dynlink.c 23.0 KB
Newer Older
R
Rich Felker 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <stdint.h>
#include <elf.h>
#include <sys/mman.h>
#include <limits.h>
#include <stdint.h>
#include <fcntl.h>
#include <sys/stat.h>
#include <errno.h>
#include <limits.h>
#include <elf.h>
R
Rich Felker 已提交
15
#include <setjmp.h>
16
#include <pthread.h>
R
Rich Felker 已提交
17
#include <ctype.h>
18
#include <dlfcn.h>
R
Rich Felker 已提交
19

R
Rich Felker 已提交
20
static int errflag;
21
static char errbuf[128];
R
Rich Felker 已提交
22

23
#ifdef SHARED
R
Rich Felker 已提交
24

R
Rich Felker 已提交
25 26 27 28 29 30 31 32 33 34 35 36 37 38
#if ULONG_MAX == 0xffffffff
typedef Elf32_Ehdr Ehdr;
typedef Elf32_Phdr Phdr;
typedef Elf32_Sym Sym;
#define R_TYPE(x) ((x)&255)
#define R_SYM(x) ((x)>>8)
#else
typedef Elf64_Ehdr Ehdr;
typedef Elf64_Phdr Phdr;
typedef Elf64_Sym Sym;
#define R_TYPE(x) ((x)&0xffffffff)
#define R_SYM(x) ((x)>>32)
#endif

39 40 41 42 43 44 45 46 47 48 49 50
struct debug {
	int ver;
	void *head;
	void (*bp)(void);
	int state;
	void *base;
};

struct dso {
	unsigned char *base;
	char *name;
	size_t *dynv;
R
Rich Felker 已提交
51
	struct dso *next, *prev;
52

R
Rich Felker 已提交
53 54
	int refcnt;
	Sym *syms;
55
	uint32_t *hashtab;
56
	uint32_t *ghashtab;
R
Rich Felker 已提交
57 58 59 60 61
	char *strings;
	unsigned char *map;
	size_t map_len;
	dev_t dev;
	ino_t ino;
62
	signed char global;
63 64
	char relocated;
	char constructed;
65
	struct dso **deps;
66
	char *shortname;
R
Rich Felker 已提交
67
	char buf[];
R
Rich Felker 已提交
68 69
};

70 71
#include "reloc.h"

72
void __init_ssp(size_t *);
73

R
Rich Felker 已提交
74
static struct dso *head, *tail, *libc;
75
static char *env_path, *sys_path, *r_path;
76
static int rtld_used;
77
static int ssp_used;
R
Rich Felker 已提交
78
static int runtime;
79
static int ldd_mode;
80
static int ldso_fail;
R
Rich Felker 已提交
81
static jmp_buf rtld_fail;
82
static pthread_rwlock_t lock;
83
static struct debug debug;
84
static size_t *auxv;
85 86

struct debug *_dl_debug_addr = &debug;
R
Rich Felker 已提交
87

R
Rich Felker 已提交
88
#define AUX_CNT 24
R
Rich Felker 已提交
89 90 91 92 93 94 95 96 97 98 99
#define DYN_CNT 34

static void decode_vec(size_t *v, size_t *a, size_t cnt)
{
	memset(a, 0, cnt*sizeof(size_t));
	for (; v[0]; v+=2) if (v[0]<cnt) {
		a[0] |= 1ULL<<v[0];
		a[v[0]] = v[1];
	}
}

100 101 102 103 104 105 106 107 108
static int search_vec(size_t *v, size_t *r, size_t key)
{
	for (; v[0]!=key; v+=2)
		if (!v[0]) return 0;
	*r = v[1];
	return 1;
}

static uint32_t sysv_hash(const char *s0)
R
Rich Felker 已提交
109
{
110
	const unsigned char *s = (void *)s0;
R
Rich Felker 已提交
111 112 113 114 115 116 117 118
	uint_fast32_t h = 0;
	while (*s) {
		h = 16*h + *s++;
		h ^= h>>24 & 0xf0;
	}
	return h & 0xfffffff;
}

119 120 121 122 123 124 125 126 127 128
static uint32_t gnu_hash(const char *s0)
{
	const unsigned char *s = (void *)s0;
	uint_fast32_t h = 5381;
	for (; *s; s++)
		h = h*33 + *s;
	return h;
}

static Sym *sysv_lookup(const char *s, uint32_t h, struct dso *dso)
R
Rich Felker 已提交
129 130
{
	size_t i;
R
Rich Felker 已提交
131 132 133
	Sym *syms = dso->syms;
	uint32_t *hashtab = dso->hashtab;
	char *strings = dso->strings;
R
Rich Felker 已提交
134 135 136 137 138 139 140
	for (i=hashtab[2+h%hashtab[0]]; i; i=hashtab[2+hashtab[0]+i]) {
		if (!strcmp(s, strings+syms[i].st_name))
			return syms+i;
	}
	return 0;
}

