| /* Kernel module help for Meta. |
| |
| This program is free software; you can redistribute it and/or modify |
| it under the terms of the GNU General Public License as published by |
| the Free Software Foundation; either version 2 of the License, or |
| (at your option) any later version. |
| |
| This program is distributed in the hope that it will be useful, |
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| GNU General Public License for more details. |
| */ |
| #include <linux/moduleloader.h> |
| #include <linux/elf.h> |
| #include <linux/vmalloc.h> |
| #include <linux/fs.h> |
| #include <linux/string.h> |
| #include <linux/kernel.h> |
| #include <linux/sort.h> |
| |
| #include <asm/unaligned.h> |
| |
| /* Count how many different relocations (different symbol, different |
| addend) */ |
| static unsigned int count_relocs(const Elf32_Rela *rela, unsigned int num) |
| { |
| unsigned int i, r_info, r_addend, _count_relocs; |
| |
| _count_relocs = 0; |
| r_info = 0; |
| r_addend = 0; |
| for (i = 0; i < num; i++) |
| /* Only count relbranch relocs, others don't need stubs */ |
| if (ELF32_R_TYPE(rela[i].r_info) == R_METAG_RELBRANCH && |
| (r_info != ELF32_R_SYM(rela[i].r_info) || |
| r_addend != rela[i].r_addend)) { |
| _count_relocs++; |
| r_info = ELF32_R_SYM(rela[i].r_info); |
| r_addend = rela[i].r_addend; |
| } |
| |
| return _count_relocs; |
| } |
| |
| static int relacmp(const void *_x, const void *_y) |
| { |
| const Elf32_Rela *x, *y; |
| |
| y = (Elf32_Rela *)_x; |
| x = (Elf32_Rela *)_y; |
| |
| /* Compare the entire r_info (as opposed to ELF32_R_SYM(r_info) only) to |
| * make the comparison cheaper/faster. It won't affect the sorting or |
| * the counting algorithms' performance |
| */ |
| if (x->r_info < y->r_info) |
| return -1; |
| else if (x->r_info > y->r_info) |
| return 1; |
| else if (x->r_addend < y->r_addend) |
| return -1; |
| else if (x->r_addend > y->r_addend) |
| return 1; |
| else |
| return 0; |
| } |
| |
| static void relaswap(void *_x, void *_y, int size) |
| { |
| uint32_t *x, *y, tmp; |
| int i; |
| |
| y = (uint32_t *)_x; |
| x = (uint32_t *)_y; |
| |
| for (i = 0; i < sizeof(Elf32_Rela) / sizeof(uint32_t); i++) { |
| tmp = x[i]; |
| x[i] = y[i]; |
| y[i] = tmp; |
| } |
| } |
| |
| /* Get the potential trampolines size required of the init and |
| non-init sections */ |
| static unsigned long get_plt_size(const Elf32_Ehdr *hdr, |
| const Elf32_Shdr *sechdrs, |
| const char *secstrings, |
| int is_init) |
| { |
| unsigned long ret = 0; |
| unsigned i; |
| |
| /* Everything marked ALLOC (this includes the exported |
| symbols) */ |
| for (i = 1; i < hdr->e_shnum; i++) { |
| /* If it's called *.init*, and we're not init, we're |
| not interested */ |
| if ((strstr(secstrings + sechdrs[i].sh_name, ".init") != NULL) |
| != is_init) |
| continue; |
| |
| /* We don't want to look at debug sections. */ |
| if (strstr(secstrings + sechdrs[i].sh_name, ".debug") != NULL) |
| continue; |
| |
| if (sechdrs[i].sh_type == SHT_RELA) { |
| pr_debug("Found relocations in section %u\n", i); |
| pr_debug("Ptr: %p. Number: %u\n", |
| (void *)hdr + sechdrs[i].sh_offset, |
| sechdrs[i].sh_size / sizeof(Elf32_Rela)); |
| |
| /* Sort the relocation information based on a symbol and |
| * addend key. This is a stable O(n*log n) complexity |
| * alogrithm but it will reduce the complexity of |
| * count_relocs() to linear complexity O(n) |
| */ |
| sort((void *)hdr + sechdrs[i].sh_offset, |
| sechdrs[i].sh_size / sizeof(Elf32_Rela), |
| sizeof(Elf32_Rela), relacmp, relaswap); |
| |
| ret += count_relocs((void *)hdr |
| + sechdrs[i].sh_offset, |
| sechdrs[i].sh_size |
| / sizeof(Elf32_Rela)) |
| * sizeof(struct metag_plt_entry); |
| } |
| } |
| |
| return ret; |
| } |
| |
| int module_frob_arch_sections(Elf32_Ehdr *hdr, |
| Elf32_Shdr *sechdrs, |
| char *secstrings, |
| struct module *me) |
| { |
| unsigned int i; |
| |
| /* Find .plt and .init.plt sections */ |
| for (i = 0; i < hdr->e_shnum; i++) { |
| if (strcmp(secstrings + sechdrs[i].sh_name, ".init.plt") == 0) |
| me->arch.init_plt_section = i; |
| else if (strcmp(secstrings + sechdrs[i].sh_name, ".plt") == 0) |
| me->arch.core_plt_section = i; |
| } |
