blob: 555c002167ad5632b6ccd0cf1aa17c1d8ea73489 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * a.out loader for x86-64
3 *
4 * Copyright (C) 1991, 1992, 1996 Linus Torvalds
5 * Hacked together by Andi Kleen
6 */
7
8#include <linux/module.h>
9
10#include <linux/time.h>
11#include <linux/kernel.h>
12#include <linux/mm.h>
13#include <linux/mman.h>
14#include <linux/a.out.h>
15#include <linux/errno.h>
16#include <linux/signal.h>
17#include <linux/string.h>
18#include <linux/fs.h>
19#include <linux/file.h>
20#include <linux/stat.h>
21#include <linux/fcntl.h>
22#include <linux/ptrace.h>
23#include <linux/user.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070024#include <linux/binfmts.h>
25#include <linux/personality.h>
26#include <linux/init.h>
Julia Lawalle5fc3162008-01-30 13:32:17 +010027#include <linux/jiffies.h>
Al Viro7d2f5512013-10-06 11:10:08 -040028#include <linux/perf_event.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070029
Linus Torvalds1da177e2005-04-16 15:20:36 -070030#include <asm/uaccess.h>
31#include <asm/pgalloc.h>
32#include <asm/cacheflush.h>
33#include <asm/user32.h>
34#include <asm/ia32.h>
35
36#undef WARN_OLD
Linus Torvalds1da177e2005-04-16 15:20:36 -070037
Al Viro71613c32012-10-20 22:00:48 -040038static int load_aout_binary(struct linux_binprm *);
Thomas Gleixner8edf8be2008-01-30 13:30:07 +010039static int load_aout_library(struct file *);
Linus Torvalds1da177e2005-04-16 15:20:36 -070040
Al Viro7d2f5512013-10-06 11:10:08 -040041#ifdef CONFIG_COREDUMP
42static int aout_core_dump(struct coredump_params *);
43
44static unsigned long get_dr(int n)
45{
46 struct perf_event *bp = current->thread.ptrace_bps[n];
47 return bp ? bp->hw.info.address : 0;
48}
Linus Torvalds1da177e2005-04-16 15:20:36 -070049
50/*
51 * fill in the user structure for a core dump..
52 */
Borislav Petkov838c19c2019-02-12 14:28:03 +010053static void fill_dump(struct pt_regs *regs, struct user32 *dump)
Linus Torvalds1da177e2005-04-16 15:20:36 -070054{
Thomas Gleixner8edf8be2008-01-30 13:30:07 +010055 u32 fs, gs;
Al Viro7d2f5512013-10-06 11:10:08 -040056 memset(dump, 0, sizeof(*dump));
Linus Torvalds1da177e2005-04-16 15:20:36 -070057
58/* changed the size calculations - should hopefully work better. lbt */
59 dump->magic = CMAGIC;
60 dump->start_code = 0;
H. Peter Anvin65ea5b02008-01-30 13:30:56 +010061 dump->start_stack = regs->sp & ~(PAGE_SIZE - 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -070062 dump->u_tsize = ((unsigned long) current->mm->end_code) >> PAGE_SHIFT;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +010063 dump->u_dsize = ((unsigned long)
64 (current->mm->brk + (PAGE_SIZE-1))) >> PAGE_SHIFT;
Linus Torvalds1da177e2005-04-16 15:20:36 -070065 dump->u_dsize -= dump->u_tsize;
Al Viro7d2f5512013-10-06 11:10:08 -040066 dump->u_debugreg[0] = get_dr(0);
67 dump->u_debugreg[1] = get_dr(1);
68 dump->u_debugreg[2] = get_dr(2);
69 dump->u_debugreg[3] = get_dr(3);
Thomas Gleixner8edf8be2008-01-30 13:30:07 +010070 dump->u_debugreg[6] = current->thread.debugreg6;
Al Viro7d2f5512013-10-06 11:10:08 -040071 dump->u_debugreg[7] = current->thread.ptrace_dr7;
Linus Torvalds1da177e2005-04-16 15:20:36 -070072
