^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) /* Write the contents of the <certfile> into kernel symbol system_extra_cert
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * Copyright (C) IBM Corporation, 2015
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * Author: Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) * This software may be used and distributed according to the terms
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) * of the GNU General Public License, incorporated herein by reference.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) * Usage: insert-sys-cert [-s <System.map> -b <vmlinux> -c <certfile>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #define _GNU_SOURCE
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <stdio.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) #include <ctype.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) #include <string.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) #include <limits.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) #include <stdbool.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) #include <errno.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) #include <stdlib.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) #include <stdarg.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) #include <sys/types.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #include <sys/stat.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) #include <sys/mman.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) #include <fcntl.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) #include <unistd.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) #include <elf.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) #define CERT_SYM "system_extra_cert"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) #define USED_SYM "system_extra_cert_used"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) #define LSIZE_SYM "system_certificate_list_size"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) #define info(format, args...) fprintf(stderr, "INFO: " format, ## args)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) #define warn(format, args...) fprintf(stdout, "WARNING: " format, ## args)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) #define err(format, args...) fprintf(stderr, "ERROR: " format, ## args)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) #if UINTPTR_MAX == 0xffffffff
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) #define CURRENT_ELFCLASS ELFCLASS32
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) #define Elf_Ehdr Elf32_Ehdr
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) #define Elf_Shdr Elf32_Shdr
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) #define Elf_Sym Elf32_Sym
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) #else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) #define CURRENT_ELFCLASS ELFCLASS64
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) #define Elf_Ehdr Elf64_Ehdr
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) #define Elf_Shdr Elf64_Shdr
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) #define Elf_Sym Elf64_Sym
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) static unsigned char endianness(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) uint16_t two_byte = 0x00FF;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) uint8_t low_address = *((uint8_t *)&two_byte);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) if (low_address == 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) return ELFDATA2MSB;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) return ELFDATA2LSB;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) struct sym {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) char *name;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) unsigned long address;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) unsigned long offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) void *content;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) int size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) static unsigned long get_offset_from_address(Elf_Ehdr *hdr, unsigned long addr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) Elf_Shdr *x;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) unsigned int i, num_sections;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) x = (void *)hdr + hdr->e_shoff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) if (hdr->e_shnum == SHN_UNDEF)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) num_sections = x[0].sh_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) num_sections = hdr->e_shnum;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) for (i = 1; i < num_sections; i++) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) unsigned long start = x[i].sh_addr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) unsigned long end = start + x[i].sh_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) unsigned long offset = x[i].sh_offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) if (addr >= start && addr <= end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) return addr - start + offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) #define LINE_SIZE 100
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) static void get_symbol_from_map(Elf_Ehdr *hdr, FILE *f, char *name,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) struct sym *s)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) char l[LINE_SIZE];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97) char *w, *p, *n;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) s->size = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) s->address = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) s->offset = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) if (fseek(f, 0, SEEK_SET) != 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) perror("File seek failed");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) while (fgets(l, LINE_SIZE, f)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) p = strchr(l, '\n');
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) if (!p) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) err("Missing line ending.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) n = strstr(l, name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) if (n)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) if (!n) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) err("Unable to find symbol: %s\n", name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) w = strchr(l, ' ');
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) if (!w)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) *w = '\0';
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) s->address = strtoul(l, NULL, 16);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) if (s->address == 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) s->offset = get_offset_from_address(hdr, s->address);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) s->name = name;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) s->content = (void *)hdr + s->offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) static Elf_Sym *find_elf_symbol(Elf_Ehdr *hdr, Elf_Shdr *symtab, char *name)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) Elf_Sym *sym, *symtab_start;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) char *strtab, *symname;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) unsigned int link;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) Elf_Shdr *x;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) int i, n;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) x = (void *)hdr + hdr->e_shoff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) link = symtab->sh_link;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) symtab_start = (void *)hdr + symtab->sh_offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) n = symtab->sh_size / symtab->sh_entsize;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) strtab = (void *)hdr + x[link].sh_offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) for (i = 0; i < n; i++) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) sym = &symtab_start[i];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) symname = strtab + sym->st_name;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) if (strcmp(symname, name) == 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) return sym;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) err("Unable to find symbol: %s\n", name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) static void get_symbol_from_table(Elf_Ehdr *hdr, Elf_Shdr *symtab,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) char *name, struct sym *s)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) Elf_Shdr *sec;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) int secndx;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) Elf_Sym *elf_sym;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) Elf_Shdr *x;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) x = (void *)hdr + hdr->e_shoff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) s->size = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) s->address = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) s->offset = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) elf_sym = find_elf_symbol(hdr, symtab, name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) if (!elf_sym)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) secndx = elf_sym->st_shndx;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) if (!secndx)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) sec = &x[secndx];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) s->size = elf_sym->st_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) s->address = elf_sym->st_value;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) s->offset = s->address - sec->sh_addr
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) + sec->sh_offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) s->name = name;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) s->content = (void *)hdr + s->offset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) static Elf_Shdr *get_symbol_table(Elf_Ehdr *hdr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) Elf_Shdr *x;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) unsigned int i, num_sections;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) x = (void *)hdr + hdr->e_shoff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) if (hdr->e_shnum == SHN_UNDEF)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) num_sections = x[0].sh_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) num_sections = hdr->e_shnum;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) for (i = 1; i < num_sections; i++)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) if (x[i].sh_type == SHT_SYMTAB)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) return &x[i];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) static void *map_file(char *file_name, int *size)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) struct stat st;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) void *map;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205) int fd;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) fd = open(file_name, O_RDWR);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) if (fd < 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) perror(file_name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) if (fstat(fd, &st)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) perror("Could not determine file size");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) *size = st.st_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) map = mmap(NULL, *size, PROT_READ|PROT_WRITE, MAP_SHARED, fd, 0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) if (map == MAP_FAILED) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) perror("Mapping to memory failed");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) return map;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) static char *read_file(char *file_name, int *size)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) struct