VisionFive2 Linux kernel

StarFive Tech Linux Kernel for VisionFive (JH7110) boards (mirror)

More than 9999 Commits   32 Branches   54 Tags
b24413180f560 (Greg Kroah-Hartman     2017-11-01 15:07:57 +0100    1) // SPDX-License-Identifier: GPL-2.0
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    2) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    3) /*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    4)  *  linux/fs/binfmt_flat.c
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    5)  *
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    6)  *	Copyright (C) 2000-2003 David McCullough <davidm@snapgear.com>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    7)  *	Copyright (C) 2002 Greg Ungerer <gerg@snapgear.com>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    8)  *	Copyright (C) 2002 SnapGear, by Paul Dale <pauli@snapgear.com>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700    9)  *	Copyright (C) 2000, 2001 Lineo, by David McCullough <davidm@lineo.com>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   10)  *  based heavily on:
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   11)  *
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   12)  *  linux/fs/binfmt_aout.c:
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   13)  *      Copyright (C) 1991, 1992, 1996  Linus Torvalds
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   14)  *  linux/fs/binfmt_flat.c for 2.0 kernel
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   15)  *	    Copyright (C) 1998  Kenneth Albanowski <kjahds@kjahds.com>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   16)  *	JAN/99 -- coded full program relocation (gerg@snapgear.com)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   17)  */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   18) 
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400   19) #define pr_fmt(fmt)	KBUILD_MODNAME ": " fmt
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400   20) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   21) #include <linux/kernel.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   22) #include <linux/sched.h>
68db0cf106786 (Ingo Molnar            2017-02-08 18:51:37 +0100   23) #include <linux/sched/task_stack.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   24) #include <linux/mm.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   25) #include <linux/mman.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   26) #include <linux/errno.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   27) #include <linux/signal.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   28) #include <linux/string.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   29) #include <linux/fs.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   30) #include <linux/file.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   31) #include <linux/ptrace.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   32) #include <linux/user.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   33) #include <linux/slab.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   34) #include <linux/binfmts.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   35) #include <linux/personality.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   36) #include <linux/init.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   37) #include <linux/flat.h>
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400   38) #include <linux/uaccess.h>
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400   39) #include <linux/vmalloc.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   40) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   41) #include <asm/byteorder.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   42) #include <asm/unaligned.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   43) #include <asm/cacheflush.h>
c3dc5bec05a2a (Oskar Schirmer         2009-05-28 14:34:31 -0700   44) #include <asm/page.h>
06d2bfedd147d (Christoph Hellwig      2019-06-13 09:08:52 +0200   45) #include <asm/flat.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   46) 
02da283302f7e (Christoph Hellwig      2019-06-13 09:08:49 +0200   47) #ifndef flat_get_relocate_addr
02da283302f7e (Christoph Hellwig      2019-06-13 09:08:49 +0200   48) #define flat_get_relocate_addr(rel)	(rel)
02da283302f7e (Christoph Hellwig      2019-06-13 09:08:49 +0200   49) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   50) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   51) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   52) 
c3dc5bec05a2a (Oskar Schirmer         2009-05-28 14:34:31 -0700   53) /*
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   54)  * User data (data section and bss) needs to be aligned.
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   55)  * We pick 0x20 here because it is the max value elf2flt has always
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   56)  * used in producing FLAT files, and because it seems to be large
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   57)  * enough to make all the gcc alignment related tests happy.
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   58)  */
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   59) #define FLAT_DATA_ALIGN	(0x20)
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   60) 
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   61) /*
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   62)  * User data (stack) also needs to be aligned.
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   63)  * Here we can be a bit looser than the data sections since this
2e94de8acbe52 (Mike Frysinger         2010-06-04 14:14:53 -0700   64)  * needs to only meet arch ABI requirements.
c3dc5bec05a2a (Oskar Schirmer         2009-05-28 14:34:31 -0700   65)  */
2952095c6b2ee (Mike Frysinger         2010-06-29 15:05:21 -0700   66) #define FLAT_STACK_ALIGN	max_t(unsigned long, sizeof(void *), ARCH_SLAB_MINALIGN)
c3dc5bec05a2a (Oskar Schirmer         2009-05-28 14:34:31 -0700   67) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   68) #define RELOC_FAILED 0xff00ff01		/* Relocation incorrect somewhere */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   69) #define UNLOADED_LIB 0x7ff000ff		/* Placeholder for unused library */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   70) 
a445d988b4790 (Christoph Hellwig      2019-06-13 09:09:01 +0200   71) #ifdef CONFIG_BINFMT_SHARED_FLAT
a445d988b4790 (Christoph Hellwig      2019-06-13 09:09:01 +0200   72) #define	MAX_SHARED_LIBS			(4)
a445d988b4790 (Christoph Hellwig      2019-06-13 09:09:01 +0200   73) #else
a445d988b4790 (Christoph Hellwig      2019-06-13 09:09:01 +0200   74) #define	MAX_SHARED_LIBS			(1)
a445d988b4790 (Christoph Hellwig      2019-06-13 09:09:01 +0200   75) #endif
a445d988b4790 (Christoph Hellwig      2019-06-13 09:09:01 +0200   76) 
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900   77) #ifdef CONFIG_BINFMT_FLAT_NO_DATA_START_OFFSET
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900   78) #define DATA_START_OFFSET_WORDS		(0)
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900   79) #else
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900   80) #define DATA_START_OFFSET_WORDS		(MAX_SHARED_LIBS)
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900   81) #endif
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900   82) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   83) struct lib_info {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   84) 	struct {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   85) 		unsigned long start_code;		/* Start of text segment */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   86) 		unsigned long start_data;		/* Start of data segment */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   87) 		unsigned long start_brk;		/* End of data segment */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   88) 		unsigned long text_len;			/* Length of text segment */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   89) 		unsigned long entry;			/* Start address for this module */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   90) 		unsigned long build_date;		/* When this one was compiled */
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400   91) 		bool loaded;				/* Has this library been loaded? */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   92) 	} lib_list[MAX_SHARED_LIBS];
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   93) };
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   94) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   95) #ifdef CONFIG_BINFMT_SHARED_FLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   96) static int load_flat_shared_library(int id, struct lib_info *p);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   97) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700   98) 
71613c3b871c5 (Al Viro                2012-10-20 22:00:48 -0400   99) static int load_flat_binary(struct linux_binprm *);
f6151dfea2149 (Masami Hiramatsu       2009-12-17 15:27:16 -0800  100) static int flat_core_dump(struct coredump_params *cprm);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  101) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  102) static struct linux_binfmt flat_format = {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  103) 	.module		= THIS_MODULE,
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  104) 	.load_binary	= load_flat_binary,
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  105) 	.core_dump	= flat_core_dump,
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  106) 	.min_coredump	= PAGE_SIZE
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  107) };
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  108) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  109) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  110) /*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  111)  * Routine writes a core dump image in the current directory.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  112)  * Currently only a stub-function.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  113)  */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  114) 
f6151dfea2149 (Masami Hiramatsu       2009-12-17 15:27:16 -0800  115) static int flat_core_dump(struct coredump_params *cprm)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  116) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  117) 	pr_warn("Process %s:%d received signr %d and should have core dumped\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  118) 		current->comm, current->pid, cprm->siginfo->si_signo);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  119) 	return 1;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  120) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  121) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  122) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  123) /*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  124)  * create_flat_tables() parses the env- and arg-strings in new user
