xref: /illumos-gate/usr/src/cmd/sgs/libld/common/update.c (revision fb9b0aa8c76ff829a7069d38161a2cecc656b091)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 
22 /*
23  *	Copyright (c) 1988 AT&T
24  *	  All Rights Reserved
25  *
26  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
27  * Use is subject to license terms.
28  */
29 
30 /*
31  * Update the new output file image, perform virtual address, offset and
32  * displacement calculations on the program headers and sections headers,
33  * and generate any new output section information.
34  */
35 
36 #define	ELF_TARGET_AMD64
37 
38 #include	<stdio.h>
39 #include	<string.h>
40 #include	<unistd.h>
41 #include	<debug.h>
42 #include	"msg.h"
43 #include	"_libld.h"
44 
45 /*
46  * Comparison routine used by qsort() for sorting of the global symbol list
47  * based off of the hashbuckets the symbol will eventually be deposited in.
48  */
49 static int
50 sym_hash_compare(Sym_s_list * s1, Sym_s_list * s2)
51 {
52 	return (s1->sl_hval - s2->sl_hval);
53 }
54 
55 /*
56  * Comparison routine used by qsort() for sorting of dyn[sym|tls]sort section
57  * indices based on the address of the symbols they reference. The
58  * use of the global dynsort_compare_syms variable is needed because
59  * we need to examine the symbols the indices reference. It is safe, because
60  * the linker is single threaded.
61  */
62 Sym *dynsort_compare_syms;
63 
64 static int
65 dynsort_compare(const void *idx1, const void *idx2)
66 {
67 	Sym *s1 = dynsort_compare_syms + *((const Word *) idx1);
68 	Sym *s2 = dynsort_compare_syms + *((const Word *) idx2);
69 
70 	/*
71 	 * Note: the logical computation for this is
72 	 *	(st_value1 - st_value2)
73 	 * However, that is only correct if the address type is smaller
74 	 * than a pointer. Writing it this way makes it immune to the
75 	 * class (32 or 64-bit) of the linker.
76 	 */
77 	return ((s1->st_value < s2->st_value) ? -1 :
78 	    (s1->st_value > s2->st_value));
79 }
80 
81 /*
82  * Scan the sorted symbols, and issue warnings if there are any duplicate
83  * values in the list. We only do this if -zverbose is set, or we are
84  * running with LD_DEBUG defined
85  *
86  * entry:
87  *	ofl - Output file descriptor
88  *	ldynsym - Pointer to start of .SUNW_ldynsym section that the
89  *		sort section indexes reference.
90  *	symsort - Pointer to start of .SUNW_dynsymsort or .SUNW_dyntlssort
91  *		section.
92  *	n - # of indices in symsort array
93  *	secname - Name of the symsort section.
94  *
95  * exit:
96  *	If the symsort section contains indexes to more than one
97  *	symbol with the same address value, a warning is issued.
98  */
99 static void
100 dynsort_dupwarn(Ofl_desc *ofl, Sym *ldynsym, const char *str,
101     Word *symsort, Word n, const char *secname)
102 {
103 	int zverbose = (ofl->ofl_flags & FLG_OF_VERBOSE) != 0;
104 	Word ndx, cmp_ndx;
105 	Addr addr, cmp_addr;
106 
107 	/* Nothing to do if -zverbose or LD_DEBUG are not active */
108 	if (!(zverbose || DBG_ENABLED))
109 		return;
110 
111 	cmp_ndx = 0;
112 	cmp_addr = ldynsym[symsort[cmp_ndx]].st_value;
113 	for (ndx = 1; ndx < n; ndx++) {
114 		addr = ldynsym[symsort[ndx]].st_value;
115 		if (cmp_addr == addr) {
116 			if (zverbose)
117 				eprintf(ofl->ofl_lml, ERR_WARNING,
118 				    MSG_INTL(MSG_SYM_DUPSORTADDR), secname,
119 				    str + ldynsym[symsort[cmp_ndx]].st_name,
120 				    str + ldynsym[symsort[ndx]].st_name,
121 				    EC_ADDR(addr));
122 			DBG_CALL(Dbg_syms_dup_sort_addr(ofl->ofl_lml, secname,
123 			    str + ldynsym[symsort[cmp_ndx]].st_name,
124 			    str + ldynsym[symsort[ndx]].st_name,
125 			    EC_ADDR(addr)));
126 		} else {	/* Not a dup. Move reference up */
127 			cmp_ndx = ndx;
128 			cmp_addr = addr;
129 		}
130 	}
131 }
132 
133 
134 /*
135  * Build and update any output symbol tables.  Here we work on all the symbol
136  * tables at once to reduce the duplication of symbol and string manipulation.
137  * Symbols and their associated strings are copied from the read-only input
138  * file images to the output image and their values and index's updated in the
139  * output image.
140  */
141 static Addr
142 update_osym(Ofl_desc *ofl)
143 {
144 	/*
145 	 * There are several places in this function where we wish
146 	 * to insert a symbol index to the combined .SUNW_ldynsym/.dynsym
147 	 * symbol table into one of the two sort sections (.SUNW_dynsymsort
148 	 * or .SUNW_dyntlssort), if that symbol has the right attributes.
149 	 * This macro is used to generate the necessary code from a single
150 	 * specification.
151 	 *
152 	 * entry:
153 	 *	_sdp, _sym, _type - As per DYNSORT_COUNT. See _libld.h
154 	 *	_sym_ndx - Index that _sym will have in the combined
155 	 *		.SUNW_ldynsym/.dynsym symbol table.
156 	 */
157 #define	ADD_TO_DYNSORT(_sdp, _sym, _type, _sym_ndx) \
158 	{ \
159 		Word *_dynsort_arr, *_dynsort_ndx; \
160 		\
161 		if (dynsymsort_symtype[_type]) { \
162 			_dynsort_arr = dynsymsort; \
163 			_dynsort_ndx = &dynsymsort_ndx; \
164 		} else if (_type == STT_TLS) { \
165 			_dynsort_arr = dyntlssort; \
166 			_dynsort_ndx = &dyntlssort_ndx; \
167 		} else { \
168 			_dynsort_arr = NULL; \
169 		} \
170 		if ((_dynsort_arr != NULL) && DYNSORT_TEST_ATTR(_sdp, _sym)) \
171 			_dynsort_arr[(*_dynsort_ndx)++] = _sym_ndx; \
172 	}
173 
174 
175 	Sym_desc	*sdp;
176 	Sym_avlnode	*sav;
177 	Sg_desc		*sgp, *tsgp = NULL, *dsgp = NULL, *esgp = NULL;
178 	Os_desc		*osp, *iosp = NULL, *fosp = NULL;
179 	Is_desc		*isc;
180 	Ifl_desc	*ifl;
181 	Word		bssndx, etext_ndx, edata_ndx = 0, end_ndx, start_ndx;
182 	Word		end_abs = 0, etext_abs = 0, edata_abs;
183 	Word		tlsbssndx = 0, parexpnndx;
184 #if	defined(_ELF64)
185 	Word		lbssndx = 0;
186 	Addr		lbssaddr = 0;
187 #endif
188 	Addr		bssaddr, etext = 0, edata = 0, end = 0, start = 0;
189 	Addr		tlsbssaddr = 0;
190 	Addr 		parexpnbase, parexpnaddr;
191 	int		start_set = 0;
192 	Sym		_sym = {0}, *sym, *symtab = NULL;
193 	Sym		*dynsym = NULL, *ldynsym = NULL;
194 	Word		symtab_ndx = 0;	/* index into .symtab */
195 	Word		symtab_gbl_bndx;	/* .symtab ndx 1st global */
196 	Word		ldynsym_ndx = 0;	/* index into .SUNW_ldynsym */
197 	Word		dynsym_ndx = 0;		/* index into .dynsym */
198 	Word		scopesym_ndx = 0; /* index into scoped symbols */
199 	Word		scopesym_bndx = 0;	/* .symtab ndx 1st scoped sym */
200 	Word		ldynscopesym_ndx = 0; /* index to ldynsym scoped syms */
201 	Word		*dynsymsort = NULL; /* SUNW_dynsymsort index vector */
202 	Word		*dyntlssort = NULL; /* SUNW_dyntlssort index vector */
203 	Word		dynsymsort_ndx;		/* index dynsymsort array */
204 	Word		dyntlssort_ndx;		/* index dyntlssort array */
205 	Word		*symndx;	/* Symbol index (for relocation use) */
206 	Word		*symshndx = NULL;	/* .symtab_shndx table */
207 	Word		*dynshndx = NULL;	/* .dynsym_shndx table */
208 	Word		*ldynshndx = NULL;	/* .SUNW_ldynsym_shndx table */
209 	Word		ldynsym_cnt = NULL; /* # of items in .SUNW_ldynsym */
210 	Str_tbl		*shstrtab;
211 	Str_tbl		*strtab;
212 	Str_tbl		*dynstr;
213 	Word		*hashtab;	/* hash table pointer */
214 	Word		*hashbkt;	/* hash table bucket pointer */
215 	Word		*hashchain;	/* hash table chain pointer */
216 	Word		hashval;	/* value of hash function */
217 	Wk_desc		*wkp;
218 	Alist		*weak = NULL;
219 	ofl_flag_t	flags = ofl->ofl_flags;
220 	Word		dtflags_1 = ofl->ofl_dtflags_1;
221 	Versym		*versym;
222 	Gottable	*gottable;	/* used for display got debugging */
223 					/*	information */
224 	Syminfo		*syminfo;
225 	Sym_s_list	*sorted_syms;	/* table to hold sorted symbols */
226 	Word		ssndx;		/* global index into sorted_syms */
227 	Word		scndx;		/* scoped index into sorted_syms */
228 	size_t		stoff;		/* string offset */
229 	Aliste		idx1;
230 
231 	/*
232 	 * Initialize pointers to the symbol table entries and the symbol
233 	 * table strings.  Skip the first symbol entry and the first string
234 	 * table byte.  Note that if we are not generating any output symbol
235 	 * tables we must still generate and update an internal copies so
236 	 * that the relocation phase has the correct information.
237 	 */
238 	if (!(flags & FLG_OF_STRIP) || (flags & FLG_OF_RELOBJ) ||
239 	    ((flags & FLG_OF_STATIC) && ofl->ofl_osversym)) {
240 		symtab = (Sym *)ofl->ofl_ossymtab->os_outdata->d_buf;
241 		symtab[symtab_ndx++] = _sym;
242 		if (ofl->ofl_ossymshndx)
243 			symshndx =
244 			    (Word *)ofl->ofl_ossymshndx->os_outdata->d_buf;
245 	}
246 	if (OFL_ALLOW_DYNSYM(ofl)) {
247 		dynsym = (Sym *)ofl->ofl_osdynsym->os_outdata->d_buf;
248 		dynsym[dynsym_ndx++] = _sym;
249 		/*
250 		 * If we are also constructing a .SUNW_ldynsym section
251 		 * to contain local function symbols, then set it up too.
252 		 */
253 		if (ofl->ofl_osldynsym) {
254 			ldynsym = (Sym *)ofl->ofl_osldynsym->os_outdata->d_buf;
255 			ldynsym[ldynsym_ndx++] = _sym;
256 			ldynsym_cnt = 1 + ofl->ofl_dynlocscnt +
257 			    ofl->ofl_dynscopecnt;
258 
259 			/*
260 			 * If there is a SUNW_ldynsym, then there may also
261 			 * be a .SUNW_dynsymsort and/or .SUNW_dyntlssort
262 			 * sections, used to collect indices of function
263 			 * and data symbols sorted by address order.
264 			 */
265 			if (ofl->ofl_osdynsymsort) {	/* .SUNW_dynsymsort */
266 				dynsymsort = (Word *)
267 				    ofl->ofl_osdynsymsort->os_outdata->d_buf;
268 				dynsymsort_ndx = 0;
269 			}
270 			if (ofl->ofl_osdyntlssort) {	/* .SUNW_dyntlssort */
271 				dyntlssort = (Word *)
272 				    ofl->ofl_osdyntlssort->os_outdata->d_buf;
273 				dyntlssort_ndx = 0;
274 			}
275 		}
276 
277 		/*
278 		 * Initialize the hash table.
279 		 */
280 		hashtab = (Word *)(ofl->ofl_oshash->os_outdata->d_buf);
281 		hashbkt = &hashtab[2];
282 		hashchain = &hashtab[2 + ofl->ofl_hashbkts];
283 		hashtab[0] = ofl->ofl_hashbkts;
284 		hashtab[1] = ofl->ofl_dynshdrcnt + ofl->ofl_globcnt +
285 		    ofl->ofl_lregsymcnt + 1;
286 		if (ofl->ofl_osdynshndx)
287 			dynshndx =
288 			    (Word *)ofl->ofl_osdynshndx->os_outdata->d_buf;
289 		if (ofl->ofl_osldynshndx)
290 			ldynshndx =
291 			    (Word *)ofl->ofl_osldynshndx->os_outdata->d_buf;
292 	}
293 
294 	/*
295 	 * symndx is the symbol index to be used for relocation processing.  It
296 	 * points to the relevant symtab's (.dynsym or .symtab) symbol ndx.
297 	 */
298 	if (dynsym)
299 		symndx = &dynsym_ndx;
300 	else
301 		symndx = &symtab_ndx;
302 
303 	/*
304 	 * If we have version definitions initialize the version symbol index
305 	 * table.  There is one entry for each symbol which contains the symbols
306 	 * version index.
307 	 */
308 	if (!(flags & FLG_OF_NOVERSEC) &&
309 	    (flags & (FLG_OF_VERNEED | FLG_OF_VERDEF))) {
310 		versym = (Versym *)ofl->ofl_osversym->os_outdata->d_buf;
311 		versym[0] = 0;
312 	} else
313 		versym = 0;
314 
315 	/*
316 	 * If syminfo section exists be prepared to fill it in.
317 	 */
318 	if (ofl->ofl_ossyminfo) {
319 		syminfo = ofl->ofl_ossyminfo->os_outdata->d_buf;
320 		syminfo[0].si_flags = SYMINFO_CURRENT;
321 	} else
322 		syminfo = 0;
323 
324 	/*
325 	 * Setup our string tables.
326 	 */
327 	shstrtab = ofl->ofl_shdrsttab;
328 	strtab = ofl->ofl_strtab;
329 	dynstr = ofl->ofl_dynstrtab;
330 
331 	DBG_CALL(Dbg_syms_sec_title(ofl->ofl_lml));
332 
333 	/*
334 	 * Put output file name to the first .symtab and .SUNW_ldynsym symbol.
335 	 */
336 	if (symtab) {
337 		(void) st_setstring(strtab, ofl->ofl_name, &stoff);
338 		sym = &symtab[symtab_ndx++];
339 		/* LINTED */
340 		sym->st_name = stoff;
341 		sym->st_value = 0;
342 		sym->st_size = 0;
343 		sym->st_info = ELF_ST_INFO(STB_LOCAL, STT_FILE);
344 		sym->st_other = 0;
345 		sym->st_shndx = SHN_ABS;
346 
347 		if (versym && !dynsym)
348 			versym[1] = 0;
349 	}
350 	if (ldynsym) {
351 		(void) st_setstring(dynstr, ofl->ofl_name, &stoff);
352 		sym = &ldynsym[ldynsym_ndx];
353 		/* LINTED */
354 		sym->st_name = stoff;
355 		sym->st_value = 0;
356 		sym->st_size = 0;
357 		sym->st_info = ELF_ST_INFO(STB_LOCAL, STT_FILE);
358 		sym->st_other = 0;
359 		sym->st_shndx = SHN_ABS;
360 
361 		/* Scoped symbols get filled in global loop below */
362 		ldynscopesym_ndx = ldynsym_ndx + 1;
363 		ldynsym_ndx += ofl->ofl_dynscopecnt;
364 	}
365 
366 	/*
367 	 * If we are to display GOT summary information, then allocate
368 	 * the buffer to 'cache' the GOT symbols into now.
369 	 */
370 	if (DBG_ENABLED) {
371 		if ((ofl->ofl_gottable = gottable =
372 		    libld_calloc(ofl->ofl_gotcnt, sizeof (Gottable))) == NULL)
373 		return ((Addr)S_ERROR);
374 	}
375 
376 	/*
377 	 * Traverse the program headers.  Determine the last executable segment
378 	 * and the last data segment so that we can update etext and edata. If
379 	 * we have empty segments (reservations) record them for setting _end.
380 	 */
381 	for (APLIST_TRAVERSE(ofl->ofl_segs, idx1, sgp)) {
382 		Phdr	*phd = &(sgp->sg_phdr);
383 		Os_desc	*osp;
384 		Aliste	idx2;
385 
386 		if (phd->p_type == PT_LOAD) {
387 			if (sgp->sg_osdescs != NULL) {
388 				Word	_flags = phd->p_flags & (PF_W | PF_R);
389 
390 				if (_flags == PF_R)
391 					tsgp = sgp;
392 				else if (_flags == (PF_W | PF_R))
393 					dsgp = sgp;
394 			} else if (sgp->sg_flags & FLG_SG_EMPTY)
395 				esgp = sgp;
396 		}
397 
398 		/*
399 		 * Generate a section symbol for each output section.
400 		 */
401 		for (APLIST_TRAVERSE(sgp->sg_osdescs, idx2, osp)) {
402 			Word	sectndx;
403 
404 			sym = &_sym;
405 			sym->st_value = osp->os_shdr->sh_addr;
406 			sym->st_info = ELF_ST_INFO(STB_LOCAL, STT_SECTION);
407 			/* LINTED */
408 			sectndx = elf_ndxscn(osp->os_scn);
409 
410 			if (symtab) {
411 				if (sectndx >= SHN_LORESERVE) {
412 					symshndx[symtab_ndx] = sectndx;
413 					sym->st_shndx = SHN_XINDEX;
414 				} else {
415 					/* LINTED */
416 					sym->st_shndx = (Half)sectndx;
417 				}
418 				symtab[symtab_ndx++] = *sym;
419 			}
420 
421 			if (dynsym && (osp->os_flags & FLG_OS_OUTREL))
422 				dynsym[dynsym_ndx++] = *sym;
423 
424 			if ((dynsym == NULL) ||
425 			    (osp->os_flags & FLG_OS_OUTREL)) {
426 				if (versym)
427 					versym[*symndx - 1] = 0;
428 				osp->os_identndx = *symndx - 1;
429 				DBG_CALL(Dbg_syms_sec_entry(ofl->ofl_lml,
430 				    osp->os_identndx, sgp, osp));
431 			}
432 
433 			/*
434 			 * Generate the .shstrtab for this section.
435 			 */
436 			(void) st_setstring(shstrtab, osp->os_name, &stoff);
437 			osp->os_shdr->sh_name = (Word)stoff;
438 
439 			/*
440 			 * Find the section index for our special symbols.
441 			 */
442 			if (sgp == tsgp) {
443 				/* LINTED */
444 				etext_ndx = elf_ndxscn(osp->os_scn);
445 			} else if (dsgp == sgp) {
446 				if (osp->os_shdr->sh_type != SHT_NOBITS) {
447 					/* LINTED */
448 					edata_ndx = elf_ndxscn(osp->os_scn);
449 				}
450 			}
451 
452 			if (start_set == 0) {
453 				start = sgp->sg_phdr.p_vaddr;
454 				/* LINTED */
455 				start_ndx = elf_ndxscn(osp->os_scn);
456 				start_set++;
457 			}
458 
459 			/*
460 			 * While we're here, determine whether a .init or .fini
461 			 * section exist.
462 			 */
463 			if ((iosp == NULL) && (strcmp(osp->os_name,
464 			    MSG_ORIG(MSG_SCN_INIT)) == 0))
465 				iosp = osp;
466 			if ((fosp == NULL) && (strcmp(osp->os_name,
467 			    MSG_ORIG(MSG_SCN_FINI)) == 0))
468 				fosp = osp;
469 		}
470 	}
471 
472 	/*
473 	 * Add local register symbols to the .dynsym.  These are required as
474 	 * DT_REGISTER .dynamic entries must have a symbol to reference.
475 	 */
476 	if (ofl->ofl_regsyms && dynsym) {
477 		int	ndx;
478 
479 		for (ndx = 0; ndx < ofl->ofl_regsymsno; ndx++) {
480 			Sym_desc	*rsdp;
481 
482 			if ((rsdp = ofl->ofl_regsyms[ndx]) == NULL)
483 				continue;
484 
485 			if (((rsdp->sd_flags1 & FLG_SY1_HIDDEN) == 0) &&
486 			    (ELF_ST_BIND(rsdp->sd_sym->st_info) != STB_LOCAL))
487 				continue;
488 
489 			dynsym[dynsym_ndx] = *(rsdp->sd_sym);
490 			rsdp->sd_symndx = *symndx;
491 
492 			if (dynsym[dynsym_ndx].st_name) {
493 				(void) st_setstring(dynstr, rsdp->sd_name,
494 				    &stoff);
495 				dynsym[dynsym_ndx].st_name = stoff;
496 			}
497 			dynsym_ndx++;
498 		}
499 	}
500 
501 	/*
502 	 * Having traversed all the output segments, warn the user if the
503 	 * traditional text or data segments don't exist.  Otherwise from these
504 	 * segments establish the values for `etext', `edata', `end', `END',
505 	 * and `START'.
