| // SPDX-License-Identifier: GPL-2.0-only |
| /* |
| * a.out loader for x86-64 |
| * |
| * Copyright (C) 1991, 1992, 1996 Linus Torvalds |
| * Hacked together by Andi Kleen |
| */ |
| |
| #include <linux/module.h> |
| |
| #include <linux/time.h> |
| #include <linux/kernel.h> |
| #include <linux/mm.h> |
| #include <linux/mman.h> |
| #include <linux/a.out.h> |
| #include <linux/errno.h> |
| #include <linux/signal.h> |
| #include <linux/string.h> |
| #include <linux/fs.h> |
| #include <linux/file.h> |
| #include <linux/stat.h> |
| #include <linux/fcntl.h> |
| #include <linux/ptrace.h> |
| #include <linux/user.h> |
| #include <linux/binfmts.h> |
| #include <linux/personality.h> |
| #include <linux/init.h> |
| #include <linux/jiffies.h> |
| #include <linux/perf_event.h> |
| #include <linux/sched/task_stack.h> |
| |
| #include <linux/uaccess.h> |
| #include <asm/cacheflush.h> |
| #include <asm/user32.h> |
| #include <asm/ia32.h> |
| |
| #undef WARN_OLD |
| |
| static int load_aout_binary(struct linux_binprm *); |
| static int load_aout_library(struct file *); |
| |
| static struct linux_binfmt aout_format = { |
| .module = THIS_MODULE, |
| .load_binary = load_aout_binary, |
| .load_shlib = load_aout_library, |
| }; |
| |
| static int set_brk(unsigned long start, unsigned long end) |
| { |
| start = PAGE_ALIGN(start); |
| end = PAGE_ALIGN(end); |
| if (end <= start) |
| return 0; |
| return vm_brk(start, end - start); |
| } |
| |
| |
| /* |
| * create_aout_tables() parses the env- and arg-strings in new user |
| * memory and creates the pointer tables from them, and puts their |
| * addresses on the "stack", returning the new stack pointer value. |
| */ |
| static u32 __user *create_aout_tables(char __user *p, struct linux_binprm *bprm) |
| { |
| u32 __user *argv, *envp, *sp; |
| int argc = bprm->argc, envc = bprm->envc; |
| |
| sp = (u32 __user *) ((-(unsigned long)sizeof(u32)) & (unsigned long) p); |
| sp -= envc+1; |
| envp = sp; |
| sp -= argc+1; |
| argv = sp; |
| put_user((unsigned long) envp, --sp); |
| put_user((unsigned long) argv, --sp); |
| put_user(argc, --sp); |
| current->mm->arg_start = (unsigned long) p; |
| while (argc-- > 0) { |
| char c; |
| |
| put_user((u32)(unsigned long)p, argv++); |
| do { |
| get_user(c, p++); |
| } while (c); |
| } |
| put_user(0, argv); |
| current->mm->arg_end = current->mm->env_start = (unsigned long) p; |
| while (envc-- > 0) { |
| char c; |
| |
| put_user((u32)(unsigned long)p, envp++); |
| do { |
| get_user(c, p++); |
| } while (c); |
| } |
| put_user(0, envp); |
| current->mm->env_end = (unsigned long) p; |
| return sp; |
| } |
| |
| /* |
| * These are the functions used to load a.out style executables and shared |
| * libraries. There is no binary dependent code anywhere else. |
| */ |
| static int load_aout_binary(struct linux_binprm *bprm) |
| { |
| unsigned long error, fd_offset, rlim; |
| struct pt_regs *regs = current_pt_regs(); |
| struct exec ex; |
| int retval; |
| |
| ex = *((struct exec *) bprm->buf); /* exec-header */ |
| if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != OMAGIC && |
| N_MAGIC(ex) != QMAGIC && N_MAGIC(ex) != NMAGIC) || |
| N_TRSIZE(ex) || N_DRSIZE(ex) || |
| i_size_read(file_inode(bprm->file)) < |
| ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) { |
| return -ENOEXEC; |
| } |
| |
| fd_offset = N_TXTOFF(ex); |
| |
| /* Check initial limits. This avoids letting people circumvent |
| * size limits imposed on them by creating programs with large |
| * arrays in the data or bss. |
| */ |
| rlim = rlimit(RLIMIT_DATA); |
| if (rlim >= RLIM_INFINITY) |
| rlim = ~0; |
| if (ex.a_data + ex.a_bss > rlim) |
| return -ENOMEM; |
| |
| /* Flush all traces of the currently running executable */ |
| retval = begin_new_exec(bprm); |
| if (retval) |
| return retval; |
| |
| /* OK, This is the point of no return */ |
| set_personality(PER_LINUX); |
| set_personality_ia32(false); |
| |
| setup_new_exec(bprm); |
| |
| regs->cs = __USER32_CS; |
| regs->r8 = regs->r9 = regs->r10 = regs->r11 = regs->r12 = |
| regs->r13 = regs->r14 = regs->r15 = 0; |
| |
| current->mm->end_code = ex.a_text + |
| (current->mm->start_code = N_TXTADDR(ex)); |
| current->mm->end_data = ex.a_data + |
| (current->mm->start_data = N_DATADDR(ex)); |
| current->mm->brk = ex.a_bss + |
| (current->mm->start_brk = N_BSSADDR(ex)); |
| |
| retval = setup_arg_pages(bprm, IA32_STACK_TOP, EXSTACK_DEFAULT); |
| if (retval < 0) |
| return retval; |
| |
| if (N_MAGIC(ex) == OMAGIC) { |
| unsigned long text_addr, map_size; |
