xref: /freebsd/sys/kern/link_elf_obj.c (revision 5521ff5a4d1929056e7ffc982fac3341ca54df7c)
1 /*-
2  * Copyright (c) 1998-2000 Doug Rabson
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  * $FreeBSD$
27  */
28 
29 #include "opt_ddb.h"
30 
31 #include <sys/param.h>
32 #include <sys/systm.h>
33 #include <sys/kernel.h>
34 #include <sys/lock.h>
35 #include <sys/malloc.h>
36 #include <sys/mutex.h>
37 #include <sys/proc.h>
38 #include <sys/namei.h>
39 #include <sys/fcntl.h>
40 #include <sys/vnode.h>
41 #include <sys/linker.h>
42 
43 #include <machine/elf.h>
44 
45 #include <vm/vm.h>
46 #include <vm/vm_param.h>
47 #ifdef SPARSE_MAPPING
48 #include <vm/vm_object.h>
49 #include <vm/vm_kern.h>
50 #include <vm/vm_extern.h>
51 #endif
52 #include <vm/pmap.h>
53 #include <vm/vm_map.h>
54 
55 #ifdef __AOUT__
56 #include <nlist.h>
57 #endif
58 #include <link.h>
59 
60 #include "linker_if.h"
61 
62 typedef struct elf_file {
63     struct linker_file	lf;		/* Common fields */
64     int			preloaded;	/* Was file pre-loaded */
65     caddr_t		address;	/* Relocation address */
66 #ifdef SPARSE_MAPPING
67     vm_object_t		object;		/* VM object to hold file pages */
68 #endif
69     Elf_Dyn*		dynamic;	/* Symbol table etc. */
70     Elf_Off		nbuckets;	/* DT_HASH info */
71     Elf_Off		nchains;
72     const Elf_Off*	buckets;
73     const Elf_Off*	chains;
74     caddr_t		hash;
75     caddr_t		strtab;		/* DT_STRTAB */
76     int			strsz;		/* DT_STRSZ */
77     const Elf_Sym*	symtab;		/* DT_SYMTAB */
78     Elf_Addr*		got;		/* DT_PLTGOT */
79     const Elf_Rel*	pltrel;		/* DT_JMPREL */
80     int			pltrelsize;	/* DT_PLTRELSZ */
81     const Elf_Rela*	pltrela;	/* DT_JMPREL */
82     int			pltrelasize;	/* DT_PLTRELSZ */
83     const Elf_Rel*	rel;		/* DT_REL */
84     int			relsize;	/* DT_RELSZ */
85     const Elf_Rela*	rela;		/* DT_RELA */
86     int			relasize;	/* DT_RELASZ */
87     caddr_t		modptr;
88     const Elf_Sym*	ddbsymtab;	/* The symbol table we are using */
89     long		ddbsymcnt;	/* Number of symbols */
90     caddr_t		ddbstrtab;	/* String table */
91     long		ddbstrcnt;	/* number of bytes in string table */
92     caddr_t		symbase;	/* malloc'ed symbold base */
93     caddr_t		strbase;	/* malloc'ed string base */
94 #ifdef DDB
95     struct link_map	gdb;		/* hooks for gdb */
96 #endif
97 } *elf_file_t;
98 
99 static int	link_elf_link_preload(linker_class_t cls,
100 				      const char*, linker_file_t*);
101 static int	link_elf_link_preload_finish(linker_file_t);
102 static int	link_elf_load_file(linker_class_t, const char*, linker_file_t*);
103 static int	link_elf_lookup_symbol(linker_file_t, const char*,
104 				       c_linker_sym_t*);
105 static int	link_elf_symbol_values(linker_file_t, c_linker_sym_t, linker_symval_t*);
106 static int	link_elf_search_symbol(linker_file_t, caddr_t value,
107 				       c_linker_sym_t* sym, long* diffp);
108 
109 static void	link_elf_unload_file(linker_file_t);
110 static void	link_elf_unload_preload(linker_file_t);
111 static int	link_elf_lookup_set(linker_file_t, const char *,
112 				    void ***, void ***, int *);
113 
114 static kobj_method_t link_elf_methods[] = {
115     KOBJMETHOD(linker_lookup_symbol,	link_elf_lookup_symbol),
116     KOBJMETHOD(linker_symbol_values,	link_elf_symbol_values),
117     KOBJMETHOD(linker_search_symbol,	link_elf_search_symbol),
118     KOBJMETHOD(linker_unload,		link_elf_unload_file),
119     KOBJMETHOD(linker_load_file,	link_elf_load_file),
120     KOBJMETHOD(linker_link_preload,	link_elf_link_preload),
121     KOBJMETHOD(linker_link_preload_finish, link_elf_link_preload_finish),
122     KOBJMETHOD(linker_lookup_set,	link_elf_lookup_set),
123     { 0, 0 }
124 };
125 
126 static struct linker_class link_elf_class = {
127 #if ELF_TARG_CLASS == ELFCLASS32
128     "elf32",
129 #else
130     "elf64",
131 #endif
132     link_elf_methods, sizeof(struct elf_file)
133 };
134 
135 static int		parse_dynamic(elf_file_t ef);
136 static int		relocate_file(elf_file_t ef);
137 static int		link_elf_preload_parse_symbols(elf_file_t ef);
138 
139 #ifdef DDB
140 static void		r_debug_state(struct r_debug *dummy_one,
141 				      struct link_map *dummy_two);
142 
143 /*
144  * A list of loaded modules for GDB to use for loading symbols.
