1 | /* Copyright (C) 1999-2022 Free Software Foundation, Inc. |
2 | This file is part of the GNU C Library. |
3 | |
4 | The GNU C Library is free software; you can redistribute it and/or |
5 | modify it under the terms of the GNU Lesser General Public |
6 | License as published by the Free Software Foundation; either |
7 | version 2.1 of the License, or (at your option) any later version. |
8 | |
9 | The GNU C Library is distributed in the hope that it will be useful, |
10 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
11 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
12 | Lesser General Public License for more details. |
13 | |
14 | You should have received a copy of the GNU Lesser General Public |
15 | License along with the GNU C Library; if not, see |
16 | <https://www.gnu.org/licenses/>. */ |
17 | |
18 | #include <elf-read-prop.h> |
19 | |
20 | /* This code is a heavily simplified version of the readelf program |
21 | that's part of the current binutils development version. For architectures |
22 | which need to handle both 32bit and 64bit ELF libraries, this file is |
23 | included twice for each arch size. */ |
24 | |
25 | /* check_ptr checks that a pointer is in the mmaped file and doesn't |
26 | point outside it. */ |
27 | #undef check_ptr |
28 | #define check_ptr(ptr) \ |
29 | do \ |
30 | { \ |
31 | if ((void *)(ptr) < file_contents \ |
32 | || (void *)(ptr) > (file_contents+file_length)) \ |
33 | { \ |
34 | error (0, 0, _("file %s is truncated\n"), file_name); \ |
35 | return 1; \ |
36 | } \ |
37 | } \ |
38 | while (0); |
39 | |
40 | /* Returns 0 if everything is ok, != 0 in case of error. */ |
41 | int |
42 | process_elf_file (const char *file_name, const char *lib, int *flag, |
43 | unsigned int *osversion, unsigned int *isa_level, |
44 | char **soname, void *file_contents, size_t file_length) |
45 | { |
46 | int i; |
47 | unsigned int j; |
48 | unsigned int dynamic_addr; |
49 | size_t dynamic_size; |
50 | char *program_interpreter; |
51 | |
52 | ElfW(Ehdr) *; |
53 | ElfW(Phdr) *, *segment; |
54 | ElfW(Dyn) *dynamic_segment, *dyn_entry; |
55 | char *dynamic_strings; |
56 | |
57 | elf_header = (ElfW(Ehdr) *) file_contents; |
58 | *osversion = 0; |
59 | |
60 | if (elf_header->e_ident [EI_CLASS] != ElfW (CLASS)) |
61 | { |
62 | if (opt_verbose) |
63 | { |
64 | if (elf_header->e_ident [EI_CLASS] == ELFCLASS32) |
65 | error (0, 0, _("%s is a 32 bit ELF file.\n" ), file_name); |
66 | else if (elf_header->e_ident [EI_CLASS] == ELFCLASS64) |
67 | error (0, 0, _("%s is a 64 bit ELF file.\n" ), file_name); |
68 | else |
69 | error (0, 0, _("Unknown ELFCLASS in file %s.\n" ), file_name); |
70 | } |
71 | return 1; |
72 | } |
73 | |
74 | if (elf_header->e_type != ET_DYN) |
75 | { |
76 | error (0, 0, _("%s is not a shared object file (Type: %d).\n" ), file_name, |
77 | elf_header->e_type); |
78 | return 1; |
79 | } |
80 | |
81 | /* Get information from elf program header. */ |
82 | elf_pheader = (ElfW(Phdr) *) (elf_header->e_phoff + file_contents); |
83 | check_ptr (elf_pheader); |
84 | |
85 | /* The library is an elf library, now search for soname and |
86 | libc5/libc6. */ |
87 | *flag = FLAG_ELF; |
88 | |
89 | /* The default ISA level is 0. */ |
90 | *isa_level = 0; |
91 | |
92 | dynamic_addr = 0; |
93 | dynamic_size = 0; |
94 | program_interpreter = NULL; |
95 | for (i = 0, segment = elf_pheader; |
96 | i < elf_header->e_phnum; i++, segment++) |
97 | { |
98 | check_ptr (segment); |
99 | |
