b24413180f560 (Greg Kroah-Hartman 2017-11-01 15:07:57 +0100 1) // SPDX-License-Identifier: GPL-2.0
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 2) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 3) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 4) * linux/fs/binfmt_flat.c
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 5) *
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 6) * Copyright (C) 2000-2003 David McCullough <davidm@snapgear.com>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 7) * Copyright (C) 2002 Greg Ungerer <gerg@snapgear.com>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 8) * Copyright (C) 2002 SnapGear, by Paul Dale <pauli@snapgear.com>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 9) * Copyright (C) 2000, 2001 Lineo, by David McCullough <davidm@lineo.com>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 10) * based heavily on:
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 11) *
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 12) * linux/fs/binfmt_aout.c:
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 13) * Copyright (C) 1991, 1992, 1996 Linus Torvalds
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 14) * linux/fs/binfmt_flat.c for 2.0 kernel
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 15) * Copyright (C) 1998 Kenneth Albanowski <kjahds@kjahds.com>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 16) * JAN/99 -- coded full program relocation (gerg@snapgear.com)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 17) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 18)
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 19) #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 20)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 21) #include <linux/kernel.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 22) #include <linux/sched.h>
68db0cf106786 (Ingo Molnar 2017-02-08 18:51:37 +0100 23) #include <linux/sched/task_stack.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 24) #include <linux/mm.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 25) #include <linux/mman.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 26) #include <linux/errno.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 27) #include <linux/signal.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 28) #include <linux/string.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 29) #include <linux/fs.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 30) #include <linux/file.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 31) #include <linux/ptrace.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 32) #include <linux/user.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 33) #include <linux/slab.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 34) #include <linux/binfmts.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 35) #include <linux/personality.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 36) #include <linux/init.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 37) #include <linux/flat.h>
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 38) #include <linux/uaccess.h>
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 39) #include <linux/vmalloc.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 40)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 41) #include <asm/byteorder.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 42) #include <asm/unaligned.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 43) #include <asm/cacheflush.h>
c3dc5bec05a2a (Oskar Schirmer 2009-05-28 14:34:31 -0700 44) #include <asm/page.h>
06d2bfedd147d (Christoph Hellwig 2019-06-13 09:08:52 +0200 45) #include <asm/flat.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 46)
02da283302f7e (Christoph Hellwig 2019-06-13 09:08:49 +0200 47) #ifndef flat_get_relocate_addr
02da283302f7e (Christoph Hellwig 2019-06-13 09:08:49 +0200 48) #define flat_get_relocate_addr(rel) (rel)
02da283302f7e (Christoph Hellwig 2019-06-13 09:08:49 +0200 49) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 50)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 51) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 52)
c3dc5bec05a2a (Oskar Schirmer 2009-05-28 14:34:31 -0700 53) /*
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 54) * User data (data section and bss) needs to be aligned.
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 55) * We pick 0x20 here because it is the max value elf2flt has always
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 56) * used in producing FLAT files, and because it seems to be large
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 57) * enough to make all the gcc alignment related tests happy.
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 58) */
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 59) #define FLAT_DATA_ALIGN (0x20)
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 60)
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 61) /*
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 62) * User data (stack) also needs to be aligned.
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 63) * Here we can be a bit looser than the data sections since this
2e94de8acbe52 (Mike Frysinger 2010-06-04 14:14:53 -0700 64) * needs to only meet arch ABI requirements.
c3dc5bec05a2a (Oskar Schirmer 2009-05-28 14:34:31 -0700 65) */
2952095c6b2ee (Mike Frysinger 2010-06-29 15:05:21 -0700 66) #define FLAT_STACK_ALIGN max_t(unsigned long, sizeof(void *), ARCH_SLAB_MINALIGN)
c3dc5bec05a2a (Oskar Schirmer 2009-05-28 14:34:31 -0700 67)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 68) #define RELOC_FAILED 0xff00ff01 /* Relocation incorrect somewhere */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 69) #define UNLOADED_LIB 0x7ff000ff /* Placeholder for unused library */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 70)
a445d988b4790 (Christoph Hellwig 2019-06-13 09:09:01 +0200 71) #ifdef CONFIG_BINFMT_SHARED_FLAT
a445d988b4790 (Christoph Hellwig 2019-06-13 09:09:01 +0200 72) #define MAX_SHARED_LIBS (4)
a445d988b4790 (Christoph Hellwig 2019-06-13 09:09:01 +0200 73) #else
a445d988b4790 (Christoph Hellwig 2019-06-13 09:09:01 +0200 74) #define MAX_SHARED_LIBS (1)
a445d988b4790 (Christoph Hellwig 2019-06-13 09:09:01 +0200 75) #endif
a445d988b4790 (Christoph Hellwig 2019-06-13 09:09:01 +0200 76)
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 77) #ifdef CONFIG_BINFMT_FLAT_NO_DATA_START_OFFSET
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 78) #define DATA_START_OFFSET_WORDS (0)
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 79) #else
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 80) #define DATA_START_OFFSET_WORDS (MAX_SHARED_LIBS)
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 81) #endif
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 82)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 83) struct lib_info {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 84) struct {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 85) unsigned long start_code; /* Start of text segment */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 86) unsigned long start_data; /* Start of data segment */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 87) unsigned long start_brk; /* End of data segment */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 88) unsigned long text_len; /* Length of text segment */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 89) unsigned long entry; /* Start address for this module */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 90) unsigned long build_date; /* When this one was compiled */
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 91) bool loaded; /* Has this library been loaded? */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 92) } lib_list[MAX_SHARED_LIBS];
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 93) };
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 94)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 95) #ifdef CONFIG_BINFMT_SHARED_FLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 96) static int load_flat_shared_library(int id, struct lib_info *p);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 97) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 98)
71613c3b871c5 (Al Viro 2012-10-20 22:00:48 -0400 99) static int load_flat_binary(struct linux_binprm *);
f6151dfea2149 (Masami Hiramatsu 2009-12-17 15:27:16 -0800 100) static int flat_core_dump(struct coredump_params *cprm);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 101)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 102) static struct linux_binfmt flat_format = {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 103) .module = THIS_MODULE,
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 104) .load_binary = load_flat_binary,
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 105) .core_dump = flat_core_dump,
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 106) .min_coredump = PAGE_SIZE
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 107) };
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 108)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 109) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 110) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 111) * Routine writes a core dump image in the current directory.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 112) * Currently only a stub-function.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 113) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 114)
f6151dfea2149 (Masami Hiramatsu 2009-12-17 15:27:16 -0800 115) static int flat_core_dump(struct coredump_params *cprm)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 116) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 117) pr_warn("Process %s:%d received signr %d and should have core dumped\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 118) current->comm, current->pid, cprm->siginfo->si_signo);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 119) return 1;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 120) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 121)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 122) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 123) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 124) * create_flat_tables() parses the env- and arg-strings in new user
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 125) * memory and creates the pointer tables from them, and puts their
