1 /* This is the Linux kernel elf-loading code, ported into user space */
2
3 #include "qemu/osdep.h"
4
5 #include "qemu.h"
6 #include "disas/disas.h"
7 #include "qemu/path.h"
8
9 #ifdef _ARCH_PPC64
10 #undef ARCH_DLINFO
11 #undef ELF_PLATFORM
12 #undef ELF_HWCAP
13 #undef ELF_CLASS
14 #undef ELF_DATA
15 #undef ELF_ARCH
16 #endif
17
18 /* from personality.h */
19
20 /*
21 * Flags for bug emulation.
22 *
23 * These occupy the top three bytes.
24 */
25 enum {
26 ADDR_NO_RANDOMIZE = 0x0040000, /* disable randomization of VA space */
27 FDPIC_FUNCPTRS = 0x0080000, /* userspace function ptrs point to descriptors
28 * (signal handling)
29 */
30 MMAP_PAGE_ZERO = 0x0100000,
31 ADDR_COMPAT_LAYOUT = 0x0200000,
32 READ_IMPLIES_EXEC = 0x0400000,
33 ADDR_LIMIT_32BIT = 0x0800000,
34 SHORT_INODE = 0x1000000,
35 WHOLE_SECONDS = 0x2000000,
36 STICKY_TIMEOUTS = 0x4000000,
37 ADDR_LIMIT_3GB = 0x8000000,
38 };
39
40 /*
41 * Personality types.
42 *
43 * These go in the low byte. Avoid using the top bit, it will
44 * conflict with error returns.
45 */
46 enum {
47 PER_LINUX = 0x0000,
48 PER_LINUX_32BIT = 0x0000 | ADDR_LIMIT_32BIT,
49 PER_LINUX_FDPIC = 0x0000 | FDPIC_FUNCPTRS,
50 PER_SVR4 = 0x0001 | STICKY_TIMEOUTS | MMAP_PAGE_ZERO,
51 PER_SVR3 = 0x0002 | STICKY_TIMEOUTS | SHORT_INODE,
52 PER_SCOSVR3 = 0x0003 | STICKY_TIMEOUTS |
53 WHOLE_SECONDS | SHORT_INODE,
54 PER_OSR5 = 0x0003 | STICKY_TIMEOUTS | WHOLE_SECONDS,
55 PER_WYSEV386 = 0x0004 | STICKY_TIMEOUTS | SHORT_INODE,
56 PER_ISCR4 = 0x0005 | STICKY_TIMEOUTS,
57 PER_BSD = 0x0006,
58 PER_SUNOS = 0x0006 | STICKY_TIMEOUTS,
59 PER_XENIX = 0x0007 | STICKY_TIMEOUTS | SHORT_INODE,
60 PER_LINUX32 = 0x0008,
61 PER_LINUX32_3GB = 0x0008 | ADDR_LIMIT_3GB,
62 PER_IRIX32 = 0x0009 | STICKY_TIMEOUTS,/* IRIX5 32-bit */
63 PER_IRIXN32 = 0x000a | STICKY_TIMEOUTS,/* IRIX6 new 32-bit */
64 PER_IRIX64 = 0x000b | STICKY_TIMEOUTS,/* IRIX6 64-bit */
65 PER_RISCOS = 0x000c,
66 PER_SOLARIS = 0x000d | STICKY_TIMEOUTS,
67 PER_UW7 = 0x000e | STICKY_TIMEOUTS | MMAP_PAGE_ZERO,
68 PER_OSF4 = 0x000f, /* OSF/1 v4 */
69 PER_HPUX = 0x0010,
70 PER_MASK = 0x00ff,
71 };
72
73 /*
74 * Return the base personality without flags.
75 */
76 #define personality(pers) (pers & PER_MASK)
77
78 /* this flag is uneffective under linux too, should be deleted */
79 #ifndef MAP_DENYWRITE
80 #define MAP_DENYWRITE 0
81 #endif
82
83 /* should probably go in elf.h */
84 #ifndef ELIBBAD
85 #define ELIBBAD 80
86 #endif
87
88 #ifdef TARGET_I386
89
90 #define ELF_PLATFORM get_elf_platform()
91
get_elf_platform(void)92 static const char *get_elf_platform(void)
93 {
94 static char elf_platform[] = "i386";
95 int family = object_property_get_int(OBJECT(thread_cpu), "family", NULL);
96 if (family > 6)
97 family = 6;
98 if (family >= 3)
99 elf_platform[1] = '0' + family;
100 return elf_platform;
101 }
102
103 #define ELF_HWCAP get_elf_hwcap()
104
get_elf_hwcap(void)105 static uint32_t get_elf_hwcap(void)
106 {
107 X86CPU *cpu = X86_CPU(thread_cpu);
108
109 return cpu->env.features[FEAT_1_EDX];
110 }
111
112 #ifdef TARGET_X86_64
113 #define ELF_START_MMAP 0x2aaaaab000ULL
114 #define elf_check_arch(x) ( ((x) == ELF_ARCH) )
115
116 #define ELF_CLASS ELFCLASS64
117 #define ELF_DATA ELFDATA2LSB
118 #define ELF_ARCH EM_X86_64
119
init_thread(struct target_pt_regs * regs,struct image_info * infop)120 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
121 {
122 regs->rax = 0;
123 regs->rsp = infop->start_stack;
124 regs->rip = infop->entry;
125 if (bsd_type == target_freebsd) {
126 regs->rdi = infop->start_stack;
127 }
128 }
129
130 #else
131
132 #define ELF_START_MMAP 0x80000000
133
134 /*
135 * This is used to ensure we don't load something for the wrong architecture.
136 */
137 #define elf_check_arch(x) ( ((x) == EM_386) || ((x) == EM_486) )
138
139 /*
140 * These are used to set parameters in the core dumps.
141 */
142 #define ELF_CLASS ELFCLASS32
143 #define ELF_DATA ELFDATA2LSB
144 #define ELF_ARCH EM_386
145
init_thread(struct target_pt_regs * regs,struct image_info * infop)146 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
147 {
148 regs->esp = infop->start_stack;
149 regs->eip = infop->entry;
150
151 /* SVR4/i386 ABI (pages 3-31, 3-32) says that when the program
152 starts %edx contains a pointer to a function which might be
153 registered using `atexit'. This provides a mean for the
154 dynamic linker to call DT_FINI functions for shared libraries
155 that have been loaded before the code runs.
