1 1.50 riastrad /* $NetBSD: mdreloc.c,v 1.50 2025/04/16 18:10:46 riastradh Exp $ */ 2 1.4 thorpej 3 1.4 thorpej /* 4 1.4 thorpej * Copyright (c) 2001 Wasabi Systems, Inc. 5 1.4 thorpej * All rights reserved. 6 1.4 thorpej * 7 1.4 thorpej * Written by Frank van der Linden for Wasabi Systems, Inc. 8 1.4 thorpej * 9 1.4 thorpej * Redistribution and use in source and binary forms, with or without 10 1.4 thorpej * modification, are permitted provided that the following conditions 11 1.4 thorpej * are met: 12 1.4 thorpej * 1. Redistributions of source code must retain the above copyright 13 1.4 thorpej * notice, this list of conditions and the following disclaimer. 14 1.4 thorpej * 2. Redistributions in binary form must reproduce the above copyright 15 1.4 thorpej * notice, this list of conditions and the following disclaimer in the 16 1.4 thorpej * documentation and/or other materials provided with the distribution. 17 1.4 thorpej * 3. All advertising materials mentioning features or use of this software 18 1.4 thorpej * must display the following acknowledgement: 19 1.4 thorpej * This product includes software developed for the NetBSD Project by 20 1.4 thorpej * Wasabi Systems, Inc. 21 1.4 thorpej * 4. The name of Wasabi Systems, Inc. may not be used to endorse 22 1.4 thorpej * or promote products derived from this software without specific prior 23 1.4 thorpej * written permission. 24 1.4 thorpej * 25 1.4 thorpej * THIS SOFTWARE IS PROVIDED BY WASABI SYSTEMS, INC. ``AS IS'' AND 26 1.4 thorpej * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 27 1.4 thorpej * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 28 1.4 thorpej * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL WASABI SYSTEMS, INC 29 1.4 thorpej * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 30 1.4 thorpej * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 31 1.4 thorpej * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 32 1.4 thorpej * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 33 1.4 thorpej * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 34 1.4 thorpej * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 35 1.4 thorpej * POSSIBILITY OF SUCH DAMAGE. 36 1.5 thorpej */ 37 1.5 thorpej 38 1.5 thorpej /* 39 1.5 thorpej * Copyright 1996 John D. Polstra. 40 1.5 thorpej * Copyright 1996 Matt Thomas <matt (at) 3am-software.com> 41 1.5 thorpej * All rights reserved. 42 1.5 thorpej * 43 1.5 thorpej * Redistribution and use in source and binary forms, with or without 44 1.5 thorpej * modification, are permitted provided that the following conditions 45 1.5 thorpej * are met: 46 1.5 thorpej * 1. Redistributions of source code must retain the above copyright 47 1.5 thorpej * notice, this list of conditions and the following disclaimer. 48 1.5 thorpej * 2. Redistributions in binary form must reproduce the above copyright 49 1.5 thorpej * notice, this list of conditions and the following disclaimer in the 50 1.5 thorpej * documentation and/or other materials provided with the distribution. 51 1.5 thorpej * 3. All advertising materials mentioning features or use of this software 52 1.5 thorpej * must display the following acknowledgement: 53 1.5 thorpej * This product includes software developed by John Polstra. 