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  125)  * memory and creates the pointer tables from them, and puts their
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  126)  * addresses on the "stack", recording the new stack pointer value.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  127)  */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  128) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  129) static int create_flat_tables(struct linux_binprm *bprm, unsigned long arg_start)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  130) {
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  131) 	char __user *p;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  132) 	unsigned long __user *sp;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  133) 	long i, len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  134) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  135) 	p = (char __user *)arg_start;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  136) 	sp = (unsigned long __user *)current->mm->start_stack;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  137) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  138) 	sp -= bprm->envc + 1;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  139) 	sp -= bprm->argc + 1;
bdd15a288492f (Christoph Hellwig      2019-06-13 09:08:51 +0200  140) 	if (IS_ENABLED(CONFIG_BINFMT_FLAT_ARGVP_ENVP_ON_STACK))
bdd15a288492f (Christoph Hellwig      2019-06-13 09:08:51 +0200  141) 		sp -= 2; /* argvp + envp */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  142) 	sp -= 1;  /* &argc */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  143) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  144) 	current->mm->start_stack = (unsigned long)sp & -FLAT_STACK_ALIGN;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  145) 	sp = (unsigned long __user *)current->mm->start_stack;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  146) 
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  147) 	if (put_user(bprm->argc, sp++))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  148) 		return -EFAULT;
bdd15a288492f (Christoph Hellwig      2019-06-13 09:08:51 +0200  149) 	if (IS_ENABLED(CONFIG_BINFMT_FLAT_ARGVP_ENVP_ON_STACK)) {
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  150) 		unsigned long argv, envp;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  151) 		argv = (unsigned long)(sp + 2);
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  152) 		envp = (unsigned long)(sp + 2 + bprm->argc + 1);
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  153) 		if (put_user(argv, sp++) || put_user(envp, sp++))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  154) 			return -EFAULT;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  155) 	}
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  156) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  157) 	current->mm->arg_start = (unsigned long)p;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  158) 	for (i = bprm->argc; i > 0; i--) {
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  159) 		if (put_user((unsigned long)p, sp++))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  160) 			return -EFAULT;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  161) 		len = strnlen_user(p, MAX_ARG_STRLEN);
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  162) 		if (!len || len > MAX_ARG_STRLEN)
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  163) 			return -EINVAL;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  164) 		p += len;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  165) 	}
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  166) 	if (put_user(0, sp++))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  167) 		return -EFAULT;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  168) 	current->mm->arg_end = (unsigned long)p;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  169) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  170) 	current->mm->env_start = (unsigned long) p;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  171) 	for (i = bprm->envc; i > 0; i--) {
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  172) 		if (put_user((unsigned long)p, sp++))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  173) 			return -EFAULT;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  174) 		len = strnlen_user(p, MAX_ARG_STRLEN);
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  175) 		if (!len || len > MAX_ARG_STRLEN)
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  176) 			return -EINVAL;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  177) 		p += len;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  178) 	}
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  179) 	if (put_user(0, sp++))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500  180) 		return -EFAULT;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  181) 	current->mm->env_end = (unsigned long)p;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  182) 
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  183) 	return 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  184) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  185) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  186) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  187) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  188) #ifdef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  189) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  190) #include <linux/zlib.h>
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  191) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  192) #define LBUFSIZE	4000
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  193) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  194) /* gzip flag byte */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  195) #define ASCII_FLAG   0x01 /* bit 0 set: file probably ASCII text */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  196) #define CONTINUATION 0x02 /* bit 1 set: continuation of multi-part gzip file */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  197) #define EXTRA_FIELD  0x04 /* bit 2 set: extra field present */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  198) #define ORIG_NAME    0x08 /* bit 3 set: original file name present */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  199) #define COMMENT      0x10 /* bit 4 set: file comment present */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  200) #define ENCRYPTED    0x20 /* bit 5 set: file is encrypted */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  201) #define RESERVED     0xC0 /* bit 6,7:   reserved */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  202) 
bdd1d2d3d251c (Christoph Hellwig      2017-09-01 17:39:13 +0200  203) static int decompress_exec(struct linux_binprm *bprm, loff_t fpos, char *dst,
bdd1d2d3d251c (Christoph Hellwig      2017-09-01 17:39:13 +0200  204) 		long len, int fd)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  205) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  206) 	unsigned char *buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  207) 	z_stream strm;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  208) 	int ret, retval;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  209) 
bdd1d2d3d251c (Christoph Hellwig      2017-09-01 17:39:13 +0200  210) 	pr_debug("decompress_exec(offset=%llx,buf=%p,len=%lx)\n", fpos, dst, len);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  211) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  212) 	memset(&strm, 0, sizeof(strm));
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  213) 	strm.workspace = kmalloc(zlib_inflate_workspacesize(), GFP_KERNEL);
9367bb730e4d9 (Markus Elfring         2017-09-08 16:16:14 -0700  214) 	if (!strm.workspace)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  215) 		return -ENOMEM;
9367bb730e4d9 (Markus Elfring         2017-09-08 16:16:14 -0700  216) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  217) 	buf = kmalloc(LBUFSIZE, GFP_KERNEL);
9367bb730e4d9 (Markus Elfring         2017-09-08 16:16:14 -0700  218) 	if (!buf) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  219) 		retval = -ENOMEM;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  220) 		goto out_free;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  221) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  222) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  223) 	/* Read in first chunk of data and parse gzip header. */
bdd1d2d3d251c (Christoph Hellwig      2017-09-01 17:39:13 +0200  224) 	ret = kernel_read(bprm->file, buf, LBUFSIZE, &fpos);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  225) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  226) 	strm.next_in = buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  227) 	strm.avail_in = ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  228) 	strm.total_in = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  229) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  230) 	retval = -ENOEXEC;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  231) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  232) 	/* Check minimum size -- gzip header */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  233) 	if (ret < 10) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  234) 		pr_debug("file too small?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  235) 		goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  236) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  237) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  238) 	/* Check gzip magic number */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  239) 	if ((buf[0] != 037) || ((buf[1] != 0213) && (buf[1] != 0236))) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  240) 		pr_debug("unknown compression magic?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  241) 		goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  242) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  243) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  244) 	/* Check gzip method */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  245) 	if (buf[2] != 8) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  246) 		pr_debug("unknown compression method?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  247) 		goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  248) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  249) 	/* Check gzip flags */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  250) 	if ((buf[3] & ENCRYPTED) || (buf[3] & CONTINUATION) ||