141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167
static Sym *gnu_lookup(const char *s, uint32_t h1, struct dso *dso)
{
	Sym *sym;
	char *strings;
	uint32_t *hashtab = dso->ghashtab;
	uint32_t nbuckets = hashtab[0];
	uint32_t *buckets = hashtab + 4 + hashtab[2]*(sizeof(size_t)/4);
	uint32_t h2;
	uint32_t *hashval;
	uint32_t n = buckets[h1 % nbuckets];

	if (!n) return 0;

	strings = dso->strings;
	sym = dso->syms + n;
	hashval = buckets + nbuckets + (n - hashtab[1]);

	for (h1 |= 1; ; sym++) {
		h2 = *hashval++;
		if ((h1 == (h2|1)) && !strcmp(s, strings + sym->st_name))
			return sym;
		if (h2 & 1) break;
	}

	return 0;
}

R
Rich Felker 已提交
168
#define OK_TYPES (1<<STT_NOTYPE | 1<<STT_OBJECT | 1<<STT_FUNC | 1<<STT_COMMON)
169
#define OK_BINDS (1<<STB_GLOBAL | 1<<STB_WEAK)
R
Rich Felker 已提交
170 171 172

static void *find_sym(struct dso *dso, const char *s, int need_def)
{
173
	uint32_t h = 0, gh = 0;
174
	void *def = 0;
175 176 177 178 179 180 181 182 183 184 185
	if (dso->ghashtab) {
		gh = gnu_hash(s);
		if (gh == 0xf9040207 && !strcmp(s, "dlopen")) rtld_used = 1;
		if (gh == 0xf4dc4ae && !strcmp(s, "dlsym")) rtld_used = 1;
		if (gh == 0x1f4039c9 && !strcmp(s, "__stack_chk_fail")) ssp_used = 1;
	} else {
		h = sysv_hash(s);
		if (h == 0x6b366be && !strcmp(s, "dlopen")) rtld_used = 1;
		if (h == 0x6b3afd && !strcmp(s, "dlsym")) rtld_used = 1;
		if (h == 0x595a4cc && !strcmp(s, "__stack_chk_fail")) ssp_used = 1;
	}
R
Rich Felker 已提交
186
	for (; dso; dso=dso->next) {
187 188
		Sym *sym;
		if (!dso->global) continue;
189 190 191 192 193 194 195
		if (dso->ghashtab) {
			if (!gh) gh = gnu_hash(s);
			sym = gnu_lookup(s, gh, dso);
		} else {
			if (!h) h = sysv_hash(s);
			sym = sysv_lookup(s, h, dso);
		}
R
Rich Felker 已提交
196
		if (sym && (!need_def || sym->st_shndx) && sym->st_value
197 198
		 && (1<<(sym->st_info&0xf) & OK_TYPES)
		 && (1<<(sym->st_info>>4) & OK_BINDS)) {
199
			if (def && sym->st_info>>4 == STB_WEAK) continue;
200 201 202
			def = dso->base + sym->st_value;
			if (sym->st_info>>4 == STB_GLOBAL) break;
		}
R
Rich Felker 已提交
203
	}
204
	return def;
R
Rich Felker 已提交
205 206
}

207
static void do_relocs(struct dso *dso, size_t *rel, size_t rel_size, size_t stride)
R
Rich Felker 已提交
208
{
209 210 211
	unsigned char *base = dso->base;
	Sym *syms = dso->syms;
	char *strings = dso->strings;
R
Rich Felker 已提交
212 213 214 215 216 217 218 219 220 221 222 223 224 225 226
	Sym *sym;
	const char *name;
	size_t sym_val, sym_size;
	size_t *reloc_addr;
	void *ctx;
	int type;
	int sym_index;

	for (; rel_size; rel+=stride, rel_size-=stride*sizeof(size_t)) {
		reloc_addr = (void *)(base + rel[0]);
		type = R_TYPE(rel[1]);
		sym_index = R_SYM(rel[1]);
		if (sym_index) {
			sym = syms + sym_index;
			name = strings + sym->st_name;
227
			ctx = IS_COPY(type) ? head->next : head;
228
			sym_val = (size_t)find_sym(ctx, name, IS_PLT(type));
R
Rich Felker 已提交
229
			if (!sym_val && sym->st_info>>4 != STB_WEAK) {
230 231
				snprintf(errbuf, sizeof errbuf,
					"Error relocating %s: %s: symbol not found",
232
					dso->name, name);
R
Rich Felker 已提交
233
				if (runtime) longjmp(rtld_fail, 1);
234
				dprintf(2, "%s\n", errbuf);
235 236
				ldso_fail = 1;
				continue;
R
Rich Felker 已提交
237
			}
R
Rich Felker 已提交
238
			sym_size = sym->st_size;
239 240
		} else {
			sym_val = sym_size = 0;
R
Rich Felker 已提交
241 242 243 244 245
		}
		do_single_reloc(reloc_addr, type, sym_val, sym_size, base, rel[2]);
	}
}