100 | switch (segment->p_type) |
101 | { |
102 | case PT_DYNAMIC: |
103 | if (dynamic_addr) |
104 | error (0, 0, _("more than one dynamic segment\n" )); |
105 | |
106 | dynamic_addr = segment->p_offset; |
107 | dynamic_size = segment->p_filesz; |
108 | break; |
109 | |
110 | case PT_INTERP: |
111 | program_interpreter = (char *) (file_contents + segment->p_offset); |
112 | check_ptr (program_interpreter); |
113 | |
114 | /* Check if this is enough to classify the binary. */ |
115 | for (j = 0; j < sizeof (interpreters) / sizeof (interpreters [0]); |
116 | ++j) |
117 | if (strcmp (program_interpreter, interpreters[j].soname) == 0) |
118 | { |
119 | *flag = interpreters[j].flag; |
120 | break; |
121 | } |
122 | break; |
123 | |
124 | case PT_NOTE: |
125 | if (!*osversion && segment->p_filesz >= 32 && segment->p_align >= 4) |
126 | { |
127 | ElfW(Word) *abi_note = (ElfW(Word) *) (file_contents |
128 | + segment->p_offset); |
129 | ElfW(Addr) size = segment->p_filesz; |
130 | /* NB: Some PT_NOTE segment may have alignment value of 0 |
131 | or 1. gABI specifies that PT_NOTE segments should be |
132 | aligned to 4 bytes in 32-bit objects and to 8 bytes in |
133 | 64-bit objects. As a Linux extension, we also support |
134 | 4 byte alignment in 64-bit objects. If p_align is less |
135 | than 4, we treate alignment as 4 bytes since some note |
136 | segments have 0 or 1 byte alignment. */ |
137 | ElfW(Addr) align = segment->p_align; |
138 | if (align < 4) |
139 | align = 4; |
140 | else if (align != 4 && align != 8) |
141 | continue; |
142 | |
143 | while (abi_note [0] != 4 || abi_note [1] != 16 |
144 | || abi_note [2] != 1 |
145 | || memcmp (abi_note + 3, "GNU" , 4) != 0) |
146 | { |
147 | ElfW(Addr) note_size |
148 | = ELF_NOTE_NEXT_OFFSET (abi_note[0], abi_note[1], |
149 | align); |
150 | |
151 | if (size - 32 < note_size || note_size == 0) |
152 | { |
153 | size = 0; |
154 | break; |
155 | } |
156 | size -= note_size; |
157 | abi_note = (void *) abi_note + note_size; |
158 | } |
159 | |
160 | if (size == 0) |
161 | break; |
162 | |
163 | *osversion = ((abi_note [4] << 24) |
164 | | ((abi_note [5] & 0xff) << 16) |
165 | | ((abi_note [6] & 0xff) << 8) |
166 | | (abi_note [7] & 0xff)); |
167 | } |
168 | break; |
169 | |
170 | case PT_GNU_PROPERTY: |
171 | /* The NT_GNU_PROPERTY_TYPE_0 note must be aligned to 4 bytes |
172 | in 32-bit objects and to 8 bytes in 64-bit objects. Skip |
173 | notes with incorrect alignment. */ |
174 | if (segment->p_align == (__ELF_NATIVE_CLASS / 8)) |
175 | { |
176 | const ElfW(Nhdr) *note = (const void *) (file_contents |
177 | + segment->p_offset); |
178 | const ElfW(Addr) size = segment->p_filesz; |
179 | const ElfW(Addr) align = segment->p_align; |
180 | |
181 | const ElfW(Addr) start = (ElfW(Addr)) (uintptr_t) note; |
182 | unsigned int last_type = 0; |
183 | |
184 | while ((ElfW(Addr)) (uintptr_t) (note + 1) - start < size) |
185 | { |
186 | /* Find the NT_GNU_PROPERTY_TYPE_0 note. */ |
187 | if (note->n_namesz == 4 |
188 | && note->n_type == NT_GNU_PROPERTY_TYPE_0 |
189 | && memcmp (note + 1, "GNU" , 4) == 0) |
190 | { |
191 | /* Check for invalid property. */ |
192 | if (note->n_descsz < 8 |
193 | || (note->n_descsz % sizeof (ElfW(Addr))) != 0) |
194 | goto done; |
195 | |
196 | /* Start and end of property array. */ |
197 | unsigned char *ptr = (unsigned char *) (note + 1) + 4; |
198 | unsigned char *ptr_end = ptr + note->n_descsz; |
199 | |
200 | do |
201 | { |