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  251) 	    (buf[3] & RESERVED)) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  252) 		pr_debug("unknown flags?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  253) 		goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  254) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  255) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  256) 	ret = 10;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  257) 	if (buf[3] & EXTRA_FIELD) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  258) 		ret += 2 + buf[10] + (buf[11] << 8);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  259) 		if (unlikely(ret >= LBUFSIZE)) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  260) 			pr_debug("buffer overflow (EXTRA)?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  261) 			goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  262) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  263) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  264) 	if (buf[3] & ORIG_NAME) {
f4cfb18d7917e (Volodymyr G. Lukiianyk 2008-10-15 22:01:15 -0700  265) 		while (ret < LBUFSIZE && buf[ret++] != 0)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  266) 			;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  267) 		if (unlikely(ret == LBUFSIZE)) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  268) 			pr_debug("buffer overflow (ORIG_NAME)?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  269) 			goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  270) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  271) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  272) 	if (buf[3] & COMMENT) {
f4cfb18d7917e (Volodymyr G. Lukiianyk 2008-10-15 22:01:15 -0700  273) 		while (ret < LBUFSIZE && buf[ret++] != 0)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  274) 			;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  275) 		if (unlikely(ret == LBUFSIZE)) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  276) 			pr_debug("buffer overflow (COMMENT)?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  277) 			goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  278) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  279) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  280) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  281) 	strm.next_in += ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  282) 	strm.avail_in -= ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  283) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  284) 	strm.next_out = dst;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  285) 	strm.avail_out = len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  286) 	strm.total_out = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  287) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  288) 	if (zlib_inflateInit2(&strm, -MAX_WBITS) != Z_OK) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  289) 		pr_debug("zlib init failed?\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  290) 		goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  291) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  292) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  293) 	while ((ret = zlib_inflate(&strm, Z_NO_FLUSH)) == Z_OK) {
bdd1d2d3d251c (Christoph Hellwig      2017-09-01 17:39:13 +0200  294) 		ret = kernel_read(bprm->file, buf, LBUFSIZE, &fpos);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  295) 		if (ret <= 0)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  296) 			break;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  297) 		len -= ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  298) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  299) 		strm.next_in = buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  300) 		strm.avail_in = ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  301) 		strm.total_in = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  302) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  303) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  304) 	if (ret < 0) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  305) 		pr_debug("decompression failed (%d), %s\n",
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  306) 			ret, strm.msg);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  307) 		goto out_zlib;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  308) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  309) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  310) 	retval = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  311) out_zlib:
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  312) 	zlib_inflateEnd(&strm);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  313) out_free_buf:
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  314) 	kfree(buf);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  315) out_free:
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  316) 	kfree(strm.workspace);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  317) 	return retval;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  318) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  319) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  320) #endif /* CONFIG_BINFMT_ZFLAT */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  321) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  322) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  323) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  324) static unsigned long
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  325) calc_reloc(unsigned long r, struct lib_info *p, int curid, int internalp)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  326) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  327) 	unsigned long addr;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  328) 	int id;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  329) 	unsigned long start_brk;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  330) 	unsigned long start_data;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  331) 	unsigned long text_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  332) 	unsigned long start_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  333) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  334) #ifdef CONFIG_BINFMT_SHARED_FLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  335) 	if (r == 0)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  336) 		id = curid;	/* Relocs of 0 are always self referring */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  337) 	else {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  338) 		id = (r >> 24) & 0xff;	/* Find ID for this reloc */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  339) 		r &= 0x00ffffff;	/* Trim ID off here */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  340) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  341) 	if (id >= MAX_SHARED_LIBS) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  342) 		pr_err("reference 0x%lx to shared library %d", r, id);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  343) 		goto failed;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  344) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  345) 	if (curid != id) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  346) 		if (internalp) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  347) 			pr_err("reloc address 0x%lx not in same module "
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  348) 			       "(%d != %d)", r, curid, id);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  349) 			goto failed;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  350) 		} else if (!p->lib_list[id].loaded &&
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  351) 			   load_flat_shared_library(id, p) < 0) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  352) 			pr_err("failed to load library %d", id);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  353) 			goto failed;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  354) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  355) 		/* Check versioning information (i.e. time stamps) */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  356) 		if (p->lib_list[id].build_date && p->lib_list[curid].build_date &&
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  357) 				p->lib_list[curid].build_date < p->lib_list[id].build_date) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  358) 			pr_err("library %d is younger than %d", id, curid);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  359) 			goto failed;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  360) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  361) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  362) #else
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  363) 	id = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  364) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  365) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  366) 	start_brk = p->lib_list[id].start_brk;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  367) 	start_data = p->lib_list[id].start_data;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  368) 	start_code = p->lib_list[id].start_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  369) 	text_len = p->lib_list[id].text_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  370) 
9ee24b2a38358 (Christoph Hellwig      2019-06-13 09:08:47 +0200  371) 	if (r > start_brk - start_data + text_len) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  372) 		pr_err("reloc outside program 0x%lx (0 - 0x%lx/0x%lx)",
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  373) 		       r, start_brk-start_data+text_len, text_len);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  374) 		goto failed;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  375) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  376) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  377) 	if (r < text_len)			/* In text segment */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  378) 		addr = r + start_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  379) 	else					/* In data segment */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  380) 		addr = r - text_len + start_data;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  381) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  382) 	/* Range checked already above so doing the range tests is redundant...*/
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  383) 	return addr;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  384) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  385) failed:
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  386) 	pr_cont(", killing %s!\n", current->comm);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  387) 	send_sig(SIGSEGV, current, 0);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  388) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  389) 	return RELOC_FAILED;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  390) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  391) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  392) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  393) 