246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276
/* A huge hack: to make up for the wastefulness of shared libraries
 * needing at least a page of dirty memory even if they have no global
 * data, we reclaim the gaps at the beginning and end of writable maps
 * and "donate" them to the heap by setting up minimal malloc
 * structures and then freeing them. */

static void reclaim(unsigned char *base, size_t start, size_t end)
{
	size_t *a, *z;
	start = start + 6*sizeof(size_t)-1 & -4*sizeof(size_t);
	end = (end & -4*sizeof(size_t)) - 2*sizeof(size_t);
	if (start>end || end-start < 4*sizeof(size_t)) return;
	a = (size_t *)(base + start);
	z = (size_t *)(base + end);
	a[-2] = 1;
	a[-1] = z[0] = end-start + 2*sizeof(size_t) | 1;
	z[1] = 1;
	free(a);
}

static void reclaim_gaps(unsigned char *base, Phdr *ph, size_t phent, size_t phcnt)
{
	for (; phcnt--; ph=(void *)((char *)ph+phent)) {
		if (ph->p_type!=PT_LOAD) continue;
		if ((ph->p_flags&(PF_R|PF_W))!=(PF_R|PF_W)) continue;
		reclaim(base, ph->p_vaddr & -PAGE_SIZE, ph->p_vaddr);
		reclaim(base, ph->p_vaddr+ph->p_memsz,
			ph->p_vaddr+ph->p_memsz+PAGE_SIZE-1 & -PAGE_SIZE);
	}
}

R
Rich Felker 已提交
277 278
static void *map_library(int fd, size_t *lenp, unsigned char **basep, size_t *dynp)
{
279
	Ehdr buf[(896+sizeof(Ehdr))/sizeof(Ehdr)];
R
Rich Felker 已提交
280 281 282 283 284 285 286 287 288 289 290 291 292
	size_t phsize;
	size_t addr_min=SIZE_MAX, addr_max=0, map_len;
	size_t this_min, this_max;
	off_t off_start;
	Ehdr *eh;
	Phdr *ph;
	unsigned prot;
	unsigned char *map, *base;
	size_t dyn;
	size_t i;

	ssize_t l = read(fd, buf, sizeof buf);
	if (l<sizeof *eh) return 0;
293
	eh = buf;
R
Rich Felker 已提交
294 295 296
	phsize = eh->e_phentsize * eh->e_phnum;
	if (phsize + sizeof *eh > l) return 0;
	if (eh->e_phoff + phsize > l) {
297
		l = pread(fd, buf+1, phsize, eh->e_phoff);
R
Rich Felker 已提交
298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326
		if (l != phsize) return 0;
		eh->e_phoff = sizeof *eh;
	}
	ph = (void *)((char *)buf + eh->e_phoff);
	for (i=eh->e_phnum; i; i--, ph=(void *)((char *)ph+eh->e_phentsize)) {
		if (ph->p_type == PT_DYNAMIC)
			dyn = ph->p_vaddr;
		if (ph->p_type != PT_LOAD) continue;
		if (ph->p_vaddr < addr_min) {
			addr_min = ph->p_vaddr;
			off_start = ph->p_offset;
			prot = (((ph->p_flags&PF_R) ? PROT_READ : 0) |
				((ph->p_flags&PF_W) ? PROT_WRITE: 0) |
				((ph->p_flags&PF_X) ? PROT_EXEC : 0));
		}
		if (ph->p_vaddr+ph->p_memsz > addr_max) {
			addr_max = ph->p_vaddr+ph->p_memsz;
		}
	}
	if (!dyn) return 0;
	addr_max += PAGE_SIZE-1;
	addr_max &= -PAGE_SIZE;
	addr_min &= -PAGE_SIZE;
	off_start &= -PAGE_SIZE;
	map_len = addr_max - addr_min + off_start;
	/* The first time, we map too much, possibly even more than
	 * the length of the file. This is okay because we will not
	 * use the invalid part; we just need to reserve the right
	 * amount of virtual address space to map over later. */
327
	map = mmap((void *)addr_min, map_len, prot, MAP_PRIVATE, fd, off_start);
R
Rich Felker 已提交
328 329 330 331 332 333 334 335 336 337 338 339 340
	if (map==MAP_FAILED) return 0;
	base = map - addr_min;
	ph = (void *)((char *)buf + eh->e_phoff);
	for (i=eh->e_phnum; i; i--, ph=(void *)((char *)ph+eh->e_phentsize)) {
		if (ph->p_type != PT_LOAD) continue;
		/* Reuse the existing mapping for the lowest-address LOAD */
		if ((ph->p_vaddr & -PAGE_SIZE) == addr_min) continue;
		this_min = ph->p_vaddr & -PAGE_SIZE;
		this_max = ph->p_vaddr+ph->p_memsz+PAGE_SIZE-1 & -PAGE_SIZE;
		off_start = ph->p_offset & -PAGE_SIZE;
		prot = (((ph->p_flags&PF_R) ? PROT_READ : 0) |
			((ph->p_flags&PF_W) ? PROT_WRITE: 0) |
			((ph->p_flags&PF_X) ? PROT_EXEC : 0));
341 342
		if (mmap(base+this_min, this_max-this_min, prot, MAP_PRIVATE|MAP_FIXED, fd, off_start) == MAP_FAILED)
			goto error;
R
Rich Felker 已提交
343 344 345 346
		if (ph->p_memsz > ph->p_filesz) {
			size_t brk = (size_t)base+ph->p_vaddr+ph->p_filesz;
			size_t pgbrk = brk+PAGE_SIZE-1 & -PAGE_SIZE;
			memset((void *)brk, 0, pgbrk-brk & PAGE_SIZE-1);
347 348
			if (pgbrk-(size_t)base < this_max && mmap((void *)pgbrk, (size_t)base+this_max-pgbrk, prot, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) == MAP_FAILED)
				goto error;
R
Rich Felker 已提交
349 350
		}
	}
R
Rich Felker 已提交
351 352
	for (i=0; ((size_t *)(base+dyn))[i]; i+=2)
		if (((size_t *)(base+dyn))[i]==DT_TEXTREL) {
353 354
			if (mprotect(map, map_len, PROT_READ|PROT_WRITE|PROT_EXEC) < 0)
				goto error;
R
Rich Felker 已提交
355 356
			break;
		}
357 358
	if (!runtime) reclaim_gaps(base, (void *)((char *)buf + eh->e_phoff),
		eh->e_phentsize, eh->e_phnum);
R
Rich Felker 已提交
359 360 361 362
	*lenp = map_len;
	*basep = base;
	*dynp = dyn;
	return map;
363 364 365
error:
	munmap(map, map_len);
	return 0;
R
Rich Felker 已提交
366 367
}

