Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * linux/fs/binfmt_aout.c |
| 3 | * |
| 4 | * Copyright (C) 1991, 1992, 1996 Linus Torvalds |
| 5 | * |
| 6 | * Hacked a bit by DaveM to make it work with 32-bit SunOS |
| 7 | * binaries on the sparc64 port. |
| 8 | */ |
| 9 | |
| 10 | #include <linux/module.h> |
| 11 | |
| 12 | #include <linux/sched.h> |
| 13 | #include <linux/kernel.h> |
| 14 | #include <linux/mm.h> |
| 15 | #include <linux/mman.h> |
| 16 | #include <linux/a.out.h> |
| 17 | #include <linux/errno.h> |
| 18 | #include <linux/signal.h> |
| 19 | #include <linux/string.h> |
| 20 | #include <linux/fs.h> |
| 21 | #include <linux/file.h> |
| 22 | #include <linux/stat.h> |
| 23 | #include <linux/fcntl.h> |
| 24 | #include <linux/ptrace.h> |
| 25 | #include <linux/user.h> |
| 26 | #include <linux/slab.h> |
| 27 | #include <linux/binfmts.h> |
| 28 | #include <linux/personality.h> |
| 29 | #include <linux/init.h> |
| 30 | |
| 31 | #include <asm/system.h> |
| 32 | #include <asm/uaccess.h> |
| 33 | #include <asm/pgalloc.h> |
| 34 | |
| 35 | static int load_aout32_binary(struct linux_binprm *, struct pt_regs * regs); |
| 36 | static int load_aout32_library(struct file*); |
| 37 | static int aout32_core_dump(long signr, struct pt_regs * regs, struct file *file); |
| 38 | |
| 39 | extern void dump_thread(struct pt_regs *, struct user *); |
| 40 | |
| 41 | static struct linux_binfmt aout32_format = { |
| 42 | NULL, THIS_MODULE, load_aout32_binary, load_aout32_library, aout32_core_dump, |
| 43 | PAGE_SIZE |
| 44 | }; |
| 45 | |
| 46 | static void set_brk(unsigned long start, unsigned long end) |
| 47 | { |
| 48 | start = PAGE_ALIGN(start); |
| 49 | end = PAGE_ALIGN(end); |
| 50 | if (end <= start) |
| 51 | return; |
| 52 | down_write(¤t->mm->mmap_sem); |
| 53 | do_brk(start, end - start); |
| 54 | up_write(¤t->mm->mmap_sem); |
| 55 | } |
| 56 | |
| 57 | /* |
| 58 | * These are the only things you should do on a core-file: use only these |
| 59 | * macros to write out all the necessary info. |
| 60 | */ |
| 61 | |
| 62 | static int dump_write(struct file *file, const void *addr, int nr) |
| 63 | { |
| 64 | return file->f_op->write(file, addr, nr, &file->f_pos) == nr; |
| 65 | } |
| 66 | |
| 67 | #define DUMP_WRITE(addr, nr) \ |
| 68 | if (!dump_write(file, (void *)(addr), (nr))) \ |
| 69 | goto end_coredump; |
| 70 | |
| 71 | #define DUMP_SEEK(offset) \ |
| 72 | if (file->f_op->llseek) { \ |
| 73 | if (file->f_op->llseek(file,(offset),0) != (offset)) \ |
| 74 | goto end_coredump; \ |
| 75 | } else file->f_pos = (offset) |
| 76 | |
| 77 | /* |
| 78 | * Routine writes a core dump image in the current directory. |
| 79 | * Currently only a stub-function. |
| 80 | * |
| 81 | * Note that setuid/setgid files won't make a core-dump if the uid/gid |
| 82 | * changed due to the set[u|g]id. It's enforced by the "current->mm->dumpable" |
| 83 | * field, which also makes sure the core-dumps won't be recursive if the |
| 84 | * dumping of the process results in another error.. |
| 85 | */ |
| 86 | |
