blob: a0838ab929f2276de8ed08e2e0430f4e3e7943f8 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * misc.c
Ian Campbell818a08f2008-01-30 13:33:38 +01003 *
Kees Cookc0402882016-04-18 09:42:13 -07004 * This is a collection of several routines used to extract the kernel
5 * which includes KASLR relocation, decompression, ELF parsing, and
6 * relocation processing. Additionally included are the screen and serial
7 * output functions and related debugging support functions.
Linus Torvalds1da177e2005-04-16 15:20:36 -07008 *
9 * malloc by Hannu Savolainen 1993 and Matthias Urlichs 1994
10 * puts by Nick Holloway 1993, better puts by Martin Mares 1995
11 * High loaded stuff by Hans Lermen & Werner Almesberger, Feb. 1996
12 */
13
Yinghai Lu8fee13a42010-08-02 16:21:22 -070014#include "misc.h"
Kees Cookdc425a62016-05-02 15:51:00 -070015#include "error.h"
Vivek Goyal820e8fe2014-03-18 15:26:38 -040016#include "../string.h"
Yinghai Lu67b66622016-04-28 17:09:06 -070017#include "../voffset.h"
Eric W. Biederman968de4f2006-12-07 02:14:04 +010018
Baoquan He4252db12016-04-20 13:55:42 -070019/*
20 * WARNING!!
21 * This code is compiled with -fPIC and it is relocated dynamically at
22 * run time, but no relocation processing is performed. This means that
23 * it is not safe to place pointers in static structures.
Eric W. Biederman968de4f2006-12-07 02:14:04 +010024 */
25
Kees Cook1f208de2016-04-20 13:55:44 -070026/* Macros used by the included decompressor code below. */
Ingo Molnar1180e012008-02-21 05:03:48 +010027#define STATIC static
Linus Torvalds1da177e2005-04-16 15:20:36 -070028
Vivek Goyal04999552014-03-18 15:26:40 -040029/*
Kees Cook1f208de2016-04-20 13:55:44 -070030 * Use normal definitions of mem*() from string.c. There are already
Vivek Goyal04999552014-03-18 15:26:40 -040031 * included header files which expect a definition of memset() and by
32 * the time we define memset macro, it is too late.
33 */
Kees Cook1f208de2016-04-20 13:55:44 -070034#undef memcpy
Vivek Goyal04999552014-03-18 15:26:40 -040035#undef memset
Ingo Molnar1180e012008-02-21 05:03:48 +010036#define memzero(s, n) memset((s), 0, (n))
Kees Cook81b785f2016-04-26 14:46:06 -070037#define memmove memmove
Linus Torvalds1da177e2005-04-16 15:20:36 -070038
Kees Cook1f208de2016-04-20 13:55:44 -070039/* Functions used by the included decompressor code below. */
Kees Cook81b785f2016-04-26 14:46:06 -070040void *memmove(void *dest, const void *src, size_t n);
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +010041
Linus Torvalds1da177e2005-04-16 15:20:36 -070042/*
43 * This is set up by the setup-routine at boot-time
44 */
Kees Cook6655e0a2016-04-18 09:42:12 -070045struct boot_params *boot_params;
Linus Torvalds1da177e2005-04-16 15:20:36 -070046
Kees Cook82fa9632013-10-10 17:18:16 -070047memptr free_mem_ptr;
48memptr free_mem_end_ptr;
Ian Campbell778cb922008-01-30 13:33:38 +010049
Alexander van Heukelum03056c82008-04-06 14:47:00 +020050static char *vidmem;
Linus Torvalds1da177e2005-04-16 15:20:36 -070051static int vidport;
52static int lines, cols;
53
Alain Knaffae03c492009-01-04 22:46:17 +010054#ifdef CONFIG_KERNEL_GZIP
55#include "../../../../lib/decompress_inflate.c"
56#endif
57
58#ifdef CONFIG_KERNEL_BZIP2
59#include "../../../../lib/decompress_bunzip2.c"
60#endif
61
62#ifdef CONFIG_KERNEL_LZMA
63#include "../../../../lib/decompress_unlzma.c"
64#endif
Linus Torvalds1da177e2005-04-16 15:20:36 -070065
Lasse Collin30314802011-01-12 17:01:24 -080066#ifdef CONFIG_KERNEL_XZ
67#include "../../../../lib/decompress_unxz.c"
68#endif
69
Albin Tonnerre13510992010-01-08 14:42:45 -080070#ifdef CONFIG_KERNEL_LZO
71#include "../../../../lib/decompress_unlzo.c"
72#endif
73
Kyungsik Leef9b493a2013-07-08 16:01:48 -070074#ifdef CONFIG_KERNEL_LZ4
75#include "../../../../lib/decompress_unlz4.c"
76#endif
Baoquan He4252db12016-04-20 13:55:42 -070077/*
78 * NOTE: When adding a new decompressor, please update the analysis in
79 * ../header.S.
