blob: 6dde6ccdf00ebcee7472a89887795f5da9e3b3bf [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * misc.c
Ian Campbell818a08f2008-01-30 13:33:38 +01003 *
Kees Cookc0402882016-04-18 09:42:13 -07004 * This is a collection of several routines used to extract the kernel
5 * which includes KASLR relocation, decompression, ELF parsing, and
6 * relocation processing. Additionally included are the screen and serial
7 * output functions and related debugging support functions.
Linus Torvalds1da177e2005-04-16 15:20:36 -07008 *
9 * malloc by Hannu Savolainen 1993 and Matthias Urlichs 1994
10 * puts by Nick Holloway 1993, better puts by Martin Mares 1995
11 * High loaded stuff by Hans Lermen & Werner Almesberger, Feb. 1996
12 */
13
Yinghai Lu8fee13a42010-08-02 16:21:22 -070014#include "misc.h"
Vivek Goyal820e8fe2014-03-18 15:26:38 -040015#include "../string.h"
Eric W. Biederman968de4f2006-12-07 02:14:04 +010016
Baoquan He4252db12016-04-20 13:55:42 -070017/*
18 * WARNING!!
19 * This code is compiled with -fPIC and it is relocated dynamically at
20 * run time, but no relocation processing is performed. This means that
21 * it is not safe to place pointers in static structures.
Eric W. Biederman968de4f2006-12-07 02:14:04 +010022 */
23
Kees Cook1f208de2016-04-20 13:55:44 -070024/* Macros used by the included decompressor code below. */
Ingo Molnar1180e012008-02-21 05:03:48 +010025#define STATIC static
Linus Torvalds1da177e2005-04-16 15:20:36 -070026
Vivek Goyal04999552014-03-18 15:26:40 -040027/*
Kees Cook1f208de2016-04-20 13:55:44 -070028 * Use normal definitions of mem*() from string.c. There are already
Vivek Goyal04999552014-03-18 15:26:40 -040029 * included header files which expect a definition of memset() and by
30 * the time we define memset macro, it is too late.
31 */
Kees Cook1f208de2016-04-20 13:55:44 -070032#undef memcpy
Vivek Goyal04999552014-03-18 15:26:40 -040033#undef memset
Ingo Molnar1180e012008-02-21 05:03:48 +010034#define memzero(s, n) memset((s), 0, (n))
Kees Cook81b785f2016-04-26 14:46:06 -070035#define memmove memmove
Linus Torvalds1da177e2005-04-16 15:20:36 -070036
Kees Cook1f208de2016-04-20 13:55:44 -070037/* Functions used by the included decompressor code below. */
Linus Torvalds1da177e2005-04-16 15:20:36 -070038static void error(char *m);
Kees Cook81b785f2016-04-26 14:46:06 -070039void *memmove(void *dest, const void *src, size_t n);
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +010040
Linus Torvalds1da177e2005-04-16 15:20:36 -070041/*
42 * This is set up by the setup-routine at boot-time
43 */
Kees Cook6655e0a2016-04-18 09:42:12 -070044struct boot_params *boot_params;
Linus Torvalds1da177e2005-04-16 15:20:36 -070045
Kees Cook82fa9632013-10-10 17:18:16 -070046memptr free_mem_ptr;
47memptr free_mem_end_ptr;
Ian Campbell778cb922008-01-30 13:33:38 +010048
Alexander van Heukelum03056c82008-04-06 14:47:00 +020049static char *vidmem;
Linus Torvalds1da177e2005-04-16 15:20:36 -070050static int vidport;
51static int lines, cols;
52
Alain Knaffae03c492009-01-04 22:46:17 +010053#ifdef CONFIG_KERNEL_GZIP
54#include "../../../../lib/decompress_inflate.c"
55#endif
56
57#ifdef CONFIG_KERNEL_BZIP2
58#include "../../../../lib/decompress_bunzip2.c"
59#endif
60
61#ifdef CONFIG_KERNEL_LZMA
62#include "../../../../lib/decompress_unlzma.c"
63#endif
Linus Torvalds1da177e2005-04-16 15:20:36 -070064
Lasse Collin30314802011-01-12 17:01:24 -080065#ifdef CONFIG_KERNEL_XZ
66#include "../../../../lib/decompress_unxz.c"
67#endif
68
Albin Tonnerre13510992010-01-08 14:42:45 -080069#ifdef CONFIG_KERNEL_LZO
70#include "../../../../lib/decompress_unlzo.c"
71#endif
72
Kyungsik Leef9b493a2013-07-08 16:01:48 -070073#ifdef CONFIG_KERNEL_LZ4
74#include "../../../../lib/decompress_unlz4.c"
75#endif
Baoquan He4252db12016-04-20 13:55:42 -070076/*
77 * NOTE: When adding a new decompressor, please update the analysis in
78 * ../header.S.
