1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 
22 /*
23  *	Copyright (c) 1988 AT&T
24  *	  All Rights Reserved
25  *
26  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
27  * Use is subject to license terms.
28  */
29 #pragma ident	"%Z%%M%	%I%	%E% SMI"
30 
31 /*
32  * set-up for relocations
33  */
34 #include	<string.h>
35 #include	<stdio.h>
36 #include	<alloca.h>
37 #include	<reloc.h>
38 #include	<debug.h>
39 #include	"msg.h"
40 #include	"_libld.h"
41 
42 /*
43  * Structure to hold copy relocation items.
44  */
45 typedef struct copy_rel {
46 	Sym_desc *	copyrel_symd;	/* symbol descriptor to be copied */
47 	Addr 		copyrel_stval;	/* Original symbol value */
48 } Copy_rel;
49 
50 /*
51  * For each copy relocation symbol, determine if the symbol is:
52  * 	1) to be *disp* relocated at runtime
53  *	2) a reference symbol for *disp* relocation
54  *	3) possibly *disp* relocated at ld time.
55  *
56  * The first and the second are serious errors.
57  */
58 static void
59 is_disp_copied(Ofl_desc *ofl, Copy_rel *cpy)
60 {
61 	Ifl_desc	*ifl = cpy->copyrel_symd->sd_file;
62 	Sym_desc	*sdp = cpy->copyrel_symd;
63 	Is_desc		*irel;
64 	Addr		symaddr = cpy->copyrel_stval;
65 	Listnode	*lnp1;
66 
67 	/*
68 	 * This symbol may not be *disp* relocated at run time, but could
69 	 * already have been *disp* relocated when the shared object was
70 	 * created.  Warn the user.
71 	 */
72 	if ((ifl->ifl_flags & FLG_IF_DISPDONE) &&
73 	    (ofl->ofl_flags & FLG_OF_VERBOSE))
74 		eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_REL_DISPREL2),
75 		    conv_reloc_type(ifl->ifl_ehdr->e_machine, M_R_COPY, 0),
76 		    ifl->ifl_name, demangle(sdp->sd_name));
77 
78 	if ((ifl->ifl_flags & FLG_IF_DISPPEND) == 0)
79 		return;
80 
81 	/*
82 	 * Traverse the input relocation sections.
83 	 */
84 	for (LIST_TRAVERSE(&ifl->ifl_relsect, lnp1, irel)) {
85 		Sym_desc	*rsdp;
86 		Is_desc		*trel;
87 		Rel		*rend, *reloc;
88 		Xword		rsize, entsize;
89 
90 		trel = ifl->ifl_isdesc[irel->is_shdr->sh_info];
91 		rsize = irel->is_shdr->sh_size;
92 		entsize = irel->is_shdr->sh_entsize;
93 		reloc = (Rel *)irel->is_indata->d_buf;
94 
95 		/*
96 		 * Decide entry size
97 		 */
98 		if ((entsize == 0) || (entsize > rsize)) {
99 			if (irel->is_shdr->sh_type == SHT_RELA)
100 				entsize = sizeof (Rela);
101 			else
102 				entsize = sizeof (Rel);
103 		}
104 
105 		/*
106 		 * Traverse the relocation entries.
107 		 */
108 		for (rend = (Rel *)((uintptr_t)reloc + (uintptr_t)rsize);
109 		    reloc < rend;
110 		    reloc = (Rel *)((uintptr_t)reloc + (uintptr_t)entsize)) {
111 			const char	*str;
112 			Word		rstndx;
113 
114 			if (IS_PC_RELATIVE(ELF_R_TYPE(reloc->r_info)) == 0)
115 				continue;
116 
117 			/*
118 			 * First, check if this symbol is reference symbol
119 			 * for this relocation entry.
120 			 */
121 			rstndx = (Word) ELF_R_SYM(reloc->r_info);
122 			rsdp = ifl->ifl_oldndx[rstndx];
123 			if (rsdp == sdp) {
124 				if ((str = demangle(rsdp->sd_name)) !=
125 				    rsdp->sd_name) {
126 					char	*_str = alloca(strlen(str) + 1);
127 					(void) strcpy(_str, str);
128 					str = (const char *)_str;
129 				}
130 				eprintf(ofl->ofl_lml,
131 				    ERR_WARNING, MSG_INTL(MSG_REL_DISPREL1),
132 				    conv_reloc_type(ifl->ifl_ehdr->e_machine,
133 				    (uint_t)ELF_R_TYPE(reloc->r_info), 0),
134 				    ifl->ifl_name, str,
135 				    MSG_INTL(MSG_STR_UNKNOWN),
136 				    EC_XWORD(reloc->r_offset),
137 				    demangle(sdp->sd_name));
138 			}
139 
140 			/*
141 			 * Then check if this relocation entry is relocating
142 			 * this symbol.
143 			 */
144 			if ((sdp->sd_isc != trel) ||
145 			    (reloc->r_offset < symaddr) ||
146 			    (reloc->r_offset >=
147 			    (symaddr + sdp->sd_sym->st_size)))
148 				continue;
149 
150 			/*
151 			 * This symbol is truely *disp* relocated, so should
152 			 * really be fixed by user.
153 			 */
154 			if ((str = demangle(sdp->sd_name)) != sdp->sd_name) {
155 				char	*_str = alloca(strlen(str) + 1);
156 				(void) strcpy(_str, str);
157 				str = (const char *)_str;
158 			}
159 			eprintf(ofl->ofl_lml, ERR_WARNING,
160 			    MSG_INTL(MSG_REL_DISPREL1),
161 			    conv_reloc_type(ifl->ifl_ehdr->e_machine,
162 			    (uint_t)ELF_R_TYPE(reloc->r_info), 0),
163 			    ifl->ifl_name, demangle(rsdp->sd_name), str,
164 			    EC_XWORD(reloc->r_offset), str);
165 		}
166 	}
167 }
168 
169 /*
170  * The number of symbols provided by some objects can be very large.  Use a
171  * binary search to match the associated value to a symbol table entry.
172  */
173 static int
174 disp_bsearch(const void *key, const void *array)
175 {
176 	Addr		kvalue, avalue;
177 	Ssv_desc	*ssvp = (Ssv_desc *)array;
178 
179 	kvalue = *((Addr *)key);
180 	avalue = ssvp->ssv_value;
181 
182 	if (avalue > kvalue)
183 		return (-1);
184 	if ((avalue < kvalue) &&
185 	    ((avalue + ssvp->ssv_sdp->sd_sym->st_size) <= kvalue))
186 		return (1);
187 	return (0);
188 }
189 
190 /*
191  * Given a sorted list of symbols, look for a symbol in which the relocation
192  * offset falls between the [sym.st_value - sym.st_value + sym.st_size].  Since
193  * the symbol list is maintained in sorted order,  we can bail once the
194  * relocation offset becomes less than the symbol values.  The symbol is
195  * returned for use in error diagnostics.
196  */
197 static Sym_desc *
198 disp_scansyms(Ifl_desc * ifl, Rel_desc *rld, Boolean rlocal, int inspect,
199     Ofl_desc *ofl)
200 {
201 	Sym_desc	*tsdp, *rsdp;
202 	Sym		*rsym, *tsym;
203 	Ssv_desc	*ssvp;
204 	uchar_t		rtype, ttype;
205 	Addr		value;
206 
207 	/*
208 	 * Sorted symbol values have been uniquified by adding their associated
209 	 * section offset.  Uniquify the relocation offset by adding its
210 	 * associated section offset, and search for the symbol.
211 	 */
212 	value = rld->rel_roffset;
213 	if (rld->rel_isdesc->is_shdr)
214 		value += rld->rel_isdesc->is_shdr->sh_offset;
215 
216 	if ((ssvp = bsearch((void *)&value, (void *)ifl->ifl_sortsyms,
217 	    ifl->ifl_sortcnt, sizeof (Ssv_desc), &disp_bsearch)) != 0)
218 		tsdp = ssvp->ssv_sdp;
219 	else
220 		tsdp = 0;
221 
222 	if (inspect)
223 		return (tsdp);
224 
225 	/*
226 	 * Determine the relocation reference symbol and its type.
227 	 */
228 	rsdp = rld->rel_sym;
229 	rsym = rsdp->sd_sym;
230 	rtype = ELF_ST_TYPE(rsym->st_info);
231 
232 	/*
233 	 * If there is no target symbol to match the relocation offset, then the
234 	 * offset is effectively local data.  If the relocation symbol is global
235 	 * data we have a potential for this displacement relocation to be
236 	 * invalidated should the global symbol be copied.
237 	 */
238 	if (tsdp == 0) {
239 		if ((rlocal == TRUE) ||
240 		    ((rtype != STT_OBJECT) && (rtype != STT_SECTION)))
241 		return (tsdp);
242 	} else {
243 		/*
244 		 * If both symbols are local, no copy relocations can occur to
245 		 * either symbol.
246 		 */
247 		if ((rlocal == TRUE) && ((tsdp->sd_flags1 & FLG_SY1_LOCL) ||
248 		    ((ofl->ofl_flags & FLG_OF_AUTOLCL) &&
249 		    (tsdp->sd_flags1 & FLG_SY1_GLOB) == 0) ||
250 		    (ELF_ST_BIND(tsdp->sd_sym->st_info) != STB_GLOBAL)))
251 			return (tsdp);
252 
253 		/*
254 		 * Determine the relocation target symbols type.
255 		 */
256 		tsym = tsdp->sd_sym;
257 		ttype = ELF_ST_TYPE(tsym->st_info);
258 
259 		/*
260 		 * If the reference symbol is local, and the target isn't a
261 		 * data element, then no copy relocations can occur to either
262 		 * symbol.  Note, this catches pc-relative relocations against
263 		 * the _GLOBAL_OFFSET_TABLE_, which is effectively treated as
264 		 * a local symbol.
265 		 */
266 		if ((rlocal == TRUE) && (ttype != STT_OBJECT) &&
267 		    (ttype != STT_SECTION))
268 			return (tsdp);
269 
270 		/*
271 		 * Finally, one of the symbols must reference a data element.
272 		 */
273 		if ((rtype != STT_OBJECT) && (rtype != STT_SECTION) &&
274 		    (ttype != STT_OBJECT) && (ttype != STT_SECTION))
275 			return (tsdp);
276 	}
277 
278 	/*
279 	 * We have two global symbols, at least one of which is a data item.
280 	 * The last case where a displacement relocation can be ignored, is
281 	 * if the reference symbol is included in the target symbol.
282 	 */
283 	value = rsym->st_value;
284 	value += rld->rel_raddend;
285 
286 	if ((rld->rel_roffset >= value) &&
287 	    (rld->rel_roffset < (value + rsym->st_size)))
288 		return (tsdp);
289 
290 	/*
291 	 * We have a displacement relocation that could be compromised by a
292 	 * copy relocation of one of the associated data items.
293 	 */
294 	rld->rel_flags |= FLG_REL_DISP;
295 	return (tsdp);
296 }
297 
298 void
299 ld_disp_errmsg(const char *msg, Rel_desc *rsp, Ofl_desc *ofl)
300 {
301 	Sym_desc	*sdp;
302 	const char	*str;
303 	Ifl_desc	*ifl = rsp->rel_isdesc->is_file;
304 
305 	if ((sdp = disp_scansyms(ifl, rsp, 0, 1, ofl)) != 0)
306 		str = demangle(sdp->sd_name);
307 	else
308 		str = MSG_INTL(MSG_STR_UNKNOWN);
309 
310 	eprintf(ofl->ofl_lml, ERR_WARNING, msg,
311 	    conv_reloc_type(ifl->ifl_ehdr->e_machine, rsp->rel_rtype, 0),
312 	    ifl->ifl_name, rsp->rel_sname, str, EC_OFF(rsp->rel_roffset));
313 }
314 
315 /*
316  * qsort(3C) comparison routine used for the disp_sortsyms().