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 126) * addresses on the "stack", recording the new stack pointer value.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 127) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 128)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 129) static int create_flat_tables(struct linux_binprm *bprm, unsigned long arg_start)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 130) {
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 131) char __user *p;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 132) unsigned long __user *sp;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 133) long i, len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 134)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 135) p = (char __user *)arg_start;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 136) sp = (unsigned long __user *)current->mm->start_stack;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 137)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 138) sp -= bprm->envc + 1;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 139) sp -= bprm->argc + 1;
bdd15a288492f (Christoph Hellwig 2019-06-13 09:08:51 +0200 140) if (IS_ENABLED(CONFIG_BINFMT_FLAT_ARGVP_ENVP_ON_STACK))
bdd15a288492f (Christoph Hellwig 2019-06-13 09:08:51 +0200 141) sp -= 2; /* argvp + envp */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 142) sp -= 1; /* &argc */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 143)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 144) current->mm->start_stack = (unsigned long)sp & -FLAT_STACK_ALIGN;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 145) sp = (unsigned long __user *)current->mm->start_stack;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 146)
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 147) if (put_user(bprm->argc, sp++))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 148) return -EFAULT;
bdd15a288492f (Christoph Hellwig 2019-06-13 09:08:51 +0200 149) if (IS_ENABLED(CONFIG_BINFMT_FLAT_ARGVP_ENVP_ON_STACK)) {
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 150) unsigned long argv, envp;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 151) argv = (unsigned long)(sp + 2);
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 152) envp = (unsigned long)(sp + 2 + bprm->argc + 1);
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 153) if (put_user(argv, sp++) || put_user(envp, sp++))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 154) return -EFAULT;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 155) }
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 156)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 157) current->mm->arg_start = (unsigned long)p;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 158) for (i = bprm->argc; i > 0; i--) {
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 159) if (put_user((unsigned long)p, sp++))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 160) return -EFAULT;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 161) len = strnlen_user(p, MAX_ARG_STRLEN);
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 162) if (!len || len > MAX_ARG_STRLEN)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 163) return -EINVAL;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 164) p += len;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 165) }
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 166) if (put_user(0, sp++))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 167) return -EFAULT;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 168) current->mm->arg_end = (unsigned long)p;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 169)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 170) current->mm->env_start = (unsigned long) p;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 171) for (i = bprm->envc; i > 0; i--) {
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 172) if (put_user((unsigned long)p, sp++))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 173) return -EFAULT;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 174) len = strnlen_user(p, MAX_ARG_STRLEN);
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 175) if (!len || len > MAX_ARG_STRLEN)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 176) return -EINVAL;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 177) p += len;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 178) }
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 179) if (put_user(0, sp++))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 180) return -EFAULT;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 181) current->mm->env_end = (unsigned long)p;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 182)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 183) return 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 184) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 185)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 186) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 187)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 188) #ifdef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 189)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 190) #include <linux/zlib.h>
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 191)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 192) #define LBUFSIZE 4000
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 193)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 194) /* gzip flag byte */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 195) #define ASCII_FLAG 0x01 /* bit 0 set: file probably ASCII text */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 196) #define CONTINUATION 0x02 /* bit 1 set: continuation of multi-part gzip file */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 197) #define EXTRA_FIELD 0x04 /* bit 2 set: extra field present */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 198) #define ORIG_NAME 0x08 /* bit 3 set: original file name present */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 199) #define COMMENT 0x10 /* bit 4 set: file comment present */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 200) #define ENCRYPTED 0x20 /* bit 5 set: file is encrypted */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 201) #define RESERVED 0xC0 /* bit 6,7: reserved */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 202)
bdd1d2d3d251c (Christoph Hellwig 2017-09-01 17:39:13 +0200 203) static int decompress_exec(struct linux_binprm *bprm, loff_t fpos, char *dst,
bdd1d2d3d251c (Christoph Hellwig 2017-09-01 17:39:13 +0200 204) long len, int fd)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 205) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 206) unsigned char *buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 207) z_stream strm;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 208) int ret, retval;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 209)
bdd1d2d3d251c (Christoph Hellwig 2017-09-01 17:39:13 +0200 210) pr_debug("decompress_exec(offset=%llx,buf=%p,len=%lx)\n", fpos, dst, len);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 211)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 212) memset(&strm, 0, sizeof(strm));
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 213) strm.workspace = kmalloc(zlib_inflate_workspacesize(), GFP_KERNEL);
9367bb730e4d9 (Markus Elfring 2017-09-08 16:16:14 -0700 214) if (!strm.workspace)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 215) return -ENOMEM;
9367bb730e4d9 (Markus Elfring 2017-09-08 16:16:14 -0700 216)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 217) buf = kmalloc(LBUFSIZE, GFP_KERNEL);
9367bb730e4d9 (Markus Elfring 2017-09-08 16:16:14 -0700 218) if (!buf) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 219) retval = -ENOMEM;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 220) goto out_free;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 221) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 222)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 223) /* Read in first chunk of data and parse gzip header. */
bdd1d2d3d251c (Christoph Hellwig 2017-09-01 17:39:13 +0200 224) ret = kernel_read(bprm->file, buf, LBUFSIZE, &fpos);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 225)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 226) strm.next_in = buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 227) strm.avail_in = ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 228) strm.total_in = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 229)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 230) retval = -ENOEXEC;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 231)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 232) /* Check minimum size -- gzip header */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 233) if (ret < 10) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 234) pr_debug("file too small?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 235) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 236) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 237)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 238) /* Check gzip magic number */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 239) if ((buf[0] != 037) || ((buf[1] != 0213) && (buf[1] != 0236))) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 240) pr_debug("unknown compression magic?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 241) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 242) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 243)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 244) /* Check gzip method */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 245) if (buf[2] != 8) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 246) pr_debug("unknown compression method?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 247) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 248) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 249) /* Check gzip flags */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 250) if ((buf[3] & ENCRYPTED) || (buf[3] & CONTINUATION) ||