80 */
Kyungsik Leef9b493a2013-07-08 16:01:48 -070081
Linus Torvalds1da177e2005-04-16 15:20:36 -070082static void scroll(void)
83{
84 int i;
85
Kees Cook81b785f2016-04-26 14:46:06 -070086 memmove(vidmem, vidmem + cols * 2, (lines - 1) * cols * 2);
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +010087 for (i = (lines - 1) * cols * 2; i < lines * cols * 2; i += 2)
Linus Torvalds1da177e2005-04-16 15:20:36 -070088 vidmem[i] = ' ';
89}
90
Yinghai Lu8fee13a42010-08-02 16:21:22 -070091#define XMTRDY 0x20
92
93#define TXR 0 /* Transmit register (WRITE) */
94#define LSR 5 /* Line Status */
95static void serial_putchar(int ch)
96{
97 unsigned timeout = 0xffff;
98
99 while ((inb(early_serial_base + LSR) & XMTRDY) == 0 && --timeout)
100 cpu_relax();
101
102 outb(ch, early_serial_base + TXR);
103}
104
Joe Millenbach7aac3012012-07-19 18:04:39 -0700105void __putstr(const char *s)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700106{
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100107 int x, y, pos;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700108 char c;
109
Yinghai Lu8fee13a42010-08-02 16:21:22 -0700110 if (early_serial_base) {
111 const char *str = s;
112 while (*str) {
113 if (*str == '\n')
114 serial_putchar('\r');
115 serial_putchar(*str++);
116 }
117 }
Ben Collins6bcb13b2008-06-18 14:04:35 -0400118
Kees Cook6655e0a2016-04-18 09:42:12 -0700119 if (boot_params->screen_info.orig_video_mode == 0 &&
Kristian Høgsberg23968f72008-05-29 18:31:14 -0400120 lines == 0 && cols == 0)
Rusty Russella24e7852007-10-21 16:41:35 -0700121 return;
122
Kees Cook6655e0a2016-04-18 09:42:12 -0700123 x = boot_params->screen_info.orig_x;
124 y = boot_params->screen_info.orig_y;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700125
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100126 while ((c = *s++) != '\0') {
127 if (c == '\n') {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700128 x = 0;
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100129 if (++y >= lines) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700130 scroll();
131 y--;
132 }
133 } else {
Paolo Ciarrocchi020878a2008-08-02 21:23:36 +0200134 vidmem[(x + cols * y) * 2] = c;
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100135 if (++x >= cols) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700136 x = 0;
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100137 if (++y >= lines) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700138 scroll();
139 y--;
140 }
141 }
142 }
143 }
144
Kees Cook6655e0a2016-04-18 09:42:12 -0700145 boot_params->screen_info.orig_x = x;
146 boot_params->screen_info.orig_y = y;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700147
148 pos = (x + cols * y) * 2; /* Update cursor position */
Rene Hermanb02aae92008-01-30 13:30:05 +0100149 outb(14, vidport);
150 outb(0xff & (pos >> 9), vidport+1);
151 outb(15, vidport);
152 outb(0xff & (pos >> 1), vidport+1);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700153}
154
Kees Cook79063a72015-07-06 16:06:20 -0700155void __puthex(unsigned long value)
156{
157 char alpha[2] = "0";
158 int bits;
159
160 for (bits = sizeof(value) * 8 - 4; bits >= 0; bits -= 4) {
161 unsigned long digit = (value >> bits) & 0xf;
162
163 if (digit < 0xA)
164 alpha[0] = '0' + digit;
165 else
166 alpha[0] = 'a' + (digit - 0xA);
167
168 __putstr(alpha);
169 }
170}
171
Kees Cooka0215062013-07-08 09:15:17 -0700172#if CONFIG_X86_NEED_RELOCS
Baoquan He8391c732016-05-25 15:45:32 -0700173static void handle_relocations(void *output, unsigned long output_len,
174 unsigned long virt_addr)
Kees Cooka0215062013-07-08 09:15:17 -0700175{
176 int *reloc;
177 unsigned long delta, map, ptr;
178 unsigned long min_addr = (unsigned long)output;
Yinghai Lu4abf0612016-04-28 17:09:08 -0700179 unsigned long max_addr = min_addr + (VO___bss_start - VO__text);
Kees Cooka0215062013-07-08 09:15:17 -0700180
181 /*
182 * Calculate the delta between where vmlinux was linked to load
183 * and where it was actually loaded.