506 	 */
507 	if (!(flags & FLG_OF_RELOBJ)) {
508 		Sg_desc	*sgp;
509 
510 		if (tsgp)
511 			etext = tsgp->sg_phdr.p_vaddr + tsgp->sg_phdr.p_filesz;
512 		else {
513 			etext = (Addr)0;
514 			etext_ndx = SHN_ABS;
515 			etext_abs = 1;
516 			if (flags & FLG_OF_VERBOSE)
517 				eprintf(ofl->ofl_lml, ERR_WARNING,
518 				    MSG_INTL(MSG_UPD_NOREADSEG));
519 		}
520 		if (dsgp) {
521 			edata = dsgp->sg_phdr.p_vaddr + dsgp->sg_phdr.p_filesz;
522 		} else {
523 			edata = (Addr)0;
524 			edata_ndx = SHN_ABS;
525 			edata_abs = 1;
526 			if (flags & FLG_OF_VERBOSE)
527 				eprintf(ofl->ofl_lml, ERR_WARNING,
528 				    MSG_INTL(MSG_UPD_NORDWRSEG));
529 		}
530 
531 		if (dsgp == NULL) {
532 			if (tsgp)
533 				sgp = tsgp;
534 			else
535 				sgp = 0;
536 		} else if (tsgp == NULL)
537 			sgp = dsgp;
538 		else if (dsgp->sg_phdr.p_vaddr > tsgp->sg_phdr.p_vaddr)
539 			sgp = dsgp;
540 		else if (dsgp->sg_phdr.p_vaddr < tsgp->sg_phdr.p_vaddr)
541 			sgp = tsgp;
542 		else {
543 			/*
544 			 * One of the segments must be of zero size.
545 			 */
546 			if (tsgp->sg_phdr.p_memsz)
547 				sgp = tsgp;
548 			else
549 				sgp = dsgp;
550 		}
551 
552 		if (esgp && (esgp->sg_phdr.p_vaddr > sgp->sg_phdr.p_vaddr))
553 			sgp = esgp;
554 
555 		if (sgp) {
556 			end = sgp->sg_phdr.p_vaddr + sgp->sg_phdr.p_memsz;
557 
558 			/*
559 			 * If the last loadable segment is a read-only segment,
560 			 * then the application which uses the symbol _end to
561 			 * find the beginning of writable heap area may cause
562 			 * segmentation violation. We adjust the value of the
563 			 * _end to skip to the next page boundary.
564 			 *
565 			 * 6401812 System interface which returs beginning
566 			 *	   heap would be nice.
567 			 * When the above RFE is implemented, the changes below
568 			 * could be changed in a better way.
569 			 */
570 			if ((sgp->sg_phdr.p_flags & PF_W) == 0)
571 				end = (Addr)S_ROUND(end, sysconf(_SC_PAGESIZE));
572 
573 			/*
574 			 * If we're dealing with a memory reservation there are
575 			 * no sections to establish an index for _end, so assign
576 			 * it as an absolute.
577 			 */
578 			if (sgp->sg_osdescs != NULL) {
579 				/*
580 				 * Determine the last section for this segment.
581 				 */
582 				Os_desc	*osp = sgp->sg_osdescs->apl_data
583 				    [sgp->sg_osdescs->apl_nitems - 1];
584 
585 				/* LINTED */
586 				end_ndx = elf_ndxscn(osp->os_scn);
587 			} else {
588 				end_ndx = SHN_ABS;
589 				end_abs = 1;
590 			}
591 		} else {
592 			end = (Addr) 0;
593 			end_ndx = SHN_ABS;
594 			end_abs = 1;
595 			eprintf(ofl->ofl_lml, ERR_WARNING,
596 			    MSG_INTL(MSG_UPD_NOSEG));
597 		}
598 	}
599 
600 	DBG_CALL(Dbg_syms_up_title(ofl->ofl_lml));
601 
602 	/*
603 	 * Initialize the scoped symbol table entry point.  This is for all
604 	 * the global symbols that have been scoped to locals and will be
605 	 * filled in during global symbol processing so that we don't have
606 	 * to traverse the globals symbol hash array more than once.
607 	 */
608 	if (symtab) {
609 		scopesym_bndx = symtab_ndx;
610 		scopesym_ndx = scopesym_bndx;
611 		symtab_ndx += ofl->ofl_scopecnt;
612 	}
613 
614 	/*
615 	 * If expanding partially expanded symbols under '-z nopartial',
616 	 * prepare to do that.
617 	 */
618 	if (ofl->ofl_isparexpn) {
619 		osp = ofl->ofl_isparexpn->is_osdesc;
620 		parexpnbase = parexpnaddr = (Addr)(osp->os_shdr->sh_addr +
621 		    ofl->ofl_isparexpn->is_indata->d_off);
622 		/* LINTED */
623 		parexpnndx = elf_ndxscn(osp->os_scn);
624 		ofl->ofl_parexpnndx = osp->os_identndx;
625 	}
626 
627 	/*
628 	 * If we are generating a .symtab collect all the local symbols,
629 	 * assigning a new virtual address or displacement (value).
630 	 */
631 	for (APLIST_TRAVERSE(ofl->ofl_objs, idx1, ifl)) {
632 		Xword	lndx, local;
633 
634 		/*
635 		 * Check that we have local symbols to process.  If the user
636 		 * has indicated scoping then scan the global symbols also
637 		 * looking for entries from this file to reduce to locals.
638 		 */
639 		if ((local = ifl->ifl_locscnt) == 0)
640 			continue;
641 
642 		for (lndx = 1; lndx < local; lndx++) {
643 			Gotndx		*gnp;
644 			uchar_t		type;
645 			Word		*_symshndx;
646 			int		enter_in_symtab, enter_in_ldynsym;
647 			int		update_done;
648 
649 			sdp = ifl->ifl_oldndx[lndx];
650 			sym = sdp->sd_sym;
651 
652 			/*
653 			 * Assign a got offset if necessary.
654 			 */
655 			if ((ld_targ.t_mr.mr_assign_got != NULL) &&
656 			    (*ld_targ.t_mr.mr_assign_got)(ofl, sdp) == S_ERROR)
657 				return ((Addr)S_ERROR);
658 
659 			if (DBG_ENABLED) {
660 				Aliste	idx2;
661 
662 				for (ALIST_TRAVERSE(sdp->sd_GOTndxs,
663 				    idx2, gnp)) {
664 					gottable->gt_sym = sdp;
665 					gottable->gt_gndx.gn_gotndx =
666 					    gnp->gn_gotndx;
667 					gottable->gt_gndx.gn_addend =
668 					    gnp->gn_addend;
669 					gottable++;
670 				}
671 			}
672 
673 			if ((type = ELF_ST_TYPE(sym->st_info)) == STT_SECTION)
674 				continue;
675 
676 			/*
677 			 * Ignore any symbols that have been marked as invalid
678 			 * during input processing.  Providing these aren't used
679 			 * for relocation they'll just be dropped from the
680 			 * output image.
681 			 */
682 			if (sdp->sd_flags & FLG_SY_INVALID)
683 				continue;
684 
685 			/*
686 			 * If the section that this symbol was associated
687 			 * with has been discarded - then we discard
688 			 * the local symbol along with it.
689 			 */
690 			if (sdp->sd_flags & FLG_SY_ISDISC)
691 				continue;
692 
693 			/*
694 			 * If this symbol is from a different file
695 			 * than the input descriptor we are processing,
696 			 * treat it as if it has FLG_SY_ISDISC set.
697 			 * This happens when sloppy_comdat_reloc()
698 			 * replaces a symbol to a discarded comdat section
699 			 * with an equivalent symbol from a different
700 			 * file. We only want to enter such a symbol
701 			 * once --- as part of the file that actually
702 			 * supplies it.
703 			 */
704 			if (ifl != sdp->sd_file)
705 				continue;
706 
707 
708 			/*
709 			 * Generate an output symbol to represent this input
710 			 * symbol.  Even if the symbol table is to be stripped
711 			 * we still need to update any local symbols that are
712 			 * used during relocation.
713 			 */
714 			enter_in_symtab = symtab &&
715 			    (!(ofl->ofl_flags & FLG_OF_REDLSYM) ||
716 			    sdp->sd_move);
717 			enter_in_ldynsym = ldynsym && sdp->sd_name &&
718 			    ldynsym_symtype[type] &&
719 			    !(ofl->ofl_flags & FLG_OF_REDLSYM);
720 			_symshndx = NULL;
721 
722 			if (enter_in_symtab) {
723 				if (!dynsym)
724 					sdp->sd_symndx = *symndx;
725 				symtab[symtab_ndx] = *sym;
726 				/*
727 				 * Provided this isn't an unnamed register
728 				 * symbol, update its name.
729 				 */
730 				if (((sdp->sd_flags & FLG_SY_REGSYM) == 0) ||
731 				    symtab[symtab_ndx].st_name) {
732 					(void) st_setstring(strtab,
733 					    sdp->sd_name, &stoff);
734 					symtab[symtab_ndx].st_name = stoff;
735 				}
736 				sdp->sd_flags &= ~FLG_SY_CLEAN;
737 				if (symshndx)
738 					_symshndx = &symshndx[symtab_ndx];
739 				sdp->sd_sym = sym = &symtab[symtab_ndx++];
740 
741 				if ((sdp->sd_flags & FLG_SY_SPECSEC) &&
742 				    (sym->st_shndx == SHN_ABS) &&
743 				    !enter_in_ldynsym)
744 					continue;
745 			} else if (enter_in_ldynsym) {
746 				/*
747 				 * Not using symtab, but we do have ldynsym
748 				 * available.
749 				 */
750 				ldynsym[ldynsym_ndx] = *sym;
751 				(void) st_setstring(dynstr, sdp->sd_name,
752 				    &stoff);
753 				ldynsym[ldynsym_ndx].st_name = stoff;
754 
755 				sdp->sd_flags &= ~FLG_SY_CLEAN;
756 				if (ldynshndx)
757 					_symshndx = &ldynshndx[ldynsym_ndx];
758 				sdp->sd_sym = sym = &ldynsym[ldynsym_ndx];
759 				/* Add it to sort section if it qualifies */
760 				ADD_TO_DYNSORT(sdp, sym, type, ldynsym_ndx);
761 				ldynsym_ndx++;
762 			} else {	/* Not using symtab or ldynsym */
763 				/*
764 				 * If this symbol requires modifying to provide
765 				 * for a relocation or move table update, make
766 				 * a copy of it.
767 				 */
768 				if (!(sdp->sd_flags & FLG_SY_UPREQD) &&
769 				    !(sdp->sd_move))
770 					continue;
771 				if ((sdp->sd_flags & FLG_SY_SPECSEC) &&
772 				    (sym->st_shndx == SHN_ABS))
773 					continue;
774 
775 				if (ld_sym_copy(sdp) == S_ERROR)
776 					return ((Addr)S_ERROR);
777 				sym = sdp->sd_sym;
778 			}
779 
780 			/*
781 			 * Update the symbols contents if necessary.
782 			 */
783 			update_done = 0;
784 			if (type == STT_FILE) {
785 				sdp->sd_shndx = sym->st_shndx = SHN_ABS;
786 				sdp->sd_flags |= FLG_SY_SPECSEC;
787 				update_done = 1;
788 			}
789 
790 			/*
791 			 * If we are expanding the locally bound partially
792 			 * initialized symbols, then update the address here.
793 			 */
794 			if (ofl->ofl_isparexpn &&
795 			    (sdp->sd_flags & FLG_SY_PAREXPN) && !update_done) {
796 				sym->st_shndx = parexpnndx;
797 				sdp->sd_isc = ofl->ofl_isparexpn;
798 				sym->st_value = parexpnaddr;
799 				parexpnaddr += sym->st_size;
800 				if ((flags & FLG_OF_RELOBJ) == 0)
801 					sym->st_value -= parexpnbase;
802 			}
803 
804 			/*
805 			 * If this isn't an UNDEF symbol (ie. an input section
806 			 * is associated), update the symbols value and index.
807 			 */
808 			if (((isc = sdp->sd_isc) != 0) && !update_done) {
809 				Word	sectndx;
810 
811 				osp = isc->is_osdesc;
812 				/* LINTED */
813 				sym->st_value +=
814 				    (Off)_elf_getxoff(isc->is_indata);
815 				if (!(flags & FLG_OF_RELOBJ)) {
816 					sym->st_value += osp->os_shdr->sh_addr;
817 					/*
818 					 * TLS symbols are relative to
819 					 * the TLS segment.
820 					 */
821 					if ((type == STT_TLS) &&
822 					    (ofl->ofl_tlsphdr)) {
823 						sym->st_value -=
824 						    ofl->ofl_tlsphdr->p_vaddr;
825 					}
826 				}
827 				/* LINTED */
828 				if ((sdp->sd_shndx = sectndx =
829 				    elf_ndxscn(osp->os_scn)) >= SHN_LORESERVE) {
830 					if (_symshndx) {
831 						*_symshndx = sectndx;
832 					}
833 					sym->st_shndx = SHN_XINDEX;
834 				} else {
835 					/* LINTED */
836 					sym->st_shndx = sectndx;
837 				}
838 			}
839 
840 			/*
841 			 * If entering the symbol in both the symtab and the
842 			 * ldynsym, then the one in symtab needs to be
843 			 * copied to ldynsym. If it is only in the ldynsym,
844 			 * then the code above already set it up and we have
845 			 * nothing more to do here.
846 			 */
847 			if (enter_in_symtab && enter_in_ldynsym) {
848 				ldynsym[ldynsym_ndx] = *sym;
849 				(void) st_setstring(dynstr, sdp->sd_name,
850 				    &stoff);
851 				ldynsym[ldynsym_ndx].st_name = stoff;
852 
853 				if (_symshndx && ldynshndx)
854 					ldynshndx[ldynsym_ndx] = *_symshndx;
855 
856 				/* Add it to sort section if it qualifies */
857 				ADD_TO_DYNSORT(sdp, sym, type, ldynsym_ndx);
858 
859 				ldynsym_ndx++;
860 			}
861 		}
862 	}
863 	symtab_gbl_bndx = symtab_ndx;	/* .symtab index of 1st global entry */
864 
865 	/*
866 	 * Two special symbols are `_init' and `_fini'.  If these are supplied
867 	 * by crti.o then they are used to represent the total concatenation of
868 	 * the `.init' and `.fini' sections.
869 	 *
870 	 * First, determine whether any .init or .fini sections exist.  If these
871 	 * sections exist when a dynamic object is being built, but no `_init'
872 	 * or `_fini' symbols are found, then the user is probably building this
873 	 * object directly from ld(1) rather than using a compiler driver that
874 	 * provides the symbols via crt's.
875 	 *
876 	 * If the .init or .fini section exist, and their associated symbols,
877 	 * determine the size of the sections and updated the symbols value
878 	 * accordingly.
879 	 */
880 	if (((sdp = ld_sym_find(MSG_ORIG(MSG_SYM_INIT_U), SYM_NOHASH, 0,
881 	    ofl)) != NULL) && (sdp->sd_ref == REF_REL_NEED) && sdp->sd_isc &&
882 	    (sdp->sd_isc->is_osdesc == iosp)) {
883 		if (ld_sym_copy(sdp) == S_ERROR)
884 			return ((Addr)S_ERROR);
885 		sdp->sd_sym->st_size = sdp->sd_isc->is_osdesc->os_shdr->sh_size;
886 
887 	} else if (iosp && !(flags & FLG_OF_RELOBJ)) {
888 		eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_SYM_NOCRT),
889 		    MSG_ORIG(MSG_SYM_INIT_U), MSG_ORIG(MSG_SCN_INIT));
890 	}
891 
892 	if (((sdp = ld_sym_find(MSG_ORIG(MSG_SYM_FINI_U), SYM_NOHASH, 0,
893 	    ofl)) != NULL) && (sdp->sd_ref == REF_REL_NEED) && sdp->sd_isc &&
894 	    (sdp->sd_isc->is_osdesc == fosp)) {
895 		if (ld_sym_copy(sdp) == S_ERROR)
896 			return ((Addr)S_ERROR);
897 		sdp->sd_sym->st_size = sdp->sd_isc->is_osdesc->os_shdr->sh_size;
898 
899 	} else if (fosp && !(flags & FLG_OF_RELOBJ)) {
900 		eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_SYM_NOCRT),
901 		    MSG_ORIG(MSG_SYM_FINI_U), MSG_ORIG(MSG_SCN_FINI));
902 	}
903 
904 	/*
905 	 * Assign .bss information for use with updating COMMON symbols.
906 	 */
907 	if (ofl->ofl_isbss) {
908 		isc = ofl->ofl_isbss;
909 		osp = isc->is_osdesc;
910 
911 		bssaddr = osp->os_shdr->sh_addr +
912 		    (Off)_elf_getxoff(isc->is_indata);
913 		/* LINTED */
914 		bssndx = elf_ndxscn(osp->os_scn);
915 	}
916 
917 #if	defined(_ELF64)
918 	/*
919 	 * For amd64 target, assign .lbss information for use
920 	 * with updating LCOMMON symbols.
921 	 */
922 	if ((ld_targ.t_m.m_mach == EM_AMD64) && ofl->ofl_islbss) {
923 		osp = ofl->ofl_islbss->is_osdesc;
924 
925 		lbssaddr = osp->os_shdr->sh_addr +
926 		    (Off)_elf_getxoff(ofl->ofl_islbss->is_indata);
927 		/* LINTED */
928 		lbssndx = elf_ndxscn(osp->os_scn);
929 	}
930 #endif
931 
932 	/*
933 	 * Assign .tlsbss information for use with updating COMMON symbols.
934 	 */
935 	if (ofl->ofl_istlsbss) {
936 		osp = ofl->ofl_istlsbss->is_osdesc;
937 		tlsbssaddr = osp->os_shdr->sh_addr +
938 		    (Off)_elf_getxoff(ofl->ofl_istlsbss->is_indata);
939 		/* LINTED */
940 		tlsbssndx = elf_ndxscn(osp->os_scn);
941 	}
942 
943 	if ((sorted_syms = libld_calloc(ofl->ofl_globcnt +
944 	    ofl->ofl_elimcnt + ofl->ofl_scopecnt,
945 	    sizeof (*sorted_syms))) == NULL)
946 		return ((Addr)S_ERROR);
947 
948 	scndx = 0;
949 	ssndx = ofl->ofl_scopecnt + ofl->ofl_elimcnt;
950 
951 	/*
952 	 * Traverse the internal symbol table updating information and
953 	 * allocating common.
954 	 */
955 	for (sav = avl_first(&ofl->ofl_symavl); sav;
956 	    sav = AVL_NEXT(&ofl->ofl_symavl, sav)) {
957 		Sym	*symptr;
958 		int	local;
959 		int	restore;
960 
961 		sdp = sav->sav_symdesc;
962 
963 		/*
964 		 * Ignore any symbols that have been marked as invalid during
965 		 * input processing.  Providing these aren't used for
966 		 * relocation, they will be dropped from the output image.
967 		 */
968 		if (sdp->sd_flags & FLG_SY_INVALID) {
969 			DBG_CALL(Dbg_syms_old(ofl, sdp));
970 			DBG_CALL(Dbg_syms_ignore(ofl, sdp));
971 			continue;
972 		}
973 
974 		/*
975 		 * Only needed symbols are copied to the output symbol table.
976 		 */
977 		if (sdp->sd_ref == REF_DYN_SEEN)
978 			continue;
979 
980 		if ((sdp->sd_flags1 & FLG_SY1_HIDDEN) &&
981 		    (flags & FLG_OF_PROCRED))
982 			local = 1;
983 		else
984 			local = 0;
985 
986 		if (local || (ofl->ofl_hashbkts == 0)) {
987 			sorted_syms[scndx++].sl_sdp = sdp;
988 		} else {
989 			sorted_syms[ssndx].sl_hval = sdp->sd_aux->sa_hash %
990 			    ofl->ofl_hashbkts;
991 			sorted_syms[ssndx].sl_sdp = sdp;
992 			ssndx++;
993 		}
994 
995 		/*
996 		 * Note - expand the COMMON symbols here because an address
997 		 * must be assigned to them in the same order that space was
998 		 * calculated in sym_validate().  If this ordering isn't
999 		 * followed differing alignment requirements can throw us all
1000 		 * out of whack.
1001 		 *
1002 		 * The expanded .bss global symbol is handled here as well.
1003 		 *
1004 		 * The actual adding entries into the symbol table still occurs
1005 		 * below in hashbucket order.