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 251) (buf[3] & RESERVED)) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 252) pr_debug("unknown flags?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 253) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 254) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 255)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 256) ret = 10;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 257) if (buf[3] & EXTRA_FIELD) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 258) ret += 2 + buf[10] + (buf[11] << 8);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 259) if (unlikely(ret >= LBUFSIZE)) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 260) pr_debug("buffer overflow (EXTRA)?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 261) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 262) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 263) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 264) if (buf[3] & ORIG_NAME) {
f4cfb18d7917e (Volodymyr G. Lukiianyk 2008-10-15 22:01:15 -0700 265) while (ret < LBUFSIZE && buf[ret++] != 0)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 266) ;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 267) if (unlikely(ret == LBUFSIZE)) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 268) pr_debug("buffer overflow (ORIG_NAME)?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 269) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 270) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 271) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 272) if (buf[3] & COMMENT) {
f4cfb18d7917e (Volodymyr G. Lukiianyk 2008-10-15 22:01:15 -0700 273) while (ret < LBUFSIZE && buf[ret++] != 0)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 274) ;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 275) if (unlikely(ret == LBUFSIZE)) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 276) pr_debug("buffer overflow (COMMENT)?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 277) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 278) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 279) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 280)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 281) strm.next_in += ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 282) strm.avail_in -= ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 283)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 284) strm.next_out = dst;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 285) strm.avail_out = len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 286) strm.total_out = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 287)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 288) if (zlib_inflateInit2(&strm, -MAX_WBITS) != Z_OK) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 289) pr_debug("zlib init failed?\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 290) goto out_free_buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 291) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 292)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 293) while ((ret = zlib_inflate(&strm, Z_NO_FLUSH)) == Z_OK) {
bdd1d2d3d251c (Christoph Hellwig 2017-09-01 17:39:13 +0200 294) ret = kernel_read(bprm->file, buf, LBUFSIZE, &fpos);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 295) if (ret <= 0)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 296) break;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 297) len -= ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 298)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 299) strm.next_in = buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 300) strm.avail_in = ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 301) strm.total_in = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 302) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 303)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 304) if (ret < 0) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 305) pr_debug("decompression failed (%d), %s\n",
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 306) ret, strm.msg);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 307) goto out_zlib;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 308) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 309)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 310) retval = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 311) out_zlib:
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 312) zlib_inflateEnd(&strm);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 313) out_free_buf:
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 314) kfree(buf);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 315) out_free:
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 316) kfree(strm.workspace);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 317) return retval;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 318) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 319)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 320) #endif /* CONFIG_BINFMT_ZFLAT */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 321)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 322) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 323)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 324) static unsigned long
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 325) calc_reloc(unsigned long r, struct lib_info *p, int curid, int internalp)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 326) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 327) unsigned long addr;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 328) int id;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 329) unsigned long start_brk;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 330) unsigned long start_data;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 331) unsigned long text_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 332) unsigned long start_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 333)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 334) #ifdef CONFIG_BINFMT_SHARED_FLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 335) if (r == 0)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 336) id = curid; /* Relocs of 0 are always self referring */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 337) else {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 338) id = (r >> 24) & 0xff; /* Find ID for this reloc */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 339) r &= 0x00ffffff; /* Trim ID off here */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 340) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 341) if (id >= MAX_SHARED_LIBS) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 342) pr_err("reference 0x%lx to shared library %d", r, id);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 343) goto failed;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 344) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 345) if (curid != id) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 346) if (internalp) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 347) pr_err("reloc address 0x%lx not in same module "
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 348) "(%d != %d)", r, curid, id);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 349) goto failed;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 350) } else if (!p->lib_list[id].loaded &&
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 351) load_flat_shared_library(id, p) < 0) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 352) pr_err("failed to load library %d", id);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 353) goto failed;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 354) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 355) /* Check versioning information (i.e. time stamps) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 356) if (p->lib_list[id].build_date && p->lib_list[curid].build_date &&
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 357) p->lib_list[curid].build_date < p->lib_list[id].build_date) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 358) pr_err("library %d is younger than %d", id, curid);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 359) goto failed;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 360) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 361) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 362) #else
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 363) id = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 364) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 365)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 366) start_brk = p->lib_list[id].start_brk;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 367) start_data = p->lib_list[id].start_data;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 368) start_code = p->lib_list[id].start_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 369) text_len = p->lib_list[id].text_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 370)
9ee24b2a38358 (Christoph Hellwig 2019-06-13 09:08:47 +0200 371) if (r > start_brk - start_data + text_len) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 372) pr_err("reloc outside program 0x%lx (0 - 0x%lx/0x%lx)",
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 373) r, start_brk-start_data+text_len, text_len);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 374) goto failed;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 375) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 376)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 377) if (r < text_len) /* In text segment */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 378) addr = r + start_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 379) else /* In data segment */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 380) addr = r - text_len + start_data;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 381)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 382) /* Range checked already above so doing the range tests is redundant...*/
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 383) return addr;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 384)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 385) failed:
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 386) pr_cont(", killing %s!\n", current->comm);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 387) send_sig(SIGSEGV, current, 0);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 388)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 389) return RELOC_FAILED;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 390) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 391)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 392) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 393)