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  394) #ifdef CONFIG_BINFMT_FLAT_OLD
343034357202b (Axel Lin               2014-06-04 16:12:15 -0700  395) static void old_reloc(unsigned long rl)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  396) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  397) 	static const char *segment[] = { "TEXT", "DATA", "BSS", "*UNKNOWN*" };
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  398) 	flat_v2_reloc_t	r;
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  399) 	unsigned long __user *ptr;
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  400) 	unsigned long val;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  401) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  402) 	r.value = rl;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  403) #if defined(CONFIG_COLDFIRE)
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  404) 	ptr = (unsigned long __user *)(current->mm->start_code + r.reloc.offset);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  405) #else
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  406) 	ptr = (unsigned long __user *)(current->mm->start_data + r.reloc.offset);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  407) #endif
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  408) 	get_user(val, ptr);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  409) 
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  410) 	pr_debug("Relocation of variable at DATASEG+%x "
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  411) 		 "(address %p, currently %lx) into segment %s\n",
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  412) 		 r.reloc.offset, ptr, val, segment[r.reloc.type]);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  413) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  414) 	switch (r.reloc.type) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  415) 	case OLD_FLAT_RELOC_TYPE_TEXT:
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  416) 		val += current->mm->start_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  417) 		break;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  418) 	case OLD_FLAT_RELOC_TYPE_DATA:
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  419) 		val += current->mm->start_data;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  420) 		break;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  421) 	case OLD_FLAT_RELOC_TYPE_BSS:
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  422) 		val += current->mm->end_data;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  423) 		break;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  424) 	default:
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  425) 		pr_err("Unknown relocation type=%x\n", r.reloc.type);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  426) 		break;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  427) 	}
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  428) 	put_user(val, ptr);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  429) 
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  430) 	pr_debug("Relocation became %lx\n", val);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  431) }
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  432) #endif /* CONFIG_BINFMT_FLAT_OLD */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  433) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  434) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  435) 
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  436) static int load_flat_file(struct linux_binprm *bprm,
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  437) 		struct lib_info *libinfo, int id, unsigned long *extra_stack)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  438) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  439) 	struct flat_hdr *hdr;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  440) 	unsigned long textpos, datapos, realdatastart;
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  441) 	u32 text_len, data_len, bss_len, stack_len, full_data, flags;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  442) 	unsigned long len, memp, memp_size, extra, rlim;
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  443) 	__be32 __user *reloc;
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  444) 	u32 __user *rp;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  445) 	int i, rev, relocs;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  446) 	loff_t fpos;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  447) 	unsigned long start_code, end_code;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  448) 	ssize_t result;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  449) 	int ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  450) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  451) 	hdr = ((struct flat_hdr *) bprm->buf);		/* exec-header */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  452) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  453) 	text_len  = ntohl(hdr->data_start);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  454) 	data_len  = ntohl(hdr->data_end) - ntohl(hdr->data_start);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  455) 	bss_len   = ntohl(hdr->bss_end) - ntohl(hdr->data_end);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  456) 	stack_len = ntohl(hdr->stack_size);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  457) 	if (extra_stack) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  458) 		stack_len += *extra_stack;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  459) 		*extra_stack = stack_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  460) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  461) 	relocs    = ntohl(hdr->reloc_count);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  462) 	flags     = ntohl(hdr->flags);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  463) 	rev       = ntohl(hdr->rev);
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  464) 	full_data = data_len + relocs * sizeof(unsigned long);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  465) 
845884d332c06 (Greg Ungerer           2006-01-10 16:59:37 +1000  466) 	if (strncmp(hdr->magic, "bFLT", 4)) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  467) 		/*
e2a366dc5cead (Mike Frysinger         2008-02-14 19:31:29 -0800  468) 		 * Previously, here was a printk to tell people
e2a366dc5cead (Mike Frysinger         2008-02-14 19:31:29 -0800  469) 		 *   "BINFMT_FLAT: bad header magic".
e2a366dc5cead (Mike Frysinger         2008-02-14 19:31:29 -0800  470) 		 * But for the kernel which also use ELF FD-PIC format, this
e2a366dc5cead (Mike Frysinger         2008-02-14 19:31:29 -0800  471) 		 * error message is confusing.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  472) 		 * because a lot of people do not manage to produce good
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  473) 		 */
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  474) 		ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  475) 		goto err;
845884d332c06 (Greg Ungerer           2006-01-10 16:59:37 +1000  476) 	}
845884d332c06 (Greg Ungerer           2006-01-10 16:59:37 +1000  477) 
845884d332c06 (Greg Ungerer           2006-01-10 16:59:37 +1000  478) 	if (flags & FLAT_FLAG_KTRACE)
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  479) 		pr_info("Loading file: %s\n", bprm->filename);
845884d332c06 (Greg Ungerer           2006-01-10 16:59:37 +1000  480) 
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  481) #ifdef CONFIG_BINFMT_FLAT_OLD
845884d332c06 (Greg Ungerer           2006-01-10 16:59:37 +1000  482) 	if (rev != FLAT_VERSION && rev != OLD_FLAT_VERSION) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  483) 		pr_err("bad flat file version 0x%x (supported 0x%lx and 0x%lx)\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  484) 		       rev, FLAT_VERSION, OLD_FLAT_VERSION);
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  485) 		ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  486) 		goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  487) 	}
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  488) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  489) 	/* Don't allow old format executables to use shared libraries */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  490) 	if (rev == OLD_FLAT_VERSION && id != 0) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  491) 		pr_err("shared libraries are not available before rev 0x%lx\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  492) 		       FLAT_VERSION);
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  493) 		ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  494) 		goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  495) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  496) 
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  497) 	/*
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  498) 	 * fix up the flags for the older format,  there were all kinds
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  499) 	 * of endian hacks,  this only works for the simple cases
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  500) 	 */
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  501) 	if (rev == OLD_FLAT_VERSION &&
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  502) 	   (flags || IS_ENABLED(CONFIG_BINFMT_FLAT_OLD_ALWAYS_RAM)))
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  503) 		flags = FLAT_FLAG_RAM;
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  504) 
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  505) #else /* CONFIG_BINFMT_FLAT_OLD */
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  506) 	if (rev != FLAT_VERSION) {
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  507) 		pr_err("bad flat file version 0x%x (supported 0x%lx)\n",
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  508) 		       rev, FLAT_VERSION);
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  509) 		ret = -ENOEXEC;
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  510) 		goto err;
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  511) 	}
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  512) #endif /* !CONFIG_BINFMT_FLAT_OLD */
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  513) 
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  514) 	/*
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  515) 	 * Make sure the header params are sane.
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  516) 	 * 28 bits (256 MB) is way more than reasonable in this case.
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  517) 	 * If some top bits are set we have probable binary corruption.
