1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
/* AArch64 BTI functions.
Copyright (C) 2020 Free Software Foundation, Inc.
The GNU C Library is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 2.1 of the License, or (at your option) any later version.
The GNU C Library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General Public
License along with the GNU C Library; if not, see
<https://www.gnu.org/licenses/>. */
#include <unistd.h>
#include <errno.h>
#include <libintl.h>
#include <ldsodefs.h>
#include <sys/mman.h>
/* See elf/dl-load.h. */
#ifndef MAP_COPY
# define MAP_COPY (MAP_PRIVATE | MAP_DENYWRITE)
#endif
/* Enable BTI protection for MAP. */
void
_dl_bti_protect (struct link_map *map, int fd)
{
const size_t pagesz = GLRO(dl_pagesize);
const ElfW(Phdr) *phdr;
for (phdr = map->l_phdr; phdr < &map->l_phdr[map->l_phnum]; ++phdr)
if (phdr->p_type == PT_LOAD && (phdr->p_flags & PF_X))
{
size_t vstart = ALIGN_DOWN (phdr->p_vaddr, pagesz);
size_t vend = ALIGN_UP (phdr->p_vaddr + phdr->p_filesz, pagesz);
off_t off = ALIGN_DOWN (phdr->p_offset, pagesz);
void *start = (void *) (vstart + map->l_addr);
size_t len = vend - vstart;
unsigned prot = PROT_EXEC | PROT_BTI;
if (phdr->p_flags & PF_R)
prot |= PROT_READ;
if (phdr->p_flags & PF_W)
prot |= PROT_WRITE;
if (fd == -1)
/* Ignore failures for kernel mapped binaries. */
__mprotect (start, len, prot);
else
map->l_mach.bti_fail = __mmap (start, len, prot,
MAP_FIXED|MAP_COPY|MAP_FILE,
fd, off) == MAP_FAILED;
}
}
static void
bti_failed (struct link_map *l, const char *program)
{
if (program)
_dl_fatal_printf ("%s: %s: failed to turn on BTI protection\n",
program, l->l_name);
else
/* Note: the errno value is not available any more. */
_dl_signal_error (0, l->l_name, "dlopen",
N_("failed to turn on BTI protection"));
}
/* Report BTI protection failures for MAP and its dependencies. */
void
_dl_bti_check (struct link_map *map, const char *program)
{
if (!GLRO(dl_aarch64_cpu_features).bti)
return;
if (map->l_mach.bti_fail)
bti_failed (map, program);
unsigned int i = map->l_searchlist.r_nlist;
while (i-- > 0)
{
struct link_map *l = map->l_initfini[i];
if (l->l_mach.bti_fail)
bti_failed (l, program);
}
}
|