54 1.5 thorpej * 4. The name of the author may not be used to endorse or promote products 55 1.5 thorpej * derived from this software without specific prior written permission. 56 1.5 thorpej * 57 1.5 thorpej * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 58 1.5 thorpej * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 59 1.5 thorpej * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 60 1.5 thorpej * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 61 1.5 thorpej * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 62 1.5 thorpej * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 63 1.5 thorpej * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 64 1.5 thorpej * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 65 1.5 thorpej * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 66 1.5 thorpej * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 67 1.4 thorpej */ 68 1.4 thorpej 69 1.50 riastrad /* 70 1.50 riastrad * amd64 ELF relocations. 71 1.50 riastrad * 72 1.50 riastrad * References: 73 1.50 riastrad * 74 1.50 riastrad * [AMD64psABI] System V Application Binary Interface: AMD64 75 1.50 riastrad * Architecture Processor Supplement, Draft Version 0.99.6, 76 1.50 riastrad * 2013-10-07. 77 1.50 riastrad * https://web.archive.org/web/20160801075146/http://www.x86-64.org/documentation/abi.pdf 78 1.50 riastrad * Source code: https://gitlab.com/x86-psABIs/x86-64-ABI 79 1.50 riastrad */ 80 1.50 riastrad 81 1.26 skrll #include <sys/cdefs.h> 82 1.26 skrll #ifndef lint 83 1.50 riastrad __RCSID("$NetBSD: mdreloc.c,v 1.50 2025/04/16 18:10:46 riastradh Exp $"); 84 1.26 skrll #endif /* not lint */ 85 1.26 skrll 86 1.1 fvdl #include <sys/types.h> 87 1.1 fvdl #include <sys/mman.h> 88 1.1 fvdl #include <errno.h> 89 1.1 fvdl #include <fcntl.h> 90 1.1 fvdl #include <stdarg.h> 91 1.1 fvdl #include <stdio.h> 92 1.1 fvdl #include <stdlib.h> 93 1.1 fvdl #include <string.h> 94 1.1 fvdl #include <unistd.h> 95 1.1 fvdl #include <elf.h> 96 1.1 fvdl 97 1.1 fvdl #include "debug.h" 98 1.1 fvdl #include "rtld.h" 99 1.16 mycroft 100 1.16 mycroft void _rtld_bind_start(void); 101 1.21 fvdl void _rtld_relocate_nonplt_self(Elf_Dyn *, Elf_Addr); 102 1.23 skrll caddr_t _rtld_bind(const Obj_Entry *, Elf_Word); 103 1.25 skrll static inline int _rtld_relocate_plt_object(const Obj_Entry *, 104 1.25 skrll const Elf_Rela *, Elf_Addr *); 105 1.1 fvdl 106 1.44 christos #define rdbg_symname(obj, rela) \ 107 1.43 christos ((obj)->strtab + (obj)->symtab[ELF_R_SYM((rela)->r_info)].st_name) 108 1.43 christos 109 1.8 mycroft void 110 1.8 mycroft _rtld_setup_pltgot(const Obj_Entry *obj) 111 1.8 mycroft { 112 1.8 mycroft obj->pltgot[1] = (Elf_Addr) obj; 113 1.8 mycroft obj->pltgot[2] = (Elf_Addr) &_rtld_bind_start; 114 1.21 fvdl } 115 1.21 fvdl 116 1.21 fvdl void 117 1.23 skrll _rtld_relocate_nonplt_self(Elf_Dyn *dynp, Elf_Addr relocbase) 118 1.21 fvdl { 119 1.21 fvdl const Elf_Rela *rela = 0, *relalim; 120 1.21 fvdl Elf_Addr relasz = 0; 121 1.21 fvdl Elf_Addr *where; 122 1.21 fvdl 123 1.21 fvdl for (; dynp->d_tag != DT_NULL; dynp++) { 124 1.21 fvdl switch (dynp->d_tag) { 125 1.21 fvdl case DT_RELA: 126 1.21 fvdl rela = (const Elf_Rela *)(relocbase + dynp->d_un.d_ptr); 127 1.21 fvdl break; 128 1.21 fvdl case DT_RELASZ: 129 1.21 fvdl relasz = dynp->d_un.d_val; 130 1.21 fvdl break; 131 1.21 fvdl } 132 1.21 fvdl } 133 1.21 fvdl /* 134 1.21 fvdl * Assume only 64-bit relocations here, which should always 135 1.21 fvdl * be true for the dynamic linker. 