145  */
146 struct r_debug r_debug;
147 
148 #define GDB_STATE(s)	r_debug.r_state = s; r_debug_state(NULL, NULL);
149 
150 /*
151  * Function for the debugger to set a breakpoint on to gain control.
152  */
153 void
154 r_debug_state(struct r_debug *dummy_one __unused,
155 	      struct link_map *dummy_two __unused)
156 {
157 }
158 
159 #endif
160 
161 /*
162  * The kernel symbol table starts here.
163  */
164 #ifndef __ia64__
165 extern struct _dynamic _DYNAMIC;
166 #endif
167 
168 static void
169 link_elf_init(void* arg)
170 {
171 #ifdef __ELF__
172     Elf_Dyn	*dp;
173     caddr_t	modptr, baseptr, sizeptr;
174     elf_file_t	ef;
175     char	*modname;
176 #endif
177 
178     linker_add_class(&link_elf_class);
179 
180 #ifdef __ELF__
181 #ifndef __ia64__
182     dp = (Elf_Dyn*) &_DYNAMIC;
183 #else
184     dp = 0;
185 #endif
186     if (dp) {
187 	modname = NULL;
188 	modptr = preload_search_by_type("elf kernel");
189 	if (modptr)
190 	    modname = (char *)preload_search_info(modptr, MODINFO_NAME);
191 	if (modname == NULL)
192 	    modname = "kernel";
193 	linker_kernel_file = linker_make_file(modname, &link_elf_class);
194 	if (linker_kernel_file == NULL)
195 	    panic("link_elf_init: Can't create linker structures for kernel");
196 
197 	ef = (elf_file_t) linker_kernel_file;
198 	ef->preloaded = 1;
199 	ef->address = 0;
200 #ifdef SPARSE_MAPPING
201 	ef->object = 0;
202 #endif
203 	ef->dynamic = dp;
204 
205 	parse_dynamic(ef);
206 	linker_kernel_file->address = (caddr_t) KERNBASE;
207 	linker_kernel_file->size = -(intptr_t)linker_kernel_file->address;
208 
209 	if (modptr) {
210 	    ef->modptr = modptr;
211 	    baseptr = preload_search_info(modptr, MODINFO_ADDR);
212 	    if (baseptr)
213 		linker_kernel_file->address = *(caddr_t *)baseptr;
214 	    sizeptr = preload_search_info(modptr, MODINFO_SIZE);
215 	    if (sizeptr)
216 		linker_kernel_file->size = *(size_t *)sizeptr;
217 	}
218 	(void)link_elf_preload_parse_symbols(ef);
219 
220 #ifdef DDB
221 	ef->gdb.l_addr = linker_kernel_file->address;
222 	ef->gdb.l_name = modname;
223 	ef->gdb.l_ld = dp;
224 	ef->gdb.l_prev = 0;
225 	ef->gdb.l_next = 0;
226 
227 	r_debug.r_map = &ef->gdb;
228 	r_debug.r_brk = r_debug_state;
229 	r_debug.r_state = RT_CONSISTENT;
230 
231 	r_debug_state(NULL, NULL);	/* say hello to gdb! */
232 #endif
233 
234     }
235 #endif
236 }
237 
238 SYSINIT(link_elf, SI_SUB_KLD, SI_ORDER_SECOND, link_elf_init, 0);
239 
240 static int
241 link_elf_preload_parse_symbols(elf_file_t ef)
242 {
243     caddr_t	pointer;
244     caddr_t	ssym, esym, base;
245     caddr_t	strtab;
246     int		strcnt;
247     Elf_Sym*	symtab;
248     int		symcnt;
249 
250     if (ef->modptr == NULL)
251 	return 0;
252     pointer = preload_search_info(ef->modptr, MODINFO_METADATA|MODINFOMD_SSYM);
253     if (pointer == NULL)
254 	return 0;
255     ssym = *(caddr_t *)pointer;
256     pointer = preload_search_info(ef->modptr, MODINFO_METADATA|MODINFOMD_ESYM);
257     if (pointer == NULL)
258 	return 0;
259     esym = *(caddr_t *)pointer;
260 
261     base = ssym;
262 
263     symcnt = *(long *)base;
264     base += sizeof(long);
265     symtab = (Elf_Sym *)base;
266     base += roundup(symcnt, sizeof(long));
267 