156
157 A value of 0 tells we have no such handler. */
158 regs->edx = 0;
159 }
160 #endif
161
162 #define USE_ELF_CORE_DUMP
163 #define ELF_EXEC_PAGESIZE 4096
164
165 #endif
166
167 #ifdef TARGET_ARM
168
169 #define ELF_START_MMAP 0x80000000
170
171 #define elf_check_arch(x) ( (x) == EM_ARM )
172
173 #define ELF_CLASS ELFCLASS32
174 #ifdef TARGET_WORDS_BIGENDIAN
175 #define ELF_DATA ELFDATA2MSB
176 #else
177 #define ELF_DATA ELFDATA2LSB
178 #endif
179 #define ELF_ARCH EM_ARM
180
init_thread(struct target_pt_regs * regs,struct image_info * infop)181 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
182 {
183 abi_long stack = infop->start_stack;
184 memset(regs, 0, sizeof(*regs));
185 regs->ARM_cpsr = 0x10;
186 if (infop->entry & 1)
187 regs->ARM_cpsr |= CPSR_T;
188 regs->ARM_pc = infop->entry & 0xfffffffe;
189 regs->ARM_sp = infop->start_stack;
190 /* FIXME - what to for failure of get_user()? */
191 get_user_ual(regs->ARM_r2, stack + 8); /* envp */
192 get_user_ual(regs->ARM_r1, stack + 4); /* envp */
193 /* XXX: it seems that r0 is zeroed after ! */
194 regs->ARM_r0 = 0;
195 /* For uClinux PIC binaries. */
196 /* XXX: Linux does this only on ARM with no MMU (do we care ?) */
197 regs->ARM_r10 = infop->start_data;
198 }
199
200 #define USE_ELF_CORE_DUMP
201 #define ELF_EXEC_PAGESIZE 4096
202
203 enum
204 {
205 ARM_HWCAP_ARM_SWP = 1 << 0,
206 ARM_HWCAP_ARM_HALF = 1 << 1,
207 ARM_HWCAP_ARM_THUMB = 1 << 2,
208 ARM_HWCAP_ARM_26BIT = 1 << 3,
209 ARM_HWCAP_ARM_FAST_MULT = 1 << 4,
210 ARM_HWCAP_ARM_FPA = 1 << 5,
211 ARM_HWCAP_ARM_VFP = 1 << 6,
212 ARM_HWCAP_ARM_EDSP = 1 << 7,
213 };
214
215 #define ELF_HWCAP (ARM_HWCAP_ARM_SWP | ARM_HWCAP_ARM_HALF \
216 | ARM_HWCAP_ARM_THUMB | ARM_HWCAP_ARM_FAST_MULT \
217 | ARM_HWCAP_ARM_FPA | ARM_HWCAP_ARM_VFP)
218
219 #endif
220
221 #ifdef TARGET_SPARC
222 #ifdef TARGET_SPARC64
223
224 #define ELF_START_MMAP 0x80000000
225
226 #ifndef TARGET_ABI32
227 #define elf_check_arch(x) ( (x) == EM_SPARCV9 || (x) == EM_SPARC32PLUS )
228 #else
229 #define elf_check_arch(x) ( (x) == EM_SPARC32PLUS || (x) == EM_SPARC )
230 #endif
231
232 #define ELF_CLASS ELFCLASS64
233 #define ELF_DATA ELFDATA2MSB
234 #define ELF_ARCH EM_SPARCV9
235
236 #define STACK_BIAS 2047
237
init_thread(struct target_pt_regs * regs,struct image_info * infop)238 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
239 {
240 #ifndef TARGET_ABI32
241 regs->tstate = 0;
242 #endif
243 regs->pc = infop->entry;
244 regs->npc = regs->pc + 4;
245 regs->y = 0;
246 #ifdef TARGET_ABI32
247 regs->u_regs[14] = infop->start_stack - 16 * 4;
248 #else
249 if (personality(infop->personality) == PER_LINUX32)
250 regs->u_regs[14] = infop->start_stack - 16 * 4;
251 else {
252 regs->u_regs[14] = infop->start_stack - 16 * 8 - STACK_BIAS;
253 if (bsd_type == target_freebsd) {
254 regs->u_regs[8] = infop->start_stack;
255 regs->u_regs[11] = infop->start_stack;
256 }
257 }
258 #endif
259 }
260
261 #else
262 #define ELF_START_MMAP 0x80000000
263
264 #define elf_check_arch(x) ( (x) == EM_SPARC )
265
266 #define ELF_CLASS ELFCLASS32
267 #define ELF_DATA ELFDATA2MSB
268 #define ELF_ARCH EM_SPARC
269
init_thread(struct target_pt_regs * regs,struct image_info * infop)270 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
271 {
272 regs->psr = 0;
273 regs->pc = infop->entry;
274 regs->npc = regs->pc + 4;
275 regs->y = 0;
276 regs->u_regs[14] = infop->start_stack - 16 * 4;
277 }
278
279 #endif
280 #endif
281
282 #ifdef TARGET_PPC
283
284 #define ELF_START_MMAP 0x80000000
285
286 #if defined(TARGET_PPC64) && !defined(TARGET_ABI32)
287
288 #define elf_check_arch(x) ( (x) == EM_PPC64 )
289
290 #define ELF_CLASS ELFCLASS64
291
292 #else
293
294 #define elf_check_arch(x) ( (x) == EM_PPC )
295
296 #define ELF_CLASS ELFCLASS32
297
298 #endif
299
300 #ifdef TARGET_WORDS_BIGENDIAN
301 #define ELF_DATA ELFDATA2MSB
302 #else
303 #define ELF_DATA ELFDATA2LSB
304 #endif
305 #define ELF_ARCH EM_PPC
306
307 /*
308 * We need to put in some extra aux table entries to tell glibc what
309 * the cache block size is, so it can use the dcbz instruction safely.
310 */
311 #define AT_DCACHEBSIZE 19
312 #define AT_ICACHEBSIZE 20
313 #define AT_UCACHEBSIZE 21
314 /* A special ignored type value for PPC, for glibc compatibility. */
315 #define AT_IGNOREPPC 22
316 /*
317 * The requirements here are:
318 * - keep the final alignment of sp (sp & 0xf)
319 * - make sure the 32-bit value at the first 16 byte aligned position of
320 * AUXV is greater than 16 for glibc compatibility.
321 * AT_IGNOREPPC is used for that.
322 * - for compatibility with glibc ARCH_DLINFO must always be defined on PPC,
323 * even if DLINFO_ARCH_ITEMS goes to zero or is undefined.
324 */
325 #define DLINFO_ARCH_ITEMS 5
326 #define ARCH_DLINFO \
327 do { \
328 NEW_AUX_ENT(AT_DCACHEBSIZE, 0x20); \
329 NEW_AUX_ENT(AT_ICACHEBSIZE, 0x20); \
330 NEW_AUX_ENT(AT_UCACHEBSIZE, 0); \
331 /* \
332 * Now handle glibc compatibility. \
333 */ \
334 NEW_AUX_ENT(AT_IGNOREPPC, AT_IGNOREPPC); \
335 NEW_AUX_ENT(AT_IGNOREPPC, AT_IGNOREPPC); \
336 } while (0)
337
init_thread(struct target_pt_regs * _regs,struct image_info * infop)338 static inline void init_thread(struct target_pt_regs *_regs, struct image_info *infop)
339 {
340 abi_ulong pos = infop->start_stack;
341 abi_ulong tmp;
342 #if defined(TARGET_PPC64) && !defined(TARGET_ABI32)
343 abi_ulong entry, toc;
344 #endif
345
346 _regs->gpr[1] = infop->start_stack;
347 #if defined(TARGET_PPC64) && !defined(TARGET_ABI32)
348 get_user_u64(entry, infop->entry);
349 entry += infop->load_addr;
350 get_user_u64(toc, infop->entry + 8);
351 toc += infop->load_addr;
352 _regs->gpr[2] = toc;
353 infop->entry = entry;
354 #endif
355 _regs->nip = infop->entry;
356 /* Note that isn't exactly what regular kernel does
357 * but this is what the ABI wants and is needed to allow
358 * execution of PPC BSD programs.