1006 		 */
1007 		symptr = sdp->sd_sym;
1008 		restore = 0;
1009 		if ((sdp->sd_flags & FLG_SY_PAREXPN) ||
1010 		    ((sdp->sd_flags & FLG_SY_SPECSEC) &&
1011 		    (sdp->sd_shndx = symptr->st_shndx) == SHN_COMMON)) {
1012 
1013 			/*
1014 			 * An expanded symbol goes to a special .data section
1015 			 * prepared for that purpose (ofl->ofl_isparexpn).
1016 			 * Assign COMMON allocations to .bss.
1017 			 * Otherwise leave it as is.
1018 			 */
1019 			if (sdp->sd_flags & FLG_SY_PAREXPN) {
1020 				restore = 1;
1021 				sdp->sd_shndx = parexpnndx;
1022 				sdp->sd_flags &= ~FLG_SY_SPECSEC;
1023 				symptr->st_value = (Xword) S_ROUND(
1024 				    parexpnaddr, symptr->st_value);
1025 				parexpnaddr = symptr->st_value +
1026 				    symptr->st_size;
1027 				sdp->sd_isc = ofl->ofl_isparexpn;
1028 				sdp->sd_flags |= FLG_SY_COMMEXP;
1029 
1030 			} else if (ELF_ST_TYPE(symptr->st_info) != STT_TLS &&
1031 			    (local || !(flags & FLG_OF_RELOBJ))) {
1032 				restore = 1;
1033 				sdp->sd_shndx = bssndx;
1034 				sdp->sd_flags &= ~FLG_SY_SPECSEC;
1035 				symptr->st_value = (Xword)S_ROUND(bssaddr,
1036 				    symptr->st_value);
1037 				bssaddr = symptr->st_value + symptr->st_size;
1038 				sdp->sd_isc = ofl->ofl_isbss;
1039 				sdp->sd_flags |= FLG_SY_COMMEXP;
1040 
1041 			} else if (ELF_ST_TYPE(symptr->st_info) == STT_TLS &&
1042 			    (local || !(flags & FLG_OF_RELOBJ))) {
1043 				restore = 1;
1044 				sdp->sd_shndx = tlsbssndx;
1045 				sdp->sd_flags &= ~FLG_SY_SPECSEC;
1046 				symptr->st_value = (Xword)S_ROUND(tlsbssaddr,
1047 				    symptr->st_value);
1048 				tlsbssaddr = symptr->st_value + symptr->st_size;
1049 				sdp->sd_isc = ofl->ofl_istlsbss;
1050 				sdp->sd_flags |= FLG_SY_COMMEXP;
1051 				/*
1052 				 * TLS symbols are relative to the TLS segment.
1053 				 */
1054 				symptr->st_value -= ofl->ofl_tlsphdr->p_vaddr;
1055 			}
1056 #if	defined(_ELF64)
1057 		} else if ((ld_targ.t_m.m_mach == EM_AMD64) &&
1058 		    (sdp->sd_flags & FLG_SY_SPECSEC) &&
1059 		    ((sdp->sd_shndx = symptr->st_shndx) ==
1060 		    SHN_X86_64_LCOMMON) &&
1061 		    ((local || !(flags & FLG_OF_RELOBJ)))) {
1062 			restore = 1;
1063 			sdp->sd_shndx = lbssndx;
1064 			sdp->sd_flags &= ~FLG_SY_SPECSEC;
1065 			symptr->st_value = (Xword)S_ROUND(lbssaddr,
1066 			    symptr->st_value);
1067 			lbssaddr = symptr->st_value + symptr->st_size;
1068 			sdp->sd_isc = ofl->ofl_islbss;
1069 			sdp->sd_flags |= FLG_SY_COMMEXP;
1070 #endif
1071 		}
1072 
1073 		if (restore != 0) {
1074 			uchar_t		type, bind;
1075 
1076 			/*
1077 			 * Make sure this COMMON symbol is returned to the same
1078 			 * binding as was defined in the original relocatable
1079 			 * object reference.
1080 			 */
1081 			type = ELF_ST_TYPE(symptr->st_info);
1082 			if (sdp->sd_flags & FLG_SY_GLOBREF)
1083 				bind = STB_GLOBAL;
1084 			else
1085 				bind = STB_WEAK;
1086 
1087 			symptr->st_info = ELF_ST_INFO(bind, type);
1088 		}
1089 	}
1090 
1091 	if (ofl->ofl_hashbkts) {
1092 		qsort(sorted_syms + ofl->ofl_scopecnt + ofl->ofl_elimcnt,
1093 		    ofl->ofl_globcnt, sizeof (Sym_s_list),
1094 		    (int (*)(const void *, const void *))sym_hash_compare);
1095 	}
1096 
1097 	for (ssndx = 0; ssndx < (ofl->ofl_elimcnt + ofl->ofl_scopecnt +
1098 	    ofl->ofl_globcnt); ssndx++) {
1099 		const char	*name;
1100 		Sym		*sym;
1101 		Sym_aux		*sap;
1102 		Half		spec;
1103 		int		local = 0, dynlocal = 0, enter_in_symtab;
1104 		Gotndx		*gnp;
1105 		Word		sectndx;
1106 
1107 		sdp = sorted_syms[ssndx].sl_sdp;
1108 		sectndx = 0;
1109 
1110 		if (symtab)
1111 			enter_in_symtab = 1;
1112 		else
1113 			enter_in_symtab = 0;
1114 
1115 		/*
1116 		 * Assign a got offset if necessary.
1117 		 */
1118 		if ((ld_targ.t_mr.mr_assign_got != NULL) &&
1119 		    (*ld_targ.t_mr.mr_assign_got)(ofl, sdp) == S_ERROR)
1120 			return ((Addr)S_ERROR);
1121 
1122 		if (DBG_ENABLED) {
1123 			Aliste	idx2;
1124 
1125 			for (ALIST_TRAVERSE(sdp->sd_GOTndxs, idx2, gnp)) {
1126 				gottable->gt_sym = sdp;
1127 				gottable->gt_gndx.gn_gotndx = gnp->gn_gotndx;
1128 				gottable->gt_gndx.gn_addend = gnp->gn_addend;
1129 				gottable++;
1130 			}
1131 
1132 			if (sdp->sd_aux && sdp->sd_aux->sa_PLTGOTndx) {
1133 				gottable->gt_sym = sdp;
1134 				gottable->gt_gndx.gn_gotndx =
1135 				    sdp->sd_aux->sa_PLTGOTndx;
1136 				gottable++;
1137 			}
1138 		}
1139 
1140 
1141 		/*
1142 		 * If this symbol has been marked as being reduced to local
1143 		 * scope then it will have to be placed in the scoped portion
1144 		 * of the .symtab.  Retain the appropriate index for use in
1145 		 * version symbol indexing and relocation.
1146 		 */
1147 		if ((sdp->sd_flags1 & FLG_SY1_HIDDEN) &&
1148 		    (flags & FLG_OF_PROCRED)) {
1149 			local = 1;
1150 			if (!(sdp->sd_flags1 & FLG_SY1_ELIM) && !dynsym)
1151 				sdp->sd_symndx = scopesym_ndx;
1152 			else
1153 				sdp->sd_symndx = 0;
1154 
1155 			if (sdp->sd_flags1 & FLG_SY1_ELIM) {
1156 				enter_in_symtab = 0;
1157 			} else if (ldynsym && sdp->sd_sym->st_name &&
1158 			    ldynsym_symtype[
1159 			    ELF_ST_TYPE(sdp->sd_sym->st_info)]) {
1160 				dynlocal = 1;
1161 			}
1162 		} else {
1163 			sdp->sd_symndx = *symndx;
1164 		}
1165 
1166 		/*
1167 		 * Copy basic symbol and string information.
1168 		 */
1169 		name = sdp->sd_name;
1170 		sap = sdp->sd_aux;
1171 
1172 		/*
1173 		 * If we require to record version symbol indexes, update the
1174 		 * associated version symbol information for all defined
1175 		 * symbols.  If a version definition is required any zero value
1176 		 * symbol indexes would have been flagged as undefined symbol
1177 		 * errors, however if we're just scoping these need to fall into
1178 		 * the base of global symbols.
1179 		 */
1180 		if (sdp->sd_symndx && versym) {
1181 			Half	vndx = 0;
1182 
1183 			if (sdp->sd_flags & FLG_SY_MVTOCOMM) {
1184 				vndx = VER_NDX_GLOBAL;
1185 			} else if (sdp->sd_ref == REF_REL_NEED) {
1186 				Half	symflags1 = sdp->sd_flags1;
1187 
1188 				vndx = sap->sa_overndx;
1189 				if ((vndx == 0) &&
1190 				    (sdp->sd_sym->st_shndx != SHN_UNDEF)) {
1191 					if (symflags1 & FLG_SY1_HIDDEN)
1192 						vndx = VER_NDX_LOCAL;
1193 					else
1194 						vndx = VER_NDX_GLOBAL;
1195 				}
1196 			} else if ((sdp->sd_ref == REF_DYN_NEED) &&
1197 			    (sap->sa_dverndx > 0) &&
1198 			    (sap->sa_dverndx <= sdp->sd_file->ifl_vercnt) &&
1199 			    (sdp->sd_file->ifl_verndx != NULL)) {
1200 				/* Use index of verneed record */
1201 				vndx = sdp->sd_file->ifl_verndx
1202 				    [sap->sa_dverndx].vi_overndx;
1203 			}
1204 			versym[sdp->sd_symndx] = vndx;
1205 		}
1206 
1207 		/*
1208 		 * If we are creating the .syminfo section then set per symbol
1209 		 * flags here.
1210 		 */
1211 		if (sdp->sd_symndx && syminfo &&
1212 		    !(sdp->sd_flags & FLG_SY_NOTAVAIL)) {
1213 			int	ndx = sdp->sd_symndx;
1214 			APlist 	**alpp = &(ofl->ofl_syminfsyms);
1215 
1216 			if (sdp->sd_flags & FLG_SY_MVTOCOMM)
1217 				/*
1218 				 * Identify a copy relocation symbol.
1219 				 */
1220 				syminfo[ndx].si_flags |= SYMINFO_FLG_COPY;
1221 
1222 			if (sdp->sd_ref == REF_DYN_NEED) {
1223 				/*
1224 				 * A reference is bound to a needed dependency.
1225 				 * Save this symbol descriptor, as its boundto
1226 				 * element will need updating after the .dynamic
1227 				 * section has been created.  Flag whether this
1228 				 * reference is lazy loadable, and if a direct
1229 				 * binding is to be established.
1230 				 */
1231 				if (aplist_append(alpp, sdp,
1232 				    AL_CNT_OFL_SYMINFOSYMS) == NULL)
1233 					return (0);
1234 
1235 				syminfo[ndx].si_flags |= SYMINFO_FLG_DIRECT;
1236 				if (sdp->sd_flags & FLG_SY_LAZYLD)
1237 					syminfo[ndx].si_flags |=
1238 					    SYMINFO_FLG_LAZYLOAD;
1239 
1240 				/*
1241 				 * Enable direct symbol bindings if:
1242 				 *
1243 				 *  -	Symbol was identified with the DIRECT
1244 				 *	keyword in a mapfile.
1245 				 *
1246 				 *  -	Symbol reference has been bound to a
1247 				 * 	dependency which was specified as
1248 				 *	requiring direct bindings with -zdirect.
1249 				 *
1250 				 *  -	All symbol references are required to
1251 				 *	use direct bindings via -Bdirect.
1252 				 */
1253 				if (sdp->sd_flags1 & FLG_SY1_DIR)
1254 					syminfo[ndx].si_flags |=
1255 					    SYMINFO_FLG_DIRECTBIND;
1256 
1257 			} else if ((sdp->sd_flags & FLG_SY_EXTERN) &&
1258 			    (sdp->sd_sym->st_shndx == SHN_UNDEF)) {
1259 				/*
1260 				 * If this symbol has been explicitly defined
1261 				 * as external, and remains unresolved, mark
1262 				 * it as external.
1263 				 */
1264 				syminfo[ndx].si_boundto = SYMINFO_BT_EXTERN;
1265 
1266 			} else if ((sdp->sd_flags & FLG_SY_PARENT) &&
1267 			    (sdp->sd_sym->st_shndx == SHN_UNDEF)) {
1268 				/*
1269 				 * If this symbol has been explicitly defined
1270 				 * to be a reference to a parent object,
1271 				 * indicate whether a direct binding should be
1272 				 * established.
1273 				 */
1274 				syminfo[ndx].si_flags |= SYMINFO_FLG_DIRECT;
1275 				syminfo[ndx].si_boundto = SYMINFO_BT_PARENT;
1276 				if (sdp->sd_flags1 & FLG_SY1_DIR)
1277 					syminfo[ndx].si_flags |=
1278 					    SYMINFO_FLG_DIRECTBIND;
1279 
1280 			} else if (sdp->sd_flags & FLG_SY_STDFLTR) {
1281 				/*
1282 				 * A filter definition.  Although this symbol
1283 				 * can only be a stub, it might be necessary to
1284 				 * prevent external direct bindings.
1285 				 */
1286 				syminfo[ndx].si_flags |= SYMINFO_FLG_FILTER;
1287 				if (sdp->sd_flags1 & FLG_SY1_NDIR)
1288 					syminfo[ndx].si_flags |=
1289 					    SYMINFO_FLG_NOEXTDIRECT;
1290 
1291 			} else if (sdp->sd_flags & FLG_SY_AUXFLTR) {
1292 				/*
1293 				 * An auxiliary filter definition.  By nature,
1294 				 * this definition is direct, in that should the
1295 				 * filtee lookup fail, we'll fall back to this
1296 				 * object.  It may still be necesssary to
1297 				 * prevent external direct bindings.
1298 				 */
1299 				syminfo[ndx].si_flags |= SYMINFO_FLG_AUXILIARY;
1300 				if (sdp->sd_flags1 & FLG_SY1_NDIR)
1301 					syminfo[ndx].si_flags |=
1302 					    SYMINFO_FLG_NOEXTDIRECT;
1303 
1304 			} else if ((sdp->sd_ref == REF_REL_NEED) &&
1305 			    (sdp->sd_sym->st_shndx != SHN_UNDEF)) {
1306 
1307 				/*
1308 				 * This definition exists within the object
1309 				 * being created.  Flag whether it is necessary
1310 				 * to prevent external direct bindings.
1311 				 */
1312 				if (sdp->sd_flags1 & FLG_SY1_NDIR) {
1313 					syminfo[ndx].si_boundto =
1314 					    SYMINFO_BT_NONE;
1315 					syminfo[ndx].si_flags |=
1316 					    SYMINFO_FLG_NOEXTDIRECT;
1317 				}
1318 
1319 				/*
1320 				 * Indicate that this symbol is acting as an
1321 				 * individual interposer.
1322 				 */
1323 				if (sdp->sd_flags & FLG_SY_INTPOSE) {
1324 					syminfo[ndx].si_flags |=
1325 					    SYMINFO_FLG_INTERPOSE;
1326 				}
1327 
1328 				/*
1329 				 * If external bindings are allowed, or this is
1330 				 * a translator symbol, indicate the binding,
1331 				 * and a direct binding if necessary.
1332 				 */
1333 				if (((sdp->sd_flags1 & FLG_SY1_NDIR) == 0) ||
1334 				    ((dtflags_1 & DF_1_TRANS) && sdp->sd_aux &&
1335 				    sdp->sd_aux->sa_bindto)) {
1336 
1337 					syminfo[ndx].si_flags |=
1338 					    SYMINFO_FLG_DIRECT;
1339 
1340 					if (sdp->sd_flags1 & FLG_SY1_DIR)
1341 						syminfo[ndx].si_flags |=
1342 						    SYMINFO_FLG_DIRECTBIND;
1343 
1344 					/*
1345 					 * If this is a translator, the symbols
1346 					 * boundto element will indicate the
1347 					 * dependency to which it should resolve
1348 					 * rather than itself.  Save this info
1349 					 * for updating after the .dynamic
1350 					 * section has been created.
1351 					 */
1352 					if ((dtflags_1 & DF_1_TRANS) &&
1353 					    sdp->sd_aux &&
1354 					    sdp->sd_aux->sa_bindto) {
1355 						if (aplist_append(alpp, sdp,
1356 						    AL_CNT_OFL_SYMINFOSYMS) ==
1357 						    NULL)
1358 							return (0);
1359 					} else {
1360 						syminfo[ndx].si_boundto =
1361 						    SYMINFO_BT_SELF;
1362 					}
1363 				}
1364 			}
1365 		}
1366 
1367 		/*
1368 		 * Note that the `sym' value is reset to be one of the new
1369 		 * symbol table entries.  This symbol will be updated further
1370 		 * depending on the type of the symbol.  Process the .symtab
1371 		 * first, followed by the .dynsym, thus the `sym' value will
1372 		 * remain as the .dynsym value when the .dynsym is present.
1373 		 * This ensures that any versioning symbols st_name value will
1374 		 * be appropriate for the string table used by version
1375 		 * entries.
1376 		 */
1377 		if (enter_in_symtab) {
1378 			Word	_symndx;
1379 
1380 			if (local)
1381 				_symndx = scopesym_ndx;
1382 			else
1383 				_symndx = symtab_ndx;
1384 
1385 			symtab[_symndx] = *sdp->sd_sym;
1386 			sdp->sd_sym = sym = &symtab[_symndx];
1387 			(void) st_setstring(strtab, name, &stoff);
1388 			sym->st_name = stoff;
1389 		}
1390 		if (dynlocal) {
1391 			ldynsym[ldynscopesym_ndx] = *sdp->sd_sym;
1392 			sdp->sd_sym = sym = &ldynsym[ldynscopesym_ndx];
1393 			(void) st_setstring(dynstr, name, &stoff);
1394 			ldynsym[ldynscopesym_ndx].st_name = stoff;
1395 			/* Add it to sort section if it qualifies */
1396 			ADD_TO_DYNSORT(sdp, sym, ELF_ST_TYPE(sym->st_info),
1397 			    ldynscopesym_ndx);
1398 		}
1399 
1400 		if (dynsym && !local) {
1401 			dynsym[dynsym_ndx] = *sdp->sd_sym;
1402 
1403 			/*
1404 			 * Provided this isn't an unnamed register symbol,
1405 			 * update the symbols name and hash value.
1406 			 */
1407 			if (((sdp->sd_flags & FLG_SY_REGSYM) == 0) ||
1408 			    dynsym[dynsym_ndx].st_name) {
1409 				(void) st_setstring(dynstr, name, &stoff);
1410 				dynsym[dynsym_ndx].st_name = stoff;
1411 
1412 				if (stoff) {
1413 					Word _hashndx;
1414 
1415 					hashval =
1416 					    sap->sa_hash % ofl->ofl_hashbkts;
1417 
1418 					/* LINTED */
1419 					if (_hashndx = hashbkt[hashval]) {
1420 						while (hashchain[_hashndx]) {
1421 							_hashndx =
1422 							    hashchain[_hashndx];
1423 						}
1424 						hashchain[_hashndx] =
1425 						    sdp->sd_symndx;
1426 					} else {
1427 						hashbkt[hashval] =
1428 						    sdp->sd_symndx;
1429 					}
1430 				}
1431 			}
1432 			sdp->sd_sym = sym = &dynsym[dynsym_ndx];
1433 
1434 			/*
1435 			 * Add it to sort section if it qualifies.
1436 			 * The indexes in that section are relative to the
1437 			 * the adjacent SUNW_ldynsym/dymsym pair, so we
1438 			 * add the number of items in SUNW_ldynsym to the
1439 			 * dynsym index.
1440 			 */
1441 			ADD_TO_DYNSORT(sdp, sym, ELF_ST_TYPE(sym->st_info),
1442 			    ldynsym_cnt + dynsym_ndx);
1443 		}
1444 		if (!enter_in_symtab && (!dynsym || (local && !dynlocal))) {
1445 			if (!(sdp->sd_flags & FLG_SY_UPREQD))
1446 				continue;
1447 			sym = sdp->sd_sym;
1448 		} else
1449 			sdp->sd_flags &= ~FLG_SY_CLEAN;
1450 
1451 
1452 		/*
1453 		 * If we have a weak data symbol for which we need the real
1454 		 * symbol also, save this processing until later.
1455 		 *
1456 		 * The exception to this is if the weak/strong have PLT's
1457 		 * assigned to them.  In that case we don't do the post-weak
1458 		 * processing because the PLT's must be maintained so that we
1459 		 * can do 'interpositioning' on both of the symbols.