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 394) #ifdef CONFIG_BINFMT_FLAT_OLD
343034357202b (Axel Lin 2014-06-04 16:12:15 -0700 395) static void old_reloc(unsigned long rl)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 396) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 397) static const char *segment[] = { "TEXT", "DATA", "BSS", "*UNKNOWN*" };
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 398) flat_v2_reloc_t r;
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 399) unsigned long __user *ptr;
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 400) unsigned long val;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 401)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 402) r.value = rl;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 403) #if defined(CONFIG_COLDFIRE)
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 404) ptr = (unsigned long __user *)(current->mm->start_code + r.reloc.offset);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 405) #else
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 406) ptr = (unsigned long __user *)(current->mm->start_data + r.reloc.offset);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 407) #endif
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 408) get_user(val, ptr);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 409)
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 410) pr_debug("Relocation of variable at DATASEG+%x "
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 411) "(address %p, currently %lx) into segment %s\n",
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 412) r.reloc.offset, ptr, val, segment[r.reloc.type]);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 413)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 414) switch (r.reloc.type) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 415) case OLD_FLAT_RELOC_TYPE_TEXT:
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 416) val += current->mm->start_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 417) break;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 418) case OLD_FLAT_RELOC_TYPE_DATA:
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 419) val += current->mm->start_data;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 420) break;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 421) case OLD_FLAT_RELOC_TYPE_BSS:
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 422) val += current->mm->end_data;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 423) break;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 424) default:
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 425) pr_err("Unknown relocation type=%x\n", r.reloc.type);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 426) break;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 427) }
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 428) put_user(val, ptr);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 429)
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 430) pr_debug("Relocation became %lx\n", val);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 431) }
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 432) #endif /* CONFIG_BINFMT_FLAT_OLD */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 433)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 434) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 435)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 436) static int load_flat_file(struct linux_binprm *bprm,
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 437) struct lib_info *libinfo, int id, unsigned long *extra_stack)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 438) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 439) struct flat_hdr *hdr;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 440) unsigned long textpos, datapos, realdatastart;
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 441) u32 text_len, data_len, bss_len, stack_len, full_data, flags;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 442) unsigned long len, memp, memp_size, extra, rlim;
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 443) __be32 __user *reloc;
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 444) u32 __user *rp;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 445) int i, rev, relocs;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 446) loff_t fpos;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 447) unsigned long start_code, end_code;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 448) ssize_t result;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 449) int ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 450)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 451) hdr = ((struct flat_hdr *) bprm->buf); /* exec-header */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 452)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 453) text_len = ntohl(hdr->data_start);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 454) data_len = ntohl(hdr->data_end) - ntohl(hdr->data_start);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 455) bss_len = ntohl(hdr->bss_end) - ntohl(hdr->data_end);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 456) stack_len = ntohl(hdr->stack_size);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 457) if (extra_stack) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 458) stack_len += *extra_stack;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 459) *extra_stack = stack_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 460) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 461) relocs = ntohl(hdr->reloc_count);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 462) flags = ntohl(hdr->flags);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 463) rev = ntohl(hdr->rev);
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 464) full_data = data_len + relocs * sizeof(unsigned long);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 465)
845884d332c06 (Greg Ungerer 2006-01-10 16:59:37 +1000 466) if (strncmp(hdr->magic, "bFLT", 4)) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 467) /*
e2a366dc5cead (Mike Frysinger 2008-02-14 19:31:29 -0800 468) * Previously, here was a printk to tell people
e2a366dc5cead (Mike Frysinger 2008-02-14 19:31:29 -0800 469) * "BINFMT_FLAT: bad header magic".
e2a366dc5cead (Mike Frysinger 2008-02-14 19:31:29 -0800 470) * But for the kernel which also use ELF FD-PIC format, this
e2a366dc5cead (Mike Frysinger 2008-02-14 19:31:29 -0800 471) * error message is confusing.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 472) * because a lot of people do not manage to produce good
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 473) */
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 474) ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 475) goto err;
845884d332c06 (Greg Ungerer 2006-01-10 16:59:37 +1000 476) }
845884d332c06 (Greg Ungerer 2006-01-10 16:59:37 +1000 477)
845884d332c06 (Greg Ungerer 2006-01-10 16:59:37 +1000 478) if (flags & FLAT_FLAG_KTRACE)
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 479) pr_info("Loading file: %s\n", bprm->filename);
845884d332c06 (Greg Ungerer 2006-01-10 16:59:37 +1000 480)
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 481) #ifdef CONFIG_BINFMT_FLAT_OLD
845884d332c06 (Greg Ungerer 2006-01-10 16:59:37 +1000 482) if (rev != FLAT_VERSION && rev != OLD_FLAT_VERSION) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 483) pr_err("bad flat file version 0x%x (supported 0x%lx and 0x%lx)\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 484) rev, FLAT_VERSION, OLD_FLAT_VERSION);
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 485) ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 486) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 487) }
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 488)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 489) /* Don't allow old format executables to use shared libraries */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 490) if (rev == OLD_FLAT_VERSION && id != 0) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 491) pr_err("shared libraries are not available before rev 0x%lx\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 492) FLAT_VERSION);
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 493) ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 494) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 495) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 496)
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 497) /*
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 498) * fix up the flags for the older format, there were all kinds
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 499) * of endian hacks, this only works for the simple cases
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 500) */
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 501) if (rev == OLD_FLAT_VERSION &&
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 502) (flags || IS_ENABLED(CONFIG_BINFMT_FLAT_OLD_ALWAYS_RAM)))
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 503) flags = FLAT_FLAG_RAM;
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 504)
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 505) #else /* CONFIG_BINFMT_FLAT_OLD */
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 506) if (rev != FLAT_VERSION) {
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 507) pr_err("bad flat file version 0x%x (supported 0x%lx)\n",
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 508) rev, FLAT_VERSION);
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 509) ret = -ENOEXEC;
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 510) goto err;
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 511) }
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 512) #endif /* !CONFIG_BINFMT_FLAT_OLD */
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 513)
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 514) /*
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 515) * Make sure the header params are sane.
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 516) * 28 bits (256 MB) is way more than reasonable in this case.
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 517) * If some top bits are set we have probable binary corruption.