359 */
360 /* FIXME - what to for failure of get_user()? */
361 get_user_ual(_regs->gpr[3], pos);
362 pos += sizeof(abi_ulong);
363 _regs->gpr[4] = pos;
364 for (tmp = 1; tmp != 0; pos += sizeof(abi_ulong)) {
365 get_user_ual(tmp, pos);
366 }
367 _regs->gpr[5] = pos;
368 }
369
370 #define USE_ELF_CORE_DUMP
371 #define ELF_EXEC_PAGESIZE 4096
372
373 #endif
374
375 #ifdef TARGET_MIPS
376
377 #define ELF_START_MMAP 0x80000000
378
379 #define elf_check_arch(x) ( (x) == EM_MIPS )
380
381 #ifdef TARGET_MIPS64
382 #define ELF_CLASS ELFCLASS64
383 #else
384 #define ELF_CLASS ELFCLASS32
385 #endif
386 #ifdef TARGET_WORDS_BIGENDIAN
387 #define ELF_DATA ELFDATA2MSB
388 #else
389 #define ELF_DATA ELFDATA2LSB
390 #endif
391 #define ELF_ARCH EM_MIPS
392
init_thread(struct target_pt_regs * regs,struct image_info * infop)393 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
394 {
395 regs->cp0_status = 2 << CP0St_KSU;
396 regs->cp0_epc = infop->entry;
397 regs->regs[29] = infop->start_stack;
398 }
399
400 #define USE_ELF_CORE_DUMP
401 #define ELF_EXEC_PAGESIZE 4096
402
403 #endif /* TARGET_MIPS */
404
405 #ifdef TARGET_SH4
406
407 #define ELF_START_MMAP 0x80000000
408
409 #define elf_check_arch(x) ( (x) == EM_SH )
410
411 #define ELF_CLASS ELFCLASS32
412 #define ELF_DATA ELFDATA2LSB
413 #define ELF_ARCH EM_SH
414
init_thread(struct target_pt_regs * regs,struct image_info * infop)415 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
416 {
417 /* Check other registers XXXXX */
418 regs->pc = infop->entry;
419 regs->regs[15] = infop->start_stack;
420 }
421
422 #define USE_ELF_CORE_DUMP
423 #define ELF_EXEC_PAGESIZE 4096
424
425 #endif
426
427 #ifdef TARGET_CRIS
428
429 #define ELF_START_MMAP 0x80000000
430
431 #define elf_check_arch(x) ( (x) == EM_CRIS )
432
433 #define ELF_CLASS ELFCLASS32
434 #define ELF_DATA ELFDATA2LSB
435 #define ELF_ARCH EM_CRIS
436
init_thread(struct target_pt_regs * regs,struct image_info * infop)437 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
438 {
439 regs->erp = infop->entry;
440 }
441
442 #define USE_ELF_CORE_DUMP
443 #define ELF_EXEC_PAGESIZE 8192
444
445 #endif
446
447 #ifdef TARGET_M68K
448
449 #define ELF_START_MMAP 0x80000000
450
451 #define elf_check_arch(x) ( (x) == EM_68K )
452
453 #define ELF_CLASS ELFCLASS32
454 #define ELF_DATA ELFDATA2MSB
455 #define ELF_ARCH EM_68K
456
457 /* ??? Does this need to do anything?
458 #define ELF_PLAT_INIT(_r) */
459
init_thread(struct target_pt_regs * regs,struct image_info * infop)460 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
461 {
462 regs->usp = infop->start_stack;
463 regs->sr = 0;
464 regs->pc = infop->entry;
465 }
466
467 #define USE_ELF_CORE_DUMP
468 #define ELF_EXEC_PAGESIZE 8192
469
470 #endif
471
472 #ifdef TARGET_ALPHA
473
474 #define ELF_START_MMAP (0x30000000000ULL)
475
476 #define elf_check_arch(x) ( (x) == ELF_ARCH )
477
478 #define ELF_CLASS ELFCLASS64
479 #define ELF_DATA ELFDATA2MSB
480 #define ELF_ARCH EM_ALPHA
481
init_thread(struct target_pt_regs * regs,struct image_info * infop)482 static inline void init_thread(struct target_pt_regs *regs, struct image_info *infop)
483 {
484 regs->pc = infop->entry;
485 regs->ps = 8;
486 regs->usp = infop->start_stack;
487 regs->unique = infop->start_data; /* ? */
488 printf("Set unique value to " TARGET_FMT_lx " (" TARGET_FMT_lx ")\n",
489 regs->unique, infop->start_data);
490 }
491
492 #define USE_ELF_CORE_DUMP
493 #define ELF_EXEC_PAGESIZE 8192
494
495 #endif /* TARGET_ALPHA */
496
497 #ifndef ELF_PLATFORM
498 #define ELF_PLATFORM (NULL)
499 #endif
500
501 #ifndef ELF_HWCAP
502 #define ELF_HWCAP 0
503 #endif
504
505 #ifdef TARGET_ABI32
506 #undef ELF_CLASS
507 #define ELF_CLASS ELFCLASS32
508 #undef bswaptls
509 #define bswaptls(ptr) bswap32s(ptr)
510 #endif
511
512 #include "elf.h"
513
514 struct exec
515 {
516 unsigned int a_info; /* Use macros N_MAGIC, etc for access */
517 unsigned int a_text; /* length of text, in bytes */
518 unsigned int a_data; /* length of data, in bytes */
519 unsigned int a_bss; /* length of uninitialized data area, in bytes */
520 unsigned int a_syms; /* length of symbol table data in file, in bytes */
521 unsigned int a_entry; /* start address */
522 unsigned int a_trsize; /* length of relocation info for text, in bytes */
523 unsigned int a_drsize; /* length of relocation info for data, in bytes */
524 };
525
526
527 #define N_MAGIC(exec) ((exec).a_info & 0xffff)
528 #define OMAGIC 0407
529 #define NMAGIC 0410
530 #define ZMAGIC 0413
531 #define QMAGIC 0314
532
533 /* max code+data+bss space allocated to elf interpreter */
534 #define INTERP_MAP_SIZE (32 * 1024 * 1024)
535
536 /* max code+data+bss+brk space allocated to ET_DYN executables */
537 #define ET_DYN_MAP_SIZE (128 * 1024 * 1024)
538
539 /* Necessary parameters */
540 #define TARGET_ELF_EXEC_PAGESIZE TARGET_PAGE_SIZE
541 #define TARGET_ELF_PAGESTART(_v) ((_v) & ~(unsigned long)(TARGET_ELF_EXEC_PAGESIZE-1))
542 #define TARGET_ELF_PAGEOFFSET(_v) ((_v) & (TARGET_ELF_EXEC_PAGESIZE-1))
543
544 #define INTERPRETER_NONE 0
545 #define INTERPRETER_AOUT 1
546 #define INTERPRETER_ELF 2
547
548 #define DLINFO_ITEMS 12
549
memcpy_fromfs(void * to,const void * from,unsigned long n)550 static inline void memcpy_fromfs(void * to, const void * from, unsigned long n)
551 {
552 memcpy(to, from, n);
553 }
554
555 static int load_aout_interp(void * exptr, int interp_fd);
556
557 #ifdef BSWAP_NEEDED
bswap_ehdr(struct elfhdr * ehdr)558 static void bswap_ehdr(struct elfhdr *ehdr)
559 {
560 bswap16s(&ehdr->e_type); /* Object file type */
561 bswap16s(&ehdr->e_machine); /* Architecture */
562 bswap32s(&ehdr->e_version); /* Object file version */
563 bswaptls(&ehdr->e_entry); /* Entry point virtual address */
564 bswaptls(&ehdr->e_phoff); /* Program header table file offset */
565 bswaptls(&ehdr->e_shoff); /* Section header table file offset */
566 bswap32s(&ehdr->e_flags); /* Processor-specific flags */
567 bswap16s(&ehdr->e_ehsize); /* ELF header size in bytes */
568 bswap16s(&ehdr->e_phentsize); /* Program header table entry size */
569 bswap16s(&ehdr->e_phnum); /* Program header table entry count */
570 bswap16s(&ehdr->e_shentsize); /* Section header table entry size */
571 bswap16s(&ehdr->e_shnum); /* Section header table entry count */
572 bswap16s(&ehdr->e_shstrndx); /* Section header string table index */
573 }
574
bswap_phdr(struct elf_phdr * phdr)575 static void bswap_phdr(struct elf_phdr *phdr)
576 {
577 bswap32s(&phdr->p_type); /* Segment type */
578 bswaptls(&phdr->p_offset); /* Segment file offset */
579 bswaptls(&phdr->p_vaddr); /* Segment virtual address */
580 bswaptls(&phdr->p_paddr); /* Segment physical address */
581 bswaptls(&phdr->p_filesz); /* Segment size in file */
582 bswaptls(&phdr->p_memsz); /* Segment size in memory */
583 bswap32s(&phdr->p_flags); /* Segment flags */
584 bswaptls(&phdr->p_align); /* Segment alignment */
585 }
586
bswap_shdr(struct elf_shdr * shdr)587 static void bswap_shdr(struct elf_shdr *shdr)
588 {
589 bswap32s(&shdr->sh_name);
590 bswap32s(&shdr->sh_type);
591 bswaptls(&shdr->sh_flags);
592 bswaptls(&shdr->sh_addr);
593 bswaptls(&shdr->sh_offset);
594 bswaptls(&shdr->sh_size);
595 bswap32s(&shdr->sh_link);
596 bswap32s(&shdr->sh_info);
597 bswaptls(&shdr->sh_addralign);
598 bswaptls(&shdr->sh_entsize);
599 }
600
bswap_sym(struct elf_sym * sym)601 static void bswap_sym(struct elf_sym *sym)
602 {
603 bswap32s(&sym->st_name);
604 bswaptls(&sym->st_value);
605 bswaptls(&sym->st_size);
606 bswap16s(&sym->st_shndx);
607 }
608 #endif
609
610 /*
611 * 'copy_elf_strings()' copies argument/envelope strings from user
612 * memory to free pages in kernel mem. These are in a format ready
613 * to be put directly into the top of new user memory.