| 87 | static int aout32_core_dump(long signr, struct pt_regs *regs, struct file *file) |
| 88 | { |
| 89 | mm_segment_t fs; |
| 90 | int has_dumped = 0; |
| 91 | unsigned long dump_start, dump_size; |
| 92 | struct user dump; |
| 93 | # define START_DATA(u) (u.u_tsize) |
| 94 | # define START_STACK(u) ((regs->u_regs[UREG_FP]) & ~(PAGE_SIZE - 1)) |
| 95 | |
| 96 | fs = get_fs(); |
| 97 | set_fs(KERNEL_DS); |
| 98 | has_dumped = 1; |
| 99 | current->flags |= PF_DUMPCORE; |
| 100 | strncpy(dump.u_comm, current->comm, sizeof(dump.u_comm)); |
| 101 | dump.signal = signr; |
| 102 | dump_thread(regs, &dump); |
| 103 | |
| 104 | /* If the size of the dump file exceeds the rlimit, then see what would happen |
| 105 | if we wrote the stack, but not the data area. */ |
| 106 | if ((dump.u_dsize+dump.u_ssize) > |
| 107 | current->signal->rlim[RLIMIT_CORE].rlim_cur) |
| 108 | dump.u_dsize = 0; |
| 109 | |
| 110 | /* Make sure we have enough room to write the stack and data areas. */ |
| 111 | if ((dump.u_ssize) > |
| 112 | current->signal->rlim[RLIMIT_CORE].rlim_cur) |
| 113 | dump.u_ssize = 0; |
| 114 | |
| 115 | /* make sure we actually have a data and stack area to dump */ |
| 116 | set_fs(USER_DS); |
| 117 | if (!access_ok(VERIFY_READ, (void __user *) START_DATA(dump), dump.u_dsize)) |
| 118 | dump.u_dsize = 0; |
| 119 | if (!access_ok(VERIFY_READ, (void __user *) START_STACK(dump), dump.u_ssize)) |
| 120 | dump.u_ssize = 0; |
| 121 | |
| 122 | set_fs(KERNEL_DS); |
| 123 | /* struct user */ |
| 124 | DUMP_WRITE(&dump,sizeof(dump)); |
| 125 | /* now we start writing out the user space info */ |
| 126 | set_fs(USER_DS); |
| 127 | /* Dump the data area */ |
| 128 | if (dump.u_dsize != 0) { |
| 129 | dump_start = START_DATA(dump); |
| 130 | dump_size = dump.u_dsize; |
| 131 | DUMP_WRITE(dump_start,dump_size); |
| 132 | } |
| 133 | /* Now prepare to dump the stack area */ |
| 134 | if (dump.u_ssize != 0) { |
| 135 | dump_start = START_STACK(dump); |
| 136 | dump_size = dump.u_ssize; |
| 137 | DUMP_WRITE(dump_start,dump_size); |
| 138 | } |
| 139 | /* Finally dump the task struct. Not be used by gdb, but could be useful */ |
| 140 | set_fs(KERNEL_DS); |
| 141 | DUMP_WRITE(current,sizeof(*current)); |
| 142 | end_coredump: |
| 143 | set_fs(fs); |
| 144 | return has_dumped; |
| 145 | } |
| 146 | |
| 147 | /* |
| 148 | * create_aout32_tables() parses the env- and arg-strings in new user |
| 149 | * memory and creates the pointer tables from them, and puts their |
| 150 | * addresses on the "stack", returning the new stack pointer value. |
| 151 | */ |
| 152 | |
| 153 | static u32 __user *create_aout32_tables(char __user *p, struct linux_binprm *bprm) |
| 154 | { |
| 155 | u32 __user *argv; |
| 156 | u32 __user *envp; |
| 157 | u32 __user *sp; |
| 158 | int argc = bprm->argc; |
| 159 | int envc = bprm->envc; |
| 160 | |
| 161 | sp = (u32 __user *)((-(unsigned long)sizeof(char *))&(unsigned long)p); |
| 162 | |
| 163 | /* This imposes the proper stack alignment for a new process. */ |
| 164 | sp = (u32 __user *) (((unsigned long) sp) & ~7); |
| 165 | if ((envc+argc+3)&1) |