79 */
Kyungsik Leef9b493a2013-07-08 16:01:48 -070080
Linus Torvalds1da177e2005-04-16 15:20:36 -070081static void scroll(void)
82{
83 int i;
84
Kees Cook81b785f2016-04-26 14:46:06 -070085 memmove(vidmem, vidmem + cols * 2, (lines - 1) * cols * 2);
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +010086 for (i = (lines - 1) * cols * 2; i < lines * cols * 2; i += 2)
Linus Torvalds1da177e2005-04-16 15:20:36 -070087 vidmem[i] = ' ';
88}
89
Yinghai Lu8fee13a42010-08-02 16:21:22 -070090#define XMTRDY 0x20
91
92#define TXR 0 /* Transmit register (WRITE) */
93#define LSR 5 /* Line Status */
94static void serial_putchar(int ch)
95{
96 unsigned timeout = 0xffff;
97
98 while ((inb(early_serial_base + LSR) & XMTRDY) == 0 && --timeout)
99 cpu_relax();
100
101 outb(ch, early_serial_base + TXR);
102}
103
Joe Millenbach7aac3012012-07-19 18:04:39 -0700104void __putstr(const char *s)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700105{
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100106 int x, y, pos;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700107 char c;
108
Yinghai Lu8fee13a42010-08-02 16:21:22 -0700109 if (early_serial_base) {
110 const char *str = s;
111 while (*str) {
112 if (*str == '\n')
113 serial_putchar('\r');
114 serial_putchar(*str++);
115 }
116 }
Ben Collins6bcb13b2008-06-18 14:04:35 -0400117
Kees Cook6655e0a2016-04-18 09:42:12 -0700118 if (boot_params->screen_info.orig_video_mode == 0 &&
Kristian Høgsberg23968f72008-05-29 18:31:14 -0400119 lines == 0 && cols == 0)
Rusty Russella24e7852007-10-21 16:41:35 -0700120 return;
121
Kees Cook6655e0a2016-04-18 09:42:12 -0700122 x = boot_params->screen_info.orig_x;
123 y = boot_params->screen_info.orig_y;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700124
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100125 while ((c = *s++) != '\0') {
126 if (c == '\n') {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700127 x = 0;
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100128 if (++y >= lines) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700129 scroll();
130 y--;
131 }
132 } else {
Paolo Ciarrocchi020878a2008-08-02 21:23:36 +0200133 vidmem[(x + cols * y) * 2] = c;
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100134 if (++x >= cols) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700135 x = 0;
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100136 if (++y >= lines) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700137 scroll();
138 y--;
139 }
140 }
141 }
142 }
143
Kees Cook6655e0a2016-04-18 09:42:12 -0700144 boot_params->screen_info.orig_x = x;
145 boot_params->screen_info.orig_y = y;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700146
147 pos = (x + cols * y) * 2; /* Update cursor position */
Rene Hermanb02aae92008-01-30 13:30:05 +0100148 outb(14, vidport);
149 outb(0xff & (pos >> 9), vidport+1);
150 outb(15, vidport);
