^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) // SPDX-License-Identifier: GPL-2.0-only
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * linux/fs/binfmt_aout.c
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * Copyright (C) 1991, 1992, 1996 Linus Torvalds
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #include <linux/time.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #include <linux/kernel.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) #include <linux/mm.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <linux/mman.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <linux/a.out.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) #include <linux/errno.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) #include <linux/signal.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) #include <linux/string.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) #include <linux/fs.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) #include <linux/file.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) #include <linux/stat.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) #include <linux/fcntl.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) #include <linux/ptrace.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #include <linux/user.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) #include <linux/binfmts.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) #include <linux/personality.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) #include <linux/init.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) #include <linux/coredump.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) #include <linux/slab.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) #include <linux/sched/task_stack.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) #include <linux/uaccess.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) #include <asm/cacheflush.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) static int load_aout_binary(struct linux_binprm *);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) static int load_aout_library(struct file*);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) static struct linux_binfmt aout_format = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) .module = THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) .load_binary = load_aout_binary,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) .load_shlib = load_aout_library,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) #define BAD_ADDR(x) ((unsigned long)(x) >= TASK_SIZE)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) static int set_brk(unsigned long start, unsigned long end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) start = PAGE_ALIGN(start);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) end = PAGE_ALIGN(end);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) if (end > start)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) return vm_brk(start, end - start);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) * create_aout_tables() parses the env- and arg-strings in new user
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) * memory and creates the pointer tables from them, and puts their
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) * addresses on the "stack", returning the new stack pointer value.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) static unsigned long __user *create_aout_tables(char __user *p, struct linux_binprm * bprm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) char __user * __user *argv;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) char __user * __user *envp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) unsigned long __user *sp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) int argc = bprm->argc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) int envc = bprm->envc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) sp = (void __user *)((-(unsigned long)sizeof(char *)) & (unsigned long) p);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) #ifdef __alpha__
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) /* whee.. test-programs are so much fun. */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) put_user(0, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) put_user(0, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) if (bprm->loader) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) put_user(0, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) put_user(1003, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) put_user(bprm->loader, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) put_user(1002, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) put_user(bprm->exec, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) put_user(1001, --sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) sp -= envc+1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) envp = (char __user * __user *) sp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) sp -= argc+1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) argv = (char __user * __user *) sp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) #ifndef __alpha__
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) put_user((unsigned long) envp,--sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) put_user((unsigned long) argv,--sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) put_user(argc,--sp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) current->mm->arg_start = (unsigned long) p;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) while (argc-->0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) char c;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) put_user(p,argv++);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) do {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) get_user(c,p++);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) } while (c);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) put_user(NULL,argv);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) current->mm->arg_end = current->mm->env_start = (unsigned long) p;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) while (envc-->0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) char c;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) put_user(p,envp++);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) do {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) get_user(c,p++);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) } while (c);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) put_user(NULL,envp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) current->mm->env_end = (unsigned long) p;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) return sp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) * These are the functions used to load a.out style executables and shared
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) * libraries. There is no binary dependent code anywhere else.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) static int load_aout_binary(struct linux_binprm * bprm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) struct pt_regs *regs = current_pt_regs();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) struct exec ex;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) unsigned long error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) unsigned long fd_offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) unsigned long rlim;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) int retval;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) ex = *((struct exec *) bprm->buf); /* exec-header */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != OMAGIC &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) N_MAGIC(ex) != QMAGIC && N_MAGIC(ex) != NMAGIC) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) N_TRSIZE(ex) || N_DRSIZE(ex) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) i_size_read(file_inode(bprm->file)) < ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) return -ENOEXEC;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) * Requires a mmap handler. This prevents people from using a.out
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) * as part of an exploit attack against /proc-related vulnerabilities.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) if (!bprm->file->f_op->mmap)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) return -ENOEXEC;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) fd_offset = N_TXTOFF(ex);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) /* Check initial limits. This avoids letting people circumvent
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) * size limits imposed on them by creating programs with large
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) * arrays in the data or bss.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) rlim = rlimit(RLIMIT_DATA);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) if (rlim >= RLIM_INFINITY)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) rlim = ~0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) if (ex.a_data + ex.a_bss > rlim)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) /* Flush all traces of the currently running executable */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) retval = begin_new_exec(bprm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) if (retval)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) return retval;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) /* OK, This is the point of no return */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) #ifdef __alpha__
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) SET_AOUT_PERSONALITY(bprm, ex);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) #else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) set_personality(PER_LINUX);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) setup_new_exec(bprm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) current->mm->end_code = ex.a_text +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) (current->mm->start_code = N_TXTADDR(ex));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) current->mm->end_data = ex.a_data +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) (current->mm->start_data = N_DATADDR(ex));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) current->mm->brk = ex.a_bss +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) (current->mm->start_brk = N_BSSADDR(ex));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) retval = setup_arg_pages(bprm, STACK_TOP, EXSTACK_DEFAULT);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) if (retval < 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) return retval;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) if (N_MAGIC(ex) == OMAGIC) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) unsigned long text_addr, map_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) loff_t pos;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) text_addr = N_TXTADDR(ex);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) #ifdef __alpha__