| 166 | --sp; |
| 167 | |
| 168 | sp -= envc+1; |
| 169 | envp = sp; |
| 170 | sp -= argc+1; |
| 171 | argv = sp; |
| 172 | put_user(argc,--sp); |
| 173 | current->mm->arg_start = (unsigned long) p; |
| 174 | while (argc-->0) { |
| 175 | char c; |
| 176 | put_user(((u32)(unsigned long)(p)),argv++); |
| 177 | do { |
| 178 | get_user(c,p++); |
| 179 | } while (c); |
| 180 | } |
| 181 | put_user(NULL,argv); |
| 182 | current->mm->arg_end = current->mm->env_start = (unsigned long) p; |
| 183 | while (envc-->0) { |
| 184 | char c; |
| 185 | put_user(((u32)(unsigned long)(p)),envp++); |
| 186 | do { |
| 187 | get_user(c,p++); |
| 188 | } while (c); |
| 189 | } |
| 190 | put_user(NULL,envp); |
| 191 | current->mm->env_end = (unsigned long) p; |
| 192 | return sp; |
| 193 | } |
| 194 | |
| 195 | /* |
| 196 | * These are the functions used to load a.out style executables and shared |
| 197 | * libraries. There is no binary dependent code anywhere else. |
| 198 | */ |
| 199 | |
| 200 | static int load_aout32_binary(struct linux_binprm * bprm, struct pt_regs * regs) |
| 201 | { |
| 202 | struct exec ex; |
| 203 | unsigned long error; |
| 204 | unsigned long fd_offset; |
| 205 | unsigned long rlim; |
| 206 | unsigned long orig_thr_flags; |
| 207 | int retval; |
| 208 | |
| 209 | ex = *((struct exec *) bprm->buf); /* exec-header */ |
| 210 | if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != OMAGIC && |
| 211 | N_MAGIC(ex) != QMAGIC && N_MAGIC(ex) != NMAGIC) || |
| 212 | N_TRSIZE(ex) || N_DRSIZE(ex) || |
| 213 | bprm->file->f_dentry->d_inode->i_size < ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) { |
| 214 | return -ENOEXEC; |
| 215 | } |
| 216 | |
| 217 | fd_offset = N_TXTOFF(ex); |
| 218 | |
| 219 | /* Check initial limits. This avoids letting people circumvent |
| 220 | * size limits imposed on them by creating programs with large |
| 221 | * arrays in the data or bss. |
| 222 | */ |
| 223 | rlim = current->signal->rlim[RLIMIT_DATA].rlim_cur; |
| 224 | if (rlim >= RLIM_INFINITY) |
| 225 | rlim = ~0; |
| 226 | if (ex.a_data + ex.a_bss > rlim) |
| 227 | return -ENOMEM; |
| 228 | |
| 229 | /* Flush all traces of the currently running executable */ |
| 230 | retval = flush_old_exec(bprm); |
| 231 | if (retval) |
| 232 | return retval; |
| 233 | |
| 234 | /* OK, This is the point of no return */ |
| 235 | set_personality(PER_SUNOS); |
| 236 | |
| 237 | current->mm->end_code = ex.a_text + |
| 238 | (current->mm->start_code = N_TXTADDR(ex)); |
| 239 | current->mm->end_data = ex.a_data + |
| 240 | (current->mm->start_data = N_DATADDR(ex)); |
| 241 | current->mm->brk = ex.a_bss + |
| 242 | (current->mm->start_brk = N_BSSADDR(ex)); |
| 243 | |
| 244 | set_mm_counter(current->mm, rss, 0); |
| 245 | current->mm->mmap = NULL; |
| 246 | compute_creds(bprm); |
| 247 | current->flags &= ~PF_FORKNOEXEC; |
| 248 | if (N_MAGIC(ex) == NMAGIC) { |
| 249 | loff_t pos = fd_offset; |
| 250 | /* Fuck me plenty... */ |
| 251 | down_write(¤t->mm->mmap_sem); |
| 252 | error = do_brk(N_TXTADDR(ex), ex.a_text); |
| 253 | up_write(¤t->mm->mmap_sem); |
