss(nobits), allocate space for 1001 * and load relocs 1002 */ 1003 pb = 0; 1004 rl = 0; 1005 ra = 0; 1006 alignmask = 0; 1007 for (i = 0; i < hdr->e_shnum; i++) { 1008 if (shdr[i].sh_size == 0) 1009 continue; 1010 switch (shdr[i].sh_type) { 1011 case SHT_PROGBITS: 1012 case SHT_NOBITS: 1013 #ifdef __amd64__ 1014 case SHT_X86_64_UNWIND: 1015 #endif 1016 case SHT_INIT_ARRAY: 1017 case SHT_FINI_ARRAY: 1018 if ((shdr[i].sh_flags & SHF_ALLOC) == 0) 1019 break; 1020 alignmask = shdr[i].sh_addralign - 1; 1021 mapbase += alignmask; 1022 mapbase &= ~alignmask; 1023 if (ef->shstrtab != NULL && shdr[i].sh_name != 0) { 1024 ef->progtab[pb].name = 1025 ef->shstrtab + shdr[i].sh_name; 1026 if (!strcmp(ef->progtab[pb].name, ".ctors") || 1027 shdr[i].sh_type == SHT_INIT_ARRAY) { 1028 if (lf->ctors_addr != 0) { 1029 printf( 1030 "%s: multiple ctor sections in %s\n", 1031 __func__, filename); 1032 } else { 1033 lf->ctors_addr = 1034 (caddr_t)mapbase; 1035 lf->ctors_size = 1036 shdr[i].sh_size; 1037 } 1038 } else if (!strcmp(ef->progtab[pb].name, 1039 ".dtors") || 1040 shdr[i].sh_type == SHT_FINI_ARRAY) { 1041 if (lf->dtors_addr != 0) { 1042 printf( 1043 "%s: multiple dtor sections in %s\n", 1044 __func__, filename); 1045 } else { 1046 lf->dtors_addr = 1047 (caddr_t)mapbase; 1048 lf->dtors_size = 1049 shdr[i].sh_size; 1050 } 1051 } 1052 } else if (shdr[i].sh_type == SHT_PROGBITS) 1053 ef->progtab[pb].name = "<<PROGBITS>>"; 1054 #ifdef __amd64__ 1055 else if (shdr[i].sh_type == SHT_X86_64_UNWIND) 1056 ef->progtab[pb].name = "<<UNWIND>>"; 1057 #endif 1058 else 1059 ef->progtab[pb].name = "<<NOBITS>>"; 1060 if (ef->progtab[pb].name != NULL && 1061 !strcmp(ef->progtab[pb].name, DPCPU_SETNAME)) { 1062 ef->progtab[pb].addr = 1063 dpcpu_alloc(shdr[i].sh_size); 1064 if (ef->progtab[pb].addr == NULL) { 1065 printf("%s: pcpu module space is out " 1066 "of space; cannot allocate %#jx " 1067 "for %s\n", __func__, 1068 (uintmax_t)shdr[i].sh_size, 1069 filename); 1070 } 1071 } 1072 #ifdef VIMAGE 1073 else if (ef->progtab[pb].name != NULL && 1074 !strcmp(ef->progtab[pb].name, VNET_SETNAME)) { 1075 ef->progtab[pb].addr = 1076 vnet_data_alloc(shdr[i].sh_size); 1077 if (ef->progtab[pb].addr == NULL) { 1078 printf("%s: vnet module space is out " 1079 "of space; cannot allocate %#jx " 1080 "for %s\n", __func__, 1081 (uintmax_t)shdr[i].sh_size, 1082 filename); 1083 } 1084 } 1085 #endif 1086 else 1087 ef->progtab[pb].addr = 1088 (void *)(uintptr_t)mapbase; 1089 if (ef->progtab[pb].addr == NULL) { 1090 error = ENOSPC; 1091 goto out; 1092 } 1093 ef->progtab[pb].size = shdr[i].sh_size; 1094 ef->progtab[pb].flags = shdr[i].sh_flags; 1095 ef->progtab[pb].sec = i; 1096 if (shdr[i].sh_type == SHT_PROGBITS 1097 #ifdef __amd64__ 1098 || shdr[i].sh_type == SHT_X86_64_UNWIND 1099 #endif 1100 ) { 1101 error = vn_rdwr(UIO_READ, nd->ni_vp, 1102 ef->progtab[pb].addr, 1103 shdr[i].sh_size, shdr[i].sh_offset, 1104 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, 1105 