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  518) 	*/
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  519) 	if ((text_len | data_len | bss_len | stack_len | full_data) >> 28) {
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  520) 		pr_err("bad header\n");
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  521) 		ret = -ENOEXEC;
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  522) 		goto err;
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  523) 	}
c995ee28d29d6 (Nicolas Pitre          2016-07-24 11:30:17 -0400  524) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  525) #ifndef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  526) 	if (flags & (FLAT_FLAG_GZIP|FLAT_FLAG_GZDATA)) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  527) 		pr_err("Support for ZFLAT executables is not enabled.\n");
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  528) 		ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  529) 		goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  530) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  531) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  532) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  533) 	/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  534) 	 * Check initial limits. This avoids letting people circumvent
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  535) 	 * size limits imposed on them by creating programs with large
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  536) 	 * arrays in the data or bss.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  537) 	 */
d554ed895dc8f (Jiri Slaby             2010-03-05 13:42:42 -0800  538) 	rlim = rlimit(RLIMIT_DATA);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  539) 	if (rlim >= RLIM_INFINITY)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  540) 		rlim = ~0;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  541) 	if (data_len + bss_len > rlim) {
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  542) 		ret = -ENOMEM;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  543) 		goto err;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  544) 	}
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  545) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  546) 	/* Flush all traces of the currently running executable */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  547) 	if (id == 0) {
2388777a0a595 (Eric W. Biederman      2020-05-03 07:54:10 -0500  548) 		ret = begin_new_exec(bprm);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  549) 		if (ret)
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  550) 			goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  551) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  552) 		/* OK, This is the point of no return */
fcc18e83e1f6f (Malcolm Parsons        2006-06-26 11:49:41 +1000  553) 		set_personality(PER_LINUX_32BIT);
221af7f87b974 (Linus Torvalds         2010-01-28 22:14:42 -0800  554) 		setup_new_exec(bprm);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  555) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  556) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  557) 	/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  558) 	 * calculate the extra space we need to map in
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  559) 	 */
0e647c04f665e (Andrew Morton          2007-10-16 23:27:26 -0700  560) 	extra = max_t(unsigned long, bss_len + stack_len,
0e647c04f665e (Andrew Morton          2007-10-16 23:27:26 -0700  561) 			relocs * sizeof(unsigned long));
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  562) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  563) 	/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  564) 	 * there are a couple of cases here,  the separate code/data
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  565) 	 * case,  and then the fully copied to RAM case which lumps
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  566) 	 * it all together.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  567) 	 */
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  568) 	if (!IS_ENABLED(CONFIG_MMU) && !(flags & (FLAT_FLAG_RAM|FLAT_FLAG_GZIP))) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  569) 		/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  570) 		 * this should give us a ROM ptr,  but if it doesn't we don't
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  571) 		 * really care
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  572) 		 */
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  573) 		pr_debug("ROM mapping of file (we hope)\n");
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  574) 
6be5ceb02e98e (Linus Torvalds         2012-04-20 17:13:58 -0700  575) 		textpos = vm_mmap(bprm->file, 0, text_len, PROT_READ|PROT_EXEC,
925d1c401fa6c (Matt Helsley           2008-04-29 01:01:36 -0700  576) 				  MAP_PRIVATE|MAP_EXECUTABLE, 0);
0b8c78f2bfa6e (Mike Frysinger         2009-09-23 15:57:07 -0700  577) 		if (!textpos || IS_ERR_VALUE(textpos)) {
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  578) 			ret = textpos;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  579) 			if (!textpos)
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  580) 				ret = -ENOMEM;
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  581) 			pr_err("Unable to mmap process text, errno %d\n", ret);
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  582) 			goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  583) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  584) 
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  585) 		len = data_len + extra +
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  586) 			DATA_START_OFFSET_WORDS * sizeof(unsigned long);
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  587) 		len = PAGE_ALIGN(len);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  588) 		realdatastart = vm_mmap(NULL, 0, len,
72613e5f44adf (Greg Ungerer           2007-02-07 12:03:08 +1000  589) 			PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE, 0);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  590) 
0b8c78f2bfa6e (Mike Frysinger         2009-09-23 15:57:07 -0700  591) 		if (realdatastart == 0 || IS_ERR_VALUE(realdatastart)) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  592) 			ret = realdatastart;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  593) 			if (!realdatastart)
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  594) 				ret = -ENOMEM;
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  595) 			pr_err("Unable to allocate RAM for process data, "
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  596) 			       "errno %d\n", ret);
7696e0c37f431 (Al Viro                2012-05-30 01:56:23 -0400  597) 			vm_munmap(textpos, text_len);
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  598) 			goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  599) 		}
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  600) 		datapos = ALIGN(realdatastart +
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  601) 				DATA_START_OFFSET_WORDS * sizeof(unsigned long),
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  602) 				FLAT_DATA_ALIGN);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  603) 
a86054236d356 (Geert Uytterhoeven     2017-07-16 13:57:27 +0200  604) 		pr_debug("Allocated data+bss+stack (%u bytes): %lx\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  605) 			 data_len + bss_len + stack_len, datapos);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  606) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  607) 		fpos = ntohl(hdr->data_start);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  608) #ifdef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  609) 		if (flags & FLAT_FLAG_GZDATA) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  610) 			result = decompress_exec(bprm, fpos, (char *)datapos,
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  611) 						 full_data, 0);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  612) 		} else
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  613) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  614) 		{
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  615) 			result = read_code(bprm->file, datapos, fpos,
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  616) 					full_data);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  617) 		}
0b8c78f2bfa6e (Mike Frysinger         2009-09-23 15:57:07 -0700  618) 		if (IS_ERR_VALUE(result)) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  619) 			ret = result;
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  620) 			pr_err("Unable to read data+bss, errno %d\n", ret);
7696e0c37f431 (Al Viro                2012-05-30 01:56:23 -0400  621) 			vm_munmap(textpos, text_len);
7696e0c37f431 (Al Viro                2012-05-30 01:56:23 -0400  622) 			vm_munmap(realdatastart, len);
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  623) 			goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  624) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  625) 
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  626) 		reloc = (__be32 __user *)
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  627) 			(datapos + (ntohl(hdr->reloc_start) - text_len));
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  628) 		memp = realdatastart;
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  629) 		memp_size = len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  630) 	} else {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  631) 
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  632) 		len = text_len + data_len + extra +
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  633) 			DATA_START_OFFSET_WORDS * sizeof(u32);
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  634) 		len = PAGE_ALIGN(len);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  635) 		textpos = vm_mmap(NULL, 0, len,
72613e5f44adf (Greg Ungerer           2007-02-07 12:03:08 +1000  636) 			PROT_READ | PROT_EXEC | PROT_WRITE, MAP_PRIVATE, 0);
72613e5f44adf (Greg Ungerer           2007-02-07 12:03:08 +1000  637) 
0b8c78f2bfa6e (Mike Frysinger         2009-09-23 15:57:07 -0700  638) 		if (!textpos || IS_ERR_VALUE(textpos)) {
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  639) 			ret = textpos;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  640) 			if (!textpos)
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  641) 				ret = -ENOMEM;
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  642) 			pr_err("Unable to allocate RAM for process text/data, "
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  643) 			       "errno %d\n", ret);
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  644) 			goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  645) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  646) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  647) 		realdatastart = textpos + ntohl(hdr->data_start);
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  648) 		datapos = ALIGN(realdatastart +
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  649) 				DATA_START_OFFSET_WORDS * sizeof(u32),
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  650) 				FLAT_DATA_ALIGN);
c3dc5bec05a2a (Oskar Schirmer         2009-05-28 14:34:31 -0700  651) 
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  652) 		reloc = (__be32 __user *)
c3dc5bec05a2a (Oskar Schirmer         2009-05-28 14:34:31 -0700  653) 			(datapos + (ntohl(hdr->reloc_start) - text_len));
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  654) 		memp = textpos;
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  655) 		memp_size = len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  656) #ifdef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  657) 		/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  658) 		 * load it all in and treat it like a RAM load from now on
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  659) 		 */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  660) 		if (flags & FLAT_FLAG_GZIP) {
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  661) #ifndef CONFIG_MMU
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  662) 			result = decompress_exec(bprm, sizeof(struct flat_hdr),
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  663) 					 (((char *)textpos) + sizeof(struct flat_hdr)),
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  664) 					 (text_len + full_data
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  665) 						  - sizeof(struct flat_hdr)),
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  666) 					 0);
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  667) 			memmove((void *) datapos, (void *) realdatastart,
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  668) 					full_data);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  669) #else
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  670) 			/*
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  671) 			 * This is used on MMU systems mainly for testing.