614 *
615 */
copy_elf_strings(int argc,char ** argv,void ** page,abi_ulong p)616 static abi_ulong copy_elf_strings(int argc,char ** argv, void **page,
617 abi_ulong p)
618 {
619 char *tmp, *tmp1, *pag = NULL;
620 int len, offset = 0;
621
622 if (!p) {
623 return 0; /* bullet-proofing */
624 }
625 while (argc-- > 0) {
626 tmp = argv[argc];
627 if (!tmp) {
628 fprintf(stderr, "VFS: argc is wrong");
629 exit(-1);
630 }
631 tmp1 = tmp;
632 while (*tmp++);
633 len = tmp - tmp1;
634 if (p < len) { /* this shouldn't happen - 128kB */
635 return 0;
636 }
637 while (len) {
638 --p; --tmp; --len;
639 if (--offset < 0) {
640 offset = p % TARGET_PAGE_SIZE;
641 pag = (char *)page[p/TARGET_PAGE_SIZE];
642 if (!pag) {
643 pag = g_try_malloc0(TARGET_PAGE_SIZE);
644 page[p/TARGET_PAGE_SIZE] = pag;
645 if (!pag)
646 return 0;
647 }
648 }
649 if (len == 0 || offset == 0) {
650 *(pag + offset) = *tmp;
651 }
652 else {
653 int bytes_to_copy = (len > offset) ? offset : len;
654 tmp -= bytes_to_copy;
655 p -= bytes_to_copy;
656 offset -= bytes_to_copy;
657 len -= bytes_to_copy;
658 memcpy_fromfs(pag + offset, tmp, bytes_to_copy + 1);
659 }
660 }
661 }
662 return p;
663 }
664
setup_arg_pages(abi_ulong p,struct linux_binprm * bprm,struct image_info * info)665 static abi_ulong setup_arg_pages(abi_ulong p, struct linux_binprm *bprm,
666 struct image_info *info)
667 {
668 abi_ulong stack_base, size, error;
669 int i;
670
671 /* Create enough stack to hold everything. If we don't use
672 * it for args, we'll use it for something else...
673 */
674 size = x86_stack_size;
675 if (size < MAX_ARG_PAGES*TARGET_PAGE_SIZE)
676 size = MAX_ARG_PAGES*TARGET_PAGE_SIZE;
677 error = target_mmap(0,
678 size + qemu_host_page_size,
679 PROT_READ | PROT_WRITE,
680 MAP_PRIVATE | MAP_ANON,
681 -1, 0);
682 if (error == -1) {
683 perror("stk mmap");
684 exit(-1);
685 }
686 /* we reserve one extra page at the top of the stack as guard */
687 target_mprotect(error + size, qemu_host_page_size, PROT_NONE);
688
689 stack_base = error + size - MAX_ARG_PAGES*TARGET_PAGE_SIZE;
690 p += stack_base;
691
692 for (i = 0 ; i < MAX_ARG_PAGES ; i++) {
693 if (bprm->page[i]) {
694 info->rss++;
695 /* FIXME - check return value of memcpy_to_target() for failure */
696 memcpy_to_target(stack_base, bprm->page[i], TARGET_PAGE_SIZE);
697 g_free(bprm->page[i]);
698 }
699 stack_base += TARGET_PAGE_SIZE;
700 }
701 return p;
702 }
703
set_brk(abi_ulong start,abi_ulong end)704 static void set_brk(abi_ulong start, abi_ulong end)
705 {
706 /* page-align the start and end addresses... */
707 start = HOST_PAGE_ALIGN(start);
708 end = HOST_PAGE_ALIGN(end);
709 if (end <= start)
710 return;
711 if(target_mmap(start, end - start,
712 PROT_READ | PROT_WRITE | PROT_EXEC,
713 MAP_FIXED | MAP_PRIVATE | MAP_ANON, -1, 0) == -1) {
714 perror("cannot mmap brk");
715 exit(-1);
716 }
717 }
718
719
720 /* We need to explicitly zero any fractional pages after the data
721 section (i.e. bss). This would contain the junk from the file that
722 should not be in memory. */
padzero(abi_ulong elf_bss,abi_ulong last_bss)723 static void padzero(abi_ulong elf_bss, abi_ulong last_bss)
724 {
725 abi_ulong nbyte;
726
727 if (elf_bss >= last_bss)
728 return;
729
730 /* XXX: this is really a hack : if the real host page size is
731 smaller than the target page size, some pages after the end
732 of the file may not be mapped. A better fix would be to
733 patch target_mmap(), but it is more complicated as the file
734 size must be known */
735 if (qemu_real_host_page_size < qemu_host_page_size) {
736 abi_ulong end_addr, end_addr1;
737 end_addr1 = REAL_HOST_PAGE_ALIGN(elf_bss);
738 end_addr = HOST_PAGE_ALIGN(elf_bss);
739 if (end_addr1 < end_addr) {
740 mmap((void *)g2h(end_addr1), end_addr - end_addr1,
741 PROT_READ|PROT_WRITE|PROT_EXEC,
742 MAP_FIXED|MAP_PRIVATE|MAP_ANON, -1, 0);
743 }
744 }
745
746 nbyte = elf_bss & (qemu_host_page_size-1);
747 if (nbyte) {
748 nbyte = qemu_host_page_size - nbyte;
749 do {
750 /* FIXME - what to do if put_user() fails? */
751 put_user_u8(0, elf_bss);
752 elf_bss++;
753 } while (--nbyte);
754 }
755 }
756
757
create_elf_tables(abi_ulong p,int argc,int envc,struct elfhdr * exec,abi_ulong load_addr,abi_ulong load_bias,abi_ulong interp_load_addr,int ibcs,struct image_info * info)758 static abi_ulong create_elf_tables(abi_ulong p, int argc, int envc,
759 struct elfhdr * exec,
760 abi_ulong load_addr,
761 abi_ulong load_bias,
762 abi_ulong interp_load_addr, int ibcs,
763 struct image_info *info)
764 {
765 abi_ulong sp;
766 int size;
767 abi_ulong u_platform;
768 const char *k_platform;
769 const int n = sizeof(elf_addr_t);
770
771 sp = p;
772 u_platform = 0;
773 k_platform = ELF_PLATFORM;
774 if (k_platform) {
775 size_t len = strlen(k_platform) + 1;
776 sp -= (len + n - 1) & ~(n - 1);
777 u_platform = sp;
778 /* FIXME - check return value of memcpy_to_target() for failure */
779 memcpy_to_target(sp, k_platform, len);
780 }
781 /*
782 * Force 16 byte _final_ alignment here for generality.