1460 		 */
1461 		if ((sap->sa_linkndx) &&
1462 		    (ELF_ST_BIND(sym->st_info) == STB_WEAK) &&
1463 		    (!sap->sa_PLTndx)) {
1464 			Sym_desc	*_sdp;
1465 
1466 			_sdp = sdp->sd_file->ifl_oldndx[sap->sa_linkndx];
1467 
1468 			if (_sdp->sd_ref != REF_DYN_SEEN) {
1469 				Wk_desc	wk;
1470 
1471 				if (enter_in_symtab) {
1472 					if (local) {
1473 						wk.wk_symtab =
1474 						    &symtab[scopesym_ndx];
1475 						scopesym_ndx++;
1476 					} else {
1477 						wk.wk_symtab =
1478 						    &symtab[symtab_ndx];
1479 						symtab_ndx++;
1480 					}
1481 				} else {
1482 					wk.wk_symtab = NULL;
1483 				}
1484 				if (dynsym) {
1485 					if (!local) {
1486 						wk.wk_dynsym =
1487 						    &dynsym[dynsym_ndx];
1488 						dynsym_ndx++;
1489 					} else if (dynlocal) {
1490 						wk.wk_dynsym =
1491 						    &ldynsym[ldynscopesym_ndx];
1492 						ldynscopesym_ndx++;
1493 					}
1494 				} else {
1495 					wk.wk_dynsym = NULL;
1496 				}
1497 				wk.wk_weak = sdp;
1498 				wk.wk_alias = _sdp;
1499 
1500 				if (alist_append(&weak, &wk,
1501 				    sizeof (Wk_desc), AL_CNT_WEAK) == NULL)
1502 					return ((Addr)S_ERROR);
1503 
1504 				continue;
1505 			}
1506 		}
1507 
1508 		DBG_CALL(Dbg_syms_old(ofl, sdp));
1509 
1510 		spec = NULL;
1511 		/*
1512 		 * assign new symbol value.
1513 		 */
1514 		sectndx = sdp->sd_shndx;
1515 		if (sectndx == SHN_UNDEF) {
1516 			if (((sdp->sd_flags & FLG_SY_REGSYM) == 0) &&
1517 			    (sym->st_value != 0)) {
1518 				eprintf(ofl->ofl_lml, ERR_WARNING,
1519 				    MSG_INTL(MSG_SYM_NOTNULL),
1520 				    demangle(name), sdp->sd_file->ifl_name);
1521 			}
1522 
1523 			/*
1524 			 * Undefined weak global, if we are generating a static
1525 			 * executable, output as an absolute zero.  Otherwise
1526 			 * leave it as is, ld.so.1 will skip symbols of this
1527 			 * type (this technique allows applications and
1528 			 * libraries to test for the existence of a symbol as an
1529 			 * indication of the presence or absence of certain
1530 			 * functionality).
1531 			 */
1532 			if (((flags & (FLG_OF_STATIC | FLG_OF_EXEC)) ==
1533 			    (FLG_OF_STATIC | FLG_OF_EXEC)) &&
1534 			    (ELF_ST_BIND(sym->st_info) == STB_WEAK)) {
1535 				sdp->sd_flags |= FLG_SY_SPECSEC;
1536 				sdp->sd_shndx = sectndx = SHN_ABS;
1537 			}
1538 		} else if ((sdp->sd_flags & FLG_SY_SPECSEC) &&
1539 		    (sectndx == SHN_COMMON)) {
1540 			/* COMMONs have already been processed */
1541 			/* EMPTY */
1542 			;
1543 		} else {
1544 			if ((sdp->sd_flags & FLG_SY_SPECSEC) &&
1545 			    (sectndx == SHN_ABS))
1546 				spec = sdp->sd_aux->sa_symspec;
1547 
1548 			/* LINTED */
1549 			if (sdp->sd_flags & FLG_SY_COMMEXP) {
1550 				/*
1551 				 * This is (or was) a COMMON symbol which was
1552 				 * processed above - no processing
1553 				 * required here.
1554 				 */
1555 				;
1556 			} else if (sdp->sd_ref == REF_DYN_NEED) {
1557 				uchar_t	type, bind;
1558 
1559 				sectndx = SHN_UNDEF;
1560 				sym->st_value = 0;
1561 				sym->st_size = 0;
1562 
1563 				/*
1564 				 * Make sure this undefined symbol is returned
1565 				 * to the same binding as was defined in the
1566 				 * original relocatable object reference.
1567 				 */
1568 				type = ELF_ST_TYPE(sym-> st_info);
1569 				if (sdp->sd_flags & FLG_SY_GLOBREF)
1570 					bind = STB_GLOBAL;
1571 				else
1572 					bind = STB_WEAK;
1573 
1574 				sym->st_info = ELF_ST_INFO(bind, type);
1575 
1576 			} else if (((sdp->sd_flags & FLG_SY_SPECSEC) == 0) &&
1577 			    (sdp->sd_ref == REF_REL_NEED)) {
1578 				osp = sdp->sd_isc->is_osdesc;
1579 				/* LINTED */
1580 				sectndx = elf_ndxscn(osp->os_scn);
1581 
1582 				/*
1583 				 * In an executable, the new symbol value is the
1584 				 * old value (offset into defining section) plus
1585 				 * virtual address of defining section.  In a
1586 				 * relocatable, the new value is the old value
1587 				 * plus the displacement of the section within
1588 				 * the file.
1589 				 */
1590 				/* LINTED */
1591 				sym->st_value +=
1592 				    (Off)_elf_getxoff(sdp->sd_isc->is_indata);
1593 
1594 				if (!(flags & FLG_OF_RELOBJ)) {
1595 					sym->st_value += osp->os_shdr->sh_addr;
1596 					/*
1597 					 * TLS symbols are relative to
1598 					 * the TLS segment.
1599 					 */
1600 					if ((ELF_ST_TYPE(sym->st_info) ==
1601 					    STT_TLS) && (ofl->ofl_tlsphdr))
1602 						sym->st_value -=
1603 						    ofl->ofl_tlsphdr->p_vaddr;
1604 				}
1605 			}
1606 		}
1607 
1608 		if (spec) {
1609 			switch (spec) {
1610 			case SDAUX_ID_ETEXT:
1611 				sym->st_value = etext;
1612 				sectndx = etext_ndx;
1613 				if (etext_abs)
1614 					sdp->sd_flags |= FLG_SY_SPECSEC;
1615 				else
1616 					sdp->sd_flags &= ~FLG_SY_SPECSEC;
1617 				break;
1618 			case SDAUX_ID_EDATA:
1619 				sym->st_value = edata;
1620 				sectndx = edata_ndx;
1621 				if (edata_abs)
1622 					sdp->sd_flags |= FLG_SY_SPECSEC;
1623 				else
1624 					sdp->sd_flags &= ~FLG_SY_SPECSEC;
1625 				break;
1626 			case SDAUX_ID_END:
1627 				sym->st_value = end;
1628 				sectndx = end_ndx;
1629 				if (end_abs)
1630 					sdp->sd_flags |= FLG_SY_SPECSEC;
1631 				else
1632 					sdp->sd_flags &= ~FLG_SY_SPECSEC;
1633 				break;
1634 			case SDAUX_ID_START:
1635 				sym->st_value = start;
1636 				sectndx = start_ndx;
1637 				sdp->sd_flags &= ~FLG_SY_SPECSEC;
1638 				break;
1639 			case SDAUX_ID_DYN:
1640 				if (flags & FLG_OF_DYNAMIC) {
1641 					sym->st_value = ofl->
1642 					    ofl_osdynamic->os_shdr->sh_addr;
1643 					/* LINTED */
1644 					sectndx = elf_ndxscn(
1645 					    ofl->ofl_osdynamic->os_scn);
1646 					sdp->sd_flags &= ~FLG_SY_SPECSEC;
1647 				}
1648 				break;
1649 			case SDAUX_ID_PLT:
1650 				if (ofl->ofl_osplt) {
1651 					sym->st_value = ofl->
1652 					    ofl_osplt->os_shdr->sh_addr;
1653 					/* LINTED */
1654 					sectndx = elf_ndxscn(
1655 					    ofl->ofl_osplt->os_scn);
1656 					sdp->sd_flags &= ~FLG_SY_SPECSEC;
1657 				}
1658 				break;
1659 			case SDAUX_ID_GOT:
1660 				/*
1661 				 * Symbol bias for negative growing tables is
1662 				 * stored in symbol's value during
1663 				 * allocate_got().
1664 				 */
1665 				sym->st_value += ofl->
1666 				    ofl_osgot->os_shdr->sh_addr;
1667 				/* LINTED */
1668 				sectndx = elf_ndxscn(ofl->
1669 				    ofl_osgot->os_scn);
1670 				sdp->sd_flags &= ~FLG_SY_SPECSEC;
1671 				break;
1672 			default:
1673 				/* NOTHING */
1674 				;
1675 			}
1676 		}
1677 
1678 		/*
1679 		 * If a plt index has been assigned to an undefined function,
1680 		 * update the symbols value to the appropriate .plt address.
1681 		 */
1682 		if ((flags & FLG_OF_DYNAMIC) && (flags & FLG_OF_EXEC) &&
1683 		    (sdp->sd_file) &&
1684 		    (sdp->sd_file->ifl_ehdr->e_type == ET_DYN) &&
1685 		    (ELF_ST_TYPE(sym->st_info) == STT_FUNC) &&
1686 		    !(flags & FLG_OF_BFLAG)) {
1687 			if (sap->sa_PLTndx)
1688 				sym->st_value =
1689 				    (*ld_targ.t_mr.mr_calc_plt_addr)(sdp, ofl);
1690 		}
1691 
1692 		/*
1693 		 * Finish updating the symbols.
1694 		 */
1695 
1696 		/*
1697 		 * Sym Update: if scoped local - set local binding
1698 		 */
1699 		if (local)
1700 			sym->st_info = ELF_ST_INFO(STB_LOCAL,
1701 			    ELF_ST_TYPE(sym->st_info));
1702 
1703 		/*
1704 		 * Sym Updated: If both the .symtab and .dynsym
1705 		 * are present then we've actually updated the information in
1706 		 * the .dynsym, therefore copy this same information to the
1707 		 * .symtab entry.
1708 		 */
1709 		sdp->sd_shndx = sectndx;
1710 		if (enter_in_symtab && dynsym && (!local || dynlocal)) {
1711 			Word _symndx = dynlocal ? scopesym_ndx : symtab_ndx;
1712 
1713 			symtab[_symndx].st_value = sym->st_value;
1714 			symtab[_symndx].st_size = sym->st_size;
1715 			symtab[_symndx].st_info = sym->st_info;
1716 			symtab[_symndx].st_other = sym->st_other;
1717 		}
1718 
1719 		if (enter_in_symtab) {
1720 			Word	_symndx;
1721 
1722 			if (local)
1723 				_symndx = scopesym_ndx++;
1724 			else
1725 				_symndx = symtab_ndx++;
1726 			if (((sdp->sd_flags & FLG_SY_SPECSEC) == 0) &&
1727 			    (sectndx >= SHN_LORESERVE)) {
1728 				assert(symshndx != NULL);
1729 				symshndx[_symndx] = sectndx;
1730 				symtab[_symndx].st_shndx = SHN_XINDEX;
1731 			} else {
1732 				/* LINTED */
1733 				symtab[_symndx].st_shndx = (Half)sectndx;
1734 			}
1735 		}
1736 
1737 		if (dynsym && (!local || dynlocal)) {
1738 			/*
1739 			 * dynsym and ldynsym are distinct tables, so
1740 			 * we use indirection to access the right one
1741 			 * and the related extended section index array.
1742 			 */
1743 			Word	_symndx;
1744 			Sym	*_dynsym;
1745 			Word	*_dynshndx;
1746 
1747 			if (!local) {
1748 				_symndx = dynsym_ndx++;
1749 				_dynsym = dynsym;
1750 				_dynshndx = dynshndx;
1751 			} else {
1752 				_symndx = ldynscopesym_ndx++;
1753 				_dynsym = ldynsym;
1754 				_dynshndx = ldynshndx;
1755 			}
1756 			if (((sdp->sd_flags & FLG_SY_SPECSEC) == 0) &&
1757 			    (sectndx >= SHN_LORESERVE)) {
1758 				assert(_dynshndx != NULL);
1759 				_dynshndx[_symndx] = sectndx;
1760 				_dynsym[_symndx].st_shndx = SHN_XINDEX;
1761 			} else {
1762 				/* LINTED */
1763 				_dynsym[_symndx].st_shndx = (Half)sectndx;
1764 			}
1765 		}
1766 
1767 		DBG_CALL(Dbg_syms_new(ofl, sym, sdp));
1768 	}
1769 
1770 	/*
1771 	 * Now that all the symbols have been processed update any weak symbols
1772 	 * information (ie. copy all information except `st_name').  As both
1773 	 * symbols will be represented in the output, return the weak symbol to
1774 	 * its correct type.
1775 	 */
1776 	for (ALIST_TRAVERSE(weak, idx1, wkp)) {
1777 		Sym_desc	*sdp, *_sdp;
1778 		Sym		*sym, *_sym, *__sym;
1779 		uchar_t		bind;
1780 
1781 		sdp = wkp->wk_weak;
1782 		_sdp = wkp->wk_alias;
1783 		_sym = __sym = _sdp->sd_sym;
1784 
1785 		sdp->sd_flags |= FLG_SY_WEAKDEF;
1786 
1787 		/*
1788 		 * If the symbol definition has been scoped then assign it to
1789 		 * be local, otherwise if it's from a shared object then we need
1790 		 * to maintain the binding of the original reference.
1791 		 */
1792 		if (sdp->sd_flags1 & FLG_SY1_HIDDEN) {
1793 			if (flags & FLG_OF_PROCRED)
1794 				bind = STB_LOCAL;
1795 			else
1796 				bind = STB_WEAK;
1797 		} else if ((sdp->sd_ref == REF_DYN_NEED) &&
1798 		    (sdp->sd_flags & FLG_SY_GLOBREF))
1799 			bind = STB_GLOBAL;
1800 		else
1801 			bind = STB_WEAK;
1802 
1803 		DBG_CALL(Dbg_syms_old(ofl, sdp));
1804 		if ((sym = wkp->wk_symtab) != NULL) {
1805 			sym->st_value = _sym->st_value;
1806 			sym->st_size = _sym->st_size;
1807 			sym->st_other = _sym->st_other;
1808 			sym->st_shndx = _sym->st_shndx;
1809 			sym->st_info = ELF_ST_INFO(bind,
1810 			    ELF_ST_TYPE(sym->st_info));
1811 			__sym = sym;
1812 		}
1813 		if ((sym = wkp->wk_dynsym) != NULL) {
1814 			sym->st_value = _sym->st_value;
1815 			sym->st_size = _sym->st_size;
1816 			sym->st_other = _sym->st_other;
1817 			sym->st_shndx = _sym->st_shndx;
1818 			sym->st_info = ELF_ST_INFO(bind,
1819 			    ELF_ST_TYPE(sym->st_info));
1820 			__sym = sym;
1821 		}
1822 		DBG_CALL(Dbg_syms_new(ofl, __sym, sdp));
1823 	}
1824 
1825 	/*
1826 	 * Now display GOT debugging information if required.
1827 	 */
1828 	DBG_CALL(Dbg_got_display(ofl, 0, 0,
1829 	    ld_targ.t_m.m_got_xnumber, ld_targ.t_m.m_got_entsize));
1830 
1831 	/*
1832 	 * Update the section headers information. sh_info is
1833 	 * supposed to contain the offset at which the first
1834 	 * global symbol resides in the symbol table, while
1835 	 * sh_link contains the section index of the associated
1836 	 * string table.
1837 	 */
1838 	if (symtab) {
1839 		Shdr	*shdr = ofl->ofl_ossymtab->os_shdr;
1840 
1841 		shdr->sh_info = symtab_gbl_bndx;
1842 		/* LINTED */
1843 		shdr->sh_link = (Word)elf_ndxscn(ofl->ofl_osstrtab->os_scn);
1844 		if (symshndx) {
1845 			shdr = ofl->ofl_ossymshndx->os_shdr;
1846 			shdr->sh_link =
1847 			    (Word)elf_ndxscn(ofl->ofl_ossymtab->os_scn);
1848 		}
1849 
1850 		/*
1851 		 * Ensure that the expected number of symbols
1852 		 * were entered into the right spots:
1853 		 *	- Scoped symbols in the right range
1854 		 *	- Globals start at the right spot
1855 		 *		(correct number of locals entered)
1856 		 *	- The table is exactly filled
1857 		 *		(correct number of globals entered)
1858 		 */
1859 		assert((scopesym_bndx + ofl->ofl_scopecnt) == scopesym_ndx);
1860 		assert(shdr->sh_info == (ofl->ofl_shdrcnt +
1861 		    ofl->ofl_locscnt + ofl->ofl_scopecnt + 2));
1862 		assert((shdr->sh_info + ofl->ofl_globcnt) == symtab_ndx);
1863 	}
1864 	if (dynsym) {
1865 		Shdr	*shdr = ofl->ofl_osdynsym->os_shdr;
1866 
1867 		shdr->sh_info = 1 + ofl->ofl_dynshdrcnt + ofl->ofl_lregsymcnt;
1868 		/* LINTED */
1869 		shdr->sh_link = (Word)elf_ndxscn(ofl->ofl_osdynstr->os_scn);
1870 
1871 		ofl->ofl_oshash->os_shdr->sh_link =
1872 		    /* LINTED */
1873 		    (Word)elf_ndxscn(ofl->ofl_osdynsym->os_scn);
1874 		if (dynshndx) {
1875 			shdr = ofl->ofl_osdynshndx->os_shdr;
1876 			shdr->sh_link =
1877 			    (Word)elf_ndxscn(ofl->ofl_osdynsym->os_scn);
1878 		}
1879 	}
1880 	if (ldynsym) {
1881 		Shdr	*shdr = ofl->ofl_osldynsym->os_shdr;
1882 
1883 		/* ldynsym has no globals, so give index one past the end */
1884 		shdr->sh_info = ldynsym_ndx;
1885 
1886 		/*
1887 		 * The ldynsym and dynsym must be adjacent. The
1888 		 * idea is that rtld should be able to start with
1889 		 * the ldynsym and march straight through the end
1890 		 * of dynsym, seeing them as a single symbol table,
1891 		 * despite the fact that they are in distinct sections.
1892 		 * Ensure that this happened correctly.
1893 		 *
1894 		 * Note that I use ldynsym_ndx here instead of the
1895 		 * computation I used to set the section size
1896 		 * (found in ldynsym_cnt). The two will agree, unless
1897 		 * we somehow miscounted symbols or failed to insert them
1898 		 * all. Using ldynsym_ndx here catches that error in
1899 		 * addition to checking for adjacency.
1900 		 */
1901 		assert(dynsym == (ldynsym + ldynsym_ndx));
1902 
1903 
1904 		/* LINTED */
1905 		shdr->sh_link = (Word)elf_ndxscn(ofl->ofl_osdynstr->os_scn);
1906 
1907 		if (ldynshndx) {
1908 			shdr = ofl->ofl_osldynshndx->os_shdr;
1909 			shdr->sh_link =
1910 			    (Word)elf_ndxscn(ofl->ofl_osldynsym->os_scn);
1911 		}
1912 
1913 		/*
1914 		 * The presence of .SUNW_ldynsym means that there may be
1915 		 * associated sort sections, one for regular symbols
1916 		 * and the other for TLS. Each sort section needs the
1917 		 * following done:
1918 		 *	- Section header link references .SUNW_ldynsym
1919 		 *	- Should have received the expected # of items
1920 		 *	- Sorted by increasing address
1921 		 */
1922 		if (ofl->ofl_osdynsymsort) {	/* .SUNW_dynsymsort */
1923 			ofl->ofl_osdynsymsort->os_shdr->sh_link =
1924 			    (Word)elf_ndxscn(ofl->ofl_osldynsym->os_scn);
1925 			assert(ofl->ofl_dynsymsortcnt == dynsymsort_ndx);
1926 
1927 			if (dynsymsort_ndx > 1) {
1928 				dynsort_compare_syms = ldynsym;
1929 				qsort(dynsymsort, dynsymsort_ndx,
1930 				    sizeof (*dynsymsort), dynsort_compare);
1931 				dynsort_dupwarn(ofl, ldynsym,
1932 				    st_getstrbuf(dynstr),
1933 				    dynsymsort, dynsymsort_ndx,
1934 				    MSG_ORIG(MSG_SCN_DYNSYMSORT));
1935 			}
1936 		}
1937 		if (ofl->ofl_osdyntlssort) {	/* .SUNW_dyntlssort */
1938 			ofl->ofl_osdyntlssort->os_shdr->sh_link =
1939 			    (Word)elf_ndxscn(ofl->ofl_osldynsym->os_scn);
1940 			assert(ofl->ofl_dyntlssortcnt == dyntlssort_ndx);
1941 
1942 			if (dyntlssort_ndx > 1) {
1943 				dynsort_compare_syms = ldynsym;
1944 				qsort(dyntlssort, dyntlssort_ndx,
1945 				    sizeof (*dyntlssort), dynsort_compare);
1946 				dynsort_dupwarn(ofl, ldynsym,
1947 				    st_getstrbuf(dynstr),
1948 				    dyntlssort, dyntlssort_ndx,
1949 				    MSG_ORIG(MSG_SCN_DYNTLSSORT));
1950 			}
1951 		}
1952 	}
1953 
1954 	/*
1955 	 * Used by ld.so.1 only.