368
static int path_open(const char *name, const char *search, char *buf, size_t buf_size)
369
{
370
	const char *s=search, *z;
371
	int l, fd;
372 373 374
	for (;;) {
		while (*s==':') s++;
		if (!*s) return -1;
375 376
		z = strchr(s, ':');
		l = z ? z-s : strlen(s);
377
		snprintf(buf, buf_size, "%.*s/%s", l, s, name);
378
		if ((fd = open(buf, O_RDONLY))>=0) return fd;
379
		s += l;
380 381 382
	}
}

383 384 385 386 387 388
static void decode_dyn(struct dso *p)
{
	size_t dyn[DYN_CNT] = {0};
	decode_vec(p->dynv, dyn, DYN_CNT);
	p->syms = (void *)(p->base + dyn[DT_SYMTAB]);
	p->strings = (void *)(p->base + dyn[DT_STRTAB]);
389 390 391 392
	if (dyn[0]&(1<<DT_HASH))
		p->hashtab = (void *)(p->base + dyn[DT_HASH]);
	if (search_vec(p->dynv, dyn, DT_GNU_HASH))
		p->ghashtab = (void *)(p->base + *dyn);
393 394
}

R
Rich Felker 已提交
395 396
static struct dso *load_library(const char *name)
{
397
	char buf[2*NAME_MAX+2];
398
	const char *pathname;
R
Rich Felker 已提交
399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416
	unsigned char *base, *map;
	size_t dyno, map_len;
	struct dso *p;
	int fd;
	struct stat st;

	/* Catch and block attempts to reload the implementation itself */
	if (name[0]=='l' && name[1]=='i' && name[2]=='b') {
		static const char *rp, reserved[] =
			"c\0pthread\0rt\0m\0dl\0util\0xnet\0";
		char *z = strchr(name, '.');
		if (z) {
			size_t l = z-name;
			for (rp=reserved; *rp && memcmp(name+3, rp, l-3); rp+=strlen(rp)+1);
			if (*rp) {
				if (!libc->prev) {
					tail->next = libc;
					libc->prev = tail;
417
					tail = libc->next ? libc->next : libc;
R
Rich Felker 已提交
418 419 420 421 422
				}
				return libc;
			}
		}
	}
423
	if (strchr(name, '/')) {
424
		pathname = name;
R
Rich Felker 已提交
425 426
		fd = open(name, O_RDONLY);
	} else {
427 428 429 430 431 432 433
		/* Search for the name to see if it's already loaded */
		for (p=head->next; p; p=p->next) {
			if (p->shortname && !strcmp(p->shortname, name)) {
				p->refcnt++;
				return p;
			}
		}
434
		if (strlen(name) > NAME_MAX) return 0;
435
		fd = -1;
436 437
		if (r_path) fd = path_open(name, r_path, buf, sizeof buf);
		if (fd < 0 && env_path) fd = path_open(name, env_path, buf, sizeof buf);
438 439 440 441 442 443 444 445 446
		if (fd < 0) {
			if (!sys_path) {
				FILE *f = fopen(ETC_LDSO_PATH, "r");
				if (f) {
					if (getline(&sys_path, (size_t[1]){0}, f) > 0)
						sys_path[strlen(sys_path)-1]=0;
					fclose(f);
				}
			}
447 448
			if (sys_path) fd = path_open(name, sys_path, buf, sizeof buf);
			else fd = path_open(name, "/lib:/usr/local/lib:/usr/lib", buf, sizeof buf);
R
Rich Felker 已提交
449
		}
450
		pathname = buf;
R
Rich Felker 已提交
451 452 453 454 455 456 457 458
	}
	if (fd < 0) return 0;
	if (fstat(fd, &st) < 0) {
		close(fd);
		return 0;
	}
	for (p=head->next; p; p=p->next) {
		if (p->dev == st.st_dev && p->ino == st.st_ino) {
459 460 461 462
			/* If this library was previously loaded with a
			 * pathname but a search found the same inode,
			 * setup its shortname so it can be found by name. */
			if (!p->shortname) p->shortname = strrchr(p->name, '/')+1;
R
Rich Felker 已提交
463 464 465 466 467 468 469 470
			close(fd);
			p->refcnt++;
			return p;
		}
	}
	map = map_library(fd, &map_len, &base, &dyno);
	close(fd);
	if (!map) return 0;
471
	p = calloc(1, sizeof *p + strlen(pathname) + 1);
R
Rich Felker 已提交
472 473 474 475 476 477 478 479 480
	if (!p) {
		munmap(map, map_len);
		return 0;
	}