317  */
318 static int
319 disp_qsort(const void * s1, const void * s2)
320 {
321 	Ssv_desc	*ssvp1 = ((Ssv_desc *)s1);
322 	Ssv_desc	*ssvp2 = ((Ssv_desc *)s2);
323 	Addr		val1 = ssvp1->ssv_value;
324 	Addr		val2 = ssvp2->ssv_value;
325 
326 	if (val1 > val2)
327 		return (1);
328 	if (val1 < val2)
329 		return (-1);
330 	return (0);
331 }
332 
333 /*
334  * Determine whether a displacement relocation is between a local and global
335  * symbol pair.  One symbol is used to perform the relocation, and the other
336  * is the destination offset of the relocation.
337  */
338 static uintptr_t
339 disp_inspect(Ofl_desc *ofl, Rel_desc *rld, Boolean rlocal)
340 {
341 	Is_desc		*isp = rld->rel_isdesc;
342 	Ifl_desc	*ifl = rld->rel_isdesc->is_file;
343 
344 	/*
345 	 * If the input files symbols haven't been sorted yet, do so.
346 	 */
347 	if (ifl->ifl_sortsyms == 0) {
348 		Word	ondx, nndx;
349 
350 		if ((ifl->ifl_sortsyms = libld_malloc((ifl->ifl_symscnt + 1) *
351 		    sizeof (Ssv_desc))) == 0)
352 			return (S_ERROR);
353 
354 		for (ondx = 0, nndx = 0; ondx < ifl->ifl_symscnt; ondx++) {
355 			Sym_desc	*sdp;
356 			Addr		value;
357 
358 			/*
359 			 * As symbol resolution has already occurred, various
360 			 * symbols from this object may have been satisfied
361 			 * from other objects.  Only select symbols from this
362 			 * object.  For the displacement test, we only really
363 			 * need to observe data definitions, however, later as
364 			 * part of providing warning disgnostics, relating the
365 			 * relocation offset to a symbol is desirable.  Thus,
366 			 * collect all symbols that define a memory area.
367 			 */
368 			if (((sdp = ifl->ifl_oldndx[ondx]) == 0) ||
369 			    (sdp->sd_sym->st_shndx == SHN_UNDEF) ||
370 			    (sdp->sd_sym->st_shndx >= SHN_LORESERVE) ||
371 			    (sdp->sd_ref != REF_REL_NEED) ||
372 			    (sdp->sd_file != ifl) ||
373 			    (sdp->sd_sym->st_size == 0))
374 				continue;
375 
376 			/*
377 			 * As a further optimization for later checking, mark
378 			 * this section if this a global data definition.
379 			 */
380 			if (sdp->sd_isc && (ondx >= ifl->ifl_locscnt))
381 				sdp->sd_isc->is_flags |= FLG_IS_GDATADEF;
382 
383 			/*
384 			 * Capture the symbol.  Within relocatable objects, a
385 			 * symbols value is its offset within its associated
386 			 * section.  Add the section offset to this value to
387 			 * uniquify the symbol.
388 			 */
389 			value = sdp->sd_sym->st_value;
390 			if (sdp->sd_isc && sdp->sd_isc->is_shdr)
391 				value += sdp->sd_isc->is_shdr->sh_offset;
392 
393 			ifl->ifl_sortsyms[nndx].ssv_value = value;
394 			ifl->ifl_sortsyms[nndx].ssv_sdp = sdp;
395 			nndx++;
396 		}
397 
398 		/*
399 		 * Sort the list based on the symbols value (address).
400 		 */
401 		if ((ifl->ifl_sortcnt = nndx) != 0)
402 			qsort(ifl->ifl_sortsyms, nndx, sizeof (Ssv_desc),
403 			    &disp_qsort);
404 	}
405 
406 	/*
407 	 * If the reference symbol is local, and the section being relocated
408 	 * contains no global definitions, neither can be the target of a copy
409 	 * relocation.
410 	 */
411 	if ((rlocal == FALSE) && ((isp->is_flags & FLG_IS_GDATADEF) == 0))
412 		return (1);
413 
414 	/*
415 	 * Otherwise determine whether this relocation symbol and its offset
416 	 * could be candidates for a copy relocation.
417 	 */
418 	if (ifl->ifl_sortcnt)
419 		(void) disp_scansyms(ifl, rld, rlocal, 0, ofl);
420 	return (1);
421 }
422 
423 /*
424  * Add an active relocation record.
425  */
426 uintptr_t
427 ld_add_actrel(Word flags, Rel_desc *rsp, Ofl_desc *ofl)
428 {
429 	Rel_desc	*arsp;
430 	Rel_cache	*rcp;
431 
432 	/*
433 	 * If no relocation cache structures are available, allocate a new
434 	 * one and link it into the bucket list.
435 	 */
436 	if ((ofl->ofl_actrels.tail == 0) ||
437 	    ((rcp = (Rel_cache *)ofl->ofl_actrels.tail->data) == 0) ||
438 	    ((arsp = rcp->rc_free) == rcp->rc_end)) {
439 		static size_t	nextsize = 0;
440 		size_t		size;
441 
442 		/*
443 		 * Typically, when generating an executable or shared object
444 		 * there will be an active relocation for every input
445 		 * relocation.
446 		 */
447 		if (nextsize == 0) {
448 			if ((ofl->ofl_flags & FLG_OF_RELOBJ) == 0) {
449 				if ((size = ofl->ofl_relocincnt) == 0)
450 					size = REL_LAIDESCNO;
451 				if (size > REL_HAIDESCNO)
452 					nextsize = REL_HAIDESCNO;
453 				else
454 					nextsize = REL_LAIDESCNO;
455 			} else
456 				nextsize = size = REL_HAIDESCNO;
457 		} else
458 			size = nextsize;
459 
460 		size = size * sizeof (Rel_desc);
461 
462 		if (((rcp = libld_malloc(sizeof (Rel_cache) + size)) == 0) ||
463 		    (list_appendc(&ofl->ofl_actrels, rcp) == 0))
464 			return (S_ERROR);
465 
466 		/* LINTED */
467 		rcp->rc_free = arsp = (Rel_desc *)(rcp + 1);
468 		/* LINTED */
469 		rcp->rc_end = (Rel_desc *)((char *)rcp->rc_free + size);
470 	}
471 
472 	*arsp = *rsp;
473 	arsp->rel_flags |= flags;
474 
475 	rcp->rc_free++;
476 	ofl->ofl_actrelscnt++;
477 
478 	/*
479 	 * Any GOT relocation reference requires the creation of a .got table.
480 	 * Most references to a .got require a .got entry,  which is accounted
481 	 * for with the ofl_gotcnt counter.  However, some references are
482 	 * relative to the .got table, but require no .got entry.  This test
483 	 * insures a .got is created regardless of the type of reference.
484 	 */
485 	if (IS_GOT_REQUIRED(arsp->rel_rtype))
486 		ofl->ofl_flags |= FLG_OF_BLDGOT;
487 
488 	/*
489 	 * If this is a displacement relocation generate a warning.
490 	 */
491 	if (arsp->rel_flags & FLG_REL_DISP) {
492 		ofl->ofl_dtflags_1 |= DF_1_DISPRELDNE;
493 
494 		if (ofl->ofl_flags & FLG_OF_VERBOSE)
495 			ld_disp_errmsg(MSG_INTL(MSG_REL_DISPREL3), arsp, ofl);
496 	}
497 
498 	DBG_CALL(Dbg_reloc_ars_entry(ofl->ofl_lml, ELF_DBG_LD,
499 	    arsp->rel_isdesc->is_shdr->sh_type, M_MACH, arsp));
500 	return (1);
501 }
502 
503 uintptr_t
504 ld_reloc_GOT_relative(Boolean local, Rel_desc *rsp, Ofl_desc *ofl)
505 {
506 	Sym_desc	*sdp;
507 	Word		flags = ofl->ofl_flags;
508 	Gotndx		*gnp;
509 
510 	sdp = rsp->rel_sym;
511 
512 	/*
513 	 * If this is the first time we've seen this symbol in a GOT
514 	 * relocation we need to assign it a GOT token.  Once we've got
515 	 * all of the GOT's assigned we can assign the actual indexes.
516 	 */
517 	if ((gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), GOT_REF_GENERIC,
518 	    ofl, rsp)) == 0) {
519 		Word	rtype = rsp->rel_rtype;
520 
521 		if (ld_assign_got_ndx(&(sdp->sd_GOTndxs), 0, GOT_REF_GENERIC,
522 		    ofl, rsp, sdp) == S_ERROR)
523 			return (S_ERROR);
524 
525 		/*
526 		 * Now we initialize the GOT table entry.
527 		 *
528 		 * Pseudo code to describe the the decisions below:
529 		 *
530 		 * If (local)
531 		 * then
532 		 *	enter symbol value in GOT table entry
533 		 *	if (Shared Object)
534 		 *	then
535 		 *		create Relative relocation against symbol
536 		 *	fi
537 		 * else
538 		 *	clear GOT table entry
539 		 *	create a GLOB_DAT relocation against symbol
540 		 * fi
541 		 */
542 		if (local == TRUE) {
543 			if (flags & FLG_OF_SHAROBJ) {
544 				if (ld_add_actrel((FLG_REL_GOT | FLG_REL_GOTCL),
545 				    rsp, ofl) == S_ERROR)
546 					return (S_ERROR);
547 
548 				/*
549 				 * Add a RELATIVE relocation if this is
550 				 * anything but a ABS symbol.
551 				 */
552 				if ((((sdp->sd_flags & FLG_SY_SPECSEC) == 0) ||
553 				    (sdp->sd_sym->st_shndx != SHN_ABS)) ||
554 				    (sdp->sd_aux && sdp->sd_aux->sa_symspec)) {
555 					rsp->rel_rtype = M_R_RELATIVE;
556 					if (ld_add_outrel((FLG_REL_GOT |
557 					    FLG_REL_ADVAL), rsp,
558 					    ofl) == S_ERROR)
559 						return (S_ERROR);
560 					rsp->rel_rtype = rtype;
561 				}
562 			} else {
563 				if (ld_add_actrel(FLG_REL_GOT, rsp,
564 				    ofl) == S_ERROR)
565 					return (S_ERROR);
566 			}
567 		} else {
568 			rsp->rel_rtype = M_R_GLOB_DAT;
569 			if (ld_add_outrel(FLG_REL_GOT, rsp, ofl) == S_ERROR)
570 				return (S_ERROR);
571 			rsp->rel_rtype = rtype;
572 		}
573 	} else {
574 		if (ld_assign_got_ndx(&(sdp->sd_GOTndxs), gnp, GOT_REF_GENERIC,
575 		    ofl, rsp, sdp) == S_ERROR)
576 			return (S_ERROR);
577 	}
578 
579 	/*
580 	 * Perform relocation to GOT table entry.
581 	 */
582 	return (ld_add_actrel(NULL, rsp, ofl));
583 }
584 
585 
586 /*
587  * Perform relocations for PLT's
588  */
589 uintptr_t
590 ld_reloc_plt(Rel_desc *rsp, Ofl_desc *ofl)
591 {
592 	Sym_desc	*sdp = rsp->rel_sym;
593 
594 #if	defined(__i386) || defined(__amd64)
595 #if	defined(_ELF64)
596 	/*
597 	 * AMD64 TLS code sequences do not use a unique TLS relocation to
598 	 * reference the __tls_get_addr() function call.
599 	 */
600 	if ((ofl->ofl_flags & FLG_OF_EXEC) &&
601 	    (strcmp(sdp->sd_name, MSG_ORIG(MSG_SYM_TLSGETADDR_U)) == 0)) {
602 		return (ld_add_actrel(FLG_REL_TLSFIX, rsp, ofl));
603 	}
604 #else
605 	/*
606 	 * GNUC IA32 TLS code sequences do not use a unique TLS relocation to
607 	 * reference the ___tls_get_addr() function call.