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 518) */
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 519) if ((text_len | data_len | bss_len | stack_len | full_data) >> 28) {
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 520) pr_err("bad header\n");
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 521) ret = -ENOEXEC;
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 522) goto err;
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 523) }
c995ee28d29d6 (Nicolas Pitre 2016-07-24 11:30:17 -0400 524)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 525) #ifndef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 526) if (flags & (FLAT_FLAG_GZIP|FLAT_FLAG_GZDATA)) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 527) pr_err("Support for ZFLAT executables is not enabled.\n");
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 528) ret = -ENOEXEC;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 529) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 530) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 531) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 532)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 533) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 534) * Check initial limits. This avoids letting people circumvent
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 535) * size limits imposed on them by creating programs with large
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 536) * arrays in the data or bss.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 537) */
d554ed895dc8f (Jiri Slaby 2010-03-05 13:42:42 -0800 538) rlim = rlimit(RLIMIT_DATA);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 539) if (rlim >= RLIM_INFINITY)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 540) rlim = ~0;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 541) if (data_len + bss_len > rlim) {
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 542) ret = -ENOMEM;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 543) goto err;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 544) }
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 545)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 546) /* Flush all traces of the currently running executable */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 547) if (id == 0) {
2388777a0a595 (Eric W. Biederman 2020-05-03 07:54:10 -0500 548) ret = begin_new_exec(bprm);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 549) if (ret)
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 550) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 551)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 552) /* OK, This is the point of no return */
fcc18e83e1f6f (Malcolm Parsons 2006-06-26 11:49:41 +1000 553) set_personality(PER_LINUX_32BIT);
221af7f87b974 (Linus Torvalds 2010-01-28 22:14:42 -0800 554) setup_new_exec(bprm);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 555) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 556)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 557) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 558) * calculate the extra space we need to map in
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 559) */
0e647c04f665e (Andrew Morton 2007-10-16 23:27:26 -0700 560) extra = max_t(unsigned long, bss_len + stack_len,
0e647c04f665e (Andrew Morton 2007-10-16 23:27:26 -0700 561) relocs * sizeof(unsigned long));
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 562)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 563) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 564) * there are a couple of cases here, the separate code/data
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 565) * case, and then the fully copied to RAM case which lumps
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 566) * it all together.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 567) */
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 568) if (!IS_ENABLED(CONFIG_MMU) && !(flags & (FLAT_FLAG_RAM|FLAT_FLAG_GZIP))) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 569) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 570) * this should give us a ROM ptr, but if it doesn't we don't
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 571) * really care
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 572) */
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 573) pr_debug("ROM mapping of file (we hope)\n");
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 574)
6be5ceb02e98e (Linus Torvalds 2012-04-20 17:13:58 -0700 575) textpos = vm_mmap(bprm->file, 0, text_len, PROT_READ|PROT_EXEC,
925d1c401fa6c (Matt Helsley 2008-04-29 01:01:36 -0700 576) MAP_PRIVATE|MAP_EXECUTABLE, 0);
0b8c78f2bfa6e (Mike Frysinger 2009-09-23 15:57:07 -0700 577) if (!textpos || IS_ERR_VALUE(textpos)) {
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 578) ret = textpos;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 579) if (!textpos)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 580) ret = -ENOMEM;
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 581) pr_err("Unable to mmap process text, errno %d\n", ret);
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 582) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 583) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 584)
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 585) len = data_len + extra +
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 586) DATA_START_OFFSET_WORDS * sizeof(unsigned long);
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 587) len = PAGE_ALIGN(len);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 588) realdatastart = vm_mmap(NULL, 0, len,
72613e5f44adf (Greg Ungerer 2007-02-07 12:03:08 +1000 589) PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE, 0);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 590)
0b8c78f2bfa6e (Mike Frysinger 2009-09-23 15:57:07 -0700 591) if (realdatastart == 0 || IS_ERR_VALUE(realdatastart)) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 592) ret = realdatastart;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 593) if (!realdatastart)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 594) ret = -ENOMEM;
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 595) pr_err("Unable to allocate RAM for process data, "
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 596) "errno %d\n", ret);
7696e0c37f431 (Al Viro 2012-05-30 01:56:23 -0400 597) vm_munmap(textpos, text_len);
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 598) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 599) }
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 600) datapos = ALIGN(realdatastart +
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 601) DATA_START_OFFSET_WORDS * sizeof(unsigned long),
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 602) FLAT_DATA_ALIGN);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 603)
a86054236d356 (Geert Uytterhoeven 2017-07-16 13:57:27 +0200 604) pr_debug("Allocated data+bss+stack (%u bytes): %lx\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 605) data_len + bss_len + stack_len, datapos);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 606)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 607) fpos = ntohl(hdr->data_start);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 608) #ifdef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 609) if (flags & FLAT_FLAG_GZDATA) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 610) result = decompress_exec(bprm, fpos, (char *)datapos,
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 611) full_data, 0);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 612) } else
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 613) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 614) {
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 615) result = read_code(bprm->file, datapos, fpos,
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 616) full_data);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 617) }
0b8c78f2bfa6e (Mike Frysinger 2009-09-23 15:57:07 -0700 618) if (IS_ERR_VALUE(result)) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 619) ret = result;
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 620) pr_err("Unable to read data+bss, errno %d\n", ret);
7696e0c37f431 (Al Viro 2012-05-30 01:56:23 -0400 621) vm_munmap(textpos, text_len);
7696e0c37f431 (Al Viro 2012-05-30 01:56:23 -0400 622) vm_munmap(realdatastart, len);
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 623) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 624) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 625)
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 626) reloc = (__be32 __user *)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 627) (datapos + (ntohl(hdr->reloc_start) - text_len));
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 628) memp = realdatastart;
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 629) memp_size = len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 630) } else {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 631)
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 632) len = text_len + data_len + extra +
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 633) DATA_START_OFFSET_WORDS * sizeof(u32);
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 634) len = PAGE_ALIGN(len);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 635) textpos = vm_mmap(NULL, 0, len,
72613e5f44adf (Greg Ungerer 2007-02-07 12:03:08 +1000 636) PROT_READ | PROT_EXEC | PROT_WRITE, MAP_PRIVATE, 0);
72613e5f44adf (Greg Ungerer 2007-02-07 12:03:08 +1000 637)
0b8c78f2bfa6e (Mike Frysinger 2009-09-23 15:57:07 -0700 638) if (!textpos || IS_ERR_VALUE(textpos)) {
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 639) ret = textpos;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 640) if (!textpos)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 641) ret = -ENOMEM;
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 642) pr_err("Unable to allocate RAM for process text/data, "
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 643) "errno %d\n", ret);
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 644) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 645) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 646)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 647) realdatastart = textpos + ntohl(hdr->data_start);
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 648) datapos = ALIGN(realdatastart +
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 649) DATA_START_OFFSET_WORDS * sizeof(u32),
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 650) FLAT_DATA_ALIGN);
c3dc5bec05a2a (Oskar Schirmer 2009-05-28 14:34:31 -0700 651)
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 652) reloc = (__be32 __user *)
c3dc5bec05a2a (Oskar Schirmer 2009-05-28 14:34:31 -0700 653) (datapos + (ntohl(hdr->reloc_start) - text_len));
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 654) memp = textpos;
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 655) memp_size = len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 656) #ifdef CONFIG_BINFMT_ZFLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 657) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 658) * load it all in and treat it like a RAM load from now on
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 659) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 660) if (flags & FLAT_FLAG_GZIP) {
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 661) #ifndef CONFIG_MMU
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 662) result = decompress_exec(bprm, sizeof(struct flat_hdr),
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 663) (((char *)textpos) + sizeof(struct flat_hdr)),
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 664) (text_len + full_data
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 665) - sizeof(struct flat_hdr)),
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 666) 0);
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 667) memmove((void *) datapos, (void *) realdatastart,
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 668) full_data);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 669) #else
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 670) /*
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 671) * This is used on MMU systems mainly for testing.