268     if (base > esym || base < ssym) {
269 	printf("Symbols are corrupt!\n");
270 	return EINVAL;
271     }
272 
273     strcnt = *(long *)base;
274     base += sizeof(long);
275     strtab = base;
276     base += roundup(strcnt, sizeof(long));
277 
278     if (base > esym || base < ssym) {
279 	printf("Symbols are corrupt!\n");
280 	return EINVAL;
281     }
282 
283     ef->ddbsymtab = symtab;
284     ef->ddbsymcnt = symcnt / sizeof(Elf_Sym);
285     ef->ddbstrtab = strtab;
286     ef->ddbstrcnt = strcnt;
287 
288     return 0;
289 }
290 
291 static int
292 parse_dynamic(elf_file_t ef)
293 {
294     Elf_Dyn *dp;
295     int plttype = DT_REL;
296 
297     for (dp = ef->dynamic; dp->d_tag != DT_NULL; dp++) {
298 	switch (dp->d_tag) {
299 	case DT_HASH:
300 	{
301 	    /* From src/libexec/rtld-elf/rtld.c */
302 	    const Elf_Off *hashtab = (const Elf_Off *)
303 		(ef->address + dp->d_un.d_ptr);
304 	    ef->nbuckets = hashtab[0];
305 	    ef->nchains = hashtab[1];
306 	    ef->buckets = hashtab + 2;
307 	    ef->chains = ef->buckets + ef->nbuckets;
308 	    break;
309 	}
310 	case DT_STRTAB:
311 	    ef->strtab = (caddr_t) (ef->address + dp->d_un.d_ptr);
312 	    break;
313 	case DT_STRSZ:
314 	    ef->strsz = dp->d_un.d_val;
315 	    break;
316 	case DT_SYMTAB:
317 	    ef->symtab = (Elf_Sym*) (ef->address + dp->d_un.d_ptr);
318 	    break;
319 	case DT_SYMENT:
320 	    if (dp->d_un.d_val != sizeof(Elf_Sym))
321 		return ENOEXEC;
322 	    break;
323 	case DT_PLTGOT:
324 	    ef->got = (Elf_Addr *) (ef->address + dp->d_un.d_ptr);
325 	    break;
326 	case DT_REL:
327 	    ef->rel = (const Elf_Rel *) (ef->address + dp->d_un.d_ptr);
328 	    break;
329 	case DT_RELSZ:
330 	    ef->relsize = dp->d_un.d_val;
331 	    break;
332 	case DT_RELENT:
333 	    if (dp->d_un.d_val != sizeof(Elf_Rel))
334 		return ENOEXEC;
335 	    break;
336 	case DT_JMPREL:
337 	    ef->pltrel = (const Elf_Rel *) (ef->address + dp->d_un.d_ptr);
338 	    break;
339 	case DT_PLTRELSZ:
340 	    ef->pltrelsize = dp->d_un.d_val;
341 	    break;
342 	case DT_RELA:
343 	    ef->rela = (const Elf_Rela *) (ef->address + dp->d_un.d_ptr);
344 	    break;
345 	case DT_RELASZ:
346 	    ef->relasize = dp->d_un.d_val;
347 	    break;
348 	case DT_RELAENT:
349 	    if (dp->d_un.d_val != sizeof(Elf_Rela))
350 		return ENOEXEC;
351 	    break;
352 	case DT_PLTREL:
353 	    plttype = dp->d_un.d_val;
354 	    if (plttype != DT_REL && plttype != DT_RELA)
355 		return ENOEXEC;
356 	    break;
357 #ifdef DDB
358 	case DT_DEBUG:
359 	    dp->d_un.d_ptr = (Elf_Addr) &r_debug;
360 	    break;
361 #endif
362 	}
363     }
364 
365     if (plttype == DT_RELA) {
366 	ef->pltrela = (const Elf_Rela *) ef->pltrel;
367 	ef->pltrel = NULL;
368 	ef->pltrelasize = ef->pltrelsize;
369 	ef->pltrelsize = 0;
370     }
371 
372     ef->ddbsymtab = ef->symtab;
373     ef->ddbsymcnt = ef->nchains;
374     ef->ddbstrtab = ef->strtab;
375     ef->ddbstrcnt = ef->strsz;
376 
377     return 0;
378 }
379 
380 static void
381 link_elf_error(const char *s)
382 {
383     printf("kldload: %s\n", s);
384 }
385 
386 #ifdef DDB
387 
388 static void
389 link_elf_add_gdb(struct link_map *l)
390 {
391     struct link_map *prev;
392 
393     /*
394      * Scan to the end of the list.