202 | unsigned int type = *(unsigned int *) ptr; |
203 | unsigned int datasz = *(unsigned int *) (ptr + 4); |
204 | |
205 | /* Property type must be in ascending order. */ |
206 | if (type < last_type) |
207 | goto done; |
208 | |
209 | ptr += 8; |
210 | if ((ptr + datasz) > ptr_end) |
211 | goto done; |
212 | |
213 | last_type = type; |
214 | |
215 | /* Target specific property processing. |
216 | Return value: |
217 | false: Continue processing the properties. |
218 | true : Stop processing the properties. |
219 | */ |
220 | if (read_gnu_property (isa_level, type, |
221 | datasz, ptr)) |
222 | goto done; |
223 | |
224 | /* Check the next property item. */ |
225 | ptr += ALIGN_UP (datasz, sizeof (ElfW(Addr))); |
226 | } |
227 | while ((ptr_end - ptr) >= 8); |
228 | |
229 | /* Only handle one NT_GNU_PROPERTY_TYPE_0. */ |
230 | goto done; |
231 | } |
232 | |
233 | note = ((const void *) note |
234 | + ELF_NOTE_NEXT_OFFSET (note->n_namesz, |
235 | note->n_descsz, |
236 | align)); |
237 | } |
238 | } |
239 | done: |
240 | break; |
241 | |
242 | default: |
243 | break; |
244 | } |
245 | |
246 | } |
247 | |
248 | /* Now we can read the dynamic sections. */ |
249 | if (dynamic_size == 0) |
250 | return 1; |
251 | |
252 | dynamic_segment = (ElfW(Dyn) *) (file_contents + dynamic_addr); |
253 | check_ptr (dynamic_segment); |
254 | |
255 | /* Find the string table. */ |
256 | dynamic_strings = NULL; |
257 | for (dyn_entry = dynamic_segment; dyn_entry->d_tag != DT_NULL; |
258 | ++dyn_entry) |
259 | { |
260 | check_ptr (dyn_entry); |
261 | if (dyn_entry->d_tag == DT_STRTAB) |
262 | { |
263 | /* Find the file offset of the segment containing the dynamic |
264 | string table. */ |
265 | ElfW(Off) loadoff = -1; |
266 | for (i = 0, segment = elf_pheader; |
267 | i < elf_header->e_phnum; i++, segment++) |
268 | { |
269 | if (segment->p_type == PT_LOAD |
270 | && dyn_entry->d_un.d_val >= segment->p_vaddr |
271 | && (dyn_entry->d_un.d_val - segment->p_vaddr |
272 | < segment->p_filesz)) |
273 | { |
274 | loadoff = segment->p_vaddr - segment->p_offset; |
275 | break; |
276 | } |
277 | } |
278 | if (loadoff == (ElfW(Off)) -1) |
279 | { |
280 | /* Very strange. */ |
281 | loadoff = 0; |
282 | } |
283 | |
284 | dynamic_strings = (char *) (file_contents + dyn_entry->d_un.d_val |
285 | - loadoff); |
286 | check_ptr (dynamic_strings); |
287 | break; |
288 | } |
289 | } |
290 | |
291 | if (dynamic_strings == NULL) |
292 | return 1; |
293 | |
294 | /* Now read the DT_NEEDED and DT_SONAME entries. */ |
295 | for (dyn_entry = dynamic_segment; dyn_entry->d_tag != DT_NULL; |
296 | ++dyn_entry) |
297 | { |
298 | if (dyn_entry->d_tag == DT_NEEDED || dyn_entry->d_tag == DT_SONAME) |
299 | { |
300 | char *name = dynamic_strings + dyn_entry->d_un.d_val; |
301 | check_ptr (name); |
302 | |
303 | if (dyn_entry->d_tag == DT_NEEDED) |
304 | { |
305 | |
306 | if (*flag == FLAG_ELF) |
307 | { |
308 | /* Check if this is enough to classify the binary. */ |
309 | for (j = 0; |
310 | j < sizeof (known_libs) / sizeof (known_libs [0]); |
311 | ++j) |
312 | if (strcmp (name, known_libs [j].soname) == 0) |
313 | { |
314 | *flag = known_libs [j].flag; |
315 | break; |
316 | } |
317 | } |
318 | } |
319 | |
320 | else if (dyn_entry->d_tag == DT_SONAME) |
321 | *soname = xstrdup (name); |
322 | |
323 | /* Do we have everything we need? */ |
324 | if (*soname && *flag != FLAG_ELF) |
325 | return 0; |
326 | } |
327 | } |
328 | |
329 | return 0; |
330 | } |
331 | |