608 	 */
609 	if ((ofl->ofl_flags & FLG_OF_EXEC) &&
610 	    (strcmp(sdp->sd_name, MSG_ORIG(MSG_SYM_TLSGETADDR_UU)) == 0)) {
611 		return (ld_add_actrel(FLG_REL_TLSFIX, rsp, ofl));
612 	}
613 #endif
614 #endif	/* __i386 && __amd64 */
615 
616 	/*
617 	 * if (not PLT yet assigned)
618 	 * then
619 	 *	assign PLT index to symbol
620 	 *	build output JMP_SLOT relocation
621 	 * fi
622 	 */
623 	if (sdp->sd_aux->sa_PLTndx == 0) {
624 		Word	ortype = rsp->rel_rtype;
625 
626 		ld_assign_plt_ndx(sdp, ofl);
627 
628 		/*
629 		 * If this symbol is binding to a LAZYLOADED object then
630 		 * set the LAZYLD symbol flag.
631 		 */
632 		if ((sdp->sd_aux->sa_bindto &&
633 		    (sdp->sd_aux->sa_bindto->ifl_flags & FLG_IF_LAZYLD)) ||
634 		    (sdp->sd_file &&
635 		    (sdp->sd_file->ifl_flags & FLG_IF_LAZYLD)))
636 			sdp->sd_flags |= FLG_SY_LAZYLD;
637 
638 		rsp->rel_rtype = M_R_JMP_SLOT;
639 		if (ld_add_outrel(FLG_REL_PLT, rsp, ofl) == S_ERROR)
640 			return (S_ERROR);
641 		rsp->rel_rtype = ortype;
642 	}
643 
644 	/*
645 	 * Perform relocation to PLT table entry.
646 	 */
647 	if ((ofl->ofl_flags & FLG_OF_SHAROBJ) &&
648 	    IS_ADD_RELATIVE(rsp->rel_rtype)) {
649 		Word	ortype	= rsp->rel_rtype;
650 
651 		rsp->rel_rtype = M_R_RELATIVE;
652 		if (ld_add_outrel(FLG_REL_ADVAL, rsp, ofl) == S_ERROR)
653 			return (S_ERROR);
654 		rsp->rel_rtype = ortype;
655 		return (1);
656 	} else
657 		return (ld_add_actrel(NULL, rsp, ofl));
658 }
659 
660 /*
661  * process GLOBAL undefined and ref_dyn_need symbols.
662  */
663 static uintptr_t
664 reloc_exec(Rel_desc *rsp, Ofl_desc *ofl)
665 {
666 	Sym_desc	*_sdp, *sdp = rsp->rel_sym;
667 	Sym_aux		*sap = sdp->sd_aux;
668 	Sym		*sym = sdp->sd_sym;
669 	Addr		stval;
670 
671 	/*
672 	 * Reference is to a function so simply create a plt entry for it.
673 	 */
674 	if (ELF_ST_TYPE(sym->st_info) == STT_FUNC)
675 		return (ld_reloc_plt(rsp, ofl));
676 
677 	/*
678 	 * Catch absolutes - these may cause a text relocation.
679 	 */
680 	if ((sdp->sd_flags & FLG_SY_SPECSEC) && (sym->st_shndx == SHN_ABS)) {
681 		if ((ofl->ofl_flags1 & FLG_OF1_ABSEXEC) == 0)
682 			return (ld_add_outrel(NULL, rsp, ofl));
683 
684 		/*
685 		 * If -zabsexec is set then promote the ABSOLUTE symbol to
686 		 * current the current object and perform the relocation now.
687 		 */
688 		sdp->sd_ref = REF_REL_NEED;
689 		return (ld_add_actrel(NULL, rsp, ofl));
690 	}
691 
692 	/*
693 	 * If the relocation is against a writable section simply compute the
694 	 * necessary output relocation.  As an optimization, if the symbol has
695 	 * already been transformed into a copy relocation then we can perform
696 	 * the relocation directly (copy relocations should only be generated
697 	 * for references from the text segment and these relocations are
698 	 * normally carried out before we get to the data segment relocations).
699 	 */
700 	if ((ELF_ST_TYPE(sym->st_info) == STT_OBJECT) &&
701 	    (rsp->rel_osdesc->os_shdr->sh_flags & SHF_WRITE)) {
702 		if (sdp->sd_flags & FLG_SY_MVTOCOMM)
703 			return (ld_add_actrel(NULL, rsp, ofl));
704 		else
705 			return (ld_add_outrel(NULL, rsp, ofl));
706 	}
707 
708 	/*
709 	 * If the reference isn't to an object (normally because a .type
710 	 * directive hasn't defined in some assembler source), then simply apply
711 	 * a generic relocation (this has a tendency to result in text
712 	 * relocations).
713 	 */
714 	if (ELF_ST_TYPE(sym->st_info) != STT_OBJECT) {
715 		eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_REL_UNEXPSYM),
716 		    conv_sym_info_type(sdp->sd_file->ifl_ehdr->e_machine,
717 		    ELF_ST_TYPE(sym->st_info), 0),
718 		    rsp->rel_isdesc->is_file->ifl_name,
719 		    demangle(rsp->rel_sname), sdp->sd_file->ifl_name);
720 		return (ld_add_outrel(NULL, rsp, ofl));
721 	}
722 
723 	/*
724 	 * Prepare for generating a copy relocation.
725 	 *
726 	 * If this symbol is one of an alias pair, we need to insure both
727 	 * symbols become part of the output (the strong symbol will be used to
728 	 * maintain the symbols state).  And, if we did raise the precedence of
729 	 * a symbol we need to check and see if this is a weak symbol.  If it is
730 	 * we want to use it's strong counter part.
731 	 *
732 	 * The results of this logic should be:
733 	 *	rel_usym: assigned to strong
734 	 *	 rel_sym: assigned to symbol to perform
735 	 *		  copy_reloc against (weak or strong).
736 	 */
737 	if (sap->sa_linkndx) {
738 		_sdp = sdp->sd_file->ifl_oldndx[sap->sa_linkndx];
739 
740 		if (_sdp->sd_ref < sdp->sd_ref) {
741 			_sdp->sd_ref = sdp->sd_ref;
742 			_sdp->sd_flags |= FLG_SY_REFRSD;
743 
744 			/*
745 			 * As we're going to replicate a symbol from a shared
746 			 * object, retain its correct binding status.
747 			 */
748 			if (ELF_ST_BIND(_sdp->sd_sym->st_info) == STB_GLOBAL)
749 				_sdp->sd_flags |= FLG_SY_GLOBREF;
750 
751 		} else if (_sdp->sd_ref > sdp->sd_ref) {
752 			sdp->sd_ref = _sdp->sd_ref;
753 			sdp->sd_flags |= FLG_SY_REFRSD;
754 
755 			/*
756 			 * As we're going to replicate a symbol from a shared
757 			 * object, retain its correct binding status.
758 			 */
759 			if (ELF_ST_BIND(sym->st_info) == STB_GLOBAL)
760 				sdp->sd_flags |= FLG_SY_GLOBREF;
761 		}
762 
763 		/*
764 		 * If this is a weak symbol then we want to move the strong
765 		 * symbol into local .bss.  If there is a copy_reloc to be
766 		 * performed, that should still occur against the WEAK symbol.
767 		 */
768 		if ((ELF_ST_BIND(sdp->sd_sym->st_info) == STB_WEAK) ||
769 		    (sdp->sd_flags & FLG_SY_WEAKDEF))
770 			rsp->rel_usym = _sdp;
771 	} else
772 		_sdp = 0;
773 
774 	/*
775 	 * If the reference is to an object then allocate space for the object
776 	 * within the executables .bss.  Relocations will now be performed from
777 	 * this new location.  If the original shared objects data is
778 	 * initialized, then generate a copy relocation that will copy the data
779 	 * to the executables .bss at runtime.
780 	 */
781 	if (!(rsp->rel_usym->sd_flags & FLG_SY_MVTOCOMM)) {
782 		Word	rtype = rsp->rel_rtype;
783 		Copy_rel *cpy_rel;
784 
785 		/*
786 		 * Indicate that the symbol(s) against which we're relocating
787 		 * have been moved to the executables common.  Also, insure that
788 		 * the symbol(s) remain marked as global, as the shared object
789 		 * from which they are copied must be able to relocate to the
790 		 * new common location within the executable.
791 		 *
792 		 * Note that even though a new symbol has been generated in the
793 		 * output files' .bss, the symbol must remain REF_DYN_NEED and
794 		 * not be promoted to REF_REL_NEED.  sym_validate() still needs
795 		 * to carry out a number of checks against the symbols binding
796 		 * that are triggered by the REF_DYN_NEED state.
797 		 */
798 		sdp->sd_flags |= FLG_SY_MVTOCOMM;
799 		sdp->sd_flags1 |= FLG_SY1_GLOB;
800 		sdp->sd_flags1 &= ~FLG_SY1_LOCL;
801 		sdp->sd_sym->st_other &= ~MSK_SYM_VISIBILITY;
802 		if (_sdp) {
803 			_sdp->sd_flags |= FLG_SY_MVTOCOMM;
804 			_sdp->sd_flags1 |= FLG_SY1_GLOB;
805 			_sdp->sd_flags1 &= ~FLG_SY1_LOCL;
806 			_sdp->sd_sym->st_other &= ~MSK_SYM_VISIBILITY;
807 
808 			/*
809 			 * Make sure the symbol has a reference in case of any
810 			 * error diagnostics against it (perhaps this belongs
811 			 * to a version that isn't allowable for this build).
812 			 * The resulting diagnostic (see sym_undef_entry())
813 			 * might seem a little bogus, as the symbol hasn't
814 			 * really been referenced by this file, but has been
815 			 * promoted as a consequence of its alias reference.
816 			 */
817 			if (!(_sdp->sd_aux->sa_rfile))
818 				_sdp->sd_aux->sa_rfile = sdp->sd_aux->sa_rfile;
819 		}
820 
821 		/*
822 		 * Assign the symbol to the bss and insure sufficient alignment
823 		 * (we don't know the real alignment so we have to make the
824 		 * worst case guess).
825 		 */
826 		_sdp = rsp->rel_usym;
827 		stval = _sdp->sd_sym->st_value;
828 		if (ld_sym_copy(_sdp) == S_ERROR)
829 			return (S_ERROR);
830 		_sdp->sd_shndx = _sdp->sd_sym->st_shndx = SHN_COMMON;
831 		_sdp->sd_flags |= FLG_SY_SPECSEC;
832 		_sdp->sd_sym->st_value =
833 		    (_sdp->sd_sym->st_size < (M_WORD_ALIGN * 2)) ?
834 		    M_WORD_ALIGN : M_WORD_ALIGN * 2;
835 
836 		/*
837 		 * Whether or not the symbol references initialized
838 		 * data we generate a copy relocation - this differs
839 		 * from the past where we would not create the COPY_RELOC
840 		 * if we were binding against .bss.  This is done
841 		 * for *two* reasons.
842 		 *
843 		 *  o If the symbol in the shared object changes to
844 		 *    a initialized data - we need the COPY to pick it
845 		 *    up.
846 		 *  o without the COPY RELOC we can't tell that the
847 		 *    symbol from the COPY'd object has been moved
848 		 *    and all bindings to it should bind here.
849 		 */
850 
851 		/*
852 		 * Keep this symbol in the copy relocation list
853 		 * to check the validity later.
854 		 */
855 		if ((cpy_rel = libld_malloc(sizeof (Copy_rel))) == 0)
856 			return (S_ERROR);
857 		cpy_rel->copyrel_symd = _sdp;
858 		cpy_rel->copyrel_stval = stval;
859 		if (list_appendc(&ofl->ofl_copyrels, cpy_rel) == 0)
860 			return (S_ERROR);
861 
862 		rsp->rel_rtype = M_R_COPY;
863 		if (ld_add_outrel(FLG_REL_BSS, rsp, ofl) == S_ERROR)
864 			return (S_ERROR);
865 		rsp->rel_rtype = rtype;
866 
867 		/*
868 		 * If this symbol is a protected symbol, warn it.
