Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * linux/fs/binfmt_script.c |
| 3 | * |
Jan Engelhardt | 96de0e2 | 2007-10-19 23:21:04 +0200 | [diff] [blame] | 4 | * Copyright (C) 1996 Martin von Löwis |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 5 | * original #!-checking implemented by tytso. |
| 6 | */ |
| 7 | |
| 8 | #include <linux/module.h> |
| 9 | #include <linux/string.h> |
| 10 | #include <linux/stat.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 11 | #include <linux/binfmts.h> |
| 12 | #include <linux/init.h> |
| 13 | #include <linux/file.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 14 | #include <linux/err.h> |
| 15 | #include <linux/fs.h> |
| 16 | |
Al Viro | 71613c3 | 2012-10-20 22:00:48 -0400 | [diff] [blame] | 17 | static int load_script(struct linux_binprm *bprm) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 18 | { |
David Howells | d762746 | 2010-08-17 23:52:56 +0100 | [diff] [blame] | 19 | const char *i_arg, *i_name; |
| 20 | char *cp; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 21 | struct file *file; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 22 | int retval; |
| 23 | |
Kees Cook | d740269 | 2012-12-17 16:03:20 -0800 | [diff] [blame] | 24 | if ((bprm->buf[0] != '#') || (bprm->buf[1] != '!')) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 25 | return -ENOEXEC; |
David Drysdale | 51f39a1 | 2014-12-12 16:57:29 -0800 | [diff] [blame] | 26 | |
| 27 | /* |
| 28 | * If the script filename will be inaccessible after exec, typically |
| 29 | * because it is a "/dev/fd/<fd>/.." path against an O_CLOEXEC fd, give |
| 30 | * up now (on the assumption that the interpreter will want to load |
| 31 | * this file). |
| 32 | */ |
| 33 | if (bprm->interp_flags & BINPRM_FLAGS_PATH_INACCESSIBLE) |
| 34 | return -ENOENT; |
| 35 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 36 | /* |
| 37 | * This section does the #! interpretation. |
| 38 | * Sorta complicated, but hopefully it will work. -TYT |
| 39 | */ |
| 40 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 41 | allow_write_access(bprm->file); |
| 42 | fput(bprm->file); |
| 43 | bprm->file = NULL; |
| 44 | |
| 45 | bprm->buf[BINPRM_BUF_SIZE - 1] = '\0'; |
| 46 | if ((cp = strchr(bprm->buf, '\n')) == NULL) |
| 47 | cp = bprm->buf+BINPRM_BUF_SIZE-1; |
| 48 | *cp = '\0'; |
| 49 | while (cp > bprm->buf) { |
| 50 | cp--; |
| 51 | if ((*cp == ' ') || (*cp == '\t')) |
| 52 | *cp = '\0'; |
| 53 | else |
| 54 | break; |
| 55 | } |
| 56 | for (cp = bprm->buf+2; (*cp == ' ') || (*cp == '\t'); cp++); |
Oleg Nesterov | c2315c1 | 2017-10-03 16:15:42 -0700 | [diff] [blame] | 57 | if (*cp == '\0') |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 58 | return -ENOEXEC; /* No interpreter name found */ |
| 59 | i_name = cp; |
| 60 | i_arg = NULL; |
| 61 | for ( ; *cp && (*cp != ' ') && (*cp != '\t'); cp++) |
| 62 | /* nothing */ ; |
| 63 | while ((*cp == ' ') || (*cp == '\t')) |
| 64 | *cp++ = '\0'; |
| 65 | if (*cp) |
| 66 | i_arg = cp; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 67 | /* |
| 68 | * OK, we've parsed out the interpreter name and |
| 69 | * (optional) argument. |
| 70 | * Splice in (1) the interpreter's name for argv[0] |
| 71 | * (2) (optional) argument to interpreter |
| 72 | * (3) filename of shell script (replace argv[0]) |
| 73 | * |
| 74 | * This is done in reverse order, because of how the |
| 75 | * user environment and arguments are stored. |
| 76 | */ |
Ollie Wild | b6a2fea | 2007-07-19 01:48:16 -0700 | [diff] [blame] | 77 | retval = remove_arg_zero(bprm); |
| 78 | if (retval) |
| 79 | return retval; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 80 | retval = copy_strings_kernel(1, &bprm->interp, bprm); |
Oleg Nesterov | c2315c1 | 2017-10-03 16:15:42 -0700 | [diff] [blame] | 81 | if (retval < 0) |
| 82 | return retval; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 83 | bprm->argc++; |
| 84 | if (i_arg) { |
| 85 | retval = copy_strings_kernel(1, &i_arg, bprm); |
Oleg Nesterov | c2315c1 | 2017-10-03 16:15:42 -0700 | [diff] [blame] | 86 | if (retval < 0) |
| 87 | return retval; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 88 | bprm->argc++; |
| 89 | } |
| 90 | retval = copy_strings_kernel(1, &i_name, bprm); |
Oleg Nesterov | c2315c1 | 2017-10-03 16:15:42 -0700 | [diff] [blame] | 91 | if (retval) |
| 92 | return retval; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 93 | bprm->argc++; |
Oleg Nesterov | c2315c1 | 2017-10-03 16:15:42 -0700 | [diff] [blame] | 94 | retval = bprm_change_interp(i_name, bprm); |
Kees Cook | b66c598 | 2012-12-20 15:05:16 -0800 | [diff] [blame] | 95 | if (retval < 0) |
| 96 | return retval; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 97 | |
| 98 | /* |
| 99 | * OK, now restart the process with the interpreter's dentry. |
| 100 | */ |
Oleg Nesterov | c2315c1 | 2017-10-03 16:15:42 -0700 | [diff] [blame] | 101 | file = open_exec(i_name); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 102 | if (IS_ERR(file)) |
| 103 | return PTR_ERR(file); |
| 104 | |
| 105 | bprm->file = file; |
| 106 | retval = prepare_binprm(bprm); |
| 107 | if (retval < 0) |
| 108 | return retval; |
Al Viro | 3c456bf | 2012-10-20 21:53:31 -0400 | [diff] [blame] | 109 | return search_binary_handler(bprm); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 110 | } |
| 111 | |
| 112 | static struct linux_binfmt script_format = { |
| 113 | .module = THIS_MODULE, |
| 114 | .load_binary = load_script, |
| 115 | }; |
| 116 | |
| 117 | static int __init init_script_binfmt(void) |
| 118 | { |
Al Viro | 8fc3dc5 | 2012-03-17 03:05:16 -0400 | [diff] [blame] | 119 | register_binfmt(&script_format); |
| 120 | return 0; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 121 | } |
| 122 | |
| 123 | static void __exit exit_script_binfmt(void) |
| 124 | { |
| 125 | unregister_binfmt(&script_format); |
| 126 | } |
| 127 | |
| 128 | core_initcall(init_script_binfmt); |
| 129 | module_exit(exit_script_binfmt); |
| 130 | MODULE_LICENSE("GPL"); |