stat st;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231) char *buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) int fd;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234) fd = open(file_name, O_RDONLY);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) if (fd < 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) perror(file_name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) if (fstat(fd, &st)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) perror("Could not determine file size");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) *size = st.st_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) buf = malloc(*size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) if (!buf) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) perror("Allocating memory failed");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) if (read(fd, buf, *size) != *size) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) perror("File read failed");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) close(fd);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) return buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) static void print_sym(Elf_Ehdr *hdr, struct sym *s)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) info("sym: %s\n", s->name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263) info("addr: 0x%lx\n", s->address);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264) info("size: %d\n", s->size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265) info("offset: 0x%lx\n", (unsigned long)s->offset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268) static void print_usage(char *e)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270) printf("Usage %s [-s <System.map>] -b <vmlinux> -c <certfile>\n", e);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273) int main(int argc, char **argv)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) char *system_map_file = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) char *vmlinux_file = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277) char *cert_file = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) int vmlinux_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) int cert_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280) Elf_Ehdr *hdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) char *cert;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) FILE *system_map;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) unsigned long *lsize;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284) int *used;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) int opt;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 286) Elf_Shdr *symtab = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 287) struct sym cert_sym, lsize_sym, used_sym;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 288)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 289) while ((opt = getopt(argc, argv, "b:c:s:")) != -1) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 290) switch (opt) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 291) case 's':
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 292) system_map_file = optarg;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 293) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 294) case 'b':
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 295) vmlinux_file = optarg;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 296) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 297) case 'c':
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 298) cert_file = optarg;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 299) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 300) default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 301) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 302) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 303) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 304)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 305) if (!vmlinux_file || !cert_file) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 306) print_usage(argv[0]);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 307) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 308) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 309)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 310) cert = read_file(cert_file, &cert_size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 311) if (!cert)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 312) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 313)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 314) hdr = map_file(vmlinux_file, &vmlinux_size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 315) if (!hdr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 316) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 317)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 318) if (vmlinux_size < sizeof(*hdr)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 319) err("Invalid ELF file.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 320) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 321) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 322)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 323) if ((hdr->e_ident[EI_MAG0] != ELFMAG0) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 324) (hdr->e_ident[EI_MAG1] != ELFMAG1) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 325) (hdr->e_ident[EI_MAG2] != ELFMAG2) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 326) (hdr->e_ident[EI_MAG3] != ELFMAG3)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 327) err("Invalid ELF magic.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 328) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 329) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 330)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 331) if (hdr->e_ident[EI_CLASS] != CURRENT_ELFCLASS) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 332) err("ELF class mismatch.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 333) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 334) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 335)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 336) if (hdr->e_ident[EI_DATA] != endianness()) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 337) err("ELF endian mismatch.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 338) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 339) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 340)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 341) if (hdr->e_shoff > vmlinux_size) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 342) err("Could not find section header.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 343) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 344) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 345)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 346) symtab = get_symbol_table(hdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 347) if (!symtab) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 348) warn("Could not find the symbol table.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 349) if (!system_map_file) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 350) err("Please provide a System.map file.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 351) print_usage(argv[0]);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 352) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 353) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 354)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 355) system_map = fopen(system_map_file, "r");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 356) if (!system_map) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 357) perror(system_map_file);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 358) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 359) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 360) get_symbol_from_map(hdr, system_map, CERT_SYM, &cert_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 361) get_symbol_from_map(hdr, system_map, USED_SYM, &used_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 362) get_symbol_from_map(hdr, system_map, LSIZE_SYM, &lsize_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 363) cert_sym.size = used_sym.address - cert_sym.address;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 364) } else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 365) info("Symbol table found.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 366) if (system_map_file)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 367) warn("System.map is ignored.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 368) get_symbol_from_table(hdr, symtab, CERT_SYM, &cert_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 369) get_symbol_from_table(hdr, symtab, USED_SYM, &used_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 370) get_symbol_from_table(hdr, symtab, LSIZE_SYM, &lsize_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 371) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 372)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 373) if (!cert_sym.offset || !lsize_sym.offset || !used_sym.offset)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 374) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 375)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 376) print_sym(hdr, &cert_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 377) print_sym(hdr, &used_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 378) print_sym(hdr, &lsize_sym);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 379)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 380) lsize = (unsigned long *)lsize_sym.content;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 381) used = (int *)used_sym.content;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 382)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 383) if (cert_sym.size < cert_size) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 384) err("Certificate is larger than the reserved area!\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 385) exit(EXIT_FAILURE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 386) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 387)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 388) /* If the existing cert is the same, don't overwrite */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 389) if (cert_size == *used &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 390) strncmp(cert_sym.content, cert, cert_size) == 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 391) warn("Certificate was already inserted.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 392) exit(EXIT_SUCCESS);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 393) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 394)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 395) if (*used > 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 396) warn("Replacing previously inserted certificate.\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 397)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 398) memcpy(cert_sym.content, cert, cert_size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 399) if (cert_size < cert_sym.size)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 400) memset(cert_sym.content + cert_size,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 401) 0, cert_sym.size - cert_size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 402)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 403) *lsize = *lsize + cert_size - *used;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 404) *used = cert_size;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 405) info("Inserted the contents of %s into %lx.\n", cert_file,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 406) cert_sym.address);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 407) info("Used %d bytes out of %d bytes reserved.\n", *used,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 408) cert_sym.size);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 409) exit(EXIT_SUCCESS);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 410) }