1956 	 */
1957 	return (etext);
1958 
1959 #undef ADD_TO_DYNSORT
1960 }
1961 
1962 /*
1963  * Build the dynamic section.
1964  *
1965  * This routine must be maintained in parallel with make_dynamic()
1966  * in sections.c
1967  */
1968 static int
1969 update_odynamic(Ofl_desc *ofl)
1970 {
1971 	Aliste		idx;
1972 	Ifl_desc	*ifl;
1973 	Sym_desc	*sdp;
1974 	Shdr		*shdr;
1975 	Dyn		*_dyn = (Dyn *)ofl->ofl_osdynamic->os_outdata->d_buf;
1976 	Dyn		*dyn;
1977 	Str_tbl		*dynstr;
1978 	size_t		stoff;
1979 	ofl_flag_t	flags = ofl->ofl_flags;
1980 	int		not_relobj = !(flags & FLG_OF_RELOBJ);
1981 	Word		cnt;
1982 
1983 	/*
1984 	 * A relocatable object with a dynamic section is possible, though
1985 	 * rare. One use for this feature is to produce drivers
1986 	 * for the kernel, loaded by krtld.
1987 	 *
1988 	 * Only a limited subset of DT_ entries apply to relocatable
1989 	 * objects:
1990 	 *
1991 	 *	DT_NEEDED
1992 	 *	DT_RUNPATH/DT_RPATH
1993 	 *	DT_FLAGS
1994 	 *	DT_FLAGS1
1995 	 *	DT_SUNW_STRPAD
1996 	 *	DT_LDMACH
1997 	 */
1998 	dynstr = ofl->ofl_dynstrtab;
1999 	ofl->ofl_osdynamic->os_shdr->sh_link =
2000 	    /* LINTED */
2001 	    (Word)elf_ndxscn(ofl->ofl_osdynstr->os_scn);
2002 
2003 	dyn = _dyn;
2004 
2005 	for (APLIST_TRAVERSE(ofl->ofl_sos, idx, ifl)) {
2006 		if ((ifl->ifl_flags &
2007 		    (FLG_IF_IGNORE | FLG_IF_DEPREQD)) == FLG_IF_IGNORE)
2008 			continue;
2009 
2010 		/*
2011 		 * Create and set up the DT_POSFLAG_1 entry here if required.
2012 		 */
2013 		if ((ifl->ifl_flags & (FLG_IF_LAZYLD|FLG_IF_GRPPRM)) &&
2014 		    (ifl->ifl_flags & (FLG_IF_NEEDED)) && not_relobj) {
2015 			dyn->d_tag = DT_POSFLAG_1;
2016 			if (ifl->ifl_flags & FLG_IF_LAZYLD)
2017 				dyn->d_un.d_val = DF_P1_LAZYLOAD;
2018 			if (ifl->ifl_flags & FLG_IF_GRPPRM)
2019 				dyn->d_un.d_val |= DF_P1_GROUPPERM;
2020 			dyn++;
2021 		}
2022 
2023 		if (ifl->ifl_flags & (FLG_IF_NEEDED | FLG_IF_NEEDSTR))
2024 			dyn->d_tag = DT_NEEDED;
2025 		else
2026 			continue;
2027 
2028 		(void) st_setstring(dynstr, ifl->ifl_soname, &stoff);
2029 		dyn->d_un.d_val = stoff;
2030 		/* LINTED */
2031 		ifl->ifl_neededndx = (Half)(((uintptr_t)dyn - (uintptr_t)_dyn) /
2032 		    sizeof (Dyn));
2033 		dyn++;
2034 	}
2035 
2036 	if (not_relobj) {
2037 		if (ofl->ofl_dtsfltrs != NULL) {
2038 			Dfltr_desc	*dftp;
2039 
2040 			for (ALIST_TRAVERSE(ofl->ofl_dtsfltrs, idx, dftp)) {
2041 				if (dftp->dft_flag == FLG_SY_AUXFLTR)
2042 					dyn->d_tag = DT_SUNW_AUXILIARY;
2043 				else
2044 					dyn->d_tag = DT_SUNW_FILTER;
2045 
2046 				(void) st_setstring(dynstr, dftp->dft_str,
2047 				    &stoff);
2048 				dyn->d_un.d_val = stoff;
2049 				dftp->dft_ndx = (Half)(((uintptr_t)dyn -
2050 				    (uintptr_t)_dyn) / sizeof (Dyn));
2051 				dyn++;
2052 			}
2053 		}
2054 		if (((sdp = ld_sym_find(MSG_ORIG(MSG_SYM_INIT_U),
2055 		    SYM_NOHASH, 0, ofl)) != NULL) &&
2056 		    (sdp->sd_ref == REF_REL_NEED) &&
2057 		    (sdp->sd_sym->st_shndx != SHN_UNDEF)) {
2058 			dyn->d_tag = DT_INIT;
2059 			dyn->d_un.d_ptr = sdp->sd_sym->st_value;
2060 			dyn++;
2061 		}
2062 		if (((sdp = ld_sym_find(MSG_ORIG(MSG_SYM_FINI_U),
2063 		    SYM_NOHASH, 0, ofl)) != NULL) &&
2064 		    (sdp->sd_ref == REF_REL_NEED) &&
2065 		    (sdp->sd_sym->st_shndx != SHN_UNDEF)) {
2066 			dyn->d_tag = DT_FINI;
2067 			dyn->d_un.d_ptr = sdp->sd_sym->st_value;
2068 			dyn++;
2069 		}
2070 		if (ofl->ofl_soname) {
2071 			dyn->d_tag = DT_SONAME;
2072 			(void) st_setstring(dynstr, ofl->ofl_soname, &stoff);
2073 			dyn->d_un.d_val = stoff;
2074 			dyn++;
2075 		}
2076 		if (ofl->ofl_filtees) {
2077 			if (flags & FLG_OF_AUX) {
2078 				dyn->d_tag = DT_AUXILIARY;
2079 			} else {
2080 				dyn->d_tag = DT_FILTER;
2081 			}
2082 			(void) st_setstring(dynstr, ofl->ofl_filtees, &stoff);
2083 			dyn->d_un.d_val = stoff;
2084 			dyn++;
2085 		}
2086 	}
2087 
2088 	if (ofl->ofl_rpath) {
2089 		(void) st_setstring(dynstr, ofl->ofl_rpath, &stoff);
2090 		dyn->d_tag = DT_RUNPATH;
2091 		dyn->d_un.d_val = stoff;
2092 		dyn++;
2093 		dyn->d_tag = DT_RPATH;
2094 		dyn->d_un.d_val = stoff;
2095 		dyn++;
2096 	}
2097 
2098 	if (not_relobj) {
2099 		Aliste	idx;
2100 
2101 		if (ofl->ofl_config) {
2102 			dyn->d_tag = DT_CONFIG;
2103 			(void) st_setstring(dynstr, ofl->ofl_config, &stoff);
2104 			dyn->d_un.d_val = stoff;
2105 			dyn++;
2106 		}
2107 		if (ofl->ofl_depaudit) {
2108 			dyn->d_tag = DT_DEPAUDIT;
2109 			(void) st_setstring(dynstr, ofl->ofl_depaudit, &stoff);
2110 			dyn->d_un.d_val = stoff;
2111 			dyn++;
2112 		}
2113 		if (ofl->ofl_audit) {
2114 			dyn->d_tag = DT_AUDIT;
2115 			(void) st_setstring(dynstr, ofl->ofl_audit, &stoff);
2116 			dyn->d_un.d_val = stoff;
2117 			dyn++;
2118 		}
2119 
2120 		dyn->d_tag = DT_HASH;
2121 		dyn->d_un.d_ptr = ofl->ofl_oshash->os_shdr->sh_addr;
2122 		dyn++;
2123 
2124 		shdr = ofl->ofl_osdynstr->os_shdr;
2125 		dyn->d_tag = DT_STRTAB;
2126 		dyn->d_un.d_ptr = shdr->sh_addr;
2127 		dyn++;
2128 
2129 		dyn->d_tag = DT_STRSZ;
2130 		dyn->d_un.d_ptr = shdr->sh_size;
2131 		dyn++;
2132 
2133 		shdr = ofl->ofl_osdynsym->os_shdr;
2134 		dyn->d_tag = DT_SYMTAB;
2135 		dyn->d_un.d_ptr = shdr->sh_addr;
2136 		dyn++;
2137 
2138 		dyn->d_tag = DT_SYMENT;
2139 		dyn->d_un.d_ptr = shdr->sh_entsize;
2140 		dyn++;
2141 
2142 		if (ofl->ofl_osldynsym) {
2143 			/*
2144 			 * We have arranged for the .SUNW_ldynsym data to be
2145 			 * immediately in front of the .dynsym data.
2146 			 * This means that you could start at the top
2147 			 * of .SUNW_ldynsym and see the data for both tables
2148 			 * without a break. This is the view we want to
2149 			 * provide for DT_SUNW_SYMTAB, which is why we
2150 			 * add the lengths together.
2151 			 */
2152 			Shdr *lshdr = ofl->ofl_osldynsym->os_shdr;
2153 			dyn->d_tag = DT_SUNW_SYMTAB;
2154 			dyn->d_un.d_ptr = lshdr->sh_addr;
2155 			dyn++;
2156 
2157 			dyn->d_tag = DT_SUNW_SYMSZ;
2158 			dyn->d_un.d_val = lshdr->sh_size + shdr->sh_size;
2159 			dyn++;
2160 		}
2161 
2162 		if (ofl->ofl_osdynsymsort || ofl->ofl_osdyntlssort) {
2163 			dyn->d_tag = DT_SUNW_SORTENT;
2164 			dyn->d_un.d_val = sizeof (Word);
2165 			dyn++;
2166 		}
2167 
2168 		if (ofl->ofl_osdynsymsort) {
2169 			dyn->d_tag = DT_SUNW_SYMSORT;
2170 			dyn->d_un.d_ptr =
2171 			    ofl->ofl_osdynsymsort->os_shdr->sh_addr;
2172 			dyn++;
2173 
2174 			dyn->d_tag = DT_SUNW_SYMSORTSZ;
2175 			dyn->d_un.d_val =
2176 			    ofl->ofl_osdynsymsort->os_shdr->sh_size;
2177 			dyn++;
2178 		}
2179 
2180 		if (ofl->ofl_osdyntlssort) {
2181 			dyn->d_tag = DT_SUNW_TLSSORT;
2182 			dyn->d_un.d_ptr =
2183 			    ofl->ofl_osdyntlssort->os_shdr->sh_addr;
2184 			dyn++;
2185 
2186 			dyn->d_tag = DT_SUNW_TLSSORTSZ;
2187 			dyn->d_un.d_val =
2188 			    ofl->ofl_osdyntlssort->os_shdr->sh_size;
2189 			dyn++;
2190 		}
2191 
2192 		/*
2193 		 * Reserve the DT_CHECKSUM entry.  Its value will be filled in
2194 		 * after the complete image is built.
2195 		 */
2196 		dyn->d_tag = DT_CHECKSUM;
2197 		ofl->ofl_checksum = &dyn->d_un.d_val;
2198 		dyn++;
2199 
2200 		/*
2201 		 * Versioning sections: DT_VERDEF and DT_VERNEED.
2202 		 *
2203 		 * The Solaris ld does not produce DT_VERSYM, but the GNU ld
2204 		 * does, in order to support their style of versioning, which
2205 		 * differs from ours:
2206 		 *
2207 		 *	- The top bit of the 16-bit Versym index is
2208 		 *		not part of the version, but is interpreted
2209 		 *		as a "hidden bit".
2210 		 *
2211 		 *	- External (SHN_UNDEF) symbols can have non-zero
2212 		 *		Versym values, which specify versions in
2213 		 *		referenced objects, via the Verneed section.
2214 		 *
2215 		 *	- The vna_other field of the Vernaux structures
2216 		 *		found in the Verneed section are not zero as
2217 		 *		with Solaris, but instead contain the version
2218 		 *		index to be used by Versym indices to reference
2219 		 *		the given external version.
2220 		 *
2221 		 * The Solaris ld, rtld, and elfdump programs all interpret the
2222 		 * presence of DT_VERSYM as meaning that GNU versioning rules
2223 		 * apply to the given file. If DT_VERSYM is not present,
2224 		 * then Solaris versioning rules apply. If we should ever need
2225 		 * to change our ld so that it does issue DT_VERSYM, then
2226 		 * this rule for detecting GNU versioning will no longer work.
2227 		 * In that case, we will have to invent a way to explicitly
2228 		 * specify the style of versioning in use, perhaps via a
2229 		 * new dynamic entry named something like DT_SUNW_VERSIONSTYLE,
2230 		 * where the d_un.d_val value specifies which style is to be
2231 		 * used.
2232 		 */
2233 		if ((flags & (FLG_OF_VERDEF | FLG_OF_NOVERSEC)) ==
2234 		    FLG_OF_VERDEF) {
2235 			shdr = ofl->ofl_osverdef->os_shdr;
2236 			dyn->d_tag = DT_VERDEF;
2237 			dyn->d_un.d_ptr = shdr->sh_addr;
2238 			dyn++;
2239 			dyn->d_tag = DT_VERDEFNUM;
2240 			dyn->d_un.d_ptr = shdr->sh_info;
2241 			dyn++;
2242 		}
2243 		if ((flags & (FLG_OF_VERNEED | FLG_OF_NOVERSEC)) ==
2244 		    FLG_OF_VERNEED) {
2245 			shdr = ofl->ofl_osverneed->os_shdr;
2246 			dyn->d_tag = DT_VERNEED;
2247 			dyn->d_un.d_ptr = shdr->sh_addr;
2248 			dyn++;
2249 			dyn->d_tag = DT_VERNEEDNUM;
2250 			dyn->d_un.d_ptr = shdr->sh_info;
2251 			dyn++;
2252 		}
2253 
2254 		if ((flags & FLG_OF_COMREL) && ofl->ofl_relocrelcnt) {
2255 			dyn->d_tag = ld_targ.t_m.m_rel_dt_count;
2256 			dyn->d_un.d_val = ofl->ofl_relocrelcnt;
2257 			dyn++;
2258 		}
2259 		if (flags & FLG_OF_TEXTREL) {
2260 			/*
2261 			 * Only the presence of this entry is used in this
2262 			 * implementation, not the value stored.
2263 			 */
2264 			dyn->d_tag = DT_TEXTREL;
2265 			dyn->d_un.d_val = 0;
2266 			dyn++;
2267 		}
2268 
2269 		if (ofl->ofl_osfiniarray) {
2270 			shdr = ofl->ofl_osfiniarray->os_shdr;
2271 
2272 			dyn->d_tag = DT_FINI_ARRAY;
2273 			dyn->d_un.d_ptr = shdr->sh_addr;
2274 			dyn++;
2275 
2276 			dyn->d_tag = DT_FINI_ARRAYSZ;
2277 			dyn->d_un.d_val = shdr->sh_size;
2278 			dyn++;
2279 		}
2280 
2281 		if (ofl->ofl_osinitarray) {
2282 			shdr = ofl->ofl_osinitarray->os_shdr;
2283 
2284 			dyn->d_tag = DT_INIT_ARRAY;
2285 			dyn->d_un.d_ptr = shdr->sh_addr;
2286 			dyn++;
2287 
2288 			dyn->d_tag = DT_INIT_ARRAYSZ;
2289 			dyn->d_un.d_val = shdr->sh_size;
2290 			dyn++;
2291 		}
2292 
2293 		if (ofl->ofl_ospreinitarray) {
2294 			shdr = ofl->ofl_ospreinitarray->os_shdr;
2295 
2296 			dyn->d_tag = DT_PREINIT_ARRAY;
2297 			dyn->d_un.d_ptr = shdr->sh_addr;
2298 			dyn++;
2299 
2300 			dyn->d_tag = DT_PREINIT_ARRAYSZ;
2301 			dyn->d_un.d_val = shdr->sh_size;
2302 			dyn++;
2303 		}
2304 
2305 		if (ofl->ofl_pltcnt) {
2306 			shdr =  ofl->ofl_osplt->os_relosdesc->os_shdr;
2307 
2308 			dyn->d_tag = DT_PLTRELSZ;
2309 			dyn->d_un.d_ptr = shdr->sh_size;
2310 			dyn++;
2311 			dyn->d_tag = DT_PLTREL;
2312 			dyn->d_un.d_ptr = ld_targ.t_m.m_rel_dt_type;
2313 			dyn++;
2314 			dyn->d_tag = DT_JMPREL;
2315 			dyn->d_un.d_ptr = shdr->sh_addr;
2316 			dyn++;
2317 		}
2318 		if (ofl->ofl_pltpad) {
2319 			shdr =  ofl->ofl_osplt->os_shdr;
2320 
2321 			dyn->d_tag = DT_PLTPAD;
2322 			if (ofl->ofl_pltcnt) {
2323 				dyn->d_un.d_ptr = shdr->sh_addr +
2324 				    ld_targ.t_m.m_plt_reservsz +
2325 				    ofl->ofl_pltcnt * ld_targ.t_m.m_plt_entsize;
2326 			} else
2327 				dyn->d_un.d_ptr = shdr->sh_addr;
2328 			dyn++;
2329 			dyn->d_tag = DT_PLTPADSZ;
2330 			dyn->d_un.d_val = ofl->ofl_pltpad *
2331 			    ld_targ.t_m.m_plt_entsize;
2332 			dyn++;
2333 		}
2334 		if (ofl->ofl_relocsz) {
2335 			dyn->d_tag = ld_targ.t_m.m_rel_dt_type;
2336 			dyn->d_un.d_ptr = ofl->ofl_osrelhead->os_shdr->sh_addr;
2337 			dyn++;
2338 			dyn->d_tag = ld_targ.t_m.m_rel_dt_size;
2339 			dyn->d_un.d_ptr = ofl->ofl_relocsz;
2340 			dyn++;
2341 			dyn->d_tag = ld_targ.t_m.m_rel_dt_ent;
2342 			if (ofl->ofl_osrelhead->os_shdr->sh_type == SHT_REL)
2343 				dyn->d_un.d_ptr = sizeof (Rel);
2344 			else
2345 				dyn->d_un.d_ptr = sizeof (Rela);
2346 			dyn++;
2347 		}
2348 		if (ofl->ofl_ossyminfo) {
2349 			shdr = ofl->ofl_ossyminfo->os_shdr;
2350 			dyn->d_tag = DT_SYMINFO;
2351 			dyn->d_un.d_ptr = shdr->sh_addr;
2352 			dyn++;
2353 			dyn->d_tag = DT_SYMINSZ;
2354 			dyn->d_un.d_val = shdr->sh_size;
2355 			dyn++;
2356 			dyn->d_tag = DT_SYMINENT;
2357 			dyn->d_un.d_val = sizeof (Syminfo);
2358 			dyn++;
2359 		}
2360 		if (ofl->ofl_osmove) {
2361 			Os_desc	*osp;
2362 
2363 			dyn->d_tag = DT_MOVEENT;
2364 			osp = ofl->ofl_osmove;
2365 			dyn->d_un.d_val = osp->os_shdr->sh_entsize;
2366 			dyn++;
2367 			dyn->d_tag = DT_MOVESZ;
2368 			dyn->d_un.d_val = osp->os_shdr->sh_size;
2369 			dyn++;
2370 			dyn->d_tag = DT_MOVETAB;
2371 			dyn->d_un.d_val = osp->os_shdr->sh_addr;
2372 			dyn++;
2373 		}
2374 		if (ofl->ofl_regsymcnt) {
2375 			int	ndx;
2376 
2377 			for (ndx = 0; ndx < ofl->ofl_regsymsno; ndx++) {
2378 				if ((sdp = ofl->ofl_regsyms[ndx]) == NULL)
2379 					continue;
2380 
2381 				dyn->d_tag = ld_targ.t_m.m_dt_register;
2382 				dyn->d_un.d_val = sdp->sd_symndx;
2383 				dyn++;
2384 			}
2385 		}
2386 
2387 		for (APLIST_TRAVERSE(ofl->ofl_rtldinfo, idx, sdp)) {
2388 			dyn->d_tag = DT_SUNW_RTLDINF;
2389 			dyn->d_un.d_ptr = sdp->sd_sym->st_value;
2390 			dyn++;
2391 		}
2392 
2393 		if (ofl->ofl_osdynamic->os_sgdesc &&
2394 		    (ofl->ofl_osdynamic->os_sgdesc->sg_phdr.p_flags & PF_W)) {
2395 			if (ofl->ofl_osinterp) {
2396 				dyn->d_tag = DT_DEBUG;
2397 				dyn->d_un.d_ptr = 0;
2398 				dyn++;
2399 			}
2400 
2401 			dyn->d_tag = DT_FEATURE_1;
2402 			if (ofl->ofl_osmove)
2403 				dyn->d_un.d_val = 0;
2404 			else
2405 				dyn->d_un.d_val = DTF_1_PARINIT;
2406 			dyn++;
2407 		}
2408 
2409 		if (ofl->ofl_oscap) {
2410 			dyn->d_tag = DT_SUNW_CAP;
2411 			dyn->d_un.d_val = ofl->ofl_oscap->os_shdr->sh_addr;
2412 			dyn++;
2413 		}
2414 
2415 		if (flags & FLG_OF_SYMBOLIC) {
2416 			dyn->d_tag = DT_SYMBOLIC;
2417 			dyn->d_un.d_val = 0;
2418 			dyn++;
2419 		}
2420 	}
2421 
2422 	dyn->d_tag = DT_FLAGS;
2423 	dyn->d_un.d_val = ofl->ofl_dtflags;
2424 	dyn++;
2425 
2426 	/*
2427 	 * If -Bdirect was specified, but some NODIRECT symbols were specified
2428 	 * via a mapfile, or -znodirect was used on the command line, then
2429 	 * clear the DF_1_DIRECT flag.  The resultant object will use per-symbol
2430 	 * direct bindings rather than be enabled for global direct bindings.