395      */
396     for (prev = r_debug.r_map; prev->l_next != NULL; prev = prev->l_next)
397 	;
398 
399     /* Link in the new entry. */
400     l->l_prev = prev;
401     l->l_next = prev->l_next;
402     prev->l_next = l;
403 }
404 
405 static void
406 link_elf_delete_gdb(struct link_map *l)
407 {
408     if (l->l_prev == NULL) {
409 	if ((r_debug.r_map = l->l_next) != NULL)
410 	    l->l_next->l_prev = NULL;
411 	return;
412     }
413 
414     if ((l->l_prev->l_next = l->l_next) != NULL)
415 	l->l_next->l_prev = l->l_prev;
416 }
417 
418 #endif /* DDB */
419 
420 static int
421 link_elf_link_preload(linker_class_t cls,
422 		      const char* filename, linker_file_t *result)
423 {
424     caddr_t		modptr, baseptr, sizeptr, dynptr;
425     char		*type;
426     elf_file_t		ef;
427     linker_file_t	lf;
428     int			error;
429     vm_offset_t		dp;
430 
431     /* Look to see if we have the file preloaded */
432     modptr = preload_search_by_name(filename);
433     if (modptr == NULL)
434 	return ENOENT;
435 
436     type = (char *)preload_search_info(modptr, MODINFO_TYPE);
437     baseptr = preload_search_info(modptr, MODINFO_ADDR);
438     sizeptr = preload_search_info(modptr, MODINFO_SIZE);
439     dynptr = preload_search_info(modptr, MODINFO_METADATA|MODINFOMD_DYNAMIC);
440     if (type == NULL || strcmp(type, "elf module") != 0)
441 	return (EFTYPE);
442     if (baseptr == NULL || sizeptr == NULL || dynptr == NULL)
443 	return (EINVAL);
444 
445     lf = linker_make_file(filename, &link_elf_class);
446     if (lf == NULL) {
447 	return ENOMEM;
448     }
449 
450     ef = (elf_file_t) lf;
451     ef->preloaded = 1;
452     ef->modptr = modptr;
453     ef->address = *(caddr_t *)baseptr;
454 #ifdef SPARSE_MAPPING
455     ef->object = 0;
456 #endif
457     dp = (vm_offset_t)ef->address + *(vm_offset_t *)dynptr;
458     ef->dynamic = (Elf_Dyn *)dp;
459     lf->address = ef->address;
460     lf->size = *(size_t *)sizeptr;
461 
462     error = parse_dynamic(ef);
463     if (error) {
464 	linker_file_unload(lf);
465 	return error;
466     }
467     *result = lf;
468     return (0);
469 }
470 
471 static int
472 link_elf_link_preload_finish(linker_file_t lf)
473 {
474     elf_file_t		ef;
475     int error;
476 
477     ef = (elf_file_t) lf;
478 #if 0	/* this will be more trouble than it's worth for now */
479     for (dp = ef->dynamic; dp->d_tag != DT_NULL; dp++) {
480 	if (dp->d_tag != DT_NEEDED)
481 	    continue;
482 	modname = ef->strtab + dp->d_un.d_val;
483 	error = linker_load_module(modname, lf);
484 	if (error)
485 	    goto out;
486     }
487 #endif
488     error = relocate_file(ef);
489     if (error)
490 	return error;
491     (void)link_elf_preload_parse_symbols(ef);
492 
493 #ifdef DDB
494     GDB_STATE(RT_ADD);
495     ef->gdb.l_addr = lf->address;
496     ef->gdb.l_name = lf->filename;
497     ef->gdb.l_ld = ef->dynamic;
498     link_elf_add_gdb(&ef->gdb);
499     GDB_STATE(RT_CONSISTENT);
500 #endif
501 
502     return (0);
503 }
504 
505 static int
506 link_elf_load_file(linker_class_t cls, const char* filename, linker_file_t* result)
507 {
508     struct nameidata nd;
509     struct proc* p = curproc;	/* XXX */
510     Elf_Ehdr *hdr;
511     caddr_t firstpage;
512     int nbytes, i;
513     Elf_Phdr *phdr;
514     Elf_Phdr *phlimit;
515     Elf_Phdr *segs[2];
516     int nsegs;
517     Elf_Phdr *phdyn;
518     Elf_Phdr *phphdr;
519     caddr_t mapbase;
520     size_t mapsize;
521     Elf_Off base_offset;
522     Elf_Addr base_vaddr;
523     Elf_Addr base_vlimit;
524     int error = 0;
525     int resid, flags;
526     elf_file_t ef;
527     linker_file_t lf;
528     Elf_Shdr *shdr;
529     int symtabindex;
530     int symstrindex;
531     int symcnt;
532     int strcnt;
533 
534     GIANT_REQUIRED;
535 
536     shdr = NULL;
537     lf = NULL;
538 
539     NDINIT(&nd, LOOKUP, FOLLOW, UIO_SYSSPACE, filename, p);
540     flags = FREAD;
541     error = vn_open(&nd, &flags, 0);
542     if (error)
543 	return error;
544     NDFREE(&nd, NDF_ONLY_PNBUF);
545 
546     /*
547      * Read the elf header from the file.