Thomas Gleixner8edf8be2008-01-30 13:30:07 +010073 if (dump->start_stack < 0xc0000000) {
74 unsigned long tmp;
75
76 tmp = (unsigned long) (0xc0000000 - dump->start_stack);
77 dump->u_ssize = tmp >> PAGE_SHIFT;
78 }
Linus Torvalds1da177e2005-04-16 15:20:36 -070079
Al Viro7d2f5512013-10-06 11:10:08 -040080 dump->regs.ebx = regs->bx;
81 dump->regs.ecx = regs->cx;
82 dump->regs.edx = regs->dx;
83 dump->regs.esi = regs->si;
84 dump->regs.edi = regs->di;
85 dump->regs.ebp = regs->bp;
86 dump->regs.eax = regs->ax;
Linus Torvalds1da177e2005-04-16 15:20:36 -070087 dump->regs.ds = current->thread.ds;
88 dump->regs.es = current->thread.es;
Jeremy Fitzhardingeb6edbb12008-08-19 13:04:19 -070089 savesegment(fs, fs);
90 dump->regs.fs = fs;
91 savesegment(gs, gs);
92 dump->regs.gs = gs;
Al Viro7d2f5512013-10-06 11:10:08 -040093 dump->regs.orig_eax = regs->orig_ax;
94 dump->regs.eip = regs->ip;
Linus Torvalds1da177e2005-04-16 15:20:36 -070095 dump->regs.cs = regs->cs;
Al Viro7d2f5512013-10-06 11:10:08 -040096 dump->regs.eflags = regs->flags;
97 dump->regs.esp = regs->sp;
Linus Torvalds1da177e2005-04-16 15:20:36 -070098 dump->regs.ss = regs->ss;
99
100#if 1 /* FIXME */
101 dump->u_fpvalid = 0;
102#else
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100103 dump->u_fpvalid = dump_fpu(regs, &dump->i387);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700104#endif
105}
106
107#endif
108
109static struct linux_binfmt aout_format = {
110 .module = THIS_MODULE,
111 .load_binary = load_aout_binary,
112 .load_shlib = load_aout_library,
Al Viro7d2f5512013-10-06 11:10:08 -0400113#ifdef CONFIG_COREDUMP
Linus Torvalds1da177e2005-04-16 15:20:36 -0700114 .core_dump = aout_core_dump,
115#endif
116 .min_coredump = PAGE_SIZE
117};
118
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700119static int set_brk(unsigned long start, unsigned long end)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700120{
121 start = PAGE_ALIGN(start);
122 end = PAGE_ALIGN(end);
123 if (end <= start)
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700124 return 0;
Michal Hocko864778b2016-05-23 16:25:36 -0700125 return vm_brk(start, end - start);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700126}
127
Al Viro7d2f5512013-10-06 11:10:08 -0400128#ifdef CONFIG_COREDUMP
Linus Torvalds1da177e2005-04-16 15:20:36 -0700129/*
130 * These are the only things you should do on a core-file: use only these
131 * macros to write out all the necessary info.
132 */
133
Linus Torvalds0eead9ab2010-10-14 10:57:40 -0700134#include <linux/coredump.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700135
Al Viro7d2f5512013-10-06 11:10:08 -0400136#define START_DATA(u) (u.u_tsize << PAGE_SHIFT)
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100137#define START_STACK(u) (u.start_stack)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700138
139/*
140 * Routine writes a core dump image in the current directory.
141 * Currently only a stub-function.
142 *
143 * Note that setuid/setgid files won't make a core-dump if the uid/gid
144 * changed due to the set[u|g]id. It's enforced by the "current->mm->dumpable"
145 * field, which also makes sure the core-dumps won't be recursive if the
146 * dumping of the process results in another error..