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) pos = fd_offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) map_size = ex.a_text+ex.a_data + PAGE_SIZE - 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) #else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) pos = 32;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) map_size = ex.a_text+ex.a_data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) error = vm_brk(text_addr & PAGE_MASK, map_size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) if (error)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) return error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) error = read_code(bprm->file, text_addr, pos,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) ex.a_text+ex.a_data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) if ((signed long)error < 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) return error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) } else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) if ((ex.a_text & 0xfff || ex.a_data & 0xfff) &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) (N_MAGIC(ex) != NMAGIC) && printk_ratelimit())
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) printk(KERN_NOTICE "executable not page aligned\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) if ((fd_offset & ~PAGE_MASK) != 0 && printk_ratelimit())
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) printk(KERN_WARNING
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) "fd_offset is not page aligned. Please convert program: %pD\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) bprm->file);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) if (!bprm->file->f_op->mmap||((fd_offset & ~PAGE_MASK) != 0)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) error = vm_brk(N_TXTADDR(ex), ex.a_text+ex.a_data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) if (error)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) return error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) read_code(bprm->file, N_TXTADDR(ex), fd_offset,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) ex.a_text + ex.a_data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) goto beyond_if;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) error = vm_mmap(bprm->file, N_TXTADDR(ex), ex.a_text,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) PROT_READ | PROT_EXEC,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | MAP_EXECUTABLE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) fd_offset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) if (error != N_TXTADDR(ex))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) return error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231) error = vm_mmap(bprm->file, N_DATADDR(ex), ex.a_data,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) PROT_READ | PROT_WRITE | PROT_EXEC,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | MAP_EXECUTABLE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234) fd_offset + ex.a_text);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) if (error != N_DATADDR(ex))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) return error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) beyond_if:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) set_binfmt(&aout_format);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) retval = set_brk(current->mm->start_brk, current->mm->brk);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) if (retval < 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) return retval;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) current->mm->start_stack =
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) (unsigned long) create_aout_tables((char __user *) bprm->p, bprm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) #ifdef __alpha__
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) regs->gp = ex.a_gpvalue;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) finalize_exec(bprm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) start_thread(regs, ex.a_entry, current->mm->start_stack);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255) static int load_aout_library(struct file *file)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) struct inode * inode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) unsigned long bss, start_addr, len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) unsigned long error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) int retval;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261) struct exec ex;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) loff_t pos = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264) inode = file_inode(file);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) retval = -ENOEXEC;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267) error = kernel_read(file, &ex, sizeof(ex), &pos);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268) if (error != sizeof(ex))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271) /* We come in here for the regular a.out style of shared libraries */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272) if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != QMAGIC) || N_TRSIZE(ex) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273) N_DRSIZE(ex) || ((ex.a_entry & 0xfff) && N_MAGIC(ex) == ZMAGIC) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274) i_size_read(inode) < ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) * Requires a mmap handler. This prevents people from using a.out
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280) * as part of an exploit attack against /proc-related vulnerabilities.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) if (!file->f_op->mmap)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) if (N_FLAGS(ex))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 286) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 287)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 288) /* For QMAGIC, the starting address is 0x20 into the page. We mask
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 289) this off to get the starting address for the page */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 290)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 291) start_addr = ex.a_entry & 0xfffff000;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 292)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 293) if ((N_TXTOFF(ex) & ~PAGE_MASK) != 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 294) if (printk_ratelimit())
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 295) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 296) printk(KERN_WARNING
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 297) "N_TXTOFF is not page aligned. Please convert library: %pD\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 298) file);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 299) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 300) retval = vm_brk(start_addr, ex.a_text + ex.a_data + ex.a_bss);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 301) if (retval)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 302) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 303)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 304) read_code(file, start_addr, N_TXTOFF(ex),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 305) ex.a_text + ex.a_data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 306) retval = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 307) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 308) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 309) /* Now use mmap to map the library into memory. */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 310) error = vm_mmap(file, start_addr, ex.a_text + ex.a_data,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 311) PROT_READ | PROT_WRITE | PROT_EXEC,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 312) MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 313) N_TXTOFF(ex));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 314) retval = error;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 315) if (error != start_addr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 316) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 317)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 318) len = PAGE_ALIGN(ex.a_text + ex.a_data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 319) bss = ex.a_text + ex.a_data + ex.a_bss;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 320) if (bss > len) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 321) retval = vm_brk(start_addr + len, bss - len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 322) if (retval)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 323) goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 324) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 325) retval = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 326) out:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 327) return retval;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 328) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 329)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 330) static int __init init_aout_binfmt(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 331) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 332) register_binfmt(&aout_format);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 333) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 334) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 335)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 336) static void __exit exit_aout_binfmt(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 337) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 338) unregister_binfmt(&aout_format);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 339) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 340)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 341) core_initcall(init_aout_binfmt);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 342) module_exit(exit_aout_binfmt);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 343) MODULE_LICENSE("GPL");
Orange Pi5 kernel
Deprecated Linux kernel 5.10.110 for OrangePi 5/5B/5+ boards
3 Commits
0 Branches
0 Tags