548      */
549     firstpage = malloc(PAGE_SIZE, M_LINKER, M_WAITOK);
550     if (firstpage == NULL) {
551 	error = ENOMEM;
552 	goto out;
553     }
554     hdr = (Elf_Ehdr *)firstpage;
555     error = vn_rdwr(UIO_READ, nd.ni_vp, firstpage, PAGE_SIZE, 0,
556 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
557     nbytes = PAGE_SIZE - resid;
558     if (error)
559 	goto out;
560 
561     if (!IS_ELF(*hdr)) {
562 	error = ENOEXEC;
563 	goto out;
564     }
565 
566     if (hdr->e_ident[EI_CLASS] != ELF_TARG_CLASS
567       || hdr->e_ident[EI_DATA] != ELF_TARG_DATA) {
568 	link_elf_error("Unsupported file layout");
569 	error = ENOEXEC;
570 	goto out;
571     }
572     if (hdr->e_ident[EI_VERSION] != EV_CURRENT
573       || hdr->e_version != EV_CURRENT) {
574 	link_elf_error("Unsupported file version");
575 	error = ENOEXEC;
576 	goto out;
577     }
578     if (hdr->e_type != ET_EXEC && hdr->e_type != ET_DYN) {
579 	link_elf_error("Unsupported file type");
580 	error = ENOEXEC;
581 	goto out;
582     }
583     if (hdr->e_machine != ELF_TARG_MACH) {
584 	link_elf_error("Unsupported machine");
585 	error = ENOEXEC;
586 	goto out;
587     }
588 
589     /*
590      * We rely on the program header being in the first page.  This is
591      * not strictly required by the ABI specification, but it seems to
592      * always true in practice.  And, it simplifies things considerably.
593      */
594     if (!((hdr->e_phentsize == sizeof(Elf_Phdr)) &&
595 	  (hdr->e_phoff + hdr->e_phnum*sizeof(Elf_Phdr) <= PAGE_SIZE) &&
596 	  (hdr->e_phoff + hdr->e_phnum*sizeof(Elf_Phdr) <= nbytes)))
597 	link_elf_error("Unreadable program headers");
598 
599     /*
600      * Scan the program header entries, and save key information.
601      *
602      * We rely on there being exactly two load segments, text and data,
603      * in that order.
604      */
605     phdr = (Elf_Phdr *) (firstpage + hdr->e_phoff);
606     phlimit = phdr + hdr->e_phnum;
607     nsegs = 0;
608     phdyn = NULL;
609     phphdr = NULL;
610     while (phdr < phlimit) {
611 	switch (phdr->p_type) {
612 
613 	case PT_LOAD:
614 	    if (nsegs == 2) {
615 		link_elf_error("Too many sections");
616 		error = ENOEXEC;
617 		goto out;
618 	    }
619 	    segs[nsegs] = phdr;
620 	    ++nsegs;
621 	    break;
622 
623 	case PT_PHDR:
624 	    phphdr = phdr;
625 	    break;
626 
627 	case PT_DYNAMIC:
628 	    phdyn = phdr;
629 	    break;
630 
631 	case PT_INTERP:
632 	    link_elf_error("Unsupported file type");
633 	    error = ENOEXEC;
634 	    goto out;
635 	}
636 
637 	++phdr;
638     }
639     if (phdyn == NULL) {
640 	link_elf_error("Object is not dynamically-linked");
641 	error = ENOEXEC;
642 	goto out;
643     }
644 
645     /*
646      * Allocate the entire address space of the object, to stake out our
647      * contiguous region, and to establish the base address for relocation.
648      */
649     base_offset = trunc_page(segs[0]->p_offset);
650     base_vaddr = trunc_page(segs[0]->p_vaddr);
651     base_vlimit = round_page(segs[1]->p_vaddr + segs[1]->p_memsz);
652     mapsize = base_vlimit - base_vaddr;
653 
654     lf = linker_make_file(filename, &link_elf_class);
655     if (!lf) {
656 	error = ENOMEM;
657 	goto out;
658     }
659 
660     ef = (elf_file_t) lf;
661 #ifdef SPARSE_MAPPING
662     ef->object = vm_object_allocate(OBJT_DEFAULT, mapsize >> PAGE_SHIFT);
663     if (ef->object == NULL) {
664 	free(ef, M_LINKER);
665 	error = ENOMEM;
666 	goto out;
667     }
668     vm_object_reference(ef->object);
669     ef->address = (caddr_t) vm_map_min(kernel_map);
670     error = vm_map_find(kernel_map, ef->object, 0,
671 			(vm_offset_t *) &ef->address,
672 			mapsize, 1,
673 			VM_PROT_ALL, VM_PROT_ALL, 0);
674     if (error) {
675 	vm_object_deallocate(ef->object);
676 	ef->object = 0;
677 	goto out;
678     }
679 #else
680     ef->address = malloc(mapsize, M_LINKER, M_WAITOK);
681     if (!ef->address) {
682 	error = ENOMEM;
683 	goto out;
684     }
685 #endif
686     mapbase = ef->address;
687 
688     /*
689      * Read the text and data sections and zero the bss.