147 */
148
Al Viro7d2f5512013-10-06 11:10:08 -0400149static int aout_core_dump(struct coredump_params *cprm)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700150{
151 mm_segment_t fs;
152 int has_dumped = 0;
153 unsigned long dump_start, dump_size;
154 struct user32 dump;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700155
156 fs = get_fs();
157 set_fs(KERNEL_DS);
158 has_dumped = 1;
Borislav Petkov838c19c2019-02-12 14:28:03 +0100159
160 fill_dump(cprm->regs, &dump);
161
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100162 strncpy(dump.u_comm, current->comm, sizeof(current->comm));
H. Peter Anvin6e16d892008-02-07 00:15:57 -0800163 dump.u_ar0 = offsetof(struct user32, regs);
Al Viro7d2f5512013-10-06 11:10:08 -0400164 dump.signal = cprm->siginfo->si_signo;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700165
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100166 /*
167 * If the size of the dump file exceeds the rlimit, then see
168 * what would happen if we wrote the stack, but not the data
169 * area.
170 */
Al Viro7d2f5512013-10-06 11:10:08 -0400171 if ((dump.u_dsize + dump.u_ssize + 1) * PAGE_SIZE > cprm->limit)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700172 dump.u_dsize = 0;
173
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100174 /* Make sure we have enough room to write the stack and data areas. */
Al Viro7d2f5512013-10-06 11:10:08 -0400175 if ((dump.u_ssize + 1) * PAGE_SIZE > cprm->limit)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700176 dump.u_ssize = 0;
177
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100178 /* make sure we actually have a data and stack area to dump */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700179 set_fs(USER_DS);
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100180 if (!access_ok(VERIFY_READ, (void *) (unsigned long)START_DATA(dump),
181 dump.u_dsize << PAGE_SHIFT))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700182 dump.u_dsize = 0;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100183 if (!access_ok(VERIFY_READ, (void *) (unsigned long)START_STACK(dump),
184 dump.u_ssize << PAGE_SHIFT))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700185 dump.u_ssize = 0;
186
187 set_fs(KERNEL_DS);
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100188 /* struct user */
Al Viro43a5d542013-10-07 07:22:01 -0400189 if (!dump_emit(cprm, &dump, sizeof(dump)))
190 goto end_coredump;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100191 /* Now dump all of the user data. Include malloced stuff as well */
Al Viro9b56d542013-10-08 09:26:08 -0400192 if (!dump_skip(cprm, PAGE_SIZE - sizeof(dump)))
Al Viro43a5d542013-10-07 07:22:01 -0400193 goto end_coredump;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100194 /* now we start writing out the user space info */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700195 set_fs(USER_DS);
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100196 /* Dump the data area */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700197 if (dump.u_dsize != 0) {
198 dump_start = START_DATA(dump);
199 dump_size = dump.u_dsize << PAGE_SHIFT;
Al Viro43a5d542013-10-07 07:22:01 -0400200 if (!dump_emit(cprm, (void *)dump_start, dump_size))
201 goto end_coredump;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700202 }
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100203 /* Now prepare to dump the stack area */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700204 if (dump.u_ssize != 0) {
205 dump_start = START_STACK(dump);
206 dump_size = dump.u_ssize << PAGE_SHIFT;
Al Viro43a5d542013-10-07 07:22:01 -0400207 if (!dump_emit(cprm, (void *)dump_start, dump_size))
208 goto end_coredump;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700209 }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700210end_coredump:
211 set_fs(fs);
212 return has_dumped;
213}
214#endif
215
216/*
217 * create_aout_tables() parses the env- and arg-strings in new user
218 * memory and creates the pointer tables from them, and puts their
219 * addresses on the "stack", returning the new stack pointer value.