NOCRED, &resid, td); 1106 if (error) 1107 goto out; 1108 if (resid != 0){ 1109 error = EINVAL; 1110 goto out; 1111 } 1112 /* Initialize the per-cpu or vnet area. */ 1113 if (ef->progtab[pb].addr != (void *)mapbase && 1114 !strcmp(ef->progtab[pb].name, DPCPU_SETNAME)) 1115 dpcpu_copy(ef->progtab[pb].addr, 1116 shdr[i].sh_size); 1117 #ifdef VIMAGE 1118 else if (ef->progtab[pb].addr != 1119 (void *)mapbase && 1120 !strcmp(ef->progtab[pb].name, VNET_SETNAME)) 1121 vnet_data_copy(ef->progtab[pb].addr, 1122 shdr[i].sh_size); 1123 #endif 1124 } else 1125 bzero(ef->progtab[pb].addr, shdr[i].sh_size); 1126 1127 /* Update all symbol values with the offset. */ 1128 for (j = 0; j < ef->ddbsymcnt; j++) { 1129 es = &ef->ddbsymtab[j]; 1130 if (es->st_shndx != i) 1131 continue; 1132 es->st_value += (Elf_Addr)ef->progtab[pb].addr; 1133 } 1134 mapbase += shdr[i].sh_size; 1135 pb++; 1136 break; 1137 case SHT_REL: 1138 if ((shdr[shdr[i].sh_info].sh_flags & SHF_ALLOC) == 0) 1139 break; 1140 ef->reltab[rl].rel = malloc(shdr[i].sh_size, M_LINKER, 1141 M_WAITOK); 1142 ef->reltab[rl].nrel = shdr[i].sh_size / sizeof(Elf_Rel); 1143 ef->reltab[rl].sec = shdr[i].sh_info; 1144 error = vn_rdwr(UIO_READ, nd->ni_vp, 1145 (void *)ef->reltab[rl].rel, 1146 shdr[i].sh_size, shdr[i].sh_offset, 1147 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, NOCRED, 1148 &resid, td); 1149 if (error) 1150 goto out; 1151 if (resid != 0){ 1152 error = EINVAL; 1153 goto out; 1154 } 1155 rl++; 1156 break; 1157 case SHT_RELA: 1158 if ((shdr[shdr[i].sh_info].sh_flags & SHF_ALLOC) == 0) 1159 break; 1160 ef->relatab[ra].rela = malloc(shdr[i].sh_size, M_LINKER, 1161 M_WAITOK); 1162 ef->relatab[ra].nrela = 1163 shdr[i].sh_size / sizeof(Elf_Rela); 1164 ef->relatab[ra].sec = shdr[i].sh_info; 1165 error = vn_rdwr(UIO_READ, nd->ni_vp, 1166 (void *)ef->relatab[ra].rela, 1167 shdr[i].sh_size, shdr[i].sh_offset, 1168 UIO_SYSSPACE, IO_NODELOCKED, td->td_ucred, NOCRED, 1169 &resid, td); 1170 if (error) 1171 goto out; 1172 if (resid != 0){ 1173 error = EINVAL; 1174 goto out; 1175 } 1176 ra++; 1177 break; 1178 } 1179 } 1180 if (pb != ef->nprogtab) { 1181 link_elf_error(filename, "lost progbits"); 1182 error = ENOEXEC; 1183 goto out; 1184 } 1185 if (rl != ef->nreltab) { 1186 link_elf_error(filename, "lost reltab"); 1187 error = ENOEXEC; 1188 goto out; 1189 } 1190 if (ra != ef->nrelatab) { 1191 link_elf_error(filename, "lost relatab"); 1192 error = ENOEXEC; 1193 goto out; 1194 } 1195 if (mapbase != (vm_offset_t)ef->address + mapsize) { 1196 printf( 1197 "%s: mapbase 0x%lx != address %p + mapsize 0x%lx (0x%lx)\n", 1198 filename != NULL ? filename : "<none>", 1199 (u_long)mapbase, ef->address, (u_long)mapsize, 1200 (u_long)(vm_offset_t)ef->address + mapsize); 1201 error = ENOMEM; 1202 goto out; 1203 } 1204 1205 /* Local intra-module relocations */ 1206 error = link_elf_reloc_local(lf, false); 1207 if (error != 0) 1208 goto out; 1209 1210 /* Pull in dependencies */ 1211 VOP_UNLOCK(nd->ni_vp); 1212 error = linker_load_dependencies(lf); 1213 vn_lock(nd->ni_vp, LK_EXCLUSIVE | LK_RETRY); 1214 if (error) 1215 goto out; 1216 1217 /* External relocations */ 1218 error = relocate_file(ef); 1219 if (error) 1220 goto out; 1221 1222 /* Notify MD code that a module is being loaded. */ 1223 error = elf_cpu_load_file(lf); 1224 if (error) 1225 goto out; 1226 1227 #if defined(__i386__) || defined(__amd64__) 1228 /* Now ifuncs. */ 1229 error = link_elf_reloc_local(lf, true); 1230 if (error != 0) 1231 goto out; 1232 #endif 1233 1234 link_elf_protect(ef); 1235 link_elf_invoke_cbs(lf->ctors_addr, lf->ctors_size); 1236 *result = lf; 1237 1238 out: 1239 VOP_UNLOCK(nd->ni_vp); 1240 vn_close(nd->ni_vp, FREAD, td->td_ucred, td); 1241 free(nd, M_TEMP); 1242 if (error && lf) 1243 linker_file_unload(lf, LINKER_UNLOAD_FORCE); 1244 free(hdr, M_LINKER); 1245 1246 return error; 1247 } 1248 1249 static void 1250 link_elf_unload_file(linker_file_t file) 1251 { 1252 elf_file_t ef = (elf_file_t) file; 1253 u_int i; 1254 1255 link_elf_invoke_cbs(file->dtors_addr, file->dtors_size); 1256 1257 /* Notify MD code that a module is being unloaded. */ 1258 elf_cpu_unload_file(file); 1259 1260 if (ef->progtab) { 1261 for (i = 0; i < ef->nprogtab; i++) { 1262 if (ef->progtab[i].size == 0) 1263 continue; 1264 if (ef->progtab[i].name == NULL) 1265 continue; 1266 if (!strcmp(ef->progtab[i].name, DPCPU_SETNAME)) 1267 dpcpu_free(ef->progtab[i].addr, 1268 ef->progtab[i].size); 1269 #ifdef VIMAGE 1270 else if (!strcmp(ef->progtab[i].name, VNET_SETNAME)) 1271 vnet_data_free(ef->progtab[i].addr, 1272 ef->progtab[i].size); 1273 #endif 1274 } 1275 } 1276 if (ef->preloaded) { 1277 free(ef->reltab, M_LINKER); 1278 free(ef->relatab, M_LINKER); 1279 free(ef->progtab, M_LINKER); 1280 free(ef->ctftab, M_LINKER); 1281 free(ef->ctfoff, M_LINKER); 1282 free(ef->typoff, M_LINKER); 1283 if (file->pathname != NULL) 1284 preload_delete_name(file->pathname); 1285 return; 1286 } 1287 1288 for (i = 0; i < ef->nreltab; i++) 1289 free(ef->reltab[i].rel, M_LINKER); 1290 for (i = 0; i < ef->nrelatab; i++) 1291 free(ef->relatab[i].rela, M_LINKER); 1292 free(ef->reltab, M_LINKER); 1293 free(ef->relatab, M_LINKER); 1294 free(ef->progtab, M_LINKER); 1295 1296 if (ef->object != NULL) 1297 vm_map_remove(kernel_map, (vm_offset_t)ef->address, 1298 (vm_offset_t)ef->address + ptoa(ef->object->size)); 1299 free(ef->e_shdr, M_LINKER); 1300 free(ef->ddbsymtab, M_LINKER); 1301 free(ef->ddbstrtab, M_LINKER); 1302 free(ef->shstrtab, M_LINKER); 1303 free(ef->ctftab, M_LINKER); 1304 free(ef->ctfoff, M_LINKER); 1305 free(ef->typoff, M_LINKER); 1306 } 1307 1308 static const char * 1309 symbol_name(elf_file_t ef, Elf_Size r_info) 1310 { 1311 const Elf_Sym *ref; 1312 1313 if (ELF_R_SYM(r_info)) { 1314 ref = ef->ddbsymtab + ELF_R_SYM(r_info); 1315 return ef->ddbstrtab + ref->st_name; 1316 } else 1317 return NULL; 1318 } 1319 1320 static Elf_Addr 1321 findbase(elf_file_t ef, int sec) 1322 { 1323 int i; 1324 Elf_Addr base = 