783 */
784 sp = sp &~ (abi_ulong)15;
785 size = (DLINFO_ITEMS + 1) * 2;
786 if (k_platform)
787 size += 2;
788 #ifdef DLINFO_ARCH_ITEMS
789 size += DLINFO_ARCH_ITEMS * 2;
790 #endif
791 size += envc + argc + 2;
792 size += (!ibcs ? 3 : 1); /* argc itself */
793 size *= n;
794 if (size & 15)
795 sp -= 16 - (size & 15);
796
797 /* This is correct because Linux defines
798 * elf_addr_t as Elf32_Off / Elf64_Off
799 */
800 #define NEW_AUX_ENT(id, val) do { \
801 sp -= n; put_user_ual(val, sp); \
802 sp -= n; put_user_ual(id, sp); \
803 } while(0)
804
805 NEW_AUX_ENT (AT_NULL, 0);
806
807 /* There must be exactly DLINFO_ITEMS entries here. */
808 NEW_AUX_ENT(AT_PHDR, (abi_ulong)(load_addr + exec->e_phoff));
809 NEW_AUX_ENT(AT_PHENT, (abi_ulong)(sizeof (struct elf_phdr)));
810 NEW_AUX_ENT(AT_PHNUM, (abi_ulong)(exec->e_phnum));
811 NEW_AUX_ENT(AT_PAGESZ, (abi_ulong)(TARGET_PAGE_SIZE));
812 NEW_AUX_ENT(AT_BASE, (abi_ulong)(interp_load_addr));
813 NEW_AUX_ENT(AT_FLAGS, (abi_ulong)0);
814 NEW_AUX_ENT(AT_ENTRY, load_bias + exec->e_entry);
815 NEW_AUX_ENT(AT_UID, (abi_ulong) getuid());
816 NEW_AUX_ENT(AT_EUID, (abi_ulong) geteuid());
817 NEW_AUX_ENT(AT_GID, (abi_ulong) getgid());
818 NEW_AUX_ENT(AT_EGID, (abi_ulong) getegid());
819 NEW_AUX_ENT(AT_HWCAP, (abi_ulong) ELF_HWCAP);
820 NEW_AUX_ENT(AT_CLKTCK, (abi_ulong) sysconf(_SC_CLK_TCK));
821 if (k_platform)
822 NEW_AUX_ENT(AT_PLATFORM, u_platform);
823 #ifdef ARCH_DLINFO
824 /*
825 * ARCH_DLINFO must come last so platform specific code can enforce
826 * special alignment requirements on the AUXV if necessary (eg. PPC).
827 */
828 ARCH_DLINFO;
829 #endif
830 #undef NEW_AUX_ENT
831
832 sp = loader_build_argptr(envc, argc, sp, p, !ibcs);
833 return sp;
834 }
835
836
load_elf_interp(struct elfhdr * interp_elf_ex,int interpreter_fd,abi_ulong * interp_load_addr)837 static abi_ulong load_elf_interp(struct elfhdr * interp_elf_ex,
838 int interpreter_fd,
839 abi_ulong *interp_load_addr)
840 {
841 struct elf_phdr *elf_phdata = NULL;
842 struct elf_phdr *eppnt;
843 abi_ulong load_addr = 0;
844 int load_addr_set = 0;
845 int retval;
846 abi_ulong last_bss, elf_bss;
847 abi_ulong error;
848 int i;
849
850 elf_bss = 0;
851 last_bss = 0;
852 error = 0;
853
854 #ifdef BSWAP_NEEDED
855 bswap_ehdr(interp_elf_ex);
856 #endif
857 /* First of all, some simple consistency checks */
858 if ((interp_elf_ex->e_type != ET_EXEC &&
859 interp_elf_ex->e_type != ET_DYN) ||
860 !elf_check_arch(interp_elf_ex->e_machine)) {
861 return ~((abi_ulong)0UL);
862 }
863
864
865 /* Now read in all of the header information */
866
867 if (sizeof(struct elf_phdr) * interp_elf_ex->e_phnum > TARGET_PAGE_SIZE)
868 return ~(abi_ulong)0UL;
869
870 elf_phdata = (struct elf_phdr *)
871 malloc(sizeof(struct elf_phdr) * interp_elf_ex->e_phnum);
872
873 if (!elf_phdata)
874 return ~((abi_ulong)0UL);
875
876 /*
877 * If the size of this structure has changed, then punt, since
878 * we will be doing the wrong thing.
879 */
880 if (interp_elf_ex->e_phentsize != sizeof(struct elf_phdr)) {
881 free(elf_phdata);
882 return ~((abi_ulong)0UL);
883 }
884
885 retval = lseek(interpreter_fd, interp_elf_ex->e_phoff, SEEK_SET);
886 if(retval >= 0) {
887 retval = read(interpreter_fd,
888 (char *) elf_phdata,
889 sizeof(struct elf_phdr) * interp_elf_ex->e_phnum);
890 }
891 if (retval < 0) {
892 perror("load_elf_interp");
893 exit(-1);
894 free (elf_phdata);
895 return retval;
896 }
897 #ifdef BSWAP_NEEDED
898 eppnt = elf_phdata;
899 for (i=0; i<interp_elf_ex->e_phnum; i++, eppnt++) {
900 bswap_phdr(eppnt);
901 }
902 #endif
903
904 if (interp_elf_ex->e_type == ET_DYN) {
905 /* in order to avoid hardcoding the interpreter load
906 address in qemu, we allocate a big enough memory zone */
907 error = target_mmap(0, INTERP_MAP_SIZE,
908 PROT_NONE, MAP_PRIVATE | MAP_ANON,
909 -1, 0);
910 if (error == -1) {
911 perror("mmap");
912 exit(-1);
913 }
914 load_addr = error;
915 load_addr_set = 1;
916 }
917
918 eppnt = elf_phdata;
919 for(i=0; i<interp_elf_ex->e_phnum; i++, eppnt++)
920 if (eppnt->p_type == PT_LOAD) {
921 int elf_type = MAP_PRIVATE | MAP_DENYWRITE;
922 int elf_prot = 0;
923 abi_ulong vaddr = 0;
924 abi_ulong k;
925
926 if (eppnt->p_flags & PF_R) elf_prot = PROT_READ;
927 if (eppnt->p_flags & PF_W) elf_prot |= PROT_WRITE;
928 if (eppnt->p_flags & PF_X) elf_prot |= PROT_EXEC;
929 if (interp_elf_ex->e_type == ET_EXEC || load_addr_set) {
930 elf_type |= MAP_FIXED;
931 vaddr = eppnt->p_vaddr;
932 }
933 error = target_mmap(load_addr+TARGET_ELF_PAGESTART(vaddr),
934 eppnt->p_filesz + TARGET_ELF_PAGEOFFSET(eppnt->p_vaddr),
935 elf_prot,
936 elf_type,
937 interpreter_fd,
938 eppnt->p_offset - TARGET_ELF_PAGEOFFSET(eppnt->p_vaddr));
939
940 if (error == -1) {
941 /* Real error */
942 close(interpreter_fd);
943 free(elf_phdata);
944 return ~((abi_ulong)0UL);
945 }
946
947 if (!load_addr_set && interp_elf_ex->e_type == ET_DYN) {
948 load_addr = error;
949 load_addr_set = 1;
950 }
951
952 /*
953 * Find the end of the file mapping for this phdr, and keep
954 * track of the largest address we see for this.
955 */
956 k = load_addr + eppnt->p_vaddr + eppnt->p_filesz;
957 if (k > elf_bss) elf_bss = k;
958
959 /*
960 * Do the same thing for the memory mapping - between
961 * elf_bss and last_bss is the bss section.
962 */
963 k = load_addr + eppnt->p_memsz + eppnt->p_vaddr;
964 if (k > last_bss) last_bss = k;
965 }
966
967 /* Now use mmap to map the library into memory. */
968
969 close(interpreter_fd);
970
971 /*
972 * Now fill out the bss section. First pad the last page up
973 * to the page boundary, and then perform a mmap to make sure
974 * that there are zeromapped pages up to and including the last
975 * bss page.