	p->map = map;
	p->map_len = map_len;
	p->base = base;
	p->dynv = (void *)(base + dyno);
481
	decode_dyn(p);
R
Rich Felker 已提交
482 483 484 485

	p->dev = st.st_dev;
	p->ino = st.st_ino;
	p->refcnt = 1;
R
Rich Felker 已提交
486
	p->name = p->buf;
487 488 489
	strcpy(p->name, pathname);
	/* Add a shortname only if name arg was not an explicit pathname. */
	if (pathname != name) p->shortname = strrchr(p->name, '/')+1;
R
Rich Felker 已提交
490 491 492 493 494

	tail->next = p;
	p->prev = tail;
	tail = p;

495
	if (ldd_mode) dprintf(1, "\t%s => %s (%p)\n", name, pathname, base);
496

R
Rich Felker 已提交
497 498 499 500 501
	return p;
}

static void load_deps(struct dso *p)
{
502 503
	size_t i, ndeps=0;
	struct dso ***deps = &p->deps, **tmp, *dep;
R
Rich Felker 已提交
504
	for (; p; p=p->next) {
505 506 507 508
		for (i=0; p->dynv[i]; i+=2) {
			if (p->dynv[i] != DT_RPATH) continue;
			r_path = (void *)(p->strings + p->dynv[i+1]);
		}
R
Rich Felker 已提交
509 510
		for (i=0; p->dynv[i]; i+=2) {
			if (p->dynv[i] != DT_NEEDED) continue;
511 512
			dep = load_library(p->strings + p->dynv[i+1]);
			if (!dep) {
513 514
				snprintf(errbuf, sizeof errbuf,
					"Error loading shared library %s: %m (needed by %s)",
R
Rich Felker 已提交
515
					p->strings + p->dynv[i+1], p->name);
516 517
				if (runtime) longjmp(rtld_fail, 1);
				dprintf(2, "%s\n", errbuf);
518 519
				ldso_fail = 1;
				continue;
R
Rich Felker 已提交
520
			}
521 522 523 524 525 526 527
			if (runtime) {
				tmp = realloc(*deps, sizeof(*tmp)*(ndeps+2));
				if (!tmp) longjmp(rtld_fail, 1);
				tmp[ndeps++] = dep;
				tmp[ndeps] = 0;
				*deps = tmp;
			}
R
Rich Felker 已提交
528
		}
529
		r_path = 0;
R
Rich Felker 已提交
530 531 532
	}
}

R
Rich Felker 已提交
533 534 535 536 537 538 539 540 541 542 543 544 545 546
static void load_preload(char *s)
{
	int tmp;
	char *z;
	for (z=s; *z; s=z) {
		for (   ; *s && isspace(*s); s++);
		for (z=s; *z && !isspace(*z); z++);
		tmp = *z;
		*z = 0;
		load_library(s);
		*z = tmp;
	}
}

547 548 549 550 551
static void make_global(struct dso *p)
{
	for (; p; p=p->next) p->global = 1;
}

R
Rich Felker 已提交
552 553 554 555 556 557
static void reloc_all(struct dso *p)
{
	size_t dyn[DYN_CNT] = {0};
	for (; p; p=p->next) {
		if (p->relocated) continue;
		decode_vec(p->dynv, dyn, DYN_CNT);
R
Rich Felker 已提交
558 559 560
#ifdef NEED_ARCH_RELOCS
		do_arch_relocs(p, head);
#endif
561 562 563 564
		do_relocs(p, (void *)(p->base+dyn[DT_JMPREL]), dyn[DT_PLTRELSZ],
			2+(dyn[DT_PLTREL]==DT_RELA));
		do_relocs(p, (void *)(p->base+dyn[DT_REL]), dyn[DT_RELSZ], 2);
		do_relocs(p, (void *)(p->base+dyn[DT_RELA]), dyn[DT_RELASZ], 3);
565
		p->relocated = 1;
R
Rich Felker 已提交
566 567 568
	}
}