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  672) 			 * Let's use a kernel buffer to simplify things.
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  673) 			 */
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  674) 			long unz_text_len = text_len - sizeof(struct flat_hdr);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  675) 			long unz_len = unz_text_len + full_data;
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  676) 			char *unz_data = vmalloc(unz_len);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  677) 			if (!unz_data) {
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  678) 				result = -ENOMEM;
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  679) 			} else {
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  680) 				result = decompress_exec(bprm, sizeof(struct flat_hdr),
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  681) 							 unz_data, unz_len, 0);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  682) 				if (result == 0 &&
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  683) 				    (copy_to_user((void __user *)textpos + sizeof(struct flat_hdr),
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  684) 						  unz_data, unz_text_len) ||
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  685) 				     copy_to_user((void __user *)datapos,
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  686) 						  unz_data + unz_text_len, full_data)))
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  687) 					result = -EFAULT;
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  688) 				vfree(unz_data);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  689) 			}
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  690) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  691) 		} else if (flags & FLAT_FLAG_GZDATA) {
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  692) 			result = read_code(bprm->file, textpos, 0, text_len);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  693) 			if (!IS_ERR_VALUE(result)) {
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  694) #ifndef CONFIG_MMU
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  695) 				result = decompress_exec(bprm, text_len, (char *) datapos,
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  696) 						 full_data, 0);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  697) #else
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  698) 				char *unz_data = vmalloc(full_data);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  699) 				if (!unz_data) {
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  700) 					result = -ENOMEM;
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  701) 				} else {
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  702) 					result = decompress_exec(bprm, text_len,
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  703) 						       unz_data, full_data, 0);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  704) 					if (result == 0 &&
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  705) 					    copy_to_user((void __user *)datapos,
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  706) 							 unz_data, full_data))
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  707) 						result = -EFAULT;
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  708) 					vfree(unz_data);
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  709) 				}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  710) #endif
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  711) 			}
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  712) 		} else
472f95f32d5aa (Nicolas Pitre          2016-07-24 11:30:26 -0400  713) #endif /* CONFIG_BINFMT_ZFLAT */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  714) 		{
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  715) 			result = read_code(bprm->file, textpos, 0, text_len);
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  716) 			if (!IS_ERR_VALUE(result))
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  717) 				result = read_code(bprm->file, datapos,
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  718) 						   ntohl(hdr->data_start),
3dc20cb282ec0 (Al Viro                2013-04-13 20:31:37 -0400  719) 						   full_data);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  720) 		}
0b8c78f2bfa6e (Mike Frysinger         2009-09-23 15:57:07 -0700  721) 		if (IS_ERR_VALUE(result)) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  722) 			ret = result;
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  723) 			pr_err("Unable to read code+data+bss, errno %d\n", ret);
2217b98262468 (Max Filippov           2020-08-08 11:37:13 -0700  724) 			vm_munmap(textpos, text_len + data_len + extra +
04d82a6d0881e (Damien Le Moal         2021-04-17 10:10:08 +0900  725) 				  DATA_START_OFFSET_WORDS * sizeof(u32));
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  726) 			goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  727) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  728) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  729) 
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  730) 	start_code = textpos + sizeof(struct flat_hdr);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  731) 	end_code = textpos + text_len;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  732) 	text_len -= sizeof(struct flat_hdr); /* the real code len */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  733) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  734) 	/* The main program needs a little extra setup in the task structure */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  735) 	if (id == 0) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  736) 		current->mm->start_code = start_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  737) 		current->mm->end_code = end_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  738) 		current->mm->start_data = datapos;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  739) 		current->mm->end_data = datapos + data_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  740) 		/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  741) 		 * set up the brk stuff, uses any slack left in data/bss/stack
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  742) 		 * allocation.  We put the brk after the bss (between the bss
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  743) 		 * and stack) like other platforms.
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  744) 		 * Userspace code relies on the stack pointer starting out at
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  745) 		 * an address right at the end of a page.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  746) 		 */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  747) 		current->mm->start_brk = datapos + data_len + bss_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  748) 		current->mm->brk = (current->mm->start_brk + 3) & ~3;
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  749) #ifndef CONFIG_MMU
0f3e442a403a3 (David Howells          2009-01-08 12:04:47 +0000  750) 		current->mm->context.end_brk = memp + memp_size - stack_len;
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  751) #endif
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  752) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  753) 
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  754) 	if (flags & FLAT_FLAG_KTRACE) {
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  755) 		pr_info("Mapping is %lx, Entry point is %x, data_start is %x\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  756) 			textpos, 0x00ffffff&ntohl(hdr->entry), ntohl(hdr->data_start));
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  757) 		pr_info("%s %s: TEXT=%lx-%lx DATA=%lx-%lx BSS=%lx-%lx\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  758) 			id ? "Lib" : "Load", bprm->filename,
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  759) 			start_code, end_code, datapos, datapos + data_len,
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400  760) 			datapos + data_len, (datapos + data_len + bss_len + 3) & ~3);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  761) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  762) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  763) 	/* Store the current module values into the global library structure */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  764) 	libinfo->lib_list[id].start_code = start_code;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  765) 	libinfo->lib_list[id].start_data = datapos;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  766) 	libinfo->lib_list[id].start_brk = datapos + data_len + bss_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  767) 	libinfo->lib_list[id].text_len = text_len;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  768) 	libinfo->lib_list[id].loaded = 1;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  769) 	libinfo->lib_list[id].entry = (0x00ffffff & ntohl(hdr->entry)) + textpos;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  770) 	libinfo->lib_list[id].build_date = ntohl(hdr->build_date);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  771) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  772) 	/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  773) 	 * We just load the allocations into some temporary memory to
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  774) 	 * help simplify all this mumbo jumbo
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  775) 	 *
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  776) 	 * We've got two different sections of relocation entries.
25985edcedea6 (Lucas De Marchi        2011-03-30 22:57:33 -0300  777) 	 * The first is the GOT which resides at the beginning of the data segment
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  778) 	 * and is terminated with a -1.  This one can be relocated in place.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  779) 	 * The second is the extra relocation entries tacked after the image's
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  780) 	 * data segment. These require a little more processing as the entry is
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  781) 	 * really an offset into the image which contains an offset into the
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  782) 	 * image.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  783) 	 */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  784) 	if (flags & FLAT_FLAG_GOTPIC) {
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  785) 		for (rp = (u32 __user *)datapos; ; rp++) {
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  786) 			u32 addr, rp_val;
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  787) 			if (get_user(rp_val, rp))
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  788) 				return -EFAULT;
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  789) 			if (rp_val == 0xffffffff)
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  790) 				break;
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  791) 			if (rp_val) {
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  792) 				addr = calc_reloc(rp_val, libinfo, id, 0);
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  793) 				if (addr == RELOC_FAILED) {
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  794) 					ret = -ENOEXEC;
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  795) 					goto err;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  796) 				}
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  797) 				if (put_user(addr, rp))
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  798) 					return -EFAULT;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  799) 			}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  800) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  801) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  802) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  803) 	/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  804) 	 * Now run through the relocation entries.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  805) 	 * We've got to be careful here as C++ produces relocatable zero
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  806) 	 * entries in the constructor and destructor tables which are then
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  807) 	 * tested for being not zero (which will always occur unless we're
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  808) 	 * based from address zero).  This causes an endless loop as __start
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  809) 	 * is at zero.  The solution used is to not relocate zero addresses.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  810) 	 * This has the negative side effect of not allowing a global data
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  811) 	 * reference to be statically initialised to _stext (I've moved
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  812) 	 * __start to address 4 so that is okay).