869 		 */
870 		if (_sdp->sd_flags & FLG_SY_PROT)
871 			eprintf(ofl->ofl_lml, ERR_WARNING,
872 			MSG_INTL(MSG_REL_COPY),
873 			conv_reloc_type(_sdp->sd_file->ifl_ehdr->e_machine,
874 			M_R_COPY, 0), _sdp->sd_file->ifl_name, _sdp->sd_name);
875 		DBG_CALL(Dbg_syms_reloc(ofl, sdp));
876 	}
877 	return (ld_add_actrel(NULL, rsp, ofl));
878 }
879 
880 /*
881  * All relocations should have been handled by the other routines.  This
882  * routine is here as a catch all, if we do enter it we've goofed - but
883  * we'll try and to the best we can.
884  */
885 static uintptr_t
886 reloc_generic(Rel_desc *rsp, Ofl_desc *ofl)
887 {
888 	Ifl_desc	*ifl = rsp->rel_isdesc->is_file;
889 
890 	eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_REL_UNEXPREL),
891 	    conv_reloc_type(ifl->ifl_ehdr->e_machine, rsp->rel_rtype, 0),
892 	    ifl->ifl_name, demangle(rsp->rel_sname));
893 
894 	/*
895 	 * If building a shared object then put the relocation off
896 	 * until runtime.
897 	 */
898 	if (ofl->ofl_flags & FLG_OF_SHAROBJ)
899 		return (ld_add_outrel(NULL, rsp, ofl));
900 
901 	/*
902 	 * Otherwise process relocation now.
903 	 */
904 	return (ld_add_actrel(NULL, rsp, ofl));
905 }
906 
907 /*
908  * Process relocations when building a relocatable object.  Typically, there
909  * aren't many relocations that can be caught at this point, most are simply
910  * passed through to the output relocatable object.
911  */
912 static uintptr_t
913 reloc_relobj(Boolean local, Rel_desc *rsp, Ofl_desc *ofl)
914 {
915 	Word		rtype = rsp->rel_rtype;
916 	Sym_desc	*sdp = rsp->rel_sym;
917 	Is_desc		*isp = rsp->rel_isdesc;
918 	Word		oflags = NULL;
919 
920 	/*
921 	 * Determine if we can do any relocations at this point.  We can if:
922 	 *
923 	 *	this is local_symbol and a non-GOT relocation, and
924 	 *	the relocation is pc-relative, and
925 	 *	the relocation is against a symbol in same section
926 	 */
927 	if (local && !IS_GOT_RELATIVE(rtype) && !IS_GOT_BASED(rtype) &&
928 	    !IS_GOT_PC(rtype) && IS_PC_RELATIVE(rtype) &&
929 	    ((sdp->sd_isc) && (sdp->sd_isc->is_osdesc == isp->is_osdesc)))
930 		return (ld_add_actrel(NULL, rsp, ofl));
931 
932 	/*
933 	 * If -zredlocsym is in effect, translate all local symbol relocations
934 	 * to be against against section symbols, since section symbols are
935 	 * the only symbols which will be added to the .symtab.
936 	 */
937 	if (local && (((ofl->ofl_flags1 & FLG_OF1_REDLSYM) &&
938 	    (ELF_ST_BIND(sdp->sd_sym->st_info) == STB_LOCAL)) ||
939 	    ((sdp->sd_flags1 & FLG_SY1_ELIM) &&
940 	    (ofl->ofl_flags & FLG_OF_PROCRED)))) {
941 		/*
942 		 * But if this is PIC code, don't allow it for now.
943 		 */
944 		if (IS_GOT_RELATIVE(rsp->rel_rtype)) {
945 			Ifl_desc	*ifl = rsp->rel_isdesc->is_file;
946 
947 			eprintf(ofl->ofl_lml, ERR_FATAL,
948 			    MSG_INTL(MSG_REL_PICREDLOC),
949 			    demangle(rsp->rel_sname), ifl->ifl_name,
950 			    conv_reloc_type(ifl->ifl_ehdr->e_machine,
951 			    rsp->rel_rtype, 0));
952 			return (S_ERROR);
953 		}
954 
955 		/*
956 		 * Indicate that this relocation should be processed the same
957 		 * as a section symbol.  For SPARC and AMD (Rela), indicate
958 		 * that the addend also needs to be applied to this relocation.
959 		 */
960 #if	(defined(__i386) || defined(__amd64)) && !defined(_ELF64)
961 		oflags = FLG_REL_SCNNDX;
962 #else
963 		oflags = FLG_REL_SCNNDX | FLG_REL_ADVAL;
964 #endif
965 	}
966 
967 #if	(defined(__i386) || defined(__amd64)) && !defined(_ELF64)
968 	/*
969 	 * Intel (Rel) relocations do not contain an addend.  Any addend is
970 	 * contained within the file at the location identified by the
971 	 * relocation offset.  Therefore, if we're processing a section symbol,
972 	 * or a -zredlocsym relocation (that basically transforms a local symbol
973 	 * reference into a section reference), perform an active relocation to
974 	 * propagate any addend.
975 	 */
976 	if ((ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_SECTION) ||
977 	    (oflags == FLG_REL_SCNNDX))
978 		if (ld_add_actrel(NULL, rsp, ofl) == S_ERROR)
979 			return (S_ERROR);
980 #endif
981 	return (ld_add_outrel(oflags, rsp, ofl));
982 }
983 
984 /*
985  * Perform any generic TLS validations before passing control to machine
986  * specific routines.  At this point we know we are dealing with an executable
987  * or shared object - relocatable objects have already been processed.
988  */
989 static uintptr_t
990 reloc_TLS(Boolean local, Rel_desc *rsp, Ofl_desc *ofl)
991 {
992 	Word		rtype = rsp->rel_rtype, flags = ofl->ofl_flags;
993 	Ifl_desc	*ifl = rsp->rel_isdesc->is_file;
994 	Half		mach = ifl->ifl_ehdr->e_machine;
995 	Sym_desc	*sdp = rsp->rel_sym;
996 	unsigned char	type;
997 
998 	/*
999 	 * All TLS relocations are illegal in a static executable.
1000 	 */
1001 	if ((flags & (FLG_OF_STATIC | FLG_OF_EXEC)) ==
1002 	    (FLG_OF_STATIC | FLG_OF_EXEC)) {
1003 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_TLSSTAT),
1004 		    conv_reloc_type(mach, rtype, 0), ifl->ifl_name,
1005 		    demangle(rsp->rel_sname));
1006 		return (S_ERROR);
1007 	}
1008 
1009 	/*
1010 	 * Any TLS relocation must be against a STT_TLS symbol, all others
1011 	 * are illegal.
1012 	 */
1013 	if ((type = ELF_ST_TYPE(sdp->sd_sym->st_info)) != STT_TLS) {
1014 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_TLSBADSYM),
1015 		    conv_reloc_type(mach, rtype, 0), ifl->ifl_name,
1016 		    demangle(rsp->rel_sname),
1017 		    conv_sym_info_type(mach, type, 0));
1018 		return (S_ERROR);
1019 	}
1020 
1021 	/*
1022 	 * A dynamic executable can not use the LD or LE reference models to
1023 	 * reference an external symbol.  A shared object can not use the LD
1024 	 * reference model to reference an external symbol.
1025 	 */
1026 	if (!local && (IS_TLS_LD(rtype) ||
1027 	    ((flags & FLG_OF_EXEC) && IS_TLS_LE(rtype)))) {
1028 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_TLSBND),
1029 		    conv_reloc_type(mach, rtype, 0), ifl->ifl_name,
1030 		    demangle(rsp->rel_sname), sdp->sd_file->ifl_name);
1031 		return (S_ERROR);
1032 	}
1033 
1034 	/*
1035 	 * The TLS LE model is only allowed for dynamic executables.  The TLS IE
1036 	 * model is allowed for shared objects, but this model has restrictions.
1037 	 * This model can only be used freely in dependencies that are loaded
1038 	 * immediately as part of process initialization.  However, during the
1039 	 * initial runtime handshake with libc that establishes the thread
1040 	 * pointer, a small backup TLS reservation is created.  This area can
1041 	 * be used by objects that are loaded after threads are initialized.
1042 	 * However, this area is limited in size and may have already been
1043 	 * used.  This area is intended for specialized applications, and does
1044 	 * not provide the degree of flexibility dynamic TLS can offer.  Under
1045 	 * -z verbose indicate this restriction to the user.
1046 	 */
1047 	if ((flags & FLG_OF_EXEC) == 0) {
1048 		if (IS_TLS_LE(rtype)) {
1049 			eprintf(ofl->ofl_lml, ERR_FATAL,
1050 			    MSG_INTL(MSG_REL_TLSLE),
1051 			    conv_reloc_type(mach, rtype, 0), ifl->ifl_name,
1052 			    demangle(rsp->rel_sname));
1053 			return (S_ERROR);
1054 
1055 		} else if ((IS_TLS_IE(rtype)) && (flags & FLG_OF_VERBOSE)) {
1056 			eprintf(ofl->ofl_lml, ERR_WARNING,
1057 			    MSG_INTL(MSG_REL_TLSIE),
1058 			    conv_reloc_type(mach, rtype, 0), ifl->ifl_name,
1059 			    demangle(rsp->rel_sname));
1060 		}
1061 	}
1062 
1063 	return (ld_reloc_TLS(local, rsp, ofl));
1064 }
1065 
1066 uintptr_t
1067 ld_process_sym_reloc(Ofl_desc *ofl, Rel_desc *reld, Rel *reloc, Is_desc *isp,
1068     const char *isname)
1069 {
1070 	Word		rtype = reld->rel_rtype;
1071 	Word		flags = ofl->ofl_flags;
1072 	Sym_desc	*sdp = reld->rel_sym;
1073 	Sym_aux		*sap;
1074 	Boolean		local;
1075 
1076 	DBG_CALL(Dbg_reloc_in(ofl->ofl_lml, ELF_DBG_LD, M_MACH, M_REL_SHT_TYPE,
1077 	    (void *)reloc, isname, reld->rel_sname));
1078 
1079 	/*
1080 	 * Indicate this symbol is being used for relocation and therefore must
1081 	 * have its output address updated accordingly (refer to update_osym()).
1082 	 */
1083 	sdp->sd_flags |= FLG_SY_UPREQD;
1084 
1085 	/*
1086 	 * Indicate the section this symbol is defined in has been referenced,
1087 	 * therefor it *is not* a candidate for elimination.
1088 	 */
1089 	if (sdp->sd_isc) {
1090 		sdp->sd_isc->is_flags |= FLG_IS_SECTREF;
1091 		sdp->sd_isc->is_file->ifl_flags |= FLG_IF_FILEREF;
1092 	}
1093 
1094 	reld->rel_usym = sdp;
1095 
1096 	/*
1097 	 * Determine if this symbol is actually an alias to another symbol.  If
1098 	 * so, and the alias is not REF_DYN_SEEN, set rel_usym to point to the
1099 	 * weak symbols strong counter-part.  The one exception is if the
1100 	 * FLG_SY_MVTOCOMM flag is set on the weak symbol.  If this is the case,
1101 	 * the strong is only here because of its promotion, and the weak symbol
1102 	 * should still be used for the relocation reference (see reloc_exec()).
1103 	 */
1104 	sap = sdp->sd_aux;
1105 	if (sap && sap->sa_linkndx &&
1106 	    ((ELF_ST_BIND(sdp->sd_sym->st_info) == STB_WEAK) ||
1107 	    (sdp->sd_flags & FLG_SY_WEAKDEF)) &&
1108 	    (!(sdp->sd_flags & FLG_SY_MVTOCOMM))) {
1109 		Sym_desc *	_sdp;
1110 
1111 		_sdp = sdp->sd_file->ifl_oldndx[sap->sa_linkndx];
1112 		if (_sdp->sd_ref != REF_DYN_SEEN)
1113 			reld->rel_usym = _sdp;
1114 	}
1115 
1116 	/*
1117 	 * Determine whether this symbol should be bound locally or not.