184 */
185 delta = min_addr - LOAD_PHYSICAL_ADDR;
Kees Cooka0215062013-07-08 09:15:17 -0700186
187 /*
188 * The kernel contains a table of relocation addresses. Those
189 * addresses have the final load address of the kernel in virtual
190 * memory. We are currently working in the self map. So we need to
191 * create an adjustment for kernel memory addresses to the self map.
192 * This will involve subtracting out the base address of the kernel.
193 */
194 map = delta - __START_KERNEL_map;
195
196 /*
Baoquan He8391c732016-05-25 15:45:32 -0700197 * 32-bit always performs relocations. 64-bit relocations are only
198 * needed if KASLR has chosen a different starting address offset
199 * from __START_KERNEL_map.
200 */
201 if (IS_ENABLED(CONFIG_X86_64))
202 delta = virt_addr - LOAD_PHYSICAL_ADDR;
203
204 if (!delta) {
205 debug_putstr("No relocation needed... ");
206 return;
207 }
208 debug_putstr("Performing relocations... ");
209
210 /*
Kees Cooka0215062013-07-08 09:15:17 -0700211 * Process relocations: 32 bit relocations first then 64 bit after.
Jan Beulich6d24c5f2014-11-04 08:50:18 +0000212 * Three sets of binary relocations are added to the end of the kernel
Kees Cooka0215062013-07-08 09:15:17 -0700213 * before compression. Each relocation table entry is the kernel
214 * address of the location which needs to be updated stored as a
215 * 32-bit value which is sign extended to 64 bits.
216 *
217 * Format is:
218 *
219 * kernel bits...
220 * 0 - zero terminator for 64 bit relocations
221 * 64 bit relocation repeated
Jan Beulich6d24c5f2014-11-04 08:50:18 +0000222 * 0 - zero terminator for inverse 32 bit relocations
223 * 32 bit inverse relocation repeated
Kees Cooka0215062013-07-08 09:15:17 -0700224 * 0 - zero terminator for 32 bit relocations
225 * 32 bit relocation repeated
226 *
227 * So we work backwards from the end of the decompressed image.
228 */
229 for (reloc = output + output_len - sizeof(*reloc); *reloc; reloc--) {
Baoquan He6f9af752016-04-28 17:09:03 -0700230 long extended = *reloc;
Kees Cooka0215062013-07-08 09:15:17 -0700231 extended += map;
232
233 ptr = (unsigned long)extended;
234 if (ptr < min_addr || ptr > max_addr)
235 error("32-bit relocation outside of kernel!\n");
236
237 *(uint32_t *)ptr += delta;
238 }
239#ifdef CONFIG_X86_64
Jan Beulich6d24c5f2014-11-04 08:50:18 +0000240 while (*--reloc) {
241 long extended = *reloc;
242 extended += map;
243
244 ptr = (unsigned long)extended;
245 if (ptr < min_addr || ptr > max_addr)
246 error("inverse 32-bit relocation outside of kernel!\n");
247
248 *(int32_t *)ptr -= delta;
249 }
Kees Cooka0215062013-07-08 09:15:17 -0700250 for (reloc--; *reloc; reloc--) {
251 long extended = *reloc;
252 extended += map;
253
254 ptr = (unsigned long)extended;
255 if (ptr < min_addr || ptr > max_addr)
256 error("64-bit relocation outside of kernel!\n");
257
258 *(uint64_t *)ptr += delta;
259 }
260#endif
261}
262#else
Baoquan He8391c732016-05-25 15:45:32 -0700263static inline void handle_relocations(void *output, unsigned long output_len,
264 unsigned long virt_addr)
Kees Cooka0215062013-07-08 09:15:17 -0700265{ }
266#endif
267
Ian Campbell099e1372008-02-13 20:54:58 +0000268static void parse_elf(void *output)
269{
270#ifdef CONFIG_X86_64
271 Elf64_Ehdr ehdr;
272 Elf64_Phdr *phdrs, *phdr;
273#else
274 Elf32_Ehdr ehdr;
275 Elf32_Phdr *phdrs, *phdr;
276#endif
277 void *dest;
278 int i;
279
280 memcpy(&ehdr, output, sizeof(ehdr));
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100281 if (ehdr.e_ident[EI_MAG0] != ELFMAG0 ||
Ian Campbell099e1372008-02-13 20:54:58 +0000282 ehdr.e_ident[EI_MAG1] != ELFMAG1 ||
283 ehdr.e_ident[EI_MAG2] != ELFMAG2 ||
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100284 ehdr.e_ident[EI_MAG3] != ELFMAG3) {
Ian Campbell099e1372008-02-13 20:54:58 +0000285 error("Kernel is not a valid ELF file");
286 return;
287 }
288
Joe Millenbache605a422012-07-19 18:04:37 -0700289 debug_putstr("Parsing ELF... ");
Ian Campbell099e1372008-02-13 20:54:58 +0000290
291 phdrs = malloc(sizeof(*phdrs) * ehdr.e_phnum);
292 if (!phdrs)
293 error("Failed to allocate space for phdrs");
294
295 memcpy(phdrs, output + ehdr.e_phoff, sizeof(*phdrs) * ehdr.e_phnum);