0; 1325 1326 for (i = 0; i < ef->nprogtab; i++) { 1327 if (sec == ef->progtab[i].sec) { 1328 base = (Elf_Addr)ef->progtab[i].addr; 1329 break; 1330 } 1331 } 1332 return base; 1333 } 1334 1335 static int 1336 relocate_file1(elf_file_t ef, bool ifuncs) 1337 { 1338 const Elf_Rel *rellim; 1339 const Elf_Rel *rel; 1340 const Elf_Rela *relalim; 1341 const Elf_Rela *rela; 1342 const char *symname; 1343 const Elf_Sym *sym; 1344 int i; 1345 Elf_Size symidx; 1346 Elf_Addr base; 1347 1348 /* Perform relocations without addend if there are any: */ 1349 for (i = 0; i < ef->nreltab; i++) { 1350 rel = ef->reltab[i].rel; 1351 if (rel == NULL) { 1352 link_elf_error(ef->lf.filename, "lost a reltab!"); 1353 return (ENOEXEC); 1354 } 1355 rellim = rel + ef->reltab[i].nrel; 1356 base = findbase(ef, ef->reltab[i].sec); 1357 if (base == 0) { 1358 link_elf_error(ef->lf.filename, "lost base for reltab"); 1359 return (ENOEXEC); 1360 } 1361 for ( ; rel < rellim; rel++) { 1362 symidx = ELF_R_SYM(rel->r_info); 1363 if (symidx >= ef->ddbsymcnt) 1364 continue; 1365 sym = ef->ddbsymtab + symidx; 1366 /* Local relocs are already done */ 1367 if (ELF_ST_BIND(sym->st_info) == STB_LOCAL) 1368 continue; 1369 if ((ELF_ST_TYPE(sym->st_info) == STT_GNU_IFUNC || 1370 elf_is_ifunc_reloc(rel->r_info)) != ifuncs) 1371 continue; 1372 if (elf_reloc(&ef->lf, base, rel, ELF_RELOC_REL, 1373 elf_obj_lookup)) { 1374 symname = symbol_name(ef, rel->r_info); 1375 printf("link_elf_obj: symbol %s undefined\n", 1376 symname); 1377 return (ENOENT); 1378 } 1379 } 1380 } 1381 1382 /* Perform relocations with addend if there are any: */ 1383 for (i = 0; i < ef->nrelatab; i++) { 1384 rela = ef->relatab[i].rela; 1385 if (rela == NULL) { 1386 link_elf_error(ef->lf.filename, "lost a relatab!"); 1387 return (ENOEXEC); 1388 } 1389 relalim = rela + ef->relatab[i].nrela; 1390 base = findbase(ef, ef->relatab[i].sec); 1391 if (base == 0) { 1392 link_elf_error(ef->lf.filename, 1393 "lost base for relatab"); 1394 return (ENOEXEC); 1395 } 1396 for ( ; rela < relalim; rela++) { 1397 symidx = ELF_R_SYM(rela->r_info); 1398 if (symidx >= ef->ddbsymcnt) 1399 continue; 1400 sym = ef->ddbsymtab + symidx; 1401 /* Local relocs are already done */ 1402 if (ELF_ST_BIND(sym->st_info) == STB_LOCAL) 1403 continue; 1404 if ((ELF_ST_TYPE(sym->st_info) == STT_GNU_IFUNC || 1405 elf_is_ifunc_reloc(rela->r_info)) != ifuncs) 1406 continue; 1407 if (elf_reloc(&ef->lf, base, rela, ELF_RELOC_RELA, 1408 elf_obj_lookup)) { 1409 symname = symbol_name(ef, rela->r_info); 1410 printf("link_elf_obj: symbol %s undefined\n", 1411 symname); 1412 return (ENOENT); 1413 } 1414 } 1415 } 1416 1417 /* 1418 * Only clean SHN_FBSD_CACHED for successful return. If we 1419 * modified symbol table for the object but found an 1420 * unresolved symbol, there is no reason to roll back. 1421 */ 1422 elf_obj_cleanup_globals_cache(ef); 1423 1424 return (0); 1425 } 1426 1427 static int 1428 relocate_file(elf_file_t ef) 1429 { 1430 int error; 1431 1432 