1118 	 * Symbols will be bound locally if one of the following is true:
1119 	 *
1120 	 *  o	the symbol is of type STB_LOCAL
1121 	 *
1122 	 *  o	the output image is not a relocatable object and the
1123 	 *	relocation is relative to the .got
1124 	 *
1125 	 *  o	the section being relocated is of type SHT_SUNW_dof;
1126 	 *	these sections are bound to the functions in the
1127 	 *	containing object and don't care about interpositioning
1128 	 *
1129 	 *  o	the symbol has been reduced (scoped to a local or
1130 	 *	symbolic) and reductions are being processed
1131 	 *
1132 	 *  o	the -Bsymbolic flag is in use when building a shared
1133 	 *	object or an executable (fixed address) is being created
1134 	 *
1135 	 *  o	Building an executable and the symbol is defined
1136 	 *	in the executable.
1137 	 *
1138 	 *  o	the relocation is against a segment which will not
1139 	 *	be loaded into memory.  If that is the case we need
1140 	 *	to resolve the relocation now because ld.so.1 won't
1141 	 *	be able to.
1142 	 */
1143 	local = FALSE;
1144 	if (ELF_ST_BIND(sdp->sd_sym->st_info) == STB_LOCAL) {
1145 		local = TRUE;
1146 	} else if (!(reld->rel_flags & FLG_REL_LOAD)) {
1147 		local = TRUE;
1148 	} else if (sdp->sd_sym->st_shndx != SHN_UNDEF) {
1149 		if (reld->rel_isdesc &&
1150 		    reld->rel_isdesc->is_shdr->sh_type == SHT_SUNW_dof) {
1151 			local = TRUE;
1152 		} else if (!(flags & FLG_OF_RELOBJ) &&
1153 		    (IS_LOCALBND(rtype) || IS_SEG_RELATIVE(rtype))) {
1154 			local = TRUE;
1155 		} else if (sdp->sd_ref == REF_REL_NEED) {
1156 			if ((sdp->sd_flags1 & (FLG_SY1_LOCL | FLG_SY1_PROT)))
1157 				local = TRUE;
1158 			else if (flags & (FLG_OF_SYMBOLIC | FLG_OF_EXEC))
1159 				local = TRUE;
1160 		}
1161 	}
1162 
1163 	/*
1164 	 * If this is a PC_RELATIVE relocation, the relocation could be
1165 	 * compromised if the relocated address is later used as a copy
1166 	 * relocated symbol (PSARC 1999/636, bugid 4187211).  Scan the input
1167 	 * files symbol table to cross reference this relocation offset.
1168 	 */
1169 	if ((ofl->ofl_flags & FLG_OF_SHAROBJ) && IS_PC_RELATIVE(rtype) &&
1170 	    (IS_GOT_PC(rtype) == 0) && (IS_PLT(rtype) == 0)) {
1171 		if (disp_inspect(ofl, reld, local) == S_ERROR)
1172 			return (S_ERROR);
1173 	}
1174 
1175 	/*
1176 	 * GOT based relocations must bind to the object being built - since
1177 	 * they are relevant to the current GOT.  If not building a relocatable
1178 	 * object - give a appropriate error message.
1179 	 */
1180 	if (!local && !(flags & FLG_OF_RELOBJ) && IS_GOT_BASED(rtype)) {
1181 		Ifl_desc	*ifl = reld->rel_isdesc->is_file;
1182 
1183 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_BADGOTBASED),
1184 		    conv_reloc_type(ifl->ifl_ehdr->e_machine, rtype, 0),
1185 		    ifl->ifl_name, demangle(sdp->sd_name));
1186 		return (S_ERROR);
1187 	}
1188 
1189 	/*
1190 	 * TLS symbols can only have TLS relocations.
1191 	 */
1192 	if ((ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_TLS) &&
1193 	    (IS_TLS_INS(rtype) == 0)) {
1194 		/*
1195 		 * The above test is relaxed if the target section is
1196 		 * non-allocable.
1197 		 */
1198 		if (reld->rel_osdesc->os_shdr->sh_flags & SHF_ALLOC) {
1199 			Ifl_desc	*ifl = reld->rel_isdesc->is_file;
1200 
1201 			eprintf(ofl->ofl_lml, ERR_FATAL,
1202 			    MSG_INTL(MSG_REL_BADTLS),
1203 			    conv_reloc_type(ifl->ifl_ehdr->e_machine,
1204 			    rtype, 0), ifl->ifl_name, demangle(sdp->sd_name));
1205 			return (S_ERROR);
1206 		}
1207 	}
1208 
1209 	/*
1210 	 * Select the relocation to perform.
1211 	 */
1212 	if (IS_REGISTER(rtype))
1213 		return (ld_reloc_register(reld, isp, ofl));
1214 
1215 	if (flags & FLG_OF_RELOBJ)
1216 		return (reloc_relobj(local, reld, ofl));
1217 
1218 	if (IS_TLS_INS(rtype))
1219 		return (reloc_TLS(local, reld, ofl));
1220 
1221 	if (IS_GOT_INS(rtype))
1222 		return (ld_reloc_GOTOP(local, reld, ofl));
1223 
1224 	if (IS_GOT_RELATIVE(rtype))
1225 		return (ld_reloc_GOT_relative(local, reld, ofl));
1226 
1227 	if (local)
1228 		return (ld_reloc_local(reld, ofl));
1229 
1230 	if ((IS_PLT(rtype)) && ((flags & FLG_OF_BFLAG) == 0))
1231 		return (ld_reloc_plt(reld, ofl));
1232 
1233 	if ((sdp->sd_ref == REF_REL_NEED) ||
1234 	    (flags & FLG_OF_BFLAG) || (flags & FLG_OF_SHAROBJ) ||
1235 	    (ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_NOTYPE))
1236 		return (ld_add_outrel(NULL, reld, ofl));
1237 
1238 	if (sdp->sd_ref == REF_DYN_NEED)
1239 		return (reloc_exec(reld, ofl));
1240 
1241 	/*
1242 	 * IS_NOT_REL(rtype)
1243 	 */
1244 	return (reloc_generic(reld, ofl));
1245 }
1246 
1247 /*
1248  * Generate relocation descriptor and dispatch
1249  */
1250 static uintptr_t
1251 process_reld(Ofl_desc *ofl, Is_desc *isp, Rel_desc *reld, Word rsndx,
1252     Rel *reloc)
1253 {
1254 	Ifl_desc	*ifl = isp->is_file;
1255 	Word		rtype = reld->rel_rtype;
1256 	Sym_desc	*sdp;
1257 
1258 	/*
1259 	 * Make sure the relocation is in the valid range.
1260 	 */
1261 	if (rtype >= M_R_NUM) {
1262 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_INVALRELT),
1263 		    ifl->ifl_name, isp->is_name, rtype);
1264 		return (S_ERROR);
1265 	}
1266 
1267 	ofl->ofl_entrelscnt++;
1268 
1269 	/*
1270 	 * Special case: a register symbol associated with symbol index 0 is
1271 	 * initialized (i.e., relocated) to a constant from the r_addend field
1272 	 * rather than from a symbol value.
1273 	 */
1274 	if (IS_REGISTER(rtype) && (rsndx == 0)) {
1275 		reld->rel_sym = 0;
1276 		reld->rel_sname = MSG_ORIG(MSG_STR_EMPTY);
1277 
1278 		DBG_CALL(Dbg_reloc_in(ofl->ofl_lml, ELF_DBG_LD, M_MACH,
1279 		    isp->is_shdr->sh_type, (void *)reloc, isp->is_name,
1280 		    reld->rel_sname));
1281 		return (ld_reloc_register(reld, isp, ofl));
1282 	}
1283 
1284 	/*
1285 	 * Determine whether we're dealing with a named symbol.  Note, bogus
1286 	 * relocations can result in a null symbol descriptor (sdp), the error
1287 	 * condition should be caught below after determining whether a valid
1288 	 * symbol name exists.
1289 	 */
1290 	sdp = ifl->ifl_oldndx[rsndx];
1291 	if (sdp != NULL && sdp->sd_name && *sdp->sd_name)
1292 		reld->rel_sname = sdp->sd_name;
1293 	else {
1294 		static char *strunknown;
1295 
1296 		if (strunknown == 0)
1297 			strunknown = (char *)MSG_INTL(MSG_STR_UNKNOWN);
1298 		reld->rel_sname = strunknown;
1299 	}
1300 
1301 	/*
1302 	 * If for some reason we have a null relocation record issue a
1303 	 * warning and continue (the compiler folks can get into this
1304 	 * state some time).  Normal users should never see this error.
1305 	 */
1306 	if (rtype == M_R_NONE) {
1307 		DBG_CALL(Dbg_reloc_in(ofl->ofl_lml, ELF_DBG_LD, M_MACH,
1308 		    M_REL_SHT_TYPE, (void *)reloc, isp->is_name,
1309 		    reld->rel_sname));
1310 		eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_REL_NULL),
1311 		    ifl->ifl_name, isp->is_name);
1312 		return (1);
1313 	}
1314 
1315 	if (((ofl->ofl_flags & FLG_OF_RELOBJ) == 0) && IS_NOTSUP(rtype)) {
1316 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_NOTSUP),
1317 		    conv_reloc_type(ifl->ifl_ehdr->e_machine, rtype, 0),
1318 		    ifl->ifl_name, isp->is_name);
1319 		return (S_ERROR);
1320 	}
1321 
1322 	/*
1323 	 * If we are here, we know that the relocation requires reference
1324 	 * symbol. If no symbol is assigned, this is a fatal error.
1325 	 */
1326 	if (sdp == NULL) {
1327 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_NOSYMBOL),
1328 		    conv_reloc_type(ifl->ifl_ehdr->e_machine, rtype, 0),
1329 		    isp->is_name, ifl->ifl_name, EC_XWORD(reloc->r_offset));
1330 		return (S_ERROR);
1331 	}
1332 
1333 	if (sdp->sd_flags1 & FLG_SY1_IGNORE)
1334 		return (1);
1335 
1336 	/*
1337 	 * If this symbol is part of a DISCARDED section attempt to find another
1338 	 * definition.
1339 	 */
1340 	if (sdp->sd_flags & FLG_SY_ISDISC) {
1341 		Sym_desc *	nsdp;
1342 
1343 		if ((reld->rel_sname != sdp->sd_name) ||
1344 		    (ELF_ST_BIND(sdp->sd_sym->st_info) == STB_LOCAL) ||
1345 		    ((nsdp = ld_sym_find(sdp->sd_name, SYM_NOHASH, 0,
1346 		    ofl)) == 0)) {
1347 			eprintf(ofl->ofl_lml, ERR_FATAL,
1348 			    MSG_INTL(MSG_REL_SYMDISC), ifl->ifl_name,
1349 			    isp->is_name, demangle(sdp->sd_name),
1350 			    sdp->sd_isc->is_name);
1351 			return (S_ERROR);
1352 		}
1353 		ifl->ifl_oldndx[rsndx] = sdp = nsdp;
1354 	}
1355 
1356 	/*
1357 	 * If this is a global symbol, determine whether its visibility needs
1358 	 * adjusting.
1359 	 */
1360 	if (sdp->sd_aux && ((sdp->sd_flags & FLG_SY_VISIBLE) == 0))
1361 		ld_sym_adjust_vis(sdp, ofl);
1362 
1363 	/*
1364 	 * Ignore any relocation against a section that will not be in the
1365 	 * output file (has been stripped).
1366 	 */
1367 	if ((sdp->sd_isc == 0) &&
1368 	    (ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_SECTION))
1369 		return (1);
1370 
1371 	/*
1372 	 * If the symbol for this relocation is invalid (which should have
1373 	 * generated a message during symbol processing), or the relocation
1374 	 * record's symbol reference is in any other way invalid, then it's
1375 	 * about time we gave up.