| 254 | bprm->file->f_op->read(bprm->file, (char __user *)N_TXTADDR(ex), |
| 255 | ex.a_text, &pos); |
| 256 | down_write(¤t->mm->mmap_sem); |
| 257 | error = do_brk(N_DATADDR(ex), ex.a_data); |
| 258 | up_write(¤t->mm->mmap_sem); |
| 259 | bprm->file->f_op->read(bprm->file, (char __user *)N_DATADDR(ex), |
| 260 | ex.a_data, &pos); |
| 261 | goto beyond_if; |
| 262 | } |
| 263 | |
| 264 | if (N_MAGIC(ex) == OMAGIC) { |
| 265 | loff_t pos = fd_offset; |
| 266 | down_write(¤t->mm->mmap_sem); |
| 267 | do_brk(N_TXTADDR(ex) & PAGE_MASK, |
| 268 | ex.a_text+ex.a_data + PAGE_SIZE - 1); |
| 269 | up_write(¤t->mm->mmap_sem); |
| 270 | bprm->file->f_op->read(bprm->file, (char __user *)N_TXTADDR(ex), |
| 271 | ex.a_text+ex.a_data, &pos); |
| 272 | } else { |
| 273 | static unsigned long error_time; |
| 274 | if ((ex.a_text & 0xfff || ex.a_data & 0xfff) && |
| 275 | (N_MAGIC(ex) != NMAGIC) && (jiffies-error_time) > 5*HZ) |
| 276 | { |
| 277 | printk(KERN_NOTICE "executable not page aligned\n"); |
| 278 | error_time = jiffies; |
| 279 | } |
| 280 | |
| 281 | if (!bprm->file->f_op->mmap) { |
| 282 | loff_t pos = fd_offset; |
| 283 | down_write(¤t->mm->mmap_sem); |
| 284 | do_brk(0, ex.a_text+ex.a_data); |
| 285 | up_write(¤t->mm->mmap_sem); |
| 286 | bprm->file->f_op->read(bprm->file, |
| 287 | (char __user *)N_TXTADDR(ex), |
| 288 | ex.a_text+ex.a_data, &pos); |
| 289 | goto beyond_if; |
| 290 | } |
| 291 | |
| 292 | down_write(¤t->mm->mmap_sem); |
| 293 | error = do_mmap(bprm->file, N_TXTADDR(ex), ex.a_text, |
| 294 | PROT_READ | PROT_EXEC, |
| 295 | MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | MAP_EXECUTABLE, |
| 296 | fd_offset); |
| 297 | up_write(¤t->mm->mmap_sem); |
| 298 | |
| 299 | if (error != N_TXTADDR(ex)) { |
| 300 | send_sig(SIGKILL, current, 0); |
| 301 | return error; |
| 302 | } |
| 303 | |
| 304 | down_write(¤t->mm->mmap_sem); |
| 305 | error = do_mmap(bprm->file, N_DATADDR(ex), ex.a_data, |
| 306 | PROT_READ | PROT_WRITE | PROT_EXEC, |
| 307 | MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | MAP_EXECUTABLE, |
| 308 | fd_offset + ex.a_text); |
| 309 | up_write(¤t->mm->mmap_sem); |
| 310 | if (error != N_DATADDR(ex)) { |
| 311 | send_sig(SIGKILL, current, 0); |
| 312 | return error; |
| 313 | } |
| 314 | } |
| 315 | beyond_if: |
| 316 | set_binfmt(&aout32_format); |
| 317 | |
| 318 | set_brk(current->mm->start_brk, current->mm->brk); |
| 319 | |
| 320 | /* Make sure STACK_TOP returns the right thing. */ |
| 321 | orig_thr_flags = current_thread_info()->flags; |
| 322 | current_thread_info()->flags |= _TIF_32BIT; |
| 323 | |
| 324 | retval = setup_arg_pages(bprm, STACK_TOP, EXSTACK_DEFAULT); |
| 325 | if (retval < 0) { |
| 326 | current_thread_info()->flags = orig_thr_flags; |
| 327 | |
| 328 | /* Someone check-me: is this error path enough? */ |
| 329 | send_sig(SIGKILL, current, 0); |
| 330 | return retval; |
| 331 | } |
| 332 | |
| 333 | current->mm->start_stack = |
| 334 | (unsigned long) create_aout32_tables((char __user *)bprm->p, bprm); |
| 335 | if (!(orig_thr_flags & _TIF_32BIT)) { |