976 */
977 padzero(elf_bss, last_bss);
978 elf_bss = TARGET_ELF_PAGESTART(elf_bss + qemu_host_page_size - 1); /* What we have mapped so far */
979
980 /* Map the last of the bss segment */
981 if (last_bss > elf_bss) {
982 target_mmap(elf_bss, last_bss-elf_bss,
983 PROT_READ|PROT_WRITE|PROT_EXEC,
984 MAP_FIXED|MAP_PRIVATE|MAP_ANON, -1, 0);
985 }
986 free(elf_phdata);
987
988 *interp_load_addr = load_addr;
989 return ((abi_ulong) interp_elf_ex->e_entry) + load_addr;
990 }
991
symfind(const void * s0,const void * s1)992 static int symfind(const void *s0, const void *s1)
993 {
994 target_ulong addr = *(target_ulong *)s0;
995 struct elf_sym *sym = (struct elf_sym *)s1;
996 int result = 0;
997 if (addr < sym->st_value) {
998 result = -1;
999 } else if (addr >= sym->st_value + sym->st_size) {
1000 result = 1;
1001 }
1002 return result;
1003 }
1004
lookup_symbolxx(struct syminfo * s,target_ulong orig_addr)1005 static const char *lookup_symbolxx(struct syminfo *s, target_ulong orig_addr)
1006 {
1007 #if ELF_CLASS == ELFCLASS32
1008 struct elf_sym *syms = s->disas_symtab.elf32;
1009 #else
1010 struct elf_sym *syms = s->disas_symtab.elf64;
1011 #endif
1012
1013 // binary search
1014 struct elf_sym *sym;
1015
1016 sym = bsearch(&orig_addr, syms, s->disas_num_syms, sizeof(*syms), symfind);
1017 if (sym != NULL) {
1018 return s->disas_strtab + sym->st_name;
1019 }
1020
1021 return "";
1022 }
1023
1024 /* FIXME: This should use elf_ops.h */
symcmp(const void * s0,const void * s1)1025 static int symcmp(const void *s0, const void *s1)
1026 {
1027 struct elf_sym *sym0 = (struct elf_sym *)s0;
1028 struct elf_sym *sym1 = (struct elf_sym *)s1;
1029 return (sym0->st_value < sym1->st_value)
1030 ? -1
1031 : ((sym0->st_value > sym1->st_value) ? 1 : 0);
1032 }
1033
1034 /* Best attempt to load symbols from this ELF object. */
load_symbols(struct elfhdr * hdr,int fd)1035 static void load_symbols(struct elfhdr *hdr, int fd)
1036 {
1037 unsigned int i, nsyms;
1038 struct elf_shdr sechdr, symtab, strtab;
1039 char *strings;
1040 struct syminfo *s;
1041 struct elf_sym *syms, *new_syms;
1042
1043 lseek(fd, hdr->e_shoff, SEEK_SET);
1044 for (i = 0; i < hdr->e_shnum; i++) {
1045 if (read(fd, &sechdr, sizeof(sechdr)) != sizeof(sechdr))
1046 return;
1047 #ifdef BSWAP_NEEDED
1048 bswap_shdr(&sechdr);
1049 #endif
1050 if (sechdr.sh_type == SHT_SYMTAB) {
1051 symtab = sechdr;
1052 lseek(fd, hdr->e_shoff
1053 + sizeof(sechdr) * sechdr.sh_link, SEEK_SET);
1054 if (read(fd, &strtab, sizeof(strtab))
1055 != sizeof(strtab))
1056 return;
1057 #ifdef BSWAP_NEEDED
1058 bswap_shdr(&strtab);
1059 #endif
1060 goto found;
1061 }
1062 }
1063 return; /* Shouldn't happen... */
1064
1065 found:
1066 /* Now know where the strtab and symtab are. Snarf them. */
1067 s = malloc(sizeof(*s));
1068 syms = malloc(symtab.sh_size);
1069 if (!syms) {
1070 free(s);
1071 return;
1072 }
1073 s->disas_strtab = strings = malloc(strtab.sh_size);
1074 if (!s->disas_strtab) {
1075 free(s);
1076 free(syms);
1077 return;
1078 }
1079
1080 lseek(fd, symtab.sh_offset, SEEK_SET);
1081 if (read(fd, syms, symtab.sh_size) != symtab.sh_size) {
1082 free(s);
1083 free(syms);
1084 free(strings);
1085 return;
1086 }
1087
1088 nsyms = symtab.sh_size / sizeof(struct elf_sym);
1089
1090 i = 0;
1091 while (i < nsyms) {
1092 #ifdef BSWAP_NEEDED
1093 bswap_sym(syms + i);
1094 #endif
1095 // Throw away entries which we do not need.
1096 if (syms[i].st_shndx == SHN_UNDEF ||
1097 syms[i].st_shndx >= SHN_LORESERVE ||
1098 ELF_ST_TYPE(syms[i].st_info) != STT_FUNC) {
1099 nsyms--;
1100 if (i < nsyms) {
1101 syms[i] = syms[nsyms];
1102 }
1103 continue;
1104 }
1105 #if defined(TARGET_ARM) || defined (TARGET_MIPS)
1106 /* The bottom address bit marks a Thumb or MIPS16 symbol. */
1107 syms[i].st_value &= ~(target_ulong)1;
1108 #endif
1109 i++;
1110 }
1111
1112 /* Attempt to free the storage associated with the local symbols
1113 that we threw away. Whether or not this has any effect on the
1114 memory allocation depends on the malloc implementation and how
1115 many symbols we managed to discard. */
1116 new_syms = realloc(syms, nsyms * sizeof(*syms));
1117 if (new_syms == NULL) {
1118 free(s);
1119 free(syms);
1120 free(strings);
1121 return;
1122 }
1123 syms = new_syms;
1124
1125 qsort(syms, nsyms, sizeof(*syms), symcmp);
1126
1127 lseek(fd, strtab.sh_offset, SEEK_SET);
1128 if (read(fd, strings, strtab.sh_size) != strtab.sh_size) {
1129 free(s);
1130 free(syms);
1131 free(strings);
1132 return;
1133 }
1134 s->disas_num_syms = nsyms;
1135 #if ELF_CLASS == ELFCLASS32
1136 s->disas_symtab.elf32 = syms;
1137 s->lookup_symbol = (lookup_symbol_t)lookup_symbolxx;
1138 #else
1139 s->disas_symtab.elf64 = syms;
1140 s->lookup_symbol = (lookup_symbol_t)lookup_symbolxx;
1141 #endif
1142 s->next = syminfos;
1143 syminfos = s;
1144 }
1145
load_elf_binary(struct linux_binprm * bprm,struct target_pt_regs * regs,struct image_info * info)1146 int load_elf_binary(struct linux_binprm * bprm, struct target_pt_regs * regs,
1147 struct image_info * info)
1148 {
1149 struct elfhdr elf_ex;
1150 struct elfhdr interp_elf_ex;
1151 struct exec interp_ex;
1152 int interpreter_fd = -1; /* avoid warning */
1153 abi_ulong load_addr, load_bias;
1154 int load_addr_set = 0;
1155 unsigned int interpreter_type = INTERPRETER_NONE;
1156 unsigned char ibcs2_interpreter;
1157 int i;
1158 struct elf_phdr * elf_ppnt;
1159 struct elf_phdr *elf_phdata;
1160 abi_ulong elf_bss, k, elf_brk;
1161 int retval;
1162 char * elf_interpreter;
1163 abi_ulong elf_entry, interp_load_addr = 0;
1164 abi_ulong start_code, end_code, start_data, end_data;