error = relocate_file1(ef, false); 1433 if (error == 0) 1434 error = relocate_file1(ef, true); 1435 return (error); 1436 } 1437 1438 static int 1439 link_elf_lookup_symbol1(linker_file_t lf, const char *name, c_linker_sym_t *sym, 1440 bool see_local) 1441 { 1442 elf_file_t ef = (elf_file_t)lf; 1443 const Elf_Sym *symp; 1444 const char *strp; 1445 int i; 1446 1447 for (i = 0, symp = ef->ddbsymtab; i < ef->ddbsymcnt; i++, symp++) { 1448 strp = ef->ddbstrtab + symp->st_name; 1449 if (symp->st_shndx != SHN_UNDEF && strcmp(name, strp) == 0) { 1450 if (see_local || 1451 ELF_ST_BIND(symp->st_info) == STB_GLOBAL) { 1452 *sym = (c_linker_sym_t) symp; 1453 return (0); 1454 } 1455 return (ENOENT); 1456 } 1457 } 1458 return (ENOENT); 1459 } 1460 1461 static int 1462 link_elf_lookup_symbol(linker_file_t lf, const char *name, c_linker_sym_t *sym) 1463 { 1464 return (link_elf_lookup_symbol1(lf, name, sym, 1465 link_elf_obj_leak_locals)); 1466 } 1467 1468 static int 1469 link_elf_lookup_debug_symbol(linker_file_t lf, const char *name, 1470 c_linker_sym_t *sym) 1471 { 1472 return (link_elf_lookup_symbol1(lf, name, sym, true)); 1473 } 1474 1475 static int 1476 link_elf_symbol_values1(linker_file_t lf, c_linker_sym_t sym, 1477 linker_symval_t *symval, bool see_local) 1478 { 1479 elf_file_t ef; 1480 const Elf_Sym *es; 1481 caddr_t val; 1482 1483 ef = (elf_file_t) lf; 1484 es = (const Elf_Sym*) sym; 1485 val = (caddr_t)es->st_value; 1486 if (es >= ef->ddbsymtab && es < (ef->ddbsymtab + ef->ddbsymcnt)) { 1487 if (!see_local && ELF_ST_BIND(es->st_info) == STB_LOCAL) 1488 return (ENOENT); 1489 symval->name = ef->ddbstrtab + es->st_name; 1490 val = (caddr_t)es->st_value; 1491 if (ELF_ST_TYPE(es->st_info) == STT_GNU_IFUNC) 1492 val = ((caddr_t (*)(void))val)(); 1493 symval->value = val; 1494 symval->size = es->st_size; 1495 return (0); 1496 } 1497 return (ENOENT); 1498 } 1499 1500 static int 1501 link_elf_symbol_values(linker_file_t lf, c_linker_sym_t sym, 1502 linker_symval_t *symval) 1503 { 1504 return (link_elf_symbol_values1(lf, sym, symval, 1505 link_elf_obj_leak_locals)); 1506 } 1507 1508 static int 1509 link_elf_debug_symbol_values(linker_file_t lf, c_linker_sym_t sym, 1510 linker_symval_t *symval) 1511 { 1512 return (link_elf_symbol_values1(lf, sym, symval, true)); 1513 } 1514 1515 static int 1516 link_elf_search_symbol(linker_file_t lf, caddr_t value, 1517 c_linker_sym_t *sym, long *diffp) 1518 { 1519 elf_file_t ef = (elf_file_t)lf; 1520 u_long off = (uintptr_t)(void *)value; 1521 u_long diff = off; 1522 u_long st_value; 1523 const Elf_Sym *es; 1524 const Elf_Sym *best = NULL; 1525 int i; 1526 1527 for (i = 0, es = ef->ddbsymtab; i < ef->ddbsymcnt; i++, es++) { 1528 if (es->st_name == 0) 1529 continue; 1530 st_value = es->st_value; 1531 if (off >= st_value) { 1532 if (off - st_value < diff) { 1533 diff = off - st_value; 1534 best = es; 1535 if (diff == 0) 1536 break; 1537 } else if (off - st_value == diff) { 1538 best = es; 1539 } 1540 } 1541 } 1542 if (best == NULL) 1543 *diffp = off; 1544 else 1545 *diffp = diff; 1546 *sym = (c_linker_sym_t) best; 1547 1548 return (0); 1549 } 1550 1551 /* 1552 * Look up a linker set on an ELF system. 