690      */
691     for (i = 0; i < 2; i++) {
692 	caddr_t segbase = mapbase + segs[i]->p_vaddr - base_vaddr;
693 	error = vn_rdwr(UIO_READ, nd.ni_vp,
694 			segbase, segs[i]->p_filesz, segs[i]->p_offset,
695 			UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
696 	if (error) {
697 	    goto out;
698 	}
699 	bzero(segbase + segs[i]->p_filesz,
700 	      segs[i]->p_memsz - segs[i]->p_filesz);
701 
702 #ifdef SPARSE_MAPPING
703 	/*
704 	 * Wire down the pages
705 	 */
706 	vm_map_pageable(kernel_map,
707 			(vm_offset_t) segbase,
708 			(vm_offset_t) segbase + segs[i]->p_memsz,
709 			FALSE);
710 #endif
711     }
712 
713     ef->dynamic = (Elf_Dyn *) (mapbase + phdyn->p_vaddr - base_vaddr);
714 
715     lf->address = ef->address;
716     lf->size = mapsize;
717 
718     error = parse_dynamic(ef);
719     if (error)
720 	goto out;
721     error = linker_load_dependancies(lf);
722     if (error)
723 	goto out;
724 #if 0	/* this will be more trouble than it's worth for now */
725     for (dp = ef->dynamic; dp->d_tag != DT_NULL; dp++) {
726 	if (dp->d_tag != DT_NEEDED)
727 	    continue;
728 	modname = ef->strtab + dp->d_un.d_val;
729 	error = linker_load_module(modname, lf);
730 	if (error)
731 	    goto out;
732     }
733 #endif
734     error = relocate_file(ef);
735     if (error)
736 	goto out;
737 
738     /* Try and load the symbol table if it's present.  (you can strip it!) */
739     nbytes = hdr->e_shnum * hdr->e_shentsize;
740     if (nbytes == 0 || hdr->e_shoff == 0)
741 	goto nosyms;
742     shdr = malloc(nbytes, M_LINKER, M_WAITOK | M_ZERO);
743     if (shdr == NULL) {
744 	error = ENOMEM;
745 	goto out;
746     }
747     error = vn_rdwr(UIO_READ, nd.ni_vp,
748 		    (caddr_t)shdr, nbytes, hdr->e_shoff,
749 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
750     if (error)
751 	goto out;
752     symtabindex = -1;
753     symstrindex = -1;
754     for (i = 0; i < hdr->e_shnum; i++) {
755 	if (shdr[i].sh_type == SHT_SYMTAB) {
756 	    symtabindex = i;
757 	    symstrindex = shdr[i].sh_link;
758 	}
759     }
760     if (symtabindex < 0 || symstrindex < 0)
761 	goto nosyms;
762 
763     symcnt = shdr[symtabindex].sh_size;
764     ef->symbase = malloc(symcnt, M_LINKER, M_WAITOK);
765     strcnt = shdr[symstrindex].sh_size;
766     ef->strbase = malloc(strcnt, M_LINKER, M_WAITOK);
767 
768     if (ef->symbase == NULL || ef->strbase == NULL) {
769 	error = ENOMEM;
770 	goto out;
771     }
772     error = vn_rdwr(UIO_READ, nd.ni_vp,
773 		    ef->symbase, symcnt, shdr[symtabindex].sh_offset,
774 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
775     if (error)
776 	goto out;
777     error = vn_rdwr(UIO_READ, nd.ni_vp,
778 		    ef->strbase, strcnt, shdr[symstrindex].sh_offset,
779 		    UIO_SYSSPACE, IO_NODELOCKED, p->p_ucred, &resid, p);
780     if (error)
781 	goto out;
782 
783     ef->ddbsymcnt = symcnt / sizeof(Elf_Sym);
784     ef->ddbsymtab = (const Elf_Sym *)ef->symbase;
785     ef->ddbstrcnt = strcnt;
786     ef->ddbstrtab = ef->strbase;
787 
788 #ifdef DDB
789     GDB_STATE(RT_ADD);
790     ef->gdb.l_addr = lf->address;
791     ef->gdb.l_name = filename;
792     ef->gdb.l_ld = ef->dynamic;
793     link_elf_add_gdb(&ef->gdb);
794     GDB_STATE(RT_CONSISTENT);
795 #endif
796 
797 nosyms:
798 
799     *result = lf;
800 
801 out:
802     if (error && lf)
803 	linker_file_unload(lf);
804     if (shdr)
805 	free(shdr, M_LINKER);
806     if (firstpage)
807 	free(firstpage, M_LINKER);
808     VOP_UNLOCK(nd.ni_vp, 0, p);
809     vn_close(nd.ni_vp, FREAD, p->p_ucred, p);
810 
811     return error;
812 }
813 
814 static void
815 link_elf_unload_file(linker_file_t file)
816 {
817     elf_file_t ef = (elf_file_t) file;
818 
819 #ifdef DDB
820     if (ef->gdb.l_ld) {
821 	GDB_STATE(RT_DELETE);
822 	link_elf_delete_gdb(&ef->gdb);
823 	GDB_STATE(RT_CONSISTENT);
824     }
825 #endif
826 
827     if (ef->preloaded) {
828 	link_elf_unload_preload(file);
829 	return;
830     }
831 #ifdef SPARSE_MAPPING
832     if (ef->object) {
833 	vm_map_remove(kernel_map, (vm_offset_t) ef->address,
834 		      (vm_offset_t) ef->address