136 1.21 fvdl */ 137 1.34 lukem relalim = (const Elf_Rela *)((const uint8_t *)rela + relasz); 138 1.21 fvdl for (; rela < relalim; rela++) { 139 1.21 fvdl where = (Elf_Addr *)(relocbase + rela->r_offset); 140 1.21 fvdl *where = (Elf_Addr)(relocbase + rela->r_addend); 141 1.21 fvdl } 142 1.8 mycroft } 143 1.8 mycroft 144 1.8 mycroft int 145 1.38 joerg _rtld_relocate_nonplt_objects(Obj_Entry *obj) 146 1.1 fvdl { 147 1.9 mycroft const Elf_Rela *rela; 148 1.28 skrll const Elf_Sym *def = NULL; 149 1.42 joerg const Obj_Entry *defobj = NULL; 150 1.42 joerg unsigned long last_symnum = ULONG_MAX; 151 1.1 fvdl 152 1.9 mycroft for (rela = obj->rela; rela < obj->relalim; rela++) { 153 1.9 mycroft Elf64_Addr *where64; 154 1.9 mycroft Elf32_Addr *where32; 155 1.9 mycroft Elf64_Addr tmp64; 156 1.9 mycroft Elf32_Addr tmp32; 157 1.42 joerg unsigned long symnum; 158 1.1 fvdl 159 1.9 mycroft where64 = (Elf64_Addr *)(obj->relocbase + rela->r_offset); 160 1.9 mycroft where32 = (Elf32_Addr *)where64; 161 1.42 joerg 162 1.42 joerg switch (ELF_R_TYPE(rela->r_info)) { 163 1.42 joerg case R_TYPE(32): /* word32 S + A, truncate */ 164 1.42 joerg case R_TYPE(32S): /* word32 S + A, signed truncate */ 165 1.42 joerg case R_TYPE(GOT32): /* word32 G + A (XXX can we see these?) */ 166 1.42 joerg case R_TYPE(64): /* word64 S + A */ 167 1.42 joerg case R_TYPE(PC32): /* word32 S + A - P */ 168 1.42 joerg case R_TYPE(GLOB_DAT): /* word64 S */ 169 1.42 joerg case R_TYPE(TPOFF64): 170 1.42 joerg case R_TYPE(DTPMOD64): 171 1.42 joerg case R_TYPE(DTPOFF64): 172 1.42 joerg symnum = ELF_R_SYM(rela->r_info); 173 1.42 joerg if (last_symnum != symnum) { 174 1.42 joerg last_symnum = symnum; 175 1.42 joerg def = _rtld_find_symdef(symnum, obj, &defobj, 176 1.42 joerg false); 177 1.42 joerg if (def == NULL) 178 1.42 joerg return -1; 179 1.42 joerg } 180 1.42 joerg break; 181 1.42 joerg default: 182 1.42 joerg break; 183 1.42 joerg } 184 1.1 fvdl 185 1.9 mycroft switch (ELF_R_TYPE(rela->r_info)) { 186 1.9 mycroft case R_TYPE(NONE): 187 1.9 mycroft break; 188 1.9 mycroft 189 1.9 mycroft case R_TYPE(32): /* word32 S + A, truncate */ 190 1.9 mycroft case R_TYPE(32S): /* word32 S + A, signed truncate */ 191 1.9 mycroft case R_TYPE(GOT32): /* word32 G + A (XXX can we see these?) */ 192 1.9 mycroft tmp32 = (Elf32_Addr)(u_long)(defobj->relocbase + 193 1.9 mycroft def->st_value + rela->r_addend); 194 1.9 mycroft 195 1.9 mycroft if (*where32 != tmp32) 196 1.9 mycroft *where32 = tmp32; 197 1.17 mycroft rdbg(("32/32S %s in %s --> %p in %s", 198 1.44 christos rdbg_symname(obj, rela), 199 1.39 joerg obj->path, (void *)(uintptr_t)*where32, 200 1.11 mycroft defobj->path)); 201 1.9 mycroft break; 202 1.9 mycroft case R_TYPE(64): /* word64 S + A */ 203 1.9 mycroft tmp64 = (Elf64_Addr)(defobj->relocbase + def->st_value + 204 1.9 mycroft rela->r_addend); 205 1.9 mycroft 206 1.9 mycroft if (*where64 != tmp64) 207 1.9 mycroft *where64 = tmp64; 208 1.17 mycroft rdbg(("64 %s in %s --> %p in %s", 209 1.44 christos rdbg_symname(obj, rela), 210 1.11 mycroft obj->path, (void *)*where64, defobj->path)); 211 1.9 mycroft break; 212 1.9 mycroft case R_TYPE(PC32): /* word32 S + A - P */ 213 1.9 mycroft tmp32 = (Elf32_Addr)(u_long)(defobj->relocbase + 214 1.9 mycroft def->st_value + rela->r_addend - 215 1.9 mycroft (Elf64_Addr)where64); 216 1.9 mycroft if (*where32 != tmp32) 217 1.9 mycroft *where32 = tmp32; 218 1.17 mycroft rdbg(("PC32 %s in %s --> %p in %s", 219 1.44 christos rdbg_symname(obj, rela), 220 1.11 mycroft obj->path, (void *)(unsigned long)*where32, 221 1.11 mycroft defobj->path)); 222 1.9 mycroft break; 223 1.9 mycroft case R_TYPE(GLOB_DAT): /* word64 S */ 224 1.9 mycroft tmp64 = (Elf64_Addr)(defobj->relocbase + def->st_value); 225 1.9 mycroft 226 1.9 mycroft if (*where64 != tmp64) 227 1.9 mycroft *where64 = tmp64; 228 1.17 mycroft rdbg(("64 %s in %s --> %p in %s", 229 1.44 christos rdbg_symname(obj, rela), 230 1.11 mycroft obj->path, (void *)*where64, defobj->path)); 231 1.9 mycroft break; 232 1.9 mycroft case R_TYPE(RELATIVE): /* word64 B + A */ 233 1.9 mycroft tmp64 = (Elf64_Addr)(obj->relocbase + rela->r_addend); 234 1.9 mycroft if (*where64 != tmp64) 235 1.9 mycroft *where64 = tmp64; 236 1.17 mycroft rdbg(("RELATIVE in %s --> %p", obj->path, 237 1.9 mycroft (void *)*where64)); 238 1.9 mycroft break; 239 1.9 mycroft 240 1.39 joerg case R_TYPE(TPOFF64): 241 1.48 joerg if (!defobj->tls_static && 242 1.48 joerg _rtld_tls_offset_allocate(__UNCONST(defobj))) 243 1.39 joerg return -1; 244 1.39 joerg 245 1.39 joerg *where64 = (Elf64_Addr)(def->st_value - 246 1.39 joerg defobj->tlsoffset + rela->r_addend); 247 1.39 joerg 248 1.39 joerg rdbg(("TPOFF64 %s in %s --> %p", 249 1.44 christos rdbg_symname(obj, rela), 250 1.39 joerg obj->path, (void *)*where64)); 251 1.39 joerg 252 1.39 joerg break; 253 1.39 joerg 254 1.39 joerg case R_TYPE(DTPMOD64): 255 1.39 joerg *where64 = (Elf64_Addr)defobj->tlsindex; 256 1.39 joerg 257 1.39 joerg rdbg(("DTPMOD64 %s in %s --> %p", 258 1.44 christos rdbg_symname(obj, rela), 259 1.39 joerg obj->path, (void *)*where64)); 260 1.39 joerg 261 1.39 joerg break; 262 1.39 joerg 263 1.39 joerg case R_TYPE(DTPOFF64): 264 1.39 joerg *where64 = (Elf64_Addr)(def->st_value + rela->r_addend); 265 1.39 joerg 266 1.39 joerg rdbg(("DTPOFF64 %s in %s --> %p", 267 1.44 christos rdbg_symname(obj, rela), 268 1.39 joerg obj->path, (void *)*where64)); 269 1.39 joerg 270 1.39 joerg break; 271 1.39 joerg 272 1.9 mycroft case R_TYPE(COPY): 273 1.17 mycroft rdbg(("COPY")); 274 1.9 mycroft break; 275 1.9 mycroft 276 1.47 joerg case R_TYPE(IRELATIVE): 277 1.47 joerg /* IFUNC relocations are handled in _rtld_call_ifunc */ 278 1.47 joerg if (obj->ifunc_remaining_nonplt == 0) { 279 1.47 joerg obj->ifunc_remaining_nonplt = 280 1.47 joerg obj->relalim - rela; 281 1.47 joerg } 282 1.47 joerg break; 283 1.47 joerg 284 1.9 mycroft default: 285 1.17 mycroft rdbg(("sym = %lu, type = %lu, offset = %p, " 286 1.9 mycroft "addend = %p, contents = %p, symbol = %s", 287 1.42 joerg (u_long)ELF_R_SYM(rela->r_info), 288 1.42 joerg (u_long)ELF_R_TYPE(rela->r_info), 289 1.9 mycroft (void *)rela->r_offset, (void *)rela->r_addend, 290 1.44 christos (void *)*where64, rdbg_symname(obj, rela))); 291 1.9 mycroft _rtld_error("%s: Unsupported relocation type %ld " 292 1.35 jmmv "in non-PLT relocations", 293 1.9 mycroft obj->path, (u_long) ELF_R_TYPE(rela->r_info)); 294 1.1 fvdl return -1; 295 1.9 mycroft } 296 1.1 fvdl } 297 1.12 mycroft return 0; 298 1.12 mycroft } 299 1.12 mycroft 300 1.12 mycroft int 301 1.45 joerg _rtld_relocate_plt_lazy(Obj_Entry *obj) 302 1.12 mycroft { 303 1.12 mycroft const Elf_Rela *rela; 304 1.12 