296
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100297 for (i = 0; i < ehdr.e_phnum; i++) {
Ian Campbell099e1372008-02-13 20:54:58 +0000298 phdr = &phdrs[i];
299
300 switch (phdr->p_type) {
301 case PT_LOAD:
302#ifdef CONFIG_RELOCATABLE
303 dest = output;
304 dest += (phdr->p_paddr - LOAD_PHYSICAL_ADDR);
305#else
Paolo Ciarrocchifd77c7c2008-02-21 00:19:10 +0100306 dest = (void *)(phdr->p_paddr);
Ian Campbell099e1372008-02-13 20:54:58 +0000307#endif
Kees Cook81b785f2016-04-26 14:46:06 -0700308 memmove(dest, output + phdr->p_offset, phdr->p_filesz);
Ian Campbell099e1372008-02-13 20:54:58 +0000309 break;
310 default: /* Ignore other PT_* */ break;
311 }
312 }
Jesper Juhl5067cf52012-01-23 23:34:59 +0100313
314 free(phdrs);
Ian Campbell099e1372008-02-13 20:54:58 +0000315}
316
Yinghai Lu974f2212016-04-28 17:09:04 -0700317/*
318 * The compressed kernel image (ZO), has been moved so that its position
319 * is against the end of the buffer used to hold the uncompressed kernel
320 * image (VO) and the execution environment (.bss, .brk), which makes sure
321 * there is room to do the in-place decompression. (See header.S for the
322 * calculations.)
323 *
324 * |-----compressed kernel image------|
325 * V V
326 * 0 extract_offset +INIT_SIZE
327 * |-----------|---------------|-------------------------|--------|
328 * | | | |
329 * VO__text startup_32 of ZO VO__end ZO__end
330 * ^ ^
331 * |-------uncompressed kernel image---------|
332 *
333 */
Kees Cookc0402882016-04-18 09:42:13 -0700334asmlinkage __visible void *extract_kernel(void *rmode, memptr heap,
Ingo Molnar1180e012008-02-21 05:03:48 +0100335 unsigned char *input_data,
336 unsigned long input_len,
Kees Cooka0215062013-07-08 09:15:17 -0700337 unsigned char *output,
Yinghai Lu4d2d5422016-04-28 17:09:07 -0700338 unsigned long output_len)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700339{
Yinghai Lu4d2d5422016-04-28 17:09:07 -0700340 const unsigned long kernel_total_size = VO__end - VO__text;
Baoquan He8eabf422017-06-27 20:39:06 +0800341 unsigned long virt_addr = LOAD_PHYSICAL_ADDR;
Kees Cookf285f4a2015-01-15 16:51:46 -0800342
Kees Cook6655e0a2016-04-18 09:42:12 -0700343 /* Retain x86 boot parameters pointer passed from startup_32/64. */
344 boot_params = rmode;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700345
Kees Cook6655e0a2016-04-18 09:42:12 -0700346 /* Clear flags intended for solely in-kernel use. */
347 boot_params->hdr.loadflags &= ~KASLR_FLAG;
Borislav Petkov78cac482015-04-01 12:49:52 +0200348
Kees Cook6655e0a2016-04-18 09:42:12 -0700349 sanitize_boot_params(boot_params);
H. Peter Anvin5dcd14e2013-01-29 01:05:24 -0800350
Kees Cook6655e0a2016-04-18 09:42:12 -0700351 if (boot_params->screen_info.orig_video_mode == 7) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700352 vidmem = (char *) 0xb0000;
353 vidport = 0x3b4;
354 } else {
355 vidmem = (char *) 0xb8000;
356 vidport = 0x3d4;
357 }
358
Kees Cook6655e0a2016-04-18 09:42:12 -0700359 lines = boot_params->screen_info.orig_video_lines;
360 cols = boot_params->screen_info.orig_video_cols;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700361
Yinghai Lu8fee13a42010-08-02 16:21:22 -0700362 console_init();
Kees Cookc0402882016-04-18 09:42:13 -0700363 debug_putstr("early console in extract_kernel\n");
Yinghai Lu8fee13a42010-08-02 16:21:22 -0700364
Ian Campbell4c83d652008-01-30 13:33:38 +0100365 free_mem_ptr = heap; /* Heap */
Alexander van Heukelum7c539762008-04-08 12:54:30 +0200366 free_mem_end_ptr = heap + BOOT_HEAP_SIZE;
Eric W. Biederman968de4f2006-12-07 02:14:04 +0100367
Kees Cook79063a72015-07-06 16:06:20 -0700368 /* Report initial kernel position details. */
369 debug_putaddr(input_data);
370 debug_putaddr(input_len);
371 debug_putaddr(output);
372 debug_putaddr(output_len);
Yinghai Lu4d2d5422016-04-28 17:09:07 -0700373 debug_putaddr(kernel_total_size);
Kees Cook79063a72015-07-06 16:06:20 -0700374
Junjie Maoe6023362014-10-31 21:40:38 +0800375 /*
376 * The memory hole needed for the kernel is the larger of either
377 * the entire decompressed kernel plus relocation table, or the
378 * entire decompressed kernel plus .bss and .brk sections.