569 570 571 572 573 574 575 576 577 578
static void free_all(struct dso *p)
{
	struct dso *n;
	while (p) {
		n = p->next;
		if (p->map) free(p);
		p = n;
	}
}

579 580 581 582 583 584 585 586
static size_t find_dyn(Phdr *ph, size_t cnt, size_t stride)
{
	for (; cnt--; ph = (void *)((char *)ph + stride))
		if (ph->p_type == PT_DYNAMIC)
			return ph->p_vaddr;
	return 0;
}

587 588 589 590 591 592 593 594 595 596 597 598 599 600
static void do_init_fini(struct dso *p)
{
	size_t dyn[DYN_CNT] = {0};
	for (; p; p=p->prev) {
		if (p->constructed) return;
		decode_vec(p->dynv, dyn, DYN_CNT);
		if (dyn[0] & (1<<DT_FINI))
			atexit((void (*)(void))(p->base + dyn[DT_FINI]));
		if (dyn[0] & (1<<DT_INIT))
			((void (*)(void))(p->base + dyn[DT_INIT]))();
		p->constructed = 1;
	}
}

601 602 603 604
void _dl_debug_state(void)
{
}

605
void *__dynlink(int argc, char **argv)
R
Rich Felker 已提交
606
{
607
	size_t aux[AUX_CNT] = {0};
R
Rich Felker 已提交
608 609
	size_t i;
	Phdr *phdr;
610
	Ehdr *ehdr;
611
	static struct dso builtin_dsos[3];
R
Rich Felker 已提交
612 613
	struct dso *const app = builtin_dsos+0;
	struct dso *const lib = builtin_dsos+1;
614
	struct dso *const vdso = builtin_dsos+2;
R
Rich Felker 已提交
615
	char *env_preload=0;
R
Rich Felker 已提交
616
	size_t vdso_base;
R
Rich Felker 已提交
617 618

	/* Find aux vector just past environ[] */
619 620 621
	for (i=argc+1; argv[i]; i++)
		if (!memcmp(argv[i], "LD_LIBRARY_PATH=", 16))
			env_path = argv[i]+16;
R
Rich Felker 已提交
622 623
		else if (!memcmp(argv[i], "LD_PRELOAD=", 11))
			env_preload = argv[i]+11;
R
Rich Felker 已提交
624 625 626 627
	auxv = (void *)(argv+i+1);

	decode_vec(auxv, aux, AUX_CNT);

628 629
	/* Only trust user/env if kernel says we're not suid/sgid */
	if ((aux[0]&0x7800)!=0x7800 || aux[AT_UID]!=aux[AT_EUID]
R
Rich Felker 已提交
630
	  || aux[AT_GID]!=aux[AT_EGID] || aux[AT_SECURE]) {
631
		env_path = 0;
R
Rich Felker 已提交
632
		env_preload = 0;
633 634
	}

635 636 637 638 639 640 641 642 643
	/* If the dynamic linker was invoked as a program itself, AT_BASE
	 * will not be set. In that case, we assume the base address is
	 * the start of the page containing the PHDRs; I don't know any
	 * better approach... */
	if (!aux[AT_BASE]) {
		aux[AT_BASE] = aux[AT_PHDR] & -PAGE_SIZE;
		aux[AT_PHDR] = aux[AT_PHENT] = aux[AT_PHNUM] = 0;
	}

644 645 646
	/* The dynamic linker load address is passed by the kernel
	 * in the AUX vector, so this is easy. */
	lib->base = (void *)aux[AT_BASE];
647
	lib->name = lib->shortname = "libc.so";
648 649 650 651 652 653 654
	lib->global = 1;
	ehdr = (void *)lib->base;
	lib->dynv = (void *)(lib->base + find_dyn(
		(void *)(aux[AT_BASE]+ehdr->e_phoff),
		ehdr->e_phnum, ehdr->e_phentsize));
	decode_dyn(lib);

655
	if (aux[AT_PHDR]) {
656
		size_t interp_off = 0;
657 658 659 660 661
		/* Find load address of the main program, via AT_PHDR vs PT_PHDR. */
		phdr = (void *)aux[AT_PHDR];
		for (i=aux[AT_PHNUM]; i; i--, phdr=(void *)((char *)phdr + aux[AT_PHENT])) {
			if (phdr->p_type == PT_PHDR)
				app->base = (void *)(aux[AT_PHDR] - phdr->p_vaddr);
662 663
			else if (phdr->p_type == PT_INTERP)
				interp_off = (size_t)phdr->p_vaddr;
664
		}
665
		if (interp_off) lib->name = (char *)app->base + interp_off;
666
		app->name = argv[0];
667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694
		app->dynv = (void *)(app->base + find_dyn(
			(void *)aux[AT_PHDR], aux[AT_PHNUM], aux[AT_PHENT]));
	} else {
		int fd;
		char *ldname = argv[0];
		size_t dyno, l = strlen(ldname);
		if (l >= 3 && !strcmp(ldname+l-3, "ldd")) ldd_mode = 1;
		*argv++ = (void *)-1;
		if (argv[0] && !strcmp(argv[0], "--")) *argv++ = (void *)-1;
		if (!argv[0]) {
			dprintf(2, "musl libc/dynamic program loader\n");
			dprintf(2, "usage: %s pathname%s\n", ldname,
				ldd_mode ? "" : " [args]");
			_exit(1);
		}
		fd = open(argv[0], O_RDONLY);
		if (fd < 0) {
			dprintf(2, "%s: cannot load %s: %s\n", ldname, argv[0], strerror(errno));
			_exit(1);
		}
		runtime = 1;
		ehdr = (void *)map_library(fd, &app->map_len, &app->base, &dyno);
		if (!ehdr) {
			dprintf(2, "%s: %s: Not a valid dynamic program\n", ldname, argv[0]);
			_exit(1);
		}
		runtime = 0;
		close(fd);
695
		lib->name = ldname;
696
		app->name = argv[0];
697 698
		app->dynv = (void *)(app->base + dyno);
		aux[AT_ENTRY] = ehdr->e_entry;
699
	}
700
	app->global = 1;
701
	app->constructed = 1;
702 703 704
	decode_dyn(app);