mycroft 305 1.45 joerg for (rela = obj->pltrelalim; rela-- > obj->pltrela; ) { 306 1.12 mycroft Elf_Addr *where = (Elf_Addr *)(obj->relocbase + rela->r_offset); 307 1.12 mycroft 308 1.45 joerg assert(ELF_R_TYPE(rela->r_info) == R_TYPE(JUMP_SLOT) || 309 1.45 joerg ELF_R_TYPE(rela->r_info) == R_TYPE(IRELATIVE)); 310 1.45 joerg 311 1.45 joerg if (ELF_R_TYPE(rela->r_info) == R_TYPE(IRELATIVE)) 312 1.45 joerg obj->ifunc_remaining = obj->pltrelalim - rela; 313 1.12 mycroft 314 1.12 mycroft /* Just relocate the GOT slots pointing into the PLT */ 315 1.12 mycroft *where += (Elf_Addr)obj->relocbase; 316 1.17 mycroft rdbg(("fixup !main in %s --> %p", obj->path, (void *)*where)); 317 1.12 mycroft } 318 1.12 mycroft 319 1.12 mycroft return 0; 320 1.12 mycroft } 321 1.12 mycroft 322 1.24 skrll static inline int 323 1.24 skrll _rtld_relocate_plt_object(const Obj_Entry *obj, const Elf_Rela *rela, Elf_Addr *tp) 324 1.12 mycroft { 325 1.12 mycroft Elf_Addr *where = (Elf_Addr *)(obj->relocbase + rela->r_offset); 326 1.12 mycroft Elf_Addr new_value; 327 1.12 mycroft const Elf_Sym *def; 328 1.12 mycroft const Obj_Entry *defobj; 329 1.36 christos unsigned long info = rela->r_info; 330 1.12 mycroft 331 1.45 joerg if (ELF_R_TYPE(info) == R_TYPE(IRELATIVE)) 332 1.45 joerg return 0; 333 1.45 joerg 334 1.37 skrll assert(ELF_R_TYPE(info) == R_TYPE(JUMP_SLOT)); 335 1.12 mycroft 336 1.36 christos def = _rtld_find_plt_symdef(ELF_R_SYM(info), obj, &defobj, tp != NULL); 337 1.36 christos if (__predict_false(def == NULL)) 338 1.24 skrll return -1; 339 1.36 christos if (__predict_false(def == &_rtld_sym_zero)) 340 1.36 christos return 0; 341 1.36 christos 342 1.41 joerg if (ELF_ST_TYPE(def->st_info) == STT_GNU_IFUNC) { 343 1.41 joerg if (tp == NULL) 344 1.41 joerg return 0; 345 1.41 joerg new_value = _rtld_resolve_ifunc(defobj, def); 346 1.41 joerg } else { 347 1.41 joerg new_value = (Elf_Addr)(defobj->relocbase + def->st_value + 348 1.41 joerg rela->r_addend); 349 1.41 joerg } 350 1.41 joerg 351 1.49 riastrad rdbg(("bind now/fixup in %s --> old=%p new=%p", 352 1.31 christos defobj->strtab + def->st_name, (void *)*where, (void *)new_value)); 353 1.12 mycroft if (*where != new_value) 354 1.12 mycroft *where = new_value; 355 1.12 mycroft 356 1.24 skrll if (tp) 357 1.24 skrll *tp = new_value - rela->r_addend; 358 1.24 skrll 359 1.24 skrll return 0; 360 1.24 skrll } 361 1.24 skrll 362 1.24 skrll caddr_t 363 1.24 skrll _rtld_bind(const Obj_Entry *obj, Elf_Word reloff) 364 1.24 skrll { 365 1.24 skrll const Elf_Rela *rela = obj->pltrela + reloff; 366 1.24 skrll Elf_Addr new_value; 367 1.33 lukem int error; 368 1.24 skrll 369 1.27 dan new_value = 0; /* XXX GCC4 */ 370 1.27 dan 371 1.40 joerg _rtld_shared_enter(); 372 1.33 lukem error = _rtld_relocate_plt_object(obj, rela, &new_value); 373 1.36 christos if (error) 374 1.24 skrll _rtld_die(); 375 1.40 joerg _rtld_shared_exit(); 376 1.24 skrll 377 1.24 skrll return (caddr_t)new_value; 378 1.24 skrll } 379 1.24 skrll 380 1.24 skrll int 381 1.24 skrll _rtld_relocate_plt_objects(const Obj_Entry *obj) 382 1.24 skrll { 383 1.24 skrll const Elf_Rela *rela; 384 1.24 skrll 385 1.24 skrll for (rela = obj->pltrela; rela < obj->pltrelalim; rela++) 386 1.24 skrll if (_rtld_relocate_plt_object(obj, rela, NULL) < 0) 387 1.24 skrll return -1; 388 1.24 skrll 389 1.24 skrll return 0; 390 1.1 fvdl } 391