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 672) * Let's use a kernel buffer to simplify things.
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 673) */
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 674) long unz_text_len = text_len - sizeof(struct flat_hdr);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 675) long unz_len = unz_text_len + full_data;
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 676) char *unz_data = vmalloc(unz_len);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 677) if (!unz_data) {
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 678) result = -ENOMEM;
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 679) } else {
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 680) result = decompress_exec(bprm, sizeof(struct flat_hdr),
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 681) unz_data, unz_len, 0);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 682) if (result == 0 &&
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 683) (copy_to_user((void __user *)textpos + sizeof(struct flat_hdr),
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 684) unz_data, unz_text_len) ||
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 685) copy_to_user((void __user *)datapos,
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 686) unz_data + unz_text_len, full_data)))
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 687) result = -EFAULT;
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 688) vfree(unz_data);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 689) }
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 690) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 691) } else if (flags & FLAT_FLAG_GZDATA) {
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 692) result = read_code(bprm->file, textpos, 0, text_len);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 693) if (!IS_ERR_VALUE(result)) {
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 694) #ifndef CONFIG_MMU
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 695) result = decompress_exec(bprm, text_len, (char *) datapos,
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 696) full_data, 0);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 697) #else
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 698) char *unz_data = vmalloc(full_data);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 699) if (!unz_data) {
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 700) result = -ENOMEM;
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 701) } else {
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 702) result = decompress_exec(bprm, text_len,
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 703) unz_data, full_data, 0);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 704) if (result == 0 &&
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 705) copy_to_user((void __user *)datapos,
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 706) unz_data, full_data))
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 707) result = -EFAULT;
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 708) vfree(unz_data);
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 709) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 710) #endif
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 711) }
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 712) } else
472f95f32d5aa (Nicolas Pitre 2016-07-24 11:30:26 -0400 713) #endif /* CONFIG_BINFMT_ZFLAT */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 714) {
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 715) result = read_code(bprm->file, textpos, 0, text_len);
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 716) if (!IS_ERR_VALUE(result))
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 717) result = read_code(bprm->file, datapos,
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 718) ntohl(hdr->data_start),
3dc20cb282ec0 (Al Viro 2013-04-13 20:31:37 -0400 719) full_data);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 720) }
0b8c78f2bfa6e (Mike Frysinger 2009-09-23 15:57:07 -0700 721) if (IS_ERR_VALUE(result)) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 722) ret = result;
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 723) pr_err("Unable to read code+data+bss, errno %d\n", ret);
2217b98262468 (Max Filippov 2020-08-08 11:37:13 -0700 724) vm_munmap(textpos, text_len + data_len + extra +
04d82a6d0881e (Damien Le Moal 2021-04-17 10:10:08 +0900 725) DATA_START_OFFSET_WORDS * sizeof(u32));
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 726) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 727) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 728) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 729)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 730) start_code = textpos + sizeof(struct flat_hdr);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 731) end_code = textpos + text_len;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 732) text_len -= sizeof(struct flat_hdr); /* the real code len */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 733)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 734) /* The main program needs a little extra setup in the task structure */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 735) if (id == 0) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 736) current->mm->start_code = start_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 737) current->mm->end_code = end_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 738) current->mm->start_data = datapos;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 739) current->mm->end_data = datapos + data_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 740) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 741) * set up the brk stuff, uses any slack left in data/bss/stack
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 742) * allocation. We put the brk after the bss (between the bss
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 743) * and stack) like other platforms.
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 744) * Userspace code relies on the stack pointer starting out at
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 745) * an address right at the end of a page.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 746) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 747) current->mm->start_brk = datapos + data_len + bss_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 748) current->mm->brk = (current->mm->start_brk + 3) & ~3;
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 749) #ifndef CONFIG_MMU
0f3e442a403a3 (David Howells 2009-01-08 12:04:47 +0000 750) current->mm->context.end_brk = memp + memp_size - stack_len;
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 751) #endif
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 752) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 753)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 754) if (flags & FLAT_FLAG_KTRACE) {
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 755) pr_info("Mapping is %lx, Entry point is %x, data_start is %x\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 756) textpos, 0x00ffffff&ntohl(hdr->entry), ntohl(hdr->data_start));
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 757) pr_info("%s %s: TEXT=%lx-%lx DATA=%lx-%lx BSS=%lx-%lx\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 758) id ? "Lib" : "Load", bprm->filename,
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 759) start_code, end_code, datapos, datapos + data_len,
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 760) datapos + data_len, (datapos + data_len + bss_len + 3) & ~3);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 761) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 762)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 763) /* Store the current module values into the global library structure */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 764) libinfo->lib_list[id].start_code = start_code;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 765) libinfo->lib_list[id].start_data = datapos;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 766) libinfo->lib_list[id].start_brk = datapos + data_len + bss_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 767) libinfo->lib_list[id].text_len = text_len;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 768) libinfo->lib_list[id].loaded = 1;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 769) libinfo->lib_list[id].entry = (0x00ffffff & ntohl(hdr->entry)) + textpos;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 770) libinfo->lib_list[id].build_date = ntohl(hdr->build_date);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 771)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 772) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 773) * We just load the allocations into some temporary memory to
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 774) * help simplify all this mumbo jumbo
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 775) *
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 776) * We've got two different sections of relocation entries.
25985edcedea6 (Lucas De Marchi 2011-03-30 22:57:33 -0300 777) * The first is the GOT which resides at the beginning of the data segment
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 778) * and is terminated with a -1. This one can be relocated in place.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 779) * The second is the extra relocation entries tacked after the image's
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 780) * data segment. These require a little more processing as the entry is
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 781) * really an offset into the image which contains an offset into the
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 782) * image.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 783) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 784) if (flags & FLAT_FLAG_GOTPIC) {
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 785) for (rp = (u32 __user *)datapos; ; rp++) {
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 786) u32 addr, rp_val;
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 787) if (get_user(rp_val, rp))
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 788) return -EFAULT;
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 789) if (rp_val == 0xffffffff)
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 790) break;
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 791) if (rp_val) {
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 792) addr = calc_reloc(rp_val, libinfo, id, 0);
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 793) if (addr == RELOC_FAILED) {
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 794) ret = -ENOEXEC;
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 795) goto err;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 796) }
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 797) if (put_user(addr, rp))
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 798) return -EFAULT;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 799) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 800) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 801) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 802)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 803) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 804) * Now run through the relocation entries.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 805) * We've got to be careful here as C++ produces relocatable zero
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 806) * entries in the constructor and destructor tables which are then
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 807) * tested for being not zero (which will always occur unless we're
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 808) * based from address zero). This causes an endless loop as __start
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 809) * is at zero. The solution used is to not relocate zero addresses.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 810) * This has the negative side effect of not allowing a global data
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 811) * reference to be statically initialised to _stext (I've moved
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 812) * __start to address 4 so that is okay).