| 336 | unsigned long pgd_cache = get_pgd_cache(current->mm->pgd); |
| 337 | |
| 338 | __asm__ __volatile__("stxa\t%0, [%1] %2\n\t" |
| 339 | "membar #Sync" |
| 340 | : /* no outputs */ |
| 341 | : "r" (pgd_cache), |
| 342 | "r" (TSB_REG), "i" (ASI_DMMU)); |
| 343 | } |
| 344 | start_thread32(regs, ex.a_entry, current->mm->start_stack); |
| 345 | if (current->ptrace & PT_PTRACED) |
| 346 | send_sig(SIGTRAP, current, 0); |
| 347 | return 0; |
| 348 | } |
| 349 | |
| 350 | /* N.B. Move to .h file and use code in fs/binfmt_aout.c? */ |
| 351 | static int load_aout32_library(struct file *file) |
| 352 | { |
| 353 | struct inode * inode; |
| 354 | unsigned long bss, start_addr, len; |
| 355 | unsigned long error; |
| 356 | int retval; |
| 357 | struct exec ex; |
| 358 | |
| 359 | inode = file->f_dentry->d_inode; |
| 360 | |
| 361 | retval = -ENOEXEC; |
| 362 | error = kernel_read(file, 0, (char *) &ex, sizeof(ex)); |
| 363 | if (error != sizeof(ex)) |
| 364 | goto out; |
| 365 | |
| 366 | /* We come in here for the regular a.out style of shared libraries */ |
| 367 | if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != QMAGIC) || N_TRSIZE(ex) || |
| 368 | N_DRSIZE(ex) || ((ex.a_entry & 0xfff) && N_MAGIC(ex) == ZMAGIC) || |
| 369 | inode->i_size < ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) { |
| 370 | goto out; |
| 371 | } |
| 372 | |
| 373 | if (N_MAGIC(ex) == ZMAGIC && N_TXTOFF(ex) && |
| 374 | (N_TXTOFF(ex) < inode->i_sb->s_blocksize)) { |
| 375 | printk("N_TXTOFF < BLOCK_SIZE. Please convert library\n"); |
| 376 | goto out; |
| 377 | } |
| 378 | |
| 379 | if (N_FLAGS(ex)) |
| 380 | goto out; |
| 381 | |
| 382 | /* For QMAGIC, the starting address is 0x20 into the page. We mask |
| 383 | this off to get the starting address for the page */ |
| 384 | |
| 385 | start_addr = ex.a_entry & 0xfffff000; |
| 386 | |
| 387 | /* Now use mmap to map the library into memory. */ |
| 388 | down_write(¤t->mm->mmap_sem); |
| 389 | error = do_mmap(file, start_addr, ex.a_text + ex.a_data, |
| 390 | PROT_READ | PROT_WRITE | PROT_EXEC, |
| 391 | MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE, |
| 392 | N_TXTOFF(ex)); |
| 393 | up_write(¤t->mm->mmap_sem); |
| 394 | retval = error; |
| 395 | if (error != start_addr) |
| 396 | goto out; |
| 397 | |
| 398 | len = PAGE_ALIGN(ex.a_text + ex.a_data); |
| 399 | bss = ex.a_text + ex.a_data + ex.a_bss; |
| 400 | if (bss > len) { |
| 401 | down_write(¤t->mm->mmap_sem); |
| 402 | error = do_brk(start_addr + len, bss - len); |
| 403 | up_write(¤t->mm->mmap_sem); |
| 404 | retval = error; |
| 405 | if (error != start_addr + len) |
| 406 | goto out; |
| 407 | } |
| 408 | retval = 0; |
| 409 | out: |
| 410 | return retval; |
| 411 | } |
| 412 | |
| 413 | static int __init init_aout32_binfmt(void) |
| 414 | { |
| 415 | return register_binfmt(&aout32_format); |
| 416 | } |
| 417 | |
| 418 | static void __exit exit_aout32_binfmt(void) |
| 419 | { |
| 420 | unregister_binfmt(&aout32_format); |
| 421 | } |
| 422 | |
| 423 | module_init(init_aout32_binfmt); |
| 424 | module_exit(exit_aout32_binfmt); |