151 outb(0xff & (pos >> 1), vidport+1);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700152}
153
Kees Cook79063a72015-07-06 16:06:20 -0700154void __puthex(unsigned long value)
155{
156 char alpha[2] = "0";
157 int bits;
158
159 for (bits = sizeof(value) * 8 - 4; bits >= 0; bits -= 4) {
160 unsigned long digit = (value >> bits) & 0xf;
161
162 if (digit < 0xA)
163 alpha[0] = '0' + digit;
164 else
165 alpha[0] = 'a' + (digit - 0xA);
166
167 __putstr(alpha);
168 }
169}
170
Kees Cook0f8ede1b2016-04-20 13:55:46 -0700171void warn(char *m)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700172{
Joe Millenbachcb454fe2012-07-19 18:04:38 -0700173 error_putstr("\n\n");
Kees Cook0f8ede1b2016-04-20 13:55:46 -0700174 error_putstr(m);
175 error_putstr("\n\n");
176}
177
178static void error(char *m)
179{
180 warn(m);
181 error_putstr(" -- System halted");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700182
Ingo Molnarff3cf852008-01-30 13:32:31 +0100183 while (1)
184 asm("hlt");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700185}
186
Kees Cooka0215062013-07-08 09:15:17 -0700187#if CONFIG_X86_NEED_RELOCS
188static void handle_relocations(void *output, unsigned long output_len)
189{
190 int *reloc;
191 unsigned long delta, map, ptr;
192 unsigned long min_addr = (unsigned long)output;
193 unsigned long max_addr = min_addr + output_len;
194
195 /*
196 * Calculate the delta between where vmlinux was linked to load
197 * and where it was actually loaded.
198 */
199 delta = min_addr - LOAD_PHYSICAL_ADDR;
200 if (!delta) {
201 debug_putstr("No relocation needed... ");
202 return;
203 }
204 debug_putstr("Performing relocations... ");
205
206 /*
207 * The kernel contains a table of relocation addresses. Those
208 * addresses have the final load address of the kernel in virtual
209 * memory. We are currently working in the self map. So we need to
210 * create an adjustment for kernel memory addresses to the self map.
211 * This will involve subtracting out the base address of the kernel.
212 */
213 map = delta - __START_KERNEL_map;
214
215 /*
216 * Process relocations: 32 bit relocations first then 64 bit after.
Jan Beulich6d24c5f2014-11-04 08:50:18 +0000217 * Three sets of binary relocations are added to the end of the kernel
Kees Cooka0215062013-07-08 09:15:17 -0700218 * before compression. Each relocation table entry is the kernel
219 * address of the location which needs to be updated stored as a
220 * 32-bit value which is sign extended to 64 bits.
221 *
222 * Format is:
223 *
224 * kernel bits...
225 * 0 - zero terminator for 64 bit relocations
226 * 64 bit relocation repeated
Jan Beulich6d24c5f2014-11-04 08:50:18 +0000227 * 0 - zero terminator for inverse 32 bit relocations
228 * 32 bit inverse relocation repeated
Kees Cooka0215062013-07-08 09:15:17 -0700229 * 0 - zero terminator for 32 bit relocations
230 * 32 bit relocation repeated
231 *
232 * So we work backwards from the end of the decompressed image.