1376 	 */
1377 	if ((sdp->sd_flags & FLG_SY_INVALID) || (rsndx == 0) ||
1378 	    (rsndx >= ifl->ifl_symscnt)) {
1379 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_UNKNWSYM),
1380 		    M_REL_CONTYPSTR(rtype, 0), ifl->ifl_name, isp->is_name,
1381 		    demangle(reld->rel_sname),
1382 		    EC_XWORD(reloc->r_offset), EC_WORD(rsndx));
1383 		return (S_ERROR);
1384 	}
1385 
1386 	reld->rel_sym = sdp;
1387 	return (ld_process_sym_reloc(ofl, reld, reloc, isp, isp->is_name));
1388 }
1389 
1390 static uintptr_t
1391 reloc_section(Ofl_desc *ofl, Is_desc *isect, Is_desc *rsect, Os_desc *osect)
1392 {
1393 	Rel		*rend;		/* end of relocation section data */
1394 	Rel		*reloc;		/* current relocation entry */
1395 	Xword		rsize;		/* size of relocation section data */
1396 	Xword		entsize;	/* size of relocation entry */
1397 	Rel_desc	reld;		/* relocation descriptor */
1398 	Shdr *		shdr;
1399 	Word		flags = 0;
1400 
1401 	shdr = rsect->is_shdr;
1402 	rsize = shdr->sh_size;
1403 	reloc = (Rel *)rsect->is_indata->d_buf;
1404 
1405 	/*
1406 	 * Decide entry size.
1407 	 */
1408 	if (((entsize = shdr->sh_entsize) == 0) || (entsize > rsize)) {
1409 		if (shdr->sh_type == SHT_RELA)
1410 			entsize = sizeof (Rela);
1411 		else
1412 			entsize = sizeof (Rel);
1413 	}
1414 
1415 	/*
1416 	 * Build up the basic information in for the Rel_desc structure.
1417 	 */
1418 	reld.rel_osdesc = osect;
1419 	reld.rel_isdesc = isect;
1420 	reld.rel_move = 0;
1421 
1422 	if ((ofl->ofl_flags & FLG_OF_RELOBJ) ||
1423 	    (osect && (osect->os_sgdesc->sg_phdr.p_type == PT_LOAD)))
1424 		flags |= FLG_REL_LOAD;
1425 
1426 	if (shdr->sh_info == 0)
1427 		flags |= FLG_REL_NOINFO;
1428 
1429 	DBG_CALL(Dbg_reloc_proc(ofl->ofl_lml, osect, isect, rsect));
1430 
1431 	for (rend = (Rel *)((uintptr_t)reloc + (uintptr_t)rsize);
1432 	    reloc < rend;
1433 	    reloc = (Rel *)((uintptr_t)reloc + (uintptr_t)entsize)) {
1434 		Word	rsndx;
1435 
1436 		/*
1437 		 * Initialize the relocation record information and process
1438 		 * the individual relocation.  Reinitialize the flags to
1439 		 * insure we don't carry any state over from the previous
1440 		 * relocation records processing.
1441 		 */
1442 		reld.rel_flags = flags;
1443 		rsndx = ld_init_rel(&reld, (void *)reloc);
1444 
1445 		if (process_reld(ofl, rsect, &reld, rsndx, reloc) == S_ERROR)
1446 			return (S_ERROR);
1447 	}
1448 	return (1);
1449 }
1450 
1451 static uintptr_t
1452 reloc_segments(int wr_flag, Ofl_desc *ofl)
1453 {
1454 	Listnode	*lnp1;
1455 	Sg_desc		*sgp;
1456 	Is_desc		*isp;
1457 
1458 	for (LIST_TRAVERSE(&ofl->ofl_segs, lnp1, sgp)) {
1459 		Os_desc	**ospp;
1460 		Aliste	off;
1461 
1462 		if ((sgp->sg_phdr.p_flags & PF_W) != wr_flag)
1463 			continue;
1464 
1465 		for (ALIST_TRAVERSE(sgp->sg_osdescs, off, ospp)) {
1466 			Is_desc		*risp;
1467 			Listnode	*lnp3;
1468 			Os_desc		*osp = *ospp;
1469 
1470 			osp->os_szoutrels = 0;
1471 			for (LIST_TRAVERSE(&(osp->os_relisdescs), lnp3, risp)) {
1472 				Word	indx;
1473 
1474 				/*
1475 				 * Determine the input section that this
1476 				 * relocation information refers to.
1477 				 */
1478 				indx = risp->is_shdr->sh_info;
1479 				isp = risp->is_file->ifl_isdesc[indx];
1480 
1481 				/*
1482 				 * Do not process relocations against sections
1483 				 * which are being discarded (COMDAT)
1484 				 */
1485 				if (isp->is_flags & FLG_IS_DISCARD)
1486 					continue;
1487 
1488 				if (reloc_section(ofl, isp, risp, osp) ==
1489 				    S_ERROR)
1490 					return (S_ERROR);
1491 			}
1492 
1493 			/*
1494 			 * Check for relocations against non-writable
1495 			 * allocatable sections.
1496 			 */
1497 			if ((osp->os_szoutrels) &&
1498 			    (sgp->sg_phdr.p_type == PT_LOAD) &&
1499 			    ((sgp->sg_phdr.p_flags & PF_W) == 0)) {
1500 				ofl->ofl_flags |= FLG_OF_TEXTREL;
1501 				ofl->ofl_dtflags |= DF_TEXTREL;
1502 			}
1503 		}
1504 	}
1505 
1506 	return (1);
1507 }
1508 
1509 /*
1510  * Move Section related function
1511  * Get move entry
1512  */
1513 static Move *
1514 get_move_entry(Is_desc *rsect, Xword roffset)
1515 {
1516 	Ifl_desc	*ifile = rsect->is_file;
1517 	Shdr		*rshdr = rsect->is_shdr;
1518 	Is_desc		*misp;
1519 	Shdr		*mshdr;
1520 	Xword 		midx;
1521 	Move		*ret;
1522 
1523 	/*
1524 	 * Set info for the target move section
1525 	 */
1526 	misp = ifile->ifl_isdesc[rshdr->sh_info];
1527 	mshdr = (ifile->ifl_isdesc[rshdr->sh_info])->is_shdr;
1528 
1529 	if (mshdr->sh_entsize == 0)
1530 		return ((Move *)0);
1531 	midx = roffset / mshdr->sh_entsize;
1532 
1533 	ret = (Move *)misp->is_indata->d_buf;
1534 	ret += midx;
1535 
1536 	/*
1537 	 * If this is an illgal entry, retun NULL.
1538 	 */
1539 	if ((midx * mshdr->sh_entsize) >= mshdr->sh_size)
1540 		return ((Move *)0);
1541 	return (ret);
1542 }
1543 
1544 /*
1545  * Relocation against Move Table.
1546  */
1547 static uintptr_t
1548 process_movereloc(Ofl_desc *ofl, Is_desc *rsect)
1549 {
1550 	Ifl_desc	*file = rsect->is_file;
1551 	Rel		*rend, *reloc;
1552 	Xword 		rsize, entsize;
1553 	static Rel_desc reld_zero;
1554 	Rel_desc 	reld;
1555 
1556 	rsize = rsect->is_shdr->sh_size;
1557 	reloc = (Rel *)rsect->is_indata->d_buf;
1558 
1559 	reld = reld_zero;
1560 
1561 	/*
1562 	 * Decide entry size
1563 	 */
1564 	entsize = rsect->is_shdr->sh_entsize;
1565 	if ((entsize == 0) ||
1566 	    (entsize > rsect->is_shdr->sh_size)) {
1567 		if (rsect->is_shdr->sh_type == SHT_RELA)
1568 			entsize = sizeof (Rela);
1569 		else
1570 			entsize = sizeof (Rel);
1571 	}
1572 
1573 	/*
1574 	 * Go through the relocation entries.
1575 	 */
1576 	for (rend = (Rel *)((uintptr_t)reloc + (uintptr_t)rsize);
1577 	    reloc < rend;
1578 	    reloc = (Rel *)((uintptr_t)reloc + (uintptr_t)entsize)) {
1579 		Sym_desc *	psdp;
1580 		Move *		mp;
1581 		Word		rsndx;
1582 
1583 		/*
1584 		 * Initialize the relocation record information.
1585 		 */
1586 		reld.rel_flags = FLG_REL_LOAD;
1587 		rsndx = ld_init_rel(&reld, (void *)reloc);
1588 
1589 		if (((mp = get_move_entry(rsect, reloc->r_offset)) == 0) ||
1590 		    ((reld.rel_move = libld_malloc(sizeof (Mv_desc))) == 0))
1591 			return (S_ERROR);
1592 
1593 		psdp = file->ifl_oldndx[ELF_M_SYM(mp->m_info)];
1594 		reld.rel_move->mvd_move = mp;
1595 		reld.rel_move->mvd_sym = psdp;
1596 
1597 		if (psdp->sd_flags & FLG_SY_PAREXPN) {
1598 			int	_num, num;
1599 
1600 			reld.rel_osdesc = ofl->ofl_issunwdata1->is_osdesc;
1601 			reld.rel_isdesc = ofl->ofl_issunwdata1;
1602 			reld.rel_roffset = mp->m_poffset;
1603 
1604 			for (num = mp->m_repeat, _num = 0; _num < num; _num++) {
1605 				reld.rel_roffset +=
1606 					/* LINTED */
1607 					(_num * ELF_M_SIZE(mp->m_info));
1608 				/*
1609 				 * Generate Reld
1610 				 */
1611 				if (process_reld(ofl,
1612 				    rsect, &reld, rsndx, reloc) == S_ERROR)
1613 					return (S_ERROR);
1614 			}
1615 		} else {
1616 			/*
1617 			 * Generate Reld
1618 			 */
1619 			reld.rel_flags |= FLG_REL_MOVETAB;
1620 			reld.rel_osdesc = ofl->ofl_osmove;
1621 			reld.rel_isdesc =
1622 				ofl->ofl_osmove->os_isdescs.head->data;
1623 			if (process_reld(ofl,
1624 			    rsect, &reld, rsndx, reloc) == S_ERROR)
1625 				return (S_ERROR);
1626 		}
1627 	}
1628 	return (1);
1629 }
1630 
1631 /*
1632  * This function is similar to reloc_init().
1633  *
1634  * This function is called when the SHT_SUNW_move table is expanded
1635  * and there were relocation against the SHT_SUNW_move section.
1636  */
1637 static uintptr_t
1638 reloc_movesections(Ofl_desc *ofl)
1639 {
1640 	Listnode	*lnp1;
1641 	Is_desc		*risp;
1642 
1643 	/*
1644 	 * Generate/Expand relocation entries
1645 	 */
1646 	for (LIST_TRAVERSE(&ofl->ofl_mvrelisdescs, lnp1, risp)) {
1647 		if (process_movereloc(ofl, risp) == S_ERROR)
1648 			return (S_ERROR);
1649 	}
1650 
1651 	return (1);
1652 }
1653 
1654 /*
1655  * Count the number of output relocation entries, global offset table entries,
1656  * and procedure linkage table entries.  This function searches the segment and
1657  * outsect lists and passes each input reloc section to process_reloc().
1658  * It allocates space for any output relocations needed.  And builds up
1659  * the relocation structures for later processing.
1660  */
1661 uintptr_t
1662 ld_reloc_init(Ofl_desc *ofl)
1663 {
1664 	Listnode	*lnp;
1665 	Is_desc		*isp;
1666 
1667 	/*
1668 	 * At this point we have finished processing all input symbols.  Make
1669 	 * sure we add any absolute (internal) symbols before continuing with
1670 	 * any relocation processing.
1671 	 */
1672 	if (ld_sym_spec(ofl) == S_ERROR)
1673 		return (S_ERROR);
1674 
1675 	ofl->ofl_gotcnt = M_GOT_XNumber;
1676 
1677 	/*
1678 	 * First process all of the relocations against NON-writable
1679 	 * segments followed by relocations against the writeable segments.
1680 	 *
1681 	 * This separation is so that when the writable segments are processed
1682 	 * we know whether or not a COPYRELOC will be produced for any symbols.
1683 	 * If relocations aren't processed in this order, a COPYRELOC and a
1684 	 * regular relocation can be produced against the same symbol.  The
1685 	 * regular relocation would be redundant.