	/* Attach to vdso, if provided by the kernel */
R
Rich Felker 已提交
705
	if (search_vec(auxv, &vdso_base, AT_SYSINFO_EHDR)) {
706 707 708 709 710 711 712 713
		ehdr = (void *)vdso_base;
		phdr = (void *)(vdso_base + ehdr->e_phoff);
		for (i=ehdr->e_phnum; i; i--, phdr=(void *)((char *)phdr + ehdr->e_phentsize)) {
			if (phdr->p_type == PT_DYNAMIC)
				vdso->dynv = (void *)(vdso_base + phdr->p_offset);
			if (phdr->p_type == PT_LOAD)
				vdso->base = (void *)(vdso_base - phdr->p_vaddr + phdr->p_offset);
		}
714
		vdso->name = vdso->shortname = "linux-gate.so.1";
715
		vdso->global = 1;
716
		decode_dyn(vdso);
717 718 719 720
		vdso->prev = lib;
		lib->next = vdso;
	}

721 722 723 724 725 726 727 728 729
	/* Initial dso chain consists only of the app. We temporarily
	 * append the dynamic linker/libc so we can relocate it, then
	 * restore the initial chain in preparation for loading third
	 * party libraries (preload/needed). */
	head = tail = app;
	libc = lib;
	app->next = lib;
	reloc_all(lib);
	app->next = 0;
R
Rich Felker 已提交
730

731
	/* PAST THIS POINT, ALL LIBC INTERFACES ARE FULLY USABLE. */
R
Rich Felker 已提交
732

733
	/* Donate unused parts of app and library mapping to malloc */
R
Rich Felker 已提交
734 735 736
	reclaim_gaps(app->base, (void *)aux[AT_PHDR], aux[AT_PHENT], aux[AT_PHNUM]);
	ehdr = (void *)lib->base;
	reclaim_gaps(lib->base, (void *)(lib->base+ehdr->e_phoff),
737 738
		ehdr->e_phentsize, ehdr->e_phnum);

739
	/* Load preload/needed libraries, add their symbols to the global
740 741 742
	 * namespace, and perform all remaining relocations. The main
	 * program must be relocated LAST since it may contain copy
	 * relocations which depend on libraries' relocations. */
R
Rich Felker 已提交
743
	if (env_preload) load_preload(env_preload);
744 745
	load_deps(app);
	make_global(app);
746
	reloc_all(app->next);
747 748
	reloc_all(app);

749
	if (ldso_fail) _exit(127);
750 751
	if (ldd_mode) _exit(0);

752 753 754 755
	/* Switch to runtime mode: any further failures in the dynamic
	 * linker are a reportable failure rather than a fatal startup
	 * error. If the dynamic loader (dlopen) will not be used, free
	 * all memory used by the dynamic linker. */
R
Rich Felker 已提交
756
	runtime = 1;
757

758
#ifndef DYNAMIC_IS_RO
759 760 761
	for (i=0; app->dynv[i]; i+=2)
		if (app->dynv[i]==DT_DEBUG)
			app->dynv[i+1] = (size_t)&debug;
762
#endif
763 764 765 766 767 768 769
	debug.ver = 1;
	debug.bp = _dl_debug_state;
	debug.head = head;
	debug.base = lib->base;
	debug.state = 0;
	_dl_debug_state();

770 771
	if (ssp_used) __init_ssp(auxv);

772 773
	do_init_fini(tail);

R
Rich Felker 已提交
774
	if (!rtld_used) {
775 776
		free_all(head);
		free(sys_path);
R
Rich Felker 已提交
777
		reclaim((void *)builtin_dsos, 0, sizeof builtin_dsos);
778
	}
779

R
Rich Felker 已提交
780 781 782
	errno = 0;
	return (void *)aux[AT_ENTRY];
}
783 784 785

void *dlopen(const char *file, int mode)
{
786
	struct dso *volatile p, *orig_tail = tail, *next;
787
	size_t i;
788
	int cs;
789 790 791

	if (!file) return head;

