^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) #!/usr/bin/env perl
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) # SPDX-License-Identifier: GPL-2.0
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) #
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) use warnings;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) use strict;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) use Math::BigInt;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) use Fcntl "SEEK_SET";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) die "Format: $0 [-s <systemmap-file>] <vmlinux-file> <keyring-file>\n"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) if ($#ARGV != 1 && $#ARGV != 3 ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) $#ARGV == 3 && $ARGV[0] ne "-s");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) my $sysmap = "";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) if ($#ARGV == 3) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) shift;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) $sysmap = $ARGV[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) shift;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) my $vmlinux = $ARGV[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) my $keyring = $ARGV[1];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) # Parse the vmlinux section table
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) #
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) open FD, "objdump -h $vmlinux |" || die $vmlinux;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) my @lines = <FD>;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) close(FD) || die $vmlinux;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) my @sections = ();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) foreach my $line (@lines) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) chomp($line);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) if ($line =~ /\s*([0-9]+)\s+(\S+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+2[*][*]([0-9]+)/
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) ) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) my $seg = $1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) my $name = $2;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) my $len = Math::BigInt->new("0x" . $3);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) my $vma = Math::BigInt->new("0x" . $4);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) my $lma = Math::BigInt->new("0x" . $5);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) my $foff = Math::BigInt->new("0x" . $6);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) my $align = 2 ** $7;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) push @sections, { name => $name,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) vma => $vma,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) len => $len,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) foff => $foff };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) print "Have $#sections sections\n";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) #
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) # Try and parse the vmlinux symbol table. If the vmlinux file has been created
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) # from a vmlinuz file with extract-vmlinux then the symbol table will be empty.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) #
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) open FD, "nm $vmlinux 2>/dev/null |" || die $vmlinux;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) @lines = <FD>;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) close(FD) || die $vmlinux;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) my %symbols = ();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) my $nr_symbols = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) sub parse_symbols(@) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) foreach my $line (@_) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) chomp($line);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) if ($line =~ /([0-9a-f]+)\s([a-zA-Z])\s(\S+)/
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) ) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) my $addr = "0x" . $1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) my $type = $2;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) my $name = $3;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) $symbols{$name} = $addr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) $nr_symbols++;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) parse_symbols(@lines);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) if ($nr_symbols == 0 && $sysmap ne "") {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) print "No symbols in vmlinux, trying $sysmap\n";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) open FD, "<$sysmap" || die $sysmap;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) @lines = <FD>;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) close(FD) || die $sysmap;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) parse_symbols(@lines);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) die "No symbols available\n"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) if ($nr_symbols == 0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) print "Have $nr_symbols symbols\n";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) die "Can't find system certificate list"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) unless (exists($symbols{"__cert_list_start"}) &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) exists($symbols{"system_certificate_list_size"}));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) my $start = Math::BigInt->new($symbols{"__cert_list_start"});
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) my $end;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) my $size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) my $size_sym = Math::BigInt->new($symbols{"system_certificate_list_size"});
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) open FD, "<$vmlinux" || die $vmlinux;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) binmode(FD);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) my $s = undef;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) foreach my $sec (@sections) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) my $s_name = $sec->{name};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) my $s_vma = $sec->{vma};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) my $s_len = $sec->{len};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) my $s_foff = $sec->{foff};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) my $s_vend = $s_vma + $s_len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) next unless ($start >= $s_vma);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) next if ($start >= $s_vend);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) die "Certificate list size was not found on the same section\n"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) if ($size_sym < $s_vma || $size_sym > $s_vend);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) die "Cert object in multiple sections: ", $s_name, " and ", $s->{name}, "\n"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) if ($s);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) my $size_off = $size_sym -$s_vma + $s_foff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) my $packed;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) die $vmlinux if (!defined(sysseek(FD, $size_off, SEEK_SET)));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) sysread(FD, $packed, 8);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) $size = unpack 'L!', $packed;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) $end = $start + $size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) printf "Have %u bytes of certs at VMA 0x%x\n", $size, $start;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) die "Cert object partially overflows section $s_name\n"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) if ($end > $s_vend);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) $s = $sec;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) die "Cert object not inside a section\n"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) unless ($s);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) print "Certificate list in section ", $s->{name}, "\n";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) my $foff = $start - $s->{vma} + $s->{foff};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) printf "Certificate list at file offset 0x%x\n", $foff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) die $vmlinux if (!defined(sysseek(FD, $foff, SEEK_SET)));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) my $buf = "";
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) my $len = sysread(FD, $buf, $size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) die "$vmlinux" if (!defined($len));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) die "Short read on $vmlinux\n" if ($len != $size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) close(FD) || die $vmlinux;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) open FD, ">$keyring" || die $keyring;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) binmode(FD);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) $len = syswrite(FD, $buf, $size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) die "$keyring" if (!defined($len));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) die "Short write on $keyring\n" if ($len != $size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) close(FD) || die $keyring;
Orange Pi5 kernel
Deprecated Linux kernel 5.10.110 for OrangePi 5/5B/5+ boards
3 Commits
0 Branches
0 Tags