about summary refs log tree commit diff
path: root/scripts/check-execstack.awk
diff options
context:
space:
mode:
authorRoland McGrath <roland@hack.frob.com>2012-04-30 15:41:15 -0700
committerRoland McGrath <roland@hack.frob.com>2012-05-01 13:27:52 -0700
commit82397ed6eab79f3f17f66efae5ccfa19fa0e03d0 (patch)
treecac18c3bcd914ae38850bdbee3266b9281aa41b1 /scripts/check-execstack.awk
parent82a79e7d1843f9d90075a0bf2f04557040829bb0 (diff)
downloadglibc-82397ed6eab79f3f17f66efae5ccfa19fa0e03d0.tar.gz
glibc-82397ed6eab79f3f17f66efae5ccfa19fa0e03d0.tar.xz
glibc-82397ed6eab79f3f17f66efae5ccfa19fa0e03d0.zip
Do check-execstack test using readelf rather than a build-time C program.
Diffstat (limited to 'scripts/check-execstack.awk')
-rw-r--r--scripts/check-execstack.awk52
1 files changed, 52 insertions, 0 deletions
diff --git a/scripts/check-execstack.awk b/scripts/check-execstack.awk
new file mode 100644
index 0000000000..21d37e9f47
--- /dev/null
+++ b/scripts/check-execstack.awk
@@ -0,0 +1,52 @@
+# This awk script expects to get command-line files that are each
+# the output of 'readelf -l' on a single shared object.
+# But the first file should contain just "execstack-no" or "execstack-yes",
+# indicating what the default is in the absence of PT_GNU_STACK.
+# It exits successfully (0) if none indicated executable stack.
+# It fails (1) if any did indicate executable stack.
+# It fails (2) if the input did not take the expected form.
+
+BEGIN { result = sanity = 0; default_exec = -1 }
+
+/^execstack-no$/ { default_exec = 0; next }
+/^execstack-yes$/ { default_exec = 1; next }
+
+function check_one(name) {
+  if (default_exec == -1) {
+    print "*** missing execstack-default file?";
+    result = 2;
+  }
+
+  if (!sanity) {
+    print name ": *** input did not look like readelf -l output";
+    result = 2;
+  } else if (stack_line) {
+    if (stack_line ~ /^.*RW .*$/) {
+      print name ": OK";
+    } else if (stack_line ~ /^.*E.*$/) {
+      print name ": *** executable stack signaled";
+      result = result ? result : 1;
+    }
+  } else if (default_exec) {
+    print name ": *** no PT_GNU_STACK entry";
+    result = result ? result : 1;
+  } else {
+    print name ": no PT_GNU_STACK but default is OK";
+  }
+
+  sanity = 0;
+}
+
+FILENAME != lastfile {
+  if (lastfile)
+    check_one(lastfile);
+  lastfile = FILENAME;
+}
+
+$1 == "Type" && $7 == "Flg" { sanity = 1; stack_line = "" }
+$1 == "GNU_STACK" { stack_line = $0 }
+
+END {
+  check_one(lastfile);
+  exit(result);
+}