1553 */ 1554 static int 1555 link_elf_lookup_set(linker_file_t lf, const char *name, 1556 void ***startp, void ***stopp, int *countp) 1557 { 1558 elf_file_t ef = (elf_file_t)lf; 1559 void **start, **stop; 1560 int i, count; 1561 1562 /* Relative to section number */ 1563 for (i = 0; i < ef->nprogtab; i++) { 1564 if ((strncmp(ef->progtab[i].name, "set_", 4) == 0) && 1565 strcmp(ef->progtab[i].name + 4, name) == 0) { 1566 start = (void **)ef->progtab[i].addr; 1567 stop = (void **)((char *)ef->progtab[i].addr + 1568 ef->progtab[i].size); 1569 count = stop - start; 1570 if (startp) 1571 *startp = start; 1572 if (stopp) 1573 *stopp = stop; 1574 if (countp) 1575 *countp = count; 1576 return (0); 1577 } 1578 } 1579 return (ESRCH); 1580 } 1581 1582 static int 1583 link_elf_each_function_name(linker_file_t file, 1584 int (*callback)(const char *, void *), void *opaque) 1585 { 1586 elf_file_t ef = (elf_file_t)file; 1587 const Elf_Sym *symp; 1588 int i, error; 1589 1590 /* Exhaustive search */ 1591 for (i = 0, symp = ef->ddbsymtab; i < ef->ddbsymcnt; i++, symp++) { 1592 if (symp->st_value != 0 && 1593 (ELF_ST_TYPE(symp->st_info) == STT_FUNC || 1594 ELF_ST_TYPE(symp->st_info) == STT_GNU_IFUNC)) { 1595 error = callback(ef->ddbstrtab + symp->st_name, opaque); 1596 if (error) 1597 return (error); 1598 } 1599 } 1600 return (0); 1601 } 1602 1603 static int 1604 link_elf_each_function_nameval(linker_file_t file, 1605 linker_function_nameval_callback_t callback, void *opaque) 1606 { 1607 linker_symval_t symval; 1608 elf_file_t ef = (elf_file_t)file; 1609 const Elf_Sym *symp; 1610 int i, error; 1611 1612 /* Exhaustive search */ 1613 for (i = 0, symp = ef->ddbsymtab; i < ef->ddbsymcnt; i++, symp++) { 1614 if (symp->st_value != 0 && 1615 (ELF_ST_TYPE(symp->st_info) == STT_FUNC || 1616 ELF_ST_TYPE(symp->st_info) == STT_GNU_IFUNC)) { 1617 error = link_elf_debug_symbol_values(file, 1618 (c_linker_sym_t)symp, &symval); 1619 if (error == 0) 1620 error = callback(file, i, &symval, opaque); 1621 if (error != 0) 1622 return (error); 1623 } 1624 } 1625 return (0); 1626 } 1627 1628 static void 1629 elf_obj_cleanup_globals_cache(elf_file_t ef) 1630 { 1631 Elf_Sym *sym; 1632 Elf_Size i; 1633 1634 for (i = 0; i < ef->ddbsymcnt; i++) { 1635 sym = ef->ddbsymtab + i; 1636 if (sym->st_shndx == SHN_FBSD_CACHED) { 1637 sym->st_shndx = SHN_UNDEF; 1638 sym->st_value = 0; 1639 } 1640 } 1641 } 1642 1643 /* 1644 * Symbol lookup function that can be used when the symbol index is known (ie 1645 * in relocations). It uses the symbol index instead of doing a fully fledged 1646 * hash table based lookup when such is valid. For example for local symbols. 1647 * This is not only more efficient, it's also more correct. It's not always 1648 * the case that the symbol can be found through the hash table. 