1686 	 */
1687 	if (reloc_segments(0, ofl) == S_ERROR)
1688 		return (S_ERROR);
1689 
1690 	if (reloc_segments(PF_W, ofl) == S_ERROR)
1691 		return (S_ERROR);
1692 
1693 	/*
1694 	 * Process any extra relocations.  These are relocation sections that
1695 	 * have a NULL sh_info.
1696 	 */
1697 	for (LIST_TRAVERSE(&ofl->ofl_extrarels, lnp, isp)) {
1698 		if (reloc_section(ofl, NULL, isp, NULL) == S_ERROR)
1699 			return (S_ERROR);
1700 	}
1701 
1702 	/*
1703 	 * If there were relocation against move table,
1704 	 * process the relocation sections.
1705 	 */
1706 	if (reloc_movesections(ofl) == S_ERROR)
1707 		return (S_ERROR);
1708 
1709 	/*
1710 	 * Now all the relocations are pre-processed,
1711 	 * check the validity of copy relocations.
1712 	 */
1713 	if (ofl->ofl_copyrels.head != 0) {
1714 		Copy_rel *	cpyrel;
1715 
1716 		for (LIST_TRAVERSE(&ofl->ofl_copyrels, lnp, cpyrel)) {
1717 			Sym_desc *	sdp;
1718 
1719 			sdp = cpyrel->copyrel_symd;
1720 			/*
1721 			 * If there were no displacement relocation
1722 			 * in this file, don't worry about it.
1723 			 */
1724 			if (sdp->sd_file->ifl_flags &
1725 			    (FLG_IF_DISPPEND | FLG_IF_DISPDONE))
1726 				is_disp_copied(ofl, cpyrel);
1727 		}
1728 	}
1729 
1730 	/*
1731 	 * GOT sections are created for dynamic executables and shared objects
1732 	 * if the FLG_OF_BLDGOT is set, or explicit reference has been made to
1733 	 * a GOT symbol.
1734 	 */
1735 	if (((ofl->ofl_flags & FLG_OF_RELOBJ) == 0) &&
1736 	    ((ofl->ofl_flags & FLG_OF_BLDGOT) ||
1737 	    (ld_sym_find(MSG_ORIG(MSG_SYM_GOFTBL),
1738 	    SYM_NOHASH, 0, ofl) != 0) ||
1739 	    (ld_sym_find(MSG_ORIG(MSG_SYM_GOFTBL_U),
1740 	    SYM_NOHASH, 0, ofl) != 0))) {
1741 		if (ld_make_got(ofl) == S_ERROR)
1742 			return (S_ERROR);
1743 
1744 #if	defined(sparc) || defined(__sparcv9)
1745 		if (ld_allocate_got(ofl) == S_ERROR)
1746 			return (S_ERROR);
1747 #elif	defined(i386) || defined(__amd64)
1748 /* nothing to do */
1749 #else
1750 #error Unknown architecture!
1751 #endif
1752 	}
1753 
1754 	return (1);
1755 }
1756 
1757 /*
1758  * Simple comparison routine to be used by qsort() for
1759  * the sorting of the output relocation list.
1760  *
1761  * The reloc_compare() routine results in a relocation
1762  * table which is located on:
1763  *
1764  *	file referenced (NEEDED NDX)
1765  *	referenced symbol
1766  *	relocation offset
1767  *
1768  * This provides the most efficient traversal of the relocation
1769  * table at run-time.
1770  */
1771 static int
1772 reloc_compare(Reloc_list *i, Reloc_list *j)
1773 {
1774 
1775 	/*
1776 	 * first - sort on neededndx
1777 	 */
1778 	if (i->rl_key1 > j->rl_key1)
1779 		return (1);
1780 	if (i->rl_key1 < j->rl_key1)
1781 		return (-1);
1782 
1783 	/*
1784 	 * Then sort on symbol
1785 	 */
1786 	if ((uintptr_t)i->rl_key2 > (uintptr_t)j->rl_key2)
1787 		return (1);
1788 	if ((uintptr_t)i->rl_key2 < (uintptr_t)j->rl_key2)
1789 		return (-1);
1790 
1791 	/*
1792 	 * i->key2 == j->key2
1793 	 *
1794 	 * At this point we fall back to key2 (offsets) to
1795 	 * sort the output relocations.  Ideally this will
1796 	 * make for the most efficient processing of these
1797 	 * relocations at run-time.
1798 	 */
1799 	if (i->rl_key3 > j->rl_key3)
1800 		return (1);
1801 	if (i->rl_key3 < j->rl_key3)
1802 		return (-1);
1803 	return (0);
1804 }
1805 
1806 static uintptr_t
1807 do_sorted_outrelocs(Ofl_desc *ofl)
1808 {
1809 	Rel_desc	*orsp;
1810 	Rel_cache	*rcp;
1811 	Listnode	*lnp;
1812 	Reloc_list	*sorted_list;
1813 	Word		index = 0;
1814 	int		debug = 0;
1815 	uintptr_t	error = 1;
1816 
1817 	if ((sorted_list = libld_malloc((size_t)(sizeof (Reloc_list) *
1818 	    ofl->ofl_reloccnt))) == NULL)
1819 		return (S_ERROR);
1820 
1821 	/*
1822 	 * All but the PLT output relocations are sorted in the output file
1823 	 * based upon their sym_desc.  By doing this multiple relocations
1824 	 * against the same symbol are grouped together, thus when the object
1825 	 * is later relocated by ld.so.1 it will take advantage of the symbol
1826 	 * cache that ld.so.1 has.  This can significantly reduce the runtime
1827 	 * relocation cost of a dynamic object.
1828 	 *
1829 	 * PLT relocations are not sorted because the order of the PLT
1830 	 * relocations is used by ld.so.1 to determine what symbol a PLT
1831 	 * relocation is against.
1832 	 */
1833 	for (LIST_TRAVERSE(&ofl->ofl_outrels, lnp, rcp)) {
1834 		/*LINTED*/
1835 		for (orsp = (Rel_desc *)(rcp + 1);
1836 		    orsp < rcp->rc_free; orsp++) {
1837 			if (debug == 0) {
1838 				DBG_CALL(Dbg_reloc_dooutrel(ofl->ofl_lml,
1839 				    M_REL_SHT_TYPE));
1840 				debug = 1;
1841 			}
1842 
1843 			/*
1844 			 * If it's a PLT relocation we output it now in the
1845 			 * order that it was originally processed.
1846 			 */
1847 			if (orsp->rel_flags & FLG_REL_PLT) {
1848 				if (ld_perform_outreloc(orsp, ofl) == S_ERROR)
1849 					error = S_ERROR;
1850 				continue;
1851 			}
1852 
1853 			if ((orsp->rel_rtype == M_R_RELATIVE) ||
1854 			    (orsp->rel_rtype == M_R_REGISTER)) {
1855 				sorted_list[index].rl_key1 = 0;
1856 				sorted_list[index].rl_key2 =
1857 				    /* LINTED */
1858 				    (Sym_desc *)(uintptr_t)orsp->rel_rtype;
1859 			} else {
1860 				sorted_list[index].rl_key1 =
1861 				    orsp->rel_sym->sd_file->ifl_neededndx;
1862 				sorted_list[index].rl_key2 =
1863 				    orsp->rel_sym;
1864 			}
1865 
1866 			if (orsp->rel_flags & FLG_REL_GOT)
1867 				sorted_list[index].rl_key3 =
1868 					ld_calc_got_offset(orsp, ofl);
1869 			else {
1870 				if (orsp->rel_rtype == M_R_REGISTER)
1871 					sorted_list[index].rl_key3 = 0;
1872 				else {
1873 					sorted_list[index].rl_key3 =
1874 						orsp->rel_roffset +
1875 						(Xword)_elf_getxoff(orsp->
1876 						rel_isdesc->
1877 						is_indata) +
1878 						orsp->rel_isdesc->is_osdesc->
1879 						os_shdr->sh_addr;
1880 				}
1881 			}
1882 
1883 			sorted_list[index++].rl_rsp = orsp;
1884 		}
1885 	}
1886 
1887 	qsort(sorted_list, (size_t)ofl->ofl_reloccnt, sizeof (Reloc_list),
1888 		(int (*)(const void *, const void *))reloc_compare);
1889 
1890 	/*
1891 	 * All output relocations have now been sorted, go through
1892 	 * and process each relocation.
1893 	 */
1894 	for (index = 0; index < ofl->ofl_reloccnt; index++) {
1895 		if (ld_perform_outreloc(sorted_list[index].rl_rsp, ofl) ==
1896 		    S_ERROR)
1897 			error = S_ERROR;
1898 	}
1899 
1900 	return (error);
1901 }
1902 
1903 /*
1904  * Process relocations.  Finds every input relocation section for each output
1905  * section and invokes reloc_sec() to relocate that section.
1906  */
1907 uintptr_t
1908 ld_reloc_process(Ofl_desc *ofl)
1909 {
1910 	Listnode	*lnp1;
1911 	Sg_desc		*sgp;
1912 	Os_desc		*osp;
1913 	Word		ndx = 0, flags = ofl->ofl_flags;
1914 	Shdr		*shdr;
1915 
1916 	/*
1917 	 * Determine the index of the symbol table that will be referenced by
1918 	 * the relocation entries.
1919 	 */
1920 	if ((flags & (FLG_OF_DYNAMIC|FLG_OF_RELOBJ)) == FLG_OF_DYNAMIC)
1921 		/* LINTED */
1922 		ndx = (Word)elf_ndxscn(ofl->ofl_osdynsym->os_scn);
1923 	else if (!(flags & FLG_OF_STRIP) || (flags & FLG_OF_RELOBJ))
1924 		/* LINTED */
1925 		ndx = (Word)elf_ndxscn(ofl->ofl_ossymtab->os_scn);
1926 
1927 	/*
1928 	 * Re-initialize counters. These are used to provide relocation
1929 	 * offsets within the output buffers.
1930 	 */
1931 	ofl->ofl_relocpltsz = 0;
1932 	ofl->ofl_relocgotsz = 0;
1933 	ofl->ofl_relocbsssz = 0;
1934 
1935 	/*
1936 	 * Now that the output file is created and symbol update has occurred,
1937 	 * process the relocations collected in process_reloc().
1938 	 */
1939 	if (do_sorted_outrelocs(ofl) == S_ERROR)
1940 		return (S_ERROR);
1941 
1942 	if (ld_do_activerelocs(ofl) == S_ERROR)
1943 		return (S_ERROR);
1944 
1945 	if ((ofl->ofl_flags1 & FLG_OF1_RELCNT) == 0) {
1946 		/*
1947 		 * Process the relocation sections:
1948 		 *
1949 		 *  o	for each relocation section generated for the output
1950 		 *	image update its shdr information to reflect the
1951 		 *	symbol table it needs (sh_link) and the section to
1952 		 *	which the relocation must be applied (sh_info).
1953 		 */
1954 		for (LIST_TRAVERSE(&ofl->ofl_segs, lnp1, sgp)) {
1955 			Os_desc **ospp;
1956 			Aliste	off;
1957 
1958 			for (ALIST_TRAVERSE(sgp->sg_osdescs, off, ospp)) {
1959 				osp = *ospp;
1960 
1961 				if (osp->os_relosdesc == 0)
1962 					continue;
1963 
1964 				shdr = osp->os_relosdesc->os_shdr;
1965 				shdr->sh_link = ndx;
1966 				/* LINTED */
1967 				shdr->sh_info = (Word)elf_ndxscn(osp->os_scn);
1968 			}
1969 		}
1970 
1971 		/*
1972 		 * Since the .rel[a] section is not tied to any specific
1973 		 * section, we'd not have found it above.
1974 		 */
1975 		if ((osp = ofl->ofl_osrel) != NULL) {
1976 			shdr = osp->os_shdr;
1977 			shdr->sh_link = ndx;
1978 			shdr->sh_info = 0;
1979 		}
1980 	} else {
1981 		/*
1982 		 * We only have two relocation sections here, (PLT's,
1983 		 * coalesced) so just hit them directly instead of stepping
1984 		 * over the output sections.