792
	pthread_setcancelstate(PTHREAD_CANCEL_DISABLE, &cs);
793 794 795 796
	pthread_rwlock_wrlock(&lock);

	if (setjmp(rtld_fail)) {
		/* Clean up anything new that was (partially) loaded */
797 798 799
		if (p->deps) for (i=0; p->deps[i]; i++)
			if (p->deps[i]->global < 0)
				p->deps[i]->global = 0;
800 801 802 803 804 805 806 807
		for (p=orig_tail->next; p; p=next) {
			next = p->next;
			munmap(p->map, p->map_len);
			free(p->deps);
			free(p);
		}
		tail = orig_tail;
		tail->next = 0;
808
		p = 0;
809 810
		errflag = 1;
		goto end;
R
Rich Felker 已提交
811 812 813
	} else p = load_library(file);

	if (!p) {
814 815
		snprintf(errbuf, sizeof errbuf,
			"Error loading shared library %s: %m", file);
R
Rich Felker 已提交
816
		errflag = 1;
817
		goto end;
818 819 820 821 822
	}

	/* First load handling */
	if (!p->deps) {
		load_deps(p);
R
Rich Felker 已提交
823
		if (p->deps) for (i=0; p->deps[i]; i++)
824 825 826
			if (!p->deps[i]->global)
				p->deps[i]->global = -1;
		if (!p->global) p->global = -1;
827
		reloc_all(p);
R
Rich Felker 已提交
828
		if (p->deps) for (i=0; p->deps[i]; i++)
829 830 831
			if (p->deps[i]->global < 0)
				p->deps[i]->global = 0;
		if (p->global < 0) p->global = 0;
832 833 834
	}

	if (mode & RTLD_GLOBAL) {
R
Rich Felker 已提交
835
		if (p->deps) for (i=0; p->deps[i]; i++)
836 837 838 839
			p->deps[i]->global = 1;
		p->global = 1;
	}

840 841
	if (ssp_used) __init_ssp(auxv);

842 843
	_dl_debug_state();

844
	do_init_fini(tail);
845
end:
846
	pthread_rwlock_unlock(&lock);
847
	pthread_setcancelstate(cs, 0);
848 849 850
	return p;
}

R
Rich Felker 已提交
851
static void *do_dlsym(struct dso *p, const char *s, void *ra)
852 853
{
	size_t i;
854
	uint32_t h = 0, gh = 0;
855
	Sym *sym;
R
Rich Felker 已提交
856 857 858
	if (p == RTLD_NEXT) {
		for (p=head; p && (unsigned char *)ra-p->map>p->map_len; p=p->next);
		if (!p) p=head;
R
Rich Felker 已提交
859 860 861
		void *res = find_sym(p->next, s, 0);
		if (!res) goto failed;
		return res;
R
Rich Felker 已提交
862
	}
R
Rich Felker 已提交
863 864
	if (p == head || p == RTLD_DEFAULT) {
		void *res = find_sym(head, s, 0);
865
		if (!res) goto failed;
R
Rich Felker 已提交
866 867
		return res;
	}
868 869 870 871 872 873 874
	if (p->ghashtab) {
		gh = gnu_hash(s);
		sym = gnu_lookup(s, gh, p);
	} else {
		h = sysv_hash(s);
		sym = sysv_lookup(s, h, p);
	}
875 876 877
	if (sym && sym->st_value && (1<<(sym->st_info&0xf) & OK_TYPES))
		return p->base + sym->st_value;
	if (p->deps) for (i=0; p->deps[i]; i++) {
878 879
		if (p->deps[i]->ghashtab) {
			if (!gh) gh = gnu_hash(s);
880
			sym = gnu_lookup(s, gh, p->deps[i]);
881 882 883 884
		} else {
			if (!h) h = sysv_hash(s);
			sym = sysv_lookup(s, h, p->deps[i]);
		}
885 886 887
		if (sym && sym->st_value && (1<<(sym->st_info&0xf) & OK_TYPES))
			return p->deps[i]->base + sym->st_value;
	}
888
failed:
R
Rich Felker 已提交
889
	errflag = 1;
890
	snprintf(errbuf, sizeof errbuf, "Symbol not found: %s", s);
891 892 893
	return 0;
}

R
Rich Felker 已提交
894
void *__dlsym(void *p, const char *s, void *ra)
895 896 897
{
	void *res;
	pthread_rwlock_rdlock(&lock);
R
Rich Felker 已提交
898
	res = do_dlsym(p, s, ra);
899 900 901
	pthread_rwlock_unlock(&lock);
	return res;
}
902 903 904 905 906 907 908 909 910 911
#else
void *dlopen(const char *file, int mode)
{
	return 0;
}
void *__dlsym(void *p, const char *s, void *ra)
{
	return 0;
}
#endif
912 913 914

char *dlerror()
{
R
Rich Felker 已提交
915 916
	if (!errflag) return 0;
	errflag = 0;
917
	return errbuf;
918 919 920 921 922 923
}

int dlclose(void *p)
{
	return 0;
}