220 */
221static u32 __user *create_aout_tables(char __user *p, struct linux_binprm *bprm)
222{
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100223 u32 __user *argv, *envp, *sp;
224 int argc = bprm->argc, envc = bprm->envc;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700225
226 sp = (u32 __user *) ((-(unsigned long)sizeof(u32)) & (unsigned long) p);
227 sp -= envc+1;
228 envp = sp;
229 sp -= argc+1;
230 argv = sp;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100231 put_user((unsigned long) envp, --sp);
232 put_user((unsigned long) argv, --sp);
233 put_user(argc, --sp);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700234 current->mm->arg_start = (unsigned long) p;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100235 while (argc-- > 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700236 char c;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100237
238 put_user((u32)(unsigned long)p, argv++);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700239 do {
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100240 get_user(c, p++);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700241 } while (c);
242 }
Andi Kleen74019692007-01-11 01:52:45 +0100243 put_user(0, argv);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700244 current->mm->arg_end = current->mm->env_start = (unsigned long) p;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100245 while (envc-- > 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700246 char c;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100247
248 put_user((u32)(unsigned long)p, envp++);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700249 do {
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100250 get_user(c, p++);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700251 } while (c);
252 }
Andi Kleen74019692007-01-11 01:52:45 +0100253 put_user(0, envp);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700254 current->mm->env_end = (unsigned long) p;
255 return sp;
256}
257
258/*
259 * These are the functions used to load a.out style executables and shared
260 * libraries. There is no binary dependent code anywhere else.
261 */
Al Viro71613c32012-10-20 22:00:48 -0400262static int load_aout_binary(struct linux_binprm *bprm)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700263{
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100264 unsigned long error, fd_offset, rlim;
Al Viro71613c32012-10-20 22:00:48 -0400265 struct pt_regs *regs = current_pt_regs();
Linus Torvalds1da177e2005-04-16 15:20:36 -0700266 struct exec ex;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700267 int retval;
268
269 ex = *((struct exec *) bprm->buf); /* exec-header */
270 if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != OMAGIC &&
271 N_MAGIC(ex) != QMAGIC && N_MAGIC(ex) != NMAGIC) ||
272 N_TRSIZE(ex) || N_DRSIZE(ex) ||
Al Viro496ad9a2013-01-23 17:07:38 -0500273 i_size_read(file_inode(bprm->file)) <
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100274 ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700275 return -ENOEXEC;
276 }
277
278 fd_offset = N_TXTOFF(ex);
279
280 /* Check initial limits. This avoids letting people circumvent
281 * size limits imposed on them by creating programs with large
282 * arrays in the data or bss.
283 */
Jiri Slaby2854e722010-01-27 17:32:22 +0100284 rlim = rlimit(RLIMIT_DATA);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700285 if (rlim >= RLIM_INFINITY)
286 rlim = ~0;
287 if (ex.a_data + ex.a_bss > rlim)
288 return -ENOMEM;
289
290 /* Flush all traces of the currently running executable */
291 retval = flush_old_exec(bprm);
292 if (retval)
293 return retval;
294
Linus Torvalds1da177e2005-04-16 15:20:36 -0700295 /* OK, This is the point of no return */
296 set_personality(PER_LINUX);
Al Viroce7e5d22012-05-06 17:20:00 +0100297 set_personality_ia32(false);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700298
Linus Torvalds221af7f2010-01-28 22:14:42 -0800299 setup_new_exec(bprm);
300
301 regs->cs = __USER32_CS;
302 regs->r8 = regs->r9 = regs->r10 = regs->r11 = regs->r12 =
303 regs->r13 = regs->r14 = regs->r15 = 0;
304
Linus Torvalds1da177e2005-04-16 15:20:36 -0700305 current->mm->end_code = ex.a_text +
306 (current->mm->start_code = N_TXTADDR(ex));
307 current->mm->end_data = ex.a_data +
308 (current->mm->start_data = N_DATADDR(ex));
309 current->mm->brk = ex.a_bss +