1649 */ 1650 static int 1651 elf_obj_lookup(linker_file_t lf, Elf_Size symidx, int deps, Elf_Addr *res) 1652 { 1653 elf_file_t ef = (elf_file_t)lf; 1654 Elf_Sym *sym; 1655 const char *symbol; 1656 Elf_Addr res1; 1657 1658 /* Don't even try to lookup the symbol if the index is bogus. */ 1659 if (symidx >= ef->ddbsymcnt) { 1660 *res = 0; 1661 return (EINVAL); 1662 } 1663 1664 sym = ef->ddbsymtab + symidx; 1665 1666 /* Quick answer if there is a definition included. */ 1667 if (sym->st_shndx != SHN_UNDEF) { 1668 res1 = (Elf_Addr)sym->st_value; 1669 if (ELF_ST_TYPE(sym->st_info) == STT_GNU_IFUNC) 1670 res1 = ((Elf_Addr (*)(void))res1)(); 1671 *res = res1; 1672 return (0); 1673 } 1674 1675 /* If we get here, then it is undefined and needs a lookup. */ 1676 switch (ELF_ST_BIND(sym->st_info)) { 1677 case STB_LOCAL: 1678 /* Local, but undefined? huh? */ 1679 *res = 0; 1680 return (EINVAL); 1681 1682 case STB_GLOBAL: 1683 case STB_WEAK: 1684 /* Relative to Data or Function name */ 1685 symbol = ef->ddbstrtab + sym->st_name; 1686 1687 /* Force a lookup failure if the symbol name is bogus. */ 1688 if (*symbol == 0) { 1689 *res = 0; 1690 return (EINVAL); 1691 } 1692 res1 = (Elf_Addr)linker_file_lookup_symbol(lf, symbol, deps); 1693 1694 /* 1695 * Cache global lookups during module relocation. The failure 1696 * case is particularly expensive for callers, who must scan 1697 * through the entire globals table doing strcmp(). Cache to 1698 * avoid doing such work repeatedly. 1699 * 1700 * After relocation is complete, undefined globals will be 1701 * restored to SHN_UNDEF in elf_obj_cleanup_globals_cache(), 1702 * above. 1703 */ 1704 if (res1 != 0) { 1705 sym->st_shndx = SHN_FBSD_CACHED; 1706 sym->st_value = res1; 1707 *res = res1; 1708 return (0); 1709 } else if (ELF_ST_BIND(sym->st_info) == STB_WEAK) { 1710 sym->st_value = 0; 1711 *res = 0; 1712 return (0); 1713 } 1714 return (EINVAL); 1715 1716 default: 1717 return (EINVAL); 1718 } 1719 } 1720 1721 static void 1722 link_elf_fix_link_set(elf_file_t ef) 1723 { 1724 static const char startn[] = "__start_"; 1725 static const char stopn[] = "__stop_"; 1726 Elf_Sym *sym; 1727 const char *sym_name, *linkset_name; 1728 Elf_Addr startp, stopp; 1729 Elf_Size symidx; 1730 int start, i; 1731 1732 startp = stopp = 0; 1733 for (symidx = 1 /* zero entry is special */; 1734 symidx < ef->ddbsymcnt; symidx++) { 1735 sym = ef->ddbsymtab + symidx; 1736 if (sym->st_shndx != SHN_UNDEF) 1737 continue; 1738 1739 sym_name = ef->ddbstrtab + sym->st_name; 1740 if (strncmp(sym_name, startn, sizeof(startn) - 1) == 0) { 1741 start = 1; 1742 linkset_name = sym_name + sizeof(startn) - 1; 1743 } 1744 else if (strncmp(sym_name, stopn, sizeof(stopn) - 1) == 0) { 1745 start = 0; 1746 linkset_name = sym_name + sizeof(stopn) - 1; 1747 } 1748 else 1749 continue; 1750 1751 for (i = 0; i < ef->nprogtab; i++) { 1752 if (strcmp(ef->progtab[i].name, linkset_name) == 0) { 1753 startp = (Elf_Addr)ef->progtab[i].addr; 