233 */
234 for (reloc = output + output_len - sizeof(*reloc); *reloc; reloc--) {
235 int extended = *reloc;
236 extended += map;
237
238 ptr = (unsigned long)extended;
239 if (ptr < min_addr || ptr > max_addr)
240 error("32-bit relocation outside of kernel!\n");
241
242 *(uint32_t *)ptr += delta;
243 }
244#ifdef CONFIG_X86_64
Jan Beulich6d24c5f2014-11-04 08:50:18 +0000245 while (*--reloc) {
246 long extended = *reloc;
247 extended += map;
248
249 ptr = (unsigned long)extended;
250 if (ptr < min_addr || ptr > max_addr)
251 error("inverse 32-bit relocation outside of kernel!\n");
252
253 *(int32_t *)ptr -= delta;
254 }
Kees Cooka0215062013-07-08 09:15:17 -0700255 for (reloc--; *reloc; reloc--) {
256 long extended = *reloc;
257 extended += map;
258
259 ptr = (unsigned long)extended;
260 if (ptr < min_addr || ptr > max_addr)
261 error("64-bit relocation outside of kernel!\n");
262
263 *(uint64_t *)ptr += delta;
264 }
265#endif
266}
267#else
268static inline void handle_relocations(void *output, unsigned long output_len)
269{ }
270#endif
271
Ian Campbell099e1372008-02-13 20:54:58 +0000272static void parse_elf(void *output)
273{
274#ifdef CONFIG_X86_64
275 Elf64_Ehdr ehdr;
276 Elf64_Phdr *phdrs, *phdr;
277#else
278 Elf32_Ehdr ehdr;
279 Elf32_Phdr *phdrs, *phdr;
280#endif
281 void *dest;
282 int i;
283
284 memcpy(&ehdr, output, sizeof(ehdr));
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100285 if (ehdr.e_ident[EI_MAG0] != ELFMAG0 ||
Ian Campbell099e1372008-02-13 20:54:58 +0000286 ehdr.e_ident[EI_MAG1] != ELFMAG1 ||
287 ehdr.e_ident[EI_MAG2] != ELFMAG2 ||
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100288 ehdr.e_ident[EI_MAG3] != ELFMAG3) {
Ian Campbell099e1372008-02-13 20:54:58 +0000289 error("Kernel is not a valid ELF file");
290 return;
291 }
292
Joe Millenbache605a422012-07-19 18:04:37 -0700293 debug_putstr("Parsing ELF... ");
Ian Campbell099e1372008-02-13 20:54:58 +0000294
295 phdrs = malloc(sizeof(*phdrs) * ehdr.e_phnum);
296 if (!phdrs)
297 error("Failed to allocate space for phdrs");
298
299 memcpy(phdrs, output + ehdr.e_phoff, sizeof(*phdrs) * ehdr.e_phnum);
300
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100301 for (i = 0; i < ehdr.e_phnum; i++) {
Ian Campbell099e1372008-02-13 20:54:58 +0000302 phdr = &phdrs[i];
303
304 switch (phdr->p_type) {
305 case PT_LOAD:
306#ifdef CONFIG_RELOCATABLE
307 dest = output;
308 dest += (phdr->p_paddr - LOAD_PHYSICAL_ADDR);
309#else
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100310 dest = (void *)(phdr->p_paddr);
Ian Campbell099e1372008-02-13 20:54:58 +0000311#endif
Kees Cook81b785f2016-04-26 14:46:06 -0700312 memmove(dest, output + phdr->p_offset, phdr->p_filesz);
Ian Campbell099e1372008-02-13 20:54:58 +0000313 break;
314 default: /* Ignore other PT_* */ break;
315 }
316 }
Jesper Juhl5067cf52012-01-23 23:34:59 +0100317
318 free(phdrs);
Ian Campbell099e1372008-02-13 20:54:58 +0000319}
320
Kees Cookc0402882016-04-18 09:42:13 -0700321asmlinkage __visible void *extract_kernel(void *rmode, memptr heap,
Ingo Molnar1180e012008-02-21 05:03:48 +0100322 unsigned char *input_data,
323 unsigned long input_len,
Kees Cooka0215062013-07-08 09:15:17 -0700324 unsigned char *output,
Junjie Maoe6023362014-10-31 21:40:38 +0800325 unsigned long output_len,
326 unsigned long run_size)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700327{
Kees Cookf285f4a2015-01-15 16:51:46 -0800328 unsigned char *output_orig = output;
329
Kees Cook6655e0a2016-04-18 09:42:12 -0700330 /* Retain x86 boot parameters pointer passed from startup_32/64. */
331 boot_params = rmode;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700332
Kees Cook6655e0a2016-04-18 09:42:12 -0700333 /* Clear flags intended for solely in-kernel use. */