310 (current->mm->start_brk = N_BSSADDR(ex));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700311
Al Viro6414fa6a2012-03-05 06:38:42 +0000312 retval = setup_arg_pages(bprm, IA32_STACK_TOP, EXSTACK_DEFAULT);
Al Viro19d860a2014-05-04 20:11:36 -0400313 if (retval < 0)
Al Viro6414fa6a2012-03-05 06:38:42 +0000314 return retval;
Al Viro6414fa6a2012-03-05 06:38:42 +0000315
David Howellsa6f76f22008-11-14 10:39:24 +1100316 install_exec_creds(bprm);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700317
318 if (N_MAGIC(ex) == OMAGIC) {
319 unsigned long text_addr, map_size;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700320
321 text_addr = N_TXTADDR(ex);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700322 map_size = ex.a_text+ex.a_data;
323
Linus Torvaldse4eb1ff2012-04-20 15:35:40 -0700324 error = vm_brk(text_addr & PAGE_MASK, map_size);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700325
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700326 if (error)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700327 return error;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700328
Al Viro3dc20cb2013-04-13 20:31:37 -0400329 error = read_code(bprm->file, text_addr, 32,
330 ex.a_text + ex.a_data);
Al Viro19d860a2014-05-04 20:11:36 -0400331 if ((signed long)error < 0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700332 return error;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700333 } else {
334#ifdef WARN_OLD
335 static unsigned long error_time, error_time2;
336 if ((ex.a_text & 0xfff || ex.a_data & 0xfff) &&
Julia Lawalle5fc3162008-01-30 13:32:17 +0100337 (N_MAGIC(ex) != NMAGIC) &&
338 time_after(jiffies, error_time2 + 5*HZ)) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700339 printk(KERN_NOTICE "executable not page aligned\n");
340 error_time2 = jiffies;
341 }
342
343 if ((fd_offset & ~PAGE_MASK) != 0 &&
Julia Lawalle5fc3162008-01-30 13:32:17 +0100344 time_after(jiffies, error_time + 5*HZ)) {
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100345 printk(KERN_WARNING
346 "fd_offset is not page aligned. Please convert "
Al Viroa4555892014-10-21 20:11:25 -0400347 "program: %pD\n",
348 bprm->file);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700349 error_time = jiffies;
350 }
351#endif
352
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100353 if (!bprm->file->f_op->mmap || (fd_offset & ~PAGE_MASK) != 0) {
Michal Hocko864778b2016-05-23 16:25:36 -0700354 error = vm_brk(N_TXTADDR(ex), ex.a_text+ex.a_data);
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700355 if (error)
Michal Hocko864778b2016-05-23 16:25:36 -0700356 return error;
357
Al Viro3dc20cb2013-04-13 20:31:37 -0400358 read_code(bprm->file, N_TXTADDR(ex), fd_offset,
359 ex.a_text+ex.a_data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700360 goto beyond_if;
361 }
362
Linus Torvalds6be5ceb2012-04-20 17:13:58 -0700363 error = vm_mmap(bprm->file, N_TXTADDR(ex), ex.a_text,
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100364 PROT_READ | PROT_EXEC,
365 MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE |
366 MAP_EXECUTABLE | MAP_32BIT,
367 fd_offset);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700368
Al Viro19d860a2014-05-04 20:11:36 -0400369 if (error != N_TXTADDR(ex))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700370 return error;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700371
Linus Torvalds6be5ceb2012-04-20 17:13:58 -0700372 error = vm_mmap(bprm->file, N_DATADDR(ex), ex.a_data,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700373 PROT_READ | PROT_WRITE | PROT_EXEC,
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100374 MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE |
375 MAP_EXECUTABLE | MAP_32BIT,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700376 fd_offset + ex.a_text);
Al Viro19d860a2014-05-04 20:11:36 -0400377 if (error != N_DATADDR(ex))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700378 return error;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700379 }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700380
Michal Hocko864778b2016-05-23 16:25:36 -0700381beyond_if:
382 error = set_brk(current->mm->start_brk, current->mm->brk);
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700383 if (error)
Michal Hocko864778b2016-05-23 16:25:36 -0700384 return error;
385