835 		      + (ef->object->size << PAGE_SHIFT));
836 	vm_object_deallocate(ef->object);
837     }
838 #else
839     if (ef->address)
840 	free(ef->address, M_LINKER);
841 #endif
842     if (ef->symbase)
843 	free(ef->symbase, M_LINKER);
844     if (ef->strbase)
845 	free(ef->strbase, M_LINKER);
846 }
847 
848 static void
849 link_elf_unload_preload(linker_file_t file)
850 {
851     if (file->filename)
852 	preload_delete_name(file->filename);
853 }
854 
855 static const char *
856 symbol_name(elf_file_t ef, Elf_Word r_info)
857 {
858     const Elf_Sym *ref;
859 
860     if (ELF_R_SYM(r_info)) {
861 	ref = ef->symtab + ELF_R_SYM(r_info);
862 	return ef->strtab + ref->st_name;
863     } else
864 	return NULL;
865 }
866 
867 static int
868 relocate_file(elf_file_t ef)
869 {
870     const Elf_Rel *rellim;
871     const Elf_Rel *rel;
872     const Elf_Rela *relalim;
873     const Elf_Rela *rela;
874     const char *symname;
875 
876     /* Perform relocations without addend if there are any: */
877     rel = ef->rel;
878     if (rel) {
879 	rellim = (const Elf_Rel *)((const char *)ef->rel + ef->relsize);
880 	while (rel < rellim) {
881 	    symname = symbol_name(ef, rel->r_info);
882 	    if (elf_reloc(&ef->lf, rel, ELF_RELOC_REL, symname)) {
883 		printf("link_elf: symbol %s undefined\n", symname);
884 		return ENOENT;
885 	    }
886 	    rel++;
887 	}
888     }
889 
890     /* Perform relocations with addend if there are any: */
891     rela = ef->rela;
892     if (rela) {
893 	relalim = (const Elf_Rela *)((const char *)ef->rela + ef->relasize);
894 	while (rela < relalim) {
895 	    symname = symbol_name(ef, rela->r_info);
896 	    if (elf_reloc(&ef->lf, rela, ELF_RELOC_RELA, symname)) {
897 		printf("link_elf: symbol %s undefined\n", symname);
898 		return ENOENT;
899 	    }
900 	    rela++;
901 	}
902     }
903 
904     /* Perform PLT relocations without addend if there are any: */
905     rel = ef->pltrel;
906     if (rel) {
907 	rellim = (const Elf_Rel *)((const char *)ef->pltrel + ef->pltrelsize);
908 	while (rel < rellim) {
909 	    symname = symbol_name(ef, rel->r_info);
910 	    if (elf_reloc(&ef->lf, rel, ELF_RELOC_REL, symname)) {
911 		printf("link_elf: symbol %s undefined\n", symname);
912 		return ENOENT;
913 	    }
914 	    rel++;
915 	}
916     }
917 
918     /* Perform relocations with addend if there are any: */
919     rela = ef->pltrela;
920     if (rela) {
921 	relalim = (const Elf_Rela *)((const char *)ef->pltrela + ef->pltrelasize);
922 	while (rela < relalim) {
923 	    symname = symbol_name(ef, rela->r_info);
924 	    if (elf_reloc(&ef->lf, rela, ELF_RELOC_RELA, symname)) {
925 		printf("link_elf: symbol %s undefined\n", symname);
926 		return ENOENT;
927 	    }
928 	    rela++;
929 	}
930     }
931 
932     return 0;
933 }
934 
935 /*
936  * Hash function for symbol table lookup.  Don't even think about changing
937  * this.  It is specified by the System V ABI.
938  */
939 static unsigned long
940 elf_hash(const char *name)
941 {
942     const unsigned char *p = (const unsigned char *) name;
943     unsigned long h = 0;
944     unsigned long g;
945 
946     while (*p != '\0') {
947 	h = (h << 4) + *p++;
948 	if ((g = h & 0xf0000000) != 0)
949 	    h ^= g >> 24;
950 	h &= ~g;
951     }
952     return h;
953 }
954 
955 int
956 link_elf_lookup_symbol(linker_file_t lf, const char* name, c_linker_sym_t* sym)
957 {
958     elf_file_t ef = (elf_file_t) lf;
959     unsigned long symnum;
960     const Elf_Sym* symp;
961     const char *strp;
962     unsigned long hash;
963     int i;
964 
965     /* First, search hashed global symbols */
966     hash = elf_hash(name);
967     symnum = ef->buckets[hash % ef->nbuckets];
968 
969     while (symnum != STN_UNDEF) {
970 	if (symnum >= ef->nchains) {
971 	    printf("link_elf_lookup_symbol: corrupt symbol table\n");
972 	    return ENOENT;
973 	}
974 
975 	symp = ef->symtab + symnum;
976 	if (symp->st_name == 0) {
977 	    printf("link_elf_lookup_symbol: corrupt symbol table\n");
978 	    return ENOENT;
979 	}
980 
981 	strp = ef->strtab + symp->st_name;
982 
983 	if (strcmp(name, strp) == 0) {
984 	    if (symp->st_shndx != SHN_UNDEF ||