2431 	 */
2432 	if (ofl->ofl_flags1 & FLG_OF1_NDIRECT) {
2433 		ofl->ofl_dtflags_1 &= ~DF_1_DIRECT;
2434 		ofl->ofl_dtflags_1 |= DF_1_NODIRECT;
2435 	}
2436 
2437 	dyn->d_tag = DT_FLAGS_1;
2438 	dyn->d_un.d_val = ofl->ofl_dtflags_1;
2439 	dyn++;
2440 
2441 	dyn->d_tag = DT_SUNW_STRPAD;
2442 	dyn->d_un.d_val = DYNSTR_EXTRA_PAD;
2443 	dyn++;
2444 
2445 	dyn->d_tag = DT_SUNW_LDMACH;
2446 	dyn->d_un.d_val = ld_sunw_ldmach();
2447 	dyn++;
2448 
2449 	(*ld_targ.t_mr.mr_mach_update_odynamic)(ofl, &dyn);
2450 
2451 	for (cnt = 1 + DYNAMIC_EXTRA_ELTS; cnt--; dyn++) {
2452 		dyn->d_tag = DT_NULL;
2453 		dyn->d_un.d_val = 0;
2454 	}
2455 
2456 	/*
2457 	 * Ensure that we wrote the right number of entries. If not,
2458 	 * we either miscounted in make_dynamic(), or we did something wrong
2459 	 * in this function.
2460 	 */
2461 	assert((ofl->ofl_osdynamic->os_shdr->sh_size /
2462 	    ofl->ofl_osdynamic->os_shdr->sh_entsize) ==
2463 	    ((uintptr_t)dyn - (uintptr_t)_dyn) / sizeof (*dyn));
2464 
2465 	return (1);
2466 }
2467 
2468 /*
2469  * Build the version definition section
2470  */
2471 static int
2472 update_overdef(Ofl_desc *ofl)
2473 {
2474 	Aliste		idx1;
2475 	Ver_desc	*vdp, *_vdp;
2476 	Verdef		*vdf, *_vdf;
2477 	int		num = 0;
2478 	Os_desc		*strosp;
2479 
2480 	/*
2481 	 * Traverse the version descriptors and update the version structures
2482 	 * to point to the dynstr name in preparation for building the version
2483 	 * section structure.
2484 	 */
2485 	for (APLIST_TRAVERSE(ofl->ofl_verdesc, idx1, vdp)) {
2486 		Sym_desc	*sdp;
2487 
2488 		if (vdp->vd_flags & VER_FLG_BASE) {
2489 			const char	*name = vdp->vd_name;
2490 			size_t		stoff;
2491 
2492 			/*
2493 			 * Create a new string table entry to represent the base
2494 			 * version name (there is no corresponding symbol for
2495 			 * this).
2496 			 */
2497 			if (!(ofl->ofl_flags & FLG_OF_DYNAMIC)) {
2498 				(void) st_setstring(ofl->ofl_strtab,
2499 				    name, &stoff);
2500 				/* LINTED */
2501 				vdp->vd_name = (const char *)stoff;
2502 			} else {
2503 				(void) st_setstring(ofl->ofl_dynstrtab,
2504 				    name, &stoff);
2505 				/* LINTED */
2506 				vdp->vd_name = (const char *)stoff;
2507 			}
2508 		} else {
2509 			sdp = ld_sym_find(vdp->vd_name, vdp->vd_hash, 0, ofl);
2510 			/* LINTED */
2511 			vdp->vd_name = (const char *)
2512 			    (uintptr_t)sdp->sd_sym->st_name;
2513 		}
2514 	}
2515 
2516 	_vdf = vdf = (Verdef *)ofl->ofl_osverdef->os_outdata->d_buf;
2517 
2518 	/*
2519 	 * Traverse the version descriptors and update the version section to
2520 	 * reflect each version and its associated dependencies.
2521 	 */
2522 	for (APLIST_TRAVERSE(ofl->ofl_verdesc, idx1, vdp)) {
2523 		Aliste		idx2;
2524 		Half		cnt = 1;
2525 		Verdaux		*vdap, *_vdap;
2526 
2527 		_vdap = vdap = (Verdaux *)(vdf + 1);
2528 
2529 		vdf->vd_version = VER_DEF_CURRENT;
2530 		vdf->vd_flags	= vdp->vd_flags & MSK_VER_USER;
2531 		vdf->vd_ndx	= vdp->vd_ndx;
2532 		vdf->vd_hash	= vdp->vd_hash;
2533 
2534 		/* LINTED */
2535 		vdap->vda_name = (uintptr_t)vdp->vd_name;
2536 		vdap++;
2537 		/* LINTED */
2538 		_vdap->vda_next = (Word)((uintptr_t)vdap - (uintptr_t)_vdap);
2539 
2540 		/*
2541 		 * Traverse this versions dependency list generating the
2542 		 * appropriate version dependency entries.
2543 		 */
2544 		for (APLIST_TRAVERSE(vdp->vd_deps, idx2, _vdp)) {
2545 			/* LINTED */
2546 			vdap->vda_name = (uintptr_t)_vdp->vd_name;
2547 			_vdap = vdap;
2548 			vdap++, cnt++;
2549 			/* LINTED */
2550 			_vdap->vda_next = (Word)((uintptr_t)vdap -
2551 			    (uintptr_t)_vdap);
2552 		}
2553 		_vdap->vda_next = 0;
2554 
2555 		/*
2556 		 * Record the versions auxiliary array offset and the associated
2557 		 * dependency count.
2558 		 */
2559 		/* LINTED */
2560 		vdf->vd_aux = (Word)((uintptr_t)(vdf + 1) - (uintptr_t)vdf);
2561 		vdf->vd_cnt = cnt;
2562 
2563 		/*
2564 		 * Record the next versions offset and update the version
2565 		 * pointer.  Remember the previous version offset as the very
2566 		 * last structures next pointer should be null.
2567 		 */
2568 		_vdf = vdf;
2569 		vdf = (Verdef *)vdap, num++;
2570 		/* LINTED */
2571 		_vdf->vd_next = (Word)((uintptr_t)vdf - (uintptr_t)_vdf);
2572 	}
2573 	_vdf->vd_next = 0;
2574 
2575 	/*
2576 	 * Record the string table association with the version definition
2577 	 * section, and the symbol table associated with the version symbol
2578 	 * table (the actual contents of the version symbol table are filled
2579 	 * in during symbol update).
2580 	 */
2581 	if ((ofl->ofl_flags & FLG_OF_RELOBJ) ||
2582 	    (ofl->ofl_flags & FLG_OF_STATIC)) {
2583 		strosp = ofl->ofl_osstrtab;
2584 	} else {
2585 		strosp = ofl->ofl_osdynstr;
2586 	}
2587 	/* LINTED */
2588 	ofl->ofl_osverdef->os_shdr->sh_link = (Word)elf_ndxscn(strosp->os_scn);
2589 
2590 	/*
2591 	 * The version definition sections `info' field is used to indicate the
2592 	 * number of entries in this section.
2593 	 */
2594 	ofl->ofl_osverdef->os_shdr->sh_info = num;
2595 
2596 	return (1);
2597 }
2598 
2599 /*
2600  * Finish the version symbol index section
2601  */
2602 static int
2603 update_oversym(Ofl_desc *ofl)
2604 {
2605 	Os_desc		*symosp;
2606 
2607 	/*
2608 	 * Record the string table association with the version definition
2609 	 * section, and the symbol table associated with the version symbol
2610 	 * table (the actual contents of the version symbol table are filled
2611 	 * in during symbol update).
2612 	 */
2613 	if ((ofl->ofl_flags & FLG_OF_RELOBJ) ||
2614 	    (ofl->ofl_flags & FLG_OF_STATIC)) {
2615 		symosp = ofl->ofl_ossymtab;
2616 	} else {
2617 		symosp = ofl->ofl_osdynsym;
2618 	}
2619 
2620 	/* LINTED */
2621 	ofl->ofl_osversym->os_shdr->sh_link = (Word)elf_ndxscn(symosp->os_scn);
2622 
2623 	return (1);
2624 }
2625 
2626 /*
2627  * Build the version needed section
2628  */
2629 static int
2630 update_overneed(Ofl_desc *ofl)
2631 {
2632 	Aliste		idx1;
2633 	Ifl_desc	*ifl;
2634 	Verneed		*vnd, *_vnd;
2635 	Str_tbl		*dynstr;
2636 	Word		num = 0;
2637 
2638 	dynstr = ofl->ofl_dynstrtab;
2639 	_vnd = vnd = (Verneed *)ofl->ofl_osverneed->os_outdata->d_buf;
2640 
2641 	/*
2642 	 * Traverse the shared object list looking for dependencies that have
2643 	 * versions defined within them.
2644 	 */
2645 	for (APLIST_TRAVERSE(ofl->ofl_sos, idx1, ifl)) {
2646 		Half		_cnt;
2647 		Word		cnt = 0;
2648 		Vernaux		*_vnap, *vnap;
2649 		size_t		stoff;
2650 
2651 		if (!(ifl->ifl_flags & FLG_IF_VERNEED))
2652 			continue;
2653 
2654 		vnd->vn_version = VER_NEED_CURRENT;
2655 
2656 		(void) st_setstring(dynstr, ifl->ifl_soname, &stoff);
2657 		vnd->vn_file = stoff;
2658 
2659 		_vnap = vnap = (Vernaux *)(vnd + 1);
2660 
2661 		/*
2662 		 * Traverse the version index list recording
2663 		 * each version as a needed dependency.
2664 		 */
2665 		for (_cnt = 0; _cnt <= ifl->ifl_vercnt; _cnt++) {
2666 			Ver_index	*vip = &ifl->ifl_verndx[_cnt];
2667 
2668 			if (vip->vi_flags & FLG_VER_REFER) {
2669 				(void) st_setstring(dynstr, vip->vi_name,
2670 				    &stoff);
2671 				vnap->vna_name = stoff;
2672 
2673 				if (vip->vi_desc) {
2674 					vnap->vna_hash = vip->vi_desc->vd_hash;
2675 					vnap->vna_flags =
2676 					    vip->vi_desc->vd_flags;
2677 				} else {
2678 					vnap->vna_hash = 0;
2679 					vnap->vna_flags = 0;
2680 				}
2681 				vnap->vna_other = vip->vi_overndx;
2682 
2683 				/*
2684 				 * If version A inherits version B, then
2685 				 * B is implicit in A. It suffices for ld.so.1
2686 				 * to verify A at runtime and skip B. The
2687 				 * version normalization process sets the INFO
2688 				 * flag for the versions we want ld.so.1 to
2689 				 * skip.
2690 				 */
2691 				if (vip->vi_flags & VER_FLG_INFO)
2692 					vnap->vna_flags |= VER_FLG_INFO;
2693 
2694 				_vnap = vnap;
2695 				vnap++, cnt++;
2696 				_vnap->vna_next =
2697 				    /* LINTED */
2698 				    (Word)((uintptr_t)vnap - (uintptr_t)_vnap);
2699 			}
2700 		}
2701 
2702 		_vnap->vna_next = 0;
2703 
2704 		/*
2705 		 * Record the versions auxiliary array offset and
2706 		 * the associated dependency count.
2707 		 */
2708 		/* LINTED */
2709 		vnd->vn_aux = (Word)((uintptr_t)(vnd + 1) - (uintptr_t)vnd);
2710 		/* LINTED */
2711 		vnd->vn_cnt = (Half)cnt;
2712 
2713 		/*
2714 		 * Record the next versions offset and update the version
2715 		 * pointer.  Remember the previous version offset as the very
2716 		 * last structures next pointer should be null.
2717 		 */
2718 		_vnd = vnd;
2719 		vnd = (Verneed *)vnap, num++;
2720 		/* LINTED */
2721 		_vnd->vn_next = (Word)((uintptr_t)vnd - (uintptr_t)_vnd);
2722 	}
2723 	_vnd->vn_next = 0;
2724 
2725 	/*
2726 	 * Record association on string table section and use the
2727 	 * `info' field to indicate the number of entries in this
2728 	 * section.
2729 	 */
2730 	ofl->ofl_osverneed->os_shdr->sh_link =
2731 	    /* LINTED */
2732 	    (Word)elf_ndxscn(ofl->ofl_osdynstr->os_scn);
2733 	ofl->ofl_osverneed->os_shdr->sh_info = num;
2734 
2735 	return (1);
2736 }
2737 
2738 
2739 /*
2740  * Update syminfo section.
2741  */
2742 static uintptr_t
2743 update_osyminfo(Ofl_desc *ofl)
2744 {
2745 	Os_desc		*symosp, *infosp = ofl->ofl_ossyminfo;
2746 	Syminfo		*sip = infosp->os_outdata->d_buf;
2747 	Shdr		*shdr = infosp->os_shdr;
2748 	char		*strtab;
2749 	Aliste		idx;
2750 	Sym_desc	*sdp;
2751 	Sfltr_desc	*sftp;
2752 
2753 	if (ofl->ofl_flags & FLG_OF_RELOBJ) {
2754 		symosp = ofl->ofl_ossymtab;
2755 		strtab = ofl->ofl_osstrtab->os_outdata->d_buf;
2756 	} else {
2757 		symosp = ofl->ofl_osdynsym;
2758 		strtab = ofl->ofl_osdynstr->os_outdata->d_buf;
2759 	}
2760 
2761 	/* LINTED */
2762 	infosp->os_shdr->sh_link = (Word)elf_ndxscn(symosp->os_scn);
2763 	if (ofl->ofl_osdynamic)
2764 		infosp->os_shdr->sh_info =
2765 		    /* LINTED */
2766 		    (Word)elf_ndxscn(ofl->ofl_osdynamic->os_scn);
2767 
2768 	/*
2769 	 * Update any references with the index into the dynamic table.
2770 	 */
2771 	for (APLIST_TRAVERSE(ofl->ofl_syminfsyms, idx, sdp)) {
2772 		Ifl_desc	*ifl;
2773 
2774 		if (sdp->sd_aux && sdp->sd_aux->sa_bindto)
2775 			ifl = sdp->sd_aux->sa_bindto;
2776 		else
2777 			ifl = sdp->sd_file;
2778 		sip[sdp->sd_symndx].si_boundto = ifl->ifl_neededndx;
2779 	}
2780 
2781 	/*
2782 	 * Update any filtee references with the index into the dynamic table.
2783 	 */
2784 	for (ALIST_TRAVERSE(ofl->ofl_symfltrs, idx, sftp)) {
2785 		Dfltr_desc	*dftp;
2786 
2787 		dftp = alist_item(ofl->ofl_dtsfltrs, sftp->sft_idx);
2788 		sip[sftp->sft_sdp->sd_symndx].si_boundto = dftp->dft_ndx;
2789 	}
2790 
2791 	/*
2792 	 * Display debugging information about section.
2793 	 */
2794 	DBG_CALL(Dbg_syminfo_title(ofl->ofl_lml));
2795 	if (DBG_ENABLED) {
2796 		Word	_cnt, cnt = shdr->sh_size / shdr->sh_entsize;
2797 		Sym	*symtab = symosp->os_outdata->d_buf;
2798 		Dyn	*dyn;
2799 
2800 		if (ofl->ofl_osdynamic)
2801 			dyn = ofl->ofl_osdynamic->os_outdata->d_buf;
2802 		else
2803 			dyn = NULL;
2804 
2805 		for (_cnt = 1; _cnt < cnt; _cnt++) {
2806 			if (sip[_cnt].si_flags || sip[_cnt].si_boundto)
2807 				/* LINTED */
2808 				DBG_CALL(Dbg_syminfo_entry(ofl->ofl_lml, _cnt,
2809 				    &sip[_cnt], &symtab[_cnt], strtab, dyn));
2810 		}
2811 	}
2812 	return (1);
2813 }
2814 
2815 /*
2816  * Build the output elf header.
2817  */
2818 static uintptr_t
2819 update_oehdr(Ofl_desc * ofl)
2820 {
2821 	Ehdr	*ehdr = ofl->ofl_nehdr;
2822 
2823 	/*
2824 	 * If an entry point symbol has already been established (refer
2825 	 * sym_validate()) simply update the elf header entry point with the
2826 	 * symbols value.  If no entry point is defined it will have been filled
2827 	 * with the start address of the first section within the text segment
2828 	 * (refer update_outfile()).
2829 	 */
2830 	if (ofl->ofl_entry)
2831 		ehdr->e_entry =
2832 		    ((Sym_desc *)(ofl->ofl_entry))->sd_sym->st_value;
2833 
2834 	/*
2835 	 * Note. it may be necessary to update the `e_flags' field in the
2836 	 * machine dependent section.
2837 	 */
2838 	ehdr->e_ident[EI_DATA] = ld_targ.t_m.m_data;
2839 	ehdr->e_machine = ofl->ofl_dehdr->e_machine;
2840 	ehdr->e_flags = ofl->ofl_dehdr->e_flags;
2841 	ehdr->e_version = ofl->ofl_dehdr->e_version;
2842 
2843 	if (ehdr->e_machine != ld_targ.t_m.m_mach) {
2844 		if (ehdr->e_machine != ld_targ.t_m.m_machplus)
2845 			return (S_ERROR);
2846 		if ((ehdr->e_flags & ld_targ.t_m.m_flagsplus) == 0)
2847 			return (S_ERROR);
2848 	}
2849 
2850 	if (ofl->ofl_flags & FLG_OF_SHAROBJ)
2851 		ehdr->e_type = ET_DYN;
2852 	else if (ofl->ofl_flags & FLG_OF_RELOBJ)
2853 		ehdr->e_type = ET_REL;
2854 	else
2855 		ehdr->e_type = ET_EXEC;
2856 
2857 	return (1);
2858 }
2859 
2860 /*
2861  * Perform move table expansion.
2862  */
2863 static void
2864 expand_move(Ofl_desc *ofl, Sym_desc *sdp, Move *mvp)
2865 {
2866 	Os_desc		*osp;
2867 	uchar_t		*taddr, *taddr0;
2868 	Sxword		offset;
2869 	Half		cnt;
2870 	uint_t		stride;
2871 
2872 	osp = ofl->ofl_isparexpn->is_osdesc;
2873 	offset = sdp->sd_sym->st_value - osp->os_shdr->sh_addr;
2874 
2875 	taddr0 = taddr = osp->os_outdata->d_buf;
2876 	taddr += offset;
2877 	taddr = taddr + mvp->m_poffset;
2878 
2879 	for (cnt = 0; cnt < mvp->m_repeat; cnt++) {
2880 		/* LINTED */
2881 		DBG_CALL(Dbg_move_expand(ofl->ofl_lml, mvp,
2882 		    (Addr)(taddr - taddr0)));
2883 		stride = (uint_t)mvp->m_stride + 1;
2884 
2885 		/*
2886 		 * Update the target address based upon the move entry size.
2887 		 * This size was validated in ld_process_move().
2888 		 */
2889 		/* LINTED */
2890 		switch (ELF_M_SIZE(mvp->m_info)) {
2891 		case 1:
2892 			/* LINTED */
2893 			*taddr = (uchar_t)mvp->m_value;
2894 			taddr += stride;
2895 			break;
2896 		case 2:
2897 			/* LINTED */
2898 			*((Half *)taddr) = (Half)mvp->m_value;
2899 			taddr += 2 * stride;
2900 			break;
2901 		case 4:
2902 			/* LINTED */
2903 			*((Word *)taddr) = (Word)mvp->m_value;
2904 			taddr += 4 * stride;
2905 			break;
2906 		case 8:
2907 			/* LINTED */
2908 			*((u_longlong_t *)taddr) = mvp->m_value;
2909 			taddr += 8 * stride;
2910 			break;
2911 		}
2912 	}
2913 }
2914 
2915 /*
2916  * Update Move sections.