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 813) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 814) if (rev > OLD_FLAT_VERSION) {
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 815) for (i = 0; i < relocs; i++) {
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 816) u32 addr, relval;
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 817) __be32 tmp;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 818)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 819) /*
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 820) * Get the address of the pointer to be
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 821) * relocated (of course, the address has to be
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 822) * relocated first).
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 823) */
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 824) if (get_user(tmp, reloc + i))
6e572ffe3feb8 (Nicolas Pitre 2016-07-24 11:30:21 -0400 825) return -EFAULT;
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 826) relval = ntohl(tmp);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 827) addr = flat_get_relocate_addr(relval);
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 828) rp = (u32 __user *)calc_reloc(addr, libinfo, id, 1);
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 829) if (rp == (u32 __user *)RELOC_FAILED) {
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 830) ret = -ENOEXEC;
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 831) goto err;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 832) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 833)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 834) /* Get the pointer's value. */
6843d8aa5b9bc (Christoph Hellwig 2019-06-13 09:09:00 +0200 835) ret = flat_get_addr_from_rp(rp, relval, flags, &addr);
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 836) if (unlikely(ret))
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 837) goto err;
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 838)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 839) if (addr != 0) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 840) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 841) * Do the relocation. PIC relocs in the data section are
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 842) * already in target order
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 843) */
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 844) if ((flags & FLAT_FLAG_GOTPIC) == 0) {
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 845) /*
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 846) * Meh, the same value can have a different
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 847) * byte order based on a flag..
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 848) */
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 849) addr = ntohl((__force __be32)addr);
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 850) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 851) addr = calc_reloc(addr, libinfo, id, 0);
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 852) if (addr == RELOC_FAILED) {
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 853) ret = -ENOEXEC;
df88912a2165f (Andrew Morton 2006-05-20 15:00:01 -0700 854) goto err;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 855) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 856)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 857) /* Write back the relocated pointer. */
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 858) ret = flat_put_addr_at_rp(rp, addr, relval);
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 859) if (unlikely(ret))
468138d785106 (Al Viro 2017-05-02 19:52:17 -0400 860) goto err;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 861) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 862) }
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 863) #ifdef CONFIG_BINFMT_FLAT_OLD
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 864) } else {
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 865) for (i = 0; i < relocs; i++) {
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 866) __be32 relval;
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 867) if (get_user(relval, reloc + i))
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 868) return -EFAULT;
3b9777184232a (Christoph Hellwig 2019-06-13 09:08:56 +0200 869) old_reloc(ntohl(relval));
1b2ce442ea96b (Nicolas Pitre 2016-07-24 11:30:22 -0400 870) }
cf9a566c2c06a (Christoph Hellwig 2019-06-13 09:08:58 +0200 871) #endif /* CONFIG_BINFMT_FLAT_OLD */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 872) }
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 873)
79ef1e1fffebc (Christoph Hellwig 2020-06-07 21:42:46 -0700 874) flush_icache_user_range(start_code, end_code);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 875)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 876) /* zero the BSS, BRK and stack areas */
467aa1465a7b9 (Nicolas Pitre 2016-07-24 11:30:23 -0400 877) if (clear_user((void __user *)(datapos + data_len), bss_len +
467aa1465a7b9 (Nicolas Pitre 2016-07-24 11:30:23 -0400 878) (memp + memp_size - stack_len - /* end brk */
467aa1465a7b9 (Nicolas Pitre 2016-07-24 11:30:23 -0400 879) libinfo->lib_list[id].start_brk) + /* start brk */
467aa1465a7b9 (Nicolas Pitre 2016-07-24 11:30:23 -0400 880) stack_len))
467aa1465a7b9 (Nicolas Pitre 2016-07-24 11:30:23 -0400 881) return -EFAULT;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 882)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 883) return 0;
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 884) err:
1ad3dcc09c88c (Luke Yang 2006-03-25 03:08:24 -0800 885) return ret;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 886) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 887)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 888)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 889) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 890) #ifdef CONFIG_BINFMT_SHARED_FLAT
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 891)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 892) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 893) * Load a shared library into memory. The library gets its own data
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 894) * segment (including bss) but not argv/argc/environ.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 895) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 896)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 897) static int load_flat_shared_library(int id, struct lib_info *libs)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 898) {
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 899) /*
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 900) * This is a fake bprm struct; only the members "buf", "file" and
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 901) * "filename" are actually used.
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 902) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 903) struct linux_binprm bprm;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 904) int res;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 905) char buf[16];
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 906) loff_t pos = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 907)
3a852d3bd53e7 (David Howells 2011-04-28 16:26:38 +0100 908) memset(&bprm, 0, sizeof(bprm));
3a852d3bd53e7 (David Howells 2011-04-28 16:26:38 +0100 909)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 910) /* Create the file name */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 911) sprintf(buf, "/lib/lib%d.so", id);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 912)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 913) /* Open the file up */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 914) bprm.filename = buf;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 915) bprm.file = open_exec(bprm.filename);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 916) res = PTR_ERR(bprm.file);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 917) if (IS_ERR(bprm.file))
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 918) return res;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 919)
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 920) res = kernel_read(bprm.file, bprm.buf, BINPRM_BUF_SIZE, &pos);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 921)
867bfa4a5fcee (Jann Horn 2019-06-28 12:06:46 -0700 922) if (res >= 0)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 923) res = load_flat_file(&bprm, libs, id, NULL);
3440625d78711 (Linus Torvalds 2009-08-06 15:09:34 -0700 924)
3440625d78711 (Linus Torvalds 2009-08-06 15:09:34 -0700 925) allow_write_access(bprm.file);
3440625d78711 (Linus Torvalds 2009-08-06 15:09:34 -0700 926) fput(bprm.file);
3440625d78711 (Linus Torvalds 2009-08-06 15:09:34 -0700 927)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 928) return res;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 929) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 930)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 931) #endif /* CONFIG_BINFMT_SHARED_FLAT */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 932) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 933)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 934) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 935) * These are the functions used to load flat style executables and shared
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 936) * libraries. There is no binary dependent code anywhere else.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 937) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 938)
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 939) static int load_flat_binary(struct linux_binprm *bprm)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 940) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 941) struct lib_info libinfo;
71613c3b871c5 (Al Viro 2012-10-20 22:00:48 -0400 942) struct pt_regs *regs = current_pt_regs();
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 943) unsigned long stack_len = 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 944) unsigned long start_addr;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 945) int res;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 946) int i, j;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 947)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 948) memset(&libinfo, 0, sizeof(libinfo));
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 949)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 950) /*
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 951) * We have to add the size of our arguments to our stack size
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 952) * otherwise it's too easy for users to create stack overflows
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 953) * by passing in a huge argument list. And yes, we have to be
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 954) * pedantic and include space for the argv/envp array as it may have
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 955) * a lot of entries.