1985 		 */
1986 		if ((osp = ofl->ofl_osrelhead) != NULL) {
1987 			shdr = osp->os_shdr;
1988 			shdr->sh_link = ndx;
1989 			shdr->sh_info = 0;
1990 		}
1991 		if (((osp = ofl->ofl_osplt) != NULL) && osp->os_relosdesc) {
1992 			shdr = osp->os_relosdesc->os_shdr;
1993 			shdr->sh_link = ndx;
1994 			/* LINTED */
1995 			shdr->sh_info = (Word)elf_ndxscn(osp->os_scn);
1996 		}
1997 	}
1998 
1999 	/*
2000 	 * If the -z text option was given, and we have output relocations
2001 	 * against a non-writable, allocatable section, issue a diagnostic and
2002 	 * return (the actual entries that caused this error would have been
2003 	 * output during the relocating section phase).
2004 	 */
2005 	if ((flags & (FLG_OF_PURETXT | FLG_OF_TEXTREL)) ==
2006 	    (FLG_OF_PURETXT | FLG_OF_TEXTREL)) {
2007 		eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_REMAIN_3));
2008 		return (S_ERROR);
2009 	}
2010 
2011 	/*
2012 	 * Finally, initialize the first got entry with the address of the
2013 	 * .dynamic section (_DYNAMIC).
2014 	 */
2015 	if (flags & FLG_OF_DYNAMIC) {
2016 		if (ld_fillin_gotplt(ofl) == S_ERROR)
2017 			return (S_ERROR);
2018 	}
2019 
2020 	/*
2021 	 * Now that any GOT information has been written, display the debugging
2022 	 * information if required.
2023 	 */
2024 	if ((osp = ofl->ofl_osgot) != NULL)
2025 		DBG_CALL(Dbg_got_display(ofl, osp->os_shdr->sh_addr, 1));
2026 
2027 	return (1);
2028 }
2029 
2030 /*
2031  * If the -z text option was given, and we have output relocations against a
2032  * non-writable, allocatable section, issue a diagnostic. Print offending
2033  * symbols in tabular form similar to the way undefined symbols are presented.
2034  * Called from reloc_count().  The actual fatal error condition is triggered on
2035  * in reloc_process() above.
2036  *
2037  * Note.  For historic reasons -ztext is not a default option (however all OS
2038  * shared object builds use this option).  It can be argued that this option
2039  * should also be default when generating an a.out (see 1163979).  However, if
2040  * an a.out contains text relocations it is either because the user is creating
2041  * something pretty weird (they've used the -b or -znodefs options), or because
2042  * the library against which they're building wasn't constructed correctly (ie.
2043  * a function has a NOTYPE type, in which case the a.out won't generate an
2044  * associated plt).  In the latter case the builder of the a.out can't do
2045  * anything to fix the error - thus we've chosen not to give the user an error,
2046  * or warning, for this case.
2047  */
2048 static void
2049 reloc_remain_title(Ofl_desc *ofl, int warning)
2050 {
2051 	const char	*str1;
2052 
2053 	if (warning)
2054 		str1 = MSG_INTL(MSG_REL_RMN_ITM_13);
2055 	else
2056 		str1 = MSG_INTL(MSG_REL_RMN_ITM_11);
2057 
2058 	eprintf(ofl->ofl_lml, ERR_NONE, MSG_INTL(MSG_REL_REMAIN_FMT_1),
2059 		str1,
2060 		MSG_INTL(MSG_REL_RMN_ITM_31),
2061 		MSG_INTL(MSG_REL_RMN_ITM_12),
2062 		MSG_INTL(MSG_REL_RMN_ITM_2),
2063 		MSG_INTL(MSG_REL_RMN_ITM_32));
2064 
2065 }
2066 
2067 void
2068 ld_reloc_remain_entry(Rel_desc *orsp, Os_desc *osp, Ofl_desc *ofl)
2069 {
2070 	static Boolean	reloc_title = TRUE;
2071 
2072 	/*
2073 	 * -ztextoff
2074 	 */
2075 	if (ofl->ofl_flags1 & FLG_OF1_TEXTOFF)
2076 		return;
2077 
2078 	/*
2079 	 * Only give relocation errors against loadable read-only segments.
2080 	 */
2081 	if ((orsp->rel_rtype == M_R_REGISTER) || (!osp) ||
2082 	    (osp->os_sgdesc->sg_phdr.p_type != PT_LOAD) ||
2083 	    (osp->os_sgdesc->sg_phdr.p_flags & PF_W))
2084 		return;
2085 
2086 	/*
2087 	 * If we are in -ztextwarn mode, it's a silent error if a relocation is
2088 	 * due to a 'WEAK REFERENCE'.  This is because if the symbol is not
2089 	 * provided at run-time we will not perform a text-relocation.
2090 	 */
2091 	if (((ofl->ofl_flags & FLG_OF_PURETXT) == 0) &&
2092 	    (ELF_ST_BIND(orsp->rel_sym->sd_sym->st_info) == STB_WEAK) &&
2093 	    (orsp->rel_sym->sd_sym->st_shndx == SHN_UNDEF))
2094 		return;
2095 
2096 	if (reloc_title) {
2097 		/*
2098 		 * If building with '-ztext' then emit a fatal error.  If
2099 		 * building a executable then only emit a 'warning'.
2100 		 */
2101 		if (ofl->ofl_flags & FLG_OF_PURETXT)
2102 			reloc_remain_title(ofl, 0);
2103 		else
2104 			reloc_remain_title(ofl, 1);
2105 		reloc_title = FALSE;
2106 	}
2107 
2108 	eprintf(ofl->ofl_lml, ERR_NONE, MSG_INTL(MSG_REL_REMAIN_2),
2109 	    demangle(orsp->rel_sname), EC_OFF(orsp->rel_roffset),
2110 	    orsp->rel_isdesc->is_file->ifl_name);
2111 }
2112 
2113 /*
2114  * Generic encapsulation for generating a TLS got index.
2115  */
2116 uintptr_t
2117 ld_assign_got_TLS(Boolean local, Rel_desc *rsp, Ofl_desc *ofl, Sym_desc *sdp,
2118     Gotndx *gnp, Gotref gref, Word rflag, Word ortype, Word rtype1, Word rtype2)
2119 {
2120 	Word	rflags;
2121 
2122 	if (ld_assign_got_ndx(&(sdp->sd_GOTndxs), gnp, gref, ofl,
2123 	    rsp, sdp) == S_ERROR)
2124 		return (S_ERROR);
2125 
2126 	rflags = FLG_REL_GOT | rflag;
2127 	if (local)
2128 		rflags |= FLG_REL_SCNNDX;
2129 	rsp->rel_rtype = rtype1;
2130 
2131 	if (ld_add_outrel(rflags, rsp, ofl) == S_ERROR)
2132 		return (S_ERROR);
2133 
2134 	if (local && (gref == GOT_REF_TLSIE)) {
2135 		/*
2136 		 * If this is a local LE TLS symbol, then the symbol won't be
2137 		 * available at runtime.  The value of the local symbol will
2138 		 * be placed in the associated got entry, and the got
2139 		 * relocation is reassigned to a section symbol.
2140 		 */
2141 		if (ld_add_actrel(rflags, rsp, ofl) == S_ERROR)
2142 			return (S_ERROR);
2143 	}
2144 
2145 	if (rtype2) {
2146 		rflags = FLG_REL_GOT | rflag;
2147 		rsp->rel_rtype = rtype2;
2148 
2149 		if (local) {
2150 			if (ld_add_actrel(rflags, rsp, ofl) == S_ERROR)
2151 				return (S_ERROR);
2152 		} else {
2153 			if (ld_add_outrel(rflags, rsp, ofl) == S_ERROR)
2154 				return (S_ERROR);
2155 		}
2156 	}
2157 
2158 	rsp->rel_rtype = ortype;
2159 
2160 	return (1);
2161 }
2162 
2163 /*
2164  * Move Section related function
2165  */
2166 static uintptr_t
2167 newroffset_for_move(Sym_desc *symd,
2168 	Move *mventry, Xword offset1, Xword *offset2)
2169 {
2170 	Psym_info	*psym = symd->sd_psyminfo;
2171 	Mv_itm		*itm;
2172 	Listnode	*lnp1;
2173 	int 		found = 0;
2174 
2175 	/*
2176 	 * Search for matching move entry
2177 	 */
2178 	found = 0;
2179 	for (LIST_TRAVERSE(&psym->psym_mvs, lnp1, itm)) {
2180 		if (itm->mv_ientry == mventry) {
2181 			found = 1;
2182 			break;
2183 		}
2184 	}
2185 	if (found == 0) {
2186 		/*
2187 		 * This should never happen.
2188 		 */
2189 		return (S_ERROR);
2190 	}
2191 
2192 	/*
2193 	 * Update r_offset
2194 	 */
2195 	*offset2 = (Xword)((itm->mv_oidx - 1)*sizeof (Move) +
2196 		offset1 % sizeof (Move));
2197 	return (1);
2198 }
2199 
2200 void
2201 ld_adj_movereloc(Ofl_desc *ofl, Rel_desc *arsp)
2202 {
2203 	Move		*move = arsp->rel_move->mvd_move;
2204 	Sym_desc	*psdp = arsp->rel_move->mvd_sym;
2205 	Xword		newoffset;
2206 
2207 	if (arsp->rel_flags & FLG_REL_MOVETAB) {
2208 		/*
2209 		 * We are relocating the move table itself.
2210 		 */
2211 		(void) newroffset_for_move(psdp, move, arsp->rel_roffset,
2212 		    &newoffset);
2213 		DBG_CALL(Dbg_move_adjmovereloc(ofl->ofl_lml, arsp->rel_roffset,
2214 		    newoffset, psdp->sd_name));
2215 		arsp->rel_roffset = newoffset;
2216 	} else {
2217 		/*
2218 		 * We are expanding the partial symbol.  So we are generating
2219 		 * the relocation entry relocating the expanded partial symbol.
2220 		 */
2221 		arsp->rel_roffset += psdp->sd_sym->st_value -
2222 		    ofl->ofl_issunwdata1->is_osdesc->os_shdr->sh_addr;
2223 		DBG_CALL(Dbg_move_adjexpandreloc(ofl->ofl_lml,
2224 		    arsp->rel_roffset, psdp->sd_name));
2225 	}
2226 }
2227 
2228 /*
2229  * Partially Initialized Symbol Handling routines
2230  * For sparc architecture, the second argument is reld->rel_raddend.
2231  * For i386  acrchitecure, the second argument is the value stored
2232  *	at the relocation target address.
2233  */
2234 Sym_desc *
2235 ld_am_I_partial(Rel_desc *reld, Xword val)
2236 {
2237 	Ifl_desc *	ifile = reld->rel_sym->sd_isc->is_file;
2238 	int 		nlocs = ifile->ifl_locscnt, i;
2239 
2240 	for (i = 1; i < nlocs; i++) {
2241 		Sym *		osym;
2242 		Sym_desc *	symd = ifile->ifl_oldndx[i];
2243 
2244 		if ((osym = symd->sd_osym) == 0)
2245 			continue;
2246 		if ((symd->sd_flags & FLG_SY_PAREXPN) == 0)
2247 			continue;
2248 		if ((osym->st_value <= val) &&
2249 		    (osym->st_value + osym->st_size  > val))
2250 			return (symd);
2251 	}
2252 	return ((Sym_desc *) 0);
2253 }
2254 
2255 /*
2256  * Because of the combinations of 32-bit lib providing 64-bit support, and
2257  * visa-versa, the use of krtld's dorelocs can result in differing message
2258  * requirements that make msg.c/msg.h creation and chkmsg "interesting".
2259  * Thus the actual message files contain a couple of entries to satisfy
2260  * each architectures build.  Here we add dummy calls to quieten chkmsg.
2261  *
2262  * chkmsg: MSG_INTL(MSG_REL_NOFIT)
2263  * chkmsg: MSG_INTL(MSG_REL_NONALIGN)
2264  */
2265