1165 abi_ulong reloc_func_desc = 0;
1166 #ifdef LOW_ELF_STACK
1167 abi_ulong elf_stack = ~((abi_ulong)0UL);
1168 #endif
1169 char passed_fileno[6];
1170
1171 ibcs2_interpreter = 0;
1172 load_addr = 0;
1173 load_bias = 0;
1174 elf_ex = *((struct elfhdr *) bprm->buf); /* exec-header */
1175 #ifdef BSWAP_NEEDED
1176 bswap_ehdr(&elf_ex);
1177 #endif
1178
1179 /* First of all, some simple consistency checks */
1180 if ((elf_ex.e_type != ET_EXEC && elf_ex.e_type != ET_DYN) ||
1181 (! elf_check_arch(elf_ex.e_machine))) {
1182 return -ENOEXEC;
1183 }
1184
1185 bprm->p = copy_elf_strings(1, &bprm->filename, bprm->page, bprm->p);
1186 bprm->p = copy_elf_strings(bprm->envc,bprm->envp,bprm->page,bprm->p);
1187 bprm->p = copy_elf_strings(bprm->argc,bprm->argv,bprm->page,bprm->p);
1188 if (!bprm->p) {
1189 retval = -E2BIG;
1190 }
1191
1192 /* Now read in all of the header information */
1193 elf_phdata = (struct elf_phdr *)malloc(elf_ex.e_phentsize*elf_ex.e_phnum);
1194 if (elf_phdata == NULL) {
1195 return -ENOMEM;
1196 }
1197
1198 retval = lseek(bprm->fd, elf_ex.e_phoff, SEEK_SET);
1199 if(retval > 0) {
1200 retval = read(bprm->fd, (char *) elf_phdata,
1201 elf_ex.e_phentsize * elf_ex.e_phnum);
1202 }
1203
1204 if (retval < 0) {
1205 perror("load_elf_binary");
1206 exit(-1);
1207 free (elf_phdata);
1208 return -errno;
1209 }
1210
1211 #ifdef BSWAP_NEEDED
1212 elf_ppnt = elf_phdata;
1213 for (i=0; i<elf_ex.e_phnum; i++, elf_ppnt++) {
1214 bswap_phdr(elf_ppnt);
1215 }
1216 #endif
1217 elf_ppnt = elf_phdata;
1218
1219 elf_bss = 0;
1220 elf_brk = 0;
1221
1222
1223 elf_interpreter = NULL;
1224 start_code = ~((abi_ulong)0UL);
1225 end_code = 0;
1226 start_data = 0;
1227 end_data = 0;
1228 interp_ex.a_info = 0;
1229
1230 for(i=0;i < elf_ex.e_phnum; i++) {
1231 if (elf_ppnt->p_type == PT_INTERP) {
1232 if ( elf_interpreter != NULL )
1233 {
1234 free (elf_phdata);
1235 free(elf_interpreter);
1236 close(bprm->fd);
1237 return -EINVAL;
1238 }
1239
1240 /* This is the program interpreter used for
1241 * shared libraries - for now assume that this
1242 * is an a.out format binary
1243 */
1244
1245 elf_interpreter = (char *)malloc(elf_ppnt->p_filesz);
1246
1247 if (elf_interpreter == NULL) {
1248 free (elf_phdata);
1249 close(bprm->fd);
1250 return -ENOMEM;
1251 }
1252
1253 retval = lseek(bprm->fd, elf_ppnt->p_offset, SEEK_SET);
1254 if(retval >= 0) {
1255 retval = read(bprm->fd, elf_interpreter, elf_ppnt->p_filesz);
1256 }
1257 if(retval < 0) {
1258 perror("load_elf_binary2");
1259 exit(-1);
1260 }
1261
1262 /* If the program interpreter is one of these two,
1263 then assume an iBCS2 image. Otherwise assume
1264 a native linux image. */
1265
1266 /* JRP - Need to add X86 lib dir stuff here... */
1267
1268 if (strcmp(elf_interpreter,"/usr/lib/libc.so.1") == 0 ||
1269 strcmp(elf_interpreter,"/usr/lib/ld.so.1") == 0) {
1270 ibcs2_interpreter = 1;
1271 }
1272
1273 #if 0
1274 printf("Using ELF interpreter %s\n", path(elf_interpreter));
1275 #endif
1276 if (retval >= 0) {
1277 retval = open(path(elf_interpreter), O_RDONLY);
1278 if(retval >= 0) {
1279 interpreter_fd = retval;
1280 }
1281 else {
1282 perror(elf_interpreter);
1283 exit(-1);
1284 /* retval = -errno; */
1285 }
1286 }
1287
1288 if (retval >= 0) {
1289 retval = lseek(interpreter_fd, 0, SEEK_SET);
1290 if(retval >= 0) {
1291 retval = read(interpreter_fd,bprm->buf,128);
1292 }
1293 }
1294 if (retval >= 0) {
1295 interp_ex = *((struct exec *) bprm->buf); /* aout exec-header */
1296 interp_elf_ex = *((struct elfhdr *) bprm->buf); /* elf exec-header */
1297 }
1298 if (retval < 0) {
1299 perror("load_elf_binary3");
1300 exit(-1);
1301 free (elf_phdata);
1302 free(elf_interpreter);
1303 close(bprm->fd);
1304 return retval;
1305 }
1306 }
1307 elf_ppnt++;
1308 }
1309
1310 /* Some simple consistency checks for the interpreter */
1311 if (elf_interpreter){
1312 interpreter_type = INTERPRETER_ELF | INTERPRETER_AOUT;
1313
1314 /* Now figure out which format our binary is */
1315 if ((N_MAGIC(interp_ex) != OMAGIC) && (N_MAGIC(interp_ex) != ZMAGIC) &&
1316 (N_MAGIC(interp_ex) != QMAGIC)) {
1317 interpreter_type = INTERPRETER_ELF;
1318 }
1319
1320 if (interp_elf_ex.e_ident[0] != 0x7f ||
1321 strncmp((char *)&interp_elf_ex.e_ident[1], "ELF",3) != 0) {
1322 interpreter_type &= ~INTERPRETER_ELF;
1323 }
1324
1325 if (!interpreter_type) {
1326 free(elf_interpreter);
1327 free(elf_phdata);
1328 close(bprm->fd);
1329 return -ELIBBAD;
1330 }
1331 }
1332
1333 /* OK, we are done with that, now set up the arg stuff,
1334 and then start this sucker up */
1335
1336 {
1337 char * passed_p;
1338
1339 if (interpreter_type == INTERPRETER_AOUT) {
1340 snprintf(passed_fileno, sizeof(passed_fileno), "%d", bprm->fd);
1341 passed_p = passed_fileno;
1342
1343 if (elf_interpreter) {
1344 bprm->p = copy_elf_strings(1,&passed_p,bprm->page,bprm->p);
1345 bprm->argc++;
1346 }
1347 }
1348 if (!bprm->p) {
1349 free(elf_interpreter);
1350 free (elf_phdata);
1351 close(bprm->fd);
1352 return -E2BIG;
1353 }
1354 }
1355
1356 /* OK, This is the point of no return */
1357 info->end_data = 0;
1358 info->end_code = 0;
1359 info->start_mmap = (abi_ulong)ELF_START_MMAP;
1360 info->mmap = 0;
1361 elf_entry = (abi_ulong) elf_ex.e_entry;
1362
1363 /*
1364 * In case where user has not explicitly set the guest_base, we
1365 * probe here that should we set it automatically.
1366 */
1367 if (!have_guest_base) {
1368 /*
1369 * Go through ELF program header table and find out whether
1370 * any of the segments drop below our current mmap_min_addr and
1371 * in that case set guest_base to corresponding address.