1754 stopp = (Elf_Addr)(startp + ef->progtab[i].size); 1755 break; 1756 } 1757 } 1758 if (i == ef->nprogtab) 1759 continue; 1760 1761 sym->st_value = start ? startp : stopp; 1762 sym->st_shndx = i; 1763 } 1764 } 1765 1766 static int 1767 link_elf_reloc_local(linker_file_t lf, bool ifuncs) 1768 { 1769 elf_file_t ef = (elf_file_t)lf; 1770 const Elf_Rel *rellim; 1771 const Elf_Rel *rel; 1772 const Elf_Rela *relalim; 1773 const Elf_Rela *rela; 1774 const Elf_Sym *sym; 1775 Elf_Addr base; 1776 int i; 1777 Elf_Size symidx; 1778 1779 link_elf_fix_link_set(ef); 1780 1781 /* Perform relocations without addend if there are any: */ 1782 for (i = 0; i < ef->nreltab; i++) { 1783 rel = ef->reltab[i].rel; 1784 if (rel == NULL) { 1785 link_elf_error(ef->lf.filename, "lost a reltab"); 1786 return (ENOEXEC); 1787 } 1788 rellim = rel + ef->reltab[i].nrel; 1789 base = findbase(ef, ef->reltab[i].sec); 1790 if (base == 0) { 1791 link_elf_error(ef->lf.filename, "lost base for reltab"); 1792 return (ENOEXEC); 1793 } 1794 for ( ; rel < rellim; rel++) { 1795 symidx = ELF_R_SYM(rel->r_info); 1796 if (symidx >= ef->ddbsymcnt) 1797 continue; 1798 sym = ef->ddbsymtab + symidx; 1799 /* Only do local relocs */ 1800 if (ELF_ST_BIND(sym->st_info) != STB_LOCAL) 1801 continue; 1802 if ((ELF_ST_TYPE(sym->st_info) == STT_GNU_IFUNC || 1803 elf_is_ifunc_reloc(rel->r_info)) != ifuncs) 1804 continue; 1805 if (elf_reloc_local(lf, base, rel, ELF_RELOC_REL, 1806 elf_obj_lookup) != 0) 1807 return (ENOEXEC); 1808 } 1809 } 1810 1811 /* Perform relocations with addend if there are any: */ 1812 for (i = 0; i < ef->nrelatab; i++) { 1813 rela = ef->relatab[i].rela; 1814 if (rela == NULL) { 1815 link_elf_error(ef->lf.filename, "lost a relatab!"); 1816 return (ENOEXEC); 1817 } 1818 relalim = rela + ef->relatab[i].nrela; 1819 base = findbase(ef, ef->relatab[i].sec); 1820 if (base == 0) { 1821 link_elf_error(ef->lf.filename, "lost base for reltab"); 1822 return (ENOEXEC); 1823 } 1824 for ( ; rela < relalim; rela++) { 1825 symidx = ELF_R_SYM(rela->r_info); 1826 if (symidx >= ef->ddbsymcnt) 1827 continue; 1828 sym = ef->ddbsymtab + symidx; 1829 /* Only do local relocs */ 1830 if (ELF_ST_BIND(sym->st_info) != STB_LOCAL) 1831 continue; 1832 if ((ELF_ST_TYPE(sym->st_info) == STT_GNU_IFUNC || 1833 elf_is_ifunc_reloc(rela->r_info)) != ifuncs) 1834 continue; 1835 if (elf_reloc_local(lf, base, rela, ELF_RELOC_RELA, 1836 elf_obj_lookup) != 0) 1837 return (ENOEXEC); 1838 } 1839 } 1840 return (0); 1841 } 1842 1843 static long 1844 link_elf_symtab_get(linker_file_t lf, const Elf_Sym **symtab) 1845 { 1846 elf_file_t ef = (elf_file_t)lf; 1847 1848 *symtab = ef->ddbsymtab; 1849 if (*symtab == NULL) 1850 return (0); 1851 return (ef->ddbsymcnt); 1852 } 1853 1854 static long 1855 link_elf_strtab_get(linker_file_t lf, caddr_t *strtab) 1856 { 1857 elf_file_t ef = (elf_file_t)lf; 1858 1859 *strtab = ef->ddbstrtab; 1860 if (*strtab == NULL) 1861 return (0); 1862 return (ef->ddbstrcnt); 1863 } 1864