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 956) */
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 957) #ifndef CONFIG_MMU
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 958) stack_len += PAGE_SIZE * MAX_ARG_PAGES - bprm->p; /* the strings */
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 959) #endif
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 960) stack_len += (bprm->argc + 1) * sizeof(char *); /* the argv array */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 961) stack_len += (bprm->envc + 1) * sizeof(char *); /* the envp array */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 962) stack_len = ALIGN(stack_len, FLAT_STACK_ALIGN);
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 963)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 964) res = load_flat_file(bprm, &libinfo, 0, &stack_len);
287980e49ffc0 (Arnd Bergmann 2016-05-27 23:23:25 +0200 965) if (res < 0)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 966) return res;
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 967)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 968) /* Update data segment pointers for all libraries */
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 969) for (i = 0; i < MAX_SHARED_LIBS; i++) {
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 970) if (!libinfo.lib_list[i].loaded)
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 971) continue;
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 972) for (j = 0; j < MAX_SHARED_LIBS; j++) {
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 973) unsigned long val = libinfo.lib_list[j].loaded ?
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 974) libinfo.lib_list[j].start_data : UNLOADED_LIB;
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 975) unsigned long __user *p = (unsigned long __user *)
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 976) libinfo.lib_list[i].start_data;
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 977) p -= j + 1;
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 978) if (put_user(val, p))
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 979) return -EFAULT;
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 980) }
af521f92dcf63 (Nicolas Pitre 2016-07-24 11:30:24 -0400 981) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 982)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 983) set_binfmt(&flat_format);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 984)
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 985) #ifdef CONFIG_MMU
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 986) res = setup_arg_pages(bprm, STACK_TOP, EXSTACK_DEFAULT);
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 987) if (!res)
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 988) res = create_flat_tables(bprm, bprm->p);
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 989) #else
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 990) /* Stash our initial stack pointer into the mm structure */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 991) current->mm->start_stack =
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 992) ((current->mm->context.end_brk + stack_len + 3) & ~3) - 4;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 993) pr_debug("sp=%lx\n", current->mm->start_stack);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 994)
687fd7738ec32 (Nicolas Pitre 2016-07-24 11:30:19 -0400 995) /* copy the arg pages onto the stack */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 996) res = transfer_args_to_stack(bprm, ¤t->mm->start_stack);
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 997) if (!res)
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 998) res = create_flat_tables(bprm, current->mm->start_stack);
015feacf93210 (Nicolas Pitre 2016-07-24 11:30:25 -0400 999) #endif
687fd7738ec32 (Nicolas Pitre 2016-07-24 11:30:19 -0400 1000) if (res)
687fd7738ec32 (Nicolas Pitre 2016-07-24 11:30:19 -0400 1001) return res;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1002)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1003) /* Fake some return addresses to ensure the call chain will
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1004) * initialise library in order for us. We are required to call
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1005) * lib 1 first, then 2, ... and finally the main program (id 0).
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1006) */
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1007) start_addr = libinfo.lib_list[0].entry;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1008)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1009) #ifdef CONFIG_BINFMT_SHARED_FLAT
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 1010) for (i = MAX_SHARED_LIBS-1; i > 0; i--) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1011) if (libinfo.lib_list[i].loaded) {
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1012) /* Push previos first to call address */
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 1013) unsigned long __user *sp;
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 1014) current->mm->start_stack -= sizeof(unsigned long);
a97d157d00cd0 (Nicolas Pitre 2016-07-24 11:30:20 -0400 1015) sp = (unsigned long __user *)current->mm->start_stack;
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 1016) if (put_user(start_addr, sp))
8861fd576ecf9 (Al Viro 2020-02-19 09:32:55 -0500 1017) return -EFAULT;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1018) start_addr = libinfo.lib_list[i].entry;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1019) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1020) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1021) #endif
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 1022)
74c27c43ebd02 (Takashi YOSHII 2008-08-11 20:10:54 +0900 1023) #ifdef FLAT_PLAT_INIT
74c27c43ebd02 (Takashi YOSHII 2008-08-11 20:10:54 +0900 1024) FLAT_PLAT_INIT(regs);
74c27c43ebd02 (Takashi YOSHII 2008-08-11 20:10:54 +0900 1025) #endif
13c3f50c914e6 (Nicolas Pitre 2016-07-24 11:30:15 -0400 1026)
b83838313386f (Kees Cook 2018-04-10 16:34:57 -0700 1027) finalize_exec(bprm);
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 1028) pr_debug("start_thread(regs=0x%p, entry=0x%lx, start_stack=0x%lx)\n",
4adbb6ac4b807 (Nicolas Pitre 2016-07-24 11:30:16 -0400 1029) regs, start_addr, current->mm->start_stack);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1030) start_thread(regs, start_addr, current->mm->start_stack);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1031)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1032) return 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1033) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1034)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1035) /****************************************************************************/
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1036)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1037) static int __init init_flat_binfmt(void)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1038) {
8fc3dc5a3a17a (Al Viro 2012-03-17 03:05:16 -0400 1039) register_binfmt(&flat_format);
8fc3dc5a3a17a (Al Viro 2012-03-17 03:05:16 -0400 1040) return 0;
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1041) }
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1042) core_initcall(init_flat_binfmt);
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1043)
^1da177e4c3f4 (Linus Torvalds 2005-04-16 15:20:36 -0700 1044) /****************************************************************************/