386 set_binfmt(&aout_format);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700387
Linus Torvalds1da177e2005-04-16 15:20:36 -0700388 current->mm->start_stack =
389 (unsigned long)create_aout_tables((char __user *)bprm->p, bprm);
390 /* start thread */
Jeremy Fitzhardingeb6edbb12008-08-19 13:04:19 -0700391 loadsegment(fs, 0);
392 loadsegment(ds, __USER32_DS);
393 loadsegment(es, __USER32_DS);
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100394 load_gs_index(0);
H. Peter Anvin65ea5b02008-01-30 13:30:56 +0100395 (regs)->ip = ex.a_entry;
396 (regs)->sp = current->mm->start_stack;
397 (regs)->flags = 0x200;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700398 (regs)->cs = __USER32_CS;
399 (regs)->ss = __USER32_DS;
Andi Kleenf891dd12007-10-17 18:04:33 +0200400 regs->r8 = regs->r9 = regs->r10 = regs->r11 =
401 regs->r12 = regs->r13 = regs->r14 = regs->r15 = 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700402 set_fs(USER_DS);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700403 return 0;
404}
405
406static int load_aout_library(struct file *file)
407{
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100408 unsigned long bss, start_addr, len, error;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700409 int retval;
410 struct exec ex;
411
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412
413 retval = -ENOEXEC;
414 error = kernel_read(file, 0, (char *) &ex, sizeof(ex));
415 if (error != sizeof(ex))
416 goto out;
417
418 /* We come in here for the regular a.out style of shared libraries */
419 if ((N_MAGIC(ex) != ZMAGIC && N_MAGIC(ex) != QMAGIC) || N_TRSIZE(ex) ||
420 N_DRSIZE(ex) || ((ex.a_entry & 0xfff) && N_MAGIC(ex) == ZMAGIC) ||
Al Viro496ad9a2013-01-23 17:07:38 -0500421 i_size_read(file_inode(file)) <
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100422 ex.a_text+ex.a_data+N_SYMSIZE(ex)+N_TXTOFF(ex)) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700423 goto out;
424 }
425
426 if (N_FLAGS(ex))
427 goto out;
428
429 /* For QMAGIC, the starting address is 0x20 into the page. We mask
430 this off to get the starting address for the page */
431
432 start_addr = ex.a_entry & 0xfffff000;
433
434 if ((N_TXTOFF(ex) & ~PAGE_MASK) != 0) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700435#ifdef WARN_OLD
436 static unsigned long error_time;
Julia Lawalle5fc3162008-01-30 13:32:17 +0100437 if (time_after(jiffies, error_time + 5*HZ)) {
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100438 printk(KERN_WARNING
439 "N_TXTOFF is not page aligned. Please convert "
Al Viroa4555892014-10-21 20:11:25 -0400440 "library: %pD\n",
441 file);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700442 error_time = jiffies;
443 }
444#endif
Michal Hocko864778b2016-05-23 16:25:36 -0700445 retval = vm_brk(start_addr, ex.a_text + ex.a_data + ex.a_bss);
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700446 if (retval)
Michal Hocko864778b2016-05-23 16:25:36 -0700447 goto out;
Thomas Gleixner8edf8be2008-01-30 13:30:07 +0100448
Al Viro3dc20cb2013-04-13 20:31:37 -0400449 read_code(file, start_addr, N_TXTOFF(ex),
450 ex.a_text + ex.a_data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700451 retval = 0;
452 goto out;
453 }
454 /* Now use mmap to map the library into memory. */
Linus Torvalds6be5ceb2012-04-20 17:13:58 -0700455 error = vm_mmap(file, start_addr, ex.a_text + ex.a_data,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700456 PROT_READ | PROT_WRITE | PROT_EXEC,
457 MAP_FIXED | MAP_PRIVATE | MAP_DENYWRITE | MAP_32BIT,
458 N_TXTOFF(ex));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700459 retval = error;
460 if (error != start_addr)
461 goto out;
462
463 len = PAGE_ALIGN(ex.a_text + ex.a_data);
464 bss = ex.a_text + ex.a_data + ex.a_bss;
465 if (bss > len) {
Linus Torvalds5d22fc22016-05-27 15:57:31 -0700466 retval = vm_brk(start_addr + len, bss - len);
467 if (retval)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700468 goto out;
469 }
470 retval = 0;
471out:
472 return retval;
473}
474
475static int __init init_aout_binfmt(void)
476{
Al Viro8fc3dc52012-03-17 03:05:16 -0400477 register_binfmt(&aout_format);
478 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700479}
480
481static void __exit exit_aout_binfmt(void)
482{
483 unregister_binfmt(&aout_format);
484}
485
486module_init(init_aout_binfmt);
487module_exit(exit_aout_binfmt);
488MODULE_LICENSE("GPL");