| if (!me->arch.core_plt_section || !me->arch.init_plt_section) { |
| pr_err("Module doesn't contain .plt or .init.plt sections.\n"); |
| return -ENOEXEC; |
| } |
| |
| /* Override their sizes */ |
| sechdrs[me->arch.core_plt_section].sh_size |
| = get_plt_size(hdr, sechdrs, secstrings, 0); |
| sechdrs[me->arch.core_plt_section].sh_type = SHT_NOBITS; |
| sechdrs[me->arch.init_plt_section].sh_size |
| = get_plt_size(hdr, sechdrs, secstrings, 1); |
| sechdrs[me->arch.init_plt_section].sh_type = SHT_NOBITS; |
| return 0; |
| } |
| |
| /* Set up a trampoline in the PLT to bounce us to the distant function */ |
| static uint32_t do_plt_call(void *location, Elf32_Addr val, |
| Elf32_Shdr *sechdrs, struct module *mod) |
| { |
| struct metag_plt_entry *entry; |
| /* Instructions used to do the indirect jump. */ |
| uint32_t tramp[2]; |
| |
| /* We have to trash a register, so we assume that any control |
| transfer more than 21-bits away must be a function call |
| (so we can use a call-clobbered register). */ |
| |
| /* MOVT D0Re0,#HI(v) */ |
| tramp[0] = 0x02000005 | (((val & 0xffff0000) >> 16) << 3); |
| /* JUMP D0Re0,#LO(v) */ |
| tramp[1] = 0xac000001 | ((val & 0x0000ffff) << 3); |
| |
| /* Init, or core PLT? */ |
| if (location >= mod->core_layout.base |
| && location < mod->core_layout.base + mod->core_layout.size) |
| entry = (void *)sechdrs[mod->arch.core_plt_section].sh_addr; |
| else |
| entry = (void *)sechdrs[mod->arch.init_plt_section].sh_addr; |
| |
| /* Find this entry, or if that fails, the next avail. entry */ |
| while (entry->tramp[0]) |
| if (entry->tramp[0] == tramp[0] && entry->tramp[1] == tramp[1]) |
| return (uint32_t)entry; |
| else |
| entry++; |
| |
| entry->tramp[0] = tramp[0]; |
| entry->tramp[1] = tramp[1]; |
| |
| return (uint32_t)entry; |
| } |
| |
| int apply_relocate_add(Elf32_Shdr *sechdrs, |
| const char *strtab, |
| unsigned int symindex, |
| unsigned int relsec, |
| struct module *me) |
| { |
| unsigned int i; |
| Elf32_Rela *rel = (void *)sechdrs[relsec].sh_addr; |
| Elf32_Sym *sym; |
| Elf32_Addr relocation; |
| uint32_t *location; |
| int32_t value; |
| |
| pr_debug("Applying relocate section %u to %u\n", relsec, |
| sechdrs[relsec].sh_info); |
| for (i = 0; i < sechdrs[relsec].sh_size / sizeof(*rel); i++) { |
| /* This is where to make the change */ |
| location = (void *)sechdrs[sechdrs[relsec].sh_info].sh_addr |
| + rel[i].r_offset; |
| /* This is the symbol it is referring to. Note that all |
| undefined symbols have been resolved. */ |
| sym = (Elf32_Sym *)sechdrs[symindex].sh_addr |
| + ELF32_R_SYM(rel[i].r_info); |
| relocation = sym->st_value + rel[i].r_addend; |
| |
| switch (ELF32_R_TYPE(rel[i].r_info)) { |
| case R_METAG_NONE: |
| break; |
| case R_METAG_HIADDR16: |
| relocation >>= 16; |
| case R_METAG_LOADDR16: |
| *location = (*location & 0xfff80007) | |
| ((relocation & 0xffff) << 3); |
| break; |
| case R_METAG_ADDR32: |
| /* |
| * Packed data structures may cause a misaligned |
| * R_METAG_ADDR32 to be emitted. |
| */ |
| put_unaligned(relocation, location); |
| break; |
| case R_METAG_GETSETOFF: |
| *location += ((relocation & 0xfff) << 7); |
| break; |
| case R_METAG_RELBRANCH: |
| if (*location & (0x7ffff << 5)) { |
| pr_err("bad relbranch relocation\n"); |
| break; |
| } |
| |
| /* This jump is too big for the offset slot. Build |
| * a PLT to jump through to get to where we want to go. |
| * NB: 21bit check - not scaled to 19bit yet |
| */ |
| if (((int32_t)(relocation - |
| (uint32_t)location) > 0xfffff) || |
| ((int32_t)(relocation - |
| (uint32_t)location) < -0xfffff)) { |
| relocation = do_plt_call(location, relocation, |
| sechdrs, me); |
| } |
| |
| value = relocation - (uint32_t)location; |
| |
| /* branch instruction aligned */ |
| value /= 4; |
| |
| if ((value > 0x7ffff) || (value < -0x7ffff)) { |
| /* |
| * this should have been caught by the code |
| * above! |
| */ |
| pr_err("overflow of relbranch reloc\n"); |
| } |
| |
| *location = (*location & (~(0x7ffff << 5))) | |
| ((value & 0x7ffff) << 5); |
| break; |
| |
| default: |
| pr_err("module %s: Unknown relocation: %u\n", |
| me->name, ELF32_R_TYPE(rel[i].r_info)); |
| return -ENOEXEC; |
| } |
| } |
| return 0; |
| } |