1372 */
1373 for (i = 0, elf_ppnt = elf_phdata; i < elf_ex.e_phnum;
1374 i++, elf_ppnt++) {
1375 if (elf_ppnt->p_type != PT_LOAD)
1376 continue;
1377 if (HOST_PAGE_ALIGN(elf_ppnt->p_vaddr) < mmap_min_addr) {
1378 guest_base = HOST_PAGE_ALIGN(mmap_min_addr);
1379 break;
1380 }
1381 }
1382 }
1383
1384 /* Do this so that we can load the interpreter, if need be. We will
1385 change some of these later */
1386 info->rss = 0;
1387 bprm->p = setup_arg_pages(bprm->p, bprm, info);
1388 info->start_stack = bprm->p;
1389
1390 /* Now we do a little grungy work by mmaping the ELF image into
1391 * the correct location in memory. At this point, we assume that
1392 * the image should be loaded at fixed address, not at a variable
1393 * address.
1394 */
1395
1396 for(i = 0, elf_ppnt = elf_phdata; i < elf_ex.e_phnum; i++, elf_ppnt++) {
1397 int elf_prot = 0;
1398 int elf_flags = 0;
1399 abi_ulong error;
1400
1401 if (elf_ppnt->p_type != PT_LOAD)
1402 continue;
1403
1404 if (elf_ppnt->p_flags & PF_R) elf_prot |= PROT_READ;
1405 if (elf_ppnt->p_flags & PF_W) elf_prot |= PROT_WRITE;
1406 if (elf_ppnt->p_flags & PF_X) elf_prot |= PROT_EXEC;
1407 elf_flags = MAP_PRIVATE | MAP_DENYWRITE;
1408 if (elf_ex.e_type == ET_EXEC || load_addr_set) {
1409 elf_flags |= MAP_FIXED;
1410 } else if (elf_ex.e_type == ET_DYN) {
1411 /* Try and get dynamic programs out of the way of the default mmap
1412 base, as well as whatever program they might try to exec. This
1413 is because the brk will follow the loader, and is not movable. */
1414 /* NOTE: for qemu, we do a big mmap to get enough space
1415 without hardcoding any address */
1416 error = target_mmap(0, ET_DYN_MAP_SIZE,
1417 PROT_NONE, MAP_PRIVATE | MAP_ANON,
1418 -1, 0);
1419 if (error == -1) {
1420 perror("mmap");
1421 exit(-1);
1422 }
1423 load_bias = TARGET_ELF_PAGESTART(error - elf_ppnt->p_vaddr);
1424 }
1425
1426 error = target_mmap(TARGET_ELF_PAGESTART(load_bias + elf_ppnt->p_vaddr),
1427 (elf_ppnt->p_filesz +
1428 TARGET_ELF_PAGEOFFSET(elf_ppnt->p_vaddr)),
1429 elf_prot,
1430 (MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE),
1431 bprm->fd,
1432 (elf_ppnt->p_offset -
1433 TARGET_ELF_PAGEOFFSET(elf_ppnt->p_vaddr)));
1434 if (error == -1) {
1435 perror("mmap");
1436 exit(-1);
1437 }
1438
1439 #ifdef LOW_ELF_STACK
1440 if (TARGET_ELF_PAGESTART(elf_ppnt->p_vaddr) < elf_stack)
1441 elf_stack = TARGET_ELF_PAGESTART(elf_ppnt->p_vaddr);
1442 #endif
1443
1444 if (!load_addr_set) {
1445 load_addr_set = 1;
1446 load_addr = elf_ppnt->p_vaddr - elf_ppnt->p_offset;
1447 if (elf_ex.e_type == ET_DYN) {
1448 load_bias += error -
1449 TARGET_ELF_PAGESTART(load_bias + elf_ppnt->p_vaddr);
1450 load_addr += load_bias;
1451 reloc_func_desc = load_bias;
1452 }
1453 }
1454 k = elf_ppnt->p_vaddr;
1455 if (k < start_code)
1456 start_code = k;
1457 if (start_data < k)
1458 start_data = k;
1459 k = elf_ppnt->p_vaddr + elf_ppnt->p_filesz;
1460 if (k > elf_bss)
1461 elf_bss = k;
1462 if ((elf_ppnt->p_flags & PF_X) && end_code < k)
1463 end_code = k;
1464 if (end_data < k)
1465 end_data = k;
1466 k = elf_ppnt->p_vaddr + elf_ppnt->p_memsz;
1467 if (k > elf_brk) elf_brk = k;
1468 }
1469
1470 elf_entry += load_bias;
1471 elf_bss += load_bias;
1472 elf_brk += load_bias;
1473 start_code += load_bias;
1474 end_code += load_bias;
1475 start_data += load_bias;
1476 end_data += load_bias;
1477
1478 if (elf_interpreter) {
1479 if (interpreter_type & 1) {
1480 elf_entry = load_aout_interp(&interp_ex, interpreter_fd);
1481 }
1482 else if (interpreter_type & 2) {
1483 elf_entry = load_elf_interp(&interp_elf_ex, interpreter_fd,
1484 &interp_load_addr);
1485 }
1486 reloc_func_desc = interp_load_addr;
1487
1488 close(interpreter_fd);
1489 free(elf_interpreter);
1490
1491 if (elf_entry == ~((abi_ulong)0UL)) {
1492 printf("Unable to load interpreter\n");
1493 free(elf_phdata);
1494 exit(-1);
1495 return 0;
1496 }
1497 }
1498
1499 free(elf_phdata);
1500
1501 if (qemu_log_enabled())
1502 load_symbols(&elf_ex, bprm->fd);
1503
1504 if (interpreter_type != INTERPRETER_AOUT) close(bprm->fd);
1505 info->personality = (ibcs2_interpreter ? PER_SVR4 : PER_LINUX);
1506
1507 #ifdef LOW_ELF_STACK
1508 info->start_stack = bprm->p = elf_stack - 4;
1509 #endif
1510 bprm->p = create_elf_tables(bprm->p,
1511 bprm->argc,
1512 bprm->envc,
1513 &elf_ex,
1514 load_addr, load_bias,
1515 interp_load_addr,
1516 (interpreter_type == INTERPRETER_AOUT ? 0 : 1),
1517 info);
1518 info->load_addr = reloc_func_desc;
1519 info->start_brk = info->brk = elf_brk;
1520 info->end_code = end_code;
1521 info->start_code = start_code;
1522 info->start_data = start_data;
1523 info->end_data = end_data;
1524 info->start_stack = bprm->p;
1525
1526 /* Calling set_brk effectively mmaps the pages that we need for the bss and break
1527 sections */
1528 set_brk(elf_bss, elf_brk);
1529
1530 padzero(elf_bss, elf_brk);
1531
1532 #if 0
1533 printf("(start_brk) %x\n" , info->start_brk);
1534 printf("(end_code) %x\n" , info->end_code);
1535 printf("(start_code) %x\n" , info->start_code);
1536 printf("(end_data) %x\n" , info->end_data);
1537 printf("(start_stack) %x\n" , info->start_stack);
1538 printf("(brk) %x\n" , info->brk);
1539 #endif
1540
1541 if ( info->personality == PER_SVR4 )
1542 {
1543 /* Why this, you ask??? Well SVr4 maps page 0 as read-only,
1544 and some applications "depend" upon this behavior.
1545 Since we do not have the power to recompile these, we
1546 emulate the SVr4 behavior. Sigh. */
1547 target_mmap(0, qemu_host_page_size, PROT_READ | PROT_EXEC,
1548 MAP_FIXED | MAP_PRIVATE, -1, 0);
1549 }
1550
1551 info->entry = elf_entry;
1552
1553 return 0;
1554 }
1555
load_aout_interp(void * exptr,int interp_fd)1556 static int load_aout_interp(void * exptr, int interp_fd)
1557 {
1558 printf("a.out interpreter not yet supported\n");
1559 return(0);
1560 }
1561
do_init_thread(struct target_pt_regs * regs,struct image_info * infop)1562 void do_init_thread(struct target_pt_regs *regs, struct image_info *infop)
1563 {
1564 init_thread(regs, infop);
1565 }
1566