379 */
Baoquan He8391c732016-05-25 15:45:32 -0700380 choose_random_location((unsigned long)input_data, input_len,
381 (unsigned long *)&output,
382 max(output_len, kernel_total_size),
383 &virt_addr);
Kees Cook8ab38202013-10-10 17:18:14 -0700384
385 /* Validate memory location choices. */
H. Peter Anvin7ed42a22009-05-12 11:33:08 -0700386 if ((unsigned long)output & (MIN_KERNEL_ALIGN - 1))
Baoquan He8391c732016-05-25 15:45:32 -0700387 error("Destination physical address inappropriately aligned");
388 if (virt_addr & (MIN_KERNEL_ALIGN - 1))
389 error("Destination virtual address inappropriately aligned");
Ian Campbell778cb922008-01-30 13:33:38 +0100390#ifdef CONFIG_X86_64
H. Peter Anvin7ed42a22009-05-12 11:33:08 -0700391 if (heap > 0x3fffffffffffUL)
Ian Campbell778cb922008-01-30 13:33:38 +0100392 error("Destination address too large");
Baoquan Heb892cb82017-06-27 20:39:05 +0800393 if (virt_addr + max(output_len, kernel_total_size) > KERNEL_IMAGE_SIZE)
394 error("Destination virtual address is beyond the kernel mapping area");
Ian Campbell778cb922008-01-30 13:33:38 +0100395#else
H. Peter Anvin147dd562010-12-16 19:11:09 -0800396 if (heap > ((-__PAGE_OFFSET-(128<<20)-1) & 0x7fffffff))
Eric W. Biederman968de4f2006-12-07 02:14:04 +0100397 error("Destination address too large");
Eric W. Biederman968de4f2006-12-07 02:14:04 +0100398#endif
H. Peter Anvin7ed42a22009-05-12 11:33:08 -0700399#ifndef CONFIG_RELOCATABLE
400 if ((unsigned long)output != LOAD_PHYSICAL_ADDR)
Baoquan He8391c732016-05-25 15:45:32 -0700401 error("Destination address does not match LOAD_PHYSICAL_ADDR");
Baoquan He8eabf422017-06-27 20:39:06 +0800402 if (virt_addr != LOAD_PHYSICAL_ADDR)
Baoquan He8391c732016-05-25 15:45:32 -0700403 error("Destination virtual address changed when not relocatable");
Ian Campbell778cb922008-01-30 13:33:38 +0100404#endif
Linus Torvalds1da177e2005-04-16 15:20:36 -0700405
Joe Millenbache605a422012-07-19 18:04:37 -0700406 debug_putstr("\nDecompressing Linux... ");
Yinghai Lu2d3862d2015-09-09 15:39:12 -0700407 __decompress(input_data, input_len, NULL, NULL, output, output_len,
408 NULL, error);
Ian Campbell099e1372008-02-13 20:54:58 +0000409 parse_elf(output);
Baoquan He8391c732016-05-25 15:45:32 -0700410 handle_relocations(output, output_len, virt_addr);
Joe Millenbache605a422012-07-19 18:04:37 -0700411 debug_putstr("done.\nBooting the kernel.\n");
Kees Cook8ab38202013-10-10 17:18:14 -0700412 return output;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700413}
Daniel Micay6974f0c2017-07-12 14:36:10 -0700414
415void fortify_panic(const char *name)
416{
417 error("detected buffer overflow");
418}