2917  */
2918 static void
2919 update_move(Ofl_desc *ofl)
2920 {
2921 	Word		ndx = 0;
2922 	ofl_flag_t	flags = ofl->ofl_flags;
2923 	Move		*omvp;
2924 	Aliste		idx1;
2925 	Sym_desc	*sdp;
2926 
2927 	/*
2928 	 * Determine the index of the symbol table that will be referenced by
2929 	 * the Move section.
2930 	 */
2931 	if (OFL_ALLOW_DYNSYM(ofl))
2932 		/* LINTED */
2933 		ndx = (Word) elf_ndxscn(ofl->ofl_osdynsym->os_scn);
2934 	else if (!(flags & FLG_OF_STRIP) || (flags & FLG_OF_RELOBJ))
2935 		/* LINTED */
2936 		ndx = (Word) elf_ndxscn(ofl->ofl_ossymtab->os_scn);
2937 
2938 	/*
2939 	 * Update sh_link of the Move section, and point to the new Move data.
2940 	 */
2941 	if (ofl->ofl_osmove) {
2942 		ofl->ofl_osmove->os_shdr->sh_link = ndx;
2943 		omvp = (Move *)ofl->ofl_osmove->os_outdata->d_buf;
2944 	}
2945 
2946 	/*
2947 	 * Update symbol entry index
2948 	 */
2949 	for (APLIST_TRAVERSE(ofl->ofl_parsyms, idx1, sdp)) {
2950 		Aliste		idx2;
2951 		Mv_desc		*mdp;
2952 
2953 		/*
2954 		 * Expand move table
2955 		 */
2956 		if (sdp->sd_flags & FLG_SY_PAREXPN) {
2957 			const char	*str;
2958 
2959 			if (flags & FLG_OF_STATIC)
2960 				str = MSG_INTL(MSG_PSYM_EXPREASON1);
2961 			else if (ofl->ofl_flags1 & FLG_OF1_NOPARTI)
2962 				str = MSG_INTL(MSG_PSYM_EXPREASON2);
2963 			else
2964 				str = MSG_INTL(MSG_PSYM_EXPREASON3);
2965 
2966 			DBG_CALL(Dbg_move_parexpn(ofl->ofl_lml,
2967 			    sdp->sd_name, str));
2968 
2969 			for (ALIST_TRAVERSE(sdp->sd_move, idx2, mdp)) {
2970 				DBG_CALL(Dbg_move_entry1(ofl->ofl_lml, 0,
2971 				    mdp->md_move, sdp));
2972 				expand_move(ofl, sdp, mdp->md_move);
2973 			}
2974 			continue;
2975 		}
2976 
2977 		/*
2978 		 * Process move table
2979 		 */
2980 		DBG_CALL(Dbg_move_outmove(ofl->ofl_lml, sdp->sd_name));
2981 
2982 		for (ALIST_TRAVERSE(sdp->sd_move, idx2, mdp)) {
2983 			Move	*imvp;
2984 			int	idx = 1;
2985 			Sym	*sym;
2986 
2987 			imvp = mdp->md_move;
2988 			sym = sdp->sd_sym;
2989 
2990 			DBG_CALL(Dbg_move_entry1(ofl->ofl_lml, 1, imvp, sdp));
2991 
2992 			*omvp = *imvp;
2993 			if ((flags & FLG_OF_RELOBJ) == 0) {
2994 				if (ELF_ST_BIND(sym->st_info) == STB_LOCAL) {
2995 					Os_desc	*osp = sdp->sd_isc->is_osdesc;
2996 					Word	ndx = osp->os_identndx;
2997 
2998 					omvp->m_info =
2999 					    /* LINTED */
3000 					    ELF_M_INFO(ndx, imvp->m_info);
3001 
3002 					if (ELF_ST_TYPE(sym->st_info) !=
3003 					    STT_SECTION) {
3004 						omvp->m_poffset =
3005 						    sym->st_value -
3006 						    osp->os_shdr->sh_addr +
3007 						    imvp->m_poffset;
3008 					}
3009 				} else {
3010 					omvp->m_info =
3011 					    /* LINTED */
3012 					    ELF_M_INFO(sdp->sd_symndx,
3013 					    imvp->m_info);
3014 				}
3015 			} else {
3016 				Boolean 	isredloc = FALSE;
3017 
3018 				if ((ELF_ST_BIND(sym->st_info) == STB_LOCAL) &&
3019 				    (ofl->ofl_flags & FLG_OF_REDLSYM))
3020 					isredloc = TRUE;
3021 
3022 				if (isredloc && !(sdp->sd_move)) {
3023 					Os_desc	*osp = sdp->sd_isc->is_osdesc;
3024 					Word	ndx = osp->os_identndx;
3025 
3026 					omvp->m_info =
3027 					    /* LINTED */
3028 					    ELF_M_INFO(ndx, imvp->m_info);
3029 
3030 					omvp->m_poffset += sym->st_value;
3031 				} else {
3032 					if (isredloc)
3033 						DBG_CALL(Dbg_syms_reduce(ofl,
3034 						    DBG_SYM_REDUCE_RETAIN,
3035 						    sdp, idx,
3036 						    ofl->ofl_osmove->os_name));
3037 
3038 					omvp->m_info =
3039 					    /* LINTED */
3040 					    ELF_M_INFO(sdp->sd_symndx,
3041 					    imvp->m_info);
3042 				}
3043 			}
3044 
3045 			DBG_CALL(Dbg_move_entry1(ofl->ofl_lml, 0, omvp, sdp));
3046 			omvp++;
3047 			idx++;
3048 		}
3049 	}
3050 }
3051 
3052 /*
3053  * Scan through the SHT_GROUP output sections.  Update their sh_link/sh_info
3054  * fields as well as the section contents.
3055  */
3056 static uintptr_t
3057 update_ogroup(Ofl_desc *ofl)
3058 {
3059 	Aliste		idx;
3060 	Os_desc		*osp;
3061 	uintptr_t	error = 0;
3062 
3063 	for (APLIST_TRAVERSE(ofl->ofl_osgroups, idx, osp)) {
3064 		Is_desc		*isp;
3065 		Ifl_desc	*ifl;
3066 		Shdr		*shdr = osp->os_shdr;
3067 		Sym_desc	*sdp;
3068 		Xword		i, grpcnt;
3069 		Word		*gdata;
3070 
3071 		/*
3072 		 * Since input GROUP sections always create unique
3073 		 * output GROUP sections - we know there is only one
3074 		 * item on the list.
3075 		 */
3076 		isp = ld_os_first_isdesc(osp);
3077 
3078 		ifl = isp->is_file;
3079 		sdp = ifl->ifl_oldndx[isp->is_shdr->sh_info];
3080 		shdr->sh_link = (Word)elf_ndxscn(ofl->ofl_ossymtab->os_scn);
3081 		shdr->sh_info = sdp->sd_symndx;
3082 
3083 		/*
3084 		 * Scan through the group data section and update
3085 		 * all of the links to new values.
3086 		 */
3087 		grpcnt = shdr->sh_size / shdr->sh_entsize;
3088 		gdata = (Word *)osp->os_outdata->d_buf;
3089 
3090 		for (i = 1; i < grpcnt; i++) {
3091 			Os_desc	*_osp;
3092 			Is_desc	*_isp = ifl->ifl_isdesc[gdata[i]];
3093 
3094 			/*
3095 			 * If the referenced section didn't make it to the
3096 			 * output file - just zero out the entry.
3097 			 */
3098 			if ((_osp = _isp->is_osdesc) == NULL)
3099 				gdata[i] = 0;
3100 			else
3101 				gdata[i] = (Word)elf_ndxscn(_osp->os_scn);
3102 		}
3103 	}
3104 	return (error);
3105 }
3106 
3107 static void
3108 update_ostrtab(Os_desc *osp, Str_tbl *stp, uint_t extra)
3109 {
3110 	Elf_Data	*data;
3111 
3112 	if (osp == NULL)
3113 		return;
3114 
3115 	data = osp->os_outdata;
3116 	assert(data->d_size == (st_getstrtab_sz(stp) + extra));
3117 	(void) st_setstrbuf(stp, data->d_buf, data->d_size - extra);
3118 	/* If leaving an extra hole at the end, zero it */
3119 	if (extra > 0)
3120 		(void) memset((char *)data->d_buf + data->d_size - extra,
3121 		    0x0, extra);
3122 }
3123 
3124 /*
3125  * Translate the shdr->sh_{link, info} from its input section value to that
3126  * of the corresponding shdr->sh_{link, info} output section value.
3127  */
3128 static Word
3129 translate_link(Ofl_desc *ofl, Os_desc *osp, Word link, const char *msg)
3130 {
3131 	Is_desc		*isp;
3132 	Ifl_desc	*ifl;
3133 
3134 	/*
3135 	 * Don't translate the special section numbers.
3136 	 */
3137 	if (link >= SHN_LORESERVE)
3138 		return (link);
3139 
3140 	/*
3141 	 * Does this output section translate back to an input file.  If not
3142 	 * then there is no translation to do.  In this case we will assume that
3143 	 * if sh_link has a value, it's the right value.
3144 	 */
3145 	isp = ld_os_first_isdesc(osp);
3146 	if ((ifl = isp->is_file) == NULL)
3147 		return (link);
3148 
3149 	/*
3150 	 * Sanity check to make sure that the sh_{link, info} value
3151 	 * is within range for the input file.
3152 	 */
3153 	if (link >= ifl->ifl_shnum) {
3154 		eprintf(ofl->ofl_lml, ERR_WARNING, msg, ifl->ifl_name,
3155 		    EC_WORD(isp->is_scnndx), isp->is_name, EC_XWORD(link));
3156 		return (link);
3157 	}
3158 
3159 	/*
3160 	 * Follow the link to the input section.
3161 	 */
3162 	if ((isp = ifl->ifl_isdesc[link]) == NULL)
3163 		return (0);
3164 	if ((osp = isp->is_osdesc) == NULL)
3165 		return (0);
3166 
3167 	/* LINTED */
3168 	return ((Word)elf_ndxscn(osp->os_scn));
3169 }
3170 
3171 /*
3172  * Having created all of the necessary sections, segments, and associated
3173  * headers, fill in the program headers and update any other data in the
3174  * output image.  Some general rules:
3175  *
3176  *  -	If an interpreter is required always generate a PT_PHDR entry as
3177  *	well.  It is this entry that triggers the kernel into passing the
3178  *	interpreter an aux vector instead of just a file descriptor.
3179  *
3180  *  -	When generating an image that will be interpreted (ie. a dynamic
3181  *	executable, a shared object, or a static executable that has been
3182  *	provided with an interpreter - weird, but possible), make the initial
3183  *	loadable segment include both the ehdr and phdr[].  Both of these
3184  *	tables are used by the interpreter therefore it seems more intuitive
3185  *	to explicitly defined them as part of the mapped image rather than
3186  *	relying on page rounding by the interpreter to allow their access.
3187  *
3188  *  -	When generating a static image that does not require an interpreter
3189  *	have the first loadable segment indicate the address of the first
3190  *	.section as the start address (things like /kernel/unix and ufsboot
3191  *	expect this behavior).
3192  */
3193 uintptr_t
3194 ld_update_outfile(Ofl_desc *ofl)
3195 {
3196 	Addr		size, etext, vaddr;
3197 	Sg_desc		*sgp;
3198 	Sg_desc		*dtracesgp = NULL, *capsgp = NULL, *intpsgp = NULL;
3199 	Os_desc		*osp;
3200 	int		phdrndx = 0, segndx = -1, secndx, intppndx, intpsndx;
3201 	int		dtracepndx, dtracesndx, cappndx, capsndx;
3202 	Ehdr		*ehdr = ofl->ofl_nehdr;
3203 	Shdr		*hshdr;
3204 	Phdr		*_phdr = NULL;
3205 	Word		phdrsz = (ehdr->e_phnum * ehdr->e_phentsize), shscnndx;
3206 	ofl_flag_t	flags = ofl->ofl_flags;
3207 	Word		ehdrsz = ehdr->e_ehsize;
3208 	Boolean		nobits;
3209 	Off		offset;
3210 	Aliste		idx1;
3211 
3212 	/*
3213 	 * Initialize the starting address for the first segment.  Executables
3214 	 * have different starting addresses depending upon the target ABI,
3215 	 * where as shared objects have a starting address of 0.  If this is
3216 	 * a 64-bit executable that is being constructed to run in a restricted
3217 	 * address space, use an alternative origin that will provide more free
3218 	 * address space for the the eventual process.
3219 	 */
3220 	if (ofl->ofl_flags & FLG_OF_EXEC) {
3221 #if	defined(_ELF64)
3222 		if (ofl->ofl_sfcap_1 & SF1_SUNW_ADDR32)
3223 			vaddr = ld_targ.t_m.m_segm_aorigin;
3224 		else
3225 #endif
3226 			vaddr = ld_targ.t_m.m_segm_origin;
3227 	} else
3228 		vaddr = 0;
3229 
3230 	/*
3231 	 * Loop through the segment descriptors and pick out what we need.
3232 	 */
3233 	DBG_CALL(Dbg_seg_title(ofl->ofl_lml));
3234 	for (APLIST_TRAVERSE(ofl->ofl_segs, idx1, sgp)) {
3235 		Phdr	*phdr = &(sgp->sg_phdr);
3236 		Xword 	p_align;
3237 		Aliste	idx2;
3238 
3239 		segndx++;
3240 
3241 		/*
3242 		 * If an interpreter is required generate a PT_INTERP and
3243 		 * PT_PHDR program header entry.  The PT_PHDR entry describes
3244 		 * the program header table itself.  This information will be
3245 		 * passed via the aux vector to the interpreter (ld.so.1).
3246 		 * The program header array is actually part of the first
3247 		 * loadable segment (and the PT_PHDR entry is the first entry),
3248 		 * therefore its virtual address isn't known until the first
3249 		 * loadable segment is processed.
3250 		 */
3251 		if (phdr->p_type == PT_PHDR) {
3252 			if (ofl->ofl_osinterp) {
3253 				phdr->p_offset = ehdr->e_phoff;
3254 				phdr->p_filesz = phdr->p_memsz = phdrsz;
3255 
3256 				DBG_CALL(Dbg_seg_entry(ofl, segndx, sgp));
3257 				ofl->ofl_phdr[phdrndx++] = *phdr;
3258 			}
3259 			continue;
3260 		}
3261 		if (phdr->p_type == PT_INTERP) {
3262 			if (ofl->ofl_osinterp) {
3263 				intpsgp = sgp;
3264 				intpsndx = segndx;
3265 				intppndx = phdrndx++;
3266 			}
3267 			continue;
3268 		}
3269 
3270 		/*
3271 		 * If we are creating a PT_SUNWDTRACE segment, remember where
3272 		 * the program header is.  The header values are assigned after
3273 		 * update_osym() has completed and the symbol table addresses
3274 		 * have been udpated.
3275 		 */
3276 		if (phdr->p_type == PT_SUNWDTRACE) {
3277 			if ((ofl->ofl_dtracesym) &&
3278 			    ((flags & FLG_OF_RELOBJ) == 0)) {
3279 				dtracesgp = sgp;
3280 				dtracesndx = segndx;
3281 				dtracepndx = phdrndx++;
3282 			}
3283 			continue;
3284 		}
3285 
3286 		/*
3287 		 * If a hardware/software capabilities section is required,
3288 		 * generate the PT_SUNWCAP header.  Note, as this comes before
3289 		 * the first loadable segment, we don't yet know its real
3290 		 * virtual address.  This is updated later.
3291 		 */
3292 		if (phdr->p_type == PT_SUNWCAP) {
3293 			if (ofl->ofl_oscap) {
3294 				capsgp = sgp;
3295 				capsndx = segndx;
3296 				cappndx = phdrndx++;
3297 			}
3298 			continue;
3299 		}
3300 
3301 		/*
3302 		 * As the dynamic program header occurs after the loadable
3303 		 * headers in the segment descriptor table, all the address
3304 		 * information for the .dynamic output section will have been
3305 		 * figured out by now.
3306 		 */
3307 		if (phdr->p_type == PT_DYNAMIC) {
3308 			if (OFL_ALLOW_DYNSYM(ofl)) {
3309 				Shdr	*shdr = ofl->ofl_osdynamic->os_shdr;
3310 
3311 				phdr->p_vaddr = shdr->sh_addr;
3312 				phdr->p_offset = shdr->sh_offset;
3313 				phdr->p_filesz = shdr->sh_size;
3314 				phdr->p_flags = ld_targ.t_m.m_dataseg_perm;
3315 
3316 				DBG_CALL(Dbg_seg_entry(ofl, segndx, sgp));
3317 				ofl->ofl_phdr[phdrndx++] = *phdr;
3318 			}
3319 			continue;
3320 		}
3321 
3322 		/*
3323 		 * As the unwind (.eh_frame_hdr) program header occurs after
3324 		 * the loadable headers in the segment descriptor table, all
3325 		 * the address information for the .eh_frame output section
3326 		 * will have been figured out by now.
3327 		 */
3328 		if (phdr->p_type == PT_SUNW_UNWIND) {
3329 			Shdr	    *shdr;
3330 
3331 			if (ofl->ofl_unwindhdr == NULL)
3332 				continue;
3333 
3334 			shdr = ofl->ofl_unwindhdr->os_shdr;
3335 
3336 			phdr->p_flags = PF_R;
3337 			phdr->p_vaddr = shdr->sh_addr;
3338 			phdr->p_memsz = shdr->sh_size;
3339 			phdr->p_filesz = shdr->sh_size;
3340 			phdr->p_offset = shdr->sh_offset;
3341 			phdr->p_align = shdr->sh_addralign;
3342 			phdr->p_paddr = 0;
3343 			ofl->ofl_phdr[phdrndx++] = *phdr;
3344 			continue;
3345 		}
3346 
3347 		/*
3348 		 * As the TLS program header occurs after the loadable
3349 		 * headers in the segment descriptor table, all the address
3350 		 * information for the .tls output section will have been
3351 		 * figured out by now.
3352 		 */
3353 		if (phdr->p_type == PT_TLS) {
3354 			Os_desc		*tlsosp;
3355 			Shdr		*firstshdr = NULL, *lastfileshdr = NULL;
3356 			Shdr		*lastshdr;
3357 			Aliste		idx;
3358 
3359 			if (ofl->ofl_ostlsseg == NULL)
3360 				continue;
3361 
3362 			/*
3363 			 * Scan through the sections that have contributed TLS.
3364 			 * Remember the first and last so as to determine the
3365 			 * TLS memory size requirement.  Remember the last
3366 			 * non-nobits section to determine the TLS data
3367 			 * contribution, which determines the TLS file size.
3368 			 */
3369 			for (APLIST_TRAVERSE(ofl->ofl_ostlsseg, idx, tlsosp)) {
3370 				Shdr	*tlsshdr = tlsosp->os_shdr;
3371 
3372 				if (firstshdr == NULL)
3373 					firstshdr = tlsshdr;
3374 				if (tlsshdr->sh_type != SHT_NOBITS)
3375 					lastfileshdr = tlsshdr;
3376 				lastshdr = tlsshdr;
3377 			}
3378 
3379 			phdr->p_flags = PF_R | PF_W;
3380 			phdr->p_vaddr = firstshdr->sh_addr;
3381 			phdr->p_offset = firstshdr->sh_offset;
3382 			phdr->p_align = firstshdr->sh_addralign;
3383 
3384 			if (lastfileshdr)
3385 				phdr->p_filesz = lastfileshdr->sh_offset +
3386 				    lastfileshdr->sh_size - phdr->p_offset;
3387 			else
3388 				phdr->p_filesz = 0;
3389 
3390 			phdr->p_memsz = lastshdr->sh_offset +
3391 			    lastshdr->sh_size - phdr->p_offset;
3392 
3393 			DBG_CALL(Dbg_seg_entry(ofl, segndx, sgp));
3394 			ofl->ofl_phdr[phdrndx] = *phdr;
3395 			ofl->ofl_tlsphdr = &ofl->ofl_phdr[phdrndx++];
3396 			continue;
3397 		}
3398 
3399 		/*
3400 		 * If this is an empty segment declaration, it will occur after
3401 		 * all other loadable segments.  As empty segments can be
3402 		 * defind with fixed addresses, make sure that no loadable
3403 		 * segments overlap.  This might occur as the object evolves
3404 		 * and the loadable segments grow, thus encroaching upon an
3405 		 * existing segment reservation.
3406 		 *
3407 		 * Segments are only created for dynamic objects, thus this
3408 		 * checking can be skipped when building a relocatable object.