334 boot_params->hdr.loadflags &= ~KASLR_FLAG;
Borislav Petkov78cac482015-04-01 12:49:52 +0200335
Kees Cook6655e0a2016-04-18 09:42:12 -0700336 sanitize_boot_params(boot_params);
H. Peter Anvin5dcd14e2013-01-29 01:05:24 -0800337
Kees Cook6655e0a2016-04-18 09:42:12 -0700338 if (boot_params->screen_info.orig_video_mode == 7) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700339 vidmem = (char *) 0xb0000;
340 vidport = 0x3b4;
341 } else {
342 vidmem = (char *) 0xb8000;
343 vidport = 0x3d4;
344 }
345
Kees Cook6655e0a2016-04-18 09:42:12 -0700346 lines = boot_params->screen_info.orig_video_lines;
347 cols = boot_params->screen_info.orig_video_cols;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700348
Yinghai Lu8fee13a42010-08-02 16:21:22 -0700349 console_init();
Kees Cookc0402882016-04-18 09:42:13 -0700350 debug_putstr("early console in extract_kernel\n");
Yinghai Lu8fee13a42010-08-02 16:21:22 -0700351
Ian Campbell4c83d652008-01-30 13:33:38 +0100352 free_mem_ptr = heap; /* Heap */
Alexander van Heukelum7c539762008-04-08 12:54:30 +0200353 free_mem_end_ptr = heap + BOOT_HEAP_SIZE;
Eric W. Biederman968de4f2006-12-07 02:14:04 +0100354
Kees Cook79063a72015-07-06 16:06:20 -0700355 /* Report initial kernel position details. */
356 debug_putaddr(input_data);
357 debug_putaddr(input_len);
358 debug_putaddr(output);
359 debug_putaddr(output_len);
360 debug_putaddr(run_size);
361
Junjie Maoe6023362014-10-31 21:40:38 +0800362 /*
363 * The memory hole needed for the kernel is the larger of either
364 * the entire decompressed kernel plus relocation table, or the
365 * entire decompressed kernel plus .bss and .brk sections.
366 */
Kees Cook7de828d2016-04-18 09:42:14 -0700367 output = choose_random_location(input_data, input_len, output,
Junjie Maoe6023362014-10-31 21:40:38 +0800368 output_len > run_size ? output_len
369 : run_size);
Kees Cook8ab38202013-10-10 17:18:14 -0700370
371 /* Validate memory location choices. */
H. Peter Anvin7ed42a22009-05-12 11:33:08 -0700372 if ((unsigned long)output & (MIN_KERNEL_ALIGN - 1))
373 error("Destination address inappropriately aligned");
Ian Campbell778cb922008-01-30 13:33:38 +0100374#ifdef CONFIG_X86_64
H. Peter Anvin7ed42a22009-05-12 11:33:08 -0700375 if (heap > 0x3fffffffffffUL)
Ian Campbell778cb922008-01-30 13:33:38 +0100376 error("Destination address too large");
377#else
H. Peter Anvin147dd562010-12-16 19:11:09 -0800378 if (heap > ((-__PAGE_OFFSET-(128<<20)-1) & 0x7fffffff))
Eric W. Biederman968de4f2006-12-07 02:14:04 +0100379 error("Destination address too large");
Eric W. Biederman968de4f2006-12-07 02:14:04 +0100380#endif
H. Peter Anvin7ed42a22009-05-12 11:33:08 -0700381#ifndef CONFIG_RELOCATABLE
382 if ((unsigned long)output != LOAD_PHYSICAL_ADDR)
383 error("Wrong destination address");
Ian Campbell778cb922008-01-30 13:33:38 +0100384#endif
Linus Torvalds1da177e2005-04-16 15:20:36 -0700385
Joe Millenbache605a422012-07-19 18:04:37 -0700386 debug_putstr("\nDecompressing Linux... ");
Yinghai Lu2d3862d2015-09-09 15:39:12 -0700387 __decompress(input_data, input_len, NULL, NULL, output, output_len,
388 NULL, error);
Ian Campbell099e1372008-02-13 20:54:58 +0000389 parse_elf(output);
Kees Cookf285f4a2015-01-15 16:51:46 -0800390 /*
391 * 32-bit always performs relocations. 64-bit relocations are only
392 * needed if kASLR has chosen a different load address.
393 */
394 if (!IS_ENABLED(CONFIG_X86_64) || output != output_orig)
395 handle_relocations(output, output_len);
Joe Millenbache605a422012-07-19 18:04:37 -0700396 debug_putstr("done.\nBooting the kernel.\n");
Kees Cook8ab38202013-10-10 17:18:14 -0700397 return output;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700398}