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  813) 	 */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  814) 	if (rev > OLD_FLAT_VERSION) {
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  815) 		for (i = 0; i < relocs; i++) {
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  816) 			u32 addr, relval;
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  817) 			__be32 tmp;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  818) 
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  819) 			/*
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  820) 			 * Get the address of the pointer to be
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  821) 			 * relocated (of course, the address has to be
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  822) 			 * relocated first).
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  823) 			 */
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  824) 			if (get_user(tmp, reloc + i))
6e572ffe3feb8 (Nicolas Pitre          2016-07-24 11:30:21 -0400  825) 				return -EFAULT;
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  826) 			relval = ntohl(tmp);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  827) 			addr = flat_get_relocate_addr(relval);
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  828) 			rp = (u32 __user *)calc_reloc(addr, libinfo, id, 1);
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  829) 			if (rp == (u32 __user *)RELOC_FAILED) {
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  830) 				ret = -ENOEXEC;
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  831) 				goto err;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  832) 			}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  833) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  834) 			/* Get the pointer's value.  */
6843d8aa5b9bc (Christoph Hellwig      2019-06-13 09:09:00 +0200  835) 			ret = flat_get_addr_from_rp(rp, relval, flags, &addr);
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  836) 			if (unlikely(ret))
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  837) 				goto err;
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  838) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  839) 			if (addr != 0) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  840) 				/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  841) 				 * Do the relocation.  PIC relocs in the data section are
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  842) 				 * already in target order
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  843) 				 */
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  844) 				if ((flags & FLAT_FLAG_GOTPIC) == 0) {
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  845) 					/*
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  846) 					 * Meh, the same value can have a different
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  847) 					 * byte order based on a flag..
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  848) 					 */
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  849) 					addr = ntohl((__force __be32)addr);
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  850) 				}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  851) 				addr = calc_reloc(addr, libinfo, id, 0);
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  852) 				if (addr == RELOC_FAILED) {
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  853) 					ret = -ENOEXEC;
df88912a2165f (Andrew Morton          2006-05-20 15:00:01 -0700  854) 					goto err;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  855) 				}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  856) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  857) 				/* Write back the relocated pointer.  */
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  858) 				ret = flat_put_addr_at_rp(rp, addr, relval);
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  859) 				if (unlikely(ret))
468138d785106 (Al Viro                2017-05-02 19:52:17 -0400  860) 					goto err;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  861) 			}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  862) 		}
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  863) #ifdef CONFIG_BINFMT_FLAT_OLD
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  864) 	} else {
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  865) 		for (i = 0; i < relocs; i++) {
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  866) 			__be32 relval;
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  867) 			if (get_user(relval, reloc + i))
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  868) 				return -EFAULT;
3b9777184232a (Christoph Hellwig      2019-06-13 09:08:56 +0200  869) 			old_reloc(ntohl(relval));
1b2ce442ea96b (Nicolas Pitre          2016-07-24 11:30:22 -0400  870) 		}
cf9a566c2c06a (Christoph Hellwig      2019-06-13 09:08:58 +0200  871) #endif /* CONFIG_BINFMT_FLAT_OLD */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  872) 	}
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  873) 
79ef1e1fffebc (Christoph Hellwig      2020-06-07 21:42:46 -0700  874) 	flush_icache_user_range(start_code, end_code);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  875) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  876) 	/* zero the BSS,  BRK and stack areas */
467aa1465a7b9 (Nicolas Pitre          2016-07-24 11:30:23 -0400  877) 	if (clear_user((void __user *)(datapos + data_len), bss_len +
467aa1465a7b9 (Nicolas Pitre          2016-07-24 11:30:23 -0400  878) 		       (memp + memp_size - stack_len -		/* end brk */
467aa1465a7b9 (Nicolas Pitre          2016-07-24 11:30:23 -0400  879) 		       libinfo->lib_list[id].start_brk) +	/* start brk */
467aa1465a7b9 (Nicolas Pitre          2016-07-24 11:30:23 -0400  880) 		       stack_len))
467aa1465a7b9 (Nicolas Pitre          2016-07-24 11:30:23 -0400  881) 		return -EFAULT;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  882) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  883) 	return 0;
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  884) err:
1ad3dcc09c88c (Luke Yang              2006-03-25 03:08:24 -0800  885) 	return ret;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  886) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  887) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  888) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  889) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  890) #ifdef CONFIG_BINFMT_SHARED_FLAT
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  891) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  892) /*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  893)  * Load a shared library into memory.  The library gets its own data
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  894)  * segment (including bss) but not argv/argc/environ.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  895)  */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  896) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  897) static int load_flat_shared_library(int id, struct lib_info *libs)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  898) {
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  899) 	/*
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  900) 	 * This is a fake bprm struct; only the members "buf", "file" and
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  901) 	 * "filename" are actually used.
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  902) 	 */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  903) 	struct linux_binprm bprm;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  904) 	int res;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  905) 	char buf[16];
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  906) 	loff_t pos = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  907) 
3a852d3bd53e7 (David Howells          2011-04-28 16:26:38 +0100  908) 	memset(&bprm, 0, sizeof(bprm));
3a852d3bd53e7 (David Howells          2011-04-28 16:26:38 +0100  909) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  910) 	/* Create the file name */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  911) 	sprintf(buf, "/lib/lib%d.so", id);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  912) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  913) 	/* Open the file up */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  914) 	bprm.filename = buf;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  915) 	bprm.file = open_exec(bprm.filename);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  916) 	res = PTR_ERR(bprm.file);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  917) 	if (IS_ERR(bprm.file))
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  918) 		return res;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  919) 
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  920) 	res = kernel_read(bprm.file, bprm.buf, BINPRM_BUF_SIZE, &pos);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  921) 
867bfa4a5fcee (Jann Horn              2019-06-28 12:06:46 -0700  922) 	if (res >= 0)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  923) 		res = load_flat_file(&bprm, libs, id, NULL);
3440625d78711 (Linus Torvalds         2009-08-06 15:09:34 -0700  924) 
3440625d78711 (Linus Torvalds         2009-08-06 15:09:34 -0700  925) 	allow_write_access(bprm.file);
3440625d78711 (Linus Torvalds         2009-08-06 15:09:34 -0700  926) 	fput(bprm.file);
3440625d78711 (Linus Torvalds         2009-08-06 15:09:34 -0700  927) 
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  928) 	return res;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  929) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  930) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  931) #endif /* CONFIG_BINFMT_SHARED_FLAT */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  932) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  933) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  934) /*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  935)  * These are the functions used to load flat style executables and shared
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  936)  * libraries.  There is no binary dependent code anywhere else.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  937)  */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  938) 
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  939) static int load_flat_binary(struct linux_binprm *bprm)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  940) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  941) 	struct lib_info libinfo;
71613c3b871c5 (Al Viro                2012-10-20 22:00:48 -0400  942) 	struct pt_regs *regs = current_pt_regs();
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  943) 	unsigned long stack_len = 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  944) 	unsigned long start_addr;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  945) 	int res;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  946) 	int i, j;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  947) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  948) 	memset(&libinfo, 0, sizeof(libinfo));
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  949) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  950) 	/*
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  951) 	 * We have to add the size of our arguments to our stack size
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  952) 	 * otherwise it's too easy for users to create stack overflows
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  953) 	 * by passing in a huge argument list.  And yes,  we have to be
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  954) 	 * pedantic and include space for the argv/envp array as it may have
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  955) 	 * a lot of entries.