| |
| text_addr = N_TXTADDR(ex); |
| map_size = ex.a_text+ex.a_data; |
| |
| error = vm_brk(text_addr & PAGE_MASK, map_size); |
| |
| if (error) |
| return error; |
| |
| error = read_code(bprm->file, text_addr, 32, |
| ex.a_text + ex.a_data); |
| if ((signed long)error < 0) |
| return error; |
| } else { |
| #ifdef WARN_OLD |
| static unsigned long error_time, error_time2; |
| if ((ex.a_text & 0xfff || ex.a_data & 0xfff) && |
| (N_MAGIC(ex) != NMAGIC) && |
| time_after(jiffies, error_time2 + 5*HZ)) { |
| printk(KERN_NOTICE "executable not page aligned\n"); |
| error_time2 = jiffies; |
| } |
| |
| if ((fd_offset & ~PAGE_MASK) != 0 && |
| time_after(jiffies, error_time + 5*HZ)) { |
| printk(KERN_WARNING |
| "fd_offset is not page aligned. Please convert " |
| "program: %pD\n", |
| bprm->file); |
| error_time = jiffies; |
| } |
| #endif |
| |
| if (!bprm->file->f_op->mmap || (fd_offset & ~PAGE_MASK) != 0) { |
| error = vm_brk(N_TXTADDR(ex), ex.a_text+ex.a_data); |
| if (error) |
| return error; |
| |
| read_code(bprm->file, N_TXTADDR(ex), fd_offset, |
| ex.a_text+ex.a_data); |
| goto beyond_if; |
| } |
| |
| error = vm_mmap(bprm->file, N_TXTADDR(ex), ex.a_text, |
| PROT_READ | PROT_EXEC, |
| MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | |
| MAP_32BIT, |
| fd_offset); |
| |
| if (error != N_TXTADDR(ex)) |
| return error; |
| |
| error = vm_mmap(bprm->file, N_DATADDR(ex), ex.a_data, |
| PROT_READ | PROT_WRITE | PROT_EXEC, |
| MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | |
| MAP_32BIT, |
| fd_offset + ex.a_text); |
| if (error != N_DATADDR(ex)) |
| return error; |
| } |
| |
| beyond_if: |
| error = set_brk(current->mm->start_brk, current->mm->brk); |
| if (error) |
| return error; |
| |
| set_binfmt(&aout_format); |
| |
| current->mm->start_stack = |
| (unsigned long)create_aout_tables((char __user *)bprm->p, bprm); |
| /* start thread */ |
| loadsegment(fs, 0); |
| loadsegment(ds, __USER32_DS); |
| loadsegment(es, __USER32_DS); |
| load_gs_index(0); |
| (regs)->ip = ex.a_entry; |
| (regs)->sp = current->mm->start_stack; |
| (regs)->flags = 0x200; |
| (regs)->cs = __USER32_CS; |
| (regs)->ss = __USER32_DS; |
| regs->r8 = regs->r9 = regs->r10 = regs->r11 = |
| regs->r12 = regs->r13 = regs->r14 = regs->r15 = 0; |
| return 0; |
| } |
| |
| static int load_aout_library(struct file *file) |
| { |
| unsigned long bss, start_addr, len, error; |
| int retval; |
| struct exec ex; |
| loff_t pos = 0; |
| |
| retval = -ENOEXEC; |
| error = kernel_read(file, &ex, sizeof(ex), &pos); |
| if (error != sizeof(ex)) |
| goto out; |
| |
| /* We come in here for the regular a.out style of shared libraries */ |
| if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != QMAGIC) || N_TRSIZE(ex) || |
| N_DRSIZE(ex) || ((ex.a_entry & 0xfff) && N_MAGIC(ex) == ZMAGIC) || |
| i_size_read(file_inode(file)) < |
| ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) { |
| goto out; |
| } |
| |
| if (N_FLAGS(ex)) |
| goto out; |
| |
| /* For QMAGIC, the starting address is 0x20 into the page. We mask |
| this off to get the starting address for the page */ |
| |
| start_addr = ex.a_entry & 0xfffff000; |
| |
| if ((N_TXTOFF(ex) & ~PAGE_MASK) != 0) { |
| #ifdef WARN_OLD |
| static unsigned long error_time; |
| if (time_after(jiffies, error_time + 5*HZ)) { |
| printk(KERN_WARNING |
| "N_TXTOFF is not page aligned. Please convert " |
| "library: %pD\n", |
| file); |
| error_time = jiffies; |
| } |
| #endif |
| retval = vm_brk(start_addr, ex.a_text + ex.a_data + ex.a_bss); |
| if (retval) |
| goto out; |
| |
| read_code(file, start_addr, N_TXTOFF(ex), |
| ex.a_text + ex.a_data); |
| retval = 0; |
| goto out; |
| } |
| /* Now use mmap to map the library into memory. */ |
| error = vm_mmap(file, start_addr, ex.a_text + ex.a_data, |
| PROT_READ | PROT_WRITE | PROT_EXEC, |
| MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | MAP_32BIT, |
| N_TXTOFF(ex)); |
| retval = error; |
| if (error != start_addr) |
| goto out; |
| |
| len = PAGE_ALIGN(ex.a_text + ex.a_data); |
| bss = ex.a_text + ex.a_data + ex.a_bss; |
| if (bss > len) { |
| retval = vm_brk(start_addr + len, bss - len); |
| if (retval) |
| goto out; |
| } |
| retval = 0; |
| out: |
| return retval; |
| } |
| |
| static int __init init_aout_binfmt(void) |
| { |
| register_binfmt(&aout_format); |
| return 0; |
| } |
| |
| static void __exit exit_aout_binfmt(void) |
| { |
| unregister_binfmt(&aout_format); |
| } |
| |
| module_init(init_aout_binfmt); |
| module_exit(exit_aout_binfmt); |
| MODULE_LICENSE("GPL"); |