985 		(symp->st_value != 0 &&
986 		 ELF_ST_TYPE(symp->st_info) == STT_FUNC)) {
987 		*sym = (c_linker_sym_t) symp;
988 		return 0;
989 	    } else
990 		return ENOENT;
991 	}
992 
993 	symnum = ef->chains[symnum];
994     }
995 
996     /* If we have not found it, look at the full table (if loaded) */
997     if (ef->symtab == ef->ddbsymtab)
998 	return ENOENT;
999 
1000     /* Exhaustive search */
1001     for (i = 0, symp = ef->ddbsymtab; i < ef->ddbsymcnt; i++, symp++) {
1002 	strp = ef->ddbstrtab + symp->st_name;
1003 	if (strcmp(name, strp) == 0) {
1004 	    if (symp->st_shndx != SHN_UNDEF ||
1005 		(symp->st_value != 0 &&
1006 		 ELF_ST_TYPE(symp->st_info) == STT_FUNC)) {
1007 		*sym = (c_linker_sym_t) symp;
1008 		return 0;
1009 	    } else
1010 		return ENOENT;
1011 	}
1012     }
1013 
1014     return ENOENT;
1015 }
1016 
1017 static int
1018 link_elf_symbol_values(linker_file_t lf, c_linker_sym_t sym, linker_symval_t* symval)
1019 {
1020 	elf_file_t ef = (elf_file_t) lf;
1021 	const Elf_Sym* es = (const Elf_Sym*) sym;
1022 
1023 	if (es >= ef->symtab && ((es - ef->symtab) < ef->nchains)) {
1024 	    symval->name = ef->strtab + es->st_name;
1025 	    symval->value = (caddr_t) ef->address + es->st_value;
1026 	    symval->size = es->st_size;
1027 	    return 0;
1028 	}
1029 	if (ef->symtab == ef->ddbsymtab)
1030 	    return ENOENT;
1031 	if (es >= ef->ddbsymtab && ((es - ef->ddbsymtab) < ef->ddbsymcnt)) {
1032 	    symval->name = ef->ddbstrtab + es->st_name;
1033 	    symval->value = (caddr_t) ef->address + es->st_value;
1034 	    symval->size = es->st_size;
1035 	    return 0;
1036 	}
1037 	return ENOENT;
1038 }
1039 
1040 static int
1041 link_elf_search_symbol(linker_file_t lf, caddr_t value,
1042 		       c_linker_sym_t* sym, long* diffp)
1043 {
1044 	elf_file_t ef = (elf_file_t) lf;
1045 	u_long off = (uintptr_t) (void *) value;
1046 	u_long diff = off;
1047 	u_long st_value;
1048 	const Elf_Sym* es;
1049 	const Elf_Sym* best = 0;
1050 	int i;
1051 
1052 	for (i = 0, es = ef->ddbsymtab; i < ef->ddbsymcnt; i++, es++) {
1053 		if (es->st_name == 0)
1054 			continue;
1055 		st_value = es->st_value + (uintptr_t) (void *) ef->address;
1056 		if (off >= st_value) {
1057 			if (off - st_value < diff) {
1058 				diff = off - st_value;
1059 				best = es;
1060 				if (diff == 0)
1061 					break;
1062 			} else if (off - st_value == diff) {
1063 				best = es;
1064 			}
1065 		}
1066 	}
1067 	if (best == 0)
1068 		*diffp = off;
1069 	else
1070 		*diffp = diff;
1071 	*sym = (c_linker_sym_t) best;
1072 
1073 	return 0;
1074 }
1075 
1076 /*
1077  * Look up a linker set on an ELF system.
1078  */
1079 static int
1080 link_elf_lookup_set(linker_file_t lf, const char *name,
1081 		    void ***startp, void ***stopp, int *countp)
1082 {
1083 	c_linker_sym_t sym;
1084 	linker_symval_t symval;
1085 	char *setsym;
1086 	void **start, **stop;
1087 	int len, error = 0, count;
1088 
1089 	len = strlen(name) + sizeof("__start_set_"); /* sizeof includes \0 */
1090 	setsym = malloc(len, M_LINKER, M_WAITOK);
1091 	if (setsym == NULL)
1092 		return ENOMEM;
1093 
1094 	/* get address of first entry */
1095 	snprintf(setsym, len, "%s%s", "__start_set_", name);
1096 	error = link_elf_lookup_symbol(lf, setsym, &sym);
1097 	if (error)
1098 		goto out;
1099 	link_elf_symbol_values(lf, sym, &symval);
1100 	if (symval.value == 0) {
1101 		error = ESRCH;
1102 		goto out;
1103 	}
1104 	start = (void **)symval.value;
1105 
1106 	/* get address of last entry */
1107 	snprintf(setsym, len, "%s%s", "__stop_set_", name);
1108 	error = link_elf_lookup_symbol(lf, setsym, &sym);
1109 	if (error)
1110 		goto out;
1111 	link_elf_symbol_values(lf, sym, &symval);
1112 	if (symval.value == 0) {
1113 		error = ESRCH;
1114 		goto out;
1115 	}
1116 	stop = (void **)symval.value;
1117 
1118 	/* and the number of entries */
1119 	count = stop - start;
1120 
1121 	/* and copy out */
1122 	if (startp)
1123 		*startp = start;
1124 	if (stopp)
1125 		*stopp = stop;
1126 	if (countp)
1127 		*countp = count;
1128 
1129 out:
1130 	free(setsym, M_LINKER);
1131 	return error;
1132 }
1133