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  956) 	 */
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  957) #ifndef CONFIG_MMU
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  958) 	stack_len += PAGE_SIZE * MAX_ARG_PAGES - bprm->p; /* the strings */
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  959) #endif
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  960) 	stack_len += (bprm->argc + 1) * sizeof(char *);   /* the argv array */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  961) 	stack_len += (bprm->envc + 1) * sizeof(char *);   /* the envp array */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  962) 	stack_len = ALIGN(stack_len, FLAT_STACK_ALIGN);
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  963) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  964) 	res = load_flat_file(bprm, &libinfo, 0, &stack_len);
287980e49ffc0 (Arnd Bergmann          2016-05-27 23:23:25 +0200  965) 	if (res < 0)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  966) 		return res;
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400  967) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  968) 	/* Update data segment pointers for all libraries */
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  969) 	for (i = 0; i < MAX_SHARED_LIBS; i++) {
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  970) 		if (!libinfo.lib_list[i].loaded)
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  971) 			continue;
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  972) 		for (j = 0; j < MAX_SHARED_LIBS; j++) {
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  973) 			unsigned long val = libinfo.lib_list[j].loaded ?
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  974) 				libinfo.lib_list[j].start_data : UNLOADED_LIB;
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  975) 			unsigned long __user *p = (unsigned long __user *)
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  976) 				libinfo.lib_list[i].start_data;
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  977) 			p -= j + 1;
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  978) 			if (put_user(val, p))
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  979) 				return -EFAULT;
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  980) 		}
af521f92dcf63 (Nicolas Pitre          2016-07-24 11:30:24 -0400  981) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  982) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  983) 	set_binfmt(&flat_format);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  984) 
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  985) #ifdef CONFIG_MMU
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  986) 	res = setup_arg_pages(bprm, STACK_TOP, EXSTACK_DEFAULT);
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  987) 	if (!res)
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  988) 		res = create_flat_tables(bprm, bprm->p);
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  989) #else
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  990) 	/* Stash our initial stack pointer into the mm structure */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  991) 	current->mm->start_stack =
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  992) 		((current->mm->context.end_brk + stack_len + 3) & ~3) - 4;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  993) 	pr_debug("sp=%lx\n", current->mm->start_stack);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700  994) 
687fd7738ec32 (Nicolas Pitre          2016-07-24 11:30:19 -0400  995) 	/* copy the arg pages onto the stack */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  996) 	res = transfer_args_to_stack(bprm, &current->mm->start_stack);
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  997) 	if (!res)
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400  998) 		res = create_flat_tables(bprm, current->mm->start_stack);
015feacf93210 (Nicolas Pitre          2016-07-24 11:30:25 -0400  999) #endif
687fd7738ec32 (Nicolas Pitre          2016-07-24 11:30:19 -0400 1000) 	if (res)
687fd7738ec32 (Nicolas Pitre          2016-07-24 11:30:19 -0400 1001) 		return res;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1002) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1003) 	/* Fake some return addresses to ensure the call chain will
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1004) 	 * initialise library in order for us.  We are required to call
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1005) 	 * lib 1 first, then 2, ... and finally the main program (id 0).
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1006) 	 */
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1007) 	start_addr = libinfo.lib_list[0].entry;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1008) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1009) #ifdef CONFIG_BINFMT_SHARED_FLAT
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400 1010) 	for (i = MAX_SHARED_LIBS-1; i > 0; i--) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1011) 		if (libinfo.lib_list[i].loaded) {
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1012) 			/* Push previos first to call address */
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400 1013) 			unsigned long __user *sp;
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400 1014) 			current->mm->start_stack -= sizeof(unsigned long);
a97d157d00cd0 (Nicolas Pitre          2016-07-24 11:30:20 -0400 1015) 			sp = (unsigned long __user *)current->mm->start_stack;
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500 1016) 			if (put_user(start_addr, sp))
8861fd576ecf9 (Al Viro                2020-02-19 09:32:55 -0500 1017) 				return -EFAULT;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1018) 			start_addr = libinfo.lib_list[i].entry;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1019) 		}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1020) 	}
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1021) #endif
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400 1022) 
74c27c43ebd02 (Takashi YOSHII         2008-08-11 20:10:54 +0900 1023) #ifdef FLAT_PLAT_INIT
74c27c43ebd02 (Takashi YOSHII         2008-08-11 20:10:54 +0900 1024) 	FLAT_PLAT_INIT(regs);
74c27c43ebd02 (Takashi YOSHII         2008-08-11 20:10:54 +0900 1025) #endif
13c3f50c914e6 (Nicolas Pitre          2016-07-24 11:30:15 -0400 1026) 
b83838313386f (Kees Cook              2018-04-10 16:34:57 -0700 1027) 	finalize_exec(bprm);
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400 1028) 	pr_debug("start_thread(regs=0x%p, entry=0x%lx, start_stack=0x%lx)\n",
4adbb6ac4b807 (Nicolas Pitre          2016-07-24 11:30:16 -0400 1029) 		 regs, start_addr, current->mm->start_stack);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1030) 	start_thread(regs, start_addr, current->mm->start_stack);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1031) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1032) 	return 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1033) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1034) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1035) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1036) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1037) static int __init init_flat_binfmt(void)
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1038) {
8fc3dc5a3a17a (Al Viro                2012-03-17 03:05:16 -0400 1039) 	register_binfmt(&flat_format);
8fc3dc5a3a17a (Al Viro                2012-03-17 03:05:16 -0400 1040) 	return 0;
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1041) }
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1042) core_initcall(init_flat_binfmt);
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1043) 
^1da177e4c3f4 (Linus Torvalds         2005-04-16 15:20:36 -0700 1044) /****************************************************************************/