3409 		 */
3410 		if (!(flags & FLG_OF_RELOBJ) &&
3411 		    (sgp->sg_flags & FLG_SG_EMPTY)) {
3412 			int	i;
3413 			Addr	v_e;
3414 
3415 			vaddr = phdr->p_vaddr;
3416 			phdr->p_memsz = sgp->sg_length;
3417 			DBG_CALL(Dbg_seg_entry(ofl, segndx, sgp));
3418 			ofl->ofl_phdr[phdrndx++] = *phdr;
3419 
3420 			if (phdr->p_type != PT_LOAD)
3421 				continue;
3422 
3423 			v_e = vaddr + phdr->p_memsz;
3424 
3425 			/*
3426 			 * Check overlaps
3427 			 */
3428 			for (i = 0; i < phdrndx - 1; i++) {
3429 				Addr 	p_s = (ofl->ofl_phdr[i]).p_vaddr;
3430 				Addr 	p_e;
3431 
3432 				if ((ofl->ofl_phdr[i]).p_type != PT_LOAD)
3433 					continue;
3434 
3435 				p_e = p_s + (ofl->ofl_phdr[i]).p_memsz;
3436 				if (((p_s <= vaddr) && (p_e > vaddr)) ||
3437 				    ((vaddr <= p_s) && (v_e > p_s)))
3438 					eprintf(ofl->ofl_lml, ERR_WARNING,
3439 					    MSG_INTL(MSG_UPD_SEGOVERLAP),
3440 					    ofl->ofl_name, EC_ADDR(p_e),
3441 					    sgp->sg_name, EC_ADDR(vaddr));
3442 			}
3443 			continue;
3444 		}
3445 
3446 		/*
3447 		 * Having processed any of the special program headers any
3448 		 * remaining headers will be built to express individual
3449 		 * segments.  Segments are only built if they have output
3450 		 * section descriptors associated with them (ie. some form of
3451 		 * input section has been matched to this segment).
3452 		 */
3453 		if (sgp->sg_osdescs == NULL)
3454 			continue;
3455 
3456 		/*
3457 		 * Determine the segments offset and size from the section
3458 		 * information provided from elf_update().
3459 		 * Allow for multiple NOBITS sections.
3460 		 */
3461 		osp = sgp->sg_osdescs->apl_data[0];
3462 		hshdr = osp->os_shdr;
3463 
3464 		phdr->p_filesz = 0;
3465 		phdr->p_memsz = 0;
3466 		phdr->p_offset = offset = hshdr->sh_offset;
3467 
3468 		nobits = ((hshdr->sh_type == SHT_NOBITS) &&
3469 		    ((sgp->sg_flags & FLG_SG_PHREQ) == 0));
3470 
3471 		for (APLIST_TRAVERSE(sgp->sg_osdescs, idx2, osp)) {
3472 			Shdr	*shdr = osp->os_shdr;
3473 
3474 			p_align = 0;
3475 			if (shdr->sh_addralign > p_align)
3476 				p_align = shdr->sh_addralign;
3477 
3478 			offset = (Off)S_ROUND(offset, shdr->sh_addralign);
3479 			offset += shdr->sh_size;
3480 
3481 			if (shdr->sh_type != SHT_NOBITS) {
3482 				if (nobits) {
3483 					eprintf(ofl->ofl_lml, ERR_FATAL,
3484 					    MSG_INTL(MSG_UPD_NOBITS));
3485 					return (S_ERROR);
3486 				}
3487 				phdr->p_filesz = offset - phdr->p_offset;
3488 			} else if ((sgp->sg_flags & FLG_SG_PHREQ) == 0)
3489 				nobits = TRUE;
3490 		}
3491 		phdr->p_memsz = offset - hshdr->sh_offset;
3492 
3493 		/*
3494 		 * If this is the first loadable segment of a dynamic object,
3495 		 * or an interpreter has been specified (a static object built
3496 		 * with an interpreter will still be given a PT_HDR entry), then
3497 		 * compensate for the elf header and program header array.  Both
3498 		 * of these are actually part of the loadable segment as they
3499 		 * may be inspected by the interpreter.  Adjust the segments
3500 		 * size and offset accordingly.
3501 		 */
3502 		if ((_phdr == NULL) && (phdr->p_type == PT_LOAD) &&
3503 		    ((ofl->ofl_osinterp) || (flags & FLG_OF_DYNAMIC)) &&
3504 		    (!(ofl->ofl_dtflags_1 & DF_1_NOHDR))) {
3505 			size = (Addr)S_ROUND((phdrsz + ehdrsz),
3506 			    hshdr->sh_addralign);
3507 			phdr->p_offset -= size;
3508 			phdr->p_filesz += size;
3509 			phdr->p_memsz += size;
3510 		}
3511 
3512 		/*
3513 		 * If a segment size symbol is required (specified via a
3514 		 * mapfile) update its value.
3515 		 */
3516 		if (sgp->sg_sizesym != NULL)
3517 			sgp->sg_sizesym->sd_sym->st_value = phdr->p_memsz;
3518 
3519 		/*
3520 		 * If no file content has been assigned to this segment (it
3521 		 * only contains no-bits sections), then reset the offset for
3522 		 * consistency.
3523 		 */
3524 		if (phdr->p_filesz == 0)
3525 			phdr->p_offset = 0;
3526 
3527 		/*
3528 		 * If a virtual address has been specified for this segment
3529 		 * (presumably from a mapfile) use it and make sure the
3530 		 * previous segment does not run into this segment.
3531 		 */
3532 		if (phdr->p_type == PT_LOAD) {
3533 			if ((sgp->sg_flags & FLG_SG_VADDR)) {
3534 				if (_phdr && (vaddr > phdr->p_vaddr) &&
3535 				    (phdr->p_type == PT_LOAD))
3536 					eprintf(ofl->ofl_lml, ERR_WARNING,
3537 					    MSG_INTL(MSG_UPD_SEGOVERLAP),
3538 					    ofl->ofl_name, EC_ADDR(vaddr),
3539 					    sgp->sg_name,
3540 					    EC_ADDR(phdr->p_vaddr));
3541 				vaddr = phdr->p_vaddr;
3542 				phdr->p_align = 0;
3543 			} else {
3544 				vaddr = phdr->p_vaddr =
3545 				    (Addr)S_ROUND(vaddr, phdr->p_align);
3546 			}
3547 		}
3548 
3549 		/*
3550 		 * Adjust the address offset and p_align if needed.
3551 		 */
3552 		if (((sgp->sg_flags & FLG_SG_VADDR) == 0) &&
3553 		    ((ofl->ofl_dtflags_1 & DF_1_NOHDR) == 0)) {
3554 			if (phdr->p_align != 0)
3555 				vaddr += phdr->p_offset % phdr->p_align;
3556 			else
3557 				vaddr += phdr->p_offset;
3558 			phdr->p_vaddr = vaddr;
3559 		}
3560 
3561 		/*
3562 		 * If an interpreter is required set the virtual address of the
3563 		 * PT_PHDR program header now that we know the virtual address
3564 		 * of the loadable segment that contains it.  Update the
3565 		 * PT_SUNWCAP header similarly.
3566 		 */
3567 		if ((_phdr == NULL) && (phdr->p_type == PT_LOAD)) {
3568 			_phdr = phdr;
3569 
3570 			if ((ofl->ofl_dtflags_1 & DF_1_NOHDR) == 0) {
3571 				if (ofl->ofl_osinterp)
3572 					ofl->ofl_phdr[0].p_vaddr =
3573 					    vaddr + ehdrsz;
3574 
3575 				/*
3576 				 * Finally, if we're creating a dynamic object
3577 				 * (or a static object in which an interpreter
3578 				 * is specified) update the vaddr to reflect
3579 				 * the address of the first section within this
3580 				 * segment.
3581 				 */
3582 				if ((ofl->ofl_osinterp) ||
3583 				    (flags & FLG_OF_DYNAMIC))
3584 					vaddr += size;
3585 			} else {
3586 				/*
3587 				 * If the DF_1_NOHDR flag was set, and an
3588 				 * interpreter is being generated, the PT_PHDR
3589 				 * will not be part of any loadable segment.
3590 				 */
3591 				if (ofl->ofl_osinterp) {
3592 					ofl->ofl_phdr[0].p_vaddr = 0;
3593 					ofl->ofl_phdr[0].p_memsz = 0;
3594 					ofl->ofl_phdr[0].p_flags = 0;
3595 				}
3596 			}
3597 		}
3598 
3599 		/*
3600 		 * Ensure the ELF entry point defaults to zero.  Typically, this
3601 		 * value is overridden in update_oehdr() to one of the standard
3602 		 * entry points.  Historically, this default was set to the
3603 		 * address of first executable section, but this has since been
3604 		 * found to be more confusing than it is helpful.
3605 		 */
3606 		ehdr->e_entry = 0;
3607 
3608 		DBG_CALL(Dbg_seg_entry(ofl, segndx, sgp));
3609 
3610 		/*
3611 		 * Traverse the output section descriptors for this segment so
3612 		 * that we can update the section headers addresses.  We've
3613 		 * calculated the virtual address of the initial section within
3614 		 * this segment, so each successive section can be calculated
3615 		 * based on their offsets from each other.
3616 		 */
3617 		secndx = 0;
3618 		hshdr = 0;
3619 		for (APLIST_TRAVERSE(sgp->sg_osdescs, idx2, osp)) {
3620 			Shdr	*shdr = osp->os_shdr;
3621 
3622 			if (shdr->sh_link)
3623 				shdr->sh_link = translate_link(ofl, osp,
3624 				    shdr->sh_link, MSG_INTL(MSG_FIL_INVSHLINK));
3625 
3626 			if (shdr->sh_info && (shdr->sh_flags & SHF_INFO_LINK))
3627 				shdr->sh_info = translate_link(ofl, osp,
3628 				    shdr->sh_info, MSG_INTL(MSG_FIL_INVSHINFO));
3629 
3630 			if (!(flags & FLG_OF_RELOBJ) &&
3631 			    (phdr->p_type == PT_LOAD)) {
3632 				if (hshdr)
3633 					vaddr += (shdr->sh_offset -
3634 					    hshdr->sh_offset);
3635 
3636 				shdr->sh_addr = vaddr;
3637 				hshdr = shdr;
3638 			}
3639 
3640 			DBG_CALL(Dbg_seg_os(ofl, osp, secndx));
3641 			secndx++;
3642 		}
3643 
3644 		/*
3645 		 * Establish the virtual address of the end of the last section
3646 		 * in this segment so that the next segments offset can be
3647 		 * calculated from this.
3648 		 */
3649 		if (hshdr)
3650 			vaddr += hshdr->sh_size;
3651 
3652 		/*
3653 		 * Output sections for this segment complete.  Adjust the
3654 		 * virtual offset for the last sections size, and make sure we
3655 		 * haven't exceeded any maximum segment length specification.
3656 		 */
3657 		if ((sgp->sg_length != 0) && (sgp->sg_length < phdr->p_memsz)) {
3658 			eprintf(ofl->ofl_lml, ERR_FATAL,
3659 			    MSG_INTL(MSG_UPD_LARGSIZE), ofl->ofl_name,
3660 			    sgp->sg_name, EC_XWORD(phdr->p_memsz),
3661 			    EC_XWORD(sgp->sg_length));
3662 			return (S_ERROR);
3663 		}
3664 
3665 		if (phdr->p_type == PT_NOTE) {
3666 			phdr->p_vaddr = 0;
3667 			phdr->p_paddr = 0;
3668 			phdr->p_align = 0;
3669 			phdr->p_memsz = 0;
3670 		}
3671 
3672 		if ((phdr->p_type != PT_NULL) && !(flags & FLG_OF_RELOBJ))
3673 			ofl->ofl_phdr[phdrndx++] = *phdr;
3674 	}
3675 
3676 	/*
3677 	 * Update any new output sections.  When building the initial output
3678 	 * image, a number of sections were created but left uninitialized (eg.
3679 	 * .dynsym, .dynstr, .symtab, .symtab, etc.).  Here we update these
3680 	 * sections with the appropriate data.  Other sections may still be
3681 	 * modified via reloc_process().
3682 	 *
3683 	 * Copy the interpreter name into the .interp section.
3684 	 */
3685 	if (ofl->ofl_interp)
3686 		(void) strcpy((char *)ofl->ofl_osinterp->os_outdata->d_buf,
3687 		    ofl->ofl_interp);
3688 
3689 	/*
3690 	 * Update the .shstrtab, .strtab and .dynstr sections.
3691 	 */
3692 	update_ostrtab(ofl->ofl_osshstrtab, ofl->ofl_shdrsttab, 0);
3693 	update_ostrtab(ofl->ofl_osstrtab, ofl->ofl_strtab, 0);
3694 	update_ostrtab(ofl->ofl_osdynstr, ofl->ofl_dynstrtab, DYNSTR_EXTRA_PAD);
3695 
3696 	/*
3697 	 * Build any output symbol tables, the symbols information is copied
3698 	 * and updated into the new output image.
3699 	 */
3700 	if ((etext = update_osym(ofl)) == (Addr)S_ERROR)
3701 		return (S_ERROR);
3702 
3703 	/*
3704 	 * If we have an PT_INTERP phdr, update it now from the associated
3705 	 * section information.
3706 	 */
3707 	if (intpsgp) {
3708 		Phdr	*phdr = &(intpsgp->sg_phdr);
3709 		Shdr	*shdr = ofl->ofl_osinterp->os_shdr;
3710 
3711 		phdr->p_vaddr = shdr->sh_addr;
3712 		phdr->p_offset = shdr->sh_offset;
3713 		phdr->p_memsz = phdr->p_filesz = shdr->sh_size;
3714 		phdr->p_flags = PF_R;
3715 
3716 		DBG_CALL(Dbg_seg_entry(ofl, intpsndx, intpsgp));
3717 		ofl->ofl_phdr[intppndx] = *phdr;
3718 	}
3719 
3720 	/*
3721 	 * If we have a PT_SUNWDTRACE phdr, update it now with the address of
3722 	 * the symbol.  It's only now been updated via update_sym().
3723 	 */
3724 	if (dtracesgp && ofl->ofl_dtracesym) {
3725 		Phdr		*aphdr, *phdr = &(dtracesgp->sg_phdr);
3726 		Sym_desc	*sdp = ofl->ofl_dtracesym;
3727 
3728 		phdr->p_vaddr = sdp->sd_sym->st_value;
3729 		phdr->p_memsz = sdp->sd_sym->st_size;
3730 
3731 		/*
3732 		 * Take permisions of the segment the symbol is associated with.
3733 		 */
3734 		aphdr = &sdp->sd_isc->is_osdesc->os_sgdesc->sg_phdr;
3735 		assert(aphdr);
3736 		phdr->p_flags = aphdr->p_flags;
3737 
3738 		DBG_CALL(Dbg_seg_entry(ofl, dtracesndx, dtracesgp));
3739 		ofl->ofl_phdr[dtracepndx] = *phdr;
3740 	}
3741 
3742 	/*
3743 	 * If we have a PT_SUNWCAP phdr, update it now from the associated
3744 	 * section information.
3745 	 */
3746 	if (capsgp && ofl->ofl_oscap) {
3747 		Phdr	*phdr = &(capsgp->sg_phdr);
3748 		Shdr	*shdr = ofl->ofl_oscap->os_shdr;
3749 
3750 		phdr->p_vaddr = shdr->sh_addr;
3751 		phdr->p_offset = shdr->sh_offset;
3752 		phdr->p_memsz = phdr->p_filesz = shdr->sh_size;
3753 		phdr->p_flags = PF_R;
3754 
3755 		DBG_CALL(Dbg_seg_entry(ofl, capsndx, capsgp));
3756 		ofl->ofl_phdr[cappndx] = *phdr;
3757 	}
3758 
3759 	/*
3760 	 * Update the GROUP sections.
3761 	 */
3762 	if (update_ogroup(ofl) == S_ERROR)
3763 		return (S_ERROR);
3764 
3765 	/*
3766 	 * Update Move Table.
3767 	 */
3768 	if (ofl->ofl_osmove || ofl->ofl_isparexpn)
3769 		update_move(ofl);
3770 
3771 	/*
3772 	 * Build any output headers, version information, dynamic structure and
3773 	 * syminfo structure.
3774 	 */
3775 	if (update_oehdr(ofl) == S_ERROR)
3776 		return (S_ERROR);
3777 	if (!(flags & FLG_OF_NOVERSEC)) {
3778 		if ((flags & FLG_OF_VERDEF) &&
3779 		    (update_overdef(ofl) == S_ERROR))
3780 			return (S_ERROR);
3781 		if ((flags & FLG_OF_VERNEED) &&
3782 		    (update_overneed(ofl) == S_ERROR))
3783 			return (S_ERROR);
3784 		if ((flags & (FLG_OF_VERNEED | FLG_OF_VERDEF)) &&
3785 		    (update_oversym(ofl) == S_ERROR))
3786 			return (S_ERROR);
3787 	}
3788 	if (flags & FLG_OF_DYNAMIC) {
3789 		if (update_odynamic(ofl) == S_ERROR)
3790 			return (S_ERROR);
3791 		if (ofl->ofl_ossyminfo)
3792 			if (update_osyminfo(ofl) == S_ERROR)
3793 				return (S_ERROR);
3794 	}
3795 
3796 	/*
3797 	 * Sanity test: First and last data byte of a string table
3798 	 * must be NULL.
3799 	 */
3800 	assert((ofl->ofl_osshstrtab == NULL) ||
3801 	    (*((char *)ofl->ofl_osshstrtab->os_outdata->d_buf) == '\0'));
3802 	assert((ofl->ofl_osshstrtab == NULL) ||
3803 	    (*(((char *)ofl->ofl_osshstrtab->os_outdata->d_buf) +
3804 	    ofl->ofl_osshstrtab->os_outdata->d_size - 1) == '\0'));
3805 
3806 	assert((ofl->ofl_osstrtab == NULL) ||
3807 	    (*((char *)ofl->ofl_osstrtab->os_outdata->d_buf) == '\0'));
3808 	assert((ofl->ofl_osstrtab == NULL) ||
3809 	    (*(((char *)ofl->ofl_osstrtab->os_outdata->d_buf) +
3810 	    ofl->ofl_osstrtab->os_outdata->d_size - 1) == '\0'));
3811 
3812 	assert((ofl->ofl_osdynstr == NULL) ||
3813 	    (*((char *)ofl->ofl_osdynstr->os_outdata->d_buf) == '\0'));
3814 	assert((ofl->ofl_osdynstr == NULL) ||
3815 	    (*(((char *)ofl->ofl_osdynstr->os_outdata->d_buf) +
3816 	    ofl->ofl_osdynstr->os_outdata->d_size - DYNSTR_EXTRA_PAD - 1) ==
3817 	    '\0'));
3818 
3819 	/*
3820 	 * Emit Strtab diagnostics.
3821 	 */
3822 	DBG_CALL(Dbg_sec_strtab(ofl->ofl_lml, ofl->ofl_osshstrtab,
3823 	    ofl->ofl_shdrsttab));
3824 	DBG_CALL(Dbg_sec_strtab(ofl->ofl_lml, ofl->ofl_osstrtab,
3825 	    ofl->ofl_strtab));
3826 	DBG_CALL(Dbg_sec_strtab(ofl->ofl_lml, ofl->ofl_osdynstr,
3827 	    ofl->ofl_dynstrtab));
3828 
3829 	/*
3830 	 * Initialize the section headers string table index within the elf
3831 	 * header.
3832 	 */
3833 	/* LINTED */
3834 	if ((shscnndx = elf_ndxscn(ofl->ofl_osshstrtab->os_scn)) <
3835 	    SHN_LORESERVE) {
3836 		ofl->ofl_nehdr->e_shstrndx =
3837 		    /* LINTED */
3838 		    (Half)shscnndx;
3839 	} else {
3840 		/*
3841 		 * If the STRTAB section index doesn't fit into
3842 		 * e_shstrndx, then we store it in 'shdr[0].st_link'.
3843 		 */
3844 		Elf_Scn	*scn;
3845 		Shdr	*shdr0;
3846 
3847 		if ((scn = elf_getscn(ofl->ofl_elf, 0)) == NULL) {
3848 			eprintf(ofl->ofl_lml, ERR_ELF,
3849 			    MSG_INTL(MSG_ELF_GETSCN), ofl->ofl_name);
3850 			return (S_ERROR);
3851 		}
3852 		if ((shdr0 = elf_getshdr(scn)) == NULL) {
3853 			eprintf(ofl->ofl_lml, ERR_ELF,
3854 			    MSG_INTL(MSG_ELF_GETSHDR), ofl->ofl_name);
3855 			return (S_ERROR);
3856 		}
3857 		ofl->ofl_nehdr->e_shstrndx = SHN_XINDEX;
3858 		shdr0->sh_link = shscnndx;
3859 	}
3